OTL logfile created on: 2014-10-17 22:20:59 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\p.a.j\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17358) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 5,90 Gb Total Physical Memory | 2,25 Gb Available Physical Memory | 38,18% Memory free 11,80 Gb Paging File | 8,37 Gb Available in Paging File | 70,98% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 906,69 Gb Total Space | 804,80 Gb Free Space | 88,76% Space Free | Partition Type: NTFS Computer Name: PAJ-KOMPUTER | User Name: p.a.j | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2014-10-17 22:19:45 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\p.a.j\Downloads\OTL.exe PRC - [2014-09-29 08:53:16 | 000,037,152 | ---- | M] (Glarysoft Ltd) -- C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe PRC - [2014-09-17 04:15:08 | 002,460,488 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe PRC - [2014-09-17 04:14:57 | 001,795,912 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe PRC - [2014-09-10 12:31:17 | 000,076,152 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2014-08-08 13:34:26 | 000,279,488 | ---- | M] (Bitdefender) -- C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwtxapps.exe PRC - [2014-08-04 15:45:12 | 009,238,472 | ---- | M] (TeamSpeak Systems GmbH) -- C:\Program Files (x86)\TeamSpeak 3 Client\ts3client_win32.exe PRC - [2014-06-26 07:44:06 | 000,535,304 | ---- | M] (ESET) -- C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe PRC - [2014-06-26 07:44:02 | 000,358,144 | ---- | M] () -- C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe PRC - [2014-05-21 12:21:10 | 001,261,248 | ---- | M] (Comodo) -- C:\Program Files (x86)\Comodo\Dragon\dragon.exe PRC - [2013-09-11 21:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe PRC - [2013-08-07 14:24:00 | 000,287,592 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe PRC - [2013-08-07 14:24:00 | 000,015,720 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe PRC - [2012-10-30 10:03:54 | 004,471,416 | ---- | M] (SEC) -- C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe PRC - [2011-08-17 09:19:18 | 000,136,488 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe PRC - [2009-11-02 07:21:26 | 000,103,720 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe PRC - [2000-01-01 02:00:00 | 000,390,616 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2000-01-01 02:00:00 | 000,292,088 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe PRC - [2000-01-01 02:00:00 | 000,169,432 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe PRC - [2000-01-01 02:00:00 | 000,131,544 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2014-10-14 22:22:53 | 002,997,248 | ---- | M] () -- C:\windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\92a3b88ac6300af062edd6503bc5903c\System.IdentityModel.ni.dll MOD - [2014-10-14 22:22:50 | 019,696,640 | ---- | M] () -- C:\windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\316b149dbb031d0e35c9d57bb2fc4b6e\System.ServiceModel.ni.dll MOD - [2014-10-14 22:22:40 | 001,091,072 | ---- | M] () -- C:\windows\assembly\NativeImages_v4.0.30319_32\System.Servf73e6522#\8c9f9e94e93956d68b43e34324790c6d\System.ServiceModel.Web.ni.dll MOD - [2014-10-14 21:56:52 | 001,889,792 | ---- | M] () -- C:\windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\8b133e0d94535a7534719f70873ca7fe\System.Xaml.ni.dll MOD - [2014-10-14 21:56:39 | 012,894,208 | ---- | M] () -- C:\windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\db563d596d76daed04e9b5d25b2f4cb9\System.Windows.Forms.ni.dll MOD - [2014-10-14 21:56:31 | 007,668,736 | ---- | M] () -- C:\windows\assembly\NativeImages_v4.0.30319_32\System.Xml\7147fa233a070283dba824da40089bf1\System.Xml.ni.dll MOD - [2014-10-14 21:56:28 | 001,644,544 | ---- | M] () -- C:\windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\b4c08872c259018b17b2801da33ac80f\System.Drawing.ni.dll MOD - [2014-10-14 21:56:27 | 002,822,144 | ---- | M] () -- C:\windows\assembly\NativeImages_v4.0.30319_32\System.Runteb92aa12#\f9f13cd8fe1cefaad78579a7c3a41464\System.Runtime.Serialization.ni.dll MOD - [2014-10-14 21:56:27 | 000,122,880 | ---- | M] () -- C:\windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\046058f81b039ab6fd839e03e67595f8\SMDiagnostics.ni.dll MOD - [2014-10-14 21:56:26 | 000,794,112 | ---- | M] () -- C:\windows\assembly\NativeImages_v4.0.30319_32\System.Servd1dec626#\35d3a1b878542de59cb4fc0593992404\System.ServiceModel.Internals.ni.dll MOD - [2014-10-14 21:56:25 | 006,990,336 | ---- | M] () -- C:\windows\assembly\NativeImages_v4.0.30319_32\System.Core\691c1ad89d16f49d80e84fa06a79089a\System.Core.ni.dll MOD - [2014-10-14 21:56:22 | 000,976,384 | ---- | M] () -- C:\windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\0648dbecb7e3fb9523565107e04a5caf\System.Configuration.ni.dll MOD - [2014-10-14 21:56:18 | 010,100,736 | ---- | M] () -- C:\windows\assembly\NativeImages_v4.0.30319_32\System\17a393b77ae757f0768501fb95ff5af6\System.ni.dll MOD - [2014-09-29 08:53:30 | 000,080,160 | ---- | M] () -- C:\Program Files (x86)\Glary Utilities 5\zlib1.dll MOD - [2014-09-14 01:48:03 | 000,012,104 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\coprocmanager\detoured.dll MOD - [2014-09-10 16:58:20 | 016,825,520 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll MOD - [2014-09-09 10:47:57 | 016,953,856 | ---- | M] () -- C:\windows\assembly\NativeImages_v4.0.30319_32\mscorlib\ce5f61c5754789df97be8dc991c47d07\mscorlib.ni.dll MOD - [2014-08-04 15:45:58 | 000,484,808 | ---- | M] () -- C:\Program Files (x86)\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll MOD - [2014-08-04 15:45:56 | 000,477,128 | ---- | M] () -- C:\Program Files (x86)\TeamSpeak 3 Client\plugins\clientquery_plugin.dll MOD - [2014-08-04 15:43:30 | 000,105,416 | ---- | M] () -- C:\Program