OTL logfile created on: 2014-10-09 00:58:24 - Run 2 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\user\Desktop\fixitpc.pl\OTL 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17280) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 11,99 Gb Total Physical Memory | 8,75 Gb Available Physical Memory | 72,94% Memory free 23,98 Gb Paging File | 19,58 Gb Available in Paging File | 81,66% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 1396,98 Gb Total Space | 621,24 Gb Free Space | 44,47% Space Free | Partition Type: NTFS Drive D: | 74,68 Gb Total Space | 61,81 Gb Free Space | 82,77% Space Free | Partition Type: NTFS Drive U: | 931,48 Gb Total Space | 720,78 Gb Free Space | 77,38% Space Free | Partition Type: NTFS Drive V: | 1829,35 Gb Total Space | 1159,53 Gb Free Space | 63,38% Space Free | Partition Type: NTFS Drive W: | 1829,35 Gb Total Space | 1159,53 Gb Free Space | 63,38% Space Free | Partition Type: NTFS Drive Y: | 1829,35 Gb Total Space | 1159,53 Gb Free Space | 63,38% Space Free | Partition Type: NTFS Computer Name: PAWEL | User Name: user | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2014-10-09 00:55:12 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\user\Desktop\fixitpc.pl\OTL\OTL.exe PRC - [2014-09-29 08:53:16 | 000,037,152 | ---- | M] (Glarysoft Ltd) -- C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe PRC - [2014-09-29 08:52:08 | 000,795,936 | ---- | M] (Glarysoft Ltd) -- C:\Program Files (x86)\Glary Utilities 5\Integrator.exe PRC - [2014-09-28 14:28:25 | 000,767,600 | ---- | M] (Webroot) -- C:\Program Files (x86)\Webroot\WRSA.exe PRC - [2014-09-28 01:22:16 | 000,270,941 | ---- | M] (Kadu Team) -- C:\Program Files (x86)\Kadu\kadu.exe PRC - [2014-09-25 11:39:49 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2014-08-08 10:34:04 | 022,734,160 | ---- | M] (Google) -- C:\Program Files (x86)\Google\Drive\googledrivesync.exe PRC - [2014-07-02 19:44:41 | 000,411,936 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2014-06-22 11:13:20 | 000,230,792 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe PRC - [2014-05-21 17:18:34 | 005,379,408 | ---- | M] () -- C:\Program Files (x86)\IObit\Game Assistant\GameAssistantMain.exe PRC - [2014-04-17 21:07:28 | 004,672,920 | ---- | M] (Akamai Technologies, Inc.) -- C:\Users\user\AppData\Local\Akamai\netsession_win.exe PRC - [2014-03-20 23:02:30 | 001,797,064 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe PRC - [2014-02-24 13:41:20 | 015,043,112 | ---- | M] (2BrightSparks Pte Ltd) -- C:\Program Files (x86)\2BrightSparks\SyncBackFree\SyncBackFree.exe PRC - [2014-02-15 03:19:16 | 000,075,136 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2013-12-21 08:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2013-12-11 10:09:38 | 001,862,536 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe PRC - [2012-02-14 16:33:18 | 000,184,320 | ---- | M] () -- C:\Program Files (x86)\Gaming Keyboard\Monitor.EXE PRC - [2011-10-19 21:30:50 | 000,423,424 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe PRC - [2011-10-09 15:44:58 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\Gaming Keyboard\OSD.exe PRC - [2011-02-18 08:18:50 | 000,245,760 | ---- | M] () -- C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe PRC - [2010-12-08 09:57:56 | 000,241,757 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Volume Panel\VolPanlu.exe PRC - [2010-07-27 18:33:18 | 001,167,360 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWlan.exe PRC - [2010-04-16 16:10:58 | 000,036,864 | ---- | M] (Realtek) -- C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe PRC - [2010-02-04 04:45:59 | 000,131,752 | ---- | M] (Lexmark International Inc.) -- C:\Program Files (x86)\Lexmark 4900 Series\ezprint.exe PRC - [2010-02-04 04:45:51 | 000,676,520 | ---- | M] () -- C:\Program Files (x86)\Lexmark 4900 Series\lxdrmon.exe PRC - [2009-12-22 16:23:00 | 002,647,040 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe PRC - [2006-12-14 16:04:04 | 000,135,168 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\AMD\RAIDXpert\_jvm\bin\java.exe PRC - [2006-11-03 12:01:16 | 000,319,488 | ---- | M] (PixArt Imaging Incorporation) -- C:\Windows\PixArt\Pac207\Monitor.exe PRC - [2003-09-29 07:30:08 | 000,110,592 | ---- | M] () -- C:\Program Files (x86)\AMD\RAIDXpert\jetty\extra\win32\Wrapper.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2014-10-08 01:48:02 | 001,160,704 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\_ssl.pyd MOD - [2014-10-08 01:48:02 | 000,805,888 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\wx._gdi_.pyd MOD - [2014-10-08 01:48:02 | 000,713,216 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\_hashlib.pyd MOD - [2014-10-08 01:48:02 | 000,110,080 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\pywintypes27.dll MOD - [2014-10-08 01:48:02 | 000,027,136 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\_multiprocessing.pyd MOD - [2014-10-08 01:48:02 | 000,007,168 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\hashobjs_ext.pyd MOD - [2014-10-08 01:48:01 | 001,062,400 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\wx._controls_.pyd MOD - [2014-10-08 01:48:01 | 000,811,008 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\wx._windows_.pyd MOD - [2014-10-08 01:48:01 | 000,686,080 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\unicodedata.pyd MOD - [2014-10-08 01:48:01 | 000,127,488 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\pyexpat.pyd MOD - [2014-10-08 01:48:01 | 000,119,808 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\win32file.pyd MOD - [2014-10-08 01:48:01 | 000,108,544 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\win32security.pyd MOD - [2014-10-08 01:48:01 | 000,070,656 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\wx._html2.pyd MOD - [2014-10-08 01:48:01 | 000,038,912 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\win32inet.pyd MOD - [2014-10-08 01:48:01 | 000,025,600 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\win32pdh.pyd MOD - [2014-10-08 01:48:01 | 000,024,064 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\win32pipe.pyd MOD - [2014-10-08 01:48:01 | 000,018,432 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\win32event.pyd MOD - [2014-10-08 01:48:01 | 000,017,408 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\win32profile.pyd MOD - [2014-10-08 01:48:01 | 000,010,240 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\select.pyd MOD - [2014-10-08 01:48:00 | 001,175,040 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\wx._core_.pyd MOD - [2014-10-08 01:48:00 | 000,735,232 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\wx._misc_.pyd MOD - [2014-10-08 01:48:00 | 000,557,056 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\pysqlite2._sqlite.pyd MOD - [2014-10-08 01:48:00 | 000,525,640 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\windows._lib_cacheinvalidation.pyd MOD - [2014-10-08 01:48:00 | 000,364,544 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\pythoncom27.dll MOD - [2014-10-08 01:48:00 | 000,320,512 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\win32com.shell.shell.pyd MOD - [2014-10-08 01:48:00 | 000,167,936 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\win32gui.pyd MOD - [2014-10-08 01:48:00 | 000,128,512 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\_elementtree.pyd MOD - [2014-10-08 01:48:00 | 000,098,816 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\win32api.pyd MOD - [2014-10-08 01:48:00 | 000,087,552 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\_ctypes.pyd MOD - [2014-10-08 01:48:00 | 000,078,336 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\wx._animate.pyd MOD - [2014-10-08 01:48:00 | 000,045,568 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\_socket.pyd MOD - [2014-10-08 01:48:00 | 000,022,528 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\win32ts.pyd MOD - [2014-10-08 01:48:00 | 000,011,264 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\win32crypt.pyd MOD - [2014-10-08 01:47:59 | 000,122,368 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\wx._wizard.pyd MOD - [2014-10-08 01:47:59 | 000,035,840 | ---- | M] () -- C:\Users\user\AppData\Local\Temp\_MEI31882\win32process.pyd MOD - [2014-09-29 08:53:30 | 000,080,160 | ---- | M] () -- C:\Program Files (x86)\Glary Utilities 5\zlib1.dll MOD - [2014-09-28 01:24:02 | 000,646,511 | ---- | M] () -- C:\Program Files (x86)\Kadu\libsqlite3-0.dll MOD - [2014-09-28 01:24:02 | 000,324,119 | ---- | M] () -- C:\Program Files (x86)\Kadu\qt-plugins\crypto\libqca-ossl.dll MOD - [2014-09-28 01:24:00 | 000,999,399 | ---- | M] () -- C:\Program Files (x86)\Kadu\libgnutls-28.dll MOD - [2014-09-28 01:24:00 | 000,982,084 | ---- | M] () -- C:\Program Files (x86)\Kadu\libqca.dll MOD - [2014-09-28 01:24:00 | 000,847,430 | ---- | M] () -- C:\Program Files (x86)\Kadu\libstdc++-6.dll MOD - [2014-09-28 01:24:00 | 000,587,518 | ---- | M] () -- C:\Program Files (x86)\Kadu\libgcrypt-20.dll MOD - [2014-09-28 01:24:00 | 000,497,577 | ---- | M] () -- C:\Program Files (x86)\Kadu\libarchive-12.dll MOD - [2014-09-28 01:24:00 | 000,420,919 | ---- | M] () -- C:\Program