Anty Virus co chwilkę coś wykrywa.. Prosze spojrzeć na screeny

pausebreak3 · 20 Maja 2014

Witam, zwracam się z prośbą o pomoc, jak w temacie mój antywirus(norton) wykrywa takie coś a po ty pokazuje taki błąd. Antywirus niby co chwile to usuwa ale to ciągle się pojawia.

Proszę o pomoc i bardzo szczegółowe instrukcje. Za wszelkie błędy przepraszam. z góry dziękuję

pausebreak3 · 20 Maja 2014

Najpierw logi otl

plik otl.txy

OTL logfile created on: 2014-05-20 19:39:08 - Run 1

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\admin\Downloads

Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,99 Gb Total Physical Memory | 1,60 Gb Available Physical Memory | 53,65% Memory free

5,98 Gb Paging File | 4,14 Gb Available in Paging File | 69,16% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 467,94 Gb Total Space | 431,80 Gb Free Space | 92,28% Space Free | Partition Type: NTFS

Drive D: | 7,90 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

Drive I: | 463,47 Gb Total Space | 356,43 Gb Free Space | 76,90% Space Free | Partition Type: NTFS

Computer Name: ADMIN-KOMPUTER | User Name: admin | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014-05-20 19:37:50 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\admin\Downloads\OTL.exe

PRC - [2014-05-20 15:24:59 | 000,555,520 | ---- | M] (Object Browser) -- C:\Program Files\Sense\Sense-nova.exe

PRC - [2014-05-20 07:13:33 | 000,317,720 | ---- | M] () -- C:\Program Files\webget\updatewebget.exe

PRC - [2014-05-20 06:38:27 | 000,317,720 | ---- | M] () -- C:\Program Files\webget\bin\utilwebget.exe

PRC - [2014-05-19 22:30:24 | 000,096,536 | ---- | M] () -- C:\Program Files\webget\bin\webget.BrowserAdapter.exe

PRC - [2014-05-19 13:30:16 | 000,239,384 | ---- | M] () -- C:\Program Files\webget\bin\webget.PurBrowse.exe

PRC - [2014-05-08 12:52:32 | 000,704,112 | ---- | M] (Cherished Technololgy LIMITED) -- C:\ProgramData\IePluginServices\PluginService.exe

PRC - [2014-05-08 01:29:35 | 000,841,032 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome\Application\chrome.exe

PRC - [2014-03-12 10:29:49 | 000,276,376 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton Internet Security\Engine\21.2.0.38\nis.exe

PRC - [2013-10-27 10:12:58 | 001,364,256 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

PRC - [2013-10-23 09:19:06 | 000,932,640 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

PRC - [2013-10-23 09:19:05 | 001,821,984 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

PRC - [2013-10-23 04:02:32 | 000,414,496 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

PRC - [2013-08-31 00:58:20 | 000,480,256 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe

PRC - [2013-08-31 00:57:40 | 000,209,408 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe

PRC - [2011-05-11 17:31:24 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe

PRC - [2010-11-20 23:29:19 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe

PRC - [2010-11-20 23:29:10 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe

PRC - [2009-07-14 03:14:26 | 006,376,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mspaint.exe

========== Modules (No Company Name) ==========

MOD - [2014-05-20 15:24:59 | 000,114,176 | ---- | M] () -- C:\Program Files\Sense\Sense-nova.dll

MOD - [2014-05-19 22:30:24 | 000,096,536 | ---- | M] () -- C:\Program Files\webget\bin\webget.BrowserAdapter.exe

MOD - [2014-05-19 22:30:22 | 000,183,576 | ---- | M] () -- C:\Program Files\webget\bin\webgetBAApp.dll

MOD - [2014-05-08 01:29:33 | 000,390,472 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\34.0.1847.137\ppgooglenaclpluginchrome.dll

MOD - [2014-05-08 01:29:32 | 013,695,816 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\34.0.1847.137\PepperFlash\pepflashplayer.dll

MOD - [2014-05-08 01:29:31 | 004,081,480 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\34.0.1847.137\pdf.dll

MOD - [2014-05-08 01:29:27 | 000,674,632 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\34.0.1847.137\libglesv2.dll

MOD - [2014-05-08 01:29:27 | 000,093,000 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\34.0.1847.137\libegl.dll

MOD - [2014-05-08 01:29:26 | 001,647,432 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\34.0.1847.137\ffmpegsumo.dll

MOD - [2014-05-08 01:29:24 | 000,065,352 | ---- | M] () -- C:\Program Files\Google\Chrome\Application\34.0.1847.137\chrome_elf.dll

MOD - [2013-10-11 20:58:16 | 000,018,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio49d6fefe#\dcf2b1a7011858156e5b759de2e5e598\PresentationFramework-SystemXml.ni.dll

MOD - [2013-10-11 20:58:05 | 000,313,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\MOM.Implementation\1bc19c3f164174865244989db68a4e54\MOM.Implementation.ni.dll

MOD - [2013-10-11 20:58:05 | 000,229,888 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\ResourceMan446ca0e5#\6d8ba393ec3eb55299751c43146ad06c\ResourceManagement.Foundation.Implementation.ni.dll

MOD - [2013-10-11 20:58:04 | 000,015,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\MOM\e1dc887ed5806c9f511d5bf97dfda27f\MOM.ni.exe

MOD - [2013-10-11 20:57:56 | 013,319,168 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Web\273389de0b6e286cb2bdc83ecb428704\System.Web.ni.dll

MOD - [2013-10-11 20:57:51 | 000,220,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\LOG.Foundat03490438#\3f0fa645353338c8f07db382792f7690\LOG.Foundation.Implementation.ni.dll

MOD - [2013-10-11 20:57:48 | 000,049,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Foundat60cdf5df#\c5d103683ef22ea6389f37dcb87c83cc\CLI.Foundation.XManifest.ni.dll

MOD - [2013-10-11 20:57:47 | 000,785,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Compone26c9c557#\cfd214fac4adcf61c1ba973e80a427e1\CLI.Component.Systemtray.ni.dll

MOD - [2013-10-11 20:57:46 | 000,204,288 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Aspect.73911eb5#\91d0e05d574eddcb51ab90c81afa6e80\CLI.Aspect.WirelessDisplay.Graphics.Shared.ni.dll

MOD - [2013-10-11 20:57:45 | 000,186,368 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Compone6692ca50#\790e2cbf65ba495784308d04fd555b25\CLI.Component.Runtime.ni.dll

MOD - [2013-10-11 20:57:45 | 000,095,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\ATICCCom\40d51349595a72df3d182236d1c12c9f\ATICCCom.ni.dll

MOD - [2013-10-11 20:57:45 | 000,016,896 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Componeb4d0485c#\05662d65302b3fa883c2bd5339afde78\CLI.Component.Runtime.Extension.EEU.ni.dll

MOD - [2013-10-11 20:57:43 | 000,146,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Compone29e547cc#\5c94d4ecfe7f4ff23c0d3f4bb0d4f4ff\CLI.Component.Dashboard.ProfileManager2.ni.dll

MOD - [2013-10-11 20:57:42 | 000,754,688 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Compone6bf88b08#\742ab26ad7d6fb316bae0401108dec10\CLI.Component.Dashboard.ni.dll

MOD - [2013-10-11 20:57:41 | 000,038,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Aspect.382a3def#\d5b2abad8ccb4c461ac6cfa608b91a7d\CLI.Aspect.AMDOverDrive.Platform.Shared.ni.dll

MOD - [2013-10-11 20:57:40 | 002,274,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Combine0616f305#\3ff75b6c7e17ce359ca4cad255878e5e\CLI.Combined.Graphics.Aspects1.Dashboard.ni.dll

MOD - [2013-10-11 20:57:37 | 000,038,912 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Caste.Pdb36d56e#\ea5c95c2cd1e0f6cdfde53a3784f6c06\CLI.Caste.Platform.Runtime.ni.dll

MOD - [2013-10-11 20:57:37 | 000,026,624 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Caste.Pac40511b#\abeb421257aa46f65fabe0f1d4d9b9e4\CLI.Caste.Platform.Shared.ni.dll

MOD - [2013-10-11 20:57:37 | 000,023,040 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Caste.Pfeefa2b6#\2e4c5e3f1ce6b98408ea1eaef9f72b78\CLI.Caste.Platform.Dashboard.ni.dll

MOD - [2013-10-11 20:57:36 | 000,039,936 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Caste.H18c99613#\b7049c6dd5729de45551ae3750e0f3c9\CLI.Caste.HydraVision.Runtime.ni.dll

MOD - [2013-10-11 20:57:36 | 000,026,624 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Caste.H92ba4e46#\d5c794954b06a9697912c63825ac394d\CLI.Caste.HydraVision.Shared.ni.dll

MOD - [2013-10-11 20:57:36 | 000,025,088 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Caste.Hbb906c0b#\8efab6507053abb04f1838828ad1083d\CLI.Caste.HydraVision.Dashboard.ni.dll

MOD - [2013-10-11 20:57:35 | 002,147,328 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Caste.G962aa464#\5ed26b7d56a8aa1ef7d32d4550707618\CLI.Caste.Graphics.Runtime.ni.dll

MOD - [2013-10-11 20:57:35 | 000,027,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\DEM.Graphics.I1010\614b9f2d144a004eaa09ea037b5212b9\DEM.Graphics.I1010.ni.dll

MOD - [2013-10-11 20:57:33 | 000,234,496 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Caste.F36b07a2b#\5b62fc96e61fa21643544ec8736f8358\CLI.Caste.Fuel.Runtime.ni.dll

