OTL logfile created on: 2014-11-19 23:44:33 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\PC\Desktop
64bit- Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
7,97 Gb Total Physical Memory | 5,79 Gb Available Physical Memory | 72,69% Memory free
15,93 Gb Paging File | 13,49 Gb Available in Paging File | 84,68% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 300,00 Gb Total Space | 231,87 Gb Free Space | 77,29% Space Free | Partition Type: NTFS
Drive D: | 631,41 Gb Total Space | 366,93 Gb Free Space | 58,11% Space Free | Partition Type: NTFS
Drive E: | 881,51 Gb Total Space | 286,84 Gb Free Space | 32,54% Space Free | Partition Type: NTFS
Drive L: | 465,73 Gb Total Space | 28,30 Gb Free Space | 6,08% Space Free | Partition Type: NTFS
 
Computer Name: PC-KOMPUTER | User Name: PC | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2014-11-19 23:40:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\PC\Desktop\OTL.exe
PRC - [2014-11-19 10:00:28 | 024,172,344 | ---- | M] (Ubisoft) -- C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\Uplay.exe
PRC - [2014-11-12 17:05:17 | 001,880,752 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_223.exe
PRC - [2014-11-10 16:15:04 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2014-11-09 21:57:40 | 003,488,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
PRC - [2014-11-09 21:56:14 | 003,653,136 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2015\avgui.exe
PRC - [2014-11-09 21:49:56 | 000,298,080 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
PRC - [2014-11-09 02:17:42 | 000,076,152 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2014-10-07 13:27:32 | 002,662,424 | ---- | M] () -- C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
PRC - [2014-09-12 10:43:06 | 000,064,704 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2014-08-29 16:13:26 | 001,843,736 | ---- | M] (AVG Secure Search) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\3.2.0\ToolbarUpdater.exe
PRC - [2014-08-29 16:13:26 | 000,159,768 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\3.2.0\loggingserver.exe
PRC - [2013-11-22 12:36:18 | 000,105,448 | ---- | M] (Razer Inc.) -- C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
PRC - [2013-11-12 15:21:32 | 001,658,880 | ---- | M] (CMedia) -- C:\Program Files\UNi Xonar Audio\Customapp\AsusAudioCenter.exe
PRC - [2013-10-16 11:02:08 | 008,174,592 | ---- | M] (AQQ Sp. z o.o.) -- C:\Program Files (x86)\WapSter\WapSter AQQ\AQQ.exe
PRC - [2008-07-11 14:04:22 | 000,200,704 | ---- | M] () -- C:\Windows\SysWOW64\HsMgr.exe
PRC - [2007-09-02 13:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.exe
PRC - [2000-01-01 01:00:00 | 000,166,720 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2014-11-19 09:52:22 | 026,054,456 | ---- | M] () -- C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\libcef.dll
MOD - [2014-11-12 17:05:17 | 016,840,880 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll
MOD - [2014-11-10 16:15:04 | 003,649,648 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2014-10-07 13:27:32 | 002,662,424 | ---- | M] () -- C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
MOD - [2014-10-07 13:27:32 | 000,577,560 | ---- | M] () -- C:\Program Files (x86)\AVG Web TuneUp\TBAPI.dll
MOD - [2014-08-29 16:13:27 | 000,519,704 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\3.2.0\log4cplusU.dll
MOD - [2013-06-13 12:30:58 | 004,296,192 | ---- | M] () -- C:\Program Files (x86)\WapSter\WapSter AQQ\System\Shared\Plugins\GGNet.dll
MOD - [2013-01-28 09:39:26 | 000,022,016 | ---- | M] () -- C:\Program Files (x86)\WapSter\WapSter AQQ\System\Shared\Plugins\Contact.dll
MOD - [2012-06-06 08:56:50 | 000,143,360 | ---- | M] () -- C:\Program Files\UNi Xonar Audio\Customapp\VmixP8.dll
MOD - [2008-07-11 14:04:22 | 000,200,704 | ---- | M] () -- C:\Windows\SysWOW64\HsMgr.exe
MOD - [2007-09-02 13:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.exe
MOD - [2007-09-02 13:57:36 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2014-06-04 16:09:21 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\PnkBstrA.exe -- (PnkBstrA)
SRV:[b]64bit:[/b] - [2012-06-19 19:10:34 | 000,634,632 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2014-11-12 17:05:18 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014-11-12 02:04:34 | 000,833,728 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2014-11-10 16:15:04 | 000,114,288 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014-11-09 21:57:40 | 003,488,784 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe -- (AVGIDSAgent)
SRV - [2014-11-09 21:49:56 | 000,298,080 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe -- (avgwd)