Files (x86)\Kadu\libtiff-5.dll MOD - [2014-09-28 01:24:00 | 000,392,622 | ---- | M] () -- C:\Program Files (x86)\Kadu\libgmp-10.dll MOD - [2014-09-28 01:24:00 | 000,221,512 | ---- | M] () -- C:\Program Files (x86)\Kadu\libp11-kit-0.dll MOD - [2014-09-28 01:24:00 | 000,219,649 | ---- | M] () -- C:\Program Files (x86)\Kadu\libidn-11.dll MOD - [2014-09-28 01:24:00 | 000,203,567 | ---- | M] () -- C:\Program Files (x86)\Kadu\libpng16-16.dll MOD - [2014-09-28 01:24:00 | 000,197,062 | ---- | M] () -- C:\Program Files (x86)\Kadu\libjpeg-8.dll MOD - [2014-09-28 01:24:00 | 000,196,574 | ---- | M] () -- C:\Program Files (x86)\Kadu\libgadu-3.dll MOD - [2014-09-28 01:24:00 | 000,185,527 | ---- | M] () -- C:\Program Files (x86)\Kadu\libnettle-4-6.dll MOD - [2014-09-28 01:24:00 | 000,171,776 | ---- | M] () -- C:\Program Files (x86)\Kadu\libhogweed-2-4.dll MOD - [2014-09-28 01:24:00 | 000,095,790 | ---- | M] () -- C:\Program Files (x86)\Kadu\libgcc_s_sjlj-1.dll MOD - [2014-09-28 01:24:00 | 000,084,012 | ---- | M] () -- C:\Program Files (x86)\Kadu\zlib1.dll MOD - [2014-09-28 01:24:00 | 000,074,988 | ---- | M] () -- C:\Program Files (x86)\Kadu\libtasn1-6.dll MOD - [2014-09-28 01:24:00 | 000,070,211 | ---- | M] () -- C:\Program Files (x86)\Kadu\bz2-1.dll MOD - [2014-09-28 01:24:00 | 000,038,844 | ---- | M] () -- C:\Program Files (x86)\Kadu\libgpg-error-0.dll MOD - [2014-09-28 01:24:00 | 000,037,466 | ---- | M] () -- C:\Program Files (x86)\Kadu\libprotobuf-c-1.dll MOD - [2014-09-28 01:24:00 | 000,030,540 | ---- | M] () -- C:\Program Files (x86)\Kadu\libffi-6.dll MOD - [2014-09-25 11:39:49 | 003,715,184 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2014-09-06 18:44:46 | 000,035,328 | ---- | M] () -- C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll MOD - [2014-05-24 18:41:24 | 000,892,416 | ---- | M] () -- C:\Program Files (x86)\FileZilla FTP Client\libstdc++-6.dll MOD - [2014-05-24 18:41:24 | 000,091,648 | ---- | M] () -- C:\Program Files (x86)\FileZilla FTP Client\libgcc_s_sjlj-1.dll MOD - [2014-05-21 17:18:34 | 005,379,408 | ---- | M] () -- C:\Program Files (x86)\IObit\Game Assistant\GameAssistantMain.exe MOD - [2014-03-12 18:07:56 | 000,611,664 | ---- | M] () -- C:\Program Files (x86)\IObit\Game Assistant\ProductStatistics.dll MOD - [2013-12-11 10:09:38 | 016,242,056 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll MOD - [2013-12-09 17:33:18 | 000,060,968 | ---- | M] () -- C:\Program Files\EditPlus 3\eppshell.dll MOD - [2012-03-06 15:14:06 | 000,057,344 | ---- | M] () -- C:\Program Files (x86)\Gaming Keyboard\lan.dll MOD - [2012-02-14 16:33:18 | 000,184,320 | ---- | M] () -- C:\Program Files (x86)\Gaming Keyboard\Monitor.EXE MOD - [2012-01-16 21:40:30 | 000,221,184 | ---- | M] () -- C:\Program Files (x86)\RJ TextEd\rjshell.dll MOD - [2011-12-16 17:17:00 | 000,246,272 | ---- | M] () -- C:\Windows\SysWOW64\APOMngr.DLL MOD - [2011-10-09 15:44:58 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\Gaming Keyboard\OSD.exe MOD - [2011-08-17 15:45:34 | 000,074,240 | ---- | M] () -- C:\Windows\SysWOW64\CmdRtr.DLL MOD - [2010-02-04 04:45:51 | 000,676,520 | ---- | M] () -- C:\Program Files (x86)\Lexmark 4900 Series\lxdrmon.exe MOD - [2010-02-04 04:29:57 | 000,081,920 | ---- | M] () -- C:\Program Files (x86)\Lexmark 4900 Series\lxdrcaps.dll MOD - [2010-02-04 04:29:49 | 000,380,928 | ---- | M] () -- C:\Program Files (x86)\Lexmark 4900 Series\lxdrscw.dll MOD - [2010-02-04 04:29:48 | 001,036,288 | ---- | M] () -- C:\Program Files (x86)\Lexmark 4900 Series\lxdrDRS.dll MOD - [2010-02-04 04:28:45 | 000,380,928 | ---- | M] () -- C:\Program Files (x86)\Lexmark 4900 Series\iptk.dll MOD - [2010-02-04 04:19:37 | 000,188,416 | ---- | M] () -- C:\Program Files (x86)\Lexmark 4900 Series\lxdrdatr.dll MOD - [2010-02-04 04:19:33 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\Lexmark 4900 Series\lxdrcnv4.dll MOD - [2009-12-22 16:23:00 | 002,647,040 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe MOD - [2009-12-18 17:23:58 | 000,194,560 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\Win32Share.dll MOD - [2009-11-16 21:31:58 | 000,069,632 | ---- | M] () -- C:\PROGRA~2\PSPADE~1\PSPADS~1.DLL MOD - [2009-10-16 10:49:37 | 000,073,728 | ---- | M] () -- C:\Program Files (x86)\Lexmark 4900 Series\lxdrcats.dll MOD - [2009-06-09 07:27:58 | 000,093,184 | ---- | M] () -- C:\Program Files (x86)\Anti-Vibrate Oscar Editor\Resource.dll MOD - [2008-03-17 04:52:47 | 000,151,552 | ---- | M] () -- C:\Program Files (x86)\Lexmark 4900 Series\lxdrptp.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - File not found [Auto | Stopped] -- C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe /McCoreSvc -- (mcpltsvc) SRV:[b]64bit:[/b] - File not found [Auto | Stopped] -- C:\Program Files\McAfee\MSC\McAPExe.exe -- (McAPExe) SRV:[b]64bit:[/b] - [2014-08-19 00:03:37 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService) SRV:[b]64bit:[/b] - [2013-05-27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2012-11-16 22:44:58 | 000,238,080 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2009-10-16 11:01:09 | 001,039,360 | ---- | M] ( ) [Auto | Running] -- C:\Windows\SysNative\lxdrcoms.exe -- (lxdr_device) SRV - [2014-09-28 14:28:25 | 000,767,600 | ---- | M] (Webroot) [Auto | Running] -- C:\Program Files (x86)\Webroot\WRSA.exe -- (WRSVC) SRV - [2014-09-25 11:39:49 | 000,114,288 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2014-09-24 13:39:19 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2014-09-23 06:32:08 | 000,833,728 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2014-07-15 12:41:42 | 000,108,032 | ---- | M] (Freemake) [Auto | Stopped] -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe -- (Freemake Improver) SRV - [2014-07-02 19:44:41 | 000,411,936 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2014-03-21 00:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2014-02-15 03:19:16 | 000,075,136 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2013-12-21 08:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2013-12-03 17:10:24 | 002,151,200 | ---- | M] (IObit) [Auto | Stopped] -- C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe -- (LiveUpdateSvc) SRV - [2013-10-23 08:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2013-09-27 19:25:42 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service) SRV - [2013-09-11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2013-08-31 16:19:08 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service) SRV - [2013-08-27 16:57:34 | 000,093,072 | ---- | M] (TomTom) [On_Demand | Stopped] -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService) SRV - [2013-05-24 00:50:36 | 000,137,256 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\AMD\OverDrive\AODAssist.exe -- (AODService) SRV - [2013-03-07 23:07:36 | 000,067,584 | ---- | M] (CobianSoft, Luis Cobian) [On_Demand | Stopped] -- C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe -- (cbVSCService11) SRV - [2013-02-17 12:18:06 | 000,137,336 | ---- | M] (Futuremark Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe -- (Futuremark SystemInfo Service) SRV - [2011-10-19 21:30:50 | 000,423,424 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService) SRV - [2011-02-18 08:18:50 | 000,245,760 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe -- (UsbClientService) SRV - [2010-04-16 16:10:58 | 000,036,864 | ---- | M] (Realtek) [Auto | Running] -- C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe -- (Realtek11nSU) SRV - [2009-10-16 11:00:52 | 000,589,824 | ---- | M] ( ) [Auto | Running] -- C:\Windows\SysWOW64\lxdrcoms.exe -- (lxdr_device) SRV - [2009-08-07 17:39:21 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2007-04-27 14:32:16 | 000,153,792 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe -- (Adobe Version Cue CS3) SRV - [2003-09-29 07:30:08 | 000,110,592 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\AMD\RAIDXpert\jetty\extra\win32\Wrapper.exe -- (AMDRAIDXpert) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2014-10-04 10:09:26 | 000,020,160 | ---- | M] (Glarysoft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\GUBootStartup.sys -- (GUBootStartup) DRV:[b]64bit:[/b] - [2014-09-28 14:28:26 | 000,115,680 | ---- | M] (Webroot) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\WRkrn.sys -- (WRkrn) DRV:[b]64bit:[/b] - [2014-09-24 12:45:48 | 000,941,272 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2014-07-24 14:32:30 | 000,096,592 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mfencrk.sys -- (mfencrk) DRV:[b]64bit:[/b] - [2014-07-24 14:31:56 | 000,444,720 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mfencbdc.sys -- (mfencbdc) DRV:[b]64bit:[/b] - [2014-06-16 09:27:08 | 000,017,600 | ---- | M] (Glarysoft Ltd) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\BootDefragDriver.sys -- (BootDefragDriver) DRV:[b]64bit:[/b] - [2014-05-27 10:06:48 | 000,036,352 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetmodem64.sys -- (ANDNetModem) DRV:[b]64bit:[/b] - [2014-05-27 10:06:48 | 000,029,696 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetdiag264.sys -- (AndNetDiag2) DRV:[b]64bit:[/b] - [2014-05-27 