Files (x86)\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win32.dll MOD - [2014-08-04 15:43:28 | 000,092,104 | ---- | M] () -- C:\Program Files (x86)\TeamSpeak 3 Client\soundbackends\directsound_win32.dll MOD - [2014-06-26 07:44:02 | 000,358,144 | ---- | M] () -- C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe MOD - [2014-05-21 12:16:30 | 000,895,168 | ---- | M] () -- C:\Program Files (x86)\Comodo\Dragon\ffmpegsumo.dll MOD - [2014-05-21 12:15:04 | 000,909,504 | ---- | M] () -- C:\Program Files (x86)\Comodo\Dragon\libGLESv2.dll MOD - [2014-05-21 12:14:54 | 000,109,248 | ---- | M] () -- C:\Program Files (x86)\Comodo\Dragon\libEGL.dll MOD - [2014-05-21 12:14:04 | 000,052,416 | ---- | M] () -- C:\Program Files (x86)\Comodo\Dragon\chrome_elf.dll MOD - [2014-02-28 15:33:58 | 000,148,480 | ---- | M] () -- C:\Program Files (x86)\TeamSpeak 3 Client\quazip.dll MOD - [2014-02-27 15:46:38 | 000,864,768 | ---- | M] () -- C:\Program Files (x86)\TeamSpeak 3 Client\platforms\qwindows.dll MOD - [2014-02-27 15:46:16 | 000,123,904 | ---- | M] () -- C:\Program Files (x86)\TeamSpeak 3 Client\accessible\qtaccessiblewidgets.dll MOD - [2014-02-27 15:46:12 | 000,025,600 | ---- | M] () -- C:\Program Files (x86)\TeamSpeak 3 Client\imageformats\qgif.dll MOD - [2014-02-27 15:46:02 | 000,242,688 | ---- | M] () -- C:\Program Files (x86)\TeamSpeak 3 Client\imageformats\qjpeg.dll MOD - [2014-02-27 15:45:52 | 000,677,376 | ---- | M] () -- C:\Program Files (x86)\TeamSpeak 3 Client\sqldrivers\qsqlite.dll MOD - [2011-09-08 19:40:10 | 001,645,056 | ---- | M] () -- C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\Resdll.dll MOD - [2009-11-02 07:23:36 | 000,013,096 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll MOD - [2009-11-02 07:20:10 | 000,619,816 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2014-09-19 03:25:49 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService) SRV:[b]64bit:[/b] - [2014-09-17 04:14:56 | 001,148,744 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe -- (GfExperienceService) SRV:[b]64bit:[/b] - [2014-09-17 04:14:52 | 019,439,944 | ---- | M] (NVIDIA Corporation) [Disabled | Stopped] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe -- (NvStreamSvc) SRV:[b]64bit:[/b] - [2014-08-11 22:06:26 | 001,513,952 | ---- | M] (Bitdefender) [Auto | Running] -- C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe -- (VSSERV) SRV:[b]64bit:[/b] - [2014-08-08 13:43:57 | 000,067,320 | ---- | M] (Bitdefender) [Auto | Running] -- C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe -- (UPDATESRV) SRV:[b]64bit:[/b] - [2014-08-08 13:32:25 | 000,077,632 | ---- | M] (Bitdefender) [On_Demand | Stopped] -- C:\Program Files\Bitdefender\Bitdefender 2015\bdparentalservice.exe -- (BdDesktopParental) SRV:[b]64bit:[/b] - [2013-08-27 14:32:30 | 000,828,376 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe -- (Intel(R) SRV:[b]64bit:[/b] - [2013-08-27 14:32:14 | 000,747,520 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R) SRV:[b]64bit:[/b] - [2013-08-07 14:24:00 | 000,015,720 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) SRV:[b]64bit:[/b] - [2013-05-27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2013-05-08 15:09:34 | 003,385,584 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe -- (ZeroConfigService) SRV:[b]64bit:[/b] - [2013-05-08 15:09:26 | 000,273,136 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS) SRV:[b]64bit:[/b] - [2013-05-08 15:09:18 | 000,621,296 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) SRV:[b]64bit:[/b] - [2013-05-08 15:09:06 | 000,149,744 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) SRV:[b]64bit:[/b] - [2013-04-11 02:12:50 | 000,772,064 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3) SRV:[b]64bit:[/b] - [2012-09-12 18:07:06 | 000,135,984 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr) SRV:[b]64bit:[/b] - [2010-09-22 11:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc) SRV - [2014-10-07 13:52:21 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2014-09-24 07:09:08 | 000,114,288 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2014-09-17 04:14:57 | 001,795,912 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService) SRV - [2014-09-12 11:43:06 | 000,064,704 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2014-09-10 12:31:17 | 000,076,152 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2014-08-28 15:18:20 | 003,000,664 | ---- | M] (Samsung Electronics CO., LTD.) [Disabled | Stopped] -- C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe -- (SWUpdateService) SRV - [2014-08-22 09:04:08 | 000,009,216 | ---- | M] (Hi-Rez Studios) [Auto | Paused] -- C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe -- (HiPatchService) SRV - [2014-05-21 12:22:08 | 002,135,232 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe -- (DragonUpdater) SRV - [2014-05-12 07:24:42 | 000,860,472 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2014-05-12 07:24:40 | 001,809,720 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler) SRV - [2014-03-21 00:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2013-12-19 10:07:52 | 001,821,384 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\Comodo\IceDragon\icedragon_updater.exe -- (IceDragonUpdater) SRV - [2013-09-11 21:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2012-06-11 15:11:08 | 000,276,288 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs) SRV - [2012-02-13 15:02:24 | 000,031,624 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Samsung\Easy Settings\SamsungDeviceConfiguration.exe -- (SamsungDeviceConfigurationWinService) SRV - [2011-12-19 12:16:50 | 001,104,208 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe -- (Bluetooth OBEX Service) SRV - [2011-12-19 12:16:48 | 001,304,912 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe -- (Bluetooth Media Service) SRV - [2011-12-19 12:16:44 | 001,014,096 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe -- (Bluetooth Device Monitor) SRV - [2000-01-01 02:00:00 | 000,390,616 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2000-01-01 02:00:00 | 000,169,432 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe -- (jhi_service) SRV - [2000-01-01 02:00:00 | 000,131,544 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe -- (Intel(R) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2014-10-07 12:33:50 | 000,020,160 | ---- | M] (Glarysoft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\GUBootStartup.sys -- (GUBootStartup) DRV:[b]64bit:[/b] - [2014-09-17 04:14:52 | 000,019,272 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys -- (NvStreamKms) DRV:[b]64bit:[/b] - [2014-09-14 01:48:03 | 000,032,576 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt) DRV:[b]64bit:[/b] - [2014-09-04 21:14:38 | 000,038,048 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible) DRV:[b]64bit:[/b] - [2014-07-02 17:47:12 | 000,419,616 | ---- | M] (BitDefender S.R.L.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\trufos.sys -- (trufos) DRV:[b]64bit:[/b] - [2014-05-16 13:04:02 | 000,647,752 | ---- | M] (BitDefender) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\avckf.sys -- (avckf) DRV:[b]64bit:[/b] - [2014-05-16 13:01:02 | 001,260,120 | ---- | M] (BitDefender) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avc3.sys -- (avc3) DRV:[b]64bit:[/b] - [2014-05-12 07:26:10 | 000,063,704 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mwac.sys -- (MBAMWebAccessControl) DRV:[b]64bit:[/b] - [2014-05-12 07:26:00 | 000,091,352 | ---- | M] (Malwarebytes Corporation) [File_System | System | Running] -- C:\Windows\SysNative\drivers\mbamchameleon.sys -- (mbamchameleon) DRV:[b]64bit:[/b] - [2014-05-12 07:25:56 | 000,025,816 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector) DRV:[b]64bit:[/b] - [2014-03-19 02:24:40 | 000,059,160 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt) DRV:[b]64bit:[/b] - [2014-03-19 02:24:38 | 000,076,568 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt) DRV:[b]64bit:[/b] - [2013-11-13 15:41:29 | 000,093,600 | ---- | M] (BitDefender LLC) [Kernel | System | Running] -- c:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf6.sys -- (BdfNdisf) DRV:[b]64bit:[/b] - [2013-11-04 15:47:36 | 000,082,824 | ---- | M] (BitDefender SRL) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bdsandbox.sys -- (BDSandBox) DRV:[b]64bit:[/b] - [2013-10-02 04:22:20 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2013-08-23 13:48:49 | 000,150,256 | ---- | M] (BitDefender LLC) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\gzflt.sys -- (gzflt) DRV:[b]64bit:[/b] - [2013-08-07 14:23:46 | 000,644,968 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorA.sys -- (iaStorA) DRV:[b]64bit:[/b] - [2013-08-07 14:23:46 | 000,028,008 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorF.sys -- (iaStorF) DRV:[b]64bit:[/b] - [2013-07-02 14:04:11 | 000,121,928 | ---- | M] (Bitdefender SRL) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys -- (bdfwfpf_pc) DRV:[b]64bit:[/b] - [2013-05-08 06:45:44 | 011,524,096 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwsw00.sys -- (NETwNs64) DRV:[b]64bit:[/b] - [2013-04-11 02:13:08 | 000,164,832 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP) DRV:[b]64bit:[/b] - [2013-04-11 02:13:08 | 000,164,832 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL) DRV:[b]64bit:[/b] - [2012-11-02 13:17:46 | 000,261,056 | ---- | M] (BitDefender) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\avchv.sys -- (avchv) DRV:[b]64bit:[/b] - [2012-11-01 15:35:14 | 000,253,256 | ---- | M] (PC Tools) [Kernel | Disabled | Running] -- C:\Windows\SysNative\drivers\PCTSD64.sys -- (PCTSD) DRV:[b]64bit:[/b] - [2012-10-29 14:23:56 | 000,107,080 | ---- | M] (BitDefender LLC) [Kernel | System | Running] -- C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys -- (bdfwfpf) DRV:[b]64bit:[/b] - [2012-10-09 18:48:52 | 000,035,256 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible) DRV:[b]64bit:[/b] - [2012-10-09 18:48:52 | 000,025,528 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus) DRV:[b]64bit:[/b] - [2012-10-09 18:48:50 | 000,188,896 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\xHCIPort.sys -- (XHCIPort) DRV:[b]64bit:[/b] - [2012-10-09 18:48:50 | 000,047,072 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usb3Hub.sys -- (usb3Hub) DRV:[b]64bit:[/b] - [2012-08-23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2012-08-23 16:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2012-05-17 12:57:06 | 000,026,136 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ICCWDT.sys -- (ICCWDT) DRV:[b]64bit:[/b] - [2012-03-26 19:09:54 | 014,748,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2012-01-05 11:53:04 | 000,410,384 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:[b]64bit:[/b] - [2011-12-14 07:26:56 | 000,060,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iBtFltCoex.sys -- (ibtfltcoex) DRV:[b]64bit:[/b] - [2011-12-13 04:26:20 | 000,747,008 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btmhsf.sys -- (btmhsf) DRV:[b]64bit:[/b] - [2011-12-13 04:26:18 | 000,094,720 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btmaux.sys -- (btmaux) DRV:[b]64bit:[/b] - [2011-12-08 08:23:54 | 000,013,824 | ---- | M] (SAMSUNG ELECTRONICS) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\SABI.sys -- (SABI) DRV:[b]64bit:[/b] - [2011-12-05 20:23:08 | 000,331,264 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) DRV:[b]64bit:[/b] - [2011-11-29 12:40:32 | 000,568,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2011-08-17 09:19:38 | 000,031,216 | ---- | M] (CyberLink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\clwvd.sys -- (clwvd) DRV:[b]64bit:[/b] - [2011-04-11 12:55:24 | 000,007,680 | ---- | M] (Phoenix Technologies Ltd.