MOD - [2013-10-11 20:57:33 | 000,033,280 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Fuel.Foundation\a712dd98cc50ceb7f20306b394471117\Fuel.Foundation.ni.dll

MOD - [2013-10-11 20:57:33 | 000,026,112 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Caste.Ff3085433#\f2a8b0e8884b2cb959fc1f1a9f1605ec\CLI.Caste.Fuel.Dashboard.ni.dll

MOD - [2013-10-11 20:57:32 | 000,047,104 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Caste.A4.Runtime\c3a22e10a3b9f672418f5702dd5d7d80\CLI.Caste.A4.Runtime.ni.dll

MOD - [2013-10-11 20:57:32 | 000,026,112 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Caste.Af820fedc#\3b415c57191bff2987055dc5a65d7d35\CLI.Caste.A4.Dashboard.ni.dll

MOD - [2013-10-11 20:57:27 | 000,090,112 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Aspect.3a6f1658#\7aaecae7dcf6930e9d5937b87e5c186b\CLI.Aspect.TransCode.Graphics.Shared.ni.dll

MOD - [2013-10-11 20:57:27 | 000,068,608 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Aspect.4bbb0755#\3d00797440020b28b216ba0d52d39ac2\CLI.Aspect.TransCode.Graphics.Dashboard.ni.dll

MOD - [2013-10-11 20:57:27 | 000,041,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Aspect.ef3eaa4d#\5bee2aeb697566889dd39b394b77be2b\CLI.Aspect.TransCode.Graphics.Runtime.ni.dll

MOD - [2013-10-11 20:57:20 | 000,249,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Aspect.c7aaa0f8#\42b1e104dd2c2a2bc847ee0d71a666ed\CLI.Aspect.OverDrive5.Graphics.Shared.ni.dll

MOD - [2013-10-11 20:57:16 | 000,210,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Aspect.e8635fc7#\e6c567e9c91ebf50fc0bc6f43b1d9062\CLI.Aspect.InfoCentre.Graphics.Dashboard.ni.dll

MOD - [2013-10-11 20:57:13 | 000,061,440 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\DEM.Graphics.I0709\253b35fe821a31984d3f64171549a3bc\DEM.Graphics.I0709.ni.dll

MOD - [2013-10-11 20:57:13 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Caste.G60338cc0#\71ed3b3a5f805ab098cdc4e971f6a4b2\CLI.Caste.Graphics.Runtime.Shared.Private.ni.dll

MOD - [2013-10-11 20:57:12 | 000,060,416 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Aspect.b0a7c1fb#\f5a93483da6627d4c37c277a8ea8f15f\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.ni.dll

MOD - [2013-10-11 20:57:11 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\DEM.Graphics.I0804\843ded765ec5d0632abdd9e6b4e59d26\DEM.Graphics.I0804.ni.dll

MOD - [2013-10-11 20:57:07 | 000,438,784 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Aspect.8e996306#\5d08288d687a27c4a507d0ed31b01971\CLI.Aspect.CrossDisplay.Graphics.Dashboard.ni.dll

MOD - [2013-10-11 20:57:07 | 000,038,912 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Caste.F24de14fe#\1278b5e2de16b92d015422c978fdefc4\CLI.Caste.Fuel.Shared.ni.dll

MOD - [2013-10-11 20:57:07 | 000,017,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Aspect.c854b457#\2fe4d07042b3bc7680dba2f8f3ab35db\CLI.Aspect.HotkeysHandling.Graphics.Shared.ni.dll

MOD - [2013-10-11 20:57:06 | 000,384,512 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Caste.Gee7d2dbc#\927a8e9b1f11ffe151344ba92992cde9\CLI.Caste.Graphics.Dashboard.ni.dll

MOD - [2013-10-11 20:57:06 | 000,024,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Aspect.37d3d968#\aaa43abe3c5fa1990d04be0c4240a680\CLI.Aspect.AMDHome.Graphics.Shared.ni.dll

MOD - [2013-10-11 20:57:05 | 001,445,888 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Caste.Gd9d9b43b#\04cb55ff948ca88c99450f941fded30e\CLI.Caste.Graphics.Dashboard.Shared.ni.dll

MOD - [2013-10-11 20:57:05 | 000,357,376 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Aspect.acb9d930#\4d866bbce12b6bebce935bdadd30a4a7\CLI.Aspect.DeviceProperty.Graphics.Shared.ni.dll

MOD - [2013-10-11 20:57:05 | 000,227,328 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Aspect.7ec2db45#\96ff039e0c90a462fb0d4fd4ce218266\CLI.Aspect.DeviceDFP.Graphics.Shared.ni.dll

MOD - [2013-10-11 20:57:05 | 000,098,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Aspect.3399d0ec#\6c628fdd6dd2289312ed4797d1111568\CLI.Aspect.CustomFormats.Graphics.Shared.ni.dll

MOD - [2013-10-11 20:57:04 | 000,125,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Compone59f353b4#\86864726d246403b2fcbc40b3563a5ba\CLI.Component.Runtime.Shared.Private.ni.dll

MOD - [2013-10-11 20:57:04 | 000,081,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Aspect.ec8786e5#\61664a00ad2c57c9505a70d549165d36\CLI.Aspect.AMDHome.Graphics.Dashboard.ni.dll

MOD - [2013-10-11 20:57:03 | 001,940,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.Wfbf9373c#\37f2a4dcff50ba63659d6717fa3bced0\Microsoft.WindowsAPICodePack.Shell.ni.dll

MOD - [2013-10-11 20:57:03 | 000,038,912 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Caste.A4.Shared\607ead76e556e4de11ee14474b04a1da\CLI.Caste.A4.Shared.ni.dll

MOD - [2013-10-11 20:57:02 | 000,269,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.W8090224c#\57f2331a9214108cc94253ca37098b79\Microsoft.WindowsAPICodePack.ni.dll

MOD - [2013-10-11 20:57:02 | 000,256,512 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsForm0b574481#\8ea4f2a14f034a52843ddf37991c9f6d\WindowsFormsIntegration.ni.dll

MOD - [2013-10-11 20:57:01 | 000,747,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Foundatd3771151#\3cc306f4864db36b03c9d1a34cca5017\CLI.Foundation.Client.ni.dll

MOD - [2013-10-11 20:57:01 | 000,071,680 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Componef4cf054f#\c691f027a02277d632cb6913ea36f285\CLI.Component.Dashboard.Shared.ni.dll

MOD - [2013-10-11 20:57:01 | 000,023,040 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\ResourceManf163905a#\a4b3a9bbda6e5c4ba42d2a56469af8b3\ResourceManagement.Foundation.Private.ni.dll

MOD - [2013-10-11 20:57:00 | 000,113,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Compone168638d1#\949a9bfe53f4eafdb182bd0707849334\CLI.Component.Client.Shared.Private.ni.dll

MOD - [2013-10-11 20:57:00 | 000,019,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Componef1fd67b2#\0c08a74b402b1d5bdd49d3da62e0c46e\CLI.Component.Client.Shared.ni.dll

MOD - [2013-10-11 20:56:57 | 001,565,696 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Componec89c3bec#\74754175ecf8fd83de18b7985a70ce64\CLI.Component.Dashboard.Shared.Private.ni.dll

MOD - [2013-10-11 20:56:56 | 000,151,552 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CCC.Implementation\a3d6fe7f0835acd46fd2eaa08437f5e1\CCC.Implementation.ni.dll

MOD - [2013-10-11 20:56:56 | 000,062,976 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\LOG.Foundatcaafa75b#\95b0e05e278899b01ae410569ab36c22\LOG.Foundation.Implementation.Private.ni.dll

MOD - [2013-10-11 20:56:56 | 000,012,288 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\MOM.Foundation\1a519dd02adadffe714b4743988f6ac8\MOM.Foundation.ni.dll

MOD - [2013-10-11 20:56:55 | 001,735,680 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Caste.G60a7b4d1#\63425896a3df6ef8378d0cb8a1c12e78\CLI.Caste.Graphics.Shared.ni.dll

MOD - [2013-10-11 20:56:55 | 000,018,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CCC\daf78b26a05d1ddbc2ae89e116c7b9b2\CCC.ni.exe

MOD - [2013-10-11 20:56:54 | 000,868,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Localizatio01dbc1c0#\acc5e4b89c4a6a23eab1ccc6e16419d2\Localization.Foundation.Private.ni.dll

MOD - [2013-10-11 20:56:54 | 000,205,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\APM.Server\798add96d7073d0cc81647c0e51f200a\APM.Server.ni.dll

MOD - [2013-10-11 20:56:54 | 000,075,776 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Foundat3d5d3945#\261876c985905b0835cad3d8f7f9c44a\CLI.Foundation.Private.ni.dll

MOD - [2013-10-11 20:56:53 | 000,196,608 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\AEM.Server\3543cc273a48830b4d1e621104de0585\AEM.Server.ni.dll

MOD - [2013-10-11 20:56:53 | 000,046,592 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\APM.Foundation\d5bebe9d43f5f09d158c0026ca30955e\APM.Foundation.ni.dll

MOD - [2013-10-11 20:56:52 | 000,242,176 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Foundation\2fa118a05b26fa896cc1dc20de0f403b\CLI.Foundation.ni.dll

MOD - [2013-10-11 20:56:52 | 000,222,208 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\AEM.Plugin.5d945b6b#\b0c08b5db49970fa616bac5e1c9cf9f8\AEM.Plugin.Source.Kit.Server.ni.dll