10:06:48 | 000,029,184 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetdiag64.sys -- (AndNetDiag) DRV:[b]64bit:[/b] - [2014-05-27 10:06:48 | 000,020,992 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetbus64.sys -- (AndnetBus) DRV:[b]64bit:[/b] - [2014-04-18 09:33:20 | 001,309,696 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\P17.sys -- (P17) DRV:[b]64bit:[/b] - [2014-03-20 23:02:52 | 000,197,408 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA) DRV:[b]64bit:[/b] - [2013-10-02 04:22:20 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2013-09-23 13:49:22 | 000,197,704 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HipShieldK.sys -- (HipShieldK) DRV:[b]64bit:[/b] - [2013-04-12 11:41:28 | 000,131,856 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp) DRV:[b]64bit:[/b] - [2012-11-16 23:08:32 | 011,922,944 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:[b]64bit:[/b] - [2012-11-16 23:08:32 | 011,922,944 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2012-11-16 21:39:12 | 000,359,936 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2012-10-31 21:02:37 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2012-08-21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GearAspiWDM) DRV:[b]64bit:[/b] - [2012-05-15 21:02:38 | 000,017,280 | ---- | M] (Scott) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USBDrv_AMD64.sys -- (usbUDisc) DRV:[b]64bit:[/b] - [2012-05-14 08:12:30 | 000,096,896 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService) DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2011-12-20 09:26:12 | 000,014,848 | ---- | M] (LXD Development, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GKS16Fltr.sys -- (SgamingkbFltr) DRV:[b]64bit:[/b] - [2011-03-24 01:43:42 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt) DRV:[b]64bit:[/b] - [2011-03-24 01:43:41 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt) DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2011-02-18 08:20:34 | 000,056,160 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\busenum.sys -- (busenum) DRV:[b]64bit:[/b] - [2010-11-20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-08-12 00:52:53 | 000,502,256 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2010-07-01 14:21:50 | 000,038,992 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ScreamingBAudio64.sys -- (ScreamBAudioSvc) DRV:[b]64bit:[/b] - [2010-06-19 08:36:04 | 000,017,920 | ---- | M] (Siliten) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\InputFilter_FlexDef2b.sys -- (InputFilter_Hid_FlexDef2b) DRV:[b]64bit:[/b] - [2010-06-08 13:50:06 | 000,692,768 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rtl8192su.sys -- (RTL8192su) DRV:[b]64bit:[/b] - [2010-02-18 09:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64) DRV:[b]64bit:[/b] - [2009-12-18 00:25:17 | 000,034,472 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO) DRV:[b]64bit:[/b] - [2009-09-21 04:18:30 | 000,349,824 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cxpolar64.sys -- (CXPOLARIS) DRV:[b]64bit:[/b] - [2009-08-09 23:25:45 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone) DRV:[b]64bit:[/b] - [2009-07-17 09:37:06 | 000,035,840 | R--- | M] (Avanquest Software) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BVRPMPR5a64.SYS -- (BVRPMPR5a64) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 02:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-05-12 15:53:12 | 000,020,480 | ---- | M] (Danish Wireless Design A/S) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\FlashUSB_x64.sys -- (FlashUSB) DRV:[b]64bit:[/b] - [2009-04-30 00:28:30 | 000,030,208 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\KMWDFILTER.sys -- (KMWDFILTER) DRV:[b]64bit:[/b] - [2009-04-23 14:25:46 | 000,044,544 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\cxcir64.sys -- (CXIR) DRV:[b]64bit:[/b] - [2009-03-27 01:23:54 | 000,019,432 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cpuz132_x64.sys -- (cpuz132) DRV:[b]64bit:[/b] - [2008-12-26 12:56:04 | 000,021,504 | ---- | M] (Avnex) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vcsvad.sys -- (VCSVADHWSer) DRV:[b]64bit:[/b] - [2008-08-06 10:26:08 | 000,174,592 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rtlh64.sys -- (RTL8169) DRV:[b]64bit:[/b] - [2008-04-28 15:25:06 | 000,016,400 | ---- | M] (ATI Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie) DRV:[b]64bit:[/b] - [2008-01-09 13:28:20 | 000,034,032 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\seehcri.sys -- (seehcri) DRV:[b]64bit:[/b] - [2007-12-19 09:44:44 | 000,209,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ahcix64s.sys -- (ahcix64s) DRV:[b]64bit:[/b] - [2006-12-05 12:34:26 | 000,572,416 | ---- | M] (PixArt Imaging Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\PFC027.SYS -- (PAC207) DRV - [2013-07-06 16:23:58 | 000,016,640 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysWOW64\drivers\BootDefragDriver.sys -- (BootDefragDriver) DRV - [2013-05-24 00:48:54 | 000,058,088 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Program Files (x86)\AMD\OverDrive\amd64\AODDriver2.sys -- (AODDriver4.2.0) DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) DRV - [2009-05-12 15:53:12 | 000,020,480 | ---- | M] (Danish Wireless Design A/S) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\FlashUsb_x64.sys -- (FlashUSB) DRV - [2004-10-26 11:22:50 | 000,002,410 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\FreshDevices\FreshDiagnose\FreshIO.sys -- (FreshIO) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local IE - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve IE - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02 IE - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;127.0.0.1:9421; [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..extensions.enabledAddons: pagerank-client%40koeniglich.ch:1.2 FF - prefs.js..extensions.enabledAddons: personas%40christopher.beard:1.7.3 FF - prefs.js..extensions.enabledAddons: %7B1a5dabbd-0e74-41da-b532-a364bb552cab%7D:1.0.9 FF - prefs.js..extensions.enabledAddons: %7B3b56bcc7-54e5-44a2-9b44-66c3ef58c13e%7D:0.9.5.8 FF - prefs.js..extensions.enabledAddons: %7Ba0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7%7D:20131118 FF - prefs.js..extensions.enabledAddons: %7BCB454AEB-2F60-4441-ADEB-2CB43BB33B20%7D:3.0 FF - prefs.js..extensions.enabledAddons: %7BDDC359D1-844A-42a7-9AA1-88A850A938A8%7D:2.0.17 FF - prefs.js..extensions.enabledAddons: firegestures%40xuldev.org:1.8.7 FF - prefs.js..extensions.enabledAddons: %7B0b457cAA-602d-484a-8fe7-c1d894a011ba%7D:0.98.59 FF - prefs.js..extensions.enabledAddons: fmconverter%40gmail.com:1.0.0 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:32.0.3 FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.40.2: C:\Windows\system32\npDeployJava1.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.40.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.3: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.4: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.5: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect_x86_64: C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@checkpoint.com/FFApi: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\npFFApi.dll File not found FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF - HKLM\Software\MozillaPlugins\@esn/npbattlelog,version=2.3.2: C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.55.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL File not found FF - HKLM\Software\MozillaPlugins\@mcafee.com/MVT: C:\Program Files (x86)\McAfee\Supportability\MVT\NPMVTPlugin.dll File not found FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\user\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\user\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\PROGRAM FILES\CHECKPOINT\ZAFORCEFIELD\TRUSTCHECKER FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmconverter@gmail.com: C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ [2014-08-09 15:58:28 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\Program Files (x86)\McAfee\SiteAdvisor FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 32.0.3\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2014-09-25 11:39:46 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 32.0.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2014-09-25 11:39:47 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 31.1.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2014-09-25 13:17:01 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 31.1.