SRV - [2014-11-09 02:17:42 | 000,076,152 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2014-11-09 02:11:29 | 001,900,400 | ---- | M] (Electronic Arts) [On_Demand | Stopped] -- C:\Program Files (x86)\Origin\OriginClientService.exe -- (Origin Client Service)
SRV - [2014-09-12 10:43:06 | 000,064,704 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2014-08-29 16:13:26 | 001,843,736 | ---- | M] (AVG Secure Search) [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\3.2.0\ToolbarUpdater.exe -- (vToolbarUpdater3.2.0)
SRV - [2013-11-22 12:36:18 | 000,105,448 | ---- | M] (Razer Inc.) [Auto | Running] -- C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe -- (RzKLService)
SRV - [2013-03-01 02:48:58 | 000,118,520 | ---- | M] (Riverbed Technology, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WinPcap\rpcapd.exe -- (rpcapd)
SRV - [2012-07-09 00:40:10 | 000,104,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2000-01-01 01:00:00 | 000,166,720 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2014-10-29 21:35:16 | 000,263,960 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgidsdrivera.sys -- (AVGIDSDriver)
DRV:[b]64bit:[/b] - [2014-10-10 15:14:32 | 000,274,200 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (Avgtdia)
DRV:[b]64bit:[/b] - [2014-10-05 21:41:40 | 000,124,184 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64)
DRV:[b]64bit:[/b] - [2014-10-03 20:23:02 | 000,038,216 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible)
DRV:[b]64bit:[/b] - [2014-09-17 05:51:20 | 000,197,408 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:[b]64bit:[/b] - [2014-08-29 16:13:27 | 000,050,976 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)
DRV:[b]64bit:[/b] - [2014-08-28 21:47:24 | 000,243,480 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64)
DRV:[b]64bit:[/b] - [2014-07-18 14:53:26 | 000,313,624 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgloga.sys -- (Avgloga)
DRV:[b]64bit:[/b] - [2014-06-18 20:03:34 | 000,190,744 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgidsha.sys -- (AVGIDSHA)
DRV:[b]64bit:[/b] - [2014-06-18 20:03:34 | 000,153,368 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgdiska.sys -- (Avgdiska)
DRV:[b]64bit:[/b] - [2014-06-18 20:03:20 | 000,031,512 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64)
DRV:[b]64bit:[/b] - [2014-05-21 16:40:57 | 000,016,152 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SWDUMon.sys -- (SWDUMon)
DRV:[b]64bit:[/b] - [2014-03-23 18:15:08 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:[b]64bit:[/b] - [2013-12-11 10:09:46 | 002,735,616 | ---- | M] (C-Media Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\cmudaxp.sys -- (cmudaxp)
DRV:[b]64bit:[/b] - [2013-03-01 02:49:12 | 000,036,600 | ---- | M] (Riverbed Technology, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\npf.sys -- (NPF)
DRV:[b]64bit:[/b] - [2012-05-10 10:20:06 | 000,106,096 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ViaUsbAudio.sys -- (UsbAudio10)
DRV:[b]64bit:[/b] - [2011-11-11 08:20:44 | 000,316,208 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mvs91xx.sys -- (mvs91xx)
DRV:[b]64bit:[/b] - [2010-11-15 19:05:02 | 000,364,520 | ---- | M] (ASMedia Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\asmtxhci.sys -- (asmtxhci)
DRV:[b]64bit:[/b] - [2010-11-15 19:05:00 | 000,121,832 | ---- | M] (ASMedia Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\asmthub3.sys -- (asmthub3)
DRV:[b]64bit:[/b] - [2010-10-01 00:16:34 | 000,013,312 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VKbms.sys -- (VKbms)
DRV:[b]64bit:[/b] - [2010-09-17 10:53:28 | 000,297,000 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mv91xx.sys -- (mv91xx)
DRV:[b]64bit:[/b] - [2010-03-23 16:37:34 | 000,012,032 | ---- | M] (Razer (Asia-Pacific) Pte Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\danew.sys -- (danewFltr)
DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2000-01-01 01:00:00 | 000,428,136 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2000-01-01 01:00:00 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV - [2013-03-14 13:36:18 | 000,017,160 | ---- | M] (XFire) [File_System | On_Demand | Stopped] -- C:\Program Files (x86)\Xfire2\XFDriver64.sys -- (XFDriver64)
DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1243414327-560936753-16861620-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-21-1243414327-560936753-16861620-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1243414327-560936753-16861620-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-1243414327-560936753-16861620-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1243414327-560936753-16861620-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.startup.homepage: "https://www.google.pl/"
