OTL logfile created on: 2015-02-09 13:20:51 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\viola\Downloads Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 0,80 Gb Available Physical Memory | 39,83% Memory free 4,23 Gb Paging File | 2,85 Gb Available in Paging File | 67,30% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 104,85 Gb Total Space | 33,60 Gb Free Space | 32,05% Space Free | Partition Type: NTFS Drive D: | 6,94 Gb Total Space | 2,47 Gb Free Space | 35,55% Space Free | Partition Type: NTFS Computer Name: OSOBISTY | User Name: viola | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2015-02-09 13:11:36 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\viola\Downloads\OTL.exe PRC - [2015-02-09 10:03:06 | 000,407,328 | ---- | M] () -- C:\Program Files\SmarterPower\updateSmarterPower.exe PRC - [2015-02-09 10:02:15 | 000,123,680 | ---- | M] () -- C:\ProgramData\66d59f5c-9429-4c86-9f63-c339daeaabaf\maintainer.exe PRC - [2015-02-09 10:02:01 | 000,407,328 | ---- | M] () -- C:\Program Files\SmarterPower\bin\utilSmarterPower.exe PRC - [2015-02-09 01:36:39 | 000,105,760 | ---- | M] () -- C:\Program Files\SmarterPower\bin\SmarterPower.BrowserAdapter.exe PRC - [2015-02-08 14:30:58 | 000,101,664 | ---- | M] () -- C:\Program Files\SmarterPower\bin\SmarterPower.expext.exe PRC - [2015-02-04 10:02:55 | 000,843,592 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe PRC - [2014-12-18 09:51:14 | 003,667,472 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2015\avgui.exe PRC - [2014-12-18 09:49:46 | 000,669,200 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2015\avgemcx.exe PRC - [2014-12-18 09:45:26 | 000,298,080 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2015\avgwdsvc.exe PRC - [2014-12-16 10:44:53 | 000,485,376 | ---- | M] (Fuyu LIMITED) -- C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe PRC - [2014-09-17 12:59:00 | 000,715,656 | ---- | M] (Cherished Technololgy LIMITED) -- C:\ProgramData\IePluginServices\PluginService.exe PRC - [2009-04-11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009-04-11 07:27:28 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe PRC - [2007-03-09 18:50:02 | 004,390,912 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe PRC - [2007-02-12 15:38:04 | 000,355,096 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe PRC - [2007-02-12 15:37:58 | 000,174,872 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe PRC - [2007-02-07 15:30:00 | 000,065,536 | R--- | M] (Cognizance Corporation) -- c:\Program Files\Bioscrypt\VeriSoft\Bin\asghost.exe PRC - [2006-12-20 11:27:40 | 000,719,664 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe PRC - [2006-12-20 11:27:38 | 001,600,304 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe PRC - [2006-10-09 21:43:44 | 000,729,088 | ---- | M] (Motorola Inc.) -- C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2015-02-09 01:36:39 | 000,105,760 | ---- | M] () -- C:\Program Files\SmarterPower\bin\SmarterPower.BrowserAdapter.exe MOD - [2015-02-08 14:31:02 | 000,082,208 | ---- | M] () -- C:\Program Files\SmarterPower\bin\SmarterPower.expextdll.dll MOD - [2015-02-08 14:30:58 | 000,101,664 | ---- | M] () -- C:\Program Files\SmarterPower\bin\SmarterPower.expext.exe MOD - [2015-02-04 10:02:53 | 014,965,064 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\40.0.2214.111\PepperFlash\pepflashplayer.dll MOD - [2015-02-04 10:02:51 | 009,170,760 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\40.0.2214.111\pdf.dll MOD - [2013-10-12 15:54:14 | 001,880,576 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Deployment\50ff73d7b2903b00d86f91eefa62d1c9\System.Deployment.ni.dll MOD - [2013-10-12 14:24:55 | 013,199,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\e40d894a772b2cff5ffd5a84ef20d2d4\System.Windows.Forms.ni.dll MOD - [2013-10-12 14:23:39 | 003,858,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\0b37b2bafc33ef52282b9d7b217cabaf\WindowsBase.ni.dll MOD - [2013-10-12 14:23:28 | 000,751,616 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Security\d38fa9699dd602db6b0a1a83ffe8dbea\System.Security.ni.dll MOD - [2013-10-12 