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2014-09-25 13:17:02 | 000,000,000 | ---D | M] [2013-11-14 14:16:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\user\AppData\Roaming\mozilla\Extensions [2009-12-09 17:07:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\user\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2013-11-14 14:16:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\user\AppData\Roaming\mozilla\Extensions\home2@tomtom.com [2014-09-21 23:58:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\user\AppData\Roaming\mozilla\Firefox\Profiles\w2e3iotr.default-1380203269472\extensions [2014-07-27 02:36:09 | 000,000,000 | ---D | M] (FireShot) -- C:\Users\user\AppData\Roaming\mozilla\Firefox\Profiles\w2e3iotr.default-1380203269472\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba} [2014-09-04 01:02:36 | 000,000,000 | ---D | M] (SeoQuake) -- C:\Users\user\AppData\Roaming\mozilla\Firefox\Profiles\w2e3iotr.default-1380203269472\extensions\{317B5128-0B0B-49b2-B2DB-1E7560E16C74} [2013-10-22 01:08:26 | 000,000,000 | ---D | M] (Html Validator) -- C:\Users\user\AppData\Roaming\mozilla\Firefox\Profiles\w2e3iotr.default-1380203269472\extensions\{3b56bcc7-54e5-44a2-9b44-66c3ef58c13e} [2014-09-21 23:58:13 | 000,000,000 | ---D | M] (FT DeepDark) -- C:\Users\user\AppData\Roaming\mozilla\Firefox\Profiles\w2e3iotr.default-1380203269472\extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66} [2014-01-02 10:37:54 | 000,000,000 | ---D | M] (WOT) -- C:\Users\user\AppData\Roaming\mozilla\Firefox\Profiles\w2e3iotr.default-1380203269472\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-07-26 22:58:57 | 000,000,000 | ---D | M] (Bitdefender QuickScan) -- C:\Users\user\AppData\Roaming\mozilla\Firefox\Profiles\w2e3iotr.default-1380203269472\extensions\{e001c731-5e37-4538-a5cb-8168736a2360} [2014-09-07 12:06:37 | 004,222,513 | ---- | M] () (No name found) -- C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\w2e3iotr.default-1380203269472\extensions\firebug@software.joehewitt.com.xpi [2014-07-01 20:28:28 | 000,394,918 | ---- | M] () (No name found) -- C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\w2e3iotr.default-1380203269472\extensions\firegestures@xuldev.org.xpi [2013-09-27 19:08:49 | 000,067,270 | ---- | M] () (No name found) -- C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\w2e3iotr.default-1380203269472\extensions\ienetrenderer-nico@nc.xpi [2013-09-27 19:08:44 | 000,010,043 | ---- | M] () (No name found) -- C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\w2e3iotr.default-1380203269472\extensions\IplextoALL@ALLPlayer.org.xpi [2014-05-07 11:52:39 | 000,024,539 | ---- | M] () (No name found) -- C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\w2e3iotr.default-1380203269472\extensions\jid0-k75TfRGfOXPHfEZmJ9cKu5eCgLc@jetpack.xpi [2013-09-27 21:16:08 | 000,007,927 | ---- | M] () (No name found) -- C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\w2e3iotr.default-1380203269472\extensions\pagerank-client@koeniglich.ch.xpi [2013-10-27 15:07:20 | 000,348,260 | ---- | M] () (No name found) -- C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\w2e3iotr.default-1380203269472\extensions\personas@christopher.beard.xpi [2014-05-23 14:09:35 | 000,897,750 | ---- | M] () (No name found) -- C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\w2e3iotr.default-1380203269472\extensions\trafficlight@bitdefender.com.xpi [2013-09-26 16:04:55 | 000,027,934 | ---- | M] () (No name found) -- C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\w2e3iotr.default-1380203269472\extensions\{1a5dabbd-0e74-41da-b532-a364bb552cab}.xpi [2013-09-27 19:08:46 | 000,188,418 | ---- | M] () (No name found) -- C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\w2e3iotr.default-1380203269472\extensions\{a6ca9b3b-5e52-4f47-85d8-cca35bb57596}.xpi [2014-04-15 21:57:00 | 000,027,540 | ---- | M] () (No name found) -- C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\w2e3iotr.default-1380203269472\extensions\{CB454AEB-2F60-4441-ADEB-2CB43BB33B20}.xpi [2014-07-26 22:58:56 | 000,967,685 | ---- | M] () (No name found) -- C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\w2e3iotr.default-1380203269472\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-26 16:20:52 | 000,434,392 | ---- | M] () (No name found) -- C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\w2e3iotr.default-1380203269472\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi [2014-05-01 11:39:40 | 000,731,942 | ---- | M] () (No name found) -- C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\w2e3iotr.default-1380203269472\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-05-14 16:54:08 | 000,003,084 | ---- | M] () -- C:\Users\user\AppData\Roaming\mozilla\firefox\profiles\w2e3iotr.default-1380203269472\searchplugins\morelenet.xml [2014-09-25 11:39:46 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2014-09-25 11:39:46 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-09-25 11:39:46 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions [2014-09-25 11:39:50 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2014-08-09 15:58:28 | 000,000,000 | ---D | M] (Freemake Video Converter Plugin) -- C:\PROGRAM FILES (X86)\FREEMAKE\FREEMAKE VIDEO CONVERTER\BROWSERPLUGIN\FIREFOX [2010-08-24 11:31:30 | 000,773,120 | ---- | M] (BitComet) -- C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: (Enabled) CHR - default_search_provider: search_url = CHR - default_search_provider: suggest_url = CHR - plugin: Error reading preferences file CHR - Extension: Dysk Google = C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: Freemake Video Converter = C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj\1.0.0_0\ CHR - Extension: Google Wallet = C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\ O1 HOSTS File: ([2011-03-30 00:51:21 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2:[b]64bit:[/b] - BHO: (no name) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No CLSID value found. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2:[b]64bit:[/b] - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No CLSID value found. O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Lexmark Pasek narzędzi) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll () O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (no name) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - No CLSID value found. O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O2 - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No CLSID value found. O2 - BHO: (Lexmark ) - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll () O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\PROGRA~2\ALLPLA~1\Iplex\IPLEXT~1.DLL (ALLCinema Ltd.) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No CLSID value found. O3 - HKLM\..\Toolbar: (Lexmark Pasek narzędzi) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll () O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKLM\..\Toolbar: (no name) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (Lexmark Pasek narzędzi) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll () O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (Lexmark Pasek narzędzi) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll () O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\..\Toolbar\WebBrowser: (Lexmark Pasek narzędzi) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll () O3 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated) O4:[b]64bit:[/b] - HKLM..\Run: [EzPrint] C:\Program Files (x86)\Lexmark 4900 Series\ezprint.exe (Lexmark International Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [lxdrmon.exe] C:\Program Files (x86)\Lexmark 4900 Series\lxdrmon.exe () O4:[b]64bit:[/b] - HKLM..\Run: [Monitor] C:\Windows\PixArt\Pac207\Monitor.exe (PixArt Imaging Incorporation) O4:[b]64bit:[/b] - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [Adobe_ID0EZEHM] C:\PROGRA~2\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~3.EXE (Adobe Systems Incorporated) O4 - HKLM..\Run: [Akamai NetSession Interface] C:\Users\user\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.) O4 - HKLM..\Run: [Gaming Keyboard] C:\Program Files (x86)\Gaming Keyboard\Monitor.EXE () O4 - HKLM..\Run: [mcpltui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey File not found O4 - HKLM..\Run: [OscarEditor] C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe () O4 - HKLM..\Run: [P17RunE] C:\Windows\SysWow64\P17RunE.dll (Creative Technology Ltd.) O4 - HKLM..\Run: [VolPanel] C:\Program Files (x86)\Creative\Volume Panel\VolPanlu.exe (Creative Technology Ltd) O4 - HKLM..\Run: [WRSVC] C:\Program Files (x86)\Webroot\WRSA.exe (Webroot) O4 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000..\Run: [GoogleDriveSync] C:\Program Files (x86)\Google\Drive\googledrivesync.exe (Google) O4 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000..\Run: [GUDelayStartup] C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe (Glarysoft Ltd) O4 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000..\Run: [Kadu] C:\Program Files (x86)\Kadu\kadu.exe (Kadu Team) O4 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000..\Run: [OscarEditor] C:\Program Files (x86)\Anti-Vibrate Oscar Editor\OscarEditor.exe () O4 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000..