OTL logfile created on: 2014-10-01 00:13:25 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Adrian\Downloads 64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17031) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1,96 Gb Total Physical Memory | 1,21 Gb Available Physical Memory | 61,77% Memory free 3,09 Gb Paging File | 2,22 Gb Available in Paging File | 71,81% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86) Drive C: | 50,00 Gb Total Space | 34,74 Gb Free Space | 69,48% Space Free | Partition Type: NTFS Drive D: | 29,82 Gb Total Space | 21,64 Gb Free Space | 72,57% Space Free | Partition Type: NTFS Computer Name: TESLA | User Name: Adrian | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2014-09-30 20:31:35 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Adrian\Downloads\OTL.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2014-03-18 12:15:19 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService) SRV:[b]64bit:[/b] - [2014-03-18 12:15:14 | 001,584,128 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc) SRV:[b]64bit:[/b] - [2014-03-18 12:15:02 | 000,710,656 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM) SRV:[b]64bit:[/b] - [2014-03-18 12:15:02 | 000,530,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness) SRV:[b]64bit:[/b] - [2014-03-18 12:14:55 | 000,366,080 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc) SRV:[b]64bit:[/b] - [2014-03-18 12:14:54 | 003,394,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService) SRV:[b]64bit:[/b] - [2014-03-18 12:14:53 | 001,576,960 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc) SRV:[b]64bit:[/b] - [2014-03-18 12:14:50 | 000,491,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\GeofenceMonitorService.dll -- (lfsvc) SRV:[b]64bit:[/b] - [2014-03-18 12:14:49 | 000,399,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService) SRV:[b]64bit:[/b] - [2014-03-18 12:14:49 | 000,269,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure) SRV:[b]64bit:[/b] - [2014-03-18 12:14:48 | 000,282,112 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker) SRV:[b]64bit:[/b] - [2014-03-18 12:14:44 | 001,306,112 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc) SRV:[b]64bit:[/b] - [2014-03-18 12:14:44 | 000,201,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder) SRV:[b]64bit:[/b] - [2014-03-18 11:46:02 | 000,183,296 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:[b]64bit:[/b] - [2014-03-18 11:46:02 | 000,090,464 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\KeyboardFilterSvc.dll -- (MsKeyboardFilter) SRV:[b]64bit:[/b] - [2014-03-02 21:58:08 | 000,977,088 | ---- | M] () [Auto | Stopped] -- C:\Program Files\KMSpico\Service_KMS.exe -- (Service KMSELDI) SRV:[b]64bit:[/b] - [2013-08-22 14:31:56 | 002,899,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV:[b]64bit:[/b] - [2013-08-22 13:32:02 | 000,024,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC) SRV:[b]64bit:[/b] - [2013-08-22 13:31:43 | 000,040,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS) SRV:[b]64bit:[/b] - [2013-08-22 13:22:45 | 000,066,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc) SRV:[b]64bit:[/b] - [2013-08-22 13:21:15 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc) SRV:[b]64bit:[/b] - [2013-08-22 13:16:57 | 000,118,272 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc) SRV:[b]64bit:[/b] - [2013-08-22 12:25:28 | 000,164,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc) SRV:[b]64bit:[/b] - [2013-08-22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss) SRV:[b]64bit:[/b] - [2013-08-22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync) SRV:[b]64bit:[/b] - [2013-08-22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown) SRV:[b]64bit:[/b] - [2013-08-22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv) SRV:[b]64bit:[/b] - [2013-08-22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange) SRV:[b]64bit:[/b] - [2013-08-22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat) SRV:[b]64bit:[/b] - [2013-08-22 12:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface) SRV:[b]64bit:[/b] - [2013-08-22 12:02:47 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost) SRV:[b]64bit:[/b] - [2013-08-22 11:59:26 | 000,832,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon) SRV:[b]64bit:[/b] - [2013-08-22 11:57:25 | 000,130,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum) SRV:[b]64bit:[/b] - [2013-08-22 11:54:59 | 000,059,392 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso) SRV:[b]64bit:[/b] - [2013-08-22 11:50:59 | 000,245,760 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker) SRV:[b]64bit:[/b] - [2013-08-22 11:50:00 | 000,525,312 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm) SRV:[b]64bit:[/b] - [2013-08-22 