14:23:26 | 001,014,272 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\71d887ce964fb69b7f03c4fe7a3f28ff\System.Configuration.ni.dll MOD - [2013-08-14 20:01:56 | 005,628,928 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\884bcbd22130ebeb1211bc7bcc3910c9\System.Xml.ni.dll MOD - [2013-08-14 20:00:55 | 001,667,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\3a3fc0216674bdea0be809b305517c98\System.Drawing.ni.dll MOD - [2013-08-14 20:00:41 | 009,099,776 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\de853615c8224ba5d9aa9b76276c6d98\System.ni.dll MOD - [2013-07-13 18:19:44 | 000,044,544 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Accessibility\51fe07d5205cd85d996af305a38b3770\Accessibility.ni.dll MOD - [2013-07-13 18:19:44 | 000,009,728 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\dfsvc\6f535fc61488827a4a150d78b2ffb5c5\dfsvc.ni.exe MOD - [2013-07-11 23:12:41 | 011,497,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\6a938df70a8b7996a3890b4f34c83906\mscorlib.ni.dll MOD - [2013-07-11 22:47:05 | 014,416,896 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\cf58670896c5313b9b52f026f4455a5d\mscorlib.ni.dll MOD - [2006-12-20 11:18:56 | 000,126,976 | ---- | M] () -- C:\Program Files\WIDCOMM\Bluetooth Software\BTKeyInd.dll MOD - [2006-12-20 11:00:12 | 000,389,120 | ---- | M] () -- C:\Windows\System32\btwhidcs.dll MOD - [2006-10-09 21:43:50 | 000,065,536 | ---- | M] () -- C:\Program Files\Motorola\SMSERIAL\sm56ita.dll MOD - [2006-10-09 21:43:50 | 000,065,536 | ---- | M] () -- C:\Program Files\Motorola\SMSERIAL\sm56esp.dll MOD - [2006-10-09 21:43:50 | 000,065,536 | ---- | M] () -- C:\Program Files\Motorola\SMSERIAL\sm56brz.dll MOD - [2006-10-09 21:43:50 | 000,053,248 | ---- | M] () -- C:\Program Files\Motorola\SMSERIAL\sm56kor.dll MOD - [2006-10-09 21:43:48 | 000,065,536 | ---- | M] () -- C:\Program Files\Motorola\SMSERIAL\sm56ger.dll MOD - [2006-10-09 21:43:48 | 000,065,536 | ---- | M] () -- C:\Program Files\Motorola\SMSERIAL\sm56fra.dll MOD - [2006-10-09 21:43:48 | 000,065,536 | ---- | M] () -- C:\Program Files\Motorola\SMSERIAL\sm56dnk.dll MOD - [2006-10-09 21:43:48 | 000,057,344 | ---- | M] () -- C:\Program Files\Motorola\SMSERIAL\sm56jpn.dll MOD - [2006-10-09 21:43:48 | 000,053,248 | ---- | M] () -- C:\Program Files\Motorola\SMSERIAL\sm56cht.dll MOD - [2006-10-09 21:43:48 | 000,053,248 | ---- | M] () -- C:\Program Files\Motorola\SMSERIAL\sm56chs.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - [2015-02-09 10:03:06 | 000,407,328 | ---- | M] () [Auto | Running] -- C:\Program Files\SmarterPower\updateSmarterPower.exe -- (Update SmarterPower) SRV - [2015-02-09 10:02:15 | 000,123,680 | ---- | M] () [Auto | Running] -- C:\ProgramData\66d59f5c-9429-4c86-9f63-c339daeaabaf\maintainer.exe -- (MaintainerSvc7.71.837357) SRV - [2015-02-09 10:02:01 | 000,407,328 | ---- | M] () [Auto | Running] -- C:\Program Files\SmarterPower\bin\utilSmarterPower.exe -- (Util SmarterPower) SRV - [2015-02-06 14:52:37 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2014-12-18 09:54:30 | 003,432,976 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] -- C:\Program Files\AVG\AVG2015\avgidsagent.exe -- (AVGIDSAgent) SRV - [2014-12-18 09:45:26 | 000,298,080 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2015\avgwdsvc.exe -- (avgwd) SRV - [2014-12-16 10:44:53 | 000,485,376 | ---- | M] (Fuyu LIMITED) [Auto | Running] -- C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe -- (WindowsMangerProtect) SRV - [2014-09-17 12:59:00 | 000,715,656 | ---- | M] (Cherished Technololgy LIMITED) [Auto | Running] -- C:\ProgramData\IePluginServices\PluginService.exe -- (IePluginServices) SRV - [2014-02-03 20:42:48 | 000,060,416 | ---- | M] () [Unknown (-1) | Unknown] -- C:\Windows\System32\drivers\8ff4e346ea55b993.sys -- (8ff4e346ea55b993) SRV - [2014-02-03 19:28:03 | 000,067,584 | ---- | M] () [Auto | Running] -- C:\Windows\Installer\{F692910A-24B6-E956-3F28-45AB1ED8EFBD}\syshost.exe -- (syshost32) SRV - [2008-01-19 08:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2007-02-12 15:38:04 | 000,355,096 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) SRV - [2007-02-07 15:30:00 | 000,074,240 | R--- | M] (Cognizance Corporation) [Auto | Running] -- c:\Program Files\Bioscrypt\VeriSoft\Bin\ASWLNPkg.dll -- (ASBroker) SRV - [2007-01-05 07:19:28 | 000,047,712 | ---- | M] (Symantec Corporation) [Auto | Stopped] -- c:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe -- (SymAppCore) SRV - [2006-06-22 08:14:00 | 000,131,584 | R--- | M] (Cognizance Corporation) [Auto | Running] -- c:\Program Files\Bioscrypt\VeriSoft\Bin\ASChnl.dll -- (ASChannel) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) DRV - File not found [File_System | System | Stopped] -- C:\Program Files\Elex-tech\YAC\iSafeKrnlMon.sys -- (iSafeKrnlMon) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp) DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive) DRV - [2014-12-08 21:25:06 | 000,208,152 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Stopped] -- C:\Windows\System32\drivers\avgidsdriverx.sys -- (AVGIDSDriver) DRV - [2014-12-02 08:31:12 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\{8e282837-b584-46f4-a220-bfdd4678d061}t.sys -- ({8e282837-b584-46f4-a220-bfdd4678d061}t) DRV - [2014-12-01 06:23:26 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\{c28516e7-f1f3-4437-81ce-ec213355cd9c}t.sys -- ({c28516e7-f1f3-4437-81ce-ec213355cd9c}t) DRV - [2014-11-30 04:30:16 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\{c393de5d-8149-4434-ab91-01ec8ea15264}t.sys -- ({c393de5d-8149-4434-ab91-01ec8ea15264}t) DRV - [2014-11-29 15:25:10 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\{d0ee745f-6f92-44ac-a7b8-87dfc4a60a3a}t.sys -- ({d0ee745f-6f92-44ac-a7b8-87dfc4a60a3a}t) DRV - [2014-11-28 13:22:46 | 000,055,872 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\{24616444-765b-4b21-a0d9-3f0c17b29bfe}t.sys -- ({24616444-765b-4b21-a0d9-3f0c17b29bfe}t) DRV - [2014-11-18 21:41:58 | 000,154,904 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Stopped] -- C:\Windows\System32\drivers\avgidshx.sys -- (AVGIDSHX) DRV - [2014-10-23 11:26:58 | 000,055,832 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\{efa349b9-003c-4506-9e55-957c1cff853c}t.sys -- ({efa349b9-003c-4506-9e55-957c1cff853c}t) DRV - [2014-10-22 07:31:00 | 000,055,832 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\{71d5e150-c72b-4e5b-a773-e49420251642}t.sys -- ({71d5e150-c72b-4e5b-a773-e49420251642}t) DRV - [2014-10-21 10:58:22 | 000,055,832 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\{632916e0-3570-41b8-afb5-b10d86ad94c7}t.sys -- ({632916e0-3570-41b8-afb5-b10d86ad94c7}t) DRV - [2014-10-21 04:00:02 | 000,055,832 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\{651e31c1-db10-434b-a173-a9b0e6a15ce0}t.sys -- ({651e31c1-db10-434b-a173-a9b0e6a15ce0}t) DRV - [2014-10-19 10:04:36 | 000,055,832 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\{98a55059-ac5d-40d9-81ae-6bff294c9b89}t.sys -- ({98a55059-ac5d-40d9-81ae-6bff294c9b89}t) DRV - [2014-10-17 23:06:34 | 000,055,832 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\{807699ff-a8ae-4ba9-8010-fe7f44646ff9}t.sys -- ({807699ff-a8ae-4ba9-8010-fe7f44646ff9}t) DRV - [2014-10-15 10:16:36 | 000,055,832 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\{f06ee1ad-d0c2-4bf7-ada2-fa0fb563c169}t.sys -- ({f06ee1ad-d0c2-4bf7-ada2-fa0fb563c169}t) DRV - [2014-10-14 12:05:00 | 000,055,832 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\{c9fb27aa-f512-464b-babd-d42f0443465f}t.sys -- ({c9fb27aa-f512-464b-babd-d42f0443465f}t) DRV - [2014-10-13 02:03:52 | 000,055,832 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\{fec0fd95-7a4f-4f0e-93f4-63bcf3ad1706}t.sys -- ({fec0fd95-7a4f-4f0e-93f4-63bcf3ad1706}t) DRV - [2014-10-12 06:44:22 | 000,055,832 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\{b52a596e-357b-4007-9a88-5592a17b1be9}t.sys -- ({b52a596e-357b-4007-9a88-5592a17b1be9}t) DRV - [2014-10-11 20:43:36 | 000,055,832 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\{e168bb47-74a7-440b-bf7d-d17153007d6b}t.sys -- ({e168bb47-74a7-440b-bf7d-d17153007d6b}t) DRV - [2014-10-11 08:13:36 | 000,055,832 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\{bf167862-9559-4b38-94c6-2e5edae3632c}t.sys -- ({bf167862-9559-4b38-94c6-2e5edae3632c}t) DRV - [2014-10-10 15:13:58 | 000,200,984 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\avgtdix.sys -- (Avgtdix) DRV - [2014-10-05 20:42:06 | 000,098,584 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Stopped] -- C:\Windows\System32\drivers\avgmfx86.sys -- (Avgmfx86) DRV - [2014-09-18 05:58:28 | 000,055,064 | ---- | M] (StdLib) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\{5eeb83d0-96ea-4249-942c-beead6847053}t.sys -- ({5eeb83d0-96ea-4249-942c-beead6847053}t) DRV - [2014-08-28 20:43:36 | 000,192,792 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Stopped] -- C:\Windows\System32\drivers\avgldx86.sys -- (Avgldx86) DRV - [2014-07-18 14:55:24 | 000,230,680 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Stopped] -- C:\Windows\System32\drivers\avglogx.sys -- (Avglogx) DRV - [2014-06-18 20:03:36 | 000,027,416 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Stopped] -- C:\Windows\System32\drivers\avgrkx86.sys -- (Avgrkx86) DRV - [2014-06-18 20:03:34 | 000,121,624 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Stopped] -- C:\Windows\System32\drivers\avgdiskx.sys -- (Avgdiskx) DRV - [2014-06-18 20:03:34 | 000,021,272 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\avgidsshimx.sys -- (AVGIDSShim) DRV - [2014-02-03 20:42:48 | 000,060,416 | ---- | M] () [Unknown (-1) | Unknown (-1) | Unknown] -- C:\Windows\System32\drivers\8ff4e346ea55b993.sys -- (8ff4e346ea55b993) DRV - [2013-06-27 00:01:59 | 000,527,064 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\Wdf01000.sys -- (Wdf01000) DRV - [2012-08-21 12:47:42 | 000,224,640 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\volsnap.sys -- (volsnap) DRV - [2012-07-26 03:33:43 | 000,066,560 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WudfPf.sys -- (WudfPf) DRV - [2012-07-26 03:32:51 | 000,155,136 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\WUDFRd.sys -- (WUDFRd) DRV - [2009-10-03 05:02:06 | 009,905,096 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2009-10-01 02:01:54 | 000,040,448 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\wpdusb.sys -- (WpdUsb) DRV - [2009-04-11 07:33:03 | 000,292,840 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\volmgrx.sys -- (volmgrx) DRV - [2009-04-11 05:45:24 | 000,113,664 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rmcast.sys -- (RMCAST) DRV - [2008-07-16 19:37:08 | 000,261,680 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Symantec\Definitions\SymcData\idsdefs\20080813.001\IDSvix86.sys -- (IDSvix86) DRV - [2008-05-02 10:58:14 | 000,008,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2008-01-19 08:42:18 | 000,052,792 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\volmgr.sys -- (volmgr) DRV - [2008-01-19 06:56:49 | 000,015,872 | ---- | M] () [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\ws2ifsl.sys -- (ws2ifsl) DRV - [2008-01-19 06:56:31 | 000,062,464 | ---- | M] () [Kernel | System | Running] -- C:\Windows\System32\DRIVERS\wanarp.sys -- (Wanarpv6) DRV - [2008-01-19 06:56:31 | 000,062,464 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\wanarp.sys -- (Wanarp) DRV - [2008-01-19 06:32:47 | 000,011,264 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\DRIVERS\wmiacpi.sys -- (WmiAcpi) DRV - [2007-06-02 09:02:33 | 000,115,000 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent) DRV - [2007-03-28 17:44:22 | 000,140,424 | ---- | M] (AuthenTec, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atswpdrv.sys -- (ATSWPDRV) DRV - [2007-03-05 22:28:00 | 000,076,288 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169) DRV - [2007-03-01 13:49:58 | 002,216,448 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw4v32.sys -- (NETw4v32) DRV - [2007-02-24 15:42:22 | 000,039,936 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk) DRV - [2007-01-23 18:03:28 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp) DRV - [2007-01-23 17:40:20 | 000,042,496 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk) DRV - [2006-11-30 09:24:58 | 000,008,192 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\eabfiltr.sys -- (eabfiltr) DRV - [2006-11-02 10:49:38 | 000,019,560 | ---- | M] () [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\wd.sys -- (Wd) DRV - [2006-11-02 09:52:52 | 000,020,608 | ---- | M] () [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\wacompen.sys -- (WacomPen) DRV - [2006-10-09 21:47:58 | 000,981,504 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\smserial.sys -- (smserial) DRV - [2006-06-28 08:54:00 | 000,009,472 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CPQBttn.sys -- (HBtnKey) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1410955078&from=cor&uid=WDCXWD1200BEVS-60UST0_WD-WXEY0705096950969&q={searchTerms} IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1410955078&from=cor&uid=WDCXWD1200BEVS-60UST0_WD-WXEY0705096950969&q={searchTerms} IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2017167699-4189153585-33444452-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank IE - HKU\S-1-5-21-2017167699-4189153585-33444452-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/web/?type=ds&ts=1418925293&from=wpm12173&uid=WDCXWD1200BEVS-60UST0_WD-WXEY0705096950969&q={searchTerms} IE - HKU\S-1-5-21-2017167699-4189153585-33444452-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?type=ds&ts=1418925293&from=wpm12173&uid=WDCXWD1200BEVS-60UST0_WD-WXEY0705096950969&q={searchTerms} IE - HKU\S-1-5-21-2017167699-4189153585-33444452-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.pl/ IE - HKU\S-1-5-21-2017167699-4189153585-33444452-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKU\S-1-5-21-2017167699-4189153585-33444452-1000\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKU\S-1-5-21-2017167699-4189153585-33444452-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-2017167699-4189153585-33444452-1000\..\SearchScopes\{25A1B9D5-DA50-46E7-B0B4-FDF621F00AB8}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^PL&apn_uid=CB261367-3E6B-47E4-BE62-11F0D680ED0E&apn_sauid=6B96E8A6-9DF8-49E6-A954-460125927291 IE - HKU\S-1-5-21-2017167699-4189153585-33444452-1000\..\SearchScopes\{26D6B79C-34D1-4FD7-A605-B0FF0478E633}: "URL" = http://rts.dsrlte.com/?affID=na&q={searchTerms}&r=25 IE - HKU\S-1-5-21-2017167699-4189153585-33444452-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7RNSN_plPL400 IE - HKU\S-1-5-21-2017167699-4189153585-33444452-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.highlightCount: 0 FF - prefs.js..browser.search.isUS: false FF - prefs.js..browser.search.selectedEngine: "Yahoo! Search" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "https://www.google.pl/" FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:35.0.1 FF - prefs.js..keyword.URL: "http://search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=616_pr__alt__ddc_dss_bd_com&p=" FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll () FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_38: C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\faststartff@gmail.com: C:\Users\viola\AppData\Roaming\Mozilla\Firefox\Profiles\l0qsrcco.default\extensions\faststartff@gmail.com [2014-02-08 14:04:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\viola\AppData\Roaming\mozilla\Extensions [2015-02-09 08:50:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\viola\AppData\Roaming\mozilla\Firefox\Profiles\ktgiybg8.default-1423312566298\extensions [2014-09-17 12:57:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\viola\AppData\Roaming\mozilla\Firefox\Profilesl0qsrcco.default\extensions [2014-09-17 12:57:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\viola\AppData\Roaming\mozilla\Firefox\Profilesl0qsrcco.default\extensions\staged [2015-02-09 08:50:13 | 000,985,112 | ---- | M] () (No name found) -- C:\Users\viola\AppData\Roaming\mozilla\firefox\profiles\ktgiybg8.default-1423312566298\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-07-14 01:15:45 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [color=#E56717]========== Chrome ==========[/color] CHR - plugin: Error reading preferences file CHR - Extension: No name found = C:\Users\viola\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\ CHR - Extension: No name found = C:\Users\viola\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.4_0\ CHR - Extension: No name found = C:\Users\viola\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.7_0\ CHR - Extension: No name found = C:\Users\viola\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpbonkpihnhpcfagkbjgcobinefoahfa\1.0.1_0\ CHR - Extension: No name found = C:\Users\viola\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: No name found = C:\Users\viola\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\ CHR - Extension: No name found = C:\Users\viola\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2006-09-18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found. O2 - BHO: (SmarterPower 1.0.0.7) - {bd7c9b62-a7d9-4405-be51-7fd633f08791} - C:\Program Files\SmarterPower\SmarterPowerBHO.dll (SmarterPower) O2 - BHO: (VeriSoft Access Manager) - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - c:\Program Files\Bioscrypt\VeriSoft\Bin\ItIEAddIn.dll (Bioscrypt Inc.) O3 - HKU\S-1-5-21-2017167699-4189153585-33444452-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found. O3 - HKU\S-1-5-21-2017167699-4189153585-33444452-1000\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O4 - HKLM..\Run: [AVG_UI] C:\Program Files\AVG\AVG2015\avgui.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation) O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe (Motorola Inc.) O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O8 - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O8 - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_38-windows-i586.cab (Java Plug-in 1.6.0_38) O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab (Java Plug-in 1.6.0) O16 - DPF: {CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_38-windows-i586.cab (Java Plug-in 1.6.0_38) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_38-windows-i586.cab (Java Plug-in 1.6.0_38) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.204.159.1 8.8.8.8 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{317EAAE7-3DF4-43E0-9930-CBFD9268A42C}: DhcpNameServer = 194.204.159.1 8.8.8.8 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BDDEEF49-8421-481A-9A13-EDC5BDB05A87}: DhcpNameServer = 8.8.8.8 8.8.4.4 O20 - AppInit_DLLs: (APSHook.dll) - C:\Windows\System32\APSHook.dll (Cognizance Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img18.jpg O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img18.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2005-09-11 16:18:54 | 000,000,340 | -HS- | M] () - D:\AUTOMODE -- [ NTFS ] O33 - MountPoints2\{adf23e9f-b7ff-11e3-9019-001e3765ce3a}\Shell - "" = AutoRun O33 - MountPoints2\{adf23e9f-b7ff-11e3-9019-001e3765ce3a}\Shell\AutoRun\command - "" = F:\HTC_Sync_Manager_PC.exe O33 - MountPoints2\F\Shell - "" = AutoRun O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\HTC_Sync_Manager_PC.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2015-02-09 13:08:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome [2015-02-09 13:06:45 | 000,000,000 | ---D | C] -- C:\Users\viola\AppData\Local\Deployment [2015-02-09 13:06:45 | 000,000,000 | ---D | C] -- C:\Users\viola\AppData\Local\Apps [2015-02-09 09:20:31 | 000,000,000 | ---D | C] -- C:\Users\viola\AppData\Roaming\AVG2015 [2015-02-09 09:19:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG [2015-02-09 09:19:23 | 000,000,000 | ---D | C] -- C:\Users\viola\AppData\Roaming\TuneUp Software [2015-02-09 09:16:20 | 000,000,000 | -H-D | C] -- C:\$AVG [2015-02-09 09:16:20 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG2015 [2015-02-09 09:14:43 | 000,000,000 | ---D | C] -- C:\Program Files\AVG [2015-02-09 09:09:36 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files [2015-02-09 09:09:36 | 000,000,000 | ---D | C] -- C:\Users\viola\AppData\Local\MFAData [2015-02-09 09:09:36 | 000,000,000 | ---D | C] -- C:\ProgramData\MFAData [2015-02-09 09:09:36 | 000,000,000 | ---D | C] -- C:\Users\viola\AppData\Local\Avg2015 [2015-02-07 13:35:00 | 000,000,000 | ---D | C] -- C:\Users\viola\Desktop\Stare dane programu Firefox [2015-02-06 14:59:21 | 000,000,000 | ---D | C] -- C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB [2015-01-15 18:40:06 | 000,000,000 | ---D | C] -- C:\Program Files\Elex-tech [2015-01-15 18:39:35 | 000,000,000 | ---D | C] -- C:\Users\viola\AppData\Local\Temp{1ACD9B49-1FC1-4B6C-B0A4-A6026E64F9D2} [2015-01-15 18:38:30 | 000,000,000 | ---D | C] -- C:\Users\viola\AppData\Local\Temp{A4148AF9-D1A2-4172-9A6A-D2618C6352D1} [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2015-02-09 13:12:15 | 000,001,034 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2015-02-09 13:12:00 | 000,001,030 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2015-02-09 13:08:40 | 000,001,977 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2015-02-09 12:52:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2015-02-09 12:07:52 | 000,031,871 | ---- | M] () -- C:\ProgramData\nvModes.dat [2015-02-09 12:07:52 | 000,031,871 | ---- | M] () -- C:\ProgramData\nvModes.001 [2015-02-09 12:07:22 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2015-02-09 12:07:22 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2015-02-09 12:07:13 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2015-02-09 12:07:10 | 2145,837,056 | -HS- | M] () -- C:\hiberfil.sys [2015-02-09 11:53:01 | 000,003,204 | ---- | M] () -- C:\Windows\bthservsdp.dat [2015-02-09 10:21:27 | 000,672,140 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2015-02-09 10:21:27 | 000,595,996 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2015-02-09 10:21:27 | 000,130,516 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2015-02-09 10:21:27 | 000,104,070 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2015-02-09 09:19:24 | 000,000,872 | ---- | M] () -- C:\Users\Public\Desktop\AVG 2015.lnk [2015-02-07 17:18:06 | 000,007,808 | ---- | M] () -- C:\Users\viola\AppData\Local\d3d9caps.dat [2015-02-07 09:19:28 | 000,432,912 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2015-02-06 14:52:37 | 000,701,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe [2015-02-06 14:52:37 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [2015-02-06 13:13:39 | 000,000,804 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk [2015-02-06 12:59:28 | 000,000,148 | ---- | M] () -- C:\Users\Public\Documents\hpqp.ini [2015-01-16 20:51:36 | 000,017,920 | ---- | M] () -- C:\Users\viola\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [color=#E56717]========== Files Created - No Company Name ==========[/color] [2015-02-09 13:08:40 | 000,001,977 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2015-02-09 13:07:06 | 000,001,034 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2015-02-09 13:07:05 | 000,001,030 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2015-02-09 09:19:24 | 000,000,872 | ---- | C] () -- C:\Users\Public\Desktop\AVG 2015.lnk [2015-02-07 09:18:33 | 000,432,912 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2015-02-06 15:01:01 | 000,026,840 | ---- | C] () -- C:\Windows\System32\drivers\GEARAspiWDM.sys [2015-01-09 18:33:59 | 000,000,000 | ---- | C] () -- C:\Users\viola\AppData\Local\{BCC74575-D715-4181-9603-7C7BBB874254} [2014-09-30 22:52:30 | 000,000,266 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2014-02-03 20:42:48 | 000,060,416 | ---- | C] () -- C:\Windows\System32\drivers\8ff4e346ea55b993.sys [2013-12-10 22:29:12 | 002,050,560 | ---- | C] () -- C:\Windows\System32\win32k.sys [2013-12-10 22:29:10 | 000,167,936 | ---- | C] () -- C:\Windows\System32\drivers\portcls.sys [2013-12-10 22:29:10 | 000,130,048 | ---- | C] () -- C:\Windows\System32\drivers\drmk.sys [2013-10-10 19:45:44 | 000,638,400 | ---- | C] () -- C:\Windows\System32\drivers\dxgkrnl.sys [2013-10-10 19:45:44 | 000,037,376 | ---- | C] () -- C:\Windows\System32\cdd.dll [2013-10-10 19:45:21 | 000,197,632 | ---- | C] () -- C:\Windows\System32\drivers\usbhub.sys [2013-10-10 19:45:20 | 000,226,304 | ---- | C] () -- C:\Windows\System32\drivers\usbport.sys [2013-10-10 19:45:20 | 000,073,216 | ---- | C] () -- C:\Windows\System32\drivers\usbccgp.sys [2013-10-10 19:45:20 | 000,006,016 | ---- | C] () -- C:\Windows\System32\drivers\usbd.sys [2013-10-10 19:45:19 | 000,039,936 | ---- | C] () -- C:\Windows\System32\drivers\usbehci.sys [2013-10-10 19:45:19 | 000,023,552 | ---- | C] () -- C:\Windows\System32\drivers\usbuhci.sys [2013-10-10 19:45:17 | 000,134,272 | ---- | C] () -- C:\Windows\System32\drivers\usbvideo.sys [2013-10-10 19:45:15 | 000,527,064 | ---- | C] () -- C:\Windows\System32\drivers\Wdf01000.sys [2013-10-10 19:45:11 | 000,293,376 | ---- | C] () -- C:\Windows\System32\atmfd.dll [2013-10-10 19:45:05 | 000,025,472 | ---- | C] () -- C:\Windows\System32\drivers\hidparse.sys [2013-08-13 22:28:31 | 000,024,064 | ---- | C] () -- C:\Windows\System32\drivers\tssecsrv.sys [2013-08-13 22:28:30 | 000,905,664 | ---- | C] () -- C:\Windows\System32\drivers\tcpip.sys [2013-08-13 22:27:52 | 003,603,904 | ---- | C] () -- C:\Windows\System32\ntkrnlpa.exe [2013-04-28 09:05:50 | 000,040,448 | ---- | C] () -- C:\Windows\System32\drivers\WpdUsb.sys [2013-04-28 08:49:37 | 000,012,800 | ---- | C] () -- C:\Windows\System32\drivers\fs_rec.sys [2013-04-28 08:00:50 | 000,155,136 | ---- | C] () -- C:\Windows\System32\drivers\WUDFRd.sys [2013-04-28 08:00:50 | 000,066,560 | ---- | C] () -- C:\Windows\System32\drivers\WUDFPf.sys [2013-04-28 08:00:49 | 000,047,720 | ---- | C] () -- C:\Windows\System32\drivers\WdfLdr.sys [2013-04-27 20:10:35 | 000,508,416 | ---- | C] () -- C:\Windows\System32\drivers\bthport.sys [2013-04-27 20:10:35 | 000,030,208 | ---- | C] () -- C:\Windows\System32\drivers\BTHUSB.SYS [2013-04-27 20:09:55 | 000,049,152 | ---- | C] () -- C:\Windows\System32\csrsrv.dll [2013-04-27 20:09:36 | 000,053,120 | ---- | C] () -- C:\Windows\System32\drivers\partmgr.sys [2013-04-27 20:09:35 | 000,224,640 | ---- | C] () -- C:\Windows\System32\drivers\volsnap.sys [2013-04-27 20:08:10 | 001,082,232 | ---- | C] () -- C:\Windows\System32\drivers\ntfs.sys [2013-04-27 20:05:44 | 000,180,736 | ---- | C] () -- C:\Windows\System32\drivers\rdpwd.sys [2013-04-27 20:04:39 | 000,440,704 | ---- | C] () -- C:\Windows\System32\drivers\ksecdd.sys [2013-04-27 20:04:29 | 000,015,872 | ---- | C] () -- C:\Windows\System32\drivers\usb8023.sys [2009-12-09 20:58:57 | 000,031,871 | ---- | C] () -- C:\ProgramData\nvModes.dat [2009-12-09 20:58:57 | 000,031,871 | ---- | C] () -- C:\ProgramData\nvModes.001 [2009-02-17 21:34:20 | 000,007,808 | ---- | C] () -- C:\Users\viola\AppData\Local\d3d9caps.dat [2007-05-07 22:17:36 | 000,027,335 | ---- | C] () -- C:\Users\viola\AppData\Roaming\nvModes.001 [2007-05-06 11:27:28 | 000,027,335 | ---- | C] () -- C:\Users\viola\AppData\Roaming\nvModes.dat [2007-04-28 22:18:58 | 000,017,920 | ---- | C] () -- C:\Users\viola\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [color=#E56717]========== ZeroAccess Check ==========[/color] [2006-11-02 13:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012-06-08 18:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2009-04-11 07:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009-04-11 07:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2015-02-09 09:20:31 | 000,000,000 | ---D | M] -- C:\Users\viola\AppData\Roaming\AVG2015 [2010-03-17 18:23:17 | 000,000,000 | ---D | M] -- C:\Users\viola\AppData\Roaming\DataLayer [2008-09-04 21:37:18 | 000,000,000 | ---D | M] -- C:\Users\viola\AppData\Roaming\Gadu-Gadu [2015-02-07 14:27:00 | 000,000,000 | ---D | M] -- C:\Users\viola\AppData\Roaming\ipla [2008-12-14 19:32:51 | 000,000,000 | ---D | M] -- C:\Users\viola\AppData\Roaming\Leadertech [2015-02-09 08:22:16 | 000,000,000 | ---D | M] -- C:\Users\viola\AppData\Roaming\Nokia [2010-03-17 18:01:11 | 000,000,000 | ---D | M] -- C:\Users\viola\AppData\Roaming\Nokia Multimedia Player [2015-02-06 13:21:34 | 000,000,000 | ---D | M] -- C:\Users\viola\AppData\Roaming\Opera Software [2008-12-14 18:39:21 | 000,000,000 | ---D | M] -- C:\Users\viola\AppData\Roaming\PC Suite [2015-02-09 09:19:23 | 000,000,000 | ---D | M] -- C:\Users\viola\AppData\Roaming\TuneUp Software [2014-09-17 12:57:45 | 000,000,000 | ---D | M] -- C:\Users\viola\AppData\Roaming\WebExtend [2015-01-15 18:07:23 | 000,000,000 | ---D | M] -- C:\Users\viola\AppData\Roaming\WinZipper [color=#E56717]========== Purity Check ==========[/color] < End of report >