\Run: [PeerBlock] C:\Program Files\PeerBlock\peerblock.exe (PeerBlock, LLC) O4 - Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Game Assistant.lnk = C:\Program Files (x86)\IObit\Game Assistant\GameAssistant.exe (VTools) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewOnDrive = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableLocalMachineRun = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableLocalMachineRunOnce = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableCurrentUserRun = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableCurrentUserRunOnce = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoShellSearchButton = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFile = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideClock = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayContextMenu = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayItemsDisplay = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetFolders = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDevMgrUpdate = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetTaskbar = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDeletePrinter = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDFSTab = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeStartMenu = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogoff = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWindowsUpdate = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoEncryptOnMove = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRunasInstallPrompt = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoHardwareTab = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuSubFolders = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispAppearancePage = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewOnDrive = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableLocalMachineRun = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableLocalMachineRunOnce = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableCurrentUserRun = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableCurrentUserRunOnce = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoShellSearchButton = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFile = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideClock = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayContextMenu = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayItemsDisplay = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetFolders = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetTaskbar = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDeletePrinter = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDFSTab = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeStartMenu = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogoff = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWindowsUpdate = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoEncryptOnMove = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRunasInstallPrompt = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoHardwareTab = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuSubFolders = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispAppearancePage = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewOnDrive = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableLocalMachineRun = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableLocalMachineRunOnce = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableCurrentUserRun = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableCurrentUserRunOnce = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoShellSearchButton = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFile = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideClock = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayContextMenu = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayItemsDisplay = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetFolders = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetTaskbar = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDeletePrinter = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDFSTab = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeStartMenu = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogoff = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWindowsUpdate = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoEncryptOnMove = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRunasInstallPrompt = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoHardwareTab = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuSubFolders = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispAppearancePage = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewOnDrive = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableLocalMachineRun = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableLocalMachineRunOnce = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableCurrentUserRun = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableCurrentUserRunOnce = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoShellSearchButton = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFile = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideClock = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayContextMenu = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayItemsDisplay = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetFolders = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDevMgrUpdate = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetTaskbar = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDeletePrinter = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDFSTab = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeStartMenu = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogoff = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWindowsUpdate = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoEncryptOnMove = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRunasInstallPrompt = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoHardwareTab = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuSubFolders = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispAppearancePage = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewOnDrive = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableLocalMachineRun = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableLocalMachineRunOnce = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableCurrentUserRun = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableCurrentUserRunOnce = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoShellSearchButton = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFile = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideClock = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayContextMenu = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayItemsDisplay = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetFolders = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDevMgrUpdate = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetTaskbar = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDeletePrinter = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDFSTab = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeStartMenu = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogoff = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWindowsUpdate = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoEncryptOnMove = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRunasInstallPrompt = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoHardwareTab = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuSubFolders = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispAppearancePage = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutorun = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewOnDrive = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableLocalMachineRun = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableLocalMachineRunOnce = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableCurrentUserRun = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableCurrentUserRunOnce = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoShellSearchButton = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFile = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideClock = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayContextMenu = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayItemsDisplay = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetFolders = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetTaskbar = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDeletePrinter = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDFSTab = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeStartMenu = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogoff = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWindowsUpdate = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoEncryptOnMove = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRunasInstallPrompt = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoHardwareTab = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuSubFolders = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispAppearancePage = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0 O7 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0 