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\SGDrv64.sys -- (SGDrv) DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2000-01-01 02:00:00 | 000,795,632 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc) DRV:[b]64bit:[/b] - [2000-01-01 02:00:00 | 000,685,160 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2000-01-01 02:00:00 | 000,358,896 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub) DRV:[b]64bit:[/b] - [2000-01-01 02:00:00 | 000,100,312 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\TeeDriverx64.sys -- (MEIx64) DRV:[b]64bit:[/b] - [2000-01-01 02:00:00 | 000,020,464 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs) DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=SMSTDF&pc=MASM&src=IE-SearchBox IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://samsung.msn.com IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledAddons: bdwteff%40bitdefender.com:2.0 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:32.0.3 FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@esn/npbattlelog,version=2.5.1: C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll (EA Digital Illusions CE AB) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF - HKLM\Software\MozillaPlugins\@esn/npbattlelog,version=2.5.1: C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll (EA Digital Illusions CE AB) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\PROGRAM FILES\BITDEFENDER\BITDEFENDER 2015\BDTBEXT [2014-09-04 15:29:50 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{F003DA68-8256-4b37-A6C4-350FA04494DF}: C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\bdwteff@bitdefender.com: C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff\ [2014-09-04 15:29:57 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 32.0.3\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 32.0.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\Program Files\Bitdefender\Bitdefender 2015\bdtbext [2014-09-04 15:29:50 | 000,000,000 | ---D | M] [2014-09-08 14:41:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\p.a.j\AppData\Roaming\mozilla\Extensions [2014-10-03 10:48:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\p.a.j\AppData\Roaming\mozilla\Firefox\Profiles\itdxdi4d.default\extensions [2014-10-02 20:37:28 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions [2014-10-02 20:37:28 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2014-09-04 15:29:57 | 000,000,000 | ---D | M] (Bitdefender Wallet) -- C:\PROGRAM FILES\BITDEFENDER\BITDEFENDER 2015\ANTISPAM32\BDWTEFF O1 HOSTS File: ([2014-10-17 20:34:50 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Portfel Bitdefender) - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll (Bitdefender) O3 - HKLM\..\Toolbar: (Portfel Bitdefender) - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\pmbxie.dll (Bitdefender) O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3:[b]64bit:[/b] - HKCU\..\Toolbar\WebBrowser: (Portfel Bitdefender) - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll (Bitdefender) O3 - HKCU\..\Toolbar\WebBrowser: (Portfel Bitdefender) - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\pmbxie.dll (Bitdefender) O4:[b]64bit:[/b] - HKLM..\Run: [Bdagent] C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe (Bitdefender) O4:[b]64bit:[/b] - HKLM..\Run: [IAStorIcon] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe (Intel Corporation) O4 - HKCU..\Run: [Agent Portfela Bitdefender] C:\Program Files\Bitdefender\Bitdefender 2015\bdwtxag.exe (Bitdefender) O4 - HKCU..\Run: [GUDelayStartup] C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe (Glarysoft Ltd) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A9CDBBDA-4727-4C9D-BFC9-CF0067FA3382}: DhcpNameServer = 192.168.1.1 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\System32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation) O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\windows\SysNative\igfxdev.dll (Intel Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2014-10-17 22:20:29 | 000,000,000 | ---D | C] -- C:\FRST [2014-10-17 20:51:57 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN [2014-10-17 20:10:42 | 000,000,000 | ---D | C] -- C:\windows\erdnt [2014-10-16 21:22:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET [2014-10-16 20:47:34 | 000,000,000 | ---D | C] -- C:\Users\p.a.j\Doctor Web [2014-10-16 20:35:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Symantec [2014-10-16 20:35:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NortonInstaller [2014-10-16 20:18:26 | 000,000,000 | ---D | C] -- C:\ProgramData\GlarySoft [2014-10-15 19:29:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PC Tools [2014-10-15 19:13:33 | 000,000,000 | ---D | C] -- C:\Users\p.a.j\AppData\Roaming\Crystal Security [2014-10-15 18:12:22 | 000,253,256 | ---- | C] (PC Tools) -- C:\windows\SysNative\drivers\PCTSD64.sys [2014-10-15 18:12:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PC Tools [2014-10-15 18:11:02 | 000,000,000 | ---D | C] -- C:\ProgramData\PC Tools [2014-10-15 18:11:00 | 000,000,000 | ---D | C] -- C:\Users\p.a.j\AppData\Roaming\TestApp [2014-10-15 18:10:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Licenses [2014-10-15 18:10:35 | 001,070,352 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\MSCOMCTL.OCX [2014-10-15 18:10:35 | 000,129,872 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\MSSTDFMT.DLL [2014-10-15 18:09:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy [2014-10-14 21:27:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft ASP.NET [2014-10-14 20:57:07 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\packager.dll [2014-10-14 20:57:07 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\packager.dll [2014-10-14 20:57:00 | 001,943,696 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\dfshim.dll [2014-10-14 20:57:00 | 001,131,664 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\dfshim.dll [2014-10-14 20:57:00 | 000,156,824 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mscorier.dll [2014-10-14 20:57:00 | 000,156,312 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\mscorier.dll [2014-10-14 20:57:00 | 000,073,880 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\mscories.dll [2014-10-14 20:56:59 | 000,081,560 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mscories.dll [2014-10-14 20:56:48 | 003,179,520 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\rdpcorets.dll [2014-10-14 20:56:24 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieetwproxystub.dll [2014-10-14 20:56:24 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\iernonce.dll [2014-10-14 20:56:23 | 000,710,656 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ie4uinit.exe [2014-10-14 20:56:23 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\jscript9diag.dll [2014-10-14 20:56:23 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmled.dll [2014-10-14 20:56:23 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\JavaScriptCollectionAgent.dll [2014-10-14 20:56:23 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\iernonce.dll [2014-10-14 20:56:22 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\JavaScriptCollectionAgent.dll [2014-10-14 20:56:22 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieetwproxystub.dll [2014-10-14 20:56:21 | 002,017,280 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\inetcpl.cpl [2014-10-14 20:56:21 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\iesetup.dll [2014-10-14 20:56:20 | 000,731,136 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msfeeds.dll [2014-10-14 20:56:20 | 000,446,464 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\dxtmsft.dll [2014-10-14 20:56:20 | 000,440,320 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieui.dll [2014-10-14 20:56:20 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieetwcollector.exe [2014-10-14 20:56:20 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieetwcollectorres.dll [2014-10-14 20:56:19 | 002,108,416 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\inetcpl.cpl [2014-10-14 20:56:19 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\iesetup.dll [2014-10-14 20:56:18 | 001,068,032 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmlmedia.dll [2014-10-14 20:56:18 | 000,678,400 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieapfltr.dll [2014-10-14 20:56:18 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\msrating.dll [2014-10-14 20:56:18 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieUnatt.exe [2014-10-14 20:56:18 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\MshtmlDac.dll [2014-10-14 20:56:17 | 001,249,280 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\mshtmlmedia.dll [2014-10-14 20:56:17 | 000,595,968 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieui.dll [2014-10-14 20:56:17 | 000,289,280 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\dxtrans.dll [2014-10-14 20:56:17 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\mshtmled.dll [2014-10-14 20:56:16 | 005,829,632 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript9.dll [2014-10-14 20:56:16 | 000,775,168 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieapfltr.dll [2014-10-14 20:56:16 | 000,758,272 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript9diag.dll [2014-10-14 20:56:16 | 000,547,328 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\vbscript.dll [2014-10-14 20:56:16 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieUnatt.exe [2014-10-14 20:56:15 | 000,940,032 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\MsSpellCheckingFacility.exe [2014-10-14 20:56:15 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msrating.dll [2014-10-14 20:56:15 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\MshtmlDac.dll [2014-10-14 20:55:27 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\winsta.dll [2014-10-14 20:55:26 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\winlogon.exe [2014-10-14 20:55:26 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\rdpcorekmts.dll [2014-10-14 20:55:05 | 006,584,320 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\mstscax.dll [2014-10-14 20:55:04 | 005,703,168 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mstscax.dll [2014-10-14 20:54:36 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\rastls.dll [2014-10-14 20:54:36 | 000,372,736 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\rastls.dll [2014-10-07 13:39:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2015 [2014-10-07 13:39:25 | 000,093,600 | ---- | C] (BitDefender LLC) -- C:\windows\SysNative\drivers\BdfNdisf6.sys [2014-10-07 13:39:25 | 000,082,824 | ---- | C] (BitDefender SRL) -- C:\windows\SysNative\drivers\bdsandbox.sys [2014-10-07 13:39:22 | 001,260,120 | ---- | C] (BitDefender) -- C:\windows\SysNative\drivers\avc3.sys [2014-10-07 13:39:22 | 000,647,752 | ---- | C] (BitDefender) -- C:\windows\SysNative\drivers\avckf.sys [2014-10-07 13:38:41 | 000,000,000 | ---D | C] -- C:\Users\p.a.j\AppData\Roaming\Bitdefender [2014-10-07 13:35:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Bitdefender [2014-10-07 13:35:44 | 000,150,256 | ---- | C] (BitDefender LLC) -- C:\windows\SysNative\drivers\gzflt.sys [2014-10-07 13:35:43 | 000,419,616 | ---- | C] (BitDefender S.R.L.) -- C:\windows\SysNative\drivers\trufos.sys [2014-10-07 13:08:19 | 000,000,000 | ---D | C] -- C:\Program Files\Bitdefender [2014-10-07 12:34:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5 [2014-10-07 12:33:50 | 000,020,160 | ---- | C] (Glarysoft Ltd) -- C:\windows\SysNative\drivers\GUBootStartup.sys [2014-10-07 12:33:46 | 000,000,000 | ---D | C] -- C:\Users\p.a.j\AppData\Roaming\GlarySoft [2014-10-07 12:33:46 | 000,000,000 | ---D | C] -- C:\Users\p.a.j\AppData\Roaming\DiskDefrag [2014-10-07 12:32:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Glary Utilities 5 [2014-10-05 17:10:43 | 000,000,000 | ---D | C] -- C:\Users\p.a.j\AppData\Local\Intel [2014-10-05 17:10:06 | 000,000,000 | ---D | C] -- C:\Users\p.a.j\AppData\Roaming\Intel WiDi [2014-10-05 17:10:02 | 000,000,000 | ---D | C] -- C:\Users\p.a.j\AppData\Local\Intel WiDi [2014-10-02 20:37:45 | 000,000,000 | ---D | C] -- C:\Users\p.a.j\AppData\Local\Mozilla [2014-10-02 20:37:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service [2014-10-02 20:37:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla [2014-10-02 20:37:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2014-10-01 11:52:30 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\qdvd.dll [2014-10-01 11:52:30 | 000,371,712 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\qdvd.dll [2014-09-30 12:36:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe [2014-09-30 12:36:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe [2014-09-30 12:35:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2014-09-28 14:33:29 | 000,122,584 | ---- | C] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\MBAMSwissArmy.sys [2014-09-28 14:33:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware [2014-09-28 14:33:04 | 000,091,352 | ---- | C] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\mbamchameleon.sys [2014-09-28 14:33:04 | 000,063,704 | ---- | C] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\mwac.sys [2014-09-28 14:33:04 | 000,025,816 | ---- | C] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\mbam.sys [2014-09-28 14:33:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes Anti-Malware [2014-09-28 14:33:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2014-09-24 22:07:06 | 000,000,000 | ---D | C] -- C:\Program Files\Honeyview [2014-09-21 15:23:47 | 000,021,712 | ---- | C] (Phoenix Technologies) -- C:\windows\SysWow64\drivers\DrvAgent64.SYS [2014-09-21 15:23:47 | 000,000,000 | ---D | C] -- C:\Users\p.a.j\AppData\Local\eSupport.com [2014-09-21 15:15:54 | 000,000,000 | ---D | C] -- C:\windows\SysWow64\NV [2014-09-21 15:15:54 | 000,000,000 | ---D | C] -- C:\windows\SysNative\NV [2014-09-21 15:13:02 | 003,529,872 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\nvsvc64.dll [2014-09-21 15:13:02 | 001,087,688 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\nv3dappshext.dll [2014-09-21 15:13:02 | 000,067,072 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\nv3dappshextr.dll [2014-09-21 15:13:02 | 000,062,608 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\nvshext.dll [2014-09-21 15:13:01 | 006,890,696 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\nvcpl.dll [2014-09-21 15:13:01 | 002,557,640 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\nvsvcr.dll [2014-09-21 15:13:01 | 000,385,168 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\nvmctray.dll [2014-09-21 15:10:40 | 031,887,680 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\nvoglv64.dll [2014-09-21 15:10:40 | 024,552,592 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysWow64\nvoglv32.dll [2014-09-21 15:10:40 | 020,589,536 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\nvwgf2umx.dll [2014-09-21 15:10:40 | 018,106,152 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysWow64\nvwgf2um.dll [2014-09-21 15:10:40 | 014,026,304 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\nvopencl.dll [2014-09-21 15:10:40 | 011,392,576 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysWow64\nvopencl.dll [2014-09-21 15:10:40 | 000,984,424 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\nvumdshimx.dll [2014-09-21 15:10:40 | 000,867,528 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysWow64\nvumdshim.dll [2014-09-21 15:10:40 | 000,352,016 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\nvoglshim64.dll [2014-09-21 15:10:40 | 000,303,600 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysWow64\nvoglshim32.dll [2014-09-21 15:10:40 | 000,032,576 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\drivers\nvpciflt.sys [2014-09-21 15:10:39 | 000,174,856 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\nvinitx.dll [2014-09-21 15:10:38 | 020,922,512 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\nvcompiler.dll [2014-09-21 15:10:38 | 019,954,520 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\nvd3dumx.dll [2014-09-21 15:10:38 | 017,259,664 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysWow64\nvcompiler.dll [2014-09-21 15:10:38 | 016,875,856 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysWow64\nvd3dum.dll [2014-09-21 15:10:38 | 013,939,272 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\nvcuda.dll [2014-09-21 15:10:38 | 011,330,776 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysWow64\nvcuda.dll [2014-09-21 15:10:38 | 004,287,296 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\nvcuvid.dll [2014-09-21 15:10:38 | 004,008,592 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysWow64\nvcuvid.dll [2014-09-21 15:10:38 | 003,223,120 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\nvapi64.dll [2014-09-21 15:10:38 | 002,838,424 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysWow64\nvapi.dll [2014-09-21 15:10:38 | 001,876,296 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\nvdispco6434411.dll [2014-09-21 15:10:38 | 001,539,272 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\nvdispgenco6434411.dll [2014-09-21 15:10:38 | 000,957,584 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\NvIFR64.dll [2014-09-21 15:10:38 | 000,925,896 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\NvFBC64.dll [2014-09-21 15:10:38 | 000,919,240 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysWow64\NvIFR.dll [2014-09-21 15:10:38 | 000,894,096 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysWow64\NvFBC.dll [2014-09-21 15:10:38 | 000,156,840 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysWow64\nvinit.dll [2014-09-21 15:00:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Intel Corporation [2014-09-21 14:54:00 | 000,000,000 | ---D | C] -- C:\Users\p.a.j\AppData\Roaming\Intel Corporation [2014-09-21 14:51:25 | 000,000,000 | ---D | C] -- C:\Users\p.a.j\Intel [2014-09-21 14:35:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Logitech [2014-09-21 14:35:13 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Logishrd [2014-09-21 14:33:08 | 000,018,960 | ---- | C] (Logitech, Inc.) -- C:\windows\SysNative\drivers\LNonPnP.sys [2014-09-21 14:27:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Logishrd [2014-09-21 14:25:21 | 000,000,000 | ---D | C] -- C:\Users\p.a.j\AppData\Roaming\Logitech [2014-09-21 14:25:21 | 000,000,000 | ---D | C] -- C:\Users\p.a.j\AppData\Roaming\Logishrd [2014-09-21 12:52:44 | 000,000,000 | ---D | C] -- C:\Users\p.a.j\AppData\Roaming\Easeware [2014-09-20 17:11:31 | 000,038,048 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\drivers\nvvad64v.sys [2014-09-20 17:11:31 | 000,032,416 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysWow64\nvaudcap32v.dll [1 C:\Users\p.a.j\Documents\*.tmp files -> C:\Users\p.a.j\Documents\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2014-10-17 22:26:59 | 000,128,728 | ---- | M] (Malwarebytes Corporation) -- C:\windows\SysNative\drivers\MBAMSwissArmy.sys [2014-10-17 20:34:50 | 000,000,027 | ---- | M] () -- C:\windows\SysNative\drivers\etc\hosts [2014-10-17 18:59:49 | 000,028,848 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2014-10-17 18:59:49 | 000,028,848 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2014-10-17 18:55:20 | 000,000,332 | ---- | M] () -- C:\windows\tasks\GlaryInitialize 5.job [2014-10-17 18:53:38 | 000,304,384 | ---- | M] () -- C:\windows\SysNative\FNTCACHE.DAT [2014-10-17 18:53:35 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat [2014-10-17 18:53:26 | 002,331,569 | ---- | M] () -- C:\windows\SysNative\drivers\Cat.DB [2014-10-17 18:52:59 | 2039,902,207 | -HS- | M] () -- C:\hiberfil.sys [2014-10-15 20:05:58 | 000,000,085 | ---- | M] () -- C:\windows\wininit.ini [2014-10-14 21:53:05 | 000,007,603 | ---- | M] () -- C:\Users\p.a.j\AppData\Local\Resmon.ResmonCfg [2014-10-10 17:05:25 | 000,348,928 | ---- | M] () -- C:\windows\SysWow64\PnkBstrB.xtr [2014-10-10 17:05:25 | 000,348,928 | ---- | M] () -- C:\windows\SysWow64\PnkBstrB.exe [2014-10-10 17:05:15 | 000,280,904 | ---- | M] () -- C:\windows\SysWow64\PnkBstrB.ex0 [2014-10-09 21:32:50 | 000,000,363 | ---- | M] () -- C:\Users\p.a.j\Desktop\Komputer — skrót.lnk [2014-10-09 12:22:08 | 000,000,830 | ---- | M] () -- C:\windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job [2014-10-08 10:38:55 | 000,000,930 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job [2014-10-07 13:52:20 | 000,701,104 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerApp.exe [2014-10-07 13:52:20 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerCPLApp.cpl [2014-10-07 13:40:06 | 000,253,404 | -H-- | M] () -- C:\bdr-ld01 [2014-10-07 13:40:06 | 000,009,216 | -H-- | M] () -- C:\bdr-ld01.mbr [2014-10-07 13:40:06 | 000,000,684 | -H-- | M] () -- C:\bdr-cf01 [2014-10-07 13:39:53 | 000,002,126 | ---- | M] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2015.lnk [2014-10-07 12:34:45 | 000,001,044 | ---- | M] () -- C:\Users\Public\Desktop\Glary Utilities 5.lnk [2014-10-07 12:33:50 | 000,020,160 | ---- | M] (Glarysoft Ltd) -- C:\windows\SysNative\drivers\GUBootStartup.sys [2014-10-02 20:37:36 | 000,001,111 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2014-09-29 07:30:08 | 003,446,780 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI [2014-09-29 07:30:08 | 000,741,726 | ---- | M] () -- C:\windows\SysNative\perfh015.dat [2014-09-29 07:30:08 | 000,655,518 | ---- | M] () -- C:\windows\SysNative\perfh009.dat [2014-09-29 07:30:08 | 000,156,766 | ---- | M] () -- C:\windows\SysNative\perfc015.dat [2014-09-29 07:30:08 | 000,122,888 | ---- | M] () -- C:\windows\SysNative\perfc009.dat [2014-09-26 11:28:46 | 000,000,000 | -H-- | M] () -- C:\windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2014-09-26 00:46:19 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmled.dll [2014-09-26 00:32:04 | 002,017,280 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\inetcpl.cpl [2014-09-26 00:31:02 | 002,108,416 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\inetcpl.cpl [2014-09-25 04:08:38 | 000,371,712 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\qdvd.dll [2014-09-25 03:40:50 | 000,519,680 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\qdvd.dll [2014-09-21 15:23:47 | 000,021,712 | ---- | M] (Phoenix Technologies) -- C:\windows\SysWow64\drivers\DrvAgent64.SYS [2014-09-21 14:54:09 | 003,484,904 | ---- | M] () -- C:\windows\SysWow64\PerfStringBackup.INI [2014-09-21 14:33:08 | 000,018,960 | ---- | M] (Logitech, Inc.) -- C:\windows\SysNative\drivers\LNonPnP.sys [2014-09-21 14:31:56 | 000,000,000 | -H-- | M] () -- C:\windows\SysNative\drivers\Msft_Kernel_ICCWDT_01009.Wdf [2014-09-21 14:08:41 | 000,000,828 | ---- | M] () -- C:\windows\tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job [2014-09-21 12:47:23 | 000,002,073 | ---- | M] () -- C:\Users\Public\Desktop\Easy Support Center.lnk [2014-09-19 03:55:49 | 000,004,096 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ieetwcollectorres.dll [2014-09-19 03:40:43 | 000,066,048 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\iesetup.dll [2014-09-19 03:40:03 | 000,547,328 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\vbscript.dll [2014-09-19 03:39:58 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ieetwproxystub.dll [2014-09-19 03:38:27 | 000,083,968 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\MshtmlDac.dll [2014-09-19 03:36:57 | 005,829,632 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\jscript9.dll [2014-09-19 03:30:58 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\iernonce.dll [2014-09-19 03:27:09 | 000,595,968 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ieui.dll [2014-09-19 03:26:00 | 000,139,264 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ieUnatt.exe [2014-09-19 03:25:49 | 000,111,616 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ieetwcollector.exe [2014-09-19 03:25:09 | 000,758,272 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\jscript9diag.dll [2014-09-19 03:18:02 | 000,940,032 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\MsSpellCheckingFacility.exe [2014-09-19 03:14:28 | 000,446,464 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\dxtmsft.dll [2014-09-19 03:06:47 | 000,072,704 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\JavaScriptCollectionAgent.dll [2014-09-19 03:01:47 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\iesetup.dll [2014-09-19 03:01:46 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\msrating.dll [2014-09-19 03:01:03 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\ieetwproxystub.dll [2014-09-19 03:00:45 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\mshtmled.dll [2014-09-19 02:59:40 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\MshtmlDac.dll [2014-09-19 02:58:03 | 000,289,280 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\dxtrans.dll [2014-09-19 02:53:52 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\iernonce.dll [2014-09-19 02:51:24 | 000,440,320 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\ieui.dll [2014-09-19 02:50:16 | 000,112,128 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\ieUnatt.exe [2014-09-19 02:49:31 | 000,597,504 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\jscript9diag.dll [2014-09-19 02:42:57 | 000,731,136 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\msfeeds.dll [2014-09-19 02:42:56 | 000,710,656 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ie4uinit.exe [2014-09-19 02:40:12 | 001,249,280 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\mshtmlmedia.dll [2014-09-19 02:36:23 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\JavaScriptCollectionAgent.dll [2014-09-19 02:32:50 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\msrating.dll [2014-09-19 02:18:55 | 001,068,032 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmlmedia.dll [2014-09-19 01:59:26 | 000,775,168 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ieapfltr.dll [2014-09-19 01:52:24 | 000,678,400 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\ieapfltr.dll [1 C:\Users\p.a.j\Documents\*.tmp files -> C:\Users\p.a.j\Documents\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2014-10-15 20:05:13 | 000,000,085 | ---- | C] () -- C:\windows\wininit.ini [2014-10-15 18:12:29 | 002,331,569 | ---- | C] () -- C:\windows\SysNative\drivers\Cat.DB [2014-10-14 21:53:05 | 000,007,603 | ---- | C] () -- C:\Users\p.a.j\AppData\Local\Resmon.ResmonCfg [2014-10-09 21:32:50 | 000,000,363 | ---- | C] () -- C:\Users\p.a.j\Desktop\Komputer — skrót.lnk [2014-10-07 13:40:06 | 000,000,684 | -H-- | C] () -- C:\bdr-cf01 [2014-10-07 13:39:53 | 000,002,126 | ---- | C] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2015.lnk [2014-10-07 13:38:32 | 003,271,472 | -H-- | C] () -- C:\bdr-bz01 [2014-10-07 13:38:32 | 000,009,216 | -H-- | C] () -- C:\bdr-ld01.mbr [2014-10-07 13:38:31 | 049,563,064 | -H-- | C] () -- C:\bdr-im01.gz [2014-10-07 13:38:31 | 000,253,404 | -H-- | C] () -- C:\bdr-ld01 [2014-10-07 12:34:45 | 000,001,056 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk [2014-10-07 12:34:45 | 000,001,044 | ---- | C] () -- C:\Users\Public\Desktop\Glary Utilities 5.lnk [2014-10-07 12:34:04 | 000,000,332 | ---- | C] () -- C:\windows\tasks\GlaryInitialize 5.job [2014-10-02 20:37:35 | 000,001,123 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk [2014-10-02 20:37:35 | 000,001,111 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2014-09-30 12:36:38 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk [2014-09-26 11:28:46 | 000,000,000 | -H-- | C] () -- C:\windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2014-09-21 15:13:01 | 003,961,833 | ---- | C] () -- C:\windows\SysNative\nvcoproc.bin [2014-09-21 15:10:38 | 000,026,956 | ---- | C] () -- C:\windows\SysNative\nvinfo.pb [2014-09-21 14:31:56 | 000,000,000 | -H-- | C] () -- C:\windows\SysNative\drivers\Msft_Kernel_ICCWDT_01009.Wdf [2014-09-21 12:47:23 | 000,002,073 | ---- | C] () -- C:\Users\Public\Desktop\Easy Support Center.lnk [2014-09-09 17:09:50 | 000,036,892 | -H-- | C] () -- C:\windows\SysWow64\BASSMOD.dll [2014-09-09 16:38:00 | 000,348,928 | ---- | C] () -- C:\windows\SysWow64\PnkBstrB.exe [2014-09-09 16:37:55 | 000,076,152 | ---- | C] () -- C:\windows\SysWow64\PnkBstrA.exe [2014-09-09 10:39:29 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl [2014-09-08 17:14:14 | 000,218,200 | ---- | C] () -- C:\windows\SysWow64\unrar.dll [2014-09-08 15:49:15 | 003,484,904 | ---- | C] () -- C:\windows\SysWow64\PerfStringBackup.INI [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2014-06-25 04:05:42 | 014,175,744 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2014-06-25 03:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 171 bytes -> C:\ProgramData\Temp:DFC5A2B2 @Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:430C6D84 @Alternate Data Stream - 119 bytes -> C:\ProgramData\Temp:5C321E34 < End of report >