OTL logfile created on: 2016-03-28 01:14:28 - Run 1
OTL by OldTimer - Version 3.2.70.2     Folder = C:\Users\User\Downloads
 Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.18230)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,88 Gb Total Physical Memory | 2,36 Gb Available Physical Memory | 81,71% Memory free
5,36 Gb Paging File | 4,83 Gb Available in Paging File | 90,05% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 110,35 Gb Total Space | 3,84 Gb Free Space | 3,48% Space Free | Partition Type: NTFS
 
Computer Name: KP_109 | User Name: User | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2016-03-28 01:14:04 | 000,601,088 | ---- | M] (OldTimer Tools) -- C:\Users\User\Downloads\OTL 3.2.70.2 [1].exe
PRC - [2016-01-22 07:12:59 | 002,973,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2011-07-25 18:04:15 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\prevhost.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - [2016-03-24 07:59:56 | 000,104,680 | ---- | M] (TData.com) [Auto | Stopped] -- C:\Program Files\TData\TData.exe -- (TDataSvr)
SRV - [2016-03-16 19:57:09 | 002,104,840 | ---- | M] (Electronic Arts) [On_Demand | Stopped] -- C:\Program Files\Origin\OriginClientService.exe -- (Origin Client Service)
SRV - [2016-03-10 21:02:50 | 000,835,152 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2016-03-10 14:07:30 | 001,136,608 | ---- | M] (Malwarebytes) [Auto | Stopped] -- C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2016-03-10 14:07:28 | 001,514,464 | ---- | M] (Malwarebytes) [Auto | Stopped] -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2016-02-08 22:28:58 | 000,102,912 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\windows\System32\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV - [2016-01-15 16:56:30 | 001,082,232 | ---- | M] (Disc Soft Ltd) [On_Demand | Stopped] -- C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe -- (Disc Soft Lite Bus Service)
SRV - [2015-10-02 06:53:33 | 000,269,000 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2015-07-22 19:53:34 | 000,937,984 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\System32\diagtrack.dll -- (DiagTrack)
SRV - [2015-07-09 13:14:04 | 000,327,296 | R--- | M] (Skype Technologies) [Disabled | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2015-06-24 15:30:42 | 000,359,128 | ---- | M] (VMware, Inc.) [Auto | Stopped] -- C:\Windows\System32\vmnetdhcp.exe -- (VMnetDHCP)
SRV - [2015-06-24 15:30:40 | 000,437,976 | ---- | M] (VMware, Inc.) [Auto | Stopped] -- C:\Windows\System32\vmnat.exe -- (VMware NAT Service)
SRV - [2015-06-24 14:26:14 | 000,087,256 | ---- | M] (VMware, Inc.) [Auto | Stopped] -- C:\Program Files\VMware\VMware Player\vmware-authd.exe -- (VMAuthdService)
SRV - [2015-06-24 12:52:26 | 005,101,328 | ---- | M] (TeamViewer GmbH) [Disabled | Stopped] -- C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8)
SRV - [2014-08-21 09:07:00 | 000,722,624 | ---- | M] (VMware, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe -- (VMUSBArbService)
SRV - [2014-07-23 01:47:10 | 000,142,648 | ---- | M] (SUPERAntiSpyware.com) [Disabled | Stopped] -- C:\Program Files\SUPERAntiSpyware\SASCore.exe -- (!SASCORE)
SRV - [2013-09-03 13:21:26 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2013-05-27 06:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2013-05-01 14:38:58 | 000,488,960 | ---- | M] (Softex Inc.) [Auto | Stopped] -- C:\Program Files\Softex\SecureDisable\Client\SDIClientService.exe -- (SDIClientService)
SRV - [2012-10-04 06:17:10 | 000,639,024 | ---- | M] (LANDesk Software, Inc. and its affiliates.) [Auto | Stopped] -- C:\Program Files\LANDesk\LDClient\SoftMon.exe -- (Softmon)
SRV - [2012-10-04 06:16:54 | 000,199,744 | ---- | M] (LANDesk Software, Inc. and its affiliates.) [Auto | Stopped] -- C:\Program Files\LANDesk\LDClient\LocalSch.EXE -- (Intel Local Scheduler Service)
SRV - [2012-10-04 04:02:46 | 000,179,200 | ---- | M] (LANDesk Software, Inc. and its affiliates.) [Auto | Stopped] -- C:\Program Files\LANDesk\LDClient\tmcsvc.exe -- (LANDesk Targeted Multicast)
SRV - [2012-10-04 03:02:02 | 000,032,825 | ---- | M] (LANDesk Software Ltd.) [Auto | Stopped] -- C:\Windows\System32\cba\pds.exe -- (Intel PDS)
SRV - [2012-09-13 02:15:30 | 000,523,680 | ---- | M] (Hewlett-Packard Company) [Auto | Stopped] -- C:\Program Files\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe -- (hpHotkeyMonitor)
SRV - [2012-08-27 11:35:16 | 000,157,496 | ---- | M] (LANDesk Software, Inc. and its affiliates.) [Auto | Stopped] -- C:\Program Files\LANDesk\Shared Files\residentAgent.exe -- (CBA8)
SRV - [2012-07-18 21:00:54 | 000,365,376 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2012-07-18 21:00:52 | 000,277,824 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2012-07-18 21:00:28 | 000,166,720 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe -- (jhi_service)
SRV - [2012-06-19 19:03:28 | 000,462,088 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- c:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
SRV - [2012-04-02 10:26:36 | 000,276,248 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\System32\IntelCpHeciSvc.exe -- (cphs)
SRV - [2012-03-20 16:28:20 | 002,325,584 | ---- | M] (Validity Sensors, Inc.) [Auto | Stopped] -- C:\Windows\System32\vcsFPService.exe -- (vcsFPService)
SRV - [2012-03-09 20:22:42 | 000,117,552 | ---- | M] (Portrait Displays, Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\Portrait Displays\Drivers\pdisrvc.exe -- (PdiService)
SRV - [2012-03-05 17:04:18 | 000,290,898 | ---- | M] (IDT, Inc.) [Auto | Stopped] -- C:\Program Files\IDT\WDM\stacsv.exe -- (STacSV)
SRV - [2012-03-01 04:06:36 | 000,013,592 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
SRV - [2012-02-02 03:31:28 | 000,775,968 | ---- | M] (Broadcom Corporation.) [Auto | Stopped] -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins)
SRV - [2011-11-26 00:22:44 | 000,312,688 | ---- | M] (Sierra Wireless, Inc.) [Auto | Stopped] -- C:\Program Files\Sierra Wireless Inc\Gobi\QDLService\GobiQDLService.exe -- (GobiQDLService)
SRV - [2009-07-14 03:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc)
SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009-07-14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\windows\system32\XDva424.sys -- (XDva424)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\clwvd.sys -- (clwvd)
DRV - [2016-03-28 00:52:16 | 000,170,200 | ---- | M] (Malwarebytes) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy)
DRV - [2016-03-10 14:09:04 | 000,053,120 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\mwac.sys -- (MBAMWebAccessControl)
DRV - [2016-03-10 14:08:52 | 000,024,448 | ---- | M] (Malwarebytes) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2016-02-25 16:23:14 | 000,040,504 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dtliteusbbus.sys -- (dtliteusbbus)
DRV - [2016-02-25 16:23:11 | 000,026,168 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dtlitescsibus.sys -- (dtlitescsibus)
DRV - [2015-11-05 11:48:20 | 000,117,760 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\rmcast.sys -- (RMCAST)
DRV - [2015-06-24 15:29:54 | 000,066,136 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\vmx86.sys -- (vmx86)
DRV - [2015-06-24 15:28:48 | 000,026,968 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\vmnetuserif.sys -- (VMnetuserif)
DRV - [2015-06-24 15:26:56 | 000,024,920 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\vmparport.sys -- (VMparport)
DRV - [2015-06-24 15:25:26 | 000,037,456 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\vmnetbridge.sys -- (VMnetBridge)
DRV - [2015-06-24 15:25:26 | 000,026,456 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VMkbd.sys -- (vmkbd)
DRV - [2015-06-24 15:25:26 | 000,017,104 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vmnetadapter.sys -- (VMnetAdapter)
DRV - [2014-08-21 09:07:12 | 000,043,968 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\hcmon.sys -- (hcmon)
DRV - [2014-02-07 13:17:24 | 000,034,896 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ScreamingBAudio.sys -- (SCREAMINGBDRIVER)
DRV - [2013-10-08 19:20:56 | 000,063,824 | ---- | M] (VMware, Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vsock.sys -- (vsock)
DRV - [2013-10-08 19:20:50 | 000,071,888 | ---- | M] (VMware, Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmci.sys -- (vmci)
DRV - [2013-10-02 02:42:31 | 000,049,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2013-04-26 05:40:18 | 000,148,720 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\jmcr.sys -- (JMCR)
DRV - [2012-11-20 23:15:02 | 001,826,784 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\snp2uvc.sys -- (SNP2UVC)
DRV - [2012-08-23 16:44:32 | 000,014,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2012-08-23 16:41:34 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2012-08-11 00:43:26 | 000,358,224 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\e1c6232.sys -- (e1cexpress)
DRV - [2012-07-17 18:12:08 | 000,055,104 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HECI.sys -- (MEI)
DRV - [2012-07-16 09:38:22 | 000,023,136 | ---- | M] (JMicron Technology Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\johci.sys -- (johci)
DRV - [2012-06-25 19:24:48 | 000,075,640 | ---- | M] (CyberLink) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\CLVirtualDrive.sys -- (CLVirtualDrive)
DRV - [2012-06-20 09:43:02 | 002,957,312 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2012-04-26 23:55:00 | 000,037,656 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Accelerometer.sys -- (Accelerometer)
DRV - [2012-04-26 23:54:00 | 000,027,928 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\hpdskflt.sys -- (hpdskflt)
DRV - [2012-03-27 11:13:20 | 000,792,856 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\iusb3xhc.sys -- (iusb3xhc)
DRV - [2012-03-27 11:13:20 | 000,349,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\iusb3hub.sys -- (iusb3hub)
DRV - [2012-03-27 11:13:20 | 000,015,640 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\iusb3hcs.sys -- (iusb3hcs)
DRV - [2012-03-05 17:04:18 | 000,445,952 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA)
DRV - [2012-02-02 05:06:58 | 000,143,528 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\bcbtums.sys -- (bcbtums)
DRV - [2012-02-02 05:06:58 | 000,076,840 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\btwdpan.sys -- (BTWDPAN)
DRV - [2011-12-06 16:22:02 | 000,280,576 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\IntcDAud.sys -- (IntcDAud)
DRV - [2011-11-10 02:25:22 | 000,382,976 | ---- | M] (Sierra Wireless Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\swg3kmbb02.sys -- (swg3kmbb02)
DRV - [2011-08-18 22:15:12 | 000,061,952 | ---- | M] (Sierra Wireless Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\swibusflt02.sys -- (swibusflt02)
DRV - [2011-08-18 22:15:12 | 000,061,952 | ---- | M] (Sierra Wireless Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\swibus02.sys -- (swibus02)
DRV - [2011-08-18 22:15:04 | 000,216,192 | ---- | M] (Sierra Wireless Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\swg3kser02.sys -- (swg3kser02)
DRV - [2011-08-18 22:15:04 | 000,216,192 | ---- | M] (Sierra Wireless Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\swg3knmea02.sys -- (swg3knmea02)
DRV - [2011-07-22 18:27:02 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Stopped] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2011-07-18 17:11:42 | 000,021,560 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HpqKbFiltr.sys -- (HpqKbFiltr)
DRV - [2011-07-12 23:55:22 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Stopped] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2010-11-20 23:29:03 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010-11-20 23:29:03 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dmvsc.sys -- (dmvsc)
DRV - [2010-11-20 23:29:03 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010-11-20 23:29:03 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010-11-20 23:29:03 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010-11-20 23:29:03 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010-11-20 23:29:03 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2009-07-14 01:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp)
DRV - [2009-07-14 01:12:52 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tpm.sys -- (TPM)
DRV - [2009-07-14 00:13:48 | 001,035,776 | ---- | M] (LSI Corp) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2008-12-26 12:56:04 | 000,017,792 | ---- | M] (Avnex) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vcsvad.sys -- (VCSVADHWSer)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{9AD09901-06DD-4DDD-A62D-6D2243B771AB}: "URL" = http://start.myplaycity.com/results.php?category=web&s={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF32_19_0_0_185.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\windows\system32\Adobe\Director\np32dsw_1219160.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll (Google Inc.)
 
 
[2013-09-03 16:23:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\User\AppData\Roaming\mozilla\Extensions
 
[color=#E56717]========== Chrome  ==========[/color]
 
 
O1 HOSTS File: ([2016-03-27 13:09:01 | 000,001,136 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 	195.248.227.57 	secdisablesrv	# secure disable server
O1 - Hosts: 127.0.0.1       down.baidu2016.com
O1 - Hosts: 127.0.0.1       123.sogou.com
O1 - Hosts: 127.0.0.1       www.czzsyzgm.com
O1 - Hosts: 127.0.0.1       www.czzsyzxl.com
O1 - Hosts: 127.0.0.1       union.baidu2019.com
O1 - Hosts: 127.0.0.1       cdneu.limicimi.com
O1 - Hosts: 127.0.0.1       cdnus.limicimi.com
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - No CLSID value found.
O4 - HKLM..\Run: [QLBController] C:\Program Files\Hewlett-Packard\HP Hotkey Support\QLBController.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [RemoteControl10] c:\Program Files\CyberLink\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [SDIClientStatusApp] C:\Program Files\Softex\SecureDisable\Client\SDIClientStatusApp.exe (Softex, Inc.)
O4 - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.)
O4 - HKCU..\Run: [Software Informer] C:\Program Files\Software Informer\softinfo.exe (Informer Technologies, Inc.)
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware (cleanup)] C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe (Malwarebytes)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\System32\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\vsocklib.dll (VMware, Inc.)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{04271A5A-B54F-49BE-90D6-065F361E45F1}: DhcpNameServer = 192.168.0.1 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1EE0052B-6409-4828-8557-1D016B9D69E4}: NameServer = 212.2.96.51 212.2.96.52
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AEB4A75A-670C-4FF1-B347-B71F6E26979F}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BA0FCC1B-726A-4A02-A63F-08D81DEAF9B2}: DhcpNameServer = 192.168.0.1
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{3bb429f8-1540-11e3-8818-0c84dcd988f5}\Shell - "" = AutoRun
O33 - MountPoints2\{3bb429f8-1540-11e3-8818-0c84dcd988f5}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{a18c449e-dbc6-11e5-bb54-0c84dcd986ac}\Shell - "" = AutoRun
O33 - MountPoints2\{a18c449e-dbc6-11e5-bb54-0c84dcd986ac}\Shell\AutoRun\command - "" = F:\Setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2016-03-27 13:46:00 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Urządzenia interfejsu Bluetooth
[2016-03-27 13:08:44 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\app
[2016-03-27 13:06:48 | 000,000,000 | ---D | C] -- C:\Program Files\TData
[2016-03-23 17:35:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoHotkey
[2016-03-23 17:35:46 | 000,000,000 | ---D | C] -- C:\Program Files\AutoHotkey
[2016-03-23 14:02:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6 v43
[2016-03-19 20:40:29 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft XNA
[2016-03-18 12:12:33 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\IdleMaster
[2016-03-17 21:36:19 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3dx9_25.dll
[2016-03-17 17:21:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
[2016-03-17 17:21:39 | 000,000,000 | ---D | C] -- C:\Program Files\CPUID
[2016-03-16 20:00:28 | 000,000,000 | ---D | C] -- C:\Program Files\Origin Games
[2016-03-16 19:57:28 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Origin
[2016-03-16 19:57:18 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\Origin
[2016-03-16 19:53:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Origin
[2016-03-16 19:53:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
[2016-03-16 19:53:31 | 000,000,000 | ---D | C] -- C:\Program Files\Origin
[2016-03-16 19:48:35 | 000,000,000 | ---D | C] -- C:\Program Files\EA Games
[2016-03-16 12:47:19 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\VMware
[2016-03-16 12:46:48 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Andy
[2016-03-16 12:46:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Andy
[2016-03-16 12:46:27 | 000,063,824 | ---- | C] (VMware, Inc.) -- C:\windows\System32\drivers\vsock.sys
[2016-03-16 12:46:27 | 000,063,568 | ---- | C] (VMware, Inc.) -- C:\windows\System32\vsocklib.dll
[2016-03-16 12:46:26 | 000,026,456 | ---- | C] (VMware, Inc.) -- C:\windows\System32\drivers\VMkbd.sys
[2016-03-16 12:46:00 | 000,359,128 | ---- | C] (VMware, Inc.) -- C:\windows\System32\vmnetdhcp.exe
[2016-03-16 12:45:57 | 000,437,976 | ---- | C] (VMware, Inc.) -- C:\windows\System32\vmnat.exe
[2016-03-16 12:45:57 | 000,026,968 | ---- | C] (VMware, Inc.) -- C:\windows\System32\drivers\vmnetuserif.sys
[2016-03-16 12:45:54 | 000,776,920 | ---- | C] (VMware, Inc.) -- C:\windows\System32\vnetlib.dll
[2016-03-16 12:45:52 | 000,043,968 | ---- | C] (VMware, Inc.) -- C:\windows\System32\drivers\hcmon.sys
[2016-03-16 12:45:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware
[2016-03-16 12:45:30 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\VMware
[2016-03-16 12:45:12 | 000,000,000 | ---D | C] -- C:\ProgramData\VMware
[2016-03-16 12:44:29 | 000,000,000 | ---D | C] -- C:\Program Files\VMware
[2016-03-16 12:44:29 | 000,000,000 | ---D | C] -- C:\Users\User\Andy
[2016-03-16 12:44:29 | 000,000,000 | ---D | C] -- C:\Program Files\Andy
[2016-03-16 12:43:58 | 000,000,000 | ---D | C] -- C:\Program Files\AndyOfflineInstaller46.2
[2016-03-16 12:43:36 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Roaming\Andy
[2016-03-15 22:31:51 | 000,000,000 | ---D | C] -- C:\Users\User\Documents\Euro Truck Simulator 2
[2016-03-15 20:48:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2016-03-15 20:48:40 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2016-03-15 20:48:39 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2016-03-12 12:03:53 | 000,000,000 | ---D | C] -- C:\Users\User\Documents\EA Games
[2016-03-10 15:46:50 | 000,684,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ie4uinit.exe
[2016-03-10 15:46:50 | 000,667,648 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MsSpellCheckingFacility.exe
[2016-03-10 15:46:50 | 000,341,200 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iedkcs32.dll
[2016-03-10 15:46:50 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieetwcollector.exe
[2016-03-10 15:46:50 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\JavaScriptCollectionAgent.dll
[2016-03-10 15:46:50 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieetwproxystub.dll
[2016-03-10 15:46:50 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iernonce.dll
[2016-03-10 15:46:49 | 002,724,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mshtml.tlb
[2016-03-10 15:46:49 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieapfltr.dll
[2016-03-10 15:46:49 | 000,687,104 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msfeeds.dll
[2016-03-10 15:46:49 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jscript9diag.dll
[2016-03-10 15:46:49 | 000,416,256 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dxtmsft.dll
[2016-03-10 15:46:49 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieUnatt.exe
[2016-03-10 15:46:49 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\inseng.dll
[2016-03-10 15:46:49 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jsproxy.dll
[2016-03-10 15:46:48 | 002,050,560 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\inetcpl.cpl
[2016-03-10 15:46:48 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msrating.dll
[2016-03-10 15:46:48 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iesetup.dll
[2016-03-10 15:46:47 | 000,279,040 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dxtrans.dll
[2016-03-10 15:46:47 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieetwcollectorres.dll
[2016-03-10 15:46:46 | 000,476,160 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieui.dll
[2016-03-10 15:46:45 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\html.iec
[2016-03-10 15:46:44 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mshtmlmedia.dll
[2016-03-10 15:46:44 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MshtmlDac.dll
[2016-03-10 15:46:43 | 004,611,072 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jscript9.dll
[2016-03-08 19:18:21 | 003,938,240 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ntoskrnl.exe
[2016-03-08 19:18:20 | 003,994,560 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ntkrnlpa.exe
[2016-03-08 19:18:20 | 000,686,080 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\adtschema.dll
[2016-03-08 19:18:20 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\srcore.dll
[2016-03-08 19:18:20 | 000,262,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\rstrui.exe
[2016-03-08 19:18:20 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ncrypt.dll
[2016-03-08 19:18:20 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msaudite.dll
[2016-03-08 19:18:20 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msobjs.dll
[2016-03-08 19:18:20 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\auditpol.exe
[2016-03-08 19:18:20 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\csrsrv.dll
[2016-03-08 19:18:20 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sspisrv.dll
[2016-03-08 19:18:20 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\apisetschema.dll
[2016-03-08 18:05:41 | 002,387,456 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\win32k.sys
[2016-03-08 18:05:41 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mfds.dll
[2016-03-08 18:04:52 | 002,956,288 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wucltux.dll
[2016-03-08 18:04:52 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wuapi.dll
[2016-03-08 18:04:52 | 000,174,080 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wuwebv.dll
[2016-03-08 18:04:52 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wudriver.dll
[2016-03-08 18:04:52 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\WinSetupUI.dll
[2016-03-08 18:04:52 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wups2.dll
[2016-03-08 18:04:52 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wuapp.exe
[2016-03-08 18:04:52 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wups.dll
[2016-03-08 18:04:52 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wu.upgrade.ps.dll
[2016-03-08 18:04:48 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\asycfilt.dll
[2016-03-08 17:54:04 | 001,206,784 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\appraiser.dll
[2016-03-08 17:54:04 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\generaltel.dll
[2016-03-08 17:54:03 | 000,958,464 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\aeinv.dll
[2016-03-08 17:54:03 | 000,591,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\invagent.dll
[2016-03-08 17:54:03 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\devinv.dll
[2016-03-08 17:54:03 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\acmigration.dll
[2016-03-08 17:54:03 | 000,034,240 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\CompatTelRunner.exe
[2016-03-08 17:42:14 | 000,299,520 | ---- | C] (Adobe Systems Incorporated) -- C:\windows\System32\atmfd.dll
[2016-03-08 17:42:14 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\fontsub.dll
[2016-03-08 17:42:14 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\windows\System32\atmlib.dll
[2016-03-08 17:42:14 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dciman32.dll
[2016-03-08 17:42:07 | 000,922,432 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ucrtbase.dll
[2016-03-08 17:42:07 | 000,066,400 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-crt-private-l1-1-0.dll
[2016-03-08 17:42:07 | 000,022,368 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-crt-math-l1-1-0.dll
[2016-03-08 17:42:07 | 000,019,808 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-crt-multibyte-l1-1-0.dll
[2016-03-08 17:42:07 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-crt-string-l1-1-0.dll
[2016-03-08 17:42:07 | 000,017,760 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-crt-stdio-l1-1-0.dll
[2016-03-08 17:42:07 | 000,016,224 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-crt-runtime-l1-1-0.dll
[2016-03-08 17:42:07 | 000,015,712 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-crt-convert-l1-1-0.dll
[2016-03-08 17:42:07 | 000,014,176 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-crt-time-l1-1-0.dll
[2016-03-08 17:42:07 | 000,014,176 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-localization-l1-2-0.dll
[2016-03-08 17:42:07 | 000,013,664 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-crt-filesystem-l1-1-0.dll
[2016-03-08 17:42:07 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-crt-process-l1-1-0.dll
[2016-03-08 17:42:07 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-crt-heap-l1-1-0.dll
[2016-03-08 17:42:07 | 000,012,640 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-crt-conio-l1-1-0.dll
[2016-03-08 17:42:07 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-crt-utility-l1-1-0.dll
[2016-03-08 17:42:07 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-crt-locale-l1-1-0.dll
[2016-03-08 17:42:07 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-crt-environment-l1-1-0.dll
[2016-03-08 17:42:07 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-synch-l1-2-0.dll
[2016-03-08 17:42:07 | 000,012,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-processthreads-l1-1-1.dll
[2016-03-08 17:42:07 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-xstate-l2-1-0.dll
[2016-03-08 17:42:07 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-timezone-l1-1-0.dll
[2016-03-08 17:42:07 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-file-l2-1-0.dll
[2016-03-08 17:42:07 | 000,011,616 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\api-ms-win-core-file-l1-2-0.dll
[2016-03-08 17:42:05 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wmploc.DLL
[2016-03-08 17:42:05 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\spwmp.dll
[2016-03-08 17:42:05 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msdxm.ocx
[2016-03-08 17:42:05 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dxmasf.dll
[2016-03-04 11:24:27 | 000,000,000 | ---D | C] -- C:\Users\User\Desktop\Muza
[2016-03-01 23:18:21 | 000,000,000 | ---D | C] -- C:\Users\User\AppData\Local\ElevatedDiagnostics
[2016-03-01 19:44:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
[2016-03-01 19:44:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Reimage Protector
[2016-03-01 19:44:16 | 000,000,000 | ---D | C] -- C:\Program Files\Reimage
[2016-03-01 19:42:12 | 000,000,000 | ---D | C] -- C:\rei
[2016-02-18 09:02:39 | 000,717,753 | ---- | C] (CS WaRzOnE) -- C:\Users\User\uninstall.exe
[2016-02-18 09:02:38 | 000,970,912 | ---- | C] (Microsoft Corporation) -- C:\Users\User\msvcr120.dll
[2016-02-18 09:02:38 | 000,875,472 | ---- | C] (Microsoft Corporation) -- C:\Users\User\msvcr110.dll
[2016-02-18 09:02:38 | 000,770,384 | ---- | C] (Microsoft Corporation) -- C:\Users\User\msvcr100.dll
[2016-02-18 09:02:38 | 000,389,632 | ---- | C] (Valve Corporation) -- C:\Users\User\Steam.dll
[2016-02-18 09:02:37 | 000,455,328 | ---- | C] (Microsoft Corporation) -- C:\Users\User\msvcp120.dll
[2016-02-18 09:02:36 | 000,535,008 | ---- | C] (Microsoft Corporation) -- C:\Users\User\msvcp110.dll
[2016-02-18 09:02:36 | 000,421,200 | ---- | C] (Microsoft Corporation) -- C:\Users\User\msvcp100.dll
[2 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2016-03-28 00:55:58 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2016-03-28 00:55:58 | 000,065,536 | ---- | M] () -- C:\windows\System32\Ikeext.etl
[2016-03-28 00:55:56 | 3097,022,464 | -HS- | M] () -- C:\hiberfil.sys
[2016-03-28 00:55:37 | 000,035,264 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2016-03-28 00:55:37 | 000,035,264 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2016-03-28 00:53:00 | 000,000,830 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job
[2016-03-28 00:52:16 | 000,170,200 | ---- | M] (Malwarebytes) -- C:\windows\System32\drivers\MBAMSwissArmy.sys
[2016-03-27 13:54:24 | 000,002,681 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2016-03-27 13:54:23 | 000,001,927 | ---- | M] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2016-03-27 13:54:23 | 000,001,850 | ---- | M] () -- C:\Users\Public\Desktop\GTA San Andreas.lnk
[2016-03-27 13:54:23 | 000,001,731 | ---- | M] () -- C:\Users\Public\Desktop\Counter-Strike 1.6 v43.lnk
[2016-03-27 13:54:23 | 000,001,061 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2016-03-27 13:54:23 | 000,001,023 | ---- | M] () -- C:\Users\Public\Desktop\CPUID CPU-Z.lnk
[2016-03-27 13:54:23 | 000,000,966 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2016-03-27 13:54:23 | 000,000,938 | ---- | M] () -- C:\Users\Public\Desktop\Origin.lnk
[2016-03-27 13:54:10 | 000,002,159 | ---- | M] () -- C:\Users\User\Desktop\Google Chrome.lnk
[2016-03-27 13:54:10 | 000,001,968 | ---- | M] () -- C:\Users\User\Desktop\SUPERAntiSpyware Free Edition.lnk
[2016-03-27 13:54:10 | 000,001,100 | ---- | M] () -- C:\Users\User\Desktop\Dokumenty.lnk
[2016-03-27 13:05:48 | 000,000,648 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2016-03-20 02:15:00 | 000,000,992 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player PPAPI Notifier.job
[2016-03-19 13:33:51 | 000,000,216 | ---- | M] () -- C:\Users\User\Desktop\Unturned.url
[2016-03-19 11:13:03 | 000,000,215 | ---- | M] () -- C:\Users\User\Desktop\Defy Gravity.url
[2016-03-17 21:43:23 | 000,026,708 | ---- | M] () -- C:\Users\User\Documents\cc_20160317_204306.reg
[2016-03-17 21:38:18 | 000,000,705 | ---- | M] () -- C:\Users\User\Desktop\Biblioteki — skrót.lnk
[2016-03-17 16:44:08 | 000,000,213 | ---- | M] () -- C:\Users\User\Desktop\Counter-Strike Global Offensive.url
[2016-03-10 14:09:04 | 000,053,120 | ---- | M] (Malwarebytes Corporation) -- C:\windows\System32\drivers\mwac.sys
[2016-03-10 14:08:56 | 000,126,336 | ---- | M] (Malwarebytes) -- C:\windows\System32\drivers\mbamchameleon.sys
[2016-03-10 14:08:52 | 000,024,448 | ---- | M] (Malwarebytes) -- C:\windows\System32\drivers\mbam.sys
[2016-03-09 12:09:42 | 000,285,552 | ---- | M] () -- C:\windows\System32\FNTCACHE.DAT
[2016-03-06 19:00:00 | 006,102,054 | ---- | M] () -- C:\Users\User\Desktop\20110528470.mp4
[2016-03-01 19:49:18 | 000,000,099 | ---- | M] () -- C:\windows\Reimage.ini
[2 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2016-03-27 13:06:55 | 000,001,061 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2016-03-27 13:05:48 | 000,000,648 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2016-03-23 14:02:11 | 000,001,731 | ---- | C] () -- C:\Users\Public\Desktop\Counter-Strike 1.6 v43.lnk
[2016-03-19 13:33:51 | 000,000,216 | ---- | C] () -- C:\Users\User\Desktop\Unturned.url
[2016-03-19 11:13:03 | 000,000,215 | ---- | C] () -- C:\Users\User\Desktop\Defy Gravity.url
[2016-03-17 21:43:07 | 000,026,708 | ---- | C] () -- C:\Users\User\Documents\cc_20160317_204306.reg
[2016-03-17 21:38:18 | 000,000,705 | ---- | C] () -- C:\Users\User\Desktop\Biblioteki — skrót.lnk
[2016-03-17 17:21:39 | 000,001,023 | ---- | C] () -- C:\Users\Public\Desktop\CPUID CPU-Z.lnk
[2016-03-17 16:44:08 | 000,000,213 | ---- | C] () -- C:\Users\User\Desktop\Counter-Strike Global Offensive.url
[2016-03-16 19:53:38 | 000,000,938 | ---- | C] () -- C:\Users\Public\Desktop\Origin.lnk
[2016-03-15 20:48:40 | 000,002,681 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2016-03-06 18:58:56 | 006,102,054 | ---- | C] () -- C:\Users\User\Desktop\20110528470.mp4
[2016-03-01 19:39:54 | 000,000,099 | ---- | C] () -- C:\windows\Reimage.ini
[2016-02-25 15:56:09 | 000,000,013 | ---- | C] () -- C:\Users\User\.pluto.tv
[2016-02-19 13:39:37 | 088,127,782 | ---- | C] () -- C:\Users\User\csgo_20160219_123937_2_x0069F674.mdmp
[2016-02-19 13:39:34 | 088,085,938 | ---- | C] () -- C:\Users\User\csgo_20160219_123934_1_x0080F6B4.mdmp
[2016-02-18 17:45:15 | 087,441,899 | ---- | C] () -- C:\Users\User\csgo_20160218_164515_1_x0A14F0EC_accessviolation.mdmp
[2016-02-18 17:40:35 | 088,044,619 | ---- | C] () -- C:\Users\User\csgo_20160218_164035_1_x001FD4B4.mdmp
[2016-02-18 09:50:41 | 088,039,974 | ---- | C] () -- C:\Users\User\csgo_20160218_085041_1_x0031DAB4.mdmp
[2016-02-18 09:02:38 | 002,496,512 | ---- | C] () -- C:\Users\User\steamclient.dll
[2016-02-18 09:02:36 | 000,385,024 | ---- | C] () -- C:\Users\User\csgo_launcher.exe
[2016-02-18 09:02:36 | 000,052,224 | ---- | C] () -- C:\Users\User\Loader.exe
[2016-02-18 09:02:34 | 000,103,424 | ---- | C] () -- C:\Users\User\csgo.exe
[2016-02-18 09:02:29 | 000,013,658 | ---- | C] () -- C:\Users\User\stats.bin
[2016-02-18 09:02:29 | 000,000,983 | ---- | C] () -- C:\Users\User\rev.ini
[2015-11-29 19:51:12 | 000,000,640 | RHS- | C] () -- C:\Users\User\ntuser.pol
[2015-11-08 13:02:51 | 000,139,152 | ---- | C] () -- C:\windows\System32\drivers\PnkBstrK.sys
[2015-11-08 13:02:51 | 000,139,152 | ---- | C] () -- C:\Users\User\AppData\Roaming\PnkBstrK.sys
[2015-11-08 13:02:40 | 000,111,928 | ---- | C] () -- C:\windows\System32\PnkBstrB.exe
[2015-11-08 13:02:25 | 000,075,064 | ---- | C] () -- C:\windows\System32\PnkBstrA.exe
[2015-11-08 13:02:24 | 000,794,408 | ---- | C] () -- C:\windows\System32\pbsvc.exe
[2015-01-13 19:58:16 | 000,007,600 | ---- | C] () -- C:\Users\User\AppData\Local\resmon.resmoncfg
[2014-10-18 16:27:54 | 000,019,186 | ---- | C] () -- C:\Users\User\AppData\Roaming\UserTile.png
[2013-09-03 20:16:36 | 000,001,029 | ---- | C] () -- C:\Users\User\Wideo — skrót.lnk
[2013-09-03 11:15:24 | 000,000,476 | ---- | C] () -- C:\Users\User\Desktop.lnk
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009-07-14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2016-01-22 08:05:58 | 012,877,824 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 23:29:20 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009-07-14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

< End of report >