O9:[b]64bit:[/b] - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - Reg Error: Key error. File not found O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error: Key error. File not found O9 - Extra Button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll () O9 - Extra 'Tools' menuitem : Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll () O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_07-windows-i586.cab (Java Plug-in 10.55.2) O16 - DPF: {CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_07-windows-i586.cab (Java Plug-in 1.7.0_07) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_07-windows-i586.cab (Java Plug-in 10.55.2) O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab (Reg Error: Key error.) O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} http://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab (Creative Software AutoUpdate 2) O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab (Creative Software AutoUpdate Support Package) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{15B443F4-09A1-4899-A01B-0369AC960E9C}: DhcpNameServer = 192.168.2.200 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D048BC41-615F-4D96-A263-E7A8837ABFB4}: NameServer = 194.204.159.1,217.98.63.164 O18:[b]64bit:[/b] - Protocol\Handler\dssrequest - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\sacore - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data - No CLSID value found O18 - Protocol\Handler\dssrequest - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\sacore - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data - No CLSID value found O18:[b]64bit:[/b] - Protocol\Filter\application/x-mfe-ipt - No CLSID value found O18:[b]64bit:[/b] - Protocol\Filter\text/xml - No CLSID value found O18 - Protocol\Filter\application/x-mfe-ipt - No CLSID value found O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\user\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O24 - Desktop BackupWallPaper: C:\Users\user\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O28:[b]64bit:[/b] - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found. O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 0 O32 - AutoRun File - [2014-09-03 12:06:52 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ] O32 - AutoRun File - [2013-01-10 19:55:11 | 000,190,575 | ---- | M] () - C:\AutoMapaSetupLog.txt -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O35 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKU\.DEFAULT\...exe [@ = exefile] -- "%1" %* O37 - HKU\S-1-5-18\...exe [@ = exefile] -- "%1" %* O37 - HKU\S-1-5-21-2130650989-848459207-2900068595-1000\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2014-10-09 00:53:23 | 000,000,000 | ---D | C] -- C:\Users\user\Desktop\fixitpc.pl [2014-10-08 15:04:38 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Roaming\Solvusoft [2014-10-08 15:04:37 | 000,019,888 | ---- | C] (solvusoft) -- C:\Windows\SysNative\roboot64.exe [2014-10-08 15:04:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinThruster [2014-10-08 15:04:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinThruster [2014-10-08 02:01:29 | 000,000,000 | ---D | C] -- C:\FRST [2014-10-08 00:51:55 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\Users\user\Desktop\msvcp71.dll [2014-10-07 23:42:34 | 000,197,704 | ---- | C] (McAfee, Inc.) -- C:\Windows\SysNative\drivers\HipShieldK.sys [2014-10-07 23:41:56 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Local\McAfee File Lock [2014-10-05 20:26:12 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kadu [2014-10-02 01:22:08 | 000,000,000 | ---D | C] -- C:\Users\user\Documents\aaa [2014-10-02 01:20:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Web Designer [2014-10-01 10:19:45 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll [2014-10-01 10:19:45 | 000,371,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll [2014-09-25 13:17:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Thunderbird [2014-09-25 11:39:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2014-09-24 13:59:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation [2014-09-24 13:40:43 | 000,609,240 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvStreaming.exe [2014-09-24 12:54:52 | 001,876,296 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6434411.dll [2014-09-24 12:54:52 | 001,539,272 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6434411.dll [2014-09-24 12:45:48 | 000,941,272 | ---- | C] (Realtek ) -- C:\Windows\SysNative\drivers\Rt64win7.sys [2014-09-24 12:45:48 | 000,073,800 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RtNicProp64.dll [2014-09-24 12:38:38 | 001,890,080 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6434052.dll [2014-09-24 12:38:38 | 001,539,928 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6434052.dll [2014-09-22 23:07:56 | 000,000,000 | ---D | C] -- C:\Users\user\Documents\puregreen [2014-09-13 16:23:04 | 000,000,000 | ---D | C] -- C:\Users\user\AppData\Local\Shutdown8 [2014-09-13 16:18:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Honeyview [2014-09-13 16:18:29 | 000,000,000 | ---D | C] -- C:\Program Files\Honeyview [2014-09-11 17:41:42 | 000,596,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2014-09-11 17:41:41 | 000,440,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2014-09-11 17:41:40 | 000,758,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll [2014-09-11 17:41:40 | 000,446,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll [2014-09-11 17:41:40 | 000,289,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll [2014-09-11 17:41:40 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2014-09-11 17:41:40 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2014-09-11 17:41:40 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll [2014-09-11 17:41:40 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll [2014-09-11 17:41:40 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll [2014-09-11 17:41:40 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll [2014-09-11 17:41:40 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll [2014-09-11 17:41:39 | 000,727,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2014-09-11 17:41:39 | 000,707,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2014-09-11 17:41:39 | 000,547,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2014-09-11 17:41:39 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll [2014-09-11 17:41:39 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll [2014-09-11 17:41:39 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2014-09-11 17:41:39 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2014-09-11 17:41:39 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll [2014-09-11 17:41:39 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2014-09-11 17:41:39 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll [2014-09-11 17:41:38 | 001,249,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll [2014-09-11 17:41:38 | 000,775,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll [2014-09-11 17:41:38 | 000,678,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll [2014-09-11 17:41:38 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll [2014-09-11 17:41:38 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll [2014-09-11 17:41:38 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll [2014-09-11 17:41:38 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll [2014-09-11 17:41:37 | 001,068,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll [2014-09-11 17:41:37 | 000,940,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe [2014-09-11 17:41:37 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe [2014-09-11 17:41:36 | 005,833,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2014-09-11 17:41:35 | 002,104,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2014-09-11 17:41:35 | 002,014,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2014-09-11 17:14:30 | 002,777,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msmpeg2vdec.dll [2014-09-11 17:14:30 | 002,285,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msmpeg2vdec.dll [2014-09-11 13:12:15 | 000,000,000 | ---D | C] -- C:\Users\user\Documents\Hostlab [2014-09-11 11:52:40 | 001,031,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TSWorkspace.dll [2014-09-11 11:52:40 | 000,793,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TSWorkspace.dll [2014-09-11 11:52:33 | 002,565,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll [2014-09-11 11:52:26 | 001,460,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll [2014-09-11 11:52:23 | 000,578,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll [2014-09-11 11:52:23 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll [2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ] [1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2014-10-09 00:39:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2014-10-09 00:22:00 | 000,001,054 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2130650989-848459207-2900068595-1000UA.job [2014-10-09 00:18:00 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2014-10-08 19:56:21 | 000,019,664 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2014-10-08 19:56:21 | 000,019,664 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2014-10-08 15:04:44 | 000,000,272 | ---- | M] () -- C:\Windows\tasks\WinThruster_DEFAULT.job [2014-10-08 15:04:43 | 000,000,280 | ---- | M] () -- C:\Windows\tasks\WinThruster_UPDATES.job [2014-10-08 15:04:36 | 000,001,049 | ---- | M] () -- C:\Users\Public\Desktop\WinThruster.lnk [2014-10-08 11:18:00 | 000,001,040 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2014-10-08 10:43:16 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2130650989-848459207-2900068595-1000Core.job [2014-10-08 01:53:24 | 000,000,258 | ---- | M] () -- C:\Users\user\Desktop\zonefix.reg [2014-10-08 01:50:33 | 000,000,328 | ---- | M] () -- C:\Windows\tasks\GlaryInitialize 5.job [2014-10-08 01:50:00 | 000,000,320 | ---- | M] () -- C:\Windows\tasks\GlaryInitialize.job [2014-10-08 01:48:20 | 000,001,242 | ---- | M] () -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Game Assistant.lnk [2014-10-08 01:46:41 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2014-10-08 01:46:27 | 1067,360,254 | -HS- | M] () -- C:\hiberfil.sys [2014-10-08 01:34:40 | 000,002,982 | ---- | M] () -- C:\Users\user\Desktop\fix.reg [2014-10-08 00:03:14 | 001,670,590 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2014-10-08 00:03:14 | 000,740,438 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2014-10-08 00:03:14 | 000,654,270 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2014-10-08 00:03:14 | 000,156,012 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2014-10-08 00:03:14 | 000,122,142 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2014-10-07 21:37:21 | 003,677,592 | ---- | M] () -- C:\Users\user\Desktop\FV53XX_small-1.pdf [2014-10-07 21:24:24 | 003,677,611 | ---- | M] () -- C:\Users\user\Desktop\FV53XX_small.pdf [2014-10-04 10:09:26 | 000,020,160 | ---- | M] (Glarysoft Ltd) -- C:\Windows\SysNative\drivers\GUBootStartup.sys [2014-10-04 10:06:56 | 005,493,216 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2014-10-02 01:20:26 | 000,002,140 | ---- | M] () -- C:\Users\Public\Desktop\Google Web Designer.lnk [2014-09-28 22:21:47 | 000,122,584 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys [2014-09-28 14:28:26 | 000,154,760 | ---- | M] (Webroot) -- C:\Windows\SysWow64\WRusr.dll [2014-09-28 14:28:26 | 000,115,680 | ---- | M] (Webroot) -- C:\Windows\SysNative\drivers\WRkrn.sys [2014-09-28 14:28:26 | 000,105,320 | ---- | M] (Webroot) -- C:\Windows\SysNative\WRusr.dll [2014-09-26 00:07:23 | 000,001,742 | ---- | M] () -- C:\Users\user\Desktop\PeerBlock.lnk [2014-09-25 04:08:38 | 000,371,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll [2014-09-25 03:40:50 | 000,519,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll [2014-09-24 13:39:18 | 000,701,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2014-09-24 13:39:18 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2014-09-24 12:45:48 | 000,941,272 | ---- | M] (Realtek ) -- C:\Windows\SysNative\drivers\Rt64win7.sys [2014-09-24 12:45:48 | 000,107,552 | ---- | M] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RTNUninst64.dll [2014-09-24 12:45:48 | 000,073,800 | ---- | M] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RtNicProp64.dll [2014-09-24 12:38:38 | 001,890,080 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6434052.dll [2014-09-24 12:38:38 | 001,539,928 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6434052.dll [2014-09-22 09:30:00 | 000,000,296 | ---- | M] () -- C:\Windows\tasks\Synology Data Replicator 3-PAWEL-user.job [2014-09-16 13:39:16 | 000,140,188 | ---- | M] () -- C:\Users\user\Documents\punto.jpg [2014-09-14 01:48:03 | 001,876,296 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6434411.dll [2014-09-14 01:48:03 | 001,539,272 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6434411.dll [2014-09-11 17:40:38 | 001,642,260 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2014-09-10 13:58:09 | 000,893,631 | ---- | M] () -- C:\Users\user\Desktop\cert-8587912566425000652.pdf [2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ] [1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2014-10-08 15:04:44 | 000,000,272 | ---- | C] () -- C:\Windows\tasks\WinThruster_DEFAULT.job [2014-10-08 15:04:43 | 000,000,280 | ---- | C] () -- C:\Windows\tasks\WinThruster_UPDATES.job [2014-10-08 15:04:36 | 000,001,049 | ---- | C] () -- C:\Users\Public\Desktop\WinThruster.lnk [2014-10-08 01:34:13 | 000,002,982 | ---- | C] () -- C:\Users\user\Desktop\fix.reg [2014-10-07 23:41:59 | 000,002,641 | ---- | C] () -- C:\Windows\SysNative\drivers\mfencrk.inf [2014-10-07 23:41:58 | 000,005,442 | ---- | C] () -- C:\Windows\SysNative\drivers\mfencbdc.inf [2014-10-07 21:37:20 | 003,677,592 | ---- | C] () -- C:\Users\user\Desktop\FV53XX_small-1.pdf [2014-10-07 21:24:23 | 003,677,611 | ---- | C] () -- C:\Users\user\Desktop\FV53XX_small.pdf [2014-10-02 01:20:26 | 000,002,140 | ---- | C] () -- C:\Users\Public\Desktop\Google Web Designer.lnk [2014-09-26 00:07:23 | 000,001,742 | ---- | C] () -- C:\Users\user\Desktop\PeerBlock.lnk [2014-09-16 13:39:14 | 000,140,188 | ---- | C] () -- C:\Users\user\Documents\punto.jpg [2014-09-10 13:58:07 | 000,893,631 | ---- | C] () -- C:\Users\user\Desktop\cert-8587912566425000652.pdf [2014-04-18 10:08:30 | 000,707,504 | ---- | C] () -- C:\Users\user\AppData\Local\unins000.exe [2014-04-18 10:08:30 | 000,011,761 | ---- | C] () -- C:\Users\user\AppData\Local\unins000.msg [2014-04-18 10:08:30 | 000,003,175 | ---- | C] () -- C:\Users\user\AppData\Local\unins000.dat [2014-02-26 17:18:33 | 000,001,496 | ---- | C] () -- C:\Users\user\AppData\Local\Adobe Zapisz dla Internetu 13.0 Prefs [2013-09-27 21:32:15 | 000,000,028 | ---- | C] () -- C:\Users\user\AppData\Roaming\Network Meter_Usage.ini [2013-09-27 21:30:44 | 000,077,858 | ---- | C] () -- C:\Users\user\Network_Meter_Data.js [2013-08-31 16:18:04 | 000,246,272 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL [2013-08-31 16:18:04 | 000,074,240 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL [2013-08-31 16:15:19 | 000,002,177 | ---- | C] () -- C:\Windows\P17EP.ini [2013-08-31 16:15:19 | 000,001,578 | ---- | C] () -- C:\Windows\P17EPLS.ini [2013-08-31 16:15:19 | 000,001,489 | ---- | C] () -- C:\Windows\P17EP51.ini [2013-02-12 16:52:18 | 000,000,282 | ---- | C] () -- C:\Users\user\AppData\Roaming\GPU MeterV2_Settings.ini [2013-02-12 16:46:57 | 000,000,624 | ---- | C] () -- C:\Users\user\AppData\Roaming\All CPU MeterV3_Settings.ini [2012-10-23 01:06:59 | 000,000,128 | ---- | C] () -- C:\Users\user\AppData\Roaming\Network Monitor II_Traffic.ini [2012-10-22 08:13:23 | 000,000,239 | ---- | C] () -- C:\Users\user\AppData\Roaming\Top Process Monitor_Settings.ini [2012-10-22 08:08:53 | 000,001,786 | ---- | C] () -- C:\Users\user\AppData\Roaming\System Monitor II_CPU0_Settings.ini [2011-09-19 00:06:11 | 000,001,130 | ---- | C] () -- C:\Users\user\AppData\Roaming\Network Meter_Settings.ini [2011-09-17 18:48:00 | 000,000,839 | ---- | C] () -- C:\Users\user\AppData\Roaming\Drives Meter_Settings.ini [2011-09-17 18:45:31 | 000,000,412 | ---- | C] () -- C:\Users\user\AppData\Roaming\All CPU Meter_Settings.ini [2011-08-11 00:11:44 | 000,008,736 | ---- | C] () -- C:\Users\user\AppData\Roaming\UserTile.png [2010-12-19 18:44:24 | 000,000,438 | ---- | C] () -- C:\Users\user\AppData\Roaming\Ping Monitor_Settings.ini [2010-10-19 23:38:32 | 000,000,660 | ---- | C] () -- C:\Users\user\AppData\Roaming\Network Monitor II_Settings.ini [2010-10-19 23:37:14 | 000,000,289 | ---- | C] () -- C:\Users\user\AppData\Roaming\Drives Monitor_Settings.ini [2010-10-19 23:35:45 | 000,001,248 | ---- | C] () -- C:\Users\user\AppData\Roaming\System Monitor II_Settings.ini [2010-05-08 18:08:03 | 000,000,600 | ---- | C] () -- C:\Users\user\AppData\Local\PUTTY.RND [2009-12-21 00:08:29 | 000,011,264 | ---- | C] () -- C:\Users\user\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-11-09 21:59:18 | 000,007,585 | ---- | C] () -- C:\Users\user\AppData\Local\Resmon.ResmonCfg [2009-11-09 20:33:11 | 000,000,266 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2009-11-09 19:43:24 | 005,505,024 | -HS- | C] () -- C:\Users\user\NTUSER.bak [2009-09-29 21:25:00 | 000,036,280 | ---- | C] () -- C:\Users\user\GamingC.mac [2009-08-25 21:18:51 | 000,000,885 | ---- | C] () -- C:\Users\user\AppData\Roaming\qnapi.ini [color=#E56717]========== ZeroAccess Check ==========[/color] [2012-11-22 01:23:46 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2014-06-25 04:05:42 | 014,175,744 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2014-06-25 03:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2013-06-02 21:54:26 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\IObit [2013-06-02 21:54:26 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\IObit [2009-12-30 02:30:23 | 000,000,000 | ---D | M] -- C:\Users\Paweł\AppData\Roaming\Thunderbird [2012-10-03 17:12:26 | 000,000,000 | ---D | M] -- C:\Users\test2\AppData\Roaming\Curiolab [2013-06-02 21:54:26 | 000,000,000 | ---D | M] -- C:\Users\UpdatusUser\AppData\Roaming\IObit [2014-08-31 01:03:05 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\.minecraft [2011-09-29 02:10:01 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\.wtw [2013-05-20 10:00:38 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\2BrightSparks [2013-07-20 13:41:55 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Absolute Uninstaller [2014-01-08 00:37:10 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Acronis [2014-10-04 02:39:40 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\AIMP3 [2011-07-02 01:09:26 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Ashampoo [2012-10-03 18:58:55 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Audacity [2014-09-03 12:07:15 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Autodesk [2011-10-28 15:26:18 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Avnex [2009-11-09 20:01:50 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\becker [2012-10-03 18:58:55 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Bioshock [2010-11-17 00:17:14 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\BitComet [2012-08-17 01:05:57 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\CheckPoint [2014-03-01 23:38:47 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\com.adobe.formscentral.FormsCentralForAcrobat [2010-09-27 00:45:09 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Command & Conquer 3 Kane's Wrath [2009-11-09 20:01:50 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Command & Conquer 3 Tiberium Wars [2009-11-09 20:01:51 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Command & Conquer 3 Tiberium Wars Demo [2013-12-01 01:09:26 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Command and Conquer 4 [2014-02-03 02:38:33 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Complay [2011-09-04 01:35:45 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\CrystalIdea Software [2011-07-22 12:33:40 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\DAEMON Tools Lite [2011-07-22 12:33:40 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\DAEMON Tools Pro [2014-10-04 10:06:04 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\DiskDefrag [2014-10-09 00:52:20 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\EditPlus 3 [2009-11-12 23:21:48 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\eMule [2011-07-27 18:10:33 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\ESET [2012-10-03 18:58:55 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\EssentialPIM [2012-10-03 18:58:55 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\EurekaLog [2014-10-09 00:54:01 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\FileZilla [2014-01-08 14:11:20 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\FireShot [2012-09-29 17:31:32 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\FreshDiagnose [2014-05-21 10:32:48 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\GG [2014-05-21 10:16:20 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\GlarySoft [2013-11-24 03:20:45 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Hard Disk Sentinel [2014-04-03 18:32:04 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\IObit [2012-10-03 18:58:55 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\ipla [2014-10-09 01:15:03 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Kadu [2009-11-30 11:19:05 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Lexmark Productivity Studio [2014-08-20 20:11:28 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\LG Electronics [2013-05-30 13:02:08 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\LibreOffice [2011-11-17 17:10:26 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\MAGIX [2012-05-13 22:46:09 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Maxthon3 [2010-01-07 12:02:02 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Moyea [2012-10-03 18:58:56 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\NapiProjekt [2009-11-09 20:02:03 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Nokia [2011-11-15 02:41:00 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Opera [2014-05-26 10:44:46 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Opera Software [2013-09-26 16:18:40 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Oracle [2013-12-01 16:17:05 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Origin [2009-11-09 20:02:04 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\PC Suite [2014-02-26 01:24:56 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\PDAppFlex [2011-08-11 00:11:44 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\PeerNetworking [2013-11-27 14:31:24 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\QuickScan [2014-05-21 16:58:01 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\RJ TextEd [2012-04-14 15:49:48 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Rovio [2011-10-28 16:02:47 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Screaming Bee [2009-12-15 12:17:05 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Softland [2014-03-02 00:15:59 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\SolidDocuments [2014-10-08 15:04:38 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Solvusoft [2014-03-01 20:07:43 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1 [2009-09-29 23:03:02 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\temp [2013-07-28 21:13:44 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\The Creative Assembly [2012-10-03 18:58:56 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Thunderbird [2013-11-14 14:16:10 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\TomTom [2012-09-07 01:27:34 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\TuneUp Software [2012-10-03 18:58:57 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\Uninstaller Tool(Comodo Forums) [2011-09-06 17:28:00 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\uTorrent [2014-02-01 02:53:44 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\wargaming.net [2013-04-28 19:40:22 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\XnView [2011-03-29 01:08:04 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\XRay Engine [2012-05-13 01:05:21 | 000,000,000 | ---D | M] -- C:\Users\user\AppData\Roaming\YoWindow [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Files - Unicode (All) ==========[/color] [2014-03-08 14:14:41 | 000,000,000 | ---D | M](C:\Windows\SysNative\C?????????????????????????) -- C:\Windows\SysNative\C꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯 [2014-03-08 14:14:41 | 000,000,000 | ---D | C](C:\Windows\SysNative\C?????????????????????????) -- C:\Windows\SysNative\C꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯 [2014-02-17 11:16:46 | 000,000,000 | ---D | M](C:\ProgramData\Bitdefend??????) -- C:\ProgramData\Bitdefend꾯꾯꾯꾯꾯꾯 [2014-02-17 11:16:46 | 000,000,000 | ---D | M](C:\ProgramData\Bitdefend??????) -- C:\ProgramData\Bitdefend꾯꾯꾯꾯꾯꾯 [2014-02-15 16:06:52 | 000,000,000 | ---D | M](C:\ProgramData\Bitdefende?) -- C:\ProgramData\Bitdefende꾯 [2014-02-15 16:06:52 | 000,000,000 | ---D | M](C:\ProgramData\Bitdefende?) -- C:\ProgramData\Bitdefende꾯 [2014-02-10 10:06:59 | 000,000,000 | ---D | M](C:\Windows\SysNative\??????????????????????????????) -- C:\Windows\SysNative\꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯 [2014-02-10 10:06:59 | 000,000,000 | ---D | C](C:\Windows\SysNative\??????????????????????????????) -- C:\Windows\SysNative\꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯 [2014-02-04 22:32:24 | 000,000,000 | ---D | M](C:\Windows\SysNative\??????????????????????????) -- C:\Windows\SysNative\꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯 [2014-02-04 22:32:24 | 000,000,000 | ---D | C](C:\Windows\SysNative\??????????????????????????) -- C:\Windows\SysNative\꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯 [2014-02-04 22:32:16 | 000,000,000 | ---D | M](C:\ProgramData\Bitdefender????) -- C:\ProgramData\Bitdefender꾯꾯꾯꾯 [2014-02-04 22:32:16 | 000,000,000 | ---D | M](C:\ProgramData\Bitdefender????) -- C:\ProgramData\Bitdefender꾯꾯꾯꾯 [2014-01-29 10:40:34 | 000,000,000 | ---D | M](C:\Windows\SysNative\????????????????????????) -- C:\Windows\SysNative\꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯 [2014-01-29 10:40:34 | 000,000,000 | ---D | C](C:\Windows\SysNative\????????????????????????) -- C:\Windows\SysNative\꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯 [2013-11-13 11:30:05 | 000,000,000 | ---D | M](C:\Windows\SysNative\C?????????????????????????????) -- C:\Windows\SysNative\C꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯 [2013-11-13 11:30:05 | 000,000,000 | ---D | C](C:\Windows\SysNative\C?????????????????????????????) -- C:\Windows\SysNative\C꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯꾯 (C:\ProgramData\Bitdefender????) -- C:\ProgramData\Bitdefender꾯꾯꾯꾯 (C:\ProgramData\Bitdefende?) -- C:\ProgramData\Bitdefende꾯 (C:\ProgramData\Bitdefend??????) -- C:\ProgramData\Bitdefend꾯꾯꾯꾯꾯꾯 [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 140 bytes -> C:\ProgramData\TEMP:CB0AACC9 @Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:47F1DFAC < End of report >