OTL logfile created on: 22/09/2014 13:56:53 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Spid3r\Desktop\Nowy folder 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17280) Locale: 0000080c | Country: Belgique | Language: FRB | Date Format: d/MM/yyyy 3,97 Gb Total Physical Memory | 2,22 Gb Available Physical Memory | 56,04% Memory free 7,93 Gb Paging File | 5,90 Gb Available in Paging File | 74,39% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 144,04 Gb Total Space | 42,17 Gb Free Space | 29,28% Space Free | Partition Type: NTFS Drive D: | 298,09 Gb Total Space | 17,54 Gb Free Space | 5,88% Space Free | Partition Type: NTFS Drive E: | 140,50 Gb Total Space | 4,28 Gb Free Space | 3,05% Space Free | Partition Type: NTFS Computer Name: SPID3R-C0MPUT3R | User Name: Spid3r | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2014/09/17 04:15:08 | 002,460,488 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe PRC - [2014/09/17 04:14:57 | 001,795,912 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe PRC - [2014/09/13 23:52:51 | 001,942,352 | ---- | M] (BitTorrent Inc.) -- C:\Users\Spid3r\AppData\Roaming\uTorrent\uTorrent.exe PRC - [2014/09/10 12:09:04 | 003,431,712 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Smart Defrag 3\SmartDefrag.exe PRC - [2014/08/22 13:56:00 | 002,281,248 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe PRC - [2014/08/20 13:27:26 | 000,788,256 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe PRC - [2014/08/18 17:36:14 | 000,893,216 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe PRC - [2014/05/21 12:22:08 | 002,135,232 | ---- | M] () -- C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe PRC - [2014/05/12 07:24:42 | 000,860,472 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe PRC - [2014/05/12 07:24:40 | 001,809,720 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe PRC - [2014/05/12 07:24:34 | 006,970,168 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe PRC - [2014/02/27 12:30:46 | 000,070,352 | ---- | M] (Comodo Security Solutions, Inc.) -- C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe PRC - [2014/02/27 10:28:36 | 002,327,248 | ---- | M] (Comodo Security Solutions, Inc.) -- C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe PRC - [2014/02/13 16:44:22 | 001,214,240 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\RealTimeProtector.exe PRC - [2013/11/15 14:17:42 | 000,525,480 | ---- | M] (AdTrustMedia) -- C:\Program Files (x86)\AdTrustMedia\PrivDog\1.8.0.15\trustedadssvc.exe PRC - [2013/05/18 19:51:19 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Spid3r\Desktop\Nowy folder\OTL.exe PRC - [2012/06/22 18:17:14 | 000,013,632 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe PRC - [2008/06/04 21:03:36 | 000,817,672 | ---- | M] (Dritek System Inc.) -- C:\PROGRA~2\LAUNCH~1\QTZGACER.EXE [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2014/07/27 11:41:48 | 008,892,576 | ---- | M] () -- C:\PROGRA~2\Microsoft Office\Office15\1033\GrooveIntlResource.dll MOD - [2014/06/04 15:17:12 | 000,892,288 | ---- | M] () -- C:\Program Files (x86)\IObit\Smart Defrag 3\webres.dll MOD - [2014/02/13 16:44:22 | 001,214,240 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\RealTimeProtector.exe MOD - [2013/01/15 18:48:26 | 000,348,992 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\madExcept_.bpl MOD - [2013/01/15 18:48:26 | 000,051,008 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\madDisAsm_.bpl MOD - [2013/01/15 18:48:24 | 000,183,616 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\madBasic_.bpl MOD - [2013/01/15 18:47:56 | 000,893,248 | ---- | M] () -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\webres.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2014/09/17 04:14:56 | 001,148,744 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe -- (GfExperienceService) SRV:[b]64bit:[/b] - [2014/09/17 04:14:52 | 019,439,944 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe -- (NvStreamSvc) SRV:[b]64bit:[/b] - [2014/08/19 00:03:37 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService) SRV:[b]64bit:[/b] - [2014/04/16 23:12:45 | 006,817,544 | ---- | M] (COMODO) [Auto | Running] -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (CmdAgent) SRV:[b]64bit:[/b] - [2014/03/25 21:22:18 | 002,264,280 | ---- | M] (COMODO) [On_Demand | Stopped] -- C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe -- (cmdvirth) SRV:[b]64bit:[/b] - [2013/06/13 21:31:10 | 000,357,144 | ---- | M] (Logitech, Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.exe -- (LBTServ) SRV:[b]64bit:[/b] - [2013/05/27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2010/11/30 14:27:58 | 000,336,824 | ---- | M] (arvato digital services llc) [Disabled | Stopped] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2_x64) SRV:[b]64bit:[/b] - [2009/12/16 17:44:44 | 003,750,400 | ---- | M] (SafeNet Inc.) [Disabled | Stopped] -- C:\Windows\SysNative\hasplms.exe -- (hasplms) SRV:[b]64bit:[/b] - [2009/07/14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2014/09/17 19:56:46 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2014/09/17 04:14:57 | 001,795,912 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService) SRV - [2014/08/19 16:09:48 | 002,282,272 | ---- | M] (IObit) [Auto | Stopped] -- C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe -- (LiveUpdateSvc) SRV - [2014/08/18 17:36:14 | 000,893,216 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe -- (AdvancedSystemCareService7) SRV - [2014/05/21 12:22:08 | 002,135,232 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe -- (DragonUpdater) SRV - [2014/05/12 07:24:42 | 000,860,472 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2014/05/12 07:24:40 | 001,809,720 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler) SRV - [2014/03/21 00:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2014/02/27 12:30:46 | 000,070,352 | ---- | M] (Comodo Security Solutions, Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe -- (CLPSLauncher) SRV - [2014/02/27 10:28:36 | 002,327,248 | ---- | M] (Comodo Security Solutions, Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe -- (GeekBuddyRSP) SRV - [2013/12/21 08:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2013/10/23 08:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [Disabled | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2013/09/11 21:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2012/07/27 18:16:32 | 002,415,760 | ---- | M] (Acer Incorporated) [Disabled | Stopped] -- C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe -- (CCDMonitorService) SRV - [2012/06/22 18:17:14 | 000,013,632 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) SRV - [2012/01/07 00:58:09 | 000,419,624 | ---- | M] (Valve Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2011/09/09 18:10:28 | 000,086,072 | ---- | M] (Hewlett-Packard Company) [Disabled | Stopped] -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe -- (HP Support Assistant Service) SRV - [2011/07/27 21:58:30 | 005,023,744 | ---- | M] (Moonware Studios) [Disabled | Stopped] -- C:\Program Files (x86)\webcamXP 5\wService.exe -- (wxpSvc) SRV - [2011/03/28 18:07:50 | 000,094,264 | ---- | M] (Hewlett-Packard Company) [Disabled | Stopped] -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe -- (HPDrvMntSvc.exe) SRV - [2010/11/20 05:19:22 | 000,397,824 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (WAS) SRV - [2010/11/20 05:18:04 | 000,061,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\apphostsvc.dll -- (AppHostSvc) SRV - [2010/03/10 15:26:48 | 000,189,728 | ---- | M] (Protexis Inc.) [Disabled | Stopped] -- c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2) SRV - [2009/04/30 03:21:18 | 000,436,736 | ---- | M] (Conexant Systems, Inc.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\XAudio64.dll -- (HsfXAudioService) SRV - [2007/05/31 18:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2007/05/31 18:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2014/09/22 13:44:45 | 000,122,584 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy) DRV:[b]64bit:[/b] - [2014/09/18 13:08:47 | 008,623,856 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64) DRV:[b]64bit:[/b] - [2014/09/17 20:24:43 | 000,033,008 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Smb_driver_Intel.sys -- (SmbDrvI) DRV:[b]64bit:[/b] - [2014/09/17 20:03:59 | 000,271,064 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR) DRV:[b]64bit:[/b] - [2014/09/17 04:14:52 | 000,019,272 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys -- (NvStreamKms) DRV:[b]64bit:[/b] - [2014/09/04 21:14:38 | 000,038,048 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible) DRV:[b]64bit:[/b] - [2014/08/11 22:31:46 | 000,197,408 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA) DRV:[b]64bit:[/b] - [2014/08/06 10:50:04 | 000,123,672 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64) DRV:[b]64bit:[/b] - [2014/06/30 12:43:02 | 000,152,344 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgdiska.sys -- (Avgdiska) DRV:[b]64bit:[/b] - [2014/06/26 07:33:56 | 000,014,888 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\hmd.sys -- (HMD) DRV:[b]64bit:[/b] - [2014/06/26 07:33:42 | 000,037,976 | ---- | M] (Windows (R) Win 7 DDK provider) [File_System | System | Running] -- C:\Windows\SysNative\drivers\CFRMD.sys -- (CFRMD) DRV:[b]64bit:[/b] - [2014/06/17 16:21:34 | 000,235,800 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64) DRV:[b]64bit:[/b] - [2014/06/17 16:07:12 | 000,328,984 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgloga.sys -- (Avgloga) DRV:[b]64bit:[/b] - [2014/06/04 15:17:14 | 000,021,184 | ---- | M] (IObit) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\SmartDefragDriver.sys -- (SmartDefragDriver) DRV:[b]64bit:[/b] - [2014/05/12 07:26:10 | 000,063,704 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl) DRV:[b]64bit:[/b] - [2014/05/12 07:25:56 | 000,025,816 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector) DRV:[b]64bit:[/b] - [2014/04/16 23:12:55 | 000,023,168 | ---- | M] (COMODO) [File_System | System | Running] -- C:\Windows\SysNative\drivers\cmderd.sys -- (cmderd) DRV:[b]64bit:[/b] - [2013/08/29 03:29:52 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser) DRV:[b]64bit:[/b] - [2013/05/23 08:12:52 | 000,059,160 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt) DRV:[b]64bit:[/b] - [2013/05/23 08:12:50 | 000,076,568 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt) DRV:[b]64bit:[/b] - [2013/05/23 08:12:48 | 000,077,592 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LEqdUsb.sys -- (LEqdUsb) DRV:[b]64bit:[/b] - [2013/05/23 08:12:48 | 000,013,080 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidEqd.sys -- (LHidEqd) DRV:[b]64bit:[/b] - [2013/03/07 13:37:54 | 000,019,032 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\pwdrvio.sys -- (pwdrvio) DRV:[b]64bit:[/b] - [2013/03/07 13:37:32 | 000,009,584 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\pwdspio.sys -- (pwdspio) DRV:[b]64bit:[/b] - [2013/02/12 06:12:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx) DRV:[b]64bit:[/b] - [2012/12/13 13:50:36 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64) DRV:[b]64bit:[/b] - [2012/11/09 16:33:30 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc) DRV:[b]64bit:[/b] - [2012/11/09 16:33:30 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd) DRV:[b]64bit:[/b] - [2012/11/09 16:33:30 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt) DRV:[b]64bit:[/b] - [2012/11/09 16:33:30 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev) DRV:[b]64bit:[/b] - [2012/08/21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV:[b]64bit:[/b] - [2012/06/12 21:40:30 | 000,568,640 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2012/03/01 17:39:42 | 000,425,232 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:[b]64bit:[/b] - [2012/03/01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2011/10/13 12:50:02 | 000,500,736 | ---- | M] (QUALCOMM Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\qcusbnet.sys -- (qcusbnet) DRV:[b]64bit:[/b] - [2011/08/04 17:14:30 | 000,572,336 | ---- | M] (Paragon) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\Uim_IMx64.sys -- (Uim_IM) DRV:[b]64bit:[/b] - [2011/08/04 17:14:30 | 000,352,816 | ---- | M] (Paragon) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\uim_vimx64.sys -- (Uim_VIM) DRV:[b]64bit:[/b] - [2011/08/04 17:14:30 | 000,059,184 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\uimx64.sys -- (UimBus) DRV:[b]64bit:[/b] - [2011/07/27 19:13:06 | 001,631,808 | ---- | M] (Ralink Technology Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr28ux.sys -- (netr28ux) DRV:[b]64bit:[/b] - [2011/05/30 17:21:40 | 000,013,128 | ---- | M] (Authentec Inc.) [Kernel | Auto | Running] -- C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys -- (smihlp) DRV:[b]64bit:[/b] - [2011/03/11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011/03/11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2010/11/20 06:33:36 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010/11/20 04:07:06 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010/11/20 04:03:44 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2010/07/01 19:11:24 | 000,012,352 | ---- | M] () [Kernel | "Start" not found. | Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5) DRV:[b]64bit:[/b] - [2010/03/29 12:17:56 | 000,064,040 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1E62x64.sys -- (L1E) DRV:[b]64bit:[/b] - [2009/12/30 10:21:26 | 000,031,800 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\revoflt.sys -- (Revoflt) DRV:[b]64bit:[/b] - [2009/09/21 09:07:26 | 000,071,040 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aksdf.sys -- (aksdf) DRV:[b]64bit:[/b] - [2009/08/31 13:42:04 | 000,048,128 | ---- | M] (Nuvoton Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nuvotoncir.sys -- (nuvotoncir) DRV:[b]64bit:[/b] - [2009/08/21 18:41:02 | 000,031,744 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\androidusb.sys -- (androidusb) DRV:[b]64bit:[/b] - [2009/08/20 08:02:06 | 000,130,816 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\aksfridge.sys -- (aksfridge) DRV:[b]64bit:[/b] - [2009/08/14 18:09:42 | 000,120,960 | ---- | M] (QUALCOMM Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\qcusbser.sys -- (qcusbser) DRV:[b]64bit:[/b] - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009/07/14 02:09:02 | 000,120,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\irda.sys -- (irda) DRV:[b]64bit:[/b] - [2009/07/09 04:00:00 | 000,055,280 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64) DRV:[b]64bit:[/b] - [2009/06/10 23:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92) DRV:[b]64bit:[/b] - [2009/06/10 23:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac) DRV:[b]64bit:[/b] - [2009/06/10 23:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA) DRV:[b]64bit:[/b] - [2009/06/10 22:35:38 | 000,707,072 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr7364.sys -- (netr7364) DRV:[b]64bit:[/b] - [2009/06/10 22:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64) DRV:[b]64bit:[/b] - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009/04/30 03:21:08 | 000,010,240 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\XAudio64.sys -- (XAudio) DRV:[b]64bit:[/b] - [2009/03/13 11:55:38 | 000,318,464 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\hardlock.sys -- (hardlock) DRV:[b]64bit:[/b] - [2009/02/13 14:24:56 | 001,485,824 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CAX_DPV.sys -- (HSF_DPV) DRV:[b]64bit:[/b] - [2009/02/13 14:20:56 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CAXHWAZL.sys -- (CAXHWAZL) DRV:[b]64bit:[/b] - [2009/02/13 14:19:34 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CAX_CNXT.sys -- (winachsf) DRV:[b]64bit:[/b] - [2008/05/30 07:13:32 | 000,034,360 | ---- | M] (Canopus Co,. Ltd.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\cdrblock.sys -- (cdrblock) DRV:[b]64bit:[/b] - [2007/10/11 18:09:58 | 000,027,648 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MosIrUsb.sys -- (MosIrUsb) DRV:[b]64bit:[/b] - [2006/06/18 22:27:24 | 000,017,024 | ---- | M] (Conexant) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mdmxsdk.sys -- (mdmxsdk) DRV:[b]64bit:[/b] - [2005/09/23 23:18:34 | 000,261,120 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MarvinBus64.sys -- (MarvinBus) DRV - [2014/09/19 14:26:16 | 000,033,512 | ---- | M] () [Kernel | On_Demand | Unknown] -- C:\Windows\SysWOW64\drivers\TrueSight.sys -- (TrueSight) DRV - [2009/07/14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) DRV - [2007/11/07 12:42:28 | 000,104,912 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys -- (ISODrive) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\URLSearchHook: - No CLSID value found IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm IE - HKLM\..\URLSearchHook: - No CLSID value found IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = www.google.pl IE - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://be.msn.com/defaultf.aspx IE - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr-BE IE - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 53 07 42 33 E0 D3 CF 01 [binary data] IE - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = www.google.com IE - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = www.google.pl IE - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\..\URLSearchHook: - No CLSID value found IE - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\..\SearchScopes\{9194d24d-1cdc-4847-ba77-d60d1209f3b2}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} IE - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "DuckDuckGo" FF - prefs.js..browser.search.suggest.enabled: false FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..extensions.enabledAddons: %7B73a6fe31-595d-460b-a920-fcc0f8843232%7D:2.6.8.41 FF - prefs.js..extensions.enabledAddons: %7B19503e42-ca3c-4c27-b1e2-9cdb2170ee34%7D:1.5.6.5 FF - prefs.js..extensions.enabledAddons: info%40convert2mp3.net:2.5 FF - prefs.js..extensions.enabledAddons: https-facebook%40niyaz.pk:0.4 FF - prefs.js..extensions.enabledAddons: google%40disconnect.me:2.4.2 FF - prefs.js..extensions.enabledAddons: facebook%40disconnect.me:2.1.3 FF - prefs.js..extensions.enabledAddons: YoutubeDownloader%40PeterOlayev.com:2.3.6 FF - prefs.js..extensions.enabledAddons: 2.0%40disconnect.me:3.14.0 FF - prefs.js..extensions.enabledAddons: %7Bea61041c-1e22-4400-99a0-aea461e69d04%7D:0.2.3 FF - prefs.js..extensions.enabledAddons: %7Bd40f5e7b-d2cf-4856-b441-cc613eeffbe3%7D:1.68 FF - prefs.js..extensions.enabledAddons: %7B4BBDD651-70CF-4821-84F8-2B918CF89CA3%7D:8.0.5 FF - prefs.js..extensions.enabledAddons: %7B06997db0-c027-4d5f-bd37-b0d9230226ea%7D:0.63 FF - prefs.js..extensions.enabledAddons: linkalert.conlan%40addons.mozilla.com:1.0.2 FF - prefs.js..extensions.enabledAddons: idme%40abine.com:1.40.349 FF - prefs.js..extensions.enabledAddons: donottrackplus%40abine.com:3.2.1127 FF - prefs.js..extensions.enabledAddons: client%40anonymox.net:2.4.6 FF - prefs.js..extensions.enabledAddons: clickclean%40hotcleaner.com:4.1 FF - prefs.js..extensions.enabledAddons: %7Bf36c6cd1-da73-491d-b290-8fc9115bfa55%7D:3.0.8 FF - prefs.js..extensions.enabledAddons: %7Ba0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7%7D:20131118 FF - prefs.js..extensions.enabledAddons: superstart%40enjoyfreeware.org:7.3 FF - prefs.js..extensions.enabledAddons: %7Ba95d8332-e4b4-6e7f-98ac-20b733364387%7D:0.6.6 FF - prefs.js..extensions.enabledAddons: %7BDDC359D1-844A-42a7-9AA1-88A850A938A8%7D:2.0.17 FF - prefs.js..extensions.enabledAddons: ascsurfingprotection%40iobit.com:1.0 FF - prefs.js..extensions.enabledAddons: savesession%40noasobi.net:1.3.1.6 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:35.0a1 FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.67.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.67.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@IObit.com/np_Asc_Plugin: C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\np_Asc_plugin.dll (IObit) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.6.14: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.6.14: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll File not found 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Nightly 35.0a1\extensions\\Components: C:\PROGRAM FILES\NIGHTLY\COMPONENTS 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Nightly 35.0a1\extensions\\Plugins: C:\PROGRAM FILES\NIGHTLY\PLUGINS FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0153E448-190B-4987-BDE1-F256CADA672F}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2013/02/16 15:44:45 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{F003DA68-8256-4b37-A6C4-350FA04494DF}: C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014/05/22 18:35:28 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{E4D03422-D07A-4609-89C3-705974F05472}: C:\Program Files (x86)\proxysurf.com\Firefox [2012/01/08 00:30:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\Extensions [2014/09/21 10:19:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\Firefox\Profiles\yt4pry3v.default-1410900132026\extensions [2014/09/17 14:51:24 | 000,000,000 | ---D | M] (Flashblock) -- C:\Users\Spid3r\AppData\Roaming\mozilla\Firefox\Profiles\yt4pry3v.default-1410900132026\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2014/09/17 13:33:13 | 000,000,000 | ---D | M] (FEBE) -- C:\Users\Spid3r\AppData\Roaming\mozilla\Firefox\Profiles\yt4pry3v.default-1410900132026\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2014/09/17 14:22:38 | 000,000,000 | ---D | M] (WOT) -- C:\Users\Spid3r\AppData\Roaming\mozilla\Firefox\Profiles\yt4pry3v.default-1410900132026\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014/09/18 00:07:34 | 000,000,000 | ---D | M] (Advanced SystemCare Surfing Protection) -- C:\Users\Spid3r\AppData\Roaming\mozilla\Firefox\Profiles\yt4pry3v.default-1410900132026\extensions\ascsurfingprotection@iobit.com [2014/09/17 13:33:18 | 000,000,000 | ---D | M] (Click&Clean) -- C:\Users\Spid3r\AppData\Roaming\mozilla\Firefox\Profiles\yt4pry3v.default-1410900132026\extensions\clickclean@hotcleaner.com [2014/09/17 13:33:17 | 000,000,000 | ---D | M] (DoNotTrackMe: Online Privacy Protection) -- C:\Users\Spid3r\AppData\Roaming\mozilla\Firefox\Profiles\yt4pry3v.default-1410900132026\extensions\donottrackplus@abine.com [2014/09/17 13:33:15 | 000,000,000 | ---D | M] (MaskMe) -- C:\Users\Spid3r\AppData\Roaming\mozilla\Firefox\Profiles\yt4pry3v.default-1410900132026\extensions\idme@abine.com [2014/09/17 14:37:13 | 000,000,000 | ---D | M] (Super Start) -- C:\Users\Spid3r\AppData\Roaming\mozilla\Firefox\Profiles\yt4pry3v.default-1410900132026\extensions\superstart@enjoyfreeware.org [2014/09/17 11:50:47 | 000,000,000 | ---D | M] (YouTube Unblocker) -- C:\Users\Spid3r\AppData\Roaming\mozilla\Firefox\Profiles\yt4pry3v.default-1410900132026\extensions\youtubeunblocker@unblocker.yt [2014/09/17 12:15:45 | 000,947,620 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\2.0@disconnect.me.xpi [2014/09/17 13:33:17 | 000,392,243 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\client@anonymox.net.xpi [2014/09/17 14:45:42 | 000,126,171 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\elemhidehelper@adblockplus.org.xpi [2014/09/17 12:15:44 | 000,035,735 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\facebook@disconnect.me.xpi [2014/09/17 11:43:50 | 000,079,187 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\fbp@fbpurity.com.xpi [2014/09/17 11:52:34 | 000,201,149 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi [2014/09/17 11:38:53 | 001,225,715 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\firefox@ghostery.com.xpi [2014/09/17 12:15:44 | 000,039,030 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\google@disconnect.me.xpi [2014/09/17 12:15:44 | 000,005,831 