FF - prefs.js..extensions.enabledAddons: artur.dubovoy%40gmail.com:6.7.1
FF - prefs.js..extensions.enabledAddons: pavel.sherbakov%40gmail.com:6.6.2
FF - prefs.js..extensions.enabledAddons: %7Bc0c588b6-b11d-4898-af00-079fed05aa32%7D:33.4
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_223.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@esn/npbattlelog,version=2.5.1: C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll (EA Digital Illusions CE AB)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_223.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\3.2.0\\npsitesafety.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn/npbattlelog,version=2.5.1: C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll (EA Digital Illusions CE AB)
FF - HKLM\Software\MozillaPlugins\@ganymede/GanymedeNetPlugin,version=1.0: C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll ( )
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.71.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.71.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 33.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 33.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2014-11-10 16:15:02 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 33.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 33.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2014-11-10 16:15:02 | 000,000,000 | ---D | M]
 
[2013-09-04 15:19:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\PC\AppData\Roaming\mozilla\Extensions
[2014-11-18 18:39:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\PC\AppData\Roaming\mozilla\Firefox\Profiles\uf72lx1z.default-1411659401517\extensions
[2014-09-26 17:29:51 | 000,000,000 | ---D | M] (FT DeepDark) -- C:\Users\PC\AppData\Roaming\mozilla\Firefox\Profiles\uf72lx1z.default-1411659401517\extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66}
[2014-11-12 22:34:40 | 000,000,000 | ---D | M] ("Flash Video Downloader - Full HD Download") -- C:\Users\PC\AppData\Roaming\mozilla\Firefox\Profiles\uf72lx1z.default-1411659401517\extensions\artur.dubovoy@gmail.com
[2014-11-18 18:39:00 | 000,000,000 | ---D | M] ("EverSync - Sync bookmarks, backup your favorites.") -- C:\Users\PC\AppData\Roaming\mozilla\Firefox\Profiles\uf72lx1z.default-1411659401517\extensions\fvdmedia@gmail.com
[2014-11-13 23:10:43 | 000,000,000 | ---D | M] ("Speed Dial [FVD] - New Tab Page, Sync...") -- C:\Users\PC\AppData\Roaming\mozilla\Firefox\Profiles\uf72lx1z.default-1411659401517\extensions\pavel.sherbakov@gmail.com
[2013-09-17 00:56:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\PC\AppData\Roaming\mozilla\Firefox\Profiles2oeh3gtp.default\extensions
[2013-09-17 00:56:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\PC\AppData\Roaming\mozilla\Firefox\Profiles2oeh3gtp.default\extensions\staged
[2014-11-07 01:02:53 | 000,075,978 | ---- | M] () (No name found) -- C:\Users\PC\AppData\Roaming\mozilla\firefox\profiles\uf72lx1z.default-1411659401517\extensions\firefoxaddon@youtubeenhancer.com.xpi
[2014-11-12 17:04:35 | 003,604,768 | ---- | M] () (No name found) -- C:\Users\PC\AppData\Roaming\mozilla\firefox\profiles\uf72lx1z.default-1411659401517\extensions\nasanightlaunch@example.com.xpi
[2014-11-12 22:34:39 | 002,704,860 | ---- | M] () (No name found) -- C:\Users\PC\AppData\Roaming\mozilla\firefox\profiles\uf72lx1z.default-1411659401517\extensions\{c0c588b6-b11d-4898-af00-079fed05aa32}.xpi
[2014-11-12 17:04:34 | 000,979,699 | ---- | M] () (No name found) -- C:\Users\PC\AppData\Roaming\mozilla\firefox\profiles\uf72lx1z.default-1411659401517\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2014-11-10 16:15:02 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
[2014-11-10 16:15:05 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013-07-15 11:28:04 | 000,121,504 | ---- | M] ( ) -- C:\Program Files (x86)\mozilla firefox\plugins\npganymedenet.dll
 
O1 HOSTS File: ([2014-04-04 18:20:00 | 000,000,934 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 validation.sls.microsoft.com
O1 - Hosts: 127.0.0.1 adserver.gadu-gadu.pl # GGAds by Wnns / http://www.wnns.tk
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Cmaudio8788] C:\Windows\Syswow64\cmicnfgp.dll (C-Media Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Cmaudio8788GX] C:\Windows\syswow64\HsMgr.exe ()
O4:[b]64bit:[/b] - HKLM..\Run: [Cmaudio8788GX64] C:\Windows\system\HsMgr64.exe ()
O4 - HKLM..\Run: [AVG_UI] C:\Program Files (x86)\AVG\AVG2015\avgui.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG Web TuneUp\vprot.exe ()
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1243414327-560936753-16861620-1000..\Run: [AQQ] C:\PROGRA~2\WapSter\WAPSTE~1\AQQ.exe (AQQ Sp. z o.o.)