MOD - [2013-10-11 20:56:52 | 000,069,632 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Foundat619559bd#\2ff70e10412ef71009817c5447112564\CLI.Foundation.CoreAudioAPI.ni.dll

MOD - [2013-10-11 20:56:52 | 000,014,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\AEM.Plugin.674d2b8a#\89b5cc65ff127f7605ebc08c2125587c\AEM.Plugin.WinMessages.Shared.ni.dll

MOD - [2013-10-11 20:56:52 | 000,012,288 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CLI.Compone1b4a8c97#\6b9172e5016305644adca7f4d4f44004\CLI.Component.Runtime.Shared.ni.dll

MOD - [2013-10-11 20:56:51 | 000,091,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\DEM.Graphics.I0601\df3f336072ab4a99c2534624eebd612f\DEM.Graphics.I0601.ni.dll

MOD - [2013-10-11 20:56:51 | 000,021,504 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\DEM.Foundation\37d7d640940dafcfccbeb43660de2b70\DEM.Foundation.ni.dll

MOD - [2013-10-11 20:56:51 | 000,015,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\DEM.Graphics\09c06da4623ec0412543e2f976f4f4b0\DEM.Graphics.ni.dll

MOD - [2013-10-11 20:56:51 | 000,013,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\AEM.Server.Shared\2d98f37e246c8dfe90f67f780d58e679\AEM.Server.Shared.ni.dll

MOD - [2013-10-11 20:56:50 | 000,015,872 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\AEM.Plugin.2b6a6775#\907ea98bca3a7ac712a90c1ff17bafad\AEM.Plugin.Hotkeys.Shared.ni.dll

MOD - [2013-10-11 20:56:50 | 000,012,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\AEM.Plugin.0a1309f7#\bcd51feb502cfc69db8ceaf57f2e7a5e\AEM.Plugin.EEU.Shared.ni.dll

MOD - [2013-10-11 20:56:50 | 000,012,288 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\AEM.Plugin.88aba5d2#\b9b6e0280e11c85dafeae2f4796b7af0\AEM.Plugin.REG.Shared.ni.dll

MOD - [2013-10-11 20:56:50 | 000,011,776 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\AEM.Plugin.GD.Shared\0cce98c9bea6511e41b7f49686e18d34\AEM.Plugin.GD.Shared.ni.dll

MOD - [2013-10-11 20:56:49 | 000,615,936 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\ADL.Foundation\47e42df917bbbef32f98a6e314834994\ADL.Foundation.ni.dll

MOD - [2013-10-11 20:56:49 | 000,046,592 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\NEWAEM.Foundation\99a0e4d7a8eb7d0a1010c48f5c9acf3d\NEWAEM.Foundation.ni.dll

MOD - [2013-10-11 20:56:49 | 000,019,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\AEM.Actions5dc83b46#\66825a1d61097d1026e358d5a5c187eb\AEM.Actions.CCAA.Shared.ni.dll

MOD - [2013-10-11 20:56:46 | 000,098,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\LOG.Foundation\c7333b2abcc83fa8a99ce68cdf1c600a\LOG.Foundation.ni.dll

MOD - [2013-10-11 20:56:45 | 000,114,688 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\LOG.Foundat5023f8e7#\5688872b83ae07ea4f1361ebc41feb29\LOG.Foundation.Private.ni.dll

MOD - [2013-10-11 20:56:45 | 000,028,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\A4.Foundation\e5381070a351c181633f921b60285e4d\A4.Foundation.ni.dll

MOD - [2013-09-30 14:06:49 | 018,524,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio5ae0f00f#\97e6b67983d07a066b68b3ae8be2f53d\PresentationFramework.ni.dll

MOD - [2013-09-30 14:06:41 | 010,914,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\b52bc540630c3aa5de542c382af35c20\PresentationCore.ni.dll

MOD - [2013-09-30 14:06:39 | 012,692,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\22ae167d586450ad3a9b9a9ee43ebc86\System.Windows.Forms.ni.dll

MOD - [2013-09-30 14:06:39 | 000,958,464 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\28586400bcaf94c13a9fd0dff4a1e090\System.Configuration.ni.dll

MOD - [2013-09-30 14:06:38 | 001,870,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\cc4d9093563dadee370788bbc3ecf4fb\System.Xaml.ni.dll

MOD - [2013-09-30 14:06:37 | 007,559,680 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\9ba07396ae369d010c5c3927a82ef426\System.Xml.ni.dll

MOD - [2013-09-30 14:06:37 | 000,462,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio1c9175f8#\e7d92730b571b31e62c2cf257f04a974\PresentationFramework.Aero.ni.dll

MOD - [2013-09-30 14:06:36 | 006,995,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\b9f7adbc90a2bcbe8eb9e6e8d2bb975b\System.Core.ni.dll

MOD - [2013-09-30 14:06:35 | 003,905,024 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\cd235caf797fb017f140016be88f33b7\WindowsBase.ni.dll

MOD - [2013-09-30 14:06:33 | 001,630,720 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\72269ea7cc6281139e4d155e7c57dc67\System.Drawing.ni.dll

MOD - [2013-09-30 14:06:33 | 000,786,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runt73a1fc9d#\4cfa42c8b69a64e192f3255ec900457d\System.Runtime.Remoting.ni.dll

MOD - [2013-09-30 14:06:32 | 009,925,120 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\e40da7a49f8c3f0108e7c835b342f382\System.ni.dll

MOD - [2013-09-30 14:06:27 | 016,501,248 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\51e2934144ba15628ba5a31be2dae7dc\mscorlib.ni.dll

========== Services (SafeList) ==========

SRV - [2014-05-20 07:13:33 | 000,317,720 | ---- | M] () [Auto | Running] -- C:\Program Files\webget\updatewebget.exe -- (Update webget)

SRV - [2014-05-20 06:38:27 | 000,317,720 | ---- | M] () [Auto | Running] -- C:\Program Files\webget\bin\utilwebget.exe -- (Util webget)

SRV - [2014-05-14 15:32:02 | 000,257,712 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2014-05-08 12:52:32 | 000,704,112 | ---- | M] (Cherished Technololgy LIMITED) [Auto | Running] -- C:\ProgramData\IePluginServices\PluginService.exe -- (IePluginServices)

SRV - [2014-04-24 00:01:04 | 000,572,096 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)

SRV - [2014-03-12 10:29:49 | 000,276,376 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Norton Internet Security\Engine\21.2.0.38\NIS.exe -- (NIS)

SRV - [2013-10-27 10:12:58 | 001,364,256 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)

SRV - [2013-10-23 09:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)

SRV - [2013-10-23 04:02:32 | 000,414,496 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)

SRV - [2013-08-31 00:57:40 | 000,209,408 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)

SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)

SRV - [2009-07-14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\xhunter1.sys -- (xhunter1)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\vtany.sys -- (vtany)

DRV - File not found [Kernel | On_Demand | Stopped] -- I:\Program Files\Counter-Strike Global Offensive\image\x86\OSFMount.sys -- (OSFMount)

DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt)

DRV - [2014-05-03 04:31:43 | 000,243,128 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)

DRV - [2014-04-28 10:23:34 | 000,052,920 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\System32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}w.sys -- ({9edd0ea8-2819-47c2-8320-b007d5996f8a}w)

DRV - [2014-04-27 15:10:23 | 001,612,376 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Norton Internet Security\NortonData\21.0.1.3\Definitions\VirusDefs\20140519.035\NAVEX15.SYS -- (NAVEX15)

DRV - [2014-04-27 15:10:23 | 000,376,920 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)

DRV - [2014-04-27 15:10:23 | 000,093,272 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Norton Internet Security\NortonData\21.0.1.3\Definitions\VirusDefs\20140519.035\NAVENG.SYS -- (NAVENG)

DRV - [2014-04-27 14:57:33 | 000,142,936 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent)

DRV - [2014-04-25 17:35:32 | 000,395,992 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Norton Internet Security\NortonData\21.0.1.3\Definitions\IPSDefs\20140519.001\IDSvix86.sys -- (IDSVix86)

DRV - [2014-04-09 20:31:18 | 001,098,968 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Norton Internet Security\NortonData\21.0.1.3\Definitions\BASHDefs\20140409.001\BHDrvx86.sys -- (BHDrvx86)

DRV - [2014-03-04 06:18:12 | 000,936,152 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\NIS\1502000.026\symefa.sys -- (SymEFA)

DRV - [2014-02-25 04:44:40 | 000,127,064 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NIS\1502000.026\ccsetx86.sys -- (ccSet_NIS)

DRV - [2014-02-18 03:32:41 | 000,447,704 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NIS\1502000.026\symnets.sys -- (SymNetS)

DRV - [2014-02-13 03:59:49 | 000,664,280 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\NIS\1502000.026\srtsp.sys -- (SRTSP)

DRV - [2013-10-27 10:13:14 | 010,410,272 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)

DRV - [2013-10-27 10:13:12 | 000,161,056 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)

DRV - [2013-08-31 02:09:30 | 010,925,056 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)

DRV - [2013-08-31 00:31:20 | 000,495,104 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)

DRV - [2013-08-01 05:19:50 | 000,367,704 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\NIS\1502000.026\symds.sys -- (SymDS)

DRV - [2013-07-31 06:13:30 | 000,206,936 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NIS\1502000.026\ironx86.sys -- (SymIRON)

DRV - [2013-07-31 05:44:44 | 000,032,344 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NIS\1502000.026\srtspx.sys -- (SRTSPX)