11:45:59 | 000,151,040 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService) SRV:[b]64bit:[/b] - [2013-08-22 11:40:49 | 000,248,832 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc) SRV:[b]64bit:[/b] - [2013-08-22 11:31:03 | 000,201,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc) SRV:[b]64bit:[/b] - [2013-08-22 11:15:54 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup) SRV - [2014-03-18 12:14:37 | 000,357,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GeofenceMonitorService.dll -- (lfsvc) SRV - [2013-08-22 14:31:56 | 002,899,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV - [2013-08-22 05:55:35 | 000,018,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc) SRV - [2013-08-22 04:53:34 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2014-03-18 12:15:37 | 000,157,528 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wof.sys -- (Wof) DRV:[b]64bit:[/b] - [2014-03-18 12:15:24 | 000,054,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr) DRV:[b]64bit:[/b] - [2014-03-18 12:14:55 | 000,136,536 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS) DRV:[b]64bit:[/b] - [2014-03-18 12:14:54 | 000,924,504 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refs.sys -- (ReFS) DRV:[b]64bit:[/b] - [2014-03-18 12:14:50 | 000,146,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2) DRV:[b]64bit:[/b] - [2014-03-18 12:14:50 | 000,146,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101) DRV:[b]64bit:[/b] - [2014-03-18 12:14:37 | 000,175,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt) DRV:[b]64bit:[/b] - [2014-03-18 12:14:36 | 000,086,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc) DRV:[b]64bit:[/b] - [2014-03-18 12:14:36 | 000,079,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor) DRV:[b]64bit:[/b] - [2014-03-18 12:14:35 | 000,467,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3) DRV:[b]64bit:[/b] - [2014-03-18 12:14:35 | 000,384,856 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport) DRV:[b]64bit:[/b] - [2014-03-18 12:14:35 | 000,325,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI) DRV:[b]64bit:[/b] - [2014-03-18 12:14:35 | 000,236,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2014-03-18 12:14:35 | 000,189,784 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UCX01000.SYS -- (UCX01000) DRV:[b]64bit:[/b] - [2014-03-18 12:14:35 | 000,057,176 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme) DRV:[b]64bit:[/b] - [2014-03-18 12:14:35 | 000,039,768 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep) DRV:[b]64bit:[/b] - [2014-03-18 12:14:35 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender) DRV:[b]64bit:[/b] - [2014-03-18 11:46:04 | 000,022,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\kbldfltr.sys -- (kbldfltr) DRV:[b]64bit:[/b] - [2014-03-18 11:46:02 | 000,027,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2014-03-18 11:45:53 | 000,220,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Vid.sys -- (Vid) DRV:[b]64bit:[/b] - [2014-03-18 11:45:53 | 000,129,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbusr.sys -- (vmbusr) DRV:[b]64bit:[/b] - [2014-03-18 11:45:53 | 000,068,608 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsp.sys -- (storvsp) DRV:[b]64bit:[/b] - [2014-03-18 11:45:53 | 000,065,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpcivsp.sys -- (vpcivsp) DRV:[b]64bit:[/b] - [2014-03-18 11:45:53 | 000,037,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt) DRV:[b]64bit:[/b] - [2013-08-22 15:25:40 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv) DRV:[b]64bit:[/b] - [2013-08-22 15:25:40 | 000,030,048 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2013-08-22 14:50:19 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam) DRV:[b]64bit:[/b] - [2013-08-22 14:49:54 | 000,079,712 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex) DRV:[b]64bit:[/b] - [2013-08-22 14:49:33 | 000,159,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM) DRV:[b]64bit:[/b] - [2013-08-22 14:43:49 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis) DRV:[b]64bit:[/b] - [2013-08-22 14:43:48 | 000,041,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32) DRV:[b]64bit:[/b] - [2013-08-22 14:43:45 | 003,357,024 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2013-08-22 14:43:45 | 000,093,536 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2013-08-22 14:43:45 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS) DRV:[b]64bit:[/b] - [2013-08-22 14:43:45 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2013-08-22 14:43:44 | 000,081,760 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3.sys -- (LSI_SAS3) DRV:[b]64bit:[/b] - [2013-08-22 14:43:41 | 000,782,176 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX) DRV:[b]64bit:[/b] - [2013-08-22 14:43:41 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2013-08-22 14:43:41 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2013-08-22 14:43:41 | 000,108,896 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware) DRV:[b]64bit:[/b] - [2013-08-22 14:43:41 | 000,079,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2013-08-22 14:43:40 | 000,114,016 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv) DRV:[b]64bit:[/b] - [2013-08-22 14:43:40 | 000,082,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass) DRV:[b]64bit:[/b] - [2013-08-22 14:43:40 | 000,025,952 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2013-08-22 14:43:34 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID) DRV:[b]64bit:[/b] - [2013-08-22 14:43:33 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor) DRV:[b]64bit:[/b] - [2013-08-22 14:43:32 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2013-08-22 14:43:31 | 000,107,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci) DRV:[b]64bit:[/b] - [2013-08-22 14:43:31 | 000,072,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx) DRV:[b]64bit:[/b] - [2013-08-22 14:43:31 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx) DRV:[b]64bit:[/b] - [2013-08-22 14:39:44 | 000,377,696 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS) DRV:[b]64bit:[/b] - [2013-08-22 14:39:15 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI) DRV:[b]64bit:[/b] - [2013-08-22 14:37:27 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci) DRV:[b]64bit:[/b] - [2013-08-22 14:36:12 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr) DRV:[b]64bit:[/b] - [2013-08-22 13:39:54 | 000,076,800 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache) DRV:[b]64bit:[/b] - [2013-08-22 13:39:31 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay) DRV:[b]64bit:[/b] - [2013-08-22 13:39:20 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo) DRV:[b]64bit:[/b] - [2013-08-22 13:39:06 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf) DRV:[b]64bit:[/b] - [2013-08-22 13:38:58 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime) DRV:[b]64bit:[/b] - [2013-08-22 13:38:48 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr) DRV:[b]64bit:[/b] - [2013-08-22 13:38:39 | 000,036,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg) DRV:[b]64bit:[/b] - [2013-08-22 13:38:26 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic) DRV:[b]64bit:[/b] - [2013-08-22 13:38:23 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter) DRV:[b]64bit:[/b] - [2013-08-22 13:38:22 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig) DRV:[b]64bit:[/b] - [2013-08-22 13:38:16 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid) DRV:[b]64bit:[/b] - [2013-08-22 13:37:49 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd) DRV:[b]64bit:[/b] - [2013-08-22 13:37:46 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2013-08-22 13:37:42 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum) DRV:[b]64bit:[/b] - [2013-08-22 13:37:28 | 000,056,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2013-08-22 13:37:28 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c) DRV:[b]64bit:[/b] - [2013-08-22 13:37:14 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc) DRV:[b]64bit:[/b] - [2013-08-22 13:36:43 | 000,087,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc63.sys -- (netvsc) DRV:[b]64bit:[/b] - [2013-08-22 13:36:25 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus) DRV:[b]64bit:[/b] - [2013-08-22 13:36:17 | 000,124,928 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform) DRV:[b]64bit:[/b] - [2013-08-22 13:36:07 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp) DRV:[b]64bit:[/b] - [2013-08-22 13:35:42 | 000,103,424 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu) DRV:[b]64bit:[/b] - [2013-08-22 10:46:33 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fxppm.sys -- (FxPPM) DRV:[b]64bit:[/b] - [2013-08-13 01:25:46 | 000,017,624 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2) DRV:[b]64bit:[/b] - [2013-08-10 02:39:30 | 000,651,248 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV) DRV:[b]64bit:[/b] - [2013-07-30 20:47:35 | 000,024,568 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO) DRV:[b]64bit:[/b] - [2013-07-25 21:05:39 | 000,099,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C) DRV:[b]64bit:[/b] - [2013-07-01 18:50:07 | 005,170,176 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL63AL.SYS -- (BCM43XX) DRV:[b]64bit:[/b] - [2013-06-18 16:46:17 | 000,591,360 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt630x64.sys -- (RTL8168) DRV:[b]64bit:[/b] - [2012-03-23 18:13:28 | 010,627,744 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.pl/?gfe_rd=cr&ei=97cqVMeuJo-LOrm2gMAN&gws_rd=ssl IE - HKCU\..