O4 - HKU\S-1-5-21-1243414327-560936753-16861620-1000..\Run: [RocketDock] C:\Program Files (x86)\RocketDock\RocketDock.exe ()
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk = C:\Program Files\Rainmeter\Rainmeter.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 [2014-11-15 01:15:59 | 000,000,000 | ---D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 [2014-11-15 01:15:59 | 000,000,000 | ---D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1 [2014-11-15 01:15:59 | 000,000,000 | ---D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1 [2014-11-15 01:15:59 | 000,000,000 | ---D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1 [2014-11-15 01:15:59 | 000,000,000 | ---D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1 [2014-11-15 01:15:59 | 000,000,000 | ---D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1 [2014-11-15 01:15:59 | 000,000,000 | ---D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 [2014-11-15 01:15:59 | 000,000,000 | ---D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 [2014-11-15 01:15:59 | 000,000,000 | ---D | M]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1 [2014-11-15 01:15:59 | 000,000,000 | ---D | M]
O7 - HKU\S-1-5-21-1243414327-560936753-16861620-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:[b]64bit:[/b] - Extra context menu item: + Offline &Explorer: Download the link - file://C:\Program Files (x86)\Offline Explorer\Add_UrlO.htm File not found
O8:[b]64bit:[/b] - Extra context menu item: + Offline E&xplorer: Download the current page - file://C:\Program Files (x86)\Offline Explorer\Add_AllO.htm File not found
O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: + Offline &Explorer: Download the link - file://C:\Program Files (x86)\Offline Explorer\Add_UrlO.htm File not found
O8 - Extra context menu item: + Offline E&xplorer: Download the current page - file://C:\Program Files (x86)\Offline Explorer\Add_AllO.htm File not found
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-1243414327-560936753-16861620-1000\..Trusted Domains: clonewarsadventures.com ([]* in Zaufane witryny)
O15 - HKU\S-1-5-21-1243414327-560936753-16861620-1000\..Trusted Domains: freerealms.com ([]* in Zaufane witryny)
O15 - HKU\S-1-5-21-1243414327-560936753-16861620-1000\..Trusted Domains: soe.com ([]* in Zaufane witryny)
O15 - HKU\S-1-5-21-1243414327-560936753-16861620-1000\..Trusted Domains: sony.com ([]* in Zaufane witryny)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 0.0.0.0
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{13EF2A8A-EDA6-4507-B11C-6B939A0D065A}: DhcpNameServer = 192.168.1.1 0.0.0.0
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\viprotocol - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\3.2.0\ViProtocol.dll (AVG Secure Search)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKU\S-1-5-21-1243414327-560936753-16861620-1000 Winlogon: Shell - (expstart.exe) - C:\Windows\expstart.exe ()
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{b89badb1-164a-11e3-a18b-f46d040fccae}\Shell - "" = AutoRun
O33 - MountPoints2\{b89badb1-164a-11e3-a18b-f46d040fccae}\Shell\AutoRun\command - "" = K:\setup.exe
O33 - MountPoints2\{c1e9a2f9-b2ac-11e3-b731-f46d040fccae}\Shell - "" = AutoRun
O33 - MountPoints2\{c1e9a2f9-b2ac-11e3-b731-f46d040fccae}\Shell\AutoRun\command - "" = G:\this_war_of_mine_drmfree.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2014-11-19 23:40:07 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\PC\Desktop\OTL.exe
[2014-11-19 19:11:49 | 000,038,216 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvvad64v.sys
[2014-11-19 19:11:49 | 000,035,144 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvaudcap64v.dll
[2014-11-19 19:11:49 | 000,032,584 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvaudcap32v.dll
[2014-11-19 19:11:48 | 031,893,136 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
[2014-11-19 19:11:48 | 024,557,712 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
[2014-11-19 19:11:48 | 019,966,344 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
[2014-11-19 19:11:48 | 014,032,984 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll
[2014-11-19 19:11:48 | 013,944,952 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
[2014-11-19 19:11:48 | 011,397,744 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll
[2014-11-19 19:11:48 | 011,336,432 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
[2014-11-19 19:11:48 | 004,292,416 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
[2014-11-19 19:11:48 | 004,011,208 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
[2014-11-19 19:11:48 | 001,876,296 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6434475.dll
[2014-11-19 19:11:48 | 001,540,424 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6434475.dll
[2014-11-19 19:11:48 | 000,964,928 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFR64.dll
[2014-11-19 19:11:48 | 000,935,240 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvFBC64.dll
[2014-11-19 19:11:48 | 000,923,792 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFR.dll