DRV - [2013-07-05 10:40:32 | 000,078,848 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AtihdW73.sys -- (AtiHDAudioService)

DRV - [2013-01-31 11:50:58 | 000,022,656 | ---- | M] (ManyCam LLC) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mcaudrv.sys -- (mcaudrv_simple)

DRV - [2011-09-29 09:04:22 | 000,021,632 | ---- | M] (ManyCam LLC.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ManyCam.sys -- (ManyCam)

DRV - [2010-11-20 23:29:24 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV - [2010-11-20 23:29:03 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)

DRV - [2010-10-19 23:33:40 | 000,041,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HECI.sys -- (MEI)

DRV - [2009-07-14 01:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\serial.sys -- (Serial)

DRV - [2009-03-18 18:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.qone8.com/web/?type=ds&ts=1400588117&from=smt&uid=SAMSUNGXHD103SI_S1VSJD5B103016&q={searchTerms}

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.qone8.com/web/?type=ds&ts=1400588117&from=smt&uid=SAMSUNGXHD103SI_S1VSJD5B103016&q={searchTerms}

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-3753929950-4060581948-1420204370-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

IE - HKU\S-1-5-21-3753929950-4060581948-1420204370-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank

IE - HKU\S-1-5-21-3753929950-4060581948-1420204370-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKU\S-1-5-21-3753929950-4060581948-1420204370-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll File not found

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Web Player Plug-In,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll File not found

FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)

FF - HKLM\Software\MozillaPlugins\@esn/npbattlelog,version=2.3.1: C:\Program Files\Battlelog Web Plugins\2.3.1\npbattlelog.dll File not found

FF - HKLM\Software\MozillaPlugins\@esn/npbattlelog,version=2.3.2: C:\Program Files\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)

FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.55.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.55.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\admin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.1.3\coFFPlgn\ [2014-05-20 18:36:29 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.0.1.3\IPSFF [2014-04-27 15:11:12 | 000,000,000 | ---D | M]

[2013-12-05 20:47:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\admin\AppData\Roaming\mozilla\Extensions

========== Chrome ==========

CHR - default_search_provider: Conduit Search (Enabled)

CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR - default_search_provider: suggest_url = http://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms},

CHR - plugin: Error reading preferences file

CHR - Extension: AdBlock = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.34_0\

CHR - Extension: Norton Identity Safe for Google Chromeâ„˘ = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2014.7.0.44_0\

CHR - Extension: Google Wallet = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_1\

O1 HOSTS File: ([2009-06-10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts

O2 - BHO: (Sense) - {11111111-1111-1111-1111-110411821192} - C:\Program Files\Sense\Sense-bho.dll (Object Browser)

O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\21.2.0.38\coieplg.dll (Symantec Corporation)

O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\21.2.0.38\ips\ipsbho.dll (Symantec Corporation)

O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\21.2.0.38\coieplg.dll (Symantec Corporation)

O4 - HKLM..\Run: [startCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe (Advanced Micro Devices, Inc.)

O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)

O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)

O4 - HKU\S-1-5-21-3753929950-4060581948-1420204370-1009..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0

O7 - HKU\S-1-5-21-3753929950-4060581948-1420204370-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWindowsUpdate = 1

O13 - gopher Prefix: missing

O15 - HKU\.DEFAULT\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)

O15 - HKU\.DEFAULT\..Trusted Domains: freerealms.com ([]* in Trusted sites)

O15 - HKU\.DEFAULT\..Trusted Domains: soe.com ([]* in Trusted sites)

O15 - HKU\.DEFAULT\..Trusted Domains: sony.com ([]* in Trusted sites)

O15 - HKU\S-1-5-18\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)

O15 - HKU\S-1-5-18\..Trusted Domains: freerealms.com ([]* in Trusted sites)

O15 - HKU\S-1-5-18\..Trusted Domains: soe.com ([]* in Trusted sites)

O15 - HKU\S-1-5-18\..Trusted Domains: sony.com ([]* in Trusted sites)

O15 - HKU\S-1-5-19\..Trusted Domains: clonewarsadventures.com ([]* in )

O15 - HKU\S-1-5-19\..Trusted Domains: freerealms.com ([]* in )

O15 - HKU\S-1-5-19\..Trusted Domains: soe.com ([]* in )

O15 - HKU\S-1-5-19\..Trusted Domains: sony.com ([]* in )

O15 - HKU\S-1-5-20\..Trusted Domains: clonewarsadventures.com ([]* in )

O15 - HKU\S-1-5-20\..Trusted Domains: freerealms.com ([]* in )

O15 - HKU\S-1-5-20\..Trusted Domains: soe.com ([]* in )

O15 - HKU\S-1-5-20\..Trusted Domains: sony.com ([]* in )

O15 - HKU\S-1-5-21-3753929950-4060581948-1420204370-1000\..Trusted Domains: 4game.com ([]https in Trusted sites)

O15 - HKU\S-1-5-21-3753929950-4060581948-1420204370-1000\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)

O15 - HKU\S-1-5-21-3753929950-4060581948-1420204370-1000\..Trusted Domains: freerealms.com ([]* in Trusted sites)

O15 - HKU\S-1-5-21-3753929950-4060581948-1420204370-1000\..Trusted Domains: soe.com ([]* in Trusted sites)

O15 - HKU\S-1-5-21-3753929950-4060581948-1420204370-1000\..Trusted Domains: sony.com ([]* in Trusted sites)

O15 - HKU\S-1-5-21-3753929950-4060581948-1420204370-1000\..Trusted Ranges: Range1 ([https] in Trusted sites)

O15 - HKU\S-1-5-21-3753929950-4060581948-1420204370-1009\..Trusted Domains: clonewarsadventures.com ([]* in )

O15 - HKU\S-1-5-21-3753929950-4060581948-1420204370-1009\..Trusted Domains: freerealms.com ([]* in )

O15 - HKU\S-1-5-21-3753929950-4060581948-1420204370-1009\..Trusted Domains: soe.com ([]* in )

O15 - HKU\S-1-5-21-3753929950-4060581948-1420204370-1009\..Trusted Domains: sony.com ([]* in )

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5D8FA8E3-A75C-4650-BD62-F716E9225818}: DhcpNameServer = 192.168.0.1

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

O20 - AppInit_DLLs: (C:\PROGRA~1\SupTab\SEARCH~1.DLL) - File not found

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]

O32 - AutoRun File - [2008-03-31 10:08:02 | 000,000,082 | R--- | M] () - D:\Autorun.inf -- [ UDF ]

O33 - MountPoints2\{314d09bf-29c4-11e3-8be5-806e6f6e6963}\Shell - "" = AutoRun

O33 - MountPoints2\{314d09bf-29c4-11e3-8be5-806e6f6e6963}\Shell\AutoRun\command - "" = D:\cda_menu.exe -- [2010-08-03 14:51:45 | 004,685,312 | R--- | M] ()

O33 - MountPoints2\{8bd3b183-d1e1-11e3-8565-f46d04ec5e32}\Shell - "" = AutoRun

O33 - MountPoints2\{8bd3b183-d1e1-11e3-8565-f46d04ec5e32}\Shell\AutoRun\command - "" = J:\Setup.exe

O33 - MountPoints2\{9dbfcead-49ee-11e3-af64-f46d04ec5e32}\Shell - "" = AutoRun

O33 - MountPoints2\{9dbfcead-49ee-11e3-af64-f46d04ec5e32}\Shell\AutoRun\command - "" = K:\autorun.exe

O33 - MountPoints2\{9dbfcead-49ee-11e3-af64-f46d04ec5e32}\Shell\directx\command - "" = K:\DirectX9\dxsetup.exe

O33 - MountPoints2\{9dbfcead-49ee-11e3-af64-f46d04ec5e32}\Shell\setup\command - "" = K:\setup.exe

O34 - HKLM BootExecute: (autocheck autochk *)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2014-05-20 15:24:51 | 000,000,000 | ---D | C] -- C:\Program Files\Sense

[2014-05-20 14:28:53 | 000,000,000 | ---D | C] -- C:\ProgramData\RegClean

[2014-05-20 14:24:48 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTweak Software

[2014-05-20 14:24:48 | 000,000,000 | ---D | C] -- C:\Program Files\SmartTweak

[2014-05-20 14:24:35 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\Installer

[2014-05-20 14:24:15 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\GOOBZO

[2014-05-20 14:24:08 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\ShopperPro

[2014-05-20 14:16:50 | 000,000,000 | ---D | C] -- C:\ProgramData\IePluginServices

[2014-05-20 14:16:49 | 000,000,000 | ---D | C] -- C:\Program Files\SupTab

[2014-05-20 14:16:48 | 000,000,000 | ---D | C] -- C:\ProgramData\WPM

[2014-05-20 14:16:25 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\qone8

[2014-05-16 14:19:29 | 000,000,000 | ---D | C] -- C:\Users\admin\Desktop\Skiny Cs-1.6

[2014-05-13 17:47:59 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HLDS

[2014-05-13 17:47:58 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Half-Life

[2014-05-13 17:47:58 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter-Strike

[2014-05-13 17:45:47 | 000,000,000 | ---D | C] -- C:\Games

[2014-05-11 21:21:14 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\gd.sos.McPixel

[2014-05-11 21:19:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McPixel

[2014-05-03 04:41:10 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft WSE

[2014-05-03 04:35:06 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Opera Software

[2014-05-03 04:35:06 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\Opera Software

[2014-05-03 04:35:02 | 000,000,000 | ---D | C] -- C:\Program Files\Opera

[2014-05-03 04:31:43 | 000,243,128 | ---- | C] (Disc Soft Ltd) -- C:\Windows\System32\drivers\dtsoftbus01.sys