\SearchScopes,DefaultScope = {828B376B-F2F6-4778-928C-E29EC877535E} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02 IE - HKCU\..\SearchScopes\{7C281982-291D-4C0A-9AA5-FC50B0AF9B15}: "URL" = http://www.google.com/search?hl=pl&q={searchTerms} IE - HKCU\..\SearchScopes\{828B376B-F2F6-4778-928C-E29EC877535E}: "URL" = http://www.google.com/cse?cx=partner-pub-0900663996874144:6813731868&ie=UTF-8&q={searchTerms}&sa=Search&ref=#gsc.tab=0&gsc.q={searchTerms}&gsc.page=1 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:32.0.2 FF - user.js - File not found [2014-09-30 01:25:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Adrian\AppData\Roaming\mozilla\Extensions [color=#E56717]========== Chrome ==========[/color] CHR - homepage: CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms} CHR - homepage: CHR - Extension: YouTube = C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Szukaj w Google = C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: Gmail = C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2013-08-22 15:25:41 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.20 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{59DE0B55-5971-4AF0-B834-2F7EBB1F305B}: DhcpNameServer = 192.168.1.20 O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\WINDOWS\SysWow64\userinit.exe (Microsoft Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2014-09-30 23:36:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\Panther [2014-09-30 23:35:36 | 000,000,000 | ---D | C] -- C:\Windows.old [2014-09-30 18:33:19 | 000,000,000 | ---D | C] -- C:\FRST [2014-09-30 17:24:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla [2014-09-30 16:51:14 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome [2014-09-30 16:13:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google [2014-09-30 15:26:47 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\drivers\pl-PL\wfplwfs.sys.mui [2014-09-30 15:26:47 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\wfplwfs.sys.mui [2014-09-30 15:26:36 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\drivers\pl-PL\NdisImPlatform.sys.mui [2014-09-30 15:26:36 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\NdisImPlatform.sys.mui [2014-09-30 15:26:36 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\drivers\pl-PL\ndiscap.sys.mui [2014-09-30 15:26:36 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\ndiscap.sys.mui [2014-09-30 15:26:33 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\vmswitch.sys.mui [2014-09-30 15:26:33 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\Vid.sys.mui [2014-09-30 15:26:33 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\storvsp.sys.mui [2014-09-30 15:26:32 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\usbport.sys.mui [2014-09-30 15:26:32 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\volsnap.sys.mui [2014-09-30 15:26:32 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\USBHUB3.SYS.mui [2014-09-30 15:26:32 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\USBXHCI.SYS.mui [2014-09-30 15:26:32 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\vhdmp.sys.mui [2014-09-30 15:26:32 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\usbhub.sys.mui [2014-09-30 15:26:32 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\UCX01000.SYS.mui [2014-09-30 15:26:32 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\tpm.sys.mui [2014-09-30 15:26:32 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\vdrvroot.sys.mui [2014-09-30 15:26:32 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\portcls.sys.mui [2014-09-30 15:26:32 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\BthA2DP.sys.mui [2014-09-30 15:26:32 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\usbehci.sys.mui [2014-09-30 15:26:32 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\umbus.sys.mui [2014-09-30 15:26:32 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\usbvideo.sys.mui [2014-09-30 15:26:32 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\USBSTOR.SYS.mui [2014-09-30 15:26:32 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\USBAUDIO.sys.mui [2014-09-30 15:26:31 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\spaceport.sys.mui [2014-09-30 15:26:31 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\sdbus.sys.mui [2014-09-30 15:26:31 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\dumpsd.sys.mui [2014-09-30 15:26:31 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\pcmcia.sys.mui [2014-09-30 15:26:31 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\sdstor.sys.mui [2014-09-30 15:26:31 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\serscan.sys.mui [2014-09-30 15:26:28 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\wmbclass.sys.mui [2014-09-30 15:26:28 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\rndismpx.sys.mui [2014-09-30 15:26:28 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\rndismp6.sys.mui [2014-09-30 15:26:28 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\vwifibus.sys.mui [2014-09-30 15:26:24 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\i8042prt.sys.mui [2014-09-30 15:26:24 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\serial.sys.mui [2014-09-30 15:26:24 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\ataport.sys.mui [2014-09-30 15:26:24 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\sermouse.sys.mui [2014-09-30 15:26:24 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\mouclass.sys.mui [2014-09-30 15:26:24 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\parport.sys.mui [2014-09-30 15:26:24 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\mssmbios.sys.mui [2014-09-30 15:26:24 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\mouhid.sys.mui [2014-09-30 15:26:24 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\MTConfig.sys.mui [2014-09-30 15:26:19 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\afd.sys.mui [2014-09-30 15:26:18 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\wdf01000.sys.mui [2014-09-30 15:26:18 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\usbrpm.sys.mui [2014-09-30 15:26:18 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\ws2ifsl.sys.mui [2014-09-30 15:26:17 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\tcpip.sys.mui [2014-09-30 15:26:17 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\tunnel.sys.mui [2014-09-30 15:26:17 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\modem.sys.mui [2014-09-30 15:26:15 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\srv2.sys.mui [2014-09-30 15:26:15 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\mrxsmb.sys.mui [2014-09-30 15:26:14 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\fvevol.sys.mui [2014-09-30 15:26:14 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\refs.sys.mui [2014-09-30 15:26:14 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\rdbss.sys.mui [2014-09-30 15:26:14 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\scfilter.sys.mui [2014-09-30 15:26:13 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\pacer.sys.mui [2014-09-30 15:26:13 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\qwavedrv.sys.mui [2014-09-30 15:26:13 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\partmgr.sys.mui [2014-09-30 15:26:13 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\pdc.sys.mui [2014-09-30 15:26:11 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\ntfs.sys.mui [2014-09-30 15:26:11 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\nwifi.sys.mui [2014-09-30 15:26:10 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\ndis.sys.mui [2014-09-30 15:26:10 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\ndisuio.sys.mui [2014-09-30 15:26:10 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\NdisVirtualBus.sys.mui [2014-09-30 15:26:10 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\mshidumdf.sys.mui [2014-09-30 15:26:09 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\mountmgr.sys.mui [2014-09-30 15:26:03 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\mslldp.sys.mui [2014-09-30 15:26:02 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\luafv.sys.mui [2014-09-30 15:26:01 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\http.sys.mui [2014-09-30 15:25:58 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\fltmgr.sys.mui [2014-09-30 15:25:57 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\wudfpf.sys.mui [2014-09-30 15:25:57 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\volmgrx.sys.mui [2014-09-30 15:25:52 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\bthport.sys.mui [2014-09-30 15:25:52 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\processr.sys.mui [2014-09-30 15:25:52 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\intelppm.sys.mui [2014-09-30 15:25:52 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\amdppm.sys.mui [2014-09-30 15:25:52 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\amdk8.sys.mui [2014-09-30 15:25:52 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\BthLEEnum.sys.mui [2014-09-30 15:25:52 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\1394ohci.sys.mui [2014-09-30 15:25:52 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\acpi.sys.mui [2014-09-30 15:25:52 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\pci.sys.mui [2014-09-30 15:25:52 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\EhStorTcgDrv.sys.mui [2014-09-30 15:25:52 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\battc.sys.mui [2014-09-30 15:25:52 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\IPMIDrv.sys.mui [2014-09-30 15:25:52 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\hidclass.sys.mui [2014-09-30 15:25:52 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\disk.sys.mui [2014-09-30 15:25:52 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\kbdclass.sys.mui [2014-09-30 15:25:52 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\bthpan.sys.mui [2014-09-30 15:25:52 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\wacompen.sys.mui [2014-09-30 15:25:52 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\isapnp.sys.mui [2014-09-30 15:25:52 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\hdaudbus.sys.mui [2014-09-30 15:25:52 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\hidi2c.sys.mui [2014-09-30 15:25:52 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\ULIAGPKX.SYS.mui [2014-09-30 15:25:52 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\NV_AGP.SYS.mui [2014-09-30 15:25:52 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\hidbth.sys.mui [2014-09-30 15:25:52 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\HdAudio.sys.mui [2014-09-30 15:25:52 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\GAGP30KX.SYS.mui [2014-09-30 15:25:52 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\BTHUSB.SYS.mui [2014-09-30 15:25:52 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\BthMini.SYS.mui [2014-09-30 15:25:52 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\bthhfenum.sys.mui [2014-09-30 15:25:52 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\UAGP35.SYS.mui [2014-09-30 15:25:52 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\pnpmem.sys.mui [2014-09-30 15:25:52 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\kbdhid.sys.mui [2014-09-30 15:25:52 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\cdrom.sys.mui [2014-09-30 15:25:52 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\BthhfHid.sys.mui [2014-09-30 15:25:52 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\BthAvrcpTg.sys.mui [2014-09-30 15:25:52 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\AGP440.sys.mui [2014-09-30 15:25:52 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\pl-PL\bthenum.sys.mui [2014-09-30 14:02:54 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Identities [2014-09-30 13:40:12 | 000,000,000 | -HSD | C] -- C:\Users\Adrian\AppData\Local\Temporary Internet Files [2014-09-30 13:40:12 | 000,000,000 | -HSD | C] -- C:\Users\Adrian\Templates [2014-09-30 13:40:12 | 000,000,000 | -HSD | C] -- C:\Users\Adrian\Start Menu [2014-09-30 13:40:12 | 000,000,000 | -HSD | C] -- C:\Users\Adrian\SendTo [2014-09-30 13:40:12 | 000,000,000 | -HSD | C] -- C:\Users\Adrian\Recent [2014-09-30 13:40:12 | 000,000,000 | -HSD | C] -- C:\Users\Adrian\PrintHood [2014-09-30 13:40:12 | 000,000,000 | -HSD | C] -- C:\Users\Adrian\NetHood [2014-09-30 13:40:12 | 000,000,000 | -HSD | C] -- C:\Users\Adrian\Documents\My Videos [2014-09-30 13:40:12 | 000,000,000 | -HSD | C] -- C:\Users\Adrian\Documents\My Pictures [2014-09-30 13:40:12 | 000,000,000 | -HSD | C] -- C:\Users\Adrian\Documents\My Music [2014-09-30 13:40:12 | 000,000,000 | -HSD | C] -- C:\Users\Adrian\My Documents [2014-09-30 13:40:12 | 000,000,000 | -HSD | C] -- C:\Users\Adrian\Local Settings [2014-09-30 13:40:12 | 000,000,000 | -HSD | C] -- C:\Users\Adrian\AppData\Local\History [2014-09-30 13:40:12 | 000,000,000 | -HSD | C] -- C:\Users\Adrian\Cookies [2014-09-30 13:40:12 | 000,000,000 | -HSD | C] -- C:\Users\Adrian\Application Data [2014-09-30 13:40:12 | 000,000,000 | -HSD | C] -- C:\Users\Adrian\AppData\Local\Application Data [2014-09-30 13:40:11 | 000,000,000 | --SD | C] -- C:\Users\Adrian\AppData\Roaming\Microsoft [2014-09-30 13:40:11 | 000,000,000 | R--D | C] -- C:\Users\Adrian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools [2014-09-30 13:40:11 | 000,000,000 | R--D | C] -- C:\Users\Adrian\Favorites [2014-09-30 13:40:11 | 000,000,000 | R--D | C] -- C:\Users\Adrian\Documents [2014-09-30 13:40:11 | 000,000,000 | R--D | C] -- C:\Users\Adrian\Desktop [2014-09-30 13:40:11 | 000,000,000 | R--D | C] -- C:\Users\Adrian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories [2014-09-30 13:40:11 | 000,000,000 | R--D | C] -- C:\Users\Adrian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility [2014-09-30 13:40:11 | 000,000,000 | -H-D | C] -- C:\Users\Adrian\AppData [2014-09-30 13:40:11 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\Temp [2014-09-30 13:40:11 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\Microsoft [2014-09-30 13:40:11 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance [2014-09-30 13:37:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch [2014-09-30 13:06:20 | 000,000,000 | -H-D | C] -- C:\$WINDOWS.~BT [2014-09-30 12:30:37 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\vlc [2014-09-30 12:30:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN [2014-09-30 02:10:21 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\uTorrent [2014-09-30 01:26:39 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\Google [2014-09-30 01:25:36 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Mozilla [2014-09-30 01:25:36 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\Mozilla [2014-09-29 23:59:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\drivers\pl-PL [2014-09-29 23:59:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\pl-PL [2014-09-29 23:59:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\pl [2014-09-29 23:59:00 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\drivers\pl-PL [2014-09-29 23:58:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\pl [2014-09-29 23:09:51 | 000,000,000 | -HSD | C] -- C:\Users\Adrian\AppData\Local\EmieUserList [2014-09-29 23:09:51 | 000,000,000 | -HSD | C] -- C:\Users\Adrian\AppData\Local\EmieSiteList [2014-09-29 22:28:49 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Macromedia [2014-09-29 22:23:46 | 000,000,000 | R--D | C] -- C:\Users\Adrian\OneDrive [2014-09-29 22:23:09 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\fportable [2014-09-29 22:20:50 | 000,000,000 | R--D | C] -- C:\Users\Adrian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup [2014-09-29 22:20:50 | 000,000,000 | R--D | C] -- C:\Users\Adrian\Searches [2014-09-29 22:20:50 | 000,000,000 | R--D | C] -- C:\Users\Adrian\Contacts [2014-09-29 22:20:50 | 000,000,000 | R--D | C] -- C:\Users\Adrian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools [2014-09-29 22:20:50 | 000,000,000 | -H-D | C] -- C:\Users\Adrian\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned [2014-09-29 22:20:47 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\VirtualStore [2014-09-29 22:20:47 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Local\Packages [2014-09-29 22:20:47 | 000,000,000 | ---D | C] -- C:\Users\Adrian\AppData\Roaming\Adobe [2014-09-29 22:18:12 | 000,000,000 | ---D | C] -- C:\Program Files\KMSpico [2014-09-29 22:18:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution [2014-09-29 22:17:51 | 000,000,000 | R--D | C] -- C:\Users\Adrian\Videos [2014-09-29 22:17:51 | 000,000,000 | R--D | C] -- C:\Users\Adrian\Saved Games [2014-09-29 22:17:51 | 000,000,000 | R--D | C] -- C:\Users\Adrian\Pictures [2014-09-29 22:17:51 | 000,000,000 | R--D | C] -- C:\Users\Adrian\Music [2014-09-29 22:17:51 | 000,000,000 | R--D | C] -- C:\Users\Adrian\Links [2014-09-29 22:17:51 | 000,000,000 | R--D | C] -- C:\Users\Adrian\Downloads [2014-09-29 22:06:36 | 000,000,000 | ---D | C] -- C:\WINDOWS\CSC [2014-09-29 21:58:16 | 000,000,000 | -HSD | C] -- C:\System Volume Information [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2014-10-01 00:03:34 | 001,735,328 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI [2014-10-01 00:03:34 | 000,770,504 | ---- | M] () -- C:\WINDOWS\SysNative\perfh015.dat [2014-10-01 00:03:34 | 000,687,180 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat [2014-10-01 00:03:34 | 000,155,698 | ---- | M] () -- C:\WINDOWS\SysNative\perfc015.dat [2014-10-01 00:03:34 | 000,127,812 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat [2014-10-01 00:00:58 | 000,002,434 | ---- | M] () -- C:\Users\Adrian\Desktop\Google Chrome.lnk [2014-09-30 23:53:31 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2014-09-30 23:51:31 | 000,337,840 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT [2014-09-30 23:51:18 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys [2014-09-30 23:51:17 | 1684,930,560 | -HS- | M] () -- C:\hiberfil.sys [2014-09-30 15:36:10 | 000,342,912 | ---- | M] () -- C:\WINDOWS\SysNative\perfi015.dat [2014-09-30 15:36:10 | 000,041,236 | ---- | M] () -- C:\WINDOWS\SysNative\perfd015.dat [2014-09-30 13:49:48 | 000,022,863 | ---- | M] () -- C:\WINDOWS\diagwrn.xml [2014-09-30 13:49:48 | 000,022,863 | ---- | M] () -- C:\WINDOWS\diagerr.xml [2014-09-30 13:48:50 | 000,022,744 | ---- | M] () -- C:\WINDOWS\SysNative\emptyregdb.dat [2014-09-30 13:37:42 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf [2014-09-30 12:30:05 | 000,000,507 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk [2014-09-30 02:11:24 | 000,000,903 | ---- | M] () -- C:\Users\Adrian\Desktop\µTorrent.lnk [2014-09-30 02:11:24 | 000,000,883 | ---- | M] () -- C:\Users\Adrian\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk [2014-09-30 01:24:16 | 000,000,017 | ---- | M] () -- C:\Users\Adrian\AppData\Local\resmon.resmoncfg [2014-09-29 22:27:39 | 000,001,436 | ---- | M] () -- C:\Users\Adrian\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [2014-09-29 22:27:39 | 000,000,223 | -HS- | M] () -- C:\Users\Adrian\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop (1).ini [2014-09-29 22:23:04 | 000,073,728 | ---- | M] () -- C:\Users\Adrian\AppData\Local\Web Data [2014-09-29 22:18:30 | 000,004,608 | ---- | M] () -- C:\WINDOWS\SECOH-QAD.exe [2014-09-29 22:18:30 | 000,003,584 | ---- | M] () -- C:\WINDOWS\SECOH-QAD.dll [2014-09-29 21:22:41 | 129,955,328 | ---- | M] () -- C:\WINDOWS\Update.exe [color=#E56717]========== Files Created - No Company Name ==========[/color] [2014-09-30 17:01:54 | 000,002,434 | ---- | C] () -- C:\Users\Adrian\Desktop\Google Chrome.lnk [2014-09-30 14:02:58 | 000,001,448 | ---- | C] () -- C:\Users\Adrian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk [2014-09-30 13:48:50 | 000,022,744 | ---- | C] () -- C:\WINDOWS\SysNative\emptyregdb.dat [2014-09-30 13:43:35 | 000,001,547 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk [2014-09-30 13:40:12 | 000,000,369 | ---- | C] () -- C:\Users\Adrian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk [2014-09-30 13:40:12 | 000,000,369 | ---- | C] () -- C:\Users\Adrian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk [2014-09-30 13:40:12 | 000,000,352 | ---- | C] () -- C:\Users\Adrian\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk [2014-09-30 13:40:12 | 000,000,334 | ---- | C] () -- C:\Users\Adrian\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk [2014-09-30 13:40:00 | 000,022,863 | ---- | C] () -- C:\WINDOWS\diagwrn.xml [2014-09-30 13:40:00 | 000,022,863 | ---- | C] () -- C:\WINDOWS\diagerr.xml [2014-09-30 13:37:42 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf [2014-09-30 12:30:05 | 000,000,507 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk [2014-09-30 02:11:24 | 000,000,903 | ---- | C] () -- C:\Users\Adrian\Desktop\µTorrent.lnk [2014-09-30 02:11:24 | 000,000,883 | ---- | C] () -- C:\Users\Adrian\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk [2014-09-30 01:24:16 | 000,000,017 | ---- | C] () -- C:\Users\Adrian\AppData\Local\resmon.resmoncfg [2014-09-30 00:00:06 | 000,770,504 | ---- | C] () -- C:\WINDOWS\SysNative\perfh015.dat [2014-09-30 00:00:06 | 000,342,912 | ---- | C] () -- C:\WINDOWS\SysNative\perfi015.dat [2014-09-30 00:00:06 | 000,155,698 | ---- | C] () -- C:\WINDOWS\SysNative\perfc015.dat [2014-09-30 00:00:06 | 000,041,236 | ---- | C] () -- C:\WINDOWS\SysNative\perfd015.dat [2014-09-29 22:27:39 | 000,001,436 | ---- | C] () -- C:\Users\Adrian\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [2014-09-29 22:23:25 | 000,073,728 | ---- | C] () -- C:\Users\Adrian\AppData\Local\Web Data [2014-09-29 22:18:30 | 000,004,608 | ---- | C] () -- C:\WINDOWS\SECOH-QAD.exe [2014-09-29 22:18:30 | 000,003,584 | ---- | C] () -- C:\WINDOWS\SECOH-QAD.dll [2014-09-29 22:18:08 | 129,955,328 | ---- | C] () -- C:\WINDOWS\Update.exe [2014-09-29 22:17:51 | 000,000,223 | -HS- | C] () -- C:\Users\Adrian\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop (1).ini [2014-09-29 22:01:32 | 1684,930,560 | -HS- | C] () -- C:\hiberfil.sys [2014-09-29 21:58:18 | 268,435,456 | -HS- | C] () -- C:\swapfile.sys [2014-03-18 12:15:05 | 000,002,255 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini [2014-03-18 12:14:37 | 000,103,936 | ---- | C] () -- C:\WINDOWS\SysWow64\OEMLicense.dll [2013-08-22 17:36:43 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat [2013-08-22 17:36:42 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT [2013-08-22 16:46:23 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2013-08-22 09:01:23 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin [2013-08-22 05:32:36 | 000,046,080 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll [2013-08-22 01:55:20 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll [2013-08-22 01:52:39 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2014-03-18 12:15:00 | 021,230,744 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2014-03-18 12:15:12 | 018,682,288 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2013-08-22 11:49:49 | 000,921,088 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2013-08-22 04:45:10 | 000,691,712 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2013-08-22 11:45:17 | 000,483,840 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 220 bytes -> C:\Users\Adrian\OneDrive:ms-properties < End of report >