[2014-11-19 19:11:48 | 000,900,928 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvFBC.dll
[2014-11-19 19:11:48 | 000,871,648 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvumdshim.dll
[2014-11-19 19:11:48 | 000,352,016 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglshim64.dll
[2014-11-19 19:11:48 | 000,303,600 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglshim32.dll
[2014-11-19 19:11:48 | 000,174,856 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvinitx.dll
[2014-11-19 19:11:48 | 000,156,840 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvinit.dll
[2014-11-19 19:11:47 | 020,922,512 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
[2014-11-19 19:11:47 | 017,259,664 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
[2014-11-19 19:11:47 | 002,874,456 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
[2014-11-19 18:13:04 | 308,364,224 | ---- | C] (NVIDIA Corporation) -- C:\Users\PC\Desktop\344.75-desktop-win8-win7-winvista-64bit-international-whql.exe
[2014-11-19 18:08:05 | 058,547,416 | ---- | C] (Ubisoft) -- C:\Users\PC\Desktop\UplayInstaller.exe
[2014-11-19 04:28:40 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\11bitstudios
[2014-11-19 04:17:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\This War of Mine
[2014-11-15 02:14:10 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\tor
[2014-11-15 01:36:09 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Defrag
[2014-11-15 01:36:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Registry Defrag
[2014-11-15 01:36:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Eusing Free Registry Defrag
[2014-11-15 01:24:12 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\Eusing
[2014-11-15 01:24:11 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner
[2014-11-15 01:24:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Registry Cleaner
[2014-11-15 01:24:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Eusing Free Registry Cleaner
[2014-11-11 17:42:07 | 018,514,616 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
[2014-11-11 17:42:07 | 001,876,296 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6434465.dll
[2014-11-11 17:42:07 | 001,539,272 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6434465.dll
[2014-11-11 17:40:56 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2014-11-10 16:15:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2014-11-09 02:09:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Battlelog Web Plugins
[2014-11-06 00:59:53 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\Ahead
[2014-11-06 00:59:52 | 000,000,000 | ---D | C] -- C:\ProgramData\LightScribe
[2014-11-06 00:48:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 7 Essentials
[2014-11-06 00:48:16 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Local\Ahead
[2014-11-06 00:46:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero
[2014-11-06 00:46:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nero
[2014-11-06 00:46:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Ahead
[2014-11-06 00:04:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Astroburn Lite
[2014-11-03 22:30:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinHTTrack
[2014-11-03 22:30:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinHTTrack
[2014-11-03 22:28:36 | 000,000,000 | ---D | C] -- C:\download
[2014-11-03 22:18:00 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\Offline Explorer
[2014-11-03 22:17:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MetaProducts Offline Explorer
[2014-11-03 22:17:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Offline Explorer
[2014-11-01 21:01:19 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\Wireshark
[2014-11-01 20:55:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
[2014-11-01 20:55:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinPcap
[2014-11-01 20:55:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Wireshark
[2014-11-01 20:38:38 | 028,424,840 | ---- | C] (Wireshark development team) -- C:\Users\PC\Desktop\Wireshark-win32-1.12.1.exe
[2014-10-29 21:35:16 | 000,263,960 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgidsdrivera.sys
[2014-10-22 23:11:02 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Roaming\AVG2015
[2014-10-22 23:09:24 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG2015
[2014-10-22 23:01:00 | 000,000,000 | ---D | C] -- C:\Users\PC\AppData\Local\Avg2015
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2014-11-19 23:46:21 | 002,117,120 | ---- | M] (Farbar) -- C:\Users\PC\Desktop\FRST64.exe
[2014-11-19 23:40:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\PC\Desktop\OTL.exe
[2014-11-19 23:05:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014-11-19 21:28:25 | 000,001,385 | ---- | M] () -- C:\Users\PC\Desktop\sid.vbs