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\https-facebook@niyaz.pk.xpi [2014/09/17 12:15:44 | 000,057,361 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\info@convert2mp3.net.xpi [2014/09/17 13:06:46 | 000,082,115 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\jid0-9XfBwUWnvPx4wWsfBWMCm4Jj69E@jetpack.xpi [2014/09/17 13:09:34 | 000,192,809 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\jid0-gG1gAeXAPAyqbiSvBGlwTBQMcRA@jetpack.xpi [2014/09/17 13:21:19 | 000,007,946 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\jid0-XWJxt5VvCXkKzQK99PhZqAn7Xbg@jetpack.xpi [2014/09/17 14:47:24 | 000,026,250 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\jid1-CGxMej0nDJTjwQ@jetpack.xpi [2014/09/17 13:11:54 | 000,113,646 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\jid1-KKzOGWgsW3Ao4Q@jetpack.xpi [2014/09/17 12:09:04 | 000,025,495 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\jid1-qj0w91o64N7Eeg@jetpack.xpi [2014/09/17 13:24:39 | 000,137,181 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi [2014/09/17 13:33:13 | 000,101,213 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\linkalert.conlan@addons.mozilla.com.xpi [2014/09/22 13:39:40 | 000,537,103 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\PrivDog@AdTrustMedia.com.xpi [2014/09/20 18:30:53 | 000,013,039 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\savesession@noasobi.net.xpi [2014/09/17 11:42:52 | 000,254,904 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\search@disconnect.me.xpi [2014/09/17 12:15:44 | 000,077,763 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\YoutubeDownloader@PeterOlayev.com.xpi [2014/09/17 13:33:13 | 000,012,293 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\{06997db0-c027-4d5f-bd37-b0d9230226ea}.xpi [2014/09/20 18:30:33 | 000,541,094 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi [2014/09/17 14:17:11 | 000,158,901 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\{15fe27f3-e5ab-2d59-4c5c-dadc7945bdbd}.xpi [2014/09/17 12:15:44 | 000,389,786 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2014/09/17 13:25:52 | 000,049,163 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\{6BB5760D-F97E-421B-AF5B-8457A90C3CED}.xpi [2014/09/17 12:15:44 | 000,540,395 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014/09/17 14:51:24 | 000,070,621 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\{a95d8332-e4b4-6e7f-98ac-20b733364387}.xpi [2014/09/17 12:12:14 | 000,135,503 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\{b9acf540-acba-11e1-8ccb-001fd0e08bd4}.xpi [2014/09/17 11:37:08 | 000,967,685 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014/09/17 13:33:12 | 000,138,614 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2014/09/17 14:51:24 | 000,731,942 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014/09/17 13:33:12 | 000,057,752 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\{ea61041c-1e22-4400-99a0-aea461e69d04}.xpi [2014/09/17 14:22:38 | 000,799,362 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\{f36c6cd1-da73-491d-b290-8fc9115bfa55}.xpi [2014/09/17 13:18:43 | 000,001,362 | ---- | M] () (No name found) -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3}\chrome\skin\xpinstallItemGeneric.png [2014/09/17 13:24:41 | 000,002,020 | ---- | M] () -- C:\Users\Spid3r\AppData\Roaming\mozilla\firefox\profiles\yt4pry3v.default-1410900132026\searchplugins\duckduckgo.xml File not found (No name found) -- C:\PROGRAM FILES (X86)\IOBIT APPS TOOLBAR\FF [2013/11/15 03:32:00 | 000,034,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll CHR - Extension: No name found = C:\Users\Spid3r\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: No name found = C:\Users\Spid3r\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\ CHR - Extension: No name found = C:\Users\Spid3r\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: No name found = C:\Users\Spid3r\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\ O1 HOSTS File: ([2014/09/19 10:51:14 | 000,000,768 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2:[b]64bit:[/b] - BHO: (ExplorerWnd Helper) - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit) O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2:[b]64bit:[/b] - BHO: (Logitech SetPoint) - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.) O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2:[b]64bit:[/b] - BHO: (PrivDog Extension) - {FB16E5C3-A9E2-47A2-8EFC-319E775E62CC} - C:\Program Files\AdTrustMedia\PrivDog\1.8.0.15\trustedads.dll (AdTrustMedia) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (Advanced SystemCare Browser Protection) - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit) O2 - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (PrivDog Extension) - {FB16E5C3-A9E2-47A2-8EFC-319E775E62CC} - C:\Program Files (x86)\AdTrustMedia\PrivDog\1.8.0.15\trustedads.dll (AdTrustMedia) O4:[b]64bit:[/b] - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cistray.exe (COMODO) O4:[b]64bit:[/b] - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [ShadowPlay] C:\Windows\SysNative\nvspcap64.dll (NVIDIA Corporation) O4 - HKLM..\Run: [PrivDogService] C:\Program Files (x86)\AdTrustMedia\PrivDog\1.8.0.15\trustedadssvc.exe (AdTrustMedia) O4 - HKLM..\Run: [tvncontrol] C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe (Comodo Security Solutions, Inc.) O4 - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000..\Run: [Advanced SystemCare 7] C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe (IObit) O4 - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000..\Run: [uTorrent] C:\Users\Spid3r\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: verbosestatus = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\SearchScopes present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\SearchScopes present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\SearchScopes present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\SearchScopes present O7 - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\Software\Policies\Microsoft\Internet Explorer\SearchScopes present O7 - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 1 O7 - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0 O7 - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogoff = 0 O7 - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayContextMenu = 0 O7 - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0 O7 - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0 O7 - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0 O7 - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoScrSavPage = 0 O7 - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispApprearancePage = 0 O7 - HKU\S-1-5-21-2622835651-1712134509-2677869765-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispCpl = 0 O8:[b]64bit:[/b] - Extra context menu item: &P&obierz &za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8:[b]64bit:[/b] - Extra context menu item: Pobierz wszystko za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: &P&obierz &za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O9:[b]64bit:[/b] - Extra Button: PrivDog - {2F5C139F-79BD-4C84-A95A-E7140525BC55} - C:\Program Files\AdTrustMedia\PrivDog\1.8.0.15\trustedads.dll (AdTrustMedia) O9 - Extra Button: PrivDog - {2F5C139F-79BD-4C84-A95A-E7140525BC55} - C:\Program Files (x86)\AdTrustMedia\PrivDog\1.8.0.15\trustedads.dll (AdTrustMedia) O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O16:[b]64bit:[/b] - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_65-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0017-0000-0065-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_65-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_65-windows-i586.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.76.224.172 89.2.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{08BC1738-7EFC-4C1B-92E5-695128BA97AC}: NameServer = 156.154.70.25,156.154.71.25 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1427378F-01E4-4954-85B7-81DA3A1AA628}: DhcpNameServer = 212.76.224.172 89.2.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1427378F-01E4-4954-85B7-81DA3A1AA628}: NameServer = 156.154.70.25,156.154.71.25 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{79DE335B-3642-436E-AA8E-91203D7A959E}: DhcpNameServer = 192.168.42.129 O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Handler\ms-help - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll (Skype Technologies) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (c:\windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Program Files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.) O20:[b]64bit:[/b] - Winlogon\Notify\psfus: DllName - (C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll) - C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (Authentec Inc.) O20 - Winlogon\Notify\AWinNotifyVitaKey MC3000: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2013/02/27 16:33:05 | 000,000,000 | ---D | M] - C:\auto_unlock -- [ NTFS ] O32 - AutoRun File - [2010/11/04 17:43:29 | 000,000,000 | RHSD | M] - D:\Autorun.inf -- [ NTFS ] O32 - AutoRun File - [2009/12/06 18:47:43 | 000,000,000 | ---D | M] - E:\AutoMapa -- [ NTFS ] O32 - AutoRun File - [2010/11/04 17:43:29 | 000,000,000 | RHSD | M] - E:\Autorun.inf -- [ NTFS ] O33 - MountPoints2\{260becd3-3978-11e1-aecf-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{260becd3-3978-11e1-aecf-806e6f6e6963}\Shell\AutoRun\command - "" = F:\EPSETUP.EXE O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2014/09/22 13:40:03 | 000,000,000 | -H-D | C] -- C:\VTRoot [2014/09/22 13:11:59 | 000,000,000 | --SD | C] -- C:\ProgramData\Shared Space [2014/09/22 13:11:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AdTrustMedia [2014/09/22 13:11:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Adtrustmedia [2014/09/22 13:10:47 | 000,000,000 | ---D | C] -- C:\Program Files\COMODO [2014/09/22 13:10:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\COMODO [2014/09/22 13:10:29 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Local\Comodo [2014/09/22 13:10:26 | 000,048,392 | ---- | C] (COMODO CA Limited) -- C:\Windows\SysWow64\certsentry.dll [2014/09/22 13:10:25 | 000,057,096 | ---- | C] (COMODO CA Limited) -- C:\Windows\SysNative\certsentry.dll [2014/09/22 13:10:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Comodo Downloader [2014/09/22 12:55:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner [2014/09/22 12:47:58 | 005,170,904 | ---- | C] (COMODO) -- C:\ProgramData\cisEA.exe [2014/09/21 12:25:13 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner [2014/09/21 12:25:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Eusing Free Registry Cleaner [2014/09/21 10:58:04 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Roaming\Comodo [2014/09/21 10:19:23 | 000,000,000 | ---D | C] -- C:\Program Files\AdTrustMedia [2014/09/21 10:14:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo [2014/09/21 10:14:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Comodo [2014/09/21 10:07:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Comodo [2014/09/20 02:45:32 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET [2014/09/19 22:59:23 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Roaming\Greenshot [2014/09/19 22:59:23 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Local\Greenshot [2014/09/19 22:59:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Greenshot [2014/09/19 22:59:10 | 000,000,000 | ---D | C] -- C:\Program Files\Greenshot [2014/09/19 22:39:33 | 001,715,224 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvspbridge64.dll [2014/09/19 22:39:32 | 002,799,784 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvspcap64.dll [2014/09/19 22:39:30 | 001,291,280 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvspbridge.dll [2014/09/19 22:39:29 | 002,193,560 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvspcap.dll [2014/09/19 22:38:37 | 000,038,048 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvvad64v.sys [2014/09/19 22:38:37 | 000,032,416 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvaudcap32v.dll [2014/09/19 12:01:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET [2014/09/19 12:01:34 | 002,347,384 | ---- | C] (ESET) -- C:\Users\Spid3r\Documents\esetsmartinstaller_enu.exe [2014/09/19 09:37:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes' Anti-Malware (portable) [2014/09/18 22:30:37 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Local\NVIDIA Corporation [2014/09/18 22:30:37 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Local\NVIDIA [2014/09/18 22:30:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation [2014/09/18 22:23:37 | 001,515,296 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdagenco6420103.dll [2014/09/18 22:23:37 | 000,034,976 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvaudcap64v.dll [2014/09/18 22:23:37 | 000,031,520 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdap64.dll [2014/09/18 22:23:36 | 000,197,408 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvhda64v.sys [2014/09/18 22:23:35 | 000,074,016 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapo64v.dll [2014/09/18 22:20:41 | 000,000,000 | ---D | C] -- C:\Windows\tasks\ImCleanDisabled [2014/09/18 22:15:31 | 000,000,000 | ---D | C] -- C:\NVIDIA [2014/09/18 21:40:36 | 000,000,000 | ---D | C] -- C:\Windows\tasks\TaskDisabled [2014/09/18 21:17:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2014/09/18 21:08:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 [2014/09/18 21:07:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER [2014/09/18 21:06:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft SQL Server [2014/09/18 21:06:19 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1991-06.com.microsoft [2014/09/18 21:05:36 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server [2014/09/18 21:02:38 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Analysis Services [2014/09/18 21:02:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Analysis Services [2014/09/18 21:02:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office [2014/09/18 21:02:20 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office [2014/09/18 21:01:05 | 000,000,000 | RH-D | C] -- C:\MSOCache [2014/09/18 13:08:47 | 008,623,856 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\NETwNs64.sys [2014/09/18 13:08:47 | 002,757,360 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\NETwNr64.dll [2014/09/18 13:08:47 | 000,806,128 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\NETwNc64.dll [2014/09/18 13:01:05 | 018,626,304 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll [2014/09/18 13:01:05 | 016,122,344 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll [2014/09/18 13:01:04 | 031,512,520 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll [2014/09/18 13:01:04 | 024,196,896 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll [2014/09/18 13:01:04 | 013,922,752 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll [2014/09/18 13:01:04 | 011,283,344 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll [2014/09/18 13:01:02 | 001,890,080 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6434052.dll [2014/09/18 13:01:02 | 001,539,928 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6434052.dll [2014/09/18 13:01:02 | 000,944,928 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFR64.dll [2014/09/18 13:01:02 | 000,907,096 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFR.dll [2014/09/18 13:01:02 | 000,903,624 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvFBC64.dll [2014/09/18 13:01:02 | 000,869,152 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvFBC.dll [2014/09/18 13:01:01 | 017,555,104 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll [2014/09/18 13:01:01 | 015,294,296 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll [2014/09/18 13:01:01 | 014,498,552 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll [2014/09/18 13:01:01 | 013,835,208 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll [2014/09/18 13:01:01 | 011,222,048 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll [2014/09/18 13:01:01 | 004,247,000 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll [2014/09/18 13:01:01 | 003,989,960 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll [2014/09/18 13:01:00 | 022,994,208 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll [2014/09/18 13:01:00 | 002,814,656 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll [2014/09/18 12:19:59 | 002,162,992 | ---- | C] (Yamaha Corporation) -- C:\Windows\SysNative\YamahaAE.dll [2014/09/18 12:19:55 | 002,101,848 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib64.dll [2014/09/18 12:19:54 | 000,871,856 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\tossaeapo64.dll [2014/09/18 12:19:54 | 000,582,056 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\tosasfapo64.dll [2014/09/18 12:19:54 | 000,162,224 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\toseaeapo64.dll [2014/09/18 12:19:51 | 000,724,728 | ---- | C] (DTS, Inc.) -- C:\Windows\SysNative\sltech64.dll [2014/09/18 12:19:51 | 000,246,008 | ---- | C] (TODO: ) -- C:\Windows\SysNative\slprp64.dll [2014/09/18 12:19:49 | 001,048,824 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\slcnt64.dll [2014/09/18 12:19:49 | 000,947,760 | ---- | C] (Sony Corporation) -- C:\Windows\SysNative\SFSS_APO.dll [2014/09/18 12:19:49 | 000,889,592 | ---- | C] (DTS, Inc.) -- C:\Windows\SysNative\sl3apo64.dll [2014/09/18 12:19:48 | 001,959,128 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl [2014/09/18 12:19:47 | 002,834,648 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll [2014/09/18 12:19:43 | 001,022,168 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll [2014/09/18 12:19:41 | 001,286,872 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll [2014/09/18 12:19:41 | 000,628,952 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtDataProc64.dll [2014/09/18 12:19:30 | 002,800,344 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RltkAPO64.dll [2014/09/18 12:19:29 | 060,636,160 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoRes64.dat [2014/09/18 12:19:29 | 000,948,952 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInstII64.dll [2014/09/18 12:19:21 | 000,942,384 | ---- | C] (Nahimic Inc) -- C:\Windows\SysNative\NAHIMICAPOSettingsIPC.dll [2014/09/18 12:19:20 | 005,751,048 | ---- | C] (Nahimic Inc) -- C:\Windows\SysNative\NAHIMICAPOlfx.dll [2014/09/18 12:19:20 | 000,906,800 | ---- | C] (Sony Corporation) -- C:\Windows\SysNative\MISS_APO.dll [2014/09/18 12:19:19 | 000,662,784 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVolumeSDAPO.dll [2014/09/18 12:19:17 | 012,894,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVoiceAPO3064.dll [2014/09/18 12:19:15 | 001,313,904 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxSpeechAPO64.dll [2014/09/18 12:19:15 | 000,956,504 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVoiceAPO2064.dll [2014/09/18 12:19:12 | 003,959,384 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioVnN64.dll [2014/09/18 12:19:08 | 028,343,384 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioVnA64.dll [2014/09/18 12:18:55 | 014,863,448 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek64.dll [2014/09/18 12:18:55 | 001,934,424 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek264.dll [2014/09/18 12:18:53 | 002,041,432 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ64.dll [2014/09/18 12:18:51 | 001,317,976 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO6064.dll [2014/09/18 12:18:51 | 001,168,472 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO5064.dll [2014/09/18 12:18:51 | 001,063,512 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPOShell64.dll [2014/09/18 12:18:51 | 000,900,696 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysWow64\MaxxAudioAPOShell.dll [2014/09/18 12:18:49 | 001,136,728 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO4064.dll [2014/09/18 12:18:49 | 000,663,296 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO30.dll [2014/09/18 12:18:47 | 000,291,488 | ---- | C] (ICEpower a/s) -- C:\Windows\SysNative\ICEsoundAPO64.dll [2014/09/18 12:18:45 | 006,218,072 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\DDPP64A.dll [2014/09/18 12:18:45 | 002,770,976 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll [2014/09/18 12:18:45 | 001,939,800 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\DDPD64A.dll [2014/09/18 12:18:45 | 000,501,184 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PLFX64.dll [2014/09/18 12:18:45 | 000,487,360 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PGFX64.dll [2014/09/18 12:18:45 | 000,415,680 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PREC64.dll [2014/09/18 12:18:45 | 000,315,736 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\DDPO64A.dll [2014/09/18 12:18:45 | 000,261,464 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\DDPA64.dll [2014/09/18 12:18:44 | 000,113,576 | ---- | C] (Real Sound Lab SIA) -- C:\Windows\SysNative\CONEQMSAPOGUILibrary.dll [2014/09/18 12:18:36 | 000,209,096 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll [2014/09/18 00:08:39 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Roaming\ProductData [2014/09/18 00:07:32 | 000,000,000 | ---D | C] -- C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D} [2014/09/18 00:07:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller [2014/09/18 00:06:34 | 000,000,000 | ---D | C] -- C:\ProgramData\{1BA5A872-FC5B-4433-93E9-DD0C3EAE9F66} [2014/09/18 00:06:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7 [2014/09/17 20:24:43 | 000,033,008 | ---- | C] (Synaptics Incorporated) -- C:\Windows\SysNative\drivers\Smb_driver_Intel.sys [2014/09/17 20:06:08 | 001,510,176 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdagenco64.dll [2014/09/17 20:03:59 | 000,271,064 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\drivers\RtsUStor.sys [2014/09/17 20:03:57 | 009,889,352 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysWow64\RsCRIcon.dll [2014/09/17 20:00:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies [2014/09/17 19:47:41 | 000,000,000 | ---D | C] -- C:\ProgramData\ProductData [2014/09/17 19:04:04 | 000,034,080 | ---- | C] (IObit) -- C:\Windows\SysNative\SmartDefragBootTime.exe [2014/09/17 19:00:41 | 000,000,000 | ---D | C] -- C:\ProgramData\IObit [2014/09/17 19:00:40 | 000,128,288 | ---- | C] (IObit) -- C:\Windows\SysNative\IObitSmartDefragExtension.dll [2014/09/17 19:00:28 | 000,021,184 | ---- | C] (IObit) -- C:\Windows\SysNative\drivers\SmartDefragDriver.sys [2014/09/17 19:00:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 3 [2014/09/17 19:00:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IObit [2014/09/17 18:59:59 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Roaming\IObit [2014/09/17 11:15:54 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\Desktop\czy [2014/09/17 11:06:13 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Defrag [2014/09/17 11:06:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Registry Defrag [2014/09/17 11:06:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Eusing Free Registry Defrag [2014/09/17 10:53:38 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fast Folder Access [2014/09/17 10:53:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fast Folder Access [2014/09/17 10:53:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Fast Folder Access [2014/09/17 10:48:22 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Eusing Utilities [2014/09/17 10:48:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eusing Utilities [2014/09/17 10:48:19 | 000,011,216 | ---- | C] (EDesksoft) -- C:\Windows\SysWow64\drivers\eusingtools.sys [2014/09/17 10:48:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Eusing Utilities [2014/09/17 10:45:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MRU-Blaster [2014/09/17 10:45:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MRU-Blaster [2014/09/17 10:28:19 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Eusing Cleaner [2014/09/17 10:28:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eusing Cleaner [2014/09/17 10:28:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Eusing Cleaner [2014/09/17 00:21:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Licenses [2014/09/17 00:20:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster [2014/09/17 00:20:41 | 000,129,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSSTDFMT.DLL [2014/09/17 00:20:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SpywareBlaster [2014/09/17 00:01:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueRemover FREE [2014/09/17 00:01:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RogueRemover FREE [2014/09/16 23:49:49 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Internet Window Washer [2014/09/16 23:49:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Internet Window Washer [2014/09/16 23:49:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Free Internet Window Washer [2014/09/16 23:38:04 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Roaming\Eusing [2014/09/16 22:42:18 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\Desktop\Old Firefox Data [2014/09/16 22:17:11 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT [2014/09/15 22:48:22 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Roaming\ExtremeCopy [2014/09/15 22:47:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ExtremeCopy [2014/09/15 22:47:36 | 000,000,000 | ---D | C] -- C:\Program Files\Easersoft [2014/09/15 21:36:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune Pro [2014/09/15 21:36:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HD Tune Pro [2014/09/15 20:41:01 | 000,319,912 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe [2014/09/15 20:40:48 | 000,189,352 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe [2014/09/15 20:40:48 | 000,189,352 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\java.exe [2014/09/15 20:40:48 | 000,111,016 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\WindowsAccessBridge-64.dll [2014/09/15 20:40:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java [2014/09/15 20:38:55 | 000,000,000 | ---D | C] -- C:\Program Files\Java [2014/09/14 20:54:40 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\Desktop\Tor Browser [2014/09/14 20:09:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft HiJackFree [2014/09/14 20:09:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Emsisoft HiJackFree [2014/09/14 19:53:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeerBlock [2014/09/14 19:53:48 | 000,000,000 | ---D | C] -- C:\Program Files\PeerBlock [2014/09/13 23:51:29 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Roaming\uTorrent [2014/09/12 23:04:35 | 000,596,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2014/09/12 23:04:34 | 000,440,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2014/09/12 23:04:31 | 000,758,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll [2014/09/12 23:04:31 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll [2014/09/12 23:04:31 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll [2014/09/12 23:04:31 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll [2014/09/12 23:04:31 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll [2014/09/12 23:04:30 | 000,446,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll [2014/09/12 23:04:30 | 000,289,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll [2014/09/12 23:04:30 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2014/09/12 23:04:30 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2014/09/12 23:04:30 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll [2014/09/12 23:04:29 | 000,547,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2014/09/12 23:04:29 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll [2014/09/12 23:04:28 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll [2014/09/12 23:04:28 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2014/09/12 23:04:26 | 000,727,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2014/09/12 23:04:26 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2014/09/12 23:04:26 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2014/09/12 23:04:25 | 000,707,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2014/09/12 23:04:25 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll [2014/09/12 23:04:25 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll [2014/09/12 23:04:24 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll [2014/09/12 23:04:24 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll [2014/09/12 23:04:21 | 000,678,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll [2014/09/12 23:04:21 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll [2014/09/12 23:04:20 | 001,249,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll [2014/09/12 23:04:20 | 000,775,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll [2014/09/12 23:04:20 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll [2014/09/12 23:04:19 | 001,068,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll [2014/09/12 23:04:19 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe [2014/09/12 23:04:18 | 000,940,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe [2014/09/12 23:04:12 | 005,833,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2014/09/12 23:04:09 | 002,104,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2014/09/12 23:04:09 | 002,014,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2014/09/12 22:26:33 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\.zenmap [2014/09/12 22:23:50 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nmap [2014/09/12 21:55:42 | 002,777,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msmpeg2vdec.dll [2014/09/12 21:55:41 | 002,285,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msmpeg2vdec.dll [2014/09/12 21:51:33 | 001,460,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll [2014/09/12 21:50:11 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iisRtl.dll [2014/09/12 21:50:07 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iisRtl.dll [2014/09/12 21:50:07 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\admwprox.dll [2014/09/12 21:50:05 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\admwprox.dll [2014/09/12 21:50:04 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ahadmin.dll [2014/09/12 21:50:04 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iisreset.exe [2014/09/12 21:50:04 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iisreset.exe [2014/09/12 21:50:02 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ahadmin.dll [2014/09/12 21:50:02 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wamregps.dll [2014/09/12 21:50:02 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iisrstap.dll [2014/09/12 21:50:02 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wamregps.dll [2014/09/12 21:50:02 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iisrstap.dll [2014/09/12 21:49:26 | 001,031,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TSWorkspace.dll [2014/09/12 21:49:25 | 000,793,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TSWorkspace.dll [2014/09/12 21:48:30 | 002,565,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll [2014/09/12 12:27:02 | 000,000,000 | ---D | C] -- C:\Program Files\iPod [2014/09/12 12:26:42 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes [2014/09/12 12:26:42 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 [2014/09/12 00:02:19 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Roaming\Opera [2014/09/12 00:02:19 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Local\Opera [2014/09/11 23:39:22 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker [2014/09/11 23:39:21 | 000,000,000 | ---D | C] -- C:\Program Files\Unlocker [2014/09/11 23:08:02 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rockers Team [2014/09/11 23:08:01 | 000,000,000 | ---D | C] -- C:\Program Files\Rockers Team [2014/09/11 15:50:47 | 000,536,576 | ---- | C] (SQLite Development Team) -- C:\Windows\SysWow64\sqlite3.dll [2014/09/11 14:14:31 | 000,000,000 | ---D | C] -- C:\ProgramData\RogueKiller [2014/09/11 13:42:52 | 000,000,000 | ---D | C] -- C:\Program Files\Reason [2014/09/10 21:59:02 | 000,000,000 | ---D | C] -- C:\inetpub [2014/09/10 17:21:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Raxco [2014/09/10 15:21:57 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\ThreadMaster [2014/09/08 22:58:26 | 000,000,000 | -HSD | C] -- C:\Users\Spid3r\AppData\Local\EmieUserList [2014/09/08 22:58:26 | 000,000,000 | -HSD | C] -- C:\Users\Spid3r\AppData\Local\EmieSiteList [2014/09/07 23:02:57 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Local\O&O [2014/09/07 23:01:52 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\oodag [2014/09/07 22:51:42 | 000,000,000 | ---D | C] -- C:\ProgramData\OO Software [2014/09/07 21:42:21 | 000,000,000 | -HSD | C] -- C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} [2014/09/07 16:58:22 | 000,000,000 | ---D | C] -- C:\Windows\Migration [2014/09/07 13:41:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG [2014/09/07 13:34:34 | 000,000,000 | -H-D | C] -- C:\$AVG [2014/09/07 13:34:33 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG2014 [2014/09/07 13:33:14 | 000,099,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\infocardapi.dll [2014/09/07 13:33:07 | 000,171,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\infocardapi.dll [2014/09/07 13:33:06 | 001,389,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icardagt.exe [2014/09/07 13:33:06 | 000,619,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icardagt.exe [2014/09/07 13:32:05 | 000,008,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\icardres.dll [2014/09/07 13:32:05 | 000,008,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\icardres.dll [2014/09/07 13:31:06 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TsWpfWrp.exe [2014/09/07 13:31:06 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsWpfWrp.exe [2014/09/07 13:30:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG [2014/09/07 13:05:26 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Local\Avg2014 [2014/09/07 13:03:59 | 000,122,584 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\48230029.sys [2014/09/07 12:49:56 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll [2014/09/07 12:49:50 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll [2014/09/07 12:49:49 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll [2014/09/07 12:47:43 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usp10.dll [2014/09/07 12:32:22 | 003,969,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2014/09/07 12:32:21 | 003,914,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2014/09/07 12:32:18 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe [2014/09/07 12:32:17 | 000,722,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\objsel.dll [2014/09/07 12:32:16 | 005,550,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2014/09/07 12:32:12 | 000,538,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\objsel.dll [2014/09/07 12:32:11 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll [2014/09/07 12:32:09 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dimsroam.dll [2014/09/07 12:32:09 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dimsroam.dll [2014/09/07 12:32:08 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cngprovider.dll [2014/09/07 12:32:08 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\adprovider.dll [2014/09/07 12:32:08 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adprovider.dll [2014/09/07 12:32:07 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\capiprovider.dll [2014/09/07 12:32:07 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cngprovider.dll [2014/09/07 12:32:06 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpapiprovider.dll [2014/09/07 12:32:06 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\capiprovider.dll [2014/09/07 12:32:06 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpapiprovider.dll [2014/09/07 12:32:05 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wincredprovider.dll [2014/09/07 12:32:04 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wincredprovider.dll [2014/09/07 12:30:37 | 000,190,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\storport.sys [2014/09/07 12:30:37 | 000,027,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys [2014/09/07 12:30:36 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iologmsg.dll [2014/09/07 12:30:36 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iologmsg.dll [2014/09/07 12:29:48 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll [2014/09/07 12:28:56 | 001,163,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll [2014/09/07 12:28:56 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll [2014/09/07 12:28:55 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll [2014/09/07 12:28:54 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe [2014/09/07 12:28:54 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll [2014/09/07 12:28:53 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll [2014/09/07 12:28:53 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll [2014/09/07 12:28:50 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe [2014/09/07 12:28:50 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll [2014/09/07 12:28:50 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe [2014/09/07 12:28:42 | 003,241,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll [2014/09/07 12:28:42 | 001,941,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll [2014/09/07 12:28:42 | 001,805,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll [2014/09/07 12:28:41 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msihnd.dll [2014/09/07 12:28:41 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msihnd.dll [2014/09/07 12:28:41 | 000,112,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe [2014/09/07 12:27:39 | 000,646,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\osk.exe [2014/09/07 12:27:38 | 000,692,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\osk.exe [2014/09/07 12:27:21 | 000,288,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS [2014/09/07 12:25:51 | 001,112,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorets.dll [2014/09/07 12:25:44 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml6r.dll [2014/09/07 12:25:44 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml6r.dll [2014/09/07 12:25:44 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll [2014/09/07 12:25:44 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll [2014/09/07 12:25:35 | 000,624,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll [2014/09/07 12:25:35 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll [2014/09/07 12:25:33 | 000,484,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wer.dll [2014/09/07 12:25:33 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wer.dll [2014/09/07 12:25:27 | 000,404,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll [2014/09/07 12:24:54 | 001,424,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll [2014/09/07 12:16:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro [2014/09/07 12:16:44 | 000,000,000 | ---D | C] -- C:\ProgramData\VS Revo Group [2014/09/07 12:16:43 | 000,031,800 | ---- | C] (VS Revo Group) -- C:\Windows\SysNative\drivers\revoflt.sys [2014/09/07 12:16:36 | 000,000,000 | ---D | C] -- C:\Program Files\VS Revo Group [2014/09/07 11:18:32 | 001,216,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll [2014/09/07 10:26:11 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Local\Avg2013 [2014/09/06 21:00:16 | 000,000,000 | ---D | C] -- C:\SUPERDelete [2014/09/06 20:49:45 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Roaming\Imminent [2014/09/06 20:46:02 | 000,122,584 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys [2014/09/06 20:36:22 | 000,000,000 | RHSD | C] -- C:\Users\Spid3r\lb5yqtn8226j6t [2014/09/06 20:36:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware [2014/09/06 20:36:04 | 000,092,888 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys [2014/09/06 20:36:04 | 000,063,704 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mwac.sys [2014/09/06 20:36:04 | 000,025,816 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2014/09/06 20:36:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes Anti-Malware [2014/09/06 20:24:10 | 000,000,000 | ---D | C] -- C:\Program Files\Nightly [2014/09/06 18:52:41 | 000,000,000 | ---D | C] -- C:\Users\Spid3r\AppData\Roaming\gtopala [2014/09/03 15:23:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPUB File Reader [2014/09/03 15:23:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\EPUB File Reader [2014/08/31 12:37:02 | 000,000,000 | ---D | C] -- C:\!!!! torrent [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ] [1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2014/09/22 14:02:15 | 000,220,496 | ---- | M] () -- C:\Windows\SysNative\drivers\sfi.dat [2014/09/22 13:51:09 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2014/09/22 13:51:09 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2014/09/22 13:44:45 | 000,122,584 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys [2014/09/22 13:42:30 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2014/09/22 13:42:18 | 3193,589,760 | -HS- | M] () -- C:\hiberfil.sys [2014/09/22 13:41:33 | 000,002,996 | ---- | M] () -- C:\Windows\SysNative\drivers\fvstore.dat [2014/09/22 13:41:05 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2014/09/22 13:38:02 | 000,001,985 | ---- | M] () -- C:\Users\Public\Desktop\COMODO Internet Security.lnk [2014/09/22 13:13:05 | 000,057,096 | ---- | M] (COMODO CA Limited) -- C:\Windows\SysNative\certsentry.dll [2014/09/22 13:13:05 | 000,048,392 | ---- | M] (COMODO CA Limited) -- C:\Windows\SysWow64\certsentry.dll [2014/09/22 13:10:49 | 000,002,013 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Start GeekBuddy.lnk [2014/09/22 13:10:49 | 000,002,013 | ---- | M] () -- C:\Users\Public\Desktop\GeekBuddy.lnk [2014/09/22 13:10:31 | 000,001,120 | ---- | M] () -- C:\Users\Public\Desktop\Comodo Dragon.lnk [2014/09/22 12:48:54 | 000,001,272 | ---- | M] () -- C:\Users\Spid3r\Desktop\Screamer Radio.lnk [2014/09/22 12:48:54 | 000,001,035 | ---- | M] () -- C:\Users\Spid3r\Desktop\µTorrent.lnk [2014/09/21 22:34:31 | 000,004,864 | ---- | M] () -- C:\Users\Spid3r\Documents\bb.htm [2014/09/21 22:32:43 | 000,029,736 | ---- | M] () -- C:\Users\Spid3r\Documents\b.htm [2014/09/21 22:26:24 | 000,835,046 | ---- | M] () -- C:\Users\Spid3r\Documents\a.htm [2014/09/21 10:04:32 | 005,089,656 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2014/09/20 22:57:03 | 000,002,221 | ---- | M] () -- C:\Users\Public\Desktop\Advanced SystemCare 7.lnk [2014/09/19 22:05:52 | 000,000,736 | ---- | M] () -- C:\Users\Spid3r\Desktop\Plan Treningowy run — skrót.lnk [2014/09/19 14:26:16 | 000,033,512 | ---- | M] () -- C:\Windows\SysWow64\drivers\TrueSight.sys [2014/09/19 12:01:34 | 002,347,384 | ---- | M] (ESET) -- C:\Users\Spid3r\Documents\esetsmartinstaller_enu.exe [2014/09/19 11:17:39 | 004,591,316 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2014/09/19 11:17:39 | 000,773,764 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2014/09/19 11:17:39 | 000,772,380 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat [2014/09/19 11:17:39 | 000,772,020 | ---- | M] () -- C:\Windows\SysNative\perfh00A.dat [2014/09/19 11:17:39 | 000,770,478 | ---- | M] () -- C:\Windows\SysNative\perfh013.dat [2014/09/19 11:17:39 | 000,684,512 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2014/09/19 11:17:39 | 000,175,594 | ---- | M] () -- C:\Windows\SysNative\perfc00A.dat [2014/09/19 11:17:39 | 000,173,130 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2014/09/19 11:17:39 | 000,169,462 | ---- | M] () -- C:\Windows\SysNative\perfc013.dat [2014/09/19 11:17:39 | 000,165,336 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat [2014/09/19 11:17:39 | 000,134,644 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2014/09/19 10:51:14 | 000,000,768 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts [2014/09/18 22:49:39 | 000,092,888 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbamchameleon.sys [2014/09/18 13:08:47 | 008,623,856 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\drivers\NETwNs64.sys [2014/09/18 13:08:47 | 002,757,360 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\NETwNr64.dll [2014/09/18 13:08:47 | 000,806,128 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\NETwNc64.dll [2014/09/18 13:01:06 | 000,075,040 | ---- | M] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll [2014/09/18 13:01:06 | 000,061,912 | ---- | M] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll [2014/09/18 13:01:05 | 018,626,304 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll [2014/09/18 13:01:05 | 016,122,344 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll [2014/09/18 13:01:04 | 031,512,520 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll [2014/09/18 13:01:04 | 024,196,896 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll [2014/09/18 13:01:04 | 013,922,752 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll [2014/09/18 13:01:04 | 011,283,344 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll [2014/09/18 13:01:02 | 017,555,104 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll [2014/09/18 13:01:02 | 001,890,080 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6434052.dll [2014/09/18 13:01:02 | 001,539,928 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6434052.dll [2014/09/18 13:01:02 | 000,944,928 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFR64.dll [2014/09/18 13:01:02 | 000,907,096 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFR.dll [2014/09/18 13:01:02 | 000,903,624 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\NvFBC64.dll [2014/09/18 13:01:02 | 000,869,152 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvFBC.dll [2014/09/18 13:01:01 | 022,994,208 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll [2014/09/18 13:01:01 | 015,294,296 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll [2014/09/18 13:01:01 | 014,498,552 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll [2014/09/18 13:01:01 | 013,835,208 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll [2014/09/18 13:01:01 | 011,222,048 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll [2014/09/18 13:01:01 | 004,247,000 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll [2014/09/18 13:01:01 | 003,989,960 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll [2014/09/18 13:01:00 | 003,196,816 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll [2014/09/18 13:01:00 | 002,814,656 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll [2014/09/18 12:25:42 | 000,000,000 | -H-- | M] () -- C:\ProgramData\DP45977C.lfl [2014/09/18 12:19:59 | 002,162,992 | ---- | M] (Yamaha Corporation) -- C:\Windows\SysNative\YamahaAE.dll [2014/09/18 12:19:55 | 002,101,848 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib64.dll [2014/09/18 12:19:55 | 000,871,856 | ---- | M] (TOSHIBA Corporation) -- C:\Windows\SysNative\tossaeapo64.dll [2014/09/18 12:19:54 | 000,582,056 | ---- | M] (TOSHIBA Corporation) -- C:\Windows\SysNative\tosasfapo64.dll [2014/09/18 12:19:54 | 000,162,224 | ---- | M] (TOSHIBA Corporation) -- C:\Windows\SysNative\toseaeapo64.dll [2014/09/18 12:19:52 | 002,117,424 | ---- | M] () -- C:\Windows\SysNative\SStudio.dll [2014/09/18 12:19:51 | 000,724,728 | ---- | M] (DTS, Inc.) -- C:\Windows\SysNative\sltech64.dll [2014/09/18 12:19:51 | 000,246,008 | ---- | M] (TODO: ) -- C:\Windows\SysNative\slprp64.dll [2014/09/18 12:19:50 | 001,048,824 | ---- | M] (SRS Labs, Inc.) -- C:\Windows\SysNative\slcnt64.dll [2014/09/18 12:19:49 | 005,804,772 | ---- | M] () -- C:\Windows\SysNative\drivers\rtvienna.dat [2014/09/18 12:19:49 | 001,959,128 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl [2014/09/18 12:19:49 | 000,947,760 | ---- | M] (Sony Corporation) -- C:\Windows\SysNative\SFSS_APO.dll [2014/09/18 12:19:49 | 000,889,592 | ---- | M] (DTS, Inc.) -- C:\Windows\SysNative\sl3apo64.dll [2014/09/18 12:19:48 | 002,834,648 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll [2014/09/18 12:19:43 | 001,022,168 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll [2014/09/18 12:19:41 | 001,286,872 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll [2014/09/18 12:19:41 | 001,099,203 | ---- | M] () -- C:\Windows\SysNative\drivers\RTAIODAT.DAT [2014/09/18 12:19:41 | 000,628,952 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtDataProc64.dll [2014/09/18 12:19:32 | 002,800,344 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RltkAPO64.dll [2014/09/18 12:19:30 | 060,636,160 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoRes64.dat [2014/09/18 12:19:29 | 000,948,952 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInstII64.dll [2014/09/18 12:19:21 | 005,751,048 | ---- | M] (Nahimic Inc) -- C:\Windows\SysNative\NAHIMICAPOlfx.dll [2014/09/18 12:19:21 | 000,942,384 | ---- | M] (Nahimic Inc) -- C:\Windows\SysNative\NAHIMICAPOSettingsIPC.dll [2014/09/18 12:19:20 | 000,906,800 | ---- | M] (Sony Corporation) -- C:\Windows\SysNative\MISS_APO.dll [2014/09/18 12:19:19 | 012,894,808 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVoiceAPO3064.dll [2014/09/18 12:19:19 | 000,662,784 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVolumeSDAPO.dll [2014/09/18 12:19:15 | 003,959,384 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioVnN64.dll [2014/09/18 12:19:15 | 001,313,904 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxSpeechAPO64.dll [2014/09/18 12:19:15 | 000,956,504 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVoiceAPO2064.dll [2014/09/18 12:19:12 | 028,343,384 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioVnA64.dll [2014/09/18 12:19:08 | 014,863,448 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek64.dll [2014/09/18 12:18:55 | 002,041,432 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ64.dll [2014/09/18 12:18:55 | 001,934,424 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek264.dll [2014/09/18 12:18:52 | 001,063,512 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPOShell64.dll [2014/09/18 12:18:51 | 001,317,976 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO6064.dll [2014/09/18 12:18:51 | 001,168,472 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO5064.dll [2014/09/18 12:18:51 | 001,136,728 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO4064.dll [2014/09/18 12:18:51 | 000,900,696 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysWow64\MaxxAudioAPOShell.dll [2014/09/18 12:18:49 | 000,663,296 | ---- | M] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO30.dll [2014/09/18 12:18:47 | 000,291,488 | ---- | M] (ICEpower a/s) -- C:\Windows\SysNative\ICEsoundAPO64.dll [2014/09/18 12:18:45 | 006,218,072 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\DDPP64A.dll [2014/09/18 12:18:45 | 002,770,976 | ---- | M] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll [2014/09/18 12:18:45 | 001,939,800 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\DDPD64A.dll [2014/09/18 12:18:45 | 000,501,184 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSU2PLFX64.dll [2014/09/18 12:18:45 | 000,487,360 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSU2PGFX64.dll [2014/09/18 12:18:45 | 000,415,680 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSU2PREC64.dll [2014/09/18 12:18:45 | 000,315,736 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\DDPO64A.dll [2014/09/18 12:18:45 | 000,261,464 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\DDPA64.dll [2014/09/18 12:18:44 | 000,113,576 | ---- | M] (Real Sound Lab SIA) -- C:\Windows\SysNative\CONEQMSAPOGUILibrary.dll [2014/09/18 12:18:44 | 000,033,592 | ---- | M] () -- C:\Windows\SysNative\audioLibVc.dll [2014/09/18 12:18:37 | 000,209,096 | ---- | M] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll [2014/09/18 12:18:36 | 000,109,848 | ---- | M] () -- C:\Windows\SysNative\AcpiServiceVnA64.dll [2014/09/18 00:07:40 | 000,001,250 | ---- | M] () -- C:\Users\Public\Desktop\IObit Uninstaller.lnk [2014/09/17 20:25:35 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf [2014/09/17 20:24:43 | 000,033,008 | ---- | M] (Synaptics Incorporated) -- C:\Windows\SysNative\drivers\Smb_driver_Intel.sys [2014/09/17 20:06:08 | 001,510,176 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdagenco64.dll [2014/09/17 20:03:59 | 000,271,064 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\drivers\RtsUStor.sys [2014/09/17 20:03:57 | 009,889,352 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysWow64\RsCRIcon.dll [2014/09/17 19:56:45 | 000,701,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2014/09/17 19:56:45 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2014/09/17 19:00:28 | 000,001,182 | ---- | M] () -- C:\Users\Public\Desktop\Smart Defrag 3.lnk [2014/09/17 12:34:14 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2622835651-1712134509-2677869765-1005UA.job [2014/09/17 12:34:14 | 000,001,068 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2014/09/17 12:34:14 | 000,001,042 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2622835651-1712134509-2677869765-1005Core.job [2014/09/17 10:53:39 | 000,001,019 | ---- | M] () -- C:\Users\Spid3r\Desktop\Fast Folder Access.lnk [2014/09/17 04:13:36 | 002,193,560 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvspcap.dll [2014/09/17 04:13:36 | 001,291,280 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvspbridge.dll [2014/09/17 04:12:40 | 002,799,784 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvspcap64.dll [2014/09/17 04:12:39 | 001,715,224 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvspbridge64.dll [2014/09/17 00:20:43 | 000,001,095 | ---- | M] () -- C:\Users\Public\Desktop\SpywareBlaster.lnk [2014/09/17 00:12:46 | 266,535,608 | ---- | M] () -- C:\Users\Spid3r\Documents\back.reg [2014/09/17 00:01:22 | 000,001,024 | ---- | M] () -- C:\Users\Public\Desktop\RogueRemover FREE.lnk [2014/09/16 21:36:29 | 000,000,193 | ---- | M] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc [2014/09/16 12:24:38 | 000,000,997 | ---- | M] () -- C:\Users\Public\Desktop\WinRAR.lnk [2014/09/15 22:47:42 | 000,002,001 | ---- | M] () -- C:\Users\Public\Desktop\ExtremeCopy Pro.lnk [2014/09/15 21:38:29 | 000,000,000 | ---- | M] () -- C:\ProgramData\@system.att [2014/09/15 21:37:41 | 000,000,944 | -H-- | M] () -- C:\ProgramData\@system2.att [2014/09/15 20:40:11 | 000,111,016 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\WindowsAccessBridge-64.dll [2014/09/15 20:39:10 | 000,319,912 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe [2014/09/15 20:39:10 | 000,189,352 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe [2014/09/15 20:39:05 | 000,189,352 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\java.exe [2014/09/14 20:10:17 | 000,000,100 | ---- | M] () -- C:\index.ini [2014/09/14 20:09:41 | 000,001,122 | ---- | M] () -- C:\Users\Public\Desktop\Emsisoft HiJackFree.lnk [2014/09/12 22:38:15 | 004,502,396 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2014/09/12 22:34:10 | 000,000,218 | ---- | M] () -- C:\Users\Spid3r\AppData\Local\recently-used.xbel [2014/09/11 23:08:03 | 000,002,243 | ---- | M] () -- C:\Users\Spid3r\Desktop\RT 7 Lite (64-Bit).lnk [2014/09/11 21:11:26 | 000,000,008 | RHS- | M] () -- C:\Users\Spid3r\ntuser.pol [2014/09/10 22:37:39 | 000,000,428 | ---- | M] () -- C:\Windows\tasks\Wise Memory Optimizer Task.job [2014/09/10 21:12:36 | 000,040,149 | ---- | M] () -- C:\Windows\SysNative\energy-report.html [2014/09/10 16:56:19 | 000,001,498 | ---- | M] () -- C:\Program Files (x86)\Common Files\PSetup.ini [2014/09/10 16:56:19 | 000,000,073 | ---- | M] () -- C:\Program Files (x86)\Common Files\setup.bat [2014/09/10 16:56:16 | 000,576,264 | ---- | M] () -- C:\Program Files (x86)\Common Files\PSetup.exe [2014/09/09 01:03:52 | 000,000,944 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2622835651-1712134509-2677869765-1005UA.job [2014/09/09 01:03:52 | 000,000,922 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2622835651-1712134509-2677869765-1005Core.job [2014/09/07 13:03:59 | 000,122,584 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\48230029.sys [2014/09/07 12:16:51 | 000,001,095 | ---- | M] () -- C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk [2014/09/06 20:24:16 | 000,000,862 | ---- | M] () -- C:\Users\Public\Desktop\Nightly.lnk [2014/09/06 18:34:13 | 004,671,306 | ---- | M] () -- C:\sessionstore.js [2014/09/06 15:25:15 | 004,483,432 | ---- | M] () -- C:\sessionstore.bak [2014/09/04 21:14:38 | 000,038,048 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvvad64v.sys [2014/09/04 21:14:38 | 000,034,976 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvaudcap64v.dll [2014/09/04 21:14:38 | 000,032,416 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvaudcap32v.dll [2014/09/04 05:32:44 | 000,002,191 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ] [1 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2014/09/22 13:39:57 | 000,002,996 | ---- | C] () -- C:\Windows\SysNative\drivers\fvstore.dat [2014/09/22 13:14:01 | 000,001,985 | ---- | C] () -- C:\Users\Public\Desktop\COMODO Internet Security.lnk [2014/09/22 13:13:53 | 000,220,496 | ---- | C] () -- C:\Windows\SysNative\drivers\sfi.dat [2014/09/22 13:10:49 | 000,002,013 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Start GeekBuddy.lnk [2014/09/22 13:10:49 | 000,002,013 | ---- | C] () -- C:\Users\Public\Desktop\GeekBuddy.lnk [2014/09/22 13:10:31 | 000,001,120 | ---- | C] () -- C:\Users\Public\Desktop\Comodo Dragon.lnk [2014/09/21 22:34:30 | 000,004,864 | ---- | C] () -- C:\Users\Spid3r\Documents\bb.htm [2014/09/21 22:32:43 | 000,029,736 | ---- | C] () -- C:\Users\Spid3r\Documents\b.htm [2014/09/21 22:20:41 | 000,835,046 | ---- | C] () -- C:\Users\Spid3r\Documents\a.htm [2014/09/18 13:06:07 | 003,826,628 | ---- | C] () -- C:\Windows\SysNative\nvcoproc.bin [2014/09/18 13:01:03 | 000,026,353 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb [2014/09/18 12:25:42 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl [2014/09/18 12:19:51 | 002,117,424 | ---- | C] () -- C:\Windows\SysNative\SStudio.dll [2014/09/18 12:19:49 | 005,804,772 | ---- | C] () -- C:\Windows\SysNative\drivers\rtvienna.dat [2014/09/18 12:19:37 | 001,099,203 | ---- | C] () -- C:\Windows\SysNative\drivers\RTAIODAT.DAT [2014/09/18 12:18:43 | 000,033,592 | ---- | C] () -- C:\Windows\SysNative\audioLibVc.dll [2014/09/18 12:18:35 | 000,109,848 | ---- | C] () -- C:\Windows\SysNative\AcpiServiceVnA64.dll [2014/09/18 00:07:40 | 000,001,250 | ---- | C] () -- C:\Users\Public\Desktop\IObit Uninstaller.lnk [2014/09/18 00:06:12 | 000,002,221 | ---- | C] () -- C:\Users\Public\Desktop\Advanced SystemCare 7.lnk [2014/09/17 20:25:35 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf [2014/09/17 19:00:28 | 000,001,182 | ---- | C] () -- C:\Users\Public\Desktop\Smart Defrag 3.lnk [2014/09/17 10:53:39 | 000,001,019 | ---- | C] () -- C:\Users\Spid3r\Desktop\Fast Folder Access.lnk [2014/09/17 00:20:43 | 000,001,095 | ---- | C] () -- C:\Users\Public\Desktop\SpywareBlaster.lnk [2014/09/17 00:11:51 | 266,535,608 | ---- | C] () -- C:\Users\Spid3r\Documents\back.reg [2014/09/17 00:01:22 | 000,001,024 | ---- | C] () -- C:\Users\Public\Desktop\RogueRemover FREE.lnk [2014/09/16 12:24:39 | 000,000,997 | ---- | C] () -- C:\Users\Public\Desktop\WinRAR.lnk [2014/09/16 12:01:51 | 000,000,193 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc [2014/09/15 22:47:42 | 000,002,001 | ---- | C] () -- C:\Users\Public\Desktop\ExtremeCopy Pro.lnk [2014/09/15 21:38:06 | 000,000,000 | ---- | C] () -- C:\ProgramData\@system.att [2014/09/15 21:37:41 | 000,000,944 | -H-- | C] () -- C:\ProgramData\@system2.att [2014/09/14 20:51:57 | 3193,589,760 | -HS- | C] () -- C:\hiberfil.sys [2014/09/14 20:10:17 | 000,000,100 | ---- | C] () -- C:\index.ini [2014/09/14 20:09:41 | 000,001,122 | ---- | C] () -- C:\Users\Public\Desktop\Emsisoft HiJackFree.lnk [2014/09/13 23:53:01 | 000,001,035 | ---- | C] () -- C:\Users\Spid3r\Desktop\µTorrent.lnk [2014/09/12 22:34:10 | 000,000,218 | ---- | C] () -- C:\Users\Spid3r\AppData\Local\recently-used.xbel [2014/09/11 23:08:03 | 000,002,243 | ---- | C] () -- C:\Users\Spid3r\Desktop\RT 7 Lite (64-Bit).lnk [2014/09/11 14:14:37 | 000,033,512 | ---- | C] () -- C:\Windows\SysWow64\drivers\TrueSight.sys [2014/09/10 21:12:36 | 000,040,149 | ---- | C] () -- C:\Windows\SysNative\energy-report.html [2014/09/10 16:56:16 | 000,576,264 | ---- | C] () -- C:\Program Files (x86)\Common Files\PSetup.exe [2014/09/10 16:56:16 | 000,001,498 | ---- | C] () -- C:\Program Files (x86)\Common Files\PSetup.ini [2014/09/10 15:38:19 | 000,000,073 | ---- | C] () -- C:\Program Files (x86)\Common Files\setup.bat [2014/09/07 12:16:51 | 000,001,095 | ---- | C] () -- C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk [2014/09/07 10:34:34 | 000,000,428 | ---- | C] () -- C:\Windows\tasks\Wise Memory Optimizer Task.job [2014/09/06 20:24:16 | 000,000,874 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nightly.lnk [2014/09/06 20:24:16 | 000,000,862 | ---- | C] () -- C:\Users\Public\Desktop\Nightly.lnk [2014/09/06 18:43:10 | 004,671,306 | ---- | C] () -- C:\sessionstore.js [2014/09/06 18:43:10 | 004,483,432 | ---- | C] () -- C:\sessionstore.bak [2014/05/05 16:37:56 | 000,111,932 | ---- | C] () -- C:\Windows\SysWow64\EPPICPrinterDB.dat [2014/05/05 16:37:56 | 000,031,053 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern131.dat [2014/05/05 16:37:56 | 000,027,417 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern121.dat [2014/05/05 16:37:56 | 000,026,154 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern1.dat [2014/05/05 16:37:56 | 000,024,903 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern3.dat [2014/05/05 16:37:56 | 000,021,390 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern5.dat [2014/05/05 16:37:56 | 000,020,148 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern2.dat [2014/05/05 16:37:56 | 000,011,811 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern4.dat [2014/05/05 16:37:56 | 000,004,943 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern6.dat [2014/05/05 16:37:56 | 000,001,146 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_DU.dat [2014/05/05 16:37:56 | 000,001,139 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_PT.dat [2014/05/05 16:37:56 | 000,001,139 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_BP.dat [2014/05/05 16:37:56 | 000,001,136 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_ES.dat [2014/05/05 16:37:56 | 000,001,129 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_FR.dat [2014/05/05 16:37:56 | 000,001,129 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_CF.dat [2014/05/05 16:37:56 | 000,001,120 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_IT.dat [2014/05/05 16:37:56 | 000,001,107 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_GE.dat [2014/05/05 16:37:56 | 000,001,104 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_EN.dat [2014/05/05 16:37:56 | 000,000,097 | ---- | C] () -- C:\Windows\SysWow64\PICSDK.ini [2014/05/05 16:35:38 | 000,000,025 | ---- | C] () -- C:\Windows\CDE DX8400DEFGIPS.ini [2013/05/18 02:57:14 | 000,357,337 | ---- | C] () -- C:\Program Files (x86)\EAM-TR.exe [2012/11/06 19:17:06 | 000,003,584 | ---- | C] () -- C:\Users\Spid3r\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012/05/08 23:17:40 | 000,944,770 | ---- | C] () -- C:\Users\Spid3r\AppData\Local\census.cache [2012/05/08 23:14:06 | 000,169,368 | ---- | C] () -- C:\Users\Spid3r\AppData\Local\ars.cache [2012/05/08 22:10:58 | 000,000,036 | ---- | C] () -- C:\Users\Spid3r\AppData\Local\housecall.guid.cache [2012/05/06 14:42:45 | 000,007,605 | ---- | C] () -- C:\Users\Spid3r\AppData\Local\Resmon.ResmonCfg [2012/04/02 06:12:49 | 000,027,191 | ---- | C] () -- C:\Users\Spid3r\ExpressivoDictionary.xml [2012/01/23 08:11:18 | 000,000,930 | ---- | C] () -- C:\ProgramData\{ED9D3F85-A00E-2F68-DF01-0000D27A88C5} [2012/01/13 01:23:27 | 000,000,022 | -HS- | C] () -- C:\Users\Spid3r\AppData\Roaming\Sys2662.Config.Repository.bin [2012/01/09 12:31:49 | 000,000,008 | RHS- | C] () -- C:\Users\Spid3r\ntuser.pol [2012/01/08 23:16:55 | 000,000,079 | ---- | C] () -- C:\Users\Spid3r\AppData\Local\CrystalDiskMark30.ini [color=#E56717]========== ZeroAccess Check ==========[/color] [2009/07/14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2014/06/25 04:05:42 | 014,175,744 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2014/06/25 03:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 05:19:04 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2013/05/13 17:21:19 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\BitComet [2012/01/11 03:03:32 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\BSplayer [2012/01/28 20:42:30 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\Ethereal [2012/06/01 00:20:14 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\Expressivo [2012/02/24 05:37:47 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\foobar2000 [2012/04/29 15:11:07 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\Greenshot [2014/09/22 10:43:18 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\IObit [2012/10/28 11:21:37 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\IrfanView [2012/04/02 21:07:33 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\IVONA 2 Voice [2012/02/21 03:54:38 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\IVONA ControlCenter [2012/04/03 15:05:15 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\IVONA Reader [2012/01/20 17:06:52 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\Luxand [2012/02/06 12:53:32 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\Nokia [2013/04/27 20:49:50 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\Obvious Idea [2013/04/27 20:48:03 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\ObviousIdea [2012/01/16 01:44:01 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\Opera [2012/01/22 06:44:05 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\Outerspace Software [2012/01/15 23:58:47 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\PACE Anti-Piracy [2012/02/06 12:58:43 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\PC Suite [2012/07/04 21:41:05 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\pl.waw.rozycki.konrad.dzienniczek [2012/11/03 23:44:53 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\ProcessLasso [2012/01/22 05:22:15 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\proDAD [2012/01/16 01:26:42 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\Publish Providers [2012/12/02 19:53:50 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\Sony [2012/01/18 15:37:57 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\Sony Creative Software Inc [2012/01/16 00:45:55 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1 [2012/01/28 20:41:24 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\SteelBytes [2013/02/14 12:27:05 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\TeamViewer [2012/11/15 11:17:37 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\Titler 2.0 [2012/11/02 20:31:15 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\Ulead Systems [2013/04/27 20:46:53 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\VSO [2012/01/31 22:48:54 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\WinPatrol [2012/01/09 17:51:59 | 000,000,000 | ---D | M] -- C:\Users\CrashJack\AppData\Roaming\WOW64Menu [2013/06/25 17:04:30 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\TuneUp Software [2013/06/25 17:04:30 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\TuneUp Software [2014/05/25 22:27:37 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\Acronis [2014/09/07 21:51:47 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\AVG [2014/09/18 21:38:49 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\BitComet [2014/09/15 20:25:48 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\BSplayer [2012/04/26 10:41:45 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\BSplayer Pro [2012/01/29 20:52:03 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\Camfrog [2012/01/23 07:01:55 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\Canopus [2014/05/07 17:00:17 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\EPSON [2014/09/17 10:28:42 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\Eusing [2012/05/07 21:59:07 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\Expressivo [2014/09/15 22:48:22 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\ExtremeCopy [2014/04/26 10:29:33 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\foobar2000 [2014/09/15 20:24:35 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\GlarySoft [2014/09/22 11:59:58 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\Greenshot [2014/09/06 18:52:41 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\gtopala [2014/09/15 21:37:31 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\HD Tune Pro [2014/09/06 22:37:27 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\Imminent [2014/09/19 12:04:54 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\IObit [2012/03/01 01:05:04 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\IVONA ControlCenter [2012/11/04 12:48:30 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\Jasc [2012/01/07 23:16:46 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\Leadertech [2012/01/20 17:06:52 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\Luxand [2012/01/08 04:53:36 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\MAXON [2014/09/12 00:45:16 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\Nokia [2014/05/01 21:20:54 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\ObviousIdea [2014/09/12 00:02:19 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\Opera [2014/04/06 17:01:53 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\Oracle [2013/02/07 18:03:30 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\PC Suite [2014/01/01 17:34:18 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\PhotoScape [2013/08/04 08:03:20 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\pl.waw.rozycki.konrad.dzienniczek [2012/11/03 13:16:00 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\proDAD [2014/09/22 11:59:58 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\ProductData [2012/11/16 23:44:44 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\Publish Providers [2014/09/08 10:16:23 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\Sony [2013/06/02 15:06:19 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\Sony Creative Software Inc [2012/11/16 23:44:37 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\Titler 2.0 [2014/09/07 22:08:41 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\TuneUp Software [2014/02/09 02:35:38 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\Ulead Systems [2014/06/08 15:26:05 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\Unity [2014/09/22 14:44:46 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\uTorrent [2012/01/09 02:32:35 | 000,000,000 | ---D | M] -- C:\Users\Spid3r\AppData\Roaming\WOW64Menu [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 139 bytes -> C:\ProgramData\TEMP:C176AF6C @Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:5C321E34 @Alternate Data Stream - 101 bytes -> C:\ProgramData\TEMP:010ADD2C < End of report >