[2014-05-02 18:43:29 | 000,052,920 | ---- | C] (StdLib) -- C:\Windows\System32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}w.sys

[2014-05-02 17:12:26 | 000,000,000 | ---D | C] -- C:\Program Files\webget

[2014-04-27 15:19:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sunrise Seven

[2014-04-27 15:19:55 | 000,000,000 | ---D | C] -- C:\Program Files\Sunrise Seven

[2014-04-27 15:09:58 | 000,936,152 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NIS\1502000.026\symefa.sys

[2014-04-27 15:09:58 | 000,664,280 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NIS\1502000.026\srtsp.sys

[2014-04-27 15:09:58 | 000,447,704 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NIS\1502000.026\symnets.sys

[2014-04-27 15:09:58 | 000,367,704 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NIS\1502000.026\symds.sys

[2014-04-27 15:09:58 | 000,206,936 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NIS\1502000.026\ironx86.sys

[2014-04-27 15:09:58 | 000,127,064 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NIS\1502000.026\ccsetx86.sys

[2014-04-27 15:09:58 | 000,032,344 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NIS\1502000.026\srtspx.sys

[2014-04-27 15:09:58 | 000,021,520 | R--- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\NIS\1502000.026\symelam.sys

[2014-04-27 15:09:55 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\NIS\1502000.026

[2014-04-27 14:57:33 | 000,142,936 | ---- | C] (Symantec Corporation) -- C:\Windows\System32\drivers\SYMEVENT.SYS

[2014-04-27 14:57:33 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared

[2014-04-27 14:56:48 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\NIS

[2014-04-27 14:56:47 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security

[2014-04-27 14:56:47 | 000,000,000 | ---D | C] -- C:\Program Files\Norton Internet Security

[2014-04-27 14:56:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Norton

[2014-04-27 14:56:17 | 000,000,000 | ---D | C] -- C:\ProgramData\NortonInstaller

[2014-04-27 14:56:17 | 000,000,000 | ---D | C] -- C:\Program Files\NortonInstaller

[2014-04-21 12:09:29 | 000,000,000 | ---D | C] -- C:\Program Files\Battlelog Web Plugins

[2014-04-21 11:20:14 | 000,000,000 | ---D | C] -- C:\Users\admin\Documents\MOHW

[2014-04-21 11:13:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Medal of Honor™ Warfighter

[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2014-05-20 19:30:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2014-05-20 19:27:25 | 000,785,772 | ---- | M] () -- C:\Users\admin\Desktop\plik.png

[2014-05-20 19:25:00 | 000,001,568 | ---- | M] () -- C:\Windows\tasks\d4e590bb-8214-4c59-8429-13fb7d7180b5-7.job

[2014-05-20 19:07:22 | 000,001,034 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2014-05-20 18:41:57 | 000,021,840 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2014-05-20 18:41:57 | 000,021,840 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2014-05-20 18:34:43 | 000,001,726 | ---- | M] () -- C:\Windows\tasks\d4e590bb-8214-4c59-8429-13fb7d7180b5-5.job

[2014-05-20 18:34:43 | 000,001,030 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2014-05-20 18:34:42 | 000,002,318 | ---- | M] () -- C:\Windows\tasks\d4e590bb-8214-4c59-8429-13fb7d7180b5-4.job

[2014-05-20 18:34:41 | 000,001,632 | ---- | M] () -- C:\Windows\tasks\d4e590bb-8214-4c59-8429-13fb7d7180b5-6.job

[2014-05-20 18:34:41 | 000,001,606 | ---- | M] () -- C:\Windows\tasks\d4e590bb-8214-4c59-8429-13fb7d7180b5-2.job

[2014-05-20 18:34:39 | 000,001,624 | ---- | M] () -- C:\Windows\tasks\d4e590bb-8214-4c59-8429-13fb7d7180b5-1.job

[2014-05-20 18:34:37 | 000,065,536 | ---- | M] () -- C:\Windows\System32\Ikeext.etl

[2014-05-20 18:34:33 | 000,281,592 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT

[2014-05-20 18:34:30 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2014-05-20 18:34:21 | 2408,292,352 | -HS- | M] () -- C:\hiberfil.sys

[2014-05-20 16:47:14 | 002,494,366 | ---- | M] () -- C:\Users\admin\Desktop\Untitled.mp4

[2014-05-20 14:19:57 | 000,002,135 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk

[2014-05-16 10:57:54 | 000,037,423 | ---- | M] () -- C:\Windows\System32\drivers\NIS\1502000.026\VT20140516.004

[2014-05-14 15:31:56 | 000,692,400 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe

[2014-05-14 15:31:56 | 000,070,832 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl

[2014-05-03 04:34:58 | 000,739,694 | ---- | M] () -- C:\Windows\System32\perfh015.dat

[2014-05-03 04:34:58 | 000,653,526 | ---- | M] () -- C:\Windows\System32\perfh009.dat

[2014-05-03 04:34:58 | 000,155,268 | ---- | M] () -- C:\Windows\System32\perfc015.dat

[2014-05-03 04:34:58 | 000,121,398 | ---- | M] () -- C:\Windows\System32\perfc009.dat

[2014-05-03 04:31:43 | 000,243,128 | ---- | M] (Disc Soft Ltd) -- C:\Windows\System32\drivers\dtsoftbus01.sys

[2014-05-02 09:25:20 | 000,140,768 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys

[2014-05-02 09:25:10 | 000,291,328 | ---- | M] () -- C:\Windows\System32\PnkBstrB.xtr

[2014-05-02 09:23:45 | 000,280,600 | ---- | M] () -- C:\Windows\System32\PnkBstrB.ex0

[2014-04-28 10:23:34 | 000,052,920 | ---- | M] (StdLib) -- C:\Windows\System32\drivers\{9edd0ea8-2819-47c2-8320-b007d5996f8a}w.sys

[2014-04-27 15:12:05 | 001,019,417 | ---- | M] () -- C:\Windows\System32\drivers\NIS\1502000.026\Cat.DB

[2014-04-27 14:57:33 | 000,142,936 | ---- | M] (Symantec Corporation) -- C:\Windows\System32\drivers\SYMEVENT.SYS

[2014-04-27 14:57:33 | 000,008,194 | ---- | M] () -- C:\Windows\System32\drivers\SYMEVENT.CAT

[2014-04-27 14:57:33 | 000,000,805 | ---- | M] () -- C:\Windows\System32\drivers\SYMEVENT.INF

[2014-04-21 11:12:57 | 000,138,904 | ---- | M] () -- C:\Users\admin\AppData\Roaming\PnkBstrK.sys

[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2014-05-20 19:27:25 | 000,785,772 | ---- | C] () -- C:\Users\admin\Desktop\plik.png

[2014-05-20 16:47:14 | 002,494,366 | ---- | C] () -- C:\Users\admin\Desktop\Untitled.mp4

[2014-05-20 15:25:40 | 000,001,726 | ---- | C] () -- C:\Windows\tasks\d4e590bb-8214-4c59-8429-13fb7d7180b5-5.job

[2014-05-20 15:25:30 | 000,001,606 | ---- | C] () -- C:\Windows\tasks\d4e590bb-8214-4c59-8429-13fb7d7180b5-2.job

[2014-05-20 15:25:28 | 000,001,624 | ---- | C] () -- C:\Windows\tasks\d4e590bb-8214-4c59-8429-13fb7d7180b5-1.job

[2014-05-20 15:25:17 | 000,002,318 | ---- | C] () -- C:\Windows\tasks\d4e590bb-8214-4c59-8429-13fb7d7180b5-4.job

[2014-05-20 15:25:12 | 000,001,568 | ---- | C] () -- C:\Windows\tasks\d4e590bb-8214-4c59-8429-13fb7d7180b5-7.job

[2014-05-20 15:25:11 | 000,001,632 | ---- | C] () -- C:\Windows\tasks\d4e590bb-8214-4c59-8429-13fb7d7180b5-6.job

[2014-05-17 10:12:21 | 000,037,423 | ---- | C] () -- C:\Windows\System32\drivers\NIS\1502000.026\VT20140516.004

[2014-04-27 15:12:02 | 001,019,417 | ---- | C] () -- C:\Windows\System32\drivers\NIS\1502000.026\Cat.DB

[2014-04-27 15:09:58 | 000,009,931 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1502000.026\symelam.cat

[2014-04-27 15:09:58 | 000,008,194 | ---- | C] () -- C:\Windows\System32\drivers\NIS\1502000.026\ccsetx86.cat

[2014-04-27 15:09:58 | 000,008,184 | ---- | C] () -- C:\Windows\System32\drivers\NIS\1502000.026\symnet.cat

[2014-04-27 15:09:58 | 000,008,182 | ---- | C] () -- C:\Windows\System32\drivers\NIS\1502000.026\symefa.cat

[2014-04-27 15:09:58 | 000,008,180 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1502000.026\srtspx.cat

[2014-04-27 15:09:58 | 000,008,176 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1502000.026\symds.cat

[2014-04-27 15:09:58 | 000,008,176 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1502000.026\iron.cat

[2014-04-27 15:09:58 | 000,008,176 | ---- | C] () -- C:\Windows\System32\drivers\NIS\1502000.026\srtsp.cat

[2014-04-27 15:09:58 | 000,003,433 | ---- | C] () -- C:\Windows\System32\drivers\NIS\1502000.026\symefa.inf

[2014-04-27 15:09:58 | 000,002,852 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1502000.026\symds.inf

[2014-04-27 15:09:58 | 000,001,440 | ---- | C] () -- C:\Windows\System32\drivers\NIS\1502000.026\symnet.inf

[2014-04-27 15:09:58 | 000,001,389 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1502000.026\srtspx.inf

[2014-04-27 15:09:58 | 000,001,388 | ---- | C] () -- C:\Windows\System32\drivers\NIS\1502000.026\srtsp.inf

[2014-04-27 15:09:58 | 000,001,098 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1502000.026\symelam.inf

[2014-04-27 15:09:58 | 000,000,829 | ---- | C] () -- C:\Windows\System32\drivers\NIS\1502000.026\ccsetx86.inf

[2014-04-27 15:09:58 | 000,000,737 | R--- | C] () -- C:\Windows\System32\drivers\NIS\1502000.026\iron.inf

[2014-04-27 15:09:55 | 000,000,172 | ---- | C] () -- C:\Windows\System32\drivers\NIS\1502000.026\isolate.ini

[2014-04-27 14:57:33 | 000,008,194 | ---- | C] () -- C:\Windows\System32\drivers\SYMEVENT.CAT

[2014-04-27 14:57:33 | 000,000,805 | ---- | C] () -- C:\Windows\System32\drivers\SYMEVENT.INF

[2014-03-05 19:21:51 | 000,140,768 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys

[2014-03-05 19:21:45 | 000,291,328 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe

[2014-03-05 19:21:37 | 000,076,888 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe

[2013-12-13 15:48:40 | 000,941,784 | ---- | C] () -- C:\Windows\System32\drivers\CAMTHWDM.sys

[2013-10-13 12:13:27 | 000,138,904 | ---- | C] () -- C:\Users\admin\AppData\Roaming\PnkBstrK.sys

[2013-10-11 19:15:50 | 003,426,956 | ---- | C] () -- C:\Windows\System32\nvcoproc.bin

[2013-10-11 15:43:59 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini

[2013-09-30 14:09:24 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin

[2013-09-30 13:54:18 | 000,216,064 | ---- | C] () -- C:\Windows\System32\gcapi_dll.dll

[2013-09-30 13:52:53 | 000,217,176 | ---- | C] () -- C:\Windows\System32\unrar.dll

[2013-08-31 01:47:56 | 000,200,704 | ---- | C] () -- C:\Windows\System32\clinfo.exe

[2013-08-31 01:47:50 | 000,995,342 | ---- | C] () -- C:\Windows\System32\amdocl_as32.exe

[2013-08-31 01:47:50 | 000,798,734 | ---- | C] () -- C:\Windows\System32\amdocl_ld32.exe

[2013-08-31 00:50:04 | 000,204,952 | ---- | C] () -- C:\Windows\System32\ativvsvl.dat

[2013-08-31 00:50:04 | 000,157,144 | ---- | C] () -- C:\Windows\System32\ativvsva.dat

[2013-08-30 19:53:48 | 000,038,912 | ---- | C] () -- C:\Windows\System32\kdbsdk32.dll

[2013-08-27 21:06:16 | 000,233,652 | ---- | C] () -- C:\Windows\System32\ativvaxy_cik.dat

[2013-08-27 19:27:56 | 000,082,336 | ---- | C] () -- C:\Windows\System32\ativce02.dat

[2013-08-07 19:22:00 | 000,716,208 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat

[2013-08-07 17:12:12 | 000,231,984 | ---- | C] () -- C:\Windows\System32\ativvaxy_cik_nd.dat

[2013-08-05 08:15:08 | 000,066,104 | ---- | C] () -- C:\Windows\System32\bdmpegv.dll

[2013-08-05 08:15:06 | 000,023,080 | ---- | C] () -- C:\Windows\System32\bdmjpeg.dll

========== ZeroAccess Check ==========

[2009-07-14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2010-11-20 23:29:11 | 012,872,192 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 23:29:20 | 000,606,208 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

"" = %systemroot%\system32\wbem\wbemess.dll -- [2009-07-14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

========== LOP Check ==========

[2014-04-06 20:18:07 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\.minecraft

[2014-03-10 16:00:11 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\.minecraftzyczu

[2014-03-10 15:49:44 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\.zyczujdk7

[2014-02-18 13:01:40 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Audacity

[2013-10-24 15:57:36 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Awesomium

[2013-11-14 18:32:19 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\BANDISOFT

[2014-05-03 04:33:53 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\DAEMON Tools Lite

[2013-10-24 21:54:50 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Foxit Software

[2014-05-11 21:21:14 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\gd.sos.McPixel

[2013-10-13 19:02:17 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\LolClient

[2013-12-14 20:07:54 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\ManyCam

[2014-05-03 08:58:52 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Opera Software

[2013-10-26 17:06:52 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Origin

[2014-05-20 14:20:03 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\qone8

[2013-10-13 17:19:44 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Riot Games

[2014-03-08 09:32:51 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\SpaceEngineers

[2013-11-13 16:42:13 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\TechSmith

[2014-01-10 08:46:19 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\TERA

[2014-04-27 17:57:56 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\TS3Client

[2013-11-10 12:05:47 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\TuneUp Software

[2013-11-27 21:00:41 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Ubisoft

[2013-10-27 14:46:25 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Unity

[2014-05-13 16:17:33 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\uTorrent

[2013-11-08 16:28:43 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Wargaming.net

[2013-12-13 15:48:50 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Webcammax

[2013-11-10 12:16:40 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\TuneUp Software

[2013-11-10 12:16:40 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\TuneUp Software

========== Purity Check ==========

========== Alternate Data Streams ==========

@Alternate Data Stream - 146 bytes -> C:\ProgramData\Temp:56E2E879

< End of report >

i jakies extras

OTL Extras logfile created on: 2014-05-20 19:39:08 - Run 1

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\admin\Downloads

Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,99 Gb Total Physical Memory | 1,60 Gb Available Physical Memory | 53,65% Memory free

5,98 Gb Paging File | 4,14 Gb Available in Paging File | 69,16% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 467,94 Gb Total Space | 431,80 Gb Free Space | 92,28% Space Free | Partition Type: NTFS

Drive D: | 7,90 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

Drive I: | 463,47 Gb Total Space | 356,43 Gb Free Space | 76,90% Space Free | Partition Type: NTFS

Computer Name: ADMIN-KOMPUTER | User Name: admin | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)

.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-3753929950-4060581948-1420204370-1000\SOFTWARE\Classes\<extension>]

.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)

htmlfile [edit] -- Reg Error: Key error.

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"VistaSp1" = Reg Error: Unknown registry data type -- File not found

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{05196BC6-E307-4383-A31E-BD2CE7496544}" = rport=138 | protocol=17 | dir=out | app=system |

"{363D4ECA-82AF-42D4-8F51-139D7A49D6B3}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |

"{391A07FE-4CAE-41DC-84E5-2B2122860844}" = rport=139 | protocol=6 | dir=out | app=system |

"{51AE4CFE-CC9D-4C69-AB3B-ADC865A842A6}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |

"{5D17514B-32BF-489A-8B33-A312F0042032}" = rport=137 | protocol=17 | dir=out | app=system |

"{8EF5A89E-B587-41AC-A308-C38CAB5073F5}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | [email protected],-28539 |

"{8F538EB4-ABD6-4DEA-854D-CEF20FFE1316}" = lport=137 | protocol=17 | dir=in | app=system |

"{94088209-A2B8-4DC1-92B6-E05911356F5E}" = lport=139 | protocol=6 | dir=in | app=system |

"{CB9C84B7-0259-4F4A-A499-E455D884F984}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |

"{DA78E04F-EEBE-4DE2-B225-76EDADF64393}" = lport=445 | protocol=6 | dir=in | app=system |

"{E33EF89F-0CED-4DE5-ADB6-8E29B0612D18}" = lport=138 | protocol=17 | dir=in | app=system |

"{F55D5DA0-572A-4F1D-B030-0E3BED141126}" = rport=445 | protocol=6 | dir=out | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{0579A35E-8601-4A81-A68D-BF4497F08AE2}" = protocol=1 | dir=out | [email protected],-28544 |

"{0FCC0A5B-2AE7-48B4-83B0-68024C2D8D59}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe |

"{262BD0BD-A0CD-4124-93F7-05FC4588E674}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe |

"{26DAFE21-D2AA-4691-BB1C-407954A2D1B9}" = protocol=6 | dir=in | app=i:\program files\steam\steamapps\common\blades of time\bladesoftime.exe |

"{298F02A8-F838-4DF4-917B-2D056DACDACB}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |

"{39980E89-7351-4079-A30A-FF26A7756D4E}" = protocol=6 | dir=in | app=c:\program files\battlelog web plugins\sonar\0.70.4\sonarhost.exe |

"{3AC4D0C3-D8DC-4EEF-BD4E-9F2E5023793F}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |

"{43F0232A-BA15-4837-8F1B-C9CC3FD8F0BD}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe |

"{462A7567-E070-4E3B-B45B-F2833F27485A}" = protocol=1 | dir=in | [email protected],-28543 |

"{47BF828E-FF91-4486-8A14-844D814B0A5D}" = protocol=6 | dir=in | app=i:\program files\steam\steam.exe |

"{4E9CD879-98AC-4791-A90F-4AB5E59E5887}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe |

"{5407F221-A197-4A24-A268-06FD442AC914}" = protocol=17 | dir=in | app=i:\program files\origin games\medal of honor warfighter\mohw.exe |

"{5F85AF13-6881-4964-BED4-651D8A56895B}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe |

"{65820EAA-18CA-414E-99B4-B2B34F64B8B6}" = protocol=6 | dir=in | app=i:\program files\origin games\medal of honor warfighter\mohw.exe |

"{676A3C2D-D0AB-4F21-8C6C-262D6A4D0DEB}" = protocol=17 | dir=in | app=i:\program files\steam\steam.exe |

"{838CF443-5F7A-4CC1-B08B-873B051ED844}" = protocol=17 | dir=in | app=i:\program files\steam\steamapps\common\loadout\loadout.exe |

"{84B5E580-B4CF-4E29-BE0A-4A3D1F4D4FEB}" = protocol=58 | dir=out | [email protected],-28546 |

"{88B07B1B-6680-4E3A-B466-02CA97C31D22}" = protocol=17 | dir=in | app=i:\program files\steam\steamapps\common\blades of time\bladesoftime.exe |

"{896CBB7A-B210-4EE1-8C82-9C916047DFD4}" = protocol=17 | dir=in | app=c:\program files\battlelog web plugins\sonar\0.70.4\sonarhost.exe |

"{8FD62A76-C7B8-410B-92E0-C0D160DFC3D4}" = protocol=6 | dir=in | app=i:\program files\origin games\battlefield 3\bf3.exe |

"{A67B007B-FB1C-46A7-B6AA-219C552B9158}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe |

"{AE497AB7-4B76-453C-AF66-B1F6507F037C}" = protocol=6 | dir=in | app=c:\program files\battlelog web plugins\sonar\0.70.4\sonarhost.exe |

"{AF52CC9C-DE4D-46E3-A217-428869365ECB}" = protocol=17 | dir=in | app=i:\program files\steam\steam.exe |

"{B7BD8959-6D4B-4307-A02B-F76FD060A00C}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |

"{C4E8FD91-DE5E-4F14-AB2B-FB308B323C71}" = protocol=17 | dir=in | app=i:\program files\origin games\battlefield 3\bf3.exe |

"{CBC722E2-D8C1-4CF5-9150-DAEBAA876E33}" = protocol=17 | dir=in | app=c:\program files\battlelog web plugins\sonar\0.70.4\sonarhost.exe |

"{D01E2D8E-F146-4388-A1D2-C727A7C79989}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe |

"{D1BA00C4-CFBE-43F8-87D8-2DE5BBE94FE9}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe |

"{D92DD62F-E965-45EF-8C27-6BEDA1AD1521}" = protocol=6 | dir=in | app=i:\program files\steam\steamapps\common\loadout\loadout.exe |

"{E3C79C5C-9537-4288-8982-2563DCF32C6F}" = protocol=6 | dir=in | app=i:\program files\steam\steam.exe |

"{EEBB9B51-6492-41B3-9E9C-C1EB3CBE0470}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe |

"{F04C7B72-ADEB-4850-A683-B4727FC5FFF1}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |

"{F7DCD0C5-D342-406C-AC19-CB292AC79396}" = protocol=58 | dir=in | [email protected],-28545 |

"{F9BF5D81-43AB-4C28-873E-9914669189CB}" = dir=in | app=c:\program files\skype\phone\skype.exe |

"TCP Query User{14E1875B-2C18-4965-8599-016B9CDB6C52}C:\users\admin\desktop\mateusz\gry\war thunder\launcher.exe" = protocol=6 | dir=in | app=c:\users\admin\desktop\mateusz\gry\war thunder\launcher.exe |

"TCP Query User{6231D132-133D-4C68-9CC5-1706AACC1809}D:\easysetupassistant\wr841n\easysetupassistant.exe" = protocol=6 | dir=in | app=d:\easysetupassistant\wr841n\easysetupassistant.exe |

"TCP Query User{787AC10C-D2D1-4FB7-9BBF-A6975022EFBE}J:\imetin\starter.exe" = protocol=6 | dir=in | app=j:\imetin\starter.exe |

"TCP Query User{A8728AD7-C94B-4937-9634-209357E6FA0C}C:\users\admin\desktop\mateusz\gry\war thunder\launcher.exe" = protocol=6 | dir=in | app=c:\users\admin\desktop\mateusz\gry\war thunder\launcher.exe |

"TCP Query User{A9DA1F90-0AF9-42C3-889B-1031489404C4}I:\program files\steam\steamapps\common\planetside 2\planetside2.exe" = protocol=6 | dir=in | app=i:\program files\steam\steamapps\common\planetside 2\planetside2.exe |

"TCP Query User{AA3C51C7-06A8-46CD-9B53-C19184DFFA66}C:\users\admin\appdata\roaming\.zyczujdk7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\users\admin\appdata\roaming\.zyczujdk7\bin\javaw.exe |

"TCP Query User{B54136CD-75E3-4C4D-A862-3CF88270BCB4}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |

"TCP Query User{B99E515B-D85C-4DF5-A0DF-81121EA5879D}C:\users\admin\desktop\mateusz\gry\war thunder\aces.exe" = protocol=6 | dir=in | app=c:\users\admin\desktop\mateusz\gry\war thunder\aces.exe |

"TCP Query User{C19A1F5C-3FAD-4460-9C75-D3309415FD6C}I:\games\counter-strike\hl.exe" = protocol=6 | dir=in | app=i:\games\counter-strike\hl.exe |

"TCP Query User{D241E722-1C64-416D-8171-BC8098441934}C:\users\admin\desktop\mateusz\gry\war thunder\aces.exe" = protocol=6 | dir=in | app=c:\users\admin\desktop\mateusz\gry\war thunder\aces.exe |

"TCP Query User{D8DEE0C9-8714-4277-9664-C79E06149181}C:\windows\system32\javaw.exe" = protocol=6 | dir=in | app=c:\windows\system32\javaw.exe |

"TCP Query User{ED3F0B6E-B9DB-4E94-BA27-33C9771B32DF}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |

"TCP Query User{EFCC29CC-67AE-4B2C-BE61-CD317CE86A24}I:\program files\origin games\battlefield 3\bf3.exe" = protocol=6 | dir=in | app=i:\program files\origin games\battlefield 3\bf3.exe |

"UDP Query User{1BC9DC3B-0CF3-4D83-BE2E-6CA0F3DA4484}C:\users\admin\desktop\mateusz\gry\war thunder\aces.exe" = protocol=17 | dir=in | app=c:\users\admin\desktop\mateusz\gry\war thunder\aces.exe |

"UDP Query User{2C2D54E0-DC6A-4F4D-B11D-72A47EB55538}J:\imetin\starter.exe" = protocol=17 | dir=in | app=j:\imetin\starter.exe |

"UDP Query User{310DB12B-EECE-41E3-BA8F-88CD704A739F}C:\users\admin\desktop\mateusz\gry\war thunder\aces.exe" = protocol=17 | dir=in | app=c:\users\admin\desktop\mateusz\gry\war thunder\aces.exe |

"UDP Query User{45D9BBAD-4932-4EF5-9112-652A43AD61D9}D:\easysetupassistant\wr841n\easysetupassistant.exe" = protocol=17 | dir=in | app=d:\easysetupassistant\wr841n\easysetupassistant.exe |

"UDP Query User{4C276772-0501-4B79-AE73-BB27B498D9A3}C:\users\admin\desktop\mateusz\gry\war thunder\launcher.exe" = protocol=17 | dir=in | app=c:\users\admin\desktop\mateusz\gry\war thunder\launcher.exe |

"UDP Query User{56A1B1EE-FAF3-47A4-92FD-A454A59B3BA7}I:\program files\steam\steamapps\common\planetside 2\planetside2.exe" = protocol=17 | dir=in | app=i:\program files\steam\steamapps\common\planetside 2\planetside2.exe |

"UDP Query User{5E5A9F87-F219-484A-AF46-1AA9B472C1F2}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |

"UDP Query User{7B489EB8-429B-43F4-988D-3EBEDCB0A931}C:\users\admin\desktop\mateusz\gry\war thunder\launcher.exe" = protocol=17 | dir=in | app=c:\users\admin\desktop\mateusz\gry\war thunder\launcher.exe |

"UDP Query User{8435CC03-7AB9-4A75-A336-C319FDAAEF4D}I:\games\counter-strike\hl.exe" = protocol=17 | dir=in | app=i:\games\counter-strike\hl.exe |

"UDP Query User{A2206E4F-A73F-4C56-B8CE-AF832BA6E74B}I:\program files\origin games\battlefield 3\bf3.exe" = protocol=17 | dir=in | app=i:\program files\origin games\battlefield 3\bf3.exe |

"UDP Query User{BAAD49FE-5420-4B1C-AF24-36A04D325C82}C:\users\admin\appdata\roaming\.zyczujdk7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\users\admin\appdata\roaming\.zyczujdk7\bin\javaw.exe |

"UDP Query User{BC526C35-E88C-426B-BCE5-BA1D36EC45F3}C:\windows\system32\javaw.exe" = protocol=17 | dir=in | app=c:\windows\system32\javaw.exe |

"UDP Query User{E70BFD5D-B638-4CC4-8A2F-FB8A3FF0CB54}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{1008F030-1D06-C7C2-14F7-18CE3307F51F}" = CCC Help Portuguese

"{1040143F-FEFB-4B90-8E51-E47D40E14C4E}" = Medal of Honor™ Warfighter

"{12D800D0-F5F0-7B02-9876-D3EFF5B1FFDF}" = AMD Catalyst Install Manager

"{174F94E5-581E-EFCA-60FF-72B99A893BAE}" = CCC Help Thai

"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319

"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

"{22154f09-719a-4619-bb71-5b3356999fbf}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727

"{26A24AE4-039D-4CA4-87B4-2F83217051FF}" = Java 7 Update 55

"{2F73A7B2-E50E-39A6-9ABC-EF89E4C62E36}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727

"{2FDD750F-49B7-40C1-9D5E-D2955BC0E2D8}" = NVIDIA PhysX

"{34D9106C-A947-47ED-B4AB-764736350769}" = Minecraft

"{3C9EF074-E7E8-1DAD-7B24-E2ACDC48FBDE}" = CCC Help English

"{428E5513-5FC7-04CF-CC49-78B4F175A21A}" = AMD Accelerated Video Transcoding

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{4F07D6C9-3AB0-0567-FA40-FA091398E7BE}" = CCC Help Italian

"{56978E45-6A6B-8DF7-B37C-58043F182D6C}" = CCC Help Swedish

"{5DE67937-45D5-45E4-923C-0B7F7EC929A7}" = League of Legends

"{6672A809-A0D9-A47E-7CFE-AF0B0D599D40}" = Catalyst Control Center Localization All

"{6AFE5E25-121D-6054-62B8-F3354C82FAAF}" = CCC Help Hungarian

"{6EA8664E-1F6A-AAE8-1666-107B0C93D562}" = AMD Drag and Drop Transcoding

"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable

"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™

"{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}" = Skype™ 6.14

"{7BDECEC6-87A7-A7AA-8AE8-A8D663F3B9E5}" = CCC Help Finnish

"{7D6835C4-F6C7-7D78-5DC7-593E025A58FD}" = CCC Help Korean

"{82DB3B8E-740D-A301-E55D-3A92FA5E3566}" = AMD Media Foundation Decoders

"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable

"{88B2ABCF-9C00-47C1-8FC4-369B98845DD7}" = Catalyst Control Center - Branding

"{8BB6D134-BFBA-F4B7-D086-6EF765576DBE}" = CCC Help Norwegian

"{8FB1B528-E260-451E-9B55-E9152F94B80B}" = Microsoft Games for Windows - LIVE Redistributable

"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5

"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195

"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster

"{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}" = Visual Studio 2012 x86 Redistributables

"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

"{9F612429-4A00-3D44-88CF-146DA2EE1F92}" = Microsoft .NET Framework 4.5

"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable

"{A69B5801-707A-D310-2DD1-0DE7EFF761AC}" = CCC Help Greek

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{AB0DBC9A-422A-4888-A8E5-A32EC1779E68}_is1" = Sunrise Seven 1.2.61

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Sterownik 3D Vision 331.65

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 331.65

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 331.65

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA Sterownik kontrolera 3D Vision 306.23

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Oprogramowanie systemu PhysX 9.12.0604

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 1.15.2

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Sterownik dźwięku HD 1.3.26.4

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components

"{BFA04EE0-8240-4667-8D53-45496A901C33}" = Camtasia Studio 8

"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3

"{C42B66AB-B0A2-516D-63BE-6D9608A3B9BC}" = CCC Help Dutch

"{C7CA731B-BF9A-46D9-92CF-8A8737AE9240}" = System Requirements Lab for Intel

"{C8361018-DC16-79B2-0B0D-B46DF4095952}" = ccc-utility

"{C9B21EB7-9E61-55EF-DC76-ADB8DDEEFE56}" = CCC Help Polish

"{CC45C792-5348-9446-1FBB-2A287A19D48E}" = AMD Catalyst Control Center

"{CC9AD130-069C-E5AF-A56C-48E58781BE24}" = CCC Help Chinese Standard

"{D0A0DC26-EDD5-C03D-6AFC-8F10D2FD974F}" = CCC Help Chinese Traditional

"{D805E716-EE94-64C4-04FB-BE98A4BF6CF6}" = CCC Help Spanish

"{E002447E-6B41-DCF6-8133-987BF12C5B50}" = CCC Help Czech

"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime

"{E7970ADC-319A-A32B-7D8D-9404F4807365}" = CCC Help German

"{E7E71065-1152-440D-F258-5B6DE3817E41}" = Catalyst Control Center Graphics Previews Common

"{EADF01C1-9C48-5157-AF54-8E5DC3540185}" = CCC Help Turkish

"{EB48CCF6-69EC-F24E-0F24-6A13DFF63A05}" = CCC Help French

"{EF2E4024-2B49-F761-B36F-167033D7F005}" = CCC Help Japanese

"{F3FCB08B-E752-444D-86A0-0634A4F3B23D}" = System Requirements Lab CYRI

"{F88FFBE5-6A07-6206-0B13-4F648A6718C9}" = Catalyst Control Center InstallProxy

"{FA5BA14A-631B-3AFB-8918-B75443396D4C}" = CCC Help Danish

"{FDB30193-FDA0-3DAA-ACCA-A75EEFE53607}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727

"{FE8DA369-A02D-F0E4-231C-7D73A2D62028}" = CCC Help Russian

"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022

"7-Zip" = 7-Zip 9.20

"Adobe Flash Player ActiveX" = Adobe Flash Player 13 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 13 Plugin

"Bandicam" = Bandicam

"BandiMPEG1" = Bandisoft MPEG-1 Decoder

"Battlelog Web Plugins" = Battlelog Web Plugins

"DAEMON Tools Lite" = DAEMON Tools Lite

"ESN Sonar-0.70.4" = ESN Sonar

"Foxit Reader_is1" = Foxit Reader

"Freemake Video Converter_is1" = Freemake Video Converter wersja 4.1.3

"Google Chrome" = Google Chrome

"KLiteCodecPack_is1" = K-Lite Codec Pack 10.0.5 Full

"League of Legends 3.0.1" = League of Legends

"McPixel_is1" = McPixel version 1.0.7

"NIS" = Norton Internet Security

"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver

"Origin" = Origin

"PunkBusterSvc" = PunkBuster Services

"Sense" = Sense

"Space Engineers v01.018.023" = Space Engineers v01.018.023

"Steam" = Steam

"Steam App 208090" = Loadout

"TeamSpeak 3 Client" = TeamSpeak 3 Client

"webget" = webget

"WinRAR archiver" = WinRAR 4.20 (32-bitowy)

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-3753929950-4060581948-1420204370-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"UnityWebPlayer" = Unity Web Player

========== Last 20 Event Log Errors ==========

[ Application Events ]

Error - 2014-05-20 08:29:21 | Computer Name = admin-Komputer | Source = WinMgmt | ID = 10

Description =

Error - 2014-05-20 09:07:01 | Computer Name = admin-Komputer | Source = MsiInstaller | ID = 11316

Description =

Error - 2014-05-20 09:33:53 | Computer Name = admin-Komputer | Source = WinMgmt | ID = 10

Description =

Error - 2014-05-20 10:07:01 | Computer Name = admin-Komputer | Source = MsiInstaller | ID = 11316

Description =

Error - 2014-05-20 11:06:30 | Computer Name = admin-Komputer | Source = Application Error | ID = 1000

Description = Nazwa aplikacji powodującej błąd: hl.exe, wersja: 1.1.1.1, sygnatura

czasowa: 0x48feaf5a Nazwa modułu powodującego błąd: MSVCR100.dll, wersja: 10.0.30319.1,

sygnatura czasowa: 0x4ba1dbbe Kod wyjątku: 0xc0000417 Przesunięcie błędu: 0x0008ae6e

Identyfikator

procesu powodującego błąd: 0x1758 Godzina uruchomienia aplikacji powodującej błąd:

0x01cf743d0c9f319a Ścieżka aplikacji powodującej błąd: I:\Games\Counter-Strike\hl.exe

Ścieżka

modułu powodującego błąd: I:\Games\Counter-Strike\MSVCR100.dll Identyfikator raportu:

527ffc14-e030-11e3-bbc1-f46d04ec5e32

Error - 2014-05-20 11:07:00 | Computer Name = admin-Komputer | Source = MsiInstaller | ID = 11316

Description =

Error - 2014-05-20 12:07:00 | Computer Name = admin-Komputer | Source = MsiInstaller | ID = 11316

Description =

Error - 2014-05-20 12:35:01 | Computer Name = admin-Komputer | Source = WinMgmt | ID = 10

Description =

Error - 2014-05-20 12:36:30 | Computer Name = admin-Komputer | Source = SideBySide | ID = 16842785

Description = Nie można wygenerować kontekstu aktywacji dla "C:\Program Files\ATI

Technologies\ATI.ACE\Core-Static\SLSTaskbar64.exe". Nie można odnaleźć zestawu zależnego

Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0".

Użyj

narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2014-05-20 13:07:01 | Computer Name = admin-Komputer | Source = MsiInstaller | ID = 11316

Description =

[ Media Center Events ]

Error - 2014-04-25 01:32:32 | Computer Name = admin-Komputer | Source = MCUpdate | ID = 0

Description = 07:32:32 - Błąd podczas nawiązywania połączenia z Internetem. 07:32:32

- Nie można skontaktować się z serwerem..

Error - 2014-04-25 02:33:04 | Computer Name = admin-Komputer | Source = MCUpdate | ID = 0

Description = 08:33:03 - Błąd podczas nawiązywania połączenia z Internetem. 08:33:03

- Nie można skontaktować się z serwerem..

[ System Events ]

Error - 2014-03-22 07:12:37 | Computer Name = admin-Komputer | Source = cdrom | ID = 262151

Description = W urządzeniu \Device\CdRom0 wystąpił zły blok.