[2014-11-19 21:22:55 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014-11-19 21:22:55 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014-11-19 21:19:56 | 001,666,944 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014-11-19 21:19:56 | 000,739,182 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2014-11-19 21:19:56 | 000,653,202 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014-11-19 21:19:56 | 000,155,292 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2014-11-19 21:19:56 | 000,121,604 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2014-11-19 21:15:33 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014-11-19 21:15:31 | 2119,856,127 | -HS- | M] () -- C:\hiberfil.sys
[2014-11-19 19:23:04 | 000,000,233 | ---- | M] () -- C:\Users\PC\Desktop\Far Cry 4.url
[2014-11-19 18:32:38 | 308,364,224 | ---- | M] (NVIDIA Corporation) -- C:\Users\PC\Desktop\344.75-desktop-win8-win7-winvista-64bit-international-whql.exe
[2014-11-19 18:14:05 | 000,001,199 | ---- | M] () -- C:\Users\PC\Desktop\Uplay.lnk
[2014-11-19 18:12:50 | 058,547,416 | ---- | M] (Ubisoft) -- C:\Users\PC\Desktop\UplayInstaller.exe
[2014-11-19 04:17:52 | 000,000,697 | ---- | M] () -- C:\Users\Public\Desktop\This War of Mine.lnk
[2014-11-19 02:49:32 | 000,348,928 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2014-11-19 02:49:32 | 000,348,928 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2014-11-19 02:49:12 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2014-11-15 02:15:03 | 000,001,215 | ---- | M] () -- C:\Users\PC\Desktop\TOR.lnk
[2014-11-15 01:26:10 | 211,384,138 | ---- | M] () -- C:\REG_BACKUP_15_11_2014_FULL.reg
[2014-11-13 14:11:48 | 000,001,496 | ---- | M] () -- C:\Users\PC\AppData\Local\Adobe Zapisz dla Internetu 13.0 Prefs
[2014-11-13 01:20:36 | 031,893,136 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
[2014-11-13 01:20:36 | 024,557,712 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
[2014-11-13 01:20:36 | 020,986,592 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll
[2014-11-13 01:20:36 | 020,922,512 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
[2014-11-13 01:20:36 | 019,966,344 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
[2014-11-13 01:20:36 | 018,514,616 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
[2014-11-13 01:20:36 | 017,259,664 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
[2014-11-13 01:20:36 | 016,884,632 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll
[2014-11-13 01:20:36 | 014,032,984 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll
[2014-11-13 01:20:36 | 013,944,952 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
[2014-11-13 01:20:36 | 011,397,744 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll
[2014-11-13 01:20:36 | 011,336,432 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
[2014-11-13 01:20:36 | 004,292,416 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
[2014-11-13 01:20:36 | 004,011,208 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
[2014-11-13 01:20:36 | 003,262,784 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll
[2014-11-13 01:20:36 | 002,874,456 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
[2014-11-13 01:20:36 | 001,876,296 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6434475.dll
[2014-11-13 01:20:36 | 001,540,424 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6434475.dll
[2014-11-13 01:20:36 | 000,989,056 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvumdshimx.dll
[2014-11-13 01:20:36 | 000,964,928 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFR64.dll
[2014-11-13 01:20:36 | 000,935,240 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\NvFBC64.dll
[2014-11-13 01:20:36 | 000,923,792 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFR.dll
[2014-11-13 01:20:36 | 000,900,928 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvFBC.dll
[2014-11-13 01:20:36 | 000,871,648 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvumdshim.dll
[2014-11-13 01:20:36 | 000,352,016 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglshim64.dll
[2014-11-13 01:20:36 | 000,303,600 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglshim32.dll
[2014-11-13 01:20:36 | 000,174,856 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvinitx.dll
[2014-11-13 01:20:36 | 000,156,840 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvinit.dll
[2014-11-13 01:20:36 | 000,074,056 | ---- | M] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2014-11-13 01:20:36 | 000,059,592 | ---- | M] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2014-11-13 01:20:36 | 000,027,094 | ---- | M] () -- C:\Windows\SysNative\nvinfo.pb
[2014-11-12 22:56:45 | 006,897,352 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcpl.dll
[2014-11-12 22:56:45 | 003,534,152 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvc64.dll
[2014-11-12 22:56:42 | 002,559,808 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvcr.dll
[2014-11-12 22:56:42 | 000,386,368 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvmctray.dll
[2014-11-12 22:56:42 | 000,062,608 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvshext.dll
