OTL logfile created on: 2014-10-30 11:15:41 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Kornel\Desktop\Nowy folder
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,98 Gb Total Physical Memory | 1,89 Gb Available Physical Memory | 47,39% Memory free
7,96 Gb Paging File | 5,25 Gb Available in Paging File | 65,88% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 58,50 Gb Total Space | 13,15 Gb Free Space | 22,48% Space Free | Partition Type: NTFS
Drive E: | 872,92 Gb Total Space | 502,78 Gb Free Space | 57,60% Space Free | Partition Type: NTFS
 
Computer Name: KORNEL-KOMPUTER | User Name: Kornel | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2014-10-29 14:54:18 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Kornel\Desktop\Nowy folder\OTL.exe
PRC - [2014-10-28 10:40:43 | 000,277,672 | ---- | M] (Microsoft Corporation) -- C:\Users\Kornel\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
PRC - [2014-09-13 01:52:04 | 036,414,624 | ---- | M] (Dropbox, Inc.) -- C:\Users\Kornel\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2014-07-28 11:18:00 | 001,703,880 | ---- | M] (AIMP DevTeam) -- C:\Program Files (x86)\AIMP3\AIMP3.exe
PRC - [2014-06-23 10:37:54 | 000,774,928 | ---- | M] (BlueStack Systems, Inc.) -- C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
PRC - [2014-06-23 10:35:32 | 000,385,808 | ---- | M] (BlueStack Systems, Inc.) -- C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
PRC - [2014-05-21 11:22:08 | 002,135,232 | ---- | M] () -- C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
PRC - [2013-07-08 11:35:42 | 001,992,704 | ---- | M] () -- C:\Program Files (x86)\screenSHU\screenSHU.exe
PRC - [2013-02-07 16:30:33 | 000,399,224 | ---- | M] (BitTorrent, Inc.) -- C:\Users\Kornel\AppData\Roaming\uTorrent\uTorrent.exe
PRC - [2012-11-29 14:50:25 | 003,463,080 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
PRC - [2012-04-10 15:42:32 | 000,363,800 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2012-04-10 15:42:28 | 000,277,784 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2012-04-10 15:42:10 | 000,165,144 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
PRC - [2007-09-02 12:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2014-10-30 10:31:50 | 000,043,008 | ---- | M] () -- c:\Users\Kornel\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpcx0sll.dll
MOD - [2014-10-28 10:40:42 | 000,081,056 | ---- | M] () -- C:\Users\Kornel\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\LoggingPlatform.DLL
MOD - [2014-10-22 05:05:00 | 014,902,600 | ---- | M] () -- C:\Users\Kornel\AppData\Local\Google\Chrome\Application\38.0.2125.111\PepperFlash\pepflashplayer.dll
MOD - [2014-10-22 05:04:57 | 008,910,664 | ---- | M] () -- C:\Users\Kornel\AppData\Local\Google\Chrome\Application\38.0.2125.111\pdf.dll
MOD - [2014-10-22 05:04:51 | 001,042,760 | ---- | M] () -- C:\Users\Kornel\AppData\Local\Google\Chrome\Application\38.0.2125.111\libglesv2.dll
MOD - [2014-10-22 05:04:49 | 000,211,272 | ---- | M] () -- C:\Users\Kornel\AppData\Local\Google\Chrome\Application\38.0.2125.111\libegl.dll
MOD - [2014-10-22 05:04:48 | 001,681,224 | ---- | M] () -- C:\Users\Kornel\AppData\Local\Google\Chrome\Application\38.0.2125.111\ffmpegsumo.dll
MOD - [2014-09-13 01:20:58 | 003,610,624 | ---- | M] () -- C:\Users\Kornel\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll
MOD - [2014-07-28 11:18:00 | 001,733,120 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Modules\aimp_libvorbis.dll
MOD - [2014-07-28 11:18:00 | 000,505,344 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Sqlite3.dll
MOD - [2014-07-28 11:18:00 | 000,294,400 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Modules\libFLAC.dll
MOD - [2014-07-28 11:18:00 | 000,237,568 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\OptimFROG.dll
MOD - [2014-07-28 11:18:00 | 000,220,672 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Modules\MACDll.dll
MOD - [2014-07-28 11:18:00 | 000,218,112 | ---- | M] () -- C:\Program Files (x86)\AIMP3\libsoxr.dll
MOD - [2014-07-28 11:18:00 | 000,141,768 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\PandemicAnalogMeter.dll
MOD - [2014-07-28 11:18:00 | 000,072,136 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\aimp_lastfm.dll
MOD - [2014-07-28 11:18:00 | 000,026,624 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\Aorta.svp
MOD - [2013-08-23 20:01:44 | 025,100,288 | ---- | M] () -- C:\Users\Kornel\AppData\Roaming\Dropbox\bin\libcef.dll
MOD - [2013-07-08 11:35:42 | 001,992,704 | ---- | M] () -- C:\Program Files (x86)\screenSHU\screenSHU.exe
MOD - [2012-02-02 18:26:52 | 000,043,008 | ---- | M] () -- C:\Program Files (x86)\screenSHU\libgcc_s_dw2-1.dll
MOD - [2012-02-02 18:26:52 | 000,011,362 | ---- | M] () -- C:\Program Files (x86)\screenSHU\mingwm10.dll
MOD - [2011-12-02 01:30:54 | 000,979,982 | ---- | M] () -- C:\Program Files (x86)\screenSHU\libstdc++-6.dll
MOD - [2007-09-02 12:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.exe
MOD - [2007-09-02 12:57:36 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.dll
MOD - [2006-05-21 19:32:40 | 000,081,920 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\Punkie.svp
MOD - [2003-12-12 10:57:38 | 000,040,960 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\NovembersFire.svp
MOD - [2003-12-12 06:06:54 | 000,032,768 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\SpectraGrid.svp
MOD - [2002-12-17 14:13:44 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\PX.SVP
MOD - [2002-12-17 10:36:38 | 000,037,376 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\Nad 1.01.svp
MOD - [2002-12-14 01:04:18 | 000,060,676 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\Faited 1.01.svp
MOD - [2002-10-03 11:36:46 | 000,057,588 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\cwave.svp
MOD - [2002-10-03 11:10:56 | 000,090,112 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\Jazz 1.1.svp
MOD - [2002-10-03 11:10:56 | 000,073,728 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\Pixel Ballet .25.svp
MOD - [2002-10-03 11:10:56 | 000,053,248 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\Pixel Glissade 2.0.svp
MOD - [2002-09-25 19:29:52 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\Miffo.svp
MOD - [2002-09-25 16:07:36 | 000,020,480 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\Xoo 1.0.svp
MOD - [2002-09-25 05:18:26 | 000,049,152 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\Starwave 1.0.svp
MOD - [2002-09-08 15:02:38 | 000,073,728 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\spacething.svp
MOD - [2002-09-08 02:39:16 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\Aorta 1.1.svp
MOD - [2001-11-08 20:35:54 | 000,108,544 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\vov-sa172.svp
MOD - [2001-07-18 18:18:24 | 000,155,648 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\Rabbit Hole 1.1.svp
MOD - [2001-02-03 22:11:32 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\Rainbow Reaction 1.01.svp
MOD - [2000-04-19 15:39:28 | 000,076,288 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\Light Magick.svp
MOD - [2000-03-29 03:42:50 | 000,079,360 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\Spectrum_R.svp
MOD - [1999-12-09 07:33:30 | 000,172,032 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\FunkEasy.svp
MOD - [1999-09-10 02:54:52 | 000,036,864 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\PeakFreq.svp
MOD - [1999-08-10 11:27:08 | 000,040,960 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\Pws VU Meter 1.2.svp
MOD - [1999-07-29 11:57:10 | 000,053,248 | ---- | M] () -- C:\Program Files (x86)\AIMP3\Plugins\Spectral Trip 1.0.svp
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2014-09-15 23:03:18 | 000,239,616 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:[b]64bit:[/b] - [2012-03-07 02:00:46 | 000,629,984 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:[b]64bit:[/b] - [2008-07-29 12:20:28 | 004,737,024 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe -- (msvsmon90)
SRV - [2014-10-21 20:22:40 | 000,833,728 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2014-09-25 00:43:33 | 000,114,288 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014-09-24 01:41:21 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014-06-23 10:37:54 | 000,774,928 | ---- | M] (BlueStack Systems, Inc.) [Auto | Running] -- C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe -- (BstHdUpdaterSvc)
SRV - [2014-06-23 10:35:32 | 000,385,808 | ---- | M] (BlueStack Systems, Inc.) [Auto | Running] -- C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe -- (BstHdLogRotatorSvc)
SRV - [2014-06-23 10:34:52 | 000,406,288 | ---- | M] (BlueStack Systems, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\BlueStacks\HD-Service.exe -- (BstHdAndroidSvc)
SRV - [2014-05-21 11:22:08 | 002,135,232 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe -- (DragonUpdater)
SRV - [2013-10-23 08:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012-11-29 14:50:25 | 003,463,080 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8)
SRV - [2012-07-09 00:40:10 | 000,104,912 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2012-04-10 15:42:32 | 000,363,800 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2012-04-10 15:42:28 | 000,277,784 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2012-04-10 15:42:10 | 000,165,144 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service)
SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2014-09-15 23:26:58 | 016,750,080 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:[b]64bit:[/b] - [2014-09-15 22:59:06 | 000,576,000 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:[b]64bit:[/b] - [2014-06-21 18:01:22 | 000,094,720 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:[b]64bit:[/b] - [2014-01-14 18:32:04 | 000,022,600 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files\PeerBlock\pbfilter.sys -- (pbfilter)
DRV:[b]64bit:[/b] - [2013-06-28 10:45:00 | 000,036,352 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetmodem64.sys -- (ANDNetModem)
DRV:[b]64bit:[/b] - [2013-04-24 09:15:28 | 000,034,816 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgx64modem.sys -- (USBModem)
DRV:[b]64bit:[/b] - [2013-04-24 09:15:28 | 000,028,160 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgx64diag.sys -- (UsbDiag)
DRV:[b]64bit:[/b] - [2013-04-24 09:15:26 | 000,017,920 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgx64bus.sys -- (usbbus)
DRV:[b]64bit:[/b] - [2013-04-18 15:14:12 | 000,029,184 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetdiag64.sys -- (AndNetDiag)
DRV:[b]64bit:[/b] - [2013-04-18 15:12:26 | 000,031,744 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandnetadb.sys -- (andnetadb)
DRV:[b]64bit:[/b] - [2013-04-12 10:41:28 | 000,131,856 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV:[b]64bit:[/b] - [2012-12-30 22:16:01 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)
DRV:[b]64bit:[/b] - [2012-12-30 22:16:01 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)
DRV:[b]64bit:[/b] - [2012-06-05 13:45:16 | 000,237,968 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService)
DRV:[b]64bit:[/b] - [2012-04-12 00:30:00 | 000,708,200 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2011-11-10 01:04:14 | 000,060,184 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:[b]64bit:[/b] - [2011-11-03 02:01:00 | 000,056,208 | ---- | M] (Rovi Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:[b]64bit:[/b] - [2011-08-17 09:58:26 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt)
DRV:[b]64bit:[/b] - [2011-08-17 09:58:22 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
DRV:[b]64bit:[/b] - [2011-08-17 09:58:20 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc)
DRV:[b]64bit:[/b] - [2011-08-17 09:58:16 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)
DRV:[b]64bit:[/b] - [2011-05-11 17:23:10 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2011-05-11 17:23:10 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2011-04-12 10:45:50 | 000,018,432 | ---- | M] (TPMX Electronics Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HPub4DE3.sys -- (HPub4DE3)
DRV:[b]64bit:[/b] - [2011-03-09 09:44:44 | 000,025,088 | ---- | M] (TPMX Electronics Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HPMo4DE3.sys -- (HPMo4DE3)
DRV:[b]64bit:[/b] - [2011-02-11 22:23:34 | 000,035,344 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\npf.sys -- (npf)
DRV:[b]64bit:[/b] - [2010-11-21 04:24:43 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:[b]64bit:[/b] - [2010-11-21 04:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2010-11-21 04:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
DRV:[b]64bit:[/b] - [2010-11-21 04:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV:[b]64bit:[/b] - [2010-11-21 04:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:[b]64bit:[/b] - [2010-11-21 04:23:48 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:[b]64bit:[/b] - [2010-11-21 04:23:48 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2009-11-18 00:12:00 | 000,032,344 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBfilt64.sys -- (MBfilt)
DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-07-14 01:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV:[b]64bit:[/b] - [2009-07-14 01:35:37 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDScan.sys -- (WSDScan)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009-03-18 15:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV - [2014-06-23 10:35:14 | 000,123,152 | ---- | M] (BlueStack Systems) [Kernel | Auto | Running] -- C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys -- (BstHdDrv)
DRV - [2014-06-20 11:54:48 | 000,064,064 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Cheat Engine 6.4\dbk64.sys -- (CEDRIVER60)
DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-21-2492788336-1247506773-2707690017-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 
IE - HKU\S-1-5-21-2492788336-1247506773-2707690017-1000\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-21-2492788336-1247506773-2707690017-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2492788336-1247506773-2707690017-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.useDBForOrder: "false"
FF - prefs.js..extensions.enabledAddons: clickclean%40hotcleaner.com:4.1
FF - prefs.js..extensions.enabledAddons: finspector%40itamt.org:0.2.5
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:32.0.3
FF - prefs.js..network.proxy.http: "79.170.50.25"
FF - prefs.js..network.proxy.http_port: 80
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1205146.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@ganymede/BOARDS,version=1.0: C:\Program Files (x86)\Ganymede\Plugins\BOARDS\NPBOARDS.dll (Ganymede Technologies)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.67.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Kornel\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Kornel\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Kornel\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll File not found
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 32.0.3\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 32.0.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2014-09-25 00:43:31 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 13.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2012-05-13 14:57:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 13.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
 
[2011-10-16 17:52:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kornel\AppData\Roaming\Mozilla\Extensions
[2011-10-16 17:52:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kornel\AppData\Roaming\Mozilla\Extensions\celtx@celtx.com
[2014-07-03 18:00:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kornel\AppData\Roaming\Mozilla\Firefox\Profiles\3c66tslv.1\extensions
[2014-10-18 17:54:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kornel\AppData\Roaming\Mozilla\Firefox\Profiles\54i3gayi.1\extensions
[2014-10-29 12:29:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kornel\AppData\Roaming\Mozilla\Firefox\Profiles\aldiqu7j.default\extensions
[2014-10-21 21:55:31 | 000,000,000 | ---D | M] (iMacros for Firefox) -- C:\Users\Kornel\AppData\Roaming\Mozilla\Firefox\Profiles\aldiqu7j.default\extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670}
[2014-06-26 19:07:39 | 000,000,000 | ---D | M] (Click&Clean) -- C:\Users\Kornel\AppData\Roaming\Mozilla\Firefox\Profiles\aldiqu7j.default\extensions\clickclean@hotcleaner.com
[2014-10-11 12:32:57 | 000,000,000 | ---D | M] (FlashInspector) -- C:\Users\Kornel\AppData\Roaming\Mozilla\Firefox\Profiles\aldiqu7j.default\extensions\finspector@itamt.org
[2014-10-21 15:55:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kornel\AppData\Roaming\Mozilla\Firefox\Profiles\p27jxnqn.2\extensions
[2014-10-29 12:11:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kornel\AppData\Roaming\Mozilla\Firefox\Profiles\tyyajnbz.3\extensions
[2014-10-19 01:09:28 | 000,979,610 | ---- | M] () (No name found) -- C:\Users\Kornel\AppData\Roaming\Mozilla\Firefox\Profiles\aldiqu7j.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2014-10-29 09:12:26 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2014-09-25 00:43:29 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
[2014-09-25 00:43:33 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2011-07-15 12:24:52 | 000,932,008 | ---- | M] (Ganymede Technologies) -- C:\Program Files (x86)\mozilla firefox\plugins\NPBOARDS.dll
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider:  (Enabled)
CHR - default_search_provider: search_url = 
CHR - default_search_provider: suggest_url = 
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Kornel\AppData\Local\Google\Chrome\Application\38.0.2125.111\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Kornel\AppData\Local\Google\Chrome\Application\38.0.2125.111\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Kornel\AppData\Local\Google\Chrome\Application\38.0.2125.111\pdf.dll
CHR - plugin: Microsoft® Windows Media Player Firefox Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: Ganymede Boards Plugin (Enabled) = C:\Program Files (x86)\Ganymede\Plugins\BOARDS\NPBOARDS.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Intel® Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
CHR - plugin: Intel® Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
CHR - plugin: Java(TM) Platform SE 7 U25 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: Windows Live™ Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Kornel\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll
CHR - plugin: Java Deployment Toolkit 7.0.250.17 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll
CHR - Extension: No name found = C:\Users\Kornel\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif\6.8.1_0\
CHR - Extension: No name found = C:\Users\Kornel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: No name found = C:\Users\Kornel\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnjjngeaknajbdcgpfkgnonkmififhfo\2.4.0_0\
CHR - Extension: No name found = C:\Users\Kornel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: No name found = C:\Users\Kornel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejifodhjoeeenihgfpjijjmpomaphmah\3.0.7_0\
CHR - Extension: No name found = C:\Users\Kornel\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil\1.97.43_0\
CHR - Extension: No name found = C:\Users\Kornel\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.12.1_0\
CHR - Extension: No name found = C:\Users\Kornel\AppData\Local\Google\Chrome\User Data\Default\Extensions\iggpfpnahkgpnindfkdncknoldgnccdg\5.2.4_0\
CHR - Extension: No name found = C:\Users\Kornel\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfchnphgogjhineanplmfkofljiagjfb\2_0\
CHR - Extension: No name found = C:\Users\Kornel\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkdkcgeghhfjiglphfppinecpcpnnbne\1.0.0.0_0\
CHR - Extension: No name found = C:\Users\Kornel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: No name found = C:\Users\Kornel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdabfienifkbhoihedcgeogidfmibmhp\8.6_0\
CHR - Extension: No name found = C:\Users\Kornel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2014-10-10 14:06:01 | 000,000,100 | R--- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 127.0.0.1 oscount.techsmith.com
O1 - Hosts: 127.0.0.1 activation.cloud.techsmith.com
O2:[b]64bit:[/b] - BHO: (no name) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - No CLSID value found.
O2:[b]64bit:[/b] - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - No CLSID value found.
O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:[b]64bit:[/b] - HKLM..\Run: [XMouseButtonControl] C:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe (Highresolution Enterprises)
O4 - HKLM..\Run: [IMSS] C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe (Intel Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2492788336-1247506773-2707690017-1000..\Run: [EPLTarget\P0000000000000000] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHLE.EXE /EPT "EPLTarget\P0000000000000000" /M "Epson Stylus SX235" /EF "HKCU" File not found
O4 - HKU\S-1-5-21-2492788336-1247506773-2707690017-1000..\Run: [PeerBlock] C:\Program Files\PeerBlock\peerblock.exe (PeerBlock, LLC)
O4 - HKU\S-1-5-21-2492788336-1247506773-2707690017-1000..\Run: [RocketDock] C:\Program Files (x86)\RocketDock\RocketDock.exe ()
O4 - HKU\S-1-5-21-2492788336-1247506773-2707690017-1000..\Run: [screenSHU] C:\Program Files (x86)\screenSHU\screenSHU.exe ()
O4 - HKU\S-1-5-21-2492788336-1247506773-2707690017-1000..\Run: [SkyDrive] C:\Users\Kornel\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2492788336-1247506773-2707690017-1000..\Run: [uTorrent] C:\Users\Kornel\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKLM..\RunOnce\Setup: [Registering MS MPEG4 ActiveX filter...] C:\Windows\SysWOW64\MPG4ds32.ax (Microcrap Corporation)
O4 - Startup: C:\Users\Kornel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7 Sticky Notes.lnk =  File not found
O4 - Startup: C:\Users\Kornel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Kornel\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8:[b]64bit:[/b] - Extra context menu item: Ściągaj z Mipony - file://C:\Program Files (x86)\MiPony\Browser\IEContext.htm File not found
O8 - Extra context menu item: Ściągaj z Mipony - file://C:\Program Files (x86)\MiPony\Browser\IEContext.htm File not found
O9 - Extra Button: PokerStars.eu - {07BA1DA9-F501-4796-8728-74D1B91A6CD5} - C:\Program Files (x86)\PokerStars.EU\PokerStarsUpdate.exe File not found
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-2492788336-1247506773-2707690017-1000\..Trusted Ranges: Range1979 ([http] in Trusted sites)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_67-windows-i586.cab (Java Plug-in 10.67.2)
O16 - DPF: {CAFEEFAC-0017-0000-0067-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_67-windows-i586.cab (Java Plug-in 1.7.0_67)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_67-windows-i586.cab (Java Plug-in 1.7.0_67)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6B586669-F07A-4E25-A1B8-6A5678022BD6}: NameServer = 192.168.1.1
O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O27:[b]64bit:[/b] - HKLM IFEO\notepad.exe: Debugger - C:\Users\Kornel\Documents\Notepad2.exe ()
O27 - HKLM IFEO\notepad.exe: Debugger - C:\Users\Kornel\Documents\Notepad2.exe ()
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{0301dcbb-79d6-11e2-859e-6c626d473016}\Shell - "" = AutoRun
O33 - MountPoints2\{0301dcbb-79d6-11e2-859e-6c626d473016}\Shell\AutoRun\command - "" = H:\LGAutoRun.exe
O33 - MountPoints2\{9eda0a65-72a5-11e2-9b77-6c626d473016}\Shell - "" = AutoRun
O33 - MountPoints2\{9eda0a65-72a5-11e2-9b77-6c626d473016}\Shell\AutoRun\command - "" = H:\LGAutoRun.exe
O33 - MountPoints2\{e539bc90-d579-11e0-b71c-6c626d473016}\Shell - "" = AutoRun
O33 - MountPoints2\{e539bc90-d579-11e0-b71c-6c626d473016}\Shell\AutoRun\command - "" = F:\autorun.exe
O33 - MountPoints2\{e539bc90-d579-11e0-b71c-6c626d473016}\Shell\install\command - "" = F:\autorun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2014-10-30 11:00:35 | 000,000,000 | ---D | C] -- C:\FRST
[2014-10-29 14:53:33 | 000,000,000 | ---D | C] -- C:\Users\Kornel\Desktop\Nowy folder
[2014-10-29 14:52:40 | 000,000,000 | --SD | C] -- C:\Windows\SysWow64\Microsoft
[2014-10-29 09:17:00 | 131,078,000 | ---- | C] (AVAST Software) -- C:\Users\Kornel\Desktop\avast_free_antivirus_setup.exe
[2014-10-29 09:12:03 | 000,772,504 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\npDeployJava1.dll
[2014-10-29 09:12:03 | 000,687,504 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\deployJava1.dll
[2014-10-28 15:37:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2014-10-28 15:37:12 | 019,828,376 | ---- | C] (Malwarebytes Corporation                                    ) -- C:\Users\Kornel\Desktop\mbam-setup-2.0.3.1025.exe
[2014-10-28 10:40:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft OneDrive
[2014-10-28 10:40:26 | 000,000,000 | R--D | C] -- C:\Users\Kornel\OneDrive
[2014-10-28 10:40:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft OneDrive
[2014-10-27 08:35:41 | 000,000,000 | ---D | C] -- C:\Users\Kornel\AppData\Local\CrashDumps
[2014-10-21 16:25:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTK Desktop Analytics
[2014-10-21 16:25:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\YTK Desktop Analytics
[2014-10-19 14:34:08 | 000,000,000 | ---D | C] -- C:\Users\Kornel\AppData\Roaming\FileZilla
[2014-10-18 14:15:50 | 000,000,000 | ---D | C] -- C:\Users\Kornel\Desktop\FileZilla-3.9.0.6
[2014-10-14 17:38:00 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 4.3
[2014-10-14 15:19:17 | 000,000,000 | ---D | C] -- C:\Users\Kornel\Desktop\Lanos
[2014-10-12 15:05:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4
[2014-10-12 15:05:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cheat Engine 6.4
[2014-10-12 15:03:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BS
[2014-10-12 15:03:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
[2014-10-12 15:03:12 | 000,000,000 | ---D | C] -- C:\ProgramData\BlueStacks
[2014-10-12 15:03:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BlueStacks
[2014-10-11 14:07:22 | 000,000,000 | ---D | C] -- C:\Users\Kornel\AppData\Roaming\AMD
[2014-10-10 14:33:49 | 000,000,000 | ---D | C] -- C:\Users\Kornel\AppData\Roaming\TechSmith
[2014-10-10 14:08:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
[2014-10-10 14:08:54 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1995-08.com.techsmith
[2014-10-10 14:08:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime
[2014-10-10 14:08:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\TechSmith Shared
[2014-10-10 14:07:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TechSmith
[2014-10-09 21:48:37 | 000,000,000 | ---D | C] -- C:\Users\Kornel\Desktop 2
[2014-10-09 21:39:40 | 000,000,000 | ---D | C] -- C:\Users\Kornel\Desktop\Dexpot
[2014-10-09 21:38:15 | 000,000,000 | ---D | C] -- C:\Users\Kornel\AppData\Roaming\Stardock
[2014-10-09 21:38:14 | 000,000,000 | ---D | C] -- C:\Users\Kornel\AppData\Local\Stardock
[2014-10-09 21:38:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Stardock
[2014-10-09 16:12:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2010 Express
[2014-10-09 11:44:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeerBlock
[2014-10-09 11:44:38 | 000,000,000 | ---D | C] -- C:\Program Files\PeerBlock
[2014-10-09 11:35:52 | 000,464,384 | ---- | C] (Seiko Epson Corporation) -- C:\Windows\SysNative\esxw2ud.dll
[2014-10-09 11:35:52 | 000,132,560 | ---- | C] (Seiko Epson Corporation) -- C:\Windows\SysNative\esdevapp.exe
[2014-10-09 11:35:52 | 000,013,824 | ---- | C] (Seiko Epson Corporation) -- C:\Windows\SysNative\esxcdev.dll
[2014-10-09 11:25:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
[2014-10-06 14:20:12 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
[2014-10-06 14:20:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD AVT
[2014-10-06 14:19:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
[2014-10-06 14:18:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies
[2014-10-03 12:57:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2014-10-30 11:13:20 | 000,004,004 | ---- | M] () -- C:\Users\Kornel\Documents\Notepad2.ini
[2014-10-30 11:00:00 | 000,001,062 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2492788336-1247506773-2707690017-1000UA.job
[2014-10-30 10:41:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014-10-30 10:39:19 | 000,021,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014-10-30 10:39:19 | 000,021,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014-10-30 10:35:51 | 001,718,112 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2014-10-30 10:35:51 | 000,763,978 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2014-10-30 10:35:51 | 000,661,706 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2014-10-30 10:35:51 | 000,163,696 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2014-10-30 10:35:51 | 000,129,724 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2014-10-30 10:31:33 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014-10-30 10:31:17 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014-10-30 00:22:00 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014-10-29 22:23:51 | 000,000,001 | ---- | M] () -- C:\Users\Kornel\mm.cfg
[2014-10-29 14:59:04 | 000,001,010 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2492788336-1247506773-2707690017-1000Core.job
[2014-10-29 09:11:53 | 131,078,000 | ---- | M] (AVAST Software) -- C:\Users\Kornel\Desktop\avast_free_antivirus_setup.exe
[2014-10-28 15:35:27 | 019,828,376 | ---- | M] (Malwarebytes Corporation                                    ) -- C:\Users\Kornel\Desktop\mbam-setup-2.0.3.1025.exe
[2014-10-28 14:13:57 | 216,917,114 | ---- | M] () -- C:\Users\Kornel\Desktop\capture-1.trec
[2014-10-28 11:28:59 | 000,002,048 | ---- | M] () -- C:\Users\Kornel\Desktop\VPS.RDP
[2014-10-28 11:00:54 | 000,002,048 | -H-- | M] () -- C:\Users\Kornel\Documents\Default.rdp
[2014-10-22 14:52:37 | 000,015,214 | ---- | M] () -- C:\Users\Kornel\Desktop\Passwords.kdbx
[2014-10-21 16:25:44 | 000,001,152 | ---- | M] () -- C:\Users\Public\Desktop\YTK Desktop Analytics.lnk
[2014-10-15 15:23:47 | 004,953,784 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2014-10-11 12:36:15 | 000,701,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2014-10-11 12:36:15 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2014-10-10 14:06:01 | 000,000,100 | R--- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2014-10-28 14:14:04 | 216,917,114 | ---- | C] () -- C:\Users\Kornel\Desktop\capture-1.trec
[2014-10-28 11:28:59 | 000,002,048 | ---- | C] () -- C:\Users\Kornel\Desktop\VPS.RDP
[2014-10-28 10:40:26 | 000,002,232 | ---- | C] () -- C:\Users\Kornel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
[2014-10-21 16:25:44 | 000,001,152 | ---- | C] () -- C:\Users\Public\Desktop\YTK Desktop Analytics.lnk
[2014-10-11 12:33:01 | 000,000,001 | ---- | C] () -- C:\Users\Kornel\mm.cfg
[2014-09-15 17:19:58 | 000,038,912 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
[2013-11-23 12:53:46 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2013-11-23 12:53:46 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2013-11-23 12:53:46 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2013-11-23 12:53:46 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2013-11-23 12:53:46 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2013-11-17 21:17:14 | 000,000,059 | ---- | C] () -- C:\Users\Kornel\AppData\Local\UserProducts.xml
[2013-11-13 17:31:19 | 000,843,661 | ---- | C] () -- C:\Program Files (x86)\Share YouTube Videos.rar
[2013-10-08 14:39:08 | 000,995,342 | ---- | C] () -- C:\Windows\SysWow64\amdocl_as32.exe
[2013-10-08 14:39:08 | 000,798,734 | ---- | C] () -- C:\Windows\SysWow64\amdocl_ld32.exe
[2013-03-29 14:44:59 | 000,000,026 | -H-- | C] () -- C:\ProgramData\.811261211181235583101118113995
[2013-02-09 15:26:19 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\CommonDL.dll
[2013-02-09 15:26:19 | 000,002,411 | ---- | C] () -- C:\Windows\SysWow64\lgAxconfig.ini
[2013-01-21 20:48:09 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\Access.dat
[2012-11-18 15:21:27 | 000,000,218 | ---- | C] () -- C:\Users\Kornel\.recently-used.xbel
[2012-05-12 11:13:53 | 000,009,216 | ---- | C] () -- C:\Users\Kornel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-04-07 20:41:07 | 000,001,495 | ---- | C] () -- C:\Users\Kornel\.xmlcopyeditor
[2012-01-22 22:01:31 | 000,017,408 | ---- | C] () -- C:\Users\Kornel\AppData\Local\WebpageIcons.db
[2011-12-31 15:30:53 | 000,000,448 | ---- | C] () -- C:\Users\Kornel\AppData\Roaming\Metin2_Multibot.cfg
[2011-11-27 18:07:55 | 000,000,000 | ---- | C] () -- C:\Users\Kornel\AppData\Local\{6190DFA2-F4F1-4023-83A1-71D7210F7E46}
[2011-11-22 14:35:28 | 000,000,000 | ---- | C] () -- C:\Users\Kornel\AppData\Local\{CF5FCC13-1927-4C2A-B14D-38274337919D}
[2011-09-13 19:43:36 | 000,007,611 | ---- | C] () -- C:\Users\Kornel\AppData\Local\Resmon.ResmonCfg
[2011-09-02 15:41:14 | 012,582,912 | -HS- | C] () -- C:\Users\Kornel\NTUSER.bak
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009-07-14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2010-11-21 04:23:55 | 014,174,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2010-11-21 04:24:02 | 012,872,192 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-02-04 20:45:12 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\.anki
[2012-02-03 14:01:03 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\.matplotlib
[2014-05-05 14:41:26 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\.minecraft
[2012-07-03 14:10:28 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\.mineshaftersquared
[2014-02-01 16:15:57 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\.wtw
[2014-02-03 16:22:42 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\0ad
[2014-07-29 20:12:00 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\7 Sticky Notes
[2014-10-30 11:09:16 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\AIMP3
[2014-10-11 14:07:22 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\AMD
[2011-11-03 19:21:47 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Ashampoo
[2013-08-16 15:35:37 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\AVG2013
[2013-10-06 16:17:21 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\calibre
[2012-08-31 15:15:41 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Canneverbe Limited
[2014-10-02 13:42:34 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\DAEMON Tools Lite
[2014-03-16 20:22:53 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\DeepBurner
[2011-09-03 15:22:08 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\DeviceDoctorSoftware
[2013-09-07 20:13:32 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\DMCache
[2014-10-30 10:32:01 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Dropbox
[2012-03-12 16:09:27 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\DVDVideoSoft
[2011-09-02 16:29:14 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Easeware
[2013-08-13 14:20:03 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\EPSON
[2013-11-03 15:15:04 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\EurekaLog
[2013-07-15 02:48:54 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Evaer
[2014-10-19 15:10:52 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\FileZilla
[2013-03-29 14:45:35 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Final Draft
[2013-06-11 20:16:46 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\fizzy
[2011-10-16 11:37:58 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\fltk.org
[2012-04-28 12:39:50 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\fofix
[2013-01-06 14:59:46 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\FreemakeVideoDownloader
[2011-11-10 17:41:16 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Gadu-Gadu 10
[2014-09-01 01:42:12 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\GameRanger
[2012-04-17 17:41:27 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\GanymedeNet
[2011-10-20 18:05:11 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\GHISLER
[2013-11-18 16:01:17 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Grupa IMAGE
[2013-05-13 18:18:32 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\GSA Captcha Breaker
[2014-07-03 15:10:24 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\GSA Search Engine Ranker
[2013-05-16 15:01:36 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Highresolution Enterprises
[2012-11-18 15:21:27 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\homebank
[2013-05-05 23:26:50 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\ICSharpCode
[2013-09-19 14:59:39 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\IDM
[2011-09-04 09:47:58 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Leadertech
[2013-02-09 15:21:09 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\LG Electronics
[2014-05-05 15:36:30 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\library_dir
[2014-02-22 11:38:25 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\LibreOffice
[2013-11-12 21:10:09 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\MarketSamurai.6E37012E1CBD7F47B14488FCC715944F3EBDCEDC.1
[2012-03-12 21:27:12 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Mipony
[2012-06-02 19:34:51 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Mount&Blade Warband
[2012-06-02 19:34:51 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Mount&Blade With Fire and Sword
[2012-01-28 21:26:21 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\NapiProjekt
[2013-12-07 21:02:34 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Notepad++
[2013-05-05 23:26:58 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\NuGet
[2011-09-02 22:11:35 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\OpenOffice.org
[2014-07-29 20:19:12 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Opera
[2013-10-29 20:09:41 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Origin
[2012-07-18 20:18:14 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\PACE Anti-Piracy
[2014-08-12 00:01:12 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\PotPlayerMini64
[2012-06-30 11:08:27 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\PrimoPDF
[2013-11-22 16:56:40 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\RenPy
[2012-03-09 18:36:38 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Sincell
[2012-07-18 19:08:55 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Sony
[2013-09-12 16:18:14 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Sports Interactive
[2014-10-09 21:38:15 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Stardock
[2011-09-24 10:09:40 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Stereoscopic Player
[2012-02-24 16:46:20 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Subversion
[2013-10-31 16:57:17 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\TeamViewer
[2014-10-10 14:33:49 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\TechSmith
[2013-09-07 19:55:59 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\The Creative Assembly
[2012-12-22 14:07:17 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Theta
[2012-05-13 14:57:31 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Thunderbird
[2014-10-29 09:29:40 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\TS3Client
[2013-08-16 15:34:07 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\TuneUp Software
[2013-01-22 14:42:34 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Tunngle
[2013-11-22 17:24:56 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Ubisoft
[2013-04-14 10:40:00 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\UBot Studio
[2014-10-30 11:11:42 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\uTorrent
[2011-09-20 19:17:53 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\wargaming.net
[2012-11-24 19:00:51 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Warner Bros. Interactive Entertainment
[2011-09-17 16:51:36 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\Win7codecs
[2012-04-24 20:12:12 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\XBMC
[2012-12-31 00:30:38 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\XRay Engine
[2014-06-06 00:01:28 | 000,000,000 | ---D | M] -- C:\Users\Kornel\AppData\Roaming\ZJMedia
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 995 bytes -> C:\ProgramData\Microsoft:DGuAVnOYfMQSgEaAEtWzU
@Alternate Data Stream - 971 bytes -> C:\ProgramData:$SS_DESCRIPTOR_SBXNV9VVGV1BFPTJTG6HVPW9RX1V0KFB7VSVY6HFSVF7VBCVP4GV
@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:073341D1
@Alternate Data Stream - 1069 bytes -> C:\ProgramData\Microsoft:CMTVRQzel8ixyFt4axbxJPQ

< End of report >