[2014-11-12 17:05:17 | 000,701,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2014-11-12 17:05:17 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2014-11-11 11:29:54 | 004,100,776 | ---- | M] () -- C:\Windows\SysNative\nvcoproc.bin
[2014-11-09 07:38:30 | 000,007,596 | ---- | M] () -- C:\Users\PC\AppData\Local\Resmon.ResmonCfg
[2014-11-09 02:17:42 | 000,076,152 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2014-11-08 22:53:38 | 000,129,752 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys
[2014-11-07 02:03:53 | 000,000,004 | ---- | M] () -- C:\Windows\SysWow64\†m
[2014-11-04 01:04:30 | 001,876,296 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6434465.dll
[2014-11-04 01:04:30 | 001,539,272 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6434465.dll
[2014-11-01 20:39:30 | 028,424,840 | ---- | M] (Wireshark development team) -- C:\Users\PC\Desktop\Wireshark-win32-1.12.1.exe
[2014-10-31 16:41:37 | 001,510,235 | ---- | M] () -- C:\Users\PC\Desktop\2014-11-all.jpg
[2014-10-29 22:25:15 | 000,001,595 | ---- | M] () -- C:\Users\PC\Desktop\Mordor - saves.lnk
[2014-10-29 21:35:16 | 000,263,960 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgidsdrivera.sys
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2014-11-19 21:28:24 | 000,001,385 | ---- | C] () -- C:\Users\PC\Desktop\sid.vbs
[2014-11-19 19:23:04 | 000,000,233 | ---- | C] () -- C:\Users\PC\Desktop\Far Cry 4.url
[2014-11-19 19:23:04 | 000,000,233 | ---- | C] () -- C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Far Cry 4.url
[2014-11-19 18:14:05 | 000,001,199 | ---- | C] () -- C:\Users\PC\Desktop\Uplay.lnk
[2014-11-19 04:17:52 | 000,000,697 | ---- | C] () -- C:\Users\Public\Desktop\This War of Mine.lnk
[2014-11-15 01:26:05 | 211,384,138 | ---- | C] () -- C:\REG_BACKUP_15_11_2014_FULL.reg
[2014-11-15 01:12:24 | 000,001,215 | ---- | C] () -- C:\Users\PC\Desktop\TOR.lnk
[2014-11-09 00:49:22 | 000,000,495 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Evil Within.lnk
[2014-11-07 02:03:53 | 000,000,004 | ---- | C] () -- C:\Windows\SysWow64\†m
[2014-11-01 20:55:58 | 000,002,035 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark 2 Preview.lnk
[2014-11-01 20:55:47 | 000,001,728 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk
[2014-10-31 16:41:34 | 001,510,235 | ---- | C] () -- C:\Users\PC\Desktop\2014-11-all.jpg
[2014-10-29 22:25:15 | 000,001,595 | ---- | C] () -- C:\Users\PC\Desktop\Mordor - saves.lnk
[2014-10-13 01:27:25 | 000,216,064 | ---- | C] ( ) -- C:\Windows\SysWow64\lagarith.dll
[2014-10-13 01:27:24 | 000,650,752 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2014-10-13 01:27:24 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2014-10-13 01:27:22 | 000,112,640 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2014-06-26 15:36:38 | 000,000,458 | RHS- | C] () -- C:\Users\PC\ntuser.pol
[2014-05-13 17:31:23 | 000,103,956 | ---- | C] () -- C:\ProgramData\1399998655.bdinstall.bin
[2014-05-13 16:20:46 | 000,097,837 | ---- | C] () -- C:\ProgramData\1399994425.bdinstall.bin
[2014-05-13 16:20:25 | 000,037,824 | ---- | C] () -- C:\ProgramData\1399994423.bdinstall.bin
[2014-05-13 16:11:15 | 000,208,775 | ---- | C] () -- C:\ProgramData\1399993756.bdinstall.bin
[2014-05-06 23:06:44 | 000,000,022 | ---- | C] () -- C:\Windows\GPU-Z.INI
[2014-04-29 00:21:29 | 000,000,832 | ---- | C] () -- C:\Users\PC\AppData\Roaming\MPQEditor.ini
[2014-04-20 17:11:24 | 000,200,704 | ---- | C] () -- C:\Windows\SysWow64\HsMgr.exe
[2014-04-20 17:11:24 | 000,000,057 | ---- | C] () -- C:\Windows\SysWow64\cmasiop.ini
[2014-04-20 17:11:23 | 000,143,360 | ---- | C] () -- C:\Windows\SysWow64\VmixP8.dll
[2014-04-20 17:11:20 | 000,045,397 | ---- | C] () -- C:\Windows\Cmicnfgp.ini.cfl
[2014-04-17 16:04:42 | 000,005,120 | ---- | C] () -- C:\Windows\Cmicnfgp.ini.cfg
[2014-04-17 16:04:42 | 000,000,854 | ---- | C] () -- C:\Windows\Cmicnfgp.ini.imi
[2014-04-04 16:50:32 | 000,000,218 | ---- | C] () -- C:\Users\PC\.recently-used.xbel
[2014-02-25 16:54:09 | 000,000,112 | ---- | C] () -- C:\Users\PC\AppData\Roaming\Preferencje wtyczki JP2K CS6
[2014-01-17 17:06:38 | 002,580,552 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe
[2013-12-14 18:39:25 | 000,000,132 | ---- | C] () -- C:\Users\PC\AppData\Roaming\Preferencje CC formatu PNG firmy Adobe
[2013-12-11 20:48:42 | 000,000,132 | ---- | C] () -- C:\Users\PC\AppData\Roaming\Preferencje formatu GIF CS6 firmy Adobe
[2013-12-11 15:30:49 | 000,348,928 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2013-12-11 15:30:48 | 000,076,152 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2013-11-21 16:32:04 | 000,925,184 | ---- | C] () -- C:\Windows\expstart.exe
[2013-11-15 19:05:30 | 000,000,705 | ---- | C] () -- C:\Users\PC\.jscreenfix-deluxe.licence
[2013-11-15 19:03:19 | 000,000,702 | ---- | C] () -- C:\Users\PC\.jscreenfix.licence
[2013-11-15 16:00:26 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl
[2013-09-08 19:18:49 | 000,000,132 | ---- | C] () -- C:\Users\PC\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe
[2013-09-08 19:12:00 | 000,001,496 | ---- | C] () -- C:\Users\PC\AppData\Local\Adobe Zapisz dla Internetu 13.0 Prefs
[2013-09-06 18:25:25 | 000,007,596 | ---- | C] () -- C:\Users\PC\AppData\Local\Resmon.ResmonCfg
[2013-09-04 15:42:52 | 000,218,200 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2013-09-04 15:13:00 | 000,451,072 | ---- | C] () -- C:\Windows\SysWow64\ISSRemoveSP.exe
[2013-09-03 18:00:46 | 001,638,614 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013-09-03 17:48:13 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
[2013-09-03 17:48:09 | 000,023,042 | ---- | C] () -- C:\Windows\Ascd_tmp.ini
[2013-03-01 02:47:36 | 000,053,299 | ---- | C] () -- C:\Windows\SysWow64\pthreadVC.dll
[2012-12-28 22:04:22 | 000,036,352 | ---- | C] () -- C:\Windows\SysWow64\xfcodec.dll
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009-07-14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2009-07-14 02:41:54 | 014,161,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2009-07-14 02:16:14 | 012,866,560 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009-07-14 02:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2014-11-07 02:03:53 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\ASUS
[2014-11-07 02:03:54 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\AVG2015
[2013-09-13 16:06:47 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\TuneUp Software
[2013-09-13 16:06:47 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\TuneUp Software
[2013-09-13 16:06:47 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\TuneUp Software
[2014-04-04 16:50:32 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\.purple
[2014-04-03 23:50:36 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\.wtw
[2014-11-19 04:28:40 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\11bitstudios
[2014-11-19 23:38:31 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\AIMP3
[2014-04-17 16:16:58 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\ASUS
[2014-11-19 02:34:17 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Audacity
[2014-10-22 23:11:02 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\AVG2015
[2014-04-28 15:06:16 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Battle.net
[2014-11-05 00:49:32 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\DAEMON Tools Lite
[2014-04-29 16:08:34 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\DarkSoulsII
[2014-05-21 13:23:49 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Dropbox
[2014-05-21 13:23:48 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\DropboxMaster
[2014-02-28 18:44:55 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\e-Deklaracje
[2014-08-29 16:42:19 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1
[2014-11-15 01:24:12 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Eusing
[2014-04-04 18:13:32 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Gadu-Gadu 10
[2014-01-14 01:13:12 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\GanymedeNet
[2014-04-20 00:04:59 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\GG
[2013-10-18 16:19:43 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Hothead Games
[2013-10-06 19:16:05 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Ice-Pick Lodge
[2014-03-25 18:01:38 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\LolClient
[2014-07-04 18:40:30 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\MetaQuotes
[2014-08-21 19:54:09 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\MPC-HC
[2013-12-10 14:47:17 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\NapiProjekt
[2013-12-22 14:08:39 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Need for Speed Rivals
[2014-11-03 22:28:42 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Offline Explorer
[2014-10-02 21:05:21 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Opera Software
[2014-04-17 19:22:12 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Oracle
[2014-01-19 22:39:37 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Origin
[2014-05-13 16:10:40 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\QuickScan
[2014-03-23 18:00:45 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Rainmeter
[2013-12-07 16:27:05 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Razer
[2014-10-05 23:18:21 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Steam
[2014-01-14 15:48:08 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\System
[2013-12-27 00:29:27 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Trine2
[2013-09-04 15:20:50 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\TuneUp Software
[2014-11-19 04:59:46 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\uTorrent
[2013-12-12 01:51:56 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Video Wallpaper
[2014-03-11 15:24:21 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Wargaming.net
[2014-11-01 21:51:48 | 000,000,000 | ---D | M] -- C:\Users\PC\AppData\Roaming\Wireshark
[2014-08-29 16:39:52 | 000,000,000 | -HSD | M] -- C:\Users\PC\AppData\Roaming\wyUpdate AU
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >