MyCity » Ambulanta -> Arhiva Ambulante » Internet explorer ne radi

Internet explorer ne radi

Napisano na dan: 17.1.2014

Strana:
1
2
3

Internet explorer ne radi

Pagination

Prethodna strana

Odgovori

Strana:
1
2
3

Sass Drake Poslao: 25 Jan 2014 15:23 Idi na vrh
offline Sass Drake Anti Malware Fighter Rank 2 Pridružio: 26 Avg 2010 Poruke: 10622 Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/ Ovaj bi trebalo da radi.

Profil

popaj 2 Poslao: 25 Jan 2014 15:35 Idi na vrh
offline popaj 2 Novi MyCity građanin Pridružio: 27 Okt 2013 Poruke: 15	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Neverovatno, neće i neće. Proba vise puta

Profil

Sass Drake Poslao: 25 Jan 2014 15:41 Idi na vrh
offline Sass Drake Anti Malware Fighter Rank 2 Pridružio: 26 Avg 2010 Poruke: 10622 Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Idemo onda ovako: Preuzmi program OTL sa donjeg linka na Desktop: download link Dvoklikom pokreni OTL; klikni Run Scan; po završetku skeniranja, izveštaj (koji će biti automatski sačuvan na Desktop-u kao OTL.Txt) će se otvoriti u Notepad-u. Kopiraj dobijeni izvještaj u poruku.

Profil

popaj Poslao: 25 Jan 2014 15:57 Idi na vrh
offline popaj Građanin Pridružio: 05 Jun 2004 Poruke: 81	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Evo izvestaja OTL logfile created on: 25.1.2014. 15:46:17 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Dragoljub\Desktop 64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.16476) Locale: 0000241A \| Country: Serbia \| Language: SRM \| Date Format: d.M.yyyy. 4,00 Gb Total Physical Memory \| 2,28 Gb Available Physical Memory \| 57,12% Memory free 5,62 Gb Paging File \| 3,00 Gb Available in Paging File \| 53,27% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: \| %SystemRoot% = C:\Windows \| %ProgramFiles% = C:\Program Files (x86) Drive C: \| 58,50 Gb Total Space \| 21,25 Gb Free Space \| 36,32% Space Free \| Partition Type: NTFS Drive D: \| 122,30 Gb Total Space \| 60,31 Gb Free Space \| 49,32% Space Free \| Partition Type: NTFS Drive E: \| 419,57 Gb Total Space \| 208,58 Gb Free Space \| 49,71% Space Free \| Partition Type: NTFS Drive F: \| 19,88 Gb Total Space \| 12,68 Gb Free Space \| 63,78% Space Free \| Partition Type: NTFS Drive G: \| 391,84 Gb Total Space \| 228,30 Gb Free Space \| 58,26% Space Free \| Partition Type: NTFS Drive H: \| 117,18 Gb Total Space \| 116,63 Gb Free Space \| 99,53% Space Free \| Partition Type: NTFS Drive J: \| 45,99 Gb Total Space \| 30,25 Gb Free Space \| 65,78% Space Free \| Partition Type: NTFS Drive K: \| 1,84 Gb Total Space \| 1,84 Gb Free Space \| 100,00% Space Free \| Partition Type: FAT32 Computer Name: PEJCEVI \| User Name: Dragoljub \| Logged in as Administrator. Boot Mode: Normal \| Scan Mode: Current user \| Include 64bit Scans Company Name Whitelist: Off \| Skip Microsoft Files: Off \| No Company Name Whitelist: On \| File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2014.01.25 15:46:02 \| 000,602,112 \| ---- \| M] (OldTimer Tools) -- C:\Users\Dragoljub\Desktop\OTL.exe PRC - [2014.01.25 14:36:21 \| 000,102,176 \| ---- \| M] () -- C:\Program Files (x86)\RightSurf\bin\utilRightSurf.exe PRC - [2014.01.25 04:09:42 \| 000,102,176 \| ---- \| M] () -- C:\Program Files (x86)\RightSurf\updateRightSurf.exe PRC - [2014.01.20 22:24:18 \| 000,650,816 \| ---- \| M] (MyCity) -- C:\Program Files (x86)\MCShield\MCShieldRTM.exe PRC - [2014.01.20 09:11:22 \| 002,534,936 \| ---- \| M] () -- C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe PRC - [2014.01.20 09:11:21 \| 001,772,056 \| ---- \| M] (AVG Secure Search) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe PRC - [2014.01.20 09:11:21 \| 000,159,768 \| ---- \| M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\loggingserver.exe PRC - [2014.01.11 11:29:23 \| 000,866,584 \| ---- \| M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe PRC - [2014.01.06 00:00:00 \| 002,622,832 \| ---- \| M] (Cerulean Studios) -- C:\Program Files (x86)\Trillian\trillian.exe PRC - [2013.12.21 07:04:16 \| 000,065,432 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2013.12.17 11:38:33 \| 005,341,536 \| ---- \| M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe PRC - [2013.12.17 11:38:32 \| 013,543,264 \| ---- \| M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe PRC - [2013.12.17 11:22:10 \| 000,199,520 \| ---- \| M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe PRC - [2013.10.09 09:58:16 \| 003,275,136 \| ---- \| M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe PRC - [2013.09.08 09:15:04 \| 003,873,784 \| ---- \| M] (Acronis) -- C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe PRC - [2013.08.30 07:46:41 \| 000,444,840 \| ---- \| M] (IncrediMail, Ltd.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe PRC - [2013.08.30 07:46:41 \| 000,297,384 \| ---- \| M] (IncrediMail, Ltd.) -- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe PRC - [2013.08.27 22:15:38 \| 002,155,296 \| ---- \| M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe PRC - [2013.08.21 15:30:42 \| 009,735,112 \| ---- \| M] (Acronis) -- C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe PRC - [2013.07.08 18:42:48 \| 001,922,600 \| ---- \| M] (Pandora.TV) -- C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe PRC - [2013.07.08 18:42:38 \| 001,798,696 \| ---- \| M] (PandoraTV) -- C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe PRC - [2013.04.04 13:50:32 \| 000,418,376 \| ---- \| M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe PRC - [2013.02.03 10:43:06 \| 000,791,560 \| ---- \| M] (KoshyJohn.com) -- C:\Users\Dragoljub\AppData\Roaming\KoshyJohn.com\MemClean\MemClean.exe PRC - [2007.07.27 21:39:26 \| 003,647,656 \| ---- \| M] () -- C:\Program Files (x86)\IObit\IObit SmartDefrag\IObit SmartDefrag.exe ========== Modules (No Company Name) ========== MOD - [2014.01.20 09:11:22 \| 002,534,936 \| ---- \| M] () -- C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe MOD - [2014.01.20 09:11:22 \| 000,519,704 \| ---- \| M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\log4cplusU.dll MOD - [2014.01.11 11:29:21 \| 000,399,640 \| ---- \| M] () -- C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\ppGoogleNaClPluginChrome.dll MOD - [2014.01.11 11:29:19 \| 013,615,896 \| ---- \| M] () -- C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\PepperFlash\pepflashplayer.dll MOD - [2014.01.11 11:29:17 \| 004,055,320 \| ---- \| M] () -- C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\pdf.dll MOD - [2014.01.11 11:28:15 \| 000,715,544 \| ---- \| M] () -- C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\libglesv2.dll MOD - [2014.01.11 11:28:14 \| 000,100,120 \| ---- \| M] () -- C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\libegl.dll MOD - [2014.01.11 11:28:11 \| 001,634,584 \| ---- \| M] () -- C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\ffmpegsumo.dll MOD - [2014.01.06 00:00:00 \| 000,187,392 \| ---- \| M] () -- C:\Program Files (x86)\Trillian\libpng15.dll MOD - [2014.01.06 00:00:00 \| 000,065,536 \| ---- \| M] () -- C:\Program Files (x86)\Trillian\libungif.dll MOD - [2014.01.06 00:00:00 \| 000,059,904 \| ---- \| M] () -- C:\Program Files (x86)\Trillian\zlib1.dll MOD - [2014.01.06 00:00:00 \| 000,010,752 \| ---- \| M] () -- c:\program files (x86)\trillian\languages\en\buddy.dll MOD - [2014.01.06 00:00:00 \| 000,007,168 \| ---- \| M] () -- c:\program files (x86)\trillian\languages\en\talk.dll MOD - [2014.01.06 00:00:00 \| 000,006,656 \| ---- \| M] () -- c:\program files (x86)\trillian\languages\en\trillian.dll MOD - [2014.01.06 00:00:00 \| 000,006,656 \| ---- \| M] () -- c:\program files (x86)\trillian\languages\en\events.dll MOD - [2014.01.06 00:00:00 \| 000,003,584 \| ---- \| M] () -- c:\program files (x86)\trillian\languages\en\toolkit.dll MOD - [2013.09.05 00:14:10 \| 004,300,456 \| ---- \| M] () -- C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf MOD - [2013.08.30 07:46:45 \| 000,108,888 \| ---- \| M] () -- C:\Program Files (x86)\IncrediMail\Bin\pmc.dll MOD - [2013.08.30 07:46:45 \| 000,072,104 \| ---- \| M] () -- C:\Program Files (x86)\IncrediMail\Bin\wlessfp1.dll MOD - [2013.08.30 07:46:43 \| 000,272,808 \| ---- \| M] () -- C:\Program Files (x86)\IncrediMail\Bin\ImLookExU.dll MOD - [2013.08.30 07:46:42 \| 000,133,544 \| ---- \| M] () -- C:\Program Files (x86)\IncrediMail\Bin\ImComUtlU.dll MOD - [2013.08.30 07:46:42 \| 000,080,296 \| ---- \| M] () -- C:\Program Files (x86)\IncrediMail\bin\ImAppRU.dll MOD - [2013.08.30 07:46:42 \| 000,033,128 \| ---- \| M] () -- C:\Program Files (x86)\IncrediMail\Bin\IMHttpComm.dll MOD - [2010.10.20 14:45:26 \| 008,801,120 \| ---- \| M] () -- C:\PROGRA~2\MICROS~1\Office14\1033\GrooveIntlResource.dll MOD - [2007.07.27 21:39:26 \| 003,647,656 \| ---- \| M] () -- C:\Program Files (x86)\IObit\IObit SmartDefrag\IObit SmartDefrag.exe MOD - [2007.04.28 18:13:56 \| 000,065,536 \| ---- \| M] () -- C:\Program Files (x86)\IObit\IObit SmartDefrag\taskdll.dll MOD - [2007.04.28 13:55:36 \| 000,073,808 \| ---- \| M] () -- C:\Program Files (x86)\IObit\IObit SmartDefrag\workdll.dll ========== Services (SafeList) ========== SRV:64bit: - [2013.11.27 16:36:30 \| 003,395,920 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Running] -- C:\Windows\SysNative\WSService.dll -- (WSService) SRV:64bit: - [2013.10.22 02:53:47 \| 001,584,128 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc) SRV:64bit: - [2013.10.19 06:37:49 \| 000,111,616 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService) SRV:64bit: - [2013.10.10 11:40:53 \| 001,302,528 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Running] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc) SRV:64bit: - [2013.10.04 09:10:59 \| 000,533,504 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness) SRV:64bit: - [2013.09.21 06:38:15 \| 000,365,568 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc) SRV:64bit: - [2013.09.21 06:36:18 \| 000,261,120 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure) SRV:64bit: - [2013.09.21 06:34:45 \| 001,555,456 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Running] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc) SRV:64bit: - [2013.08.31 11:00:10 \| 000,491,520 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\GeofenceMonitorService.dll -- (lfsvc) SRV:64bit: - [2013.08.27 22:17:13 \| 014,997,280 \| ---- \| M] (NVIDIA Corporation) [Auto \| Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe -- (NvStreamSvc) SRV:64bit: - [2013.08.22 20:11:18 \| 000,183,296 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:64bit: - [2013.08.22 20:11:17 \| 000,090,464 \| ---- \| M] (Microsoft Corporation) [Disabled \| Stopped] -- C:\Windows\SysNative\KeyboardFilterSvc.dll -- (MsKeyboardFilter) SRV:64bit: - [2013.08.22 13:32:01 \| 000,346,872 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Running] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc) SRV:64bit: - [2013.08.22 13:32:00 \| 000,023,840 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend) SRV:64bit: - [2013.08.22 13:31:56 \| 002,899,968 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV:64bit: - [2013.08.22 12:32:02 \| 000,024,576 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC) SRV:64bit: - [2013.08.22 12:31:43 \| 000,040,448 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS) SRV:64bit: - [2013.08.22 12:22:45 \| 000,066,048 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc) SRV:64bit: - [2013.08.22 12:21:15 \| 000,013,312 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc) SRV:64bit: - [2013.08.22 12:16:57 \| 000,118,272 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc) SRV:64bit: - [2013.08.22 11:25:28 \| 000,164,352 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc) SRV:64bit: - [2013.08.22 11:19:28 \| 000,517,120 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss) SRV:64bit: - [2013.08.22 11:19:28 \| 000,517,120 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync) SRV:64bit: - [2013.08.22 11:19:28 \| 000,517,120 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown) SRV:64bit: - [2013.08.22 11:19:28 \| 000,517,120 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv) SRV:64bit: - [2013.08.22 11:19:28 \| 000,517,120 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange) SRV:64bit: - [2013.08.22 11:19:28 \| 000,517,120 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat) SRV:64bit: - [2013.08.22 11:19:28 \| 000,517,120 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface) SRV:64bit: - [2013.08.22 11:04:53 \| 000,716,288 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Windows\SysNative\lsm.dll -- (LSM) SRV:64bit: - [2013.08.22 11:02:47 \| 000,013,312 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost) SRV:64bit: - [2013.08.22 10:59:26 \| 000,832,512 \| ---- \| M] (Microsoft Corporation) [Disabled \| Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon) SRV:64bit: - [2013.08.22 10:58:42 \| 000,280,576 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker) SRV:64bit: - [2013.08.22 10:57:25 \| 000,130,560 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum) SRV:64bit: - [2013.08.22 10:54:59 \| 000,059,392 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso) SRV:64bit: - [2013.08.22 10:50:59 \| 000,245,760 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker) SRV:64bit: - [2013.08.22 10:50:00 \| 000,525,312 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm) SRV:64bit: - [2013.08.22 10:45:59 \| 000,151,040 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService) SRV:64bit: - [2013.08.22 10:40:49 \| 000,248,832 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc) SRV:64bit: - [2013.08.22 10:40:14 \| 000,398,848 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService) SRV:64bit: - [2013.08.22 10:39:33 \| 000,198,656 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder) SRV:64bit: - [2013.08.22 10:31:03 \| 000,201,728 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc) SRV:64bit: - [2013.08.22 10:15:54 \| 000,073,728 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup) SRV - [2014.01.25 15:19:09 \| 000,118,896 \| ---- \| M] (Mozilla Foundation) [On_Demand \| Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2014.01.25 14:36:21 \| 000,102,176 \| ---- \| M] () [Auto \| Running] -- C:\Program Files (x86)\RightSurf\bin\utilRightSurf.exe -- (Util RightSurf) SRV - [2014.01.25 04:09:42 \| 000,102,176 \| ---- \| M] () [Auto \| Running] -- C:\Program Files (x86)\RightSurf\updateRightSurf.exe -- (Update RightSurf) SRV - [2014.01.20 09:11:21 \| 001,772,056 \| ---- \| M] (AVG Secure Search) [Auto \| Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe -- (vToolbarUpdater17.3.0) SRV - [2013.12.21 07:04:16 \| 000,065,432 \| ---- \| M] (Adobe Systems Incorporated) [Auto \| Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2013.12.17 11:38:33 \| 005,341,536 \| ---- \| M] (TeamViewer GmbH) [Auto \| Running] -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe -- (TeamViewer9) SRV - [2013.12.10 19:57:28 \| 000,257,416 \| ---- \| M] (Adobe Systems Incorporated) [On_Demand \| Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2013.12.03 16:10:24 \| 002,151,200 \| ---- \| M] (IObit) [Auto \| Stopped] -- C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe -- (LiveUpdateSvc) SRV - [2013.10.09 09:58:16 \| 003,275,136 \| ---- \| M] (Skype Technologies S.A.) [Auto \| Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service) SRV - [2013.09.08 09:15:04 \| 003,873,784 \| ---- \| M] (Acronis) [Auto \| Running] -- C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe -- (afcdpsrv) SRV - [2013.09.05 10:34:30 \| 000,171,680 \| R--- \| M] (Skype Technologies) [Auto \| Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2013.08.31 10:25:30 \| 000,357,376 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysWOW64\GeofenceMonitorService.dll -- (lfsvc) SRV - [2013.08.27 22:15:38 \| 002,155,296 \| ---- \| M] (NVIDIA Corporation) [Auto \| Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService) SRV - [2013.08.22 13:31:56 \| 002,899,968 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV - [2013.08.22 04:55:35 \| 000,018,944 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc) SRV - [2013.08.22 03:53:34 \| 000,011,776 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost) SRV - [2013.08.21 15:30:42 \| 009,735,112 \| ---- \| M] (Acronis) [Auto \| Running] -- C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe -- (syncagentsrv) SRV - [2013.07.18 10:52:00 \| 001,142,584 \| ---- \| M] (Acronis) [Auto \| Running] -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc) SRV - [2013.07.08 18:42:48 \| 001,922,600 \| ---- \| M] (Pandora.TV) [Auto \| Running] -- C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe -- (PanService) SRV - [2013.04.04 13:50:32 \| 000,701,512 \| ---- \| M] (Malwarebytes Corporation) [Auto \| Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2013.04.04 13:50:32 \| 000,418,376 \| ---- \| M] (Malwarebytes Corporation) [Auto \| Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler) ========== Driver Services (SafeList) ========== DRV:64bit: - [2014.01.20 09:11:23 \| 000,046,368 \| ---- \| M] (AVG Technologies) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp) DRV:64bit: - [2013.10.13 03:48:34 \| 000,136,536 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS) DRV:64bit: - [2013.10.08 12:07:14 \| 000,039,768 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep) DRV:64bit: - [2013.10.05 16:25:54 \| 000,371,032 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport) DRV:64bit: - [2013.10.05 16:25:54 \| 000,057,176 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme) DRV:64bit: - [2013.10.01 15:39:22 \| 000,022,456 \| ---- \| M] (Christian Gulden) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\pimou.sys -- (pimou) DRV:64bit: - [2013.10.01 15:39:20 \| 000,023,480 \| ---- \| M] (Christian Gulden) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\pikbd.sys -- (pikbd) DRV:64bit: - [2013.09.30 16:26:50 \| 000,019,152 \| ---- \| M] () [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\pwdrvio.sys -- (pwdrvio) DRV:64bit: - [2013.09.30 16:26:48 \| 000,012,504 \| ---- \| M] () [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\pwdspio.sys -- (pwdspio) DRV:64bit: - [2013.09.21 13:10:51 \| 000,236,376 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:64bit: - [2013.09.21 12:04:07 \| 000,086,872 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc) DRV:64bit: - [2013.09.17 10:18:30 \| 000,467,800 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3) DRV:64bit: - [2013.09.14 15:06:57 \| 000,175,960 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt) DRV:64bit: - [2013.09.11 13:46:25 \| 000,325,464 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI) DRV:64bit: - [2013.09.08 09:15:05 \| 000,367,200 \| ---- \| M] (Acronis) [File_System \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\afcdp.sys -- (afcdp) DRV:64bit: - [2013.09.08 09:15:02 \| 001,464,096 \| ---- \| M] (Acronis International GmbH) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\tdrpman.sys -- (tdrpman) DRV:64bit: - [2013.09.08 09:15:01 \| 000,183,224 \| ---- \| M] (Acronis) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\tib_mounter.sys -- (tib_mounter) DRV:64bit: - [2013.09.08 09:15:00 \| 001,120,032 \| ---- \| M] (Acronis International GmbH) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\tib.sys -- (tib) DRV:64bit: - [2013.09.08 09:15:00 \| 000,269,600 \| ---- \| M] (Acronis International GmbH) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\snapman.sys -- (snapman) DRV:64bit: - [2013.09.08 09:14:59 \| 000,116,000 \| ---- \| M] (Acronis International GmbH) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\fltsrv.sys -- (fltsrv) DRV:64bit: - [2013.08.22 20:11:19 \| 000,022,272 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\kbldfltr.sys -- (kbldfltr) DRV:64bit: - [2013.08.22 20:11:18 \| 000,027,488 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:64bit: - [2013.08.22 20:11:12 \| 000,220,672 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\Vid.sys -- (Vid) DRV:64bit: - [2013.08.22 20:11:12 \| 000,129,536 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\vmbusr.sys -- (vmbusr) DRV:64bit: - [2013.08.22 20:11:12 \| 000,068,608 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\storvsp.sys -- (storvsp) DRV:64bit: - [2013.08.22 20:11:12 \| 000,065,536 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\vpcivsp.sys -- (vpcivsp) DRV:64bit: - [2013.08.22 20:11:12 \| 000,037,216 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt) DRV:64bit: - [2013.08.22 14:25:40 \| 000,043,008 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv) DRV:64bit: - [2013.08.22 14:25:40 \| 000,030,048 \| ---- \| M] (Microsoft Corporation) [Recognizer \| Boot \| Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:64bit: - [2013.08.22 13:50:19 \| 000,057,696 \| ---- \| M] (Microsoft Corporation) [Kernel \| System \| Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam) DRV:64bit: - [2013.08.22 13:49:54 \| 000,079,712 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex) DRV:64bit: - [2013.08.22 13:49:33 \| 000,159,584 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM) DRV:64bit: - [2013.08.22 13:43:49 \| 000,063,840 \| ---- \| M] (Marvell Semiconductor, Inc.) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis) DRV:64bit: - [2013.08.22 13:43:48 \| 000,146,272 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101) DRV:64bit: - [2013.08.22 13:43:48 \| 000,041,824 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32) DRV:64bit: - [2013.08.22 13:43:45 \| 003,357,024 \| ---- \| M] (Broadcom Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2013.08.22 13:43:45 \| 000,093,536 \| ---- \| M] (LSI Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2013.08.22 13:43:45 \| 000,082,784 \| ---- \| M] (LSI Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS) DRV:64bit: - [2013.08.22 13:43:45 \| 000,064,352 \| ---- \| M] (Hewlett-Packard Company) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2013.08.22 13:43:44 \| 000,081,760 \| ---- \| M] (LSI Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3.sys -- (LSI_SAS3) DRV:64bit: - [2013.08.22 13:43:41 \| 000,782,176 \| ---- \| M] (PMC-Sierra) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX) DRV:64bit: - [2013.08.22 13:43:41 \| 000,531,296 \| ---- \| M] (Broadcom Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2013.08.22 13:43:41 \| 000,259,424 \| ---- \| M] (AMD Technologies Inc.) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2013.08.22 13:43:41 \| 000,108,896 \| ---- \| M] (LSI) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware) DRV:64bit: - [2013.08.22 13:43:41 \| 000,079,200 \| ---- \| M] (Advanced Micro Devices) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2013.08.22 13:43:40 \| 000,114,016 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv) DRV:64bit: - [2013.08.22 13:43:40 \| 000,082,784 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass) DRV:64bit: - [2013.08.22 13:43:40 \| 000,025,952 \| ---- \| M] (Advanced Micro Devices) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2013.08.22 13:43:34 \| 000,305,504 \| ---- \| M] (VIA Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID) DRV:64bit: - [2013.08.22 13:43:33 \| 000,189,792 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\UCX01000.SYS -- (UCX01000) DRV:64bit: - [2013.08.22 13:43:33 \| 000,074,080 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor) DRV:64bit: - [2013.08.22 13:43:32 \| 000,078,688 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor) DRV:64bit: - [2013.08.22 13:43:32 \| 000,031,072 \| ---- \| M] (Promise Technology, Inc.) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2013.08.22 13:43:31 \| 000,146,272 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2) DRV:64bit: - [2013.08.22 13:43:31 \| 000,107,872 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci) DRV:64bit: - [2013.08.22 13:43:31 \| 000,072,032 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx) DRV:64bit: - [2013.08.22 13:43:31 \| 000,069,472 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx) DRV:64bit: - [2013.08.22 13:41:08 \| 000,054,304 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr) DRV:64bit: - [2013.08.22 13:39:44 \| 000,377,696 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS) DRV:64bit: - [2013.08.22 13:39:15 \| 000,924,512 \| ---- \| M] (Microsoft Corporation) [File_System \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\refs.sys -- (ReFS) DRV:64bit: - [2013.08.22 13:39:15 \| 000,026,976 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI) DRV:64bit: - [2013.08.22 13:37:27 \| 000,069,472 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci) DRV:64bit: - [2013.08.22 13:36:12 \| 000,026,976 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr) DRV:64bit: - [2013.08.22 13:34:22 \| 000,265,056 \| ---- \| M] (Microsoft Corporation) [File_System \| Boot \| Running] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter) DRV:64bit: - [2013.08.22 13:34:22 \| 000,124,256 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv) DRV:64bit: - [2013.08.22 13:31:28 \| 000,034,760 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot) DRV:64bit: - [2013.08.22 12:39:54 \| 000,076,800 \| ---- \| M] (Microsoft Corporation) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache) DRV:64bit: - [2013.08.22 12:39:31 \| 000,050,688 \| ---- \| M] (Microsoft Corporation) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay) DRV:64bit: - [2013.08.22 12:39:28 \| 000,033,792 \| ---- \| M] (Microsoft Corporation) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender) DRV:64bit: - [2013.08.22 12:39:20 \| 000,022,016 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo) DRV:64bit: - [2013.08.22 12:39:06 \| 000,009,728 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf) DRV:64bit: - [2013.08.22 12:38:58 \| 000,010,752 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime) DRV:64bit: - [2013.08.22 12:38:48 \| 000,010,240 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr) DRV:64bit: - [2013.08.22 12:38:39 \| 000,036,992 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg) DRV:64bit: - [2013.08.22 12:38:26 \| 000,019,456 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic) DRV:64bit: - [2013.08.22 12:38:23 \| 000,011,264 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter) DRV:64bit: - [2013.08.22 12:38:22 \| 000,023,040 \| ---- \| M] (Microsoft Corporation) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig) DRV:64bit: - [2013.08.22 12:38:16 \| 000,030,720 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid) DRV:64bit: - [2013.08.22 12:37:49 \| 000,013,824 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd) DRV:64bit: - [2013.08.22 12:37:46 \| 000,029,696 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:64bit: - [2013.08.22 12:37:42 \| 000,057,856 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum) DRV:64bit: - [2013.08.22 12:37:28 \| 000,056,320 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2013.08.22 12:37:28 \| 000,041,472 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c) DRV:64bit: - [2013.08.22 12:37:14 \| 000,029,696 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc) DRV:64bit: - [2013.08.22 12:36:43 \| 000,087,040 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\netvsc63.sys -- (netvsc) DRV:64bit: - [2013.08.22 12:36:25 \| 000,016,384 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus) DRV:64bit: - [2013.08.22 12:36:17 \| 000,124,928 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform) DRV:64bit: - [2013.08.22 12:36:07 \| 000,066,560 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp) DRV:64bit: - [2013.08.22 12:35:42 \| 000,103,424 \| ---- \| M] (Microsoft Corporation) [Kernel \| Auto \| Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu) DRV:64bit: - [2013.08.22 09:46:33 \| 000,027,136 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\fxppm.sys -- (FxPPM) DRV:64bit: - [2013.08.20 14:33:40 \| 000,039,200 \| ---- \| M] (NVIDIA Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible) DRV:64bit: - [2013.08.13 00:25:46 \| 000,017,624 \| ---- \| M] (Windows (R) Win 7 DDK provider) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2) DRV:64bit: - [2013.08.10 01:39:30 \| 000,651,248 \| ---- \| M] (Intel Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV) DRV:64bit: - [2013.07.30 19:47:35 \| 000,024,568 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO) DRV:64bit: - [2013.07.25 20:05:39 \| 000,099,320 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C) DRV:64bit: - [2013.06.18 15:44:59 \| 000,059,904 \| ---- \| M] (Atheros Communications, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\L1E62x64.sys -- (L1E) DRV:64bit: - [2013.06.06 07:24:06 \| 000,035,112 \| ---- \| M] (TeamViewer GmbH) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\teamviewervpn.sys -- (teamviewervpn) DRV:64bit: - [2013.05.23 07:12:56 \| 000,040,728 \| ---- \| M] (Logitech, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\LUsbFilt.sys -- (LUsbFilt) DRV:64bit: - [2013.05.23 07:12:52 \| 000,059,160 \| ---- \| M] (Logitech, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt) DRV:64bit: - [2013.05.23 07:12:50 \| 000,076,568 \| ---- \| M] (Logitech, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt) DRV:64bit: - [2013.05.17 19:13:26 \| 000,017,280 \| ---- \| M] () [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor) DRV:64bit: - [2013.04.04 13:50:32 \| 000,025,928 \| ---- \| M] (Malwarebytes Corporation) [File_System \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector) DRV:64bit: - [2012.09.18 03:05:10 \| 000,123,704 \| ---- \| M] (JMicron Technology Corp.) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\jraid.sys -- (JRAID) DRV:64bit: - [2012.08.21 13:01:20 \| 000,033,240 \| ---- \| M] (GEAR Software Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV:64bit: - [2011.11.28 22:51:44 \| 000,033,872 \| ---- \| M] (AnvSoft Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\anvsnddrv.sys -- (anvsnddrv) DRV:64bit: - [2011.10.20 19:24:06 \| 000,157,696 \| ---- \| M] (Matrox Graphics Inc.) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\MxEFUF64.sys -- (MxEFUF) DRV:64bit: - [2010.07.01 18:11:24 \| 000,012,352 \| ---- \| M] () [Kernel \| "Start" not found. \| Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5) DRV:64bit: - [2010.01.05 03:23:20 \| 001,847,296 \| ---- \| M] (Atheros Communications, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\athurx.sys -- (athur) DRV:64bit: - [2009.03.02 14:12:18 \| 000,011,576 \| ---- \| M] (Samsung Electronics) [Kernel \| Auto \| Running] -- C:\Windows\SysNative\drivers\SSPORT.SYS -- (SSPORT) DRV:64bit: - [2009.03.02 14:12:14 \| 000,053,816 \| ---- \| M] (Samsung Electronics Co., Ltd.) [Kernel \| Auto \| Stopped] -- C:\Windows\SysNative\drivers\DGIVECP.SYS -- (DgiVecp) DRV:64bit: - [2007.04.12 07:10:28 \| 000,151,296 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\COMMONFX.DLL -- (COMMONFX.DLL) DRV:64bit: - [2007.04.10 05:07:54 \| 000,580,904 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\ctac32k.sys -- (ctac32k) DRV:64bit: - [2007.04.10 03:41:54 \| 000,295,208 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\haP17v2k.sys -- (hap17v2k) DRV:64bit: - [2007.04.10 03:41:20 \| 000,259,880 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\haP16v2k.sys -- (hap16v2k) DRV:64bit: - [2007.04.10 03:40:24 \| 001,359,144 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\ha10kx2k.sys -- (ha10kx2k) DRV:64bit: - [2007.04.10 03:39:48 \| 000,147,752 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\emupia2k.sys -- (emupia) DRV:64bit: - [2007.04.10 03:38:40 \| 000,290,600 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\ctsfm2k.sys -- (ctsfm2k) DRV:64bit: - [2007.04.10 03:38:10 \| 000,017,192 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\ctprxy2k.sys -- (ctprxy2k) DRV:64bit: - [2007.04.10 03:37:36 \| 000,218,408 \| ---- \| M] (Creative Technology Ltd.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\ctoss2k.sys -- (ossrv) DRV:64bit: - [2007.04.10 03:35:28 \| 000,863,016 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\ctaud2k.sys -- (ctaud2k) DRV:64bit: - [2007.04.10 03:17:22 \| 000,123,688 \| ---- \| M] (Creative Technology Ltd.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\CTHWIUT.DLL -- (CTHWIUT.DLL) DRV:64bit: - [2007.04.10 03:17:00 \| 000,252,712 \| ---- \| M] (Creative Technology Ltd.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\CT20XUT.DLL -- (CT20XUT.DLL) DRV:64bit: - [2007.04.10 03:16:20 \| 001,571,112 \| ---- \| M] (Creative Technology Ltd.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\CTEXFIFX.DLL -- (CTEXFIFX.DLL) DRV:64bit: - [2007.04.10 03:15:44 \| 000,363,304 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\CTEDSPSY.DLL -- (CTEDSPSY.DLL) DRV:64bit: - [2007.04.10 03:15:10 \| 000,190,248 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\CTEDSPIO.DLL -- (CTEDSPIO.DLL) DRV:64bit: - [2007.04.10 03:14:28 \| 000,142,120 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\CTERFXFX.DLL -- (CTERFXFX.DLL) DRV:64bit: - [2007.04.10 03:13:38 \| 000,321,832 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\CTEDSPFX.DLL -- (CTEDSPFX.DLL) DRV:64bit: - [2007.04.10 03:13:08 \| 000,219,432 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\CTEAPSFX.DLL -- (CTEAPSFX.DLL) DRV:64bit: - [2007.04.10 03:12:22 \| 000,681,256 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\CTSBLFX.DLL -- (CTSBLFX.DLL) DRV:64bit: - [2007.04.10 03:11:46 \| 000,700,200 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\CTAUDFX.DLL -- (CTAUDFX.DLL) DRV:64bit: - [2007.02.06 21:19:32 \| 000,022,528 \| ---- \| M] ( ) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\gt680X.sys -- (GT680x) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = google.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = t.msn.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C3 49 75 61 08 E9 CE 01 [binary data] IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>;.local ========== FireFox ========== FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..extensions.enabledAddons: WebSiteRecommendation%40weliketheweb.com:1.1.1 FF - prefs.js..extensions.enabledAddons: ascsurfingprotection%40iobit.com:1.0 FF - prefs.js..extensions.enabledAddons: youtubemp3podcaster%40jeremy.d.gregorio.com:3.1.4 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:27.0 FF - user.js - File not found FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\17.3.0\\npsitesafety.dll () FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\17.3.1.91 [2014.01.20 09:11:37 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 27.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 27.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013.10.26 16:14:40 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Extensions [2014.01.25 13:33:08 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Firefox\Profiles\a408b5gk.default-1382899517588\extensions [2013.12.19 18:35:00 \| 000,000,000 \| ---D \| M] (Ads Removal) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Firefox\Profiles\a408b5gk.default-1382899517588\extensions\adsremoval@adsremoval.net [2014.01.20 10:17:22 \| 000,000,000 \| ---D \| M] (Advanced SystemCare Surfing Protection) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Firefox\Profiles\a408b5gk.default-1382899517588\extensions\ascsurfingprotection@iobit.com [2013.11.09 22:21:39 \| 000,000,000 \| ---D \| M] ("Magnet Downloader") -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Firefox\Profiles\a408b5gk.default-1382899517588\extensions\b026053c-c151-481a-a83e-4fb8d5b1b1a4@cb8a450e-83dd-422a-b921-028b1cbf9831.com [2013.12.24 14:08:50 \| 000,000,000 \| ---D \| M] ("WebSite Recommendation") -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Firefox\Profiles\a408b5gk.default-1382899517588\extensions\WebSiteRecommendation@weliketheweb.com [2014.01.24 11:27:35 \| 000,000,000 \| ---D \| M] (Youtube MP3 Podcaster) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Firefox\Profiles\a408b5gk.default-1382899517588\extensions\youtubemp3podcaster@jeremy.d.gregorio.com [2013.11.09 22:21:39 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Firefox\Profiles\a408b5gk.default-1382899517588\extensions\b026053c-c151-481a-a83e-4fb8d5b1b1a4@cb8a450e-83dd-422a-b921-028b1cbf9831.com\extensionData [2013.11.09 22:21:39 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Firefox\Profiles\a408b5gk.default-1382899517588\extensions\b026053c-c151-481a-a83e-4fb8d5b1b1a4@cb8a450e-83dd-422a-b921-028b1cbf9831.com\extensionData\plugins [2013.11.09 22:21:39 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Firefox\Profiles\a408b5gk.default-1382899517588\extensions\b026053c-c151-481a-a83e-4fb8d5b1b1a4@cb8a450e-83dd-422a-b921-028b1cbf9831.com\extensionData\userCode [2013.10.28 09:16:10 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Firefox\Profilesa408b5gk.default-1382899517588\extensions [2013.10.28 09:16:10 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Firefox\Profilesa408b5gk.default-1382899517588\extensions\staged [2014.01.25 04:09:42 \| 000,009,074 \| ---- \| M] () (No name found) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\firefox\profiles\a408b5gk.default-1382899517588\extensions\{b9a19c25-a741-47e5-91a2-0b62bef307ff}.xpi [2014.01.17 13:25:58 \| 000,940,775 \| ---- \| M] () (No name found) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\firefox\profiles\a408b5gk.default-1382899517588\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014.01.17 21:34:21 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions [2014.01.17 21:34:21 \| 000,000,000 \| ---D \| M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} File not found (No name found) -- C:\PROGRAM FILES (X86)\IOBIT APPS TOOLBAR\FF ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}, CHR - homepage: google.com/ CHR - Extension: Google \u0434\u043E\u043A\u0443\u043C\u0435\u043D\u0442\u0438 = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\ CHR - Extension: Google \u0434\u0438\u0441\u043A = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: TV = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\beobeededemalmllhkmnkinmfembdimh\1.0.12_0\ CHR - Extension: YouTube = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\ CHR - Extension: Adblock Plus = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.7.2_0\ CHR - Extension: Linkification = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflchafndefoljnhhholeekfpgmbphaf\1.51_0\ CHR - Extension: Google \u043F\u0440\u0435\u0442\u0440\u0430\u0433\u0430 = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: SimilarWebLite = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnpicgdnjfnbkibnicdnnpkkpklkjkki\2.0.1.0_0\ CHR - Extension: Raindrops(Non-Aero) = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpagcfbbmlebfnkeogkigellbgmfkjfg\1.0.0.2_0\ CHR - Extension: Qualys BrowserCheck for Windows = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejhnkognlohdkpjkjongioociddgoibk\1.9.20.1_0\ CHR - Extension: Photo Zoom for Facebook = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\elioihkkcdgakfbahdoddophfngopipi\1.1312.1.2_0\ CHR - Extension: PowerInbox = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmmgljeemhhajnponhffhpjioiclpmbh\1.13.1.0_0\ CHR - Extension: Facebook One = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\gceeodfjmkoilhaoehbnhofdpobaohnm\1.0.5_0\ CHR - Extension: Facebook One = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\gceeodfjmkoilhaoehbnhofdpobaohnm\1.1_0\ CHR - Extension: Facebook for Chrome = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdalhedleemkkdjddjgfjmcnbpejpapp\6.4.2_0\ CHR - Extension: Ads Removal = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkcefkcdkepgkpbgncjchhbjgoanleod\1.0.0_0\ CHR - Extension: Google Play = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi\3.0_0\ CHR - Extension: FastestFox for Chrome = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmffncokckfccddfenhkhnllmlobdahm\8.0.8_0\ CHR - Extension: F.B. Purity Cleans Up Facebook = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncdlagniojmheiklojdcpdaeepochckl\9.4.0.2_0\ CHR - Extension: F.B. Purity Cleans Up Facebook = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncdlagniojmheiklojdcpdaeepochckl\9.5.2.1_0\ CHR - Extension: F.B. Purity Cleans Up Facebook = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncdlagniojmheiklojdcpdaeepochckl\9.5.3.1_0\ CHR - Extension: F.B. Purity Cleans Up Facebook = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncdlagniojmheiklojdcpdaeepochckl\9.5.3_0\ CHR - Extension: Advanced SystemCare Surfing Protection = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd\1.0.0_0\ CHR - Extension: Advanced SystemCare Surfing Protection = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd\1.0.0_1\ CHR - Extension: \u0414\u043E\u0434\u0430\u0442\u0430\u043A RSS \u043F\u0440\u0435\u0442\u043F\u043B\u0430\u0442\u0430 (\u043E\u0434 Google-\u0430) = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlbjncdgjeocebhnmkbbbdekmmmcbfjd\2.2.3_0\ CHR - Extension: Google \u043D\u043E\u0432\u0447\u0430\u043D\u0438\u043A = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_3\ CHR - Extension: Better Pop Up Blocker = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmpeeekfhbmikbdhlpjbfmnpgcbeggic\2.1.6_0\ CHR - Extension: Gmail = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\ O1 HOSTS File: ([2013.10.20 09:44:46 \| 000,000,000 \| R--- \| M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (RightSurf) - {88be1aa9-6740-461c-9e3e-f35eb8fa741c} - C:\Program Files (x86)\RightSurf\RightSurfbho.dll (RightSurf) O2 - BHO: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\17.3.1.91\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (Advanced SystemCare Browser Protection) - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3 - HKLM\..\Toolbar: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\17.3.1.91\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search) O4:64bit: - HKLM..\Run: [ACPW07EN] C:\Program Files\ACD Systems\ACDSee Pro\7.0\acdIDInTouch2.exe (ACD Systems) O4:64bit: - HKLM..\Run: [Acronis Scheduler2 Service] C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe (Acronis) O4:64bit: - HKLM..\Run: [AsioReg] C:\Windows\SysWOW64\ctasio.dll (Creative Technology Ltd) O4 - HKLM..\Run: [AcronisTibMounterMonitor] C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe (Acronis) O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [AsioThk32Reg] C:\Windows\SysWow64\ctasio.dll (Creative Technology Ltd) O4 - HKLM..\Run: [CTHelper] C:\Windows\SysWow64\CtHelper.exe (Creative Technology Ltd) O4 - HKLM..\Run: [CTxfiHlp] C:\Windows\SysWow64\Ctxfihlp.exe (Creative Technology Ltd) O4 - HKLM..\Run: [TrueImageMonitor.exe] C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis) O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe () O4 - HKCU..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd) O4 - HKCU..\Run: [IncrediMail] C:\Program Files (x86)\IncrediMail\bin\IncMail.exe (IncrediMail, Ltd.) O4 - HKCU..\Run: [MCShield Monitor] C:\Program Files (x86)\MCShield\mcshieldrtm.exe (MyCity) O4 - HKCU..\Run: [Memory Cleaner] C:\Users\Dragoljub\AppData\Roaming\KoshyJohn.com\MemClean\MemClean.exe (KoshyJohn.com) O4 - HKCU..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe File not found O4 - Startup: C:\Users\Dragoljub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk = C:\Program Files (x86)\Trillian\trillian.exe (Cerulean Studios) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: verbosestatus = 1 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - Reg Error: Key error. File not found O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BC59499D-5727-4307-9B41-AC05AF9ADBDE}: NameServer = 213.244.255.2,77.105.0.18,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 O18:64bit: - Protocol\Handler\ms-help - No CLSID value found O18:64bit: - Protocol\Handler\skype4com - No CLSID value found O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) O18:64bit: - Protocol\Handler\viprotocol - No CLSID value found O18:64bit: - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.3.0\ViProtocol.dll (AVG Secure Search) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O27:64bit: - HKLM IFEO\microsoft.windowslive.platform.server: Debugger - C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) O27 - HKLM IFEO\microsoft.windowslive.platform.server: Debugger - C:\Windows\SysWow64\rundll32.exe (Microsoft Corporation) O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2013.10.20 09:27:21 \| 000,000,000 \| ---- \| M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2010.03.12 00:06:33 \| 000,000,000 \| ---D \| M] - D:\AUTOBUSI TONSKI -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk ) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2014.01.25 15:45:57 \| 000,602,112 \| ---- \| C] (OldTimer Tools) -- C:\Users\Dragoljub\Desktop\OTL.exe [2014.01.25 13:33:18 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\JDownloader [2014.01.25 13:32:50 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\RightSurf [2014.01.25 13:25:51 \| 000,081,488 \| ---- \| C] (AppWork UG (haftungsbeschränkt)) -- C:\Users\Dragoljub\Desktop\WebInstaller.exe [2014.01.25 13:24:18 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\Desktop\Wifi Key Finder v1.1.0 Final [2014.01.25 11:52:11 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\TeamViewer [2014.01.25 11:20:15 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\TeamViewer [2014.01.23 18:15:17 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\Desktop\ednevnik [2014.01.23 14:14:55 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes [2014.01.23 14:14:19 \| 000,000,000 \| ---D \| C] -- C:\Program Files\iTunes [2014.01.23 14:14:19 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\iTunes [2014.01.23 14:14:19 \| 000,000,000 \| ---D \| C] -- C:\Program Files\iPod [2014.01.23 14:14:19 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 [2014.01.21 13:39:32 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\Desktop\BABA KOCA [2014.01.20 09:15:30 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit SmartDefrag [2014.01.20 09:11:45 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Local\AVG SafeGuard toolbar [2014.01.20 09:11:34 \| 000,046,368 \| ---- \| C] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys [2014.01.20 09:11:31 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Common Files\AVG Secure Search [2014.01.20 09:11:30 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\AVG SafeGuard toolbar [2014.01.20 09:11:30 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\AVG SafeGuard toolbar [2014.01.19 19:03:53 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Common Files\Java [2014.01.19 19:03:50 \| 000,264,616 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe [2014.01.19 19:03:48 \| 000,175,016 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe [2014.01.19 19:03:48 \| 000,174,504 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe [2014.01.19 19:03:48 \| 000,096,168 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2014.01.19 19:03:48 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java [2014.01.19 18:55:39 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\qualys [2014.01.17 21:34:21 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Mozilla Firefox [2014.01.17 19:41:43 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\SyncFolder [2014.01.16 22:04:21 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Local\cache [2014.01.16 13:05:28 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\Desktop\dk [2014.01.15 10:38:55 \| 000,693,240 \| ---- \| C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2014.01.15 10:38:55 \| 000,105,464 \| ---- \| C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2014.01.15 10:21:41 \| 003,395,920 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\WSService.dll [2014.01.15 10:21:41 \| 000,848,384 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\WSShared.dll [2014.01.15 10:21:41 \| 000,695,808 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSShared.dll [2014.01.15 10:21:40 \| 000,206,336 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\WSClient.dll [2014.01.15 10:21:40 \| 000,174,592 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSClient.dll [2014.01.15 10:21:40 \| 000,084,480 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\WSCollect.exe [2014.01.15 10:21:39 \| 000,249,856 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.ApplicationModel.Store.TestingFramework.dll [2014.01.15 10:21:39 \| 000,189,952 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll [2014.01.15 10:21:30 \| 000,787,968 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\uDWM.dll [2014.01.14 13:46:48 \| 000,033,240 \| ---- \| C] (GEAR Software Inc.) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys [2014.01.14 13:46:48 \| 000,000,000 \| ---D \| C] -- C:\Windows\SysNative\DRVSTORE [2014.01.14 13:46:07 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Apple Computer [2014.01.14 13:45:05 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Local\Apple [2014.01.14 13:45:03 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Apple Software Update [2014.01.14 13:44:52 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Common Files\Apple [2014.01.14 13:44:37 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Bonjour [2014.01.14 13:44:37 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Bonjour [2014.01.14 13:44:30 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Apple [2014.01.14 13:44:30 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Common Files\Apple [2014.01.11 22:28:19 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\Trillian [2014.01.11 22:27:50 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Trillian [2014.01.11 17:50:47 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\SureThing Disc Labeler 6 [2014.01.05 08:09:37 \| 000,034,080 \| ---- \| C] (IObit) -- C:\Windows\SysNative\SmartDefragBootTime.exe [2014.01.02 16:39:21 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\Documents\ACDSee Video Converter Pro 4.0 [2014.01.02 16:18:39 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\Documents\TMPGEnc [2014.01.02 16:12:34 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\Pegasys Inc [2014.01.02 16:10:51 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TMPGEnc [2014.01.02 16:10:44 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Pegasys Inc [2014.01.02 11:35:45 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Local\Apple Computer [2014.01.02 11:21:39 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime [2014.01.02 11:21:26 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\QuickTime [2014.01.02 01:04:07 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\LEAPS [2014.01.02 01:04:02 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\Documents\TMPGEnc Authoring Works 4 [2014.01.01 19:45:34 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\avidemux [2014.01.01 18:17:35 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP3 [2014.01.01 17:30:35 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\AVS4YOU [2014.01.01 17:29:09 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU [2014.01.01 17:28:52 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU [2014.01.01 17:28:27 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Common Files\AVSMedia [2014.01.01 17:27:54 \| 000,024,576 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3a.dll [2014.01.01 17:27:54 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\AVS4YOU [2014.01.01 17:27:54 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\AVS4YOU [2013.12.31 19:24:36 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KoshyJohn.com [2013.12.31 19:24:35 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\KoshyJohn.com [2013.12.30 12:17:42 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Local\Sony [2013.12.29 22:16:10 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Common Files\ACD Systems [2013.12.29 22:16:10 \| 000,000,000 \| ---D \| C] -- C:\Program Files\ACD Systems [2013.12.29 10:09:07 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\Desktop\CARIBRODSKI ORKESTAR FIN [2013.12.28 23:27:31 \| 000,000,000 \| ---D \| C] -- C:\Windows\en [2013.12.28 23:27:01 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition [2013.12.28 23:26:17 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Windows Live [2013.12.28 23:26:08 \| 000,518,488 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_7.dll [2013.12.28 23:26:08 \| 000,077,656 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_5.dll [2013.12.28 23:26:08 \| 000,074,072 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_5.dll [2013.12.28 23:26:07 \| 002,526,056 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_43.dll [2013.12.28 23:26:07 \| 002,106,216 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_43.dll [2013.12.28 23:26:07 \| 000,527,192 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_7.dll [2013.12.28 23:26:07 \| 000,276,832 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_43.dll [2013.12.28 23:26:07 \| 000,248,672 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_43.dll [2013.12.28 23:25:58 \| 000,523,088 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_42.dll [2013.12.28 23:25:58 \| 000,453,456 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_42.dll [2013.12.28 23:25:45 \| 004,398,360 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_32.dll [2013.12.28 23:25:45 \| 003,426,072 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_32.dll [2013.12.28 23:25:00 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Local\Windows Live [2013.12.28 23:24:44 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Common Files\Windows Live [2013.12.28 18:56:39 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Common Files\InstallShield [2013.12.28 18:54:46 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ultrafunk [2013.12.28 18:54:46 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultrafunk [2013.12.28 18:48:35 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Waves [2013.12.28 18:48:35 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Waves [2013.12.28 18:48:34 \| 000,000,000 \| ---D \| C] -- C:\audio ========== Files - Modified Within 30 Days ========== [2014.01.25 15:46:02 \| 000,602,112 \| ---- \| M] (OldTimer Tools) -- C:\Users\Dragoljub\Desktop\OTL.exe [2014.01.25 15:42:36 \| 000,002,207 \| ---- \| M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2014.01.25 15:42:33 \| 000,000,916 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2014.01.25 15:40:41 \| 000,000,430 \| ---- \| M] () -- C:\Windows\tasks\AutoSmartDefrag.job [2014.01.25 15:40:06 \| 000,000,290 \| ---- \| M] () -- C:\Windows\tasks\AutoKMS.job [2014.01.25 15:39:54 \| 268,435,456 \| -HS- \| M] () -- C:\swapfile.sys [2014.01.25 15:39:52 \| 3435,229,184 \| -HS- \| M] () -- C:\hiberfil.sys [2014.01.25 15:38:14 \| 000,863,592 \| ---- \| M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2014.01.25 15:38:14 \| 000,730,408 \| ---- \| M] () -- C:\Windows\SysNative\perfh009.dat [2014.01.25 15:38:14 \| 000,135,520 \| ---- \| M] () -- C:\Windows\SysNative\perfc009.dat [2014.01.25 15:00:19 \| 000,000,920 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2014.01.25 14:57:00 \| 000,000,830 \| ---- \| M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2014.01.25 13:34:10 \| 000,002,065 \| ---- \| M] () -- C:\Users\Dragoljub\Desktop\JDownloader.lnk [2014.01.25 13:34:10 \| 000,002,029 \| ---- \| M] () -- C:\Users\Dragoljub\Application Data\Microsoft\Internet Explorer\Quick Launch\JDownloader.lnk [2014.01.25 13:25:56 \| 000,081,488 \| ---- \| M] (AppWork UG (haftungsbeschränkt)) -- C:\Users\Dragoljub\Desktop\WebInstaller.exe [2014.01.25 12:17:24 \| 004,081,736 \| ---- \| M] () -- C:\Users\Dragoljub\Desktop\Wifi_Key_Finder_v1.1.0_Final.rar [2014.01.25 11:20:20 \| 000,001,186 \| ---- \| M] () -- C:\Users\Public\Desktop\TeamViewer 9.lnk [2014.01.23 14:14:55 \| 000,001,795 \| ---- \| M] () -- C:\Users\Public\Desktop\iTunes.lnk [2014.01.22 12:38:41 \| 000,063,137 \| -H-- \| M] () -- C:\Users\Dragoljub\Desktop\mvstcdxx.lst [2014.01.20 09:15:30 \| 000,001,163 \| ---- \| M] () -- C:\Users\Dragoljub\Desktop\IObit SmartDefrag.lnk [2014.01.20 09:11:37 \| 000,003,747 \| ---- \| M] () -- C:\Program Files (x86)\Mozilla Firefoxsafeguard-secure-search.xml [2014.01.20 09:11:23 \| 000,046,368 \| ---- \| M] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys [2014.01.19 19:03:44 \| 000,096,168 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2014.01.19 19:03:43 \| 000,264,616 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe [2014.01.19 19:03:43 \| 000,175,016 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe [2014.01.19 19:03:42 \| 000,174,504 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe [2014.01.19 10:53:57 \| 000,001,054 \| RHS- \| M] () -- C:\Users\Dragoljub\ntuser.pol [2014.01.17 19:38:56 \| 000,001,444 \| ---- \| M] () -- C:\Users\Dragoljub\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [2014.01.12 21:40:31 \| 000,065,891 \| ---- \| M] () -- C:\Users\Dragoljub\Desktop\Clip_2.jpg [2014.01.12 18:45:40 \| 000,047,863 \| ---- \| M] () -- C:\Users\Dragoljub\Desktop\1011665_10202053709377671_1021530114_n.jpg [2014.01.11 22:28:19 \| 000,001,095 \| ---- \| M] () -- C:\Users\Dragoljub\Desktop\Trillian.lnk [2014.01.11 22:28:19 \| 000,001,059 \| ---- \| M] () -- C:\Users\Dragoljub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk [2014.01.11 17:52:43 \| 000,001,127 \| ---- \| M] () -- C:\Users\Public\Desktop\SureThing Disc Labeler Gold 6.lnk [2014.01.10 11:52:35 \| 000,062,758 \| ---- \| M] () -- C:\Users\Dragoljub\dsp_stereo_tool.ini [2014.01.06 23:31:05 \| 000,693,240 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2014.01.06 23:31:05 \| 000,105,464 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2014.01.02 16:10:51 \| 000,002,097 \| ---- \| M] () -- C:\Users\Public\Desktop\TMPGEnc 4.0 XPress.lnk [2014.01.02 11:21:39 \| 000,001,863 \| ---- \| M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2014.01.01 18:17:35 \| 000,000,921 \| ---- \| M] () -- C:\Users\Public\Desktop\AIMP3.lnk [2014.01.01 17:28:53 \| 000,001,273 \| ---- \| M] () -- C:\Users\Dragoljub\Desktop\AVS Video Converter.lnk [2013.12.31 19:24:38 \| 000,002,022 \| ---- \| M] () -- C:\Users\Dragoljub\Desktop\Memory Cleaner.lnk [2013.12.30 16:40:53 \| 000,246,090 \| ---- \| M] () -- C:\Users\Dragoljub\Desktop\m1p0108.pdf [2013.12.30 12:20:21 \| 000,002,608 \| ---- \| M] () -- C:\Users\Dragoljub\Documents\Register Sound Forge Pro.htm [2013.12.30 12:18:09 \| 000,001,148 \| ---- \| M] () -- C:\Users\Public\Desktop\Sound Forge Pro 10.0.lnk [2013.12.29 22:16:18 \| 000,002,237 \| ---- \| M] () -- C:\Users\Public\Desktop\ACDSee Pro 7 (64-bit).lnk [2013.12.29 21:29:16 \| 000,067,584 \| --S- \| M] () -- C:\Windows\bootstat.dat [2013.12.29 21:29:16 \| 000,002,244 \| ---- \| M] () -- C:\Windows\SysNative\ASOROSet.bin [2013.12.28 15:47:39 \| 000,001,431 \| ---- \| M] () -- C:\Users\Dragoljub\Desktop\Tu - prečica.lnk ========== Files Created - No Company Name ========== [2014.01.25 13:34:10 \| 000,002,065 \| ---- \| C] () -- C:\Users\Dragoljub\Desktop\JDownloader.lnk [2014.01.25 13:34:10 \| 000,002,029 \| ---- \| C] () -- C:\Users\Dragoljub\Application Data\Microsoft\Internet Explorer\Quick Launch\JDownloader.lnk [2014.01.25 13:34:02 \| 000,002,029 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader.lnk [2014.01.25 13:34:02 \| 000,001,965 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Uninstaller.lnk [2014.01.25 13:34:02 \| 000,001,942 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk [2014.01.25 12:16:03 \| 004,081,736 \| ---- \| C] () -- C:\Users\Dragoljub\Desktop\Wifi_Key_Finder_v1.1.0_Final.rar [2014.01.25 11:20:20 \| 000,001,198 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk [2014.01.25 11:20:20 \| 000,001,186 \| ---- \| C] () -- C:\Users\Public\Desktop\TeamViewer 9.lnk [2014.01.23 14:14:55 \| 000,001,795 \| ---- \| C] () -- C:\Users\Public\Desktop\iTunes.lnk [2014.01.22 12:38:41 \| 000,063,137 \| -H-- \| C] () -- C:\Users\Dragoljub\Desktop\mvstcdxx.lst [2014.01.20 09:15:47 \| 000,000,430 \| ---- \| C] () -- C:\Windows\tasks\AutoSmartDefrag.job [2014.01.20 09:15:30 \| 000,001,163 \| ---- \| C] () -- C:\Users\Dragoljub\Desktop\IObit SmartDefrag.lnk [2014.01.20 09:11:28 \| 000,003,747 \| ---- \| C] () -- C:\Program Files (x86)\Mozilla Firefoxsafeguard-secure-search.xml [2014.01.19 10:53:57 \| 000,001,054 \| RHS- \| C] () -- C:\Users\Dragoljub\ntuser.pol [2014.01.19 10:19:16 \| 000,002,487 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk [2014.01.17 19:38:56 \| 000,001,450 \| ---- \| C] () -- C:\Users\Dragoljub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk [2014.01.17 19:38:56 \| 000,001,444 \| ---- \| C] () -- C:\Users\Dragoljub\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [2014.01.15 10:21:40 \| 000,138,240 \| ---- \| C] () -- C:\Windows\SysNative\OEMLicense.dll [2014.01.15 10:21:40 \| 000,103,936 \| ---- \| C] () -- C:\Windows\SysWow64\OEMLicense.dll [2014.01.14 13:45:04 \| 000,002,579 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk [2014.01.12 21:40:05 \| 000,065,891 \| ---- \| C] () -- C:\Users\Dragoljub\Desktop\Clip_2.jpg [2014.01.12 18:45:32 \| 000,047,863 \| ---- \| C] () -- C:\Users\Dragoljub\Desktop\1011665_10202053709377671_1021530114_n.jpg [2014.01.11 22:28:19 \| 000,001,125 \| ---- \| C] () -- C:\Users\Dragoljub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trillian.lnk [2014.01.11 22:28:19 \| 000,001,095 \| ---- \| C] () -- C:\Users\Dragoljub\Desktop\Trillian.lnk [2014.01.11 22:28:19 \| 000,001,059 \| ---- \| C] () -- C:\Users\Dragoljub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk [2014.01.11 17:52:43 \| 000,001,127 \| ---- \| C] () -- C:\Users\Public\Desktop\SureThing Disc Labeler Gold 6.lnk [2014.01.10 11:52:35 \| 000,062,758 \| ---- \| C] () -- C:\Users\Dragoljub\dsp_stereo_tool.ini [2014.01.02 16:10:51 \| 000,002,097 \| ---- \| C] () -- C:\Users\Public\Desktop\TMPGEnc 4.0 XPress.lnk [2014.01.02 11:21:39 \| 000,001,863 \| ---- \| C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2014.01.01 18:17:35 \| 000,000,921 \| ---- \| C] () -- C:\Users\Public\Desktop\AIMP3.lnk [2014.01.01 17:28:53 \| 000,001,273 \| ---- \| C] () -- C:\Users\Dragoljub\Desktop\AVS Video Converter.lnk [2013.12.31 19:24:38 \| 000,002,022 \| ---- \| C] () -- C:\Users\Dragoljub\Desktop\Memory Cleaner.lnk [2013.12.30 16:40:51 \| 000,246,090 \| ---- \| C] () -- C:\Users\Dragoljub\Desktop\m1p0108.pdf [2013.12.30 12:18:09 \| 000,001,148 \| ---- \| C] () -- C:\Users\Public\Desktop\Sound Forge Pro 10.0.lnk [2013.12.29 22:16:18 \| 000,002,237 \| ---- \| C] () -- C:\Users\Public\Desktop\ACDSee Pro 7 (64-bit).lnk [2013.12.28 23:27:19 \| 000,001,331 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk [2013.12.28 23:27:12 \| 000,001,404 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk [2013.12.28 18:54:46 \| 000,129,024 \| ---- \| C] () -- C:\Windows\UNWISE.EXE [2013.12.28 15:47:39 \| 000,001,431 \| ---- \| C] () -- C:\Users\Dragoljub\Desktop\Tu - prečica.lnk [2013.12.28 15:46:35 \| 000,000,871 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Uninstall 6.lnk [2013.12.21 18:39:01 \| 000,048,295 \| ---- \| C] () -- C:\Users\Dragoljub\Clip.jpg [2013.10.21 18:05:12 \| 000,216,064 \| ---- \| C] () -- C:\Windows\SysWow64\gcapi_dll.dll [2013.08.31 03:47:14 \| 000,000,034 \| ---- \| C] () -- C:\Windows\cdplayer.ini [2013.08.30 01:27:22 \| 000,040,960 \| R--- \| C] () -- C:\Windows\SysWow64\ForgiveMe.exe [2013.08.30 01:27:22 \| 000,000,059 \| R--- \| C] () -- C:\Windows\SysWow64\MKScannerSetting.ini [2013.08.22 16:36:43 \| 000,215,943 \| ---- \| C] () -- C:\Windows\SysWow64\dssec.dat [2013.08.22 16:36:42 \| 000,000,741 \| ---- \| C] () -- C:\Windows\SysWow64\NOISE.DAT [2013.08.22 15:46:23 \| 000,067,584 \| --S- \| C] () -- C:\Windows\bootstat.dat [2013.08.22 08:01:23 \| 000,043,131 \| ---- \| C] () -- C:\Windows\mib.bin [2013.08.22 04:32:36 \| 000,046,080 \| ---- \| C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2013.08.22 00:55:20 \| 000,364,544 \| ---- \| C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2013.08.22 00:52:39 \| 000,673,088 \| ---- \| C] () -- C:\Windows\SysWow64\mlang.dat ========== ZeroAccess Check ========== [2013.10.23 10:54:50 \| 000,000,227 \| RHS- \| M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2013.11.05 21:21:27 \| 021,196,664 \| ---- \| M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2013.11.05 19:51:37 \| 018,642,504 \| ---- \| M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2013.08.22 10:49:49 \| 000,921,088 \| ---- \| M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2013.08.22 03:45:10 \| 000,691,712 \| ---- \| M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2013.08.22 10:45:17 \| 000,483,840 \| ---- \| M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] ========== Files - Unicode (All) ========== [2013.12.11 17:42:22 \| 000,000,162 \| -H-- \| M] ()(C:\Users\Dragoljub\Desktop\~$.12.2013. ???? ??????.doc) -- C:\Users\Dragoljub\Desktop\~$.12.2013. БЛИЦ НОВИНИ.doc [2013.12.11 17:42:22 \| 000,000,162 \| -H-- \| C] ()(C:\Users\Dragoljub\Desktop\~$.12.2013. ???? ??????.doc) -- C:\Users\Dragoljub\Desktop\~$.12.2013. БЛИЦ НОВИНИ.doc [2013.10.15 13:11:49 \| 000,000,162 \| -H-- \| M] ()(C:\Users\Dragoljub\Desktop\~$.10.2013. ??????.doc) -- C:\Users\Dragoljub\Desktop\~$.10.2013. новини.doc [2013.10.15 13:11:49 \| 000,000,162 \| -H-- \| C] ()(C:\Users\Dragoljub\Desktop\~$.10.2013. ??????.doc) -- C:\Users\Dragoljub\Desktop\~$.10.2013. новини.doc ========== Alternate Data Streams ========== @Alternate Data Stream - 327 bytes -> C:\ProgramData\TEMP:C0B0C592 @Alternate Data Stream - 165 bytes -> C:\ProgramData\TEMP:BF3D62E7 @Alternate Data Stream - 158 bytes -> C:\Users\Dragoljub\SkyDrive:ms-properties @Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:A7D26093 @Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:373E1720 < End of report >

Profil

Sass Drake Poslao: 25 Jan 2014 16:12 Idi na vrh
offline Sass Drake Anti Malware Fighter Rank 2 Pridružio: 26 Avg 2010 Poruke: 10622 Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Idi u Control Panel -> Programs and Features i deinstaliraj RightSurf. Zatim, otvori Google Chrome i idi na sljedeću adresu: chrome://extensions i obriši sljedeću ekstenziju: SimilarWebLite Kada ovo gore obaviš postavi mi novi OTL izvještaj.

Profil

popaj 2 Poslao: 25 Jan 2014 16:26 Idi na vrh
offline popaj 2 Novi MyCity građanin Pridružio: 27 Okt 2013 Poruke: 15	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Evo novog izvestaja OTL logfile created on: 25.1.2014. 16:18:46 - Run 2 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Dragoljub\Desktop 64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.16476) Locale: 0000241A \| Country: Serbia \| Language: SRM \| Date Format: d.M.yyyy. 4,00 Gb Total Physical Memory \| 2,37 Gb Available Physical Memory \| 59,31% Memory free 5,62 Gb Paging File \| 3,37 Gb Available in Paging File \| 59,92% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: \| %SystemRoot% = C:\Windows \| %ProgramFiles% = C:\Program Files (x86) Drive C: \| 58,50 Gb Total Space \| 20,92 Gb Free Space \| 35,76% Space Free \| Partition Type: NTFS Drive D: \| 122,30 Gb Total Space \| 60,31 Gb Free Space \| 49,32% Space Free \| Partition Type: NTFS Drive E: \| 419,57 Gb Total Space \| 208,58 Gb Free Space \| 49,71% Space Free \| Partition Type: NTFS Drive F: \| 19,88 Gb Total Space \| 12,68 Gb Free Space \| 63,78% Space Free \| Partition Type: NTFS Drive G: \| 391,84 Gb Total Space \| 227,37 Gb Free Space \| 58,03% Space Free \| Partition Type: NTFS Drive H: \| 117,18 Gb Total Space \| 116,63 Gb Free Space \| 99,53% Space Free \| Partition Type: NTFS Drive J: \| 45,99 Gb Total Space \| 30,25 Gb Free Space \| 65,78% Space Free \| Partition Type: NTFS Computer Name: PEJCEVI \| User Name: Dragoljub \| Logged in as Administrator. Boot Mode: Normal \| Scan Mode: Current user \| Include 64bit Scans Company Name Whitelist: Off \| Skip Microsoft Files: Off \| No Company Name Whitelist: On \| File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2014.01.25 15:46:02 \| 000,602,112 \| ---- \| M] (OldTimer Tools) -- C:\Users\Dragoljub\Desktop\OTL.exe PRC - [2014.01.20 22:24:18 \| 000,650,816 \| ---- \| M] (MyCity) -- C:\Program Files (x86)\MCShield\MCShieldRTM.exe PRC - [2014.01.20 09:11:22 \| 002,534,936 \| ---- \| M] () -- C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe PRC - [2014.01.20 09:11:21 \| 001,772,056 \| ---- \| M] (AVG Secure Search) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe PRC - [2014.01.20 09:11:21 \| 000,159,768 \| ---- \| M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\loggingserver.exe PRC - [2014.01.11 11:29:23 \| 000,866,584 \| ---- \| M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe PRC - [2014.01.06 00:00:00 \| 002,622,832 \| ---- \| M] (Cerulean Studios) -- C:\Program Files (x86)\Trillian\trillian.exe PRC - [2013.12.21 07:04:16 \| 000,065,432 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2013.12.17 11:38:33 \| 005,341,536 \| ---- \| M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe PRC - [2013.12.17 11:38:32 \| 013,543,264 \| ---- \| M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe PRC - [2013.12.17 11:22:10 \| 000,199,520 \| ---- \| M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe PRC - [2013.10.09 09:58:16 \| 003,275,136 \| ---- \| M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe PRC - [2013.09.08 09:15:04 \| 003,873,784 \| ---- \| M] (Acronis) -- C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe PRC - [2013.08.30 07:46:41 \| 000,444,840 \| ---- \| M] (IncrediMail, Ltd.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe PRC - [2013.08.30 07:46:41 \| 000,297,384 \| ---- \| M] (IncrediMail, Ltd.) -- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe PRC - [2013.08.27 22:15:38 \| 002,155,296 \| ---- \| M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe PRC - [2013.08.21 15:30:42 \| 009,735,112 \| ---- \| M] (Acronis) -- C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe PRC - [2013.07.08 18:42:48 \| 001,922,600 \| ---- \| M] (Pandora.TV) -- C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe PRC - [2013.07.08 18:42:38 \| 001,798,696 \| ---- \| M] (PandoraTV) -- C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe PRC - [2013.04.04 13:50:32 \| 000,418,376 \| ---- \| M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe PRC - [2013.02.03 10:43:06 \| 000,791,560 \| ---- \| M] (KoshyJohn.com) -- C:\Users\Dragoljub\AppData\Roaming\KoshyJohn.com\MemClean\MemClean.exe PRC - [2007.07.27 21:39:26 \| 003,647,656 \| ---- \| M] () -- C:\Program Files (x86)\IObit\IObit SmartDefrag\IObit SmartDefrag.exe ========== Modules (No Company Name) ========== MOD - [2014.01.20 09:11:22 \| 002,534,936 \| ---- \| M] () -- C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe MOD - [2014.01.20 09:11:22 \| 000,519,704 \| ---- \| M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\log4cplusU.dll MOD - [2014.01.11 11:29:21 \| 000,399,640 \| ---- \| M] () -- C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\ppGoogleNaClPluginChrome.dll MOD - [2014.01.11 11:29:19 \| 013,615,896 \| ---- \| M] () -- C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\PepperFlash\pepflashplayer.dll MOD - [2014.01.11 11:29:17 \| 004,055,320 \| ---- \| M] () -- C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\pdf.dll MOD - [2014.01.11 11:28:15 \| 000,715,544 \| ---- \| M] () -- C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\libglesv2.dll MOD - [2014.01.11 11:28:14 \| 000,100,120 \| ---- \| M] () -- C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\libegl.dll MOD - [2014.01.11 11:28:11 \| 001,634,584 \| ---- \| M] () -- C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.76\ffmpegsumo.dll MOD - [2014.01.06 00:00:00 \| 000,187,392 \| ---- \| M] () -- C:\Program Files (x86)\Trillian\libpng15.dll MOD - [2014.01.06 00:00:00 \| 000,065,536 \| ---- \| M] () -- C:\Program Files (x86)\Trillian\libungif.dll MOD - [2014.01.06 00:00:00 \| 000,059,904 \| ---- \| M] () -- C:\Program Files (x86)\Trillian\zlib1.dll MOD - [2014.01.06 00:00:00 \| 000,010,752 \| ---- \| M] () -- c:\program files (x86)\trillian\languages\en\buddy.dll MOD - [2014.01.06 00:00:00 \| 000,007,168 \| ---- \| M] () -- c:\program files (x86)\trillian\languages\en\talk.dll MOD - [2014.01.06 00:00:00 \| 000,006,656 \| ---- \| M] () -- c:\program files (x86)\trillian\languages\en\trillian.dll MOD - [2014.01.06 00:00:00 \| 000,006,656 \| ---- \| M] () -- c:\program files (x86)\trillian\languages\en\events.dll MOD - [2014.01.06 00:00:00 \| 000,003,584 \| ---- \| M] () -- c:\program files (x86)\trillian\languages\en\toolkit.dll MOD - [2013.08.30 07:46:45 \| 000,108,888 \| ---- \| M] () -- C:\Program Files (x86)\IncrediMail\Bin\pmc.dll MOD - [2013.08.30 07:46:45 \| 000,072,104 \| ---- \| M] () -- C:\Program Files (x86)\IncrediMail\Bin\wlessfp1.dll MOD - [2013.08.30 07:46:43 \| 000,272,808 \| ---- \| M] () -- C:\Program Files (x86)\IncrediMail\Bin\ImLookExU.dll MOD - [2013.08.30 07:46:42 \| 000,133,544 \| ---- \| M] () -- C:\Program Files (x86)\IncrediMail\Bin\ImComUtlU.dll MOD - [2013.08.30 07:46:42 \| 000,080,296 \| ---- \| M] () -- C:\Program Files (x86)\IncrediMail\bin\ImAppRU.dll MOD - [2013.08.30 07:46:42 \| 000,033,128 \| ---- \| M] () -- C:\Program Files (x86)\IncrediMail\Bin\IMHttpComm.dll MOD - [2007.07.27 21:39:26 \| 003,647,656 \| ---- \| M] () -- C:\Program Files (x86)\IObit\IObit SmartDefrag\IObit SmartDefrag.exe MOD - [2007.04.28 18:13:56 \| 000,065,536 \| ---- \| M] () -- C:\Program Files (x86)\IObit\IObit SmartDefrag\taskdll.dll MOD - [2007.04.28 13:55:36 \| 000,073,808 \| ---- \| M] () -- C:\Program Files (x86)\IObit\IObit SmartDefrag\workdll.dll ========== Services (SafeList) ========== SRV:64bit: - [2013.11.27 16:36:30 \| 003,395,920 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService) SRV:64bit: - [2013.10.22 02:53:47 \| 001,584,128 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc) SRV:64bit: - [2013.10.19 06:37:49 \| 000,111,616 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService) SRV:64bit: - [2013.10.10 11:40:53 \| 001,302,528 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc) SRV:64bit: - [2013.10.04 09:10:59 \| 000,533,504 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness) SRV:64bit: - [2013.09.21 06:38:15 \| 000,365,568 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc) SRV:64bit: - [2013.09.21 06:36:18 \| 000,261,120 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure) SRV:64bit: - [2013.09.21 06:34:45 \| 001,555,456 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc) SRV:64bit: - [2013.08.31 11:00:10 \| 000,491,520 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\GeofenceMonitorService.dll -- (lfsvc) SRV:64bit: - [2013.08.27 22:17:13 \| 014,997,280 \| ---- \| M] (NVIDIA Corporation) [Auto \| Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe -- (NvStreamSvc) SRV:64bit: - [2013.08.22 20:11:18 \| 000,183,296 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:64bit: - [2013.08.22 20:11:17 \| 000,090,464 \| ---- \| M] (Microsoft Corporation) [Disabled \| Stopped] -- C:\Windows\SysNative\KeyboardFilterSvc.dll -- (MsKeyboardFilter) SRV:64bit: - [2013.08.22 13:32:01 \| 000,346,872 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Running] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc) SRV:64bit: - [2013.08.22 13:32:00 \| 000,023,840 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend) SRV:64bit: - [2013.08.22 13:31:56 \| 002,899,968 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV:64bit: - [2013.08.22 12:32:02 \| 000,024,576 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC) SRV:64bit: - [2013.08.22 12:31:43 \| 000,040,448 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS) SRV:64bit: - [2013.08.22 12:22:45 \| 000,066,048 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc) SRV:64bit: - [2013.08.22 12:21:15 \| 000,013,312 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc) SRV:64bit: - [2013.08.22 12:16:57 \| 000,118,272 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc) SRV:64bit: - [2013.08.22 11:25:28 \| 000,164,352 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc) SRV:64bit: - [2013.08.22 11:19:28 \| 000,517,120 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss) SRV:64bit: - [2013.08.22 11:19:28 \| 000,517,120 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync) SRV:64bit: - [2013.08.22 11:19:28 \| 000,517,120 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown) SRV:64bit: - [2013.08.22 11:19:28 \| 000,517,120 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv) SRV:64bit: - [2013.08.22 11:19:28 \| 000,517,120 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange) SRV:64bit: - [2013.08.22 11:19:28 \| 000,517,120 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat) SRV:64bit: - [2013.08.22 11:19:28 \| 000,517,120 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface) SRV:64bit: - [2013.08.22 11:04:53 \| 000,716,288 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Windows\SysNative\lsm.dll -- (LSM) SRV:64bit: - [2013.08.22 11:02:47 \| 000,013,312 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost) SRV:64bit: - [2013.08.22 10:59:26 \| 000,832,512 \| ---- \| M] (Microsoft Corporation) [Disabled \| Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon) SRV:64bit: - [2013.08.22 10:58:42 \| 000,280,576 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker) SRV:64bit: - [2013.08.22 10:57:25 \| 000,130,560 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum) SRV:64bit: - [2013.08.22 10:54:59 \| 000,059,392 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso) SRV:64bit: - [2013.08.22 10:50:59 \| 000,245,760 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker) SRV:64bit: - [2013.08.22 10:50:00 \| 000,525,312 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm) SRV:64bit: - [2013.08.22 10:45:59 \| 000,151,040 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService) SRV:64bit: - [2013.08.22 10:40:49 \| 000,248,832 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Running] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc) SRV:64bit: - [2013.08.22 10:40:14 \| 000,398,848 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService) SRV:64bit: - [2013.08.22 10:39:33 \| 000,198,656 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder) SRV:64bit: - [2013.08.22 10:31:03 \| 000,201,728 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc) SRV:64bit: - [2013.08.22 10:15:54 \| 000,073,728 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup) SRV - [2014.01.25 15:19:09 \| 000,118,896 \| ---- \| M] (Mozilla Foundation) [On_Demand \| Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2014.01.20 09:11:21 \| 001,772,056 \| ---- \| M] (AVG Secure Search) [Auto \| Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe -- (vToolbarUpdater17.3.0) SRV - [2013.12.21 07:04:16 \| 000,065,432 \| ---- \| M] (Adobe Systems Incorporated) [Auto \| Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2013.12.17 11:38:33 \| 005,341,536 \| ---- \| M] (TeamViewer GmbH) [Auto \| Running] -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe -- (TeamViewer9) SRV - [2013.12.10 19:57:28 \| 000,257,416 \| ---- \| M] (Adobe Systems Incorporated) [On_Demand \| Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2013.12.03 16:10:24 \| 002,151,200 \| ---- \| M] (IObit) [Auto \| Stopped] -- C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe -- (LiveUpdateSvc) SRV - [2013.10.09 09:58:16 \| 003,275,136 \| ---- \| M] (Skype Technologies S.A.) [Auto \| Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service) SRV - [2013.09.08 09:15:04 \| 003,873,784 \| ---- \| M] (Acronis) [Auto \| Running] -- C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe -- (afcdpsrv) SRV - [2013.09.05 10:34:30 \| 000,171,680 \| R--- \| M] (Skype Technologies) [Auto \| Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2013.08.31 10:25:30 \| 000,357,376 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysWOW64\GeofenceMonitorService.dll -- (lfsvc) SRV - [2013.08.27 22:15:38 \| 002,155,296 \| ---- \| M] (NVIDIA Corporation) [Auto \| Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService) SRV - [2013.08.22 13:31:56 \| 002,899,968 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify) SRV - [2013.08.22 04:55:35 \| 000,018,944 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc) SRV - [2013.08.22 03:53:34 \| 000,011,776 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost) SRV - [2013.08.21 15:30:42 \| 009,735,112 \| ---- \| M] (Acronis) [Auto \| Running] -- C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe -- (syncagentsrv) SRV - [2013.07.18 10:52:00 \| 001,142,584 \| ---- \| M] (Acronis) [Auto \| Running] -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc) SRV - [2013.07.08 18:42:48 \| 001,922,600 \| ---- \| M] (Pandora.TV) [Auto \| Running] -- C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe -- (PanService) SRV - [2013.04.04 13:50:32 \| 000,701,512 \| ---- \| M] (Malwarebytes Corporation) [Auto \| Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2013.04.04 13:50:32 \| 000,418,376 \| ---- \| M] (Malwarebytes Corporation) [Auto \| Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler) ========== Driver Services (SafeList) ========== DRV:64bit: - [2014.01.20 09:11:23 \| 000,046,368 \| ---- \| M] (AVG Technologies) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp) DRV:64bit: - [2013.10.13 03:48:34 \| 000,136,536 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS) DRV:64bit: - [2013.10.08 12:07:14 \| 000,039,768 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep) DRV:64bit: - [2013.10.05 16:25:54 \| 000,371,032 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport) DRV:64bit: - [2013.10.05 16:25:54 \| 000,057,176 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme) DRV:64bit: - [2013.10.01 15:39:22 \| 000,022,456 \| ---- \| M] (Christian Gulden) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\pimou.sys -- (pimou) DRV:64bit: - [2013.10.01 15:39:20 \| 000,023,480 \| ---- \| M] (Christian Gulden) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\pikbd.sys -- (pikbd) DRV:64bit: - [2013.09.30 16:26:50 \| 000,019,152 \| ---- \| M] () [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\pwdrvio.sys -- (pwdrvio) DRV:64bit: - [2013.09.30 16:26:48 \| 000,012,504 \| ---- \| M] () [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\pwdspio.sys -- (pwdspio) DRV:64bit: - [2013.09.21 13:10:51 \| 000,236,376 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:64bit: - [2013.09.21 12:04:07 \| 000,086,872 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc) DRV:64bit: - [2013.09.17 10:18:30 \| 000,467,800 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3) DRV:64bit: - [2013.09.14 15:06:57 \| 000,175,960 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt) DRV:64bit: - [2013.09.11 13:46:25 \| 000,325,464 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI) DRV:64bit: - [2013.09.08 09:15:05 \| 000,367,200 \| ---- \| M] (Acronis) [File_System \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\afcdp.sys -- (afcdp) DRV:64bit: - [2013.09.08 09:15:02 \| 001,464,096 \| ---- \| M] (Acronis International GmbH) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\tdrpman.sys -- (tdrpman) DRV:64bit: - [2013.09.08 09:15:01 \| 000,183,224 \| ---- \| M] (Acronis) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\tib_mounter.sys -- (tib_mounter) DRV:64bit: - [2013.09.08 09:15:00 \| 001,120,032 \| ---- \| M] (Acronis International GmbH) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\tib.sys -- (tib) DRV:64bit: - [2013.09.08 09:15:00 \| 000,269,600 \| ---- \| M] (Acronis International GmbH) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\snapman.sys -- (snapman) DRV:64bit: - [2013.09.08 09:14:59 \| 000,116,000 \| ---- \| M] (Acronis International GmbH) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\fltsrv.sys -- (fltsrv) DRV:64bit: - [2013.08.22 20:11:19 \| 000,022,272 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\kbldfltr.sys -- (kbldfltr) DRV:64bit: - [2013.08.22 20:11:18 \| 000,027,488 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:64bit: - [2013.08.22 20:11:12 \| 000,220,672 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\Vid.sys -- (Vid) DRV:64bit: - [2013.08.22 20:11:12 \| 000,129,536 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\vmbusr.sys -- (vmbusr) DRV:64bit: - [2013.08.22 20:11:12 \| 000,068,608 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\storvsp.sys -- (storvsp) DRV:64bit: - [2013.08.22 20:11:12 \| 000,065,536 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\vpcivsp.sys -- (vpcivsp) DRV:64bit: - [2013.08.22 20:11:12 \| 000,037,216 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt) DRV:64bit: - [2013.08.22 14:25:40 \| 000,043,008 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv) DRV:64bit: - [2013.08.22 14:25:40 \| 000,030,048 \| ---- \| M] (Microsoft Corporation) [Recognizer \| Boot \| Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:64bit: - [2013.08.22 13:50:19 \| 000,057,696 \| ---- \| M] (Microsoft Corporation) [Kernel \| System \| Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam) DRV:64bit: - [2013.08.22 13:49:54 \| 000,079,712 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex) DRV:64bit: - [2013.08.22 13:49:33 \| 000,159,584 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM) DRV:64bit: - [2013.08.22 13:43:49 \| 000,063,840 \| ---- \| M] (Marvell Semiconductor, Inc.) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis) DRV:64bit: - [2013.08.22 13:43:48 \| 000,146,272 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101) DRV:64bit: - [2013.08.22 13:43:48 \| 000,041,824 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32) DRV:64bit: - [2013.08.22 13:43:45 \| 003,357,024 \| ---- \| M] (Broadcom Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2013.08.22 13:43:45 \| 000,093,536 \| ---- \| M] (LSI Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2013.08.22 13:43:45 \| 000,082,784 \| ---- \| M] (LSI Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS) DRV:64bit: - [2013.08.22 13:43:45 \| 000,064,352 \| ---- \| M] (Hewlett-Packard Company) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2013.08.22 13:43:44 \| 000,081,760 \| ---- \| M] (LSI Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3.sys -- (LSI_SAS3) DRV:64bit: - [2013.08.22 13:43:41 \| 000,782,176 \| ---- \| M] (PMC-Sierra) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX) DRV:64bit: - [2013.08.22 13:43:41 \| 000,531,296 \| ---- \| M] (Broadcom Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2013.08.22 13:43:41 \| 000,259,424 \| ---- \| M] (AMD Technologies Inc.) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2013.08.22 13:43:41 \| 000,108,896 \| ---- \| M] (LSI) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware) DRV:64bit: - [2013.08.22 13:43:41 \| 000,079,200 \| ---- \| M] (Advanced Micro Devices) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2013.08.22 13:43:40 \| 000,114,016 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv) DRV:64bit: - [2013.08.22 13:43:40 \| 000,082,784 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass) DRV:64bit: - [2013.08.22 13:43:40 \| 000,025,952 \| ---- \| M] (Advanced Micro Devices) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2013.08.22 13:43:34 \| 000,305,504 \| ---- \| M] (VIA Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID) DRV:64bit: - [2013.08.22 13:43:33 \| 000,189,792 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\UCX01000.SYS -- (UCX01000) DRV:64bit: - [2013.08.22 13:43:33 \| 000,074,080 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor) DRV:64bit: - [2013.08.22 13:43:32 \| 000,078,688 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor) DRV:64bit: - [2013.08.22 13:43:32 \| 000,031,072 \| ---- \| M] (Promise Technology, Inc.) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2013.08.22 13:43:31 \| 000,146,272 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2) DRV:64bit: - [2013.08.22 13:43:31 \| 000,107,872 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci) DRV:64bit: - [2013.08.22 13:43:31 \| 000,072,032 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx) DRV:64bit: - [2013.08.22 13:43:31 \| 000,069,472 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx) DRV:64bit: - [2013.08.22 13:41:08 \| 000,054,304 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr) DRV:64bit: - [2013.08.22 13:39:44 \| 000,377,696 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS) DRV:64bit: - [2013.08.22 13:39:15 \| 000,924,512 \| ---- \| M] (Microsoft Corporation) [File_System \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\refs.sys -- (ReFS) DRV:64bit: - [2013.08.22 13:39:15 \| 000,026,976 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI) DRV:64bit: - [2013.08.22 13:37:27 \| 000,069,472 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci) DRV:64bit: - [2013.08.22 13:36:12 \| 000,026,976 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr) DRV:64bit: - [2013.08.22 13:34:22 \| 000,265,056 \| ---- \| M] (Microsoft Corporation) [File_System \| Boot \| Running] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter) DRV:64bit: - [2013.08.22 13:34:22 \| 000,124,256 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv) DRV:64bit: - [2013.08.22 13:31:28 \| 000,034,760 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot) DRV:64bit: - [2013.08.22 12:39:54 \| 000,076,800 \| ---- \| M] (Microsoft Corporation) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache) DRV:64bit: - [2013.08.22 12:39:31 \| 000,050,688 \| ---- \| M] (Microsoft Corporation) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay) DRV:64bit: - [2013.08.22 12:39:28 \| 000,033,792 \| ---- \| M] (Microsoft Corporation) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender) DRV:64bit: - [2013.08.22 12:39:20 \| 000,022,016 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo) DRV:64bit: - [2013.08.22 12:39:06 \| 000,009,728 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf) DRV:64bit: - [2013.08.22 12:38:58 \| 000,010,752 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime) DRV:64bit: - [2013.08.22 12:38:48 \| 000,010,240 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr) DRV:64bit: - [2013.08.22 12:38:39 \| 000,036,992 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg) DRV:64bit: - [2013.08.22 12:38:26 \| 000,019,456 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic) DRV:64bit: - [2013.08.22 12:38:23 \| 000,011,264 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter) DRV:64bit: - [2013.08.22 12:38:22 \| 000,023,040 \| ---- \| M] (Microsoft Corporation) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig) DRV:64bit: - [2013.08.22 12:38:16 \| 000,030,720 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid) DRV:64bit: - [2013.08.22 12:37:49 \| 000,013,824 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd) DRV:64bit: - [2013.08.22 12:37:46 \| 000,029,696 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:64bit: - [2013.08.22 12:37:42 \| 000,057,856 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum) DRV:64bit: - [2013.08.22 12:37:28 \| 000,056,320 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2013.08.22 12:37:28 \| 000,041,472 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c) DRV:64bit: - [2013.08.22 12:37:14 \| 000,029,696 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc) DRV:64bit: - [2013.08.22 12:36:43 \| 000,087,040 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\netvsc63.sys -- (netvsc) DRV:64bit: - [2013.08.22 12:36:25 \| 000,016,384 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus) DRV:64bit: - [2013.08.22 12:36:17 \| 000,124,928 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform) DRV:64bit: - [2013.08.22 12:36:07 \| 000,066,560 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp) DRV:64bit: - [2013.08.22 12:35:42 \| 000,103,424 \| ---- \| M] (Microsoft Corporation) [Kernel \| Auto \| Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu) DRV:64bit: - [2013.08.22 09:46:33 \| 000,027,136 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\fxppm.sys -- (FxPPM) DRV:64bit: - [2013.08.20 14:33:40 \| 000,039,200 \| ---- \| M] (NVIDIA Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible) DRV:64bit: - [2013.08.13 00:25:46 \| 000,017,624 \| ---- \| M] (Windows (R) Win 7 DDK provider) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2) DRV:64bit: - [2013.08.10 01:39:30 \| 000,651,248 \| ---- \| M] (Intel Corporation) [Kernel \| Boot \| Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV) DRV:64bit: - [2013.07.30 19:47:35 \| 000,024,568 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO) DRV:64bit: - [2013.07.25 20:05:39 \| 000,099,320 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C) DRV:64bit: - [2013.06.18 15:44:59 \| 000,059,904 \| ---- \| M] (Atheros Communications, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\L1E62x64.sys -- (L1E) DRV:64bit: - [2013.06.06 07:24:06 \| 000,035,112 \| ---- \| M] (TeamViewer GmbH) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\teamviewervpn.sys -- (teamviewervpn) DRV:64bit: - [2013.05.23 07:12:56 \| 000,040,728 \| ---- \| M] (Logitech, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\LUsbFilt.sys -- (LUsbFilt) DRV:64bit: - [2013.05.23 07:12:52 \| 000,059,160 \| ---- \| M] (Logitech, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt) DRV:64bit: - [2013.05.23 07:12:50 \| 000,076,568 \| ---- \| M] (Logitech, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt) DRV:64bit: - [2013.05.17 19:13:26 \| 000,017,280 \| ---- \| M] () [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor) DRV:64bit: - [2013.04.04 13:50:32 \| 000,025,928 \| ---- \| M] (Malwarebytes Corporation) [File_System \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector) DRV:64bit: - [2012.09.18 03:05:10 \| 000,123,704 \| ---- \| M] (JMicron Technology Corp.) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\jraid.sys -- (JRAID) DRV:64bit: - [2012.08.21 13:01:20 \| 000,033,240 \| ---- \| M] (GEAR Software Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV:64bit: - [2011.11.28 22:51:44 \| 000,033,872 \| ---- \| M] (AnvSoft Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\anvsnddrv.sys -- (anvsnddrv) DRV:64bit: - [2011.10.20 19:24:06 \| 000,157,696 \| ---- \| M] (Matrox Graphics Inc.) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\MxEFUF64.sys -- (MxEFUF) DRV:64bit: - [2010.07.01 18:11:24 \| 000,012,352 \| ---- \| M] () [Kernel \| "Start" not found. \| Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5) DRV:64bit: - [2010.01.05 03:23:20 \| 001,847,296 \| ---- \| M] (Atheros Communications, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\athurx.sys -- (athur) DRV:64bit: - [2009.03.02 14:12:18 \| 000,011,576 \| ---- \| M] (Samsung Electronics) [Kernel \| Auto \| Running] -- C:\Windows\SysNative\drivers\SSPORT.SYS -- (SSPORT) DRV:64bit: - [2009.03.02 14:12:14 \| 000,053,816 \| ---- \| M] (Samsung Electronics Co., Ltd.) [Kernel \| Auto \| Stopped] -- C:\Windows\SysNative\drivers\DGIVECP.SYS -- (DgiVecp) DRV:64bit: - [2007.04.12 07:10:28 \| 000,151,296 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\COMMONFX.DLL -- (COMMONFX.DLL) DRV:64bit: - [2007.04.10 05:07:54 \| 000,580,904 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\ctac32k.sys -- (ctac32k) DRV:64bit: - [2007.04.10 03:41:54 \| 000,295,208 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\haP17v2k.sys -- (hap17v2k) DRV:64bit: - [2007.04.10 03:41:20 \| 000,259,880 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\haP16v2k.sys -- (hap16v2k) DRV:64bit: - [2007.04.10 03:40:24 \| 001,359,144 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\ha10kx2k.sys -- (ha10kx2k) DRV:64bit: - [2007.04.10 03:39:48 \| 000,147,752 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\emupia2k.sys -- (emupia) DRV:64bit: - [2007.04.10 03:38:40 \| 000,290,600 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\ctsfm2k.sys -- (ctsfm2k) DRV:64bit: - [2007.04.10 03:38:10 \| 000,017,192 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\ctprxy2k.sys -- (ctprxy2k) DRV:64bit: - [2007.04.10 03:37:36 \| 000,218,408 \| ---- \| M] (Creative Technology Ltd.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\ctoss2k.sys -- (ossrv) DRV:64bit: - [2007.04.10 03:35:28 \| 000,863,016 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\ctaud2k.sys -- (ctaud2k) DRV:64bit: - [2007.04.10 03:17:22 \| 000,123,688 \| ---- \| M] (Creative Technology Ltd.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\CTHWIUT.DLL -- (CTHWIUT.DLL) DRV:64bit: - [2007.04.10 03:17:00 \| 000,252,712 \| ---- \| M] (Creative Technology Ltd.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\CT20XUT.DLL -- (CT20XUT.DLL) DRV:64bit: - [2007.04.10 03:16:20 \| 001,571,112 \| ---- \| M] (Creative Technology Ltd.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\CTEXFIFX.DLL -- (CTEXFIFX.DLL) DRV:64bit: - [2007.04.10 03:15:44 \| 000,363,304 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\CTEDSPSY.DLL -- (CTEDSPSY.DLL) DRV:64bit: - [2007.04.10 03:15:10 \| 000,190,248 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\CTEDSPIO.DLL -- (CTEDSPIO.DLL) DRV:64bit: - [2007.04.10 03:14:28 \| 000,142,120 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\CTERFXFX.DLL -- (CTERFXFX.DLL) DRV:64bit: - [2007.04.10 03:13:38 \| 000,321,832 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\CTEDSPFX.DLL -- (CTEDSPFX.DLL) DRV:64bit: - [2007.04.10 03:13:08 \| 000,219,432 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\CTEAPSFX.DLL -- (CTEAPSFX.DLL) DRV:64bit: - [2007.04.10 03:12:22 \| 000,681,256 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\CTSBLFX.DLL -- (CTSBLFX.DLL) DRV:64bit: - [2007.04.10 03:11:46 \| 000,700,200 \| ---- \| M] (Creative Technology Ltd) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\CTAUDFX.DLL -- (CTAUDFX.DLL) DRV:64bit: - [2007.02.06 21:19:32 \| 000,022,528 \| ---- \| M] ( ) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\gt680X.sys -- (GT680x) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = google.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = t.msn.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C3 49 75 61 08 E9 CE 01 [binary data] IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>;.local ========== FireFox ========== FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..extensions.enabledAddons: WebSiteRecommendation%40weliketheweb.com:1.1.1 FF - prefs.js..extensions.enabledAddons: ascsurfingprotection%40iobit.com:1.0 FF - prefs.js..extensions.enabledAddons: youtubemp3podcaster%40jeremy.d.gregorio.com:3.1.4 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:27.0 FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\17.3.0\\npsitesafety.dll () FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\17.3.1.91 [2014.01.20 09:11:37 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 27.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 27.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013.10.26 16:14:40 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Extensions [2014.01.25 16:15:16 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Firefox\Profiles\a408b5gk.default-1382899517588\extensions [2013.12.19 18:35:00 \| 000,000,000 \| ---D \| M] (Ads Removal) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Firefox\Profiles\a408b5gk.default-1382899517588\extensions\adsremoval@adsremoval.net [2014.01.20 10:17:22 \| 000,000,000 \| ---D \| M] (Advanced SystemCare Surfing Protection) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Firefox\Profiles\a408b5gk.default-1382899517588\extensions\ascsurfingprotection@iobit.com [2013.11.09 22:21:39 \| 000,000,000 \| ---D \| M] ("Magnet Downloader") -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Firefox\Profiles\a408b5gk.default-1382899517588\extensions\b026053c-c151-481a-a83e-4fb8d5b1b1a4@cb8a450e-83dd-422a-b921-028b1cbf9831.com [2013.12.24 14:08:50 \| 000,000,000 \| ---D \| M] ("WebSite Recommendation") -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Firefox\Profiles\a408b5gk.default-1382899517588\extensions\WebSiteRecommendation@weliketheweb.com [2014.01.24 11:27:35 \| 000,000,000 \| ---D \| M] (Youtube MP3 Podcaster) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Firefox\Profiles\a408b5gk.default-1382899517588\extensions\youtubemp3podcaster@jeremy.d.gregorio.com [2013.11.09 22:21:39 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Firefox\Profiles\a408b5gk.default-1382899517588\extensions\b026053c-c151-481a-a83e-4fb8d5b1b1a4@cb8a450e-83dd-422a-b921-028b1cbf9831.com\extensionData [2013.11.09 22:21:39 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Firefox\Profiles\a408b5gk.default-1382899517588\extensions\b026053c-c151-481a-a83e-4fb8d5b1b1a4@cb8a450e-83dd-422a-b921-028b1cbf9831.com\extensionData\plugins [2013.11.09 22:21:39 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Firefox\Profiles\a408b5gk.default-1382899517588\extensions\b026053c-c151-481a-a83e-4fb8d5b1b1a4@cb8a450e-83dd-422a-b921-028b1cbf9831.com\extensionData\userCode [2013.10.28 09:16:10 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Firefox\Profilesa408b5gk.default-1382899517588\extensions [2013.10.28 09:16:10 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\Firefox\Profilesa408b5gk.default-1382899517588\extensions\staged [2014.01.17 13:25:58 \| 000,940,775 \| ---- \| M] () (No name found) -- C:\Users\Dragoljub\AppData\Roaming\mozilla\firefox\profiles\a408b5gk.default-1382899517588\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014.01.17 21:34:21 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions [2014.01.17 21:34:21 \| 000,000,000 \| ---D \| M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} File not found (No name found) -- C:\PROGRAM FILES (X86)\IOBIT APPS TOOLBAR\FF ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}, CHR - homepage: google.com/ CHR - Extension: Google \u0434\u043E\u043A\u0443\u043C\u0435\u043D\u0442\u0438 = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\ CHR - Extension: Google \u0434\u0438\u0441\u043A = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: TV = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\beobeededemalmllhkmnkinmfembdimh\1.0.12_0\ CHR - Extension: YouTube = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\ CHR - Extension: Adblock Plus = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.7.2_0\ CHR - Extension: Linkification = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\cflchafndefoljnhhholeekfpgmbphaf\1.51_0\ CHR - Extension: Google \u043F\u0440\u0435\u0442\u0440\u0430\u0433\u0430 = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: Raindrops(Non-Aero) = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpagcfbbmlebfnkeogkigellbgmfkjfg\1.0.0.2_0\ CHR - Extension: Qualys BrowserCheck for Windows = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejhnkognlohdkpjkjongioociddgoibk\1.9.20.1_0\ CHR - Extension: Photo Zoom for Facebook = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\elioihkkcdgakfbahdoddophfngopipi\1.1312.1.2_0\ CHR - Extension: PowerInbox = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\fmmgljeemhhajnponhffhpjioiclpmbh\1.13.1.0_0\ CHR - Extension: Facebook One = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\gceeodfjmkoilhaoehbnhofdpobaohnm\1.0.5_0\ CHR - Extension: Facebook One = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\gceeodfjmkoilhaoehbnhofdpobaohnm\1.1_0\ CHR - Extension: Facebook for Chrome = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdalhedleemkkdjddjgfjmcnbpejpapp\6.4.2_0\ CHR - Extension: Ads Removal = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkcefkcdkepgkpbgncjchhbjgoanleod\1.0.0_0\ CHR - Extension: Google Play = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi\3.0_0\ CHR - Extension: FastestFox for Chrome = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmffncokckfccddfenhkhnllmlobdahm\8.0.8_0\ CHR - Extension: F.B. Purity Cleans Up Facebook = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncdlagniojmheiklojdcpdaeepochckl\9.4.0.2_0\ CHR - Extension: F.B. Purity Cleans Up Facebook = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncdlagniojmheiklojdcpdaeepochckl\9.5.2.1_0\ CHR - Extension: F.B. Purity Cleans Up Facebook = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncdlagniojmheiklojdcpdaeepochckl\9.5.3.1_0\ CHR - Extension: F.B. Purity Cleans Up Facebook = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\ncdlagniojmheiklojdcpdaeepochckl\9.5.3_0\ CHR - Extension: Advanced SystemCare Surfing Protection = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd\1.0.0_0\ CHR - Extension: Advanced SystemCare Surfing Protection = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd\1.0.0_1\ CHR - Extension: \u0414\u043E\u0434\u0430\u0442\u0430\u043A RSS \u043F\u0440\u0435\u0442\u043F\u043B\u0430\u0442\u0430 (\u043E\u0434 Google-\u0430) = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlbjncdgjeocebhnmkbbbdekmmmcbfjd\2.2.3_0\ CHR - Extension: Google \u043D\u043E\u0432\u0447\u0430\u043D\u0438\u043A = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_3\ CHR - Extension: Better Pop Up Blocker = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmpeeekfhbmikbdhlpjbfmnpgcbeggic\2.1.6_0\ CHR - Extension: Gmail = C:\Users\Dragoljub\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\ O1 HOSTS File: ([2013.10.20 09:44:46 \| 000,000,000 \| R--- \| M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\17.3.1.91\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (Advanced SystemCare Browser Protection) - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~2\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3 - HKLM\..\Toolbar: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\17.3.1.91\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search) O4:64bit: - HKLM..\Run: [ACPW07EN] C:\Program Files\ACD Systems\ACDSee Pro\7.0\acdIDInTouch2.exe (ACD Systems) O4:64bit: - HKLM..\Run: [Acronis Scheduler2 Service] C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe (Acronis) O4:64bit: - HKLM..\Run: [AsioReg] C:\Windows\SysWOW64\ctasio.dll (Creative Technology Ltd) O4 - HKLM..\Run: [AcronisTibMounterMonitor] C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe (Acronis) O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [AsioThk32Reg] C:\Windows\SysWow64\ctasio.dll (Creative Technology Ltd) O4 - HKLM..\Run: [CTHelper] C:\Windows\SysWow64\CtHelper.exe (Creative Technology Ltd) O4 - HKLM..\Run: [CTxfiHlp] C:\Windows\SysWow64\Ctxfihlp.exe (Creative Technology Ltd) O4 - HKLM..\Run: [TrueImageMonitor.exe] C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis) O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe () O4 - HKCU..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd) O4 - HKCU..\Run: [IncrediMail] C:\Program Files (x86)\IncrediMail\bin\IncMail.exe (IncrediMail, Ltd.) O4 - HKCU..\Run: [MCShield Monitor] C:\Program Files (x86)\MCShield\mcshieldrtm.exe (MyCity) O4 - HKCU..\Run: [Memory Cleaner] C:\Users\Dragoljub\AppData\Roaming\KoshyJohn.com\MemClean\MemClean.exe (KoshyJohn.com) O4 - HKCU..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe File not found O4 - Startup: C:\Users\Dragoljub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk = C:\Program Files (x86)\Trillian\trillian.exe (Cerulean Studios) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: verbosestatus = 1 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - Reg Error: Key error. File not found O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BC59499D-5727-4307-9B41-AC05AF9ADBDE}: NameServer = 213.244.255.2,77.105.0.18,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 O18:64bit: - Protocol\Handler\ms-help - No CLSID value found O18:64bit: - Protocol\Handler\skype4com - No CLSID value found O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) O18:64bit: - Protocol\Handler\viprotocol - No CLSID value found O18:64bit: - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.3.0\ViProtocol.dll (AVG Secure Search) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O27:64bit: - HKLM IFEO\microsoft.windowslive.platform.server: Debugger - C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) O27 - HKLM IFEO\microsoft.windowslive.platform.server: Debugger - C:\Windows\SysWow64\rundll32.exe (Microsoft Corporation) O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2013.10.20 09:27:21 \| 000,000,000 \| ---- \| M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2010.03.12 00:06:33 \| 000,000,000 \| ---D \| M] - D:\AUTOBUSI TONSKI -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk ) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2014.01.25 15:45:57 \| 000,602,112 \| ---- \| C] (OldTimer Tools) -- C:\Users\Dragoljub\Desktop\OTL.exe [2014.01.25 13:33:18 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\JDownloader [2014.01.25 13:25:51 \| 000,081,488 \| ---- \| C] (AppWork UG (haftungsbeschränkt)) -- C:\Users\Dragoljub\Desktop\WebInstaller.exe [2014.01.25 13:24:18 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\Desktop\Wifi Key Finder v1.1.0 Final [2014.01.25 11:52:11 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\TeamViewer [2014.01.25 11:20:15 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\TeamViewer [2014.01.23 18:15:17 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\Desktop\ednevnik [2014.01.23 14:14:55 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes [2014.01.23 14:14:19 \| 000,000,000 \| ---D \| C] -- C:\Program Files\iTunes [2014.01.23 14:14:19 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\iTunes [2014.01.23 14:14:19 \| 000,000,000 \| ---D \| C] -- C:\Program Files\iPod [2014.01.23 14:14:19 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 [2014.01.21 13:39:32 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\Desktop\BABA KOCA [2014.01.20 09:15:30 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit SmartDefrag [2014.01.20 09:11:45 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Local\AVG SafeGuard toolbar [2014.01.20 09:11:34 \| 000,046,368 \| ---- \| C] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys [2014.01.20 09:11:31 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Common Files\AVG Secure Search [2014.01.20 09:11:30 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\AVG SafeGuard toolbar [2014.01.20 09:11:30 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\AVG SafeGuard toolbar [2014.01.19 19:03:53 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Common Files\Java [2014.01.19 19:03:50 \| 000,264,616 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe [2014.01.19 19:03:48 \| 000,175,016 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe [2014.01.19 19:03:48 \| 000,174,504 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe [2014.01.19 19:03:48 \| 000,096,168 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2014.01.19 19:03:48 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java [2014.01.19 18:55:39 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\qualys [2014.01.17 21:34:21 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Mozilla Firefox [2014.01.17 19:41:43 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\SyncFolder [2014.01.16 22:04:21 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Local\cache [2014.01.16 13:05:28 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\Desktop\dk [2014.01.15 10:38:55 \| 000,693,240 \| ---- \| C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2014.01.15 10:38:55 \| 000,105,464 \| ---- \| C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2014.01.15 10:21:41 \| 003,395,920 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\WSService.dll [2014.01.15 10:21:41 \| 000,848,384 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\WSShared.dll [2014.01.15 10:21:41 \| 000,695,808 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSShared.dll [2014.01.15 10:21:40 \| 000,206,336 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\WSClient.dll [2014.01.15 10:21:40 \| 000,174,592 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSClient.dll [2014.01.15 10:21:40 \| 000,084,480 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\WSCollect.exe [2014.01.15 10:21:39 \| 000,249,856 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\Windows.ApplicationModel.Store.TestingFramework.dll [2014.01.15 10:21:39 \| 000,189,952 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll [2014.01.15 10:21:30 \| 000,787,968 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\uDWM.dll [2014.01.14 13:46:48 \| 000,033,240 \| ---- \| C] (GEAR Software Inc.) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys [2014.01.14 13:46:48 \| 000,000,000 \| ---D \| C] -- C:\Windows\SysNative\DRVSTORE [2014.01.14 13:46:07 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Apple Computer [2014.01.14 13:45:05 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Local\Apple [2014.01.14 13:45:03 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Apple Software Update [2014.01.14 13:44:52 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Common Files\Apple [2014.01.14 13:44:37 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Bonjour [2014.01.14 13:44:37 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Bonjour [2014.01.14 13:44:30 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Apple [2014.01.14 13:44:30 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Common Files\Apple [2014.01.11 22:28:19 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\Trillian [2014.01.11 22:27:50 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Trillian [2014.01.11 17:50:47 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\SureThing Disc Labeler 6 [2014.01.05 08:09:37 \| 000,034,080 \| ---- \| C] (IObit) -- C:\Windows\SysNative\SmartDefragBootTime.exe [2014.01.02 16:39:21 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\Documents\ACDSee Video Converter Pro 4.0 [2014.01.02 16:18:39 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\Documents\TMPGEnc [2014.01.02 16:12:34 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\Pegasys Inc [2014.01.02 16:10:51 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TMPGEnc [2014.01.02 16:10:44 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Pegasys Inc [2014.01.02 11:35:45 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Local\Apple Computer [2014.01.02 11:21:39 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime [2014.01.02 11:21:26 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\QuickTime [2014.01.02 01:04:07 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\LEAPS [2014.01.02 01:04:02 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\Documents\TMPGEnc Authoring Works 4 [2014.01.01 19:45:34 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\avidemux [2014.01.01 18:17:35 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP3 [2014.01.01 17:30:35 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\AVS4YOU [2014.01.01 17:29:09 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU [2014.01.01 17:28:52 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU [2014.01.01 17:28:27 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Common Files\AVSMedia [2014.01.01 17:27:54 \| 000,024,576 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3a.dll [2014.01.01 17:27:54 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\AVS4YOU [2014.01.01 17:27:54 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\AVS4YOU [2013.12.31 19:24:36 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KoshyJohn.com [2013.12.31 19:24:35 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\KoshyJohn.com [2013.12.30 12:17:42 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Local\Sony [2013.12.29 22:16:10 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Common Files\ACD Systems [2013.12.29 22:16:10 \| 000,000,000 \| ---D \| C] -- C:\Program Files\ACD Systems [2013.12.29 10:09:07 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\Desktop\CARIBRODSKI ORKESTAR FIN [2013.12.28 23:27:31 \| 000,000,000 \| ---D \| C] -- C:\Windows\en [2013.12.28 23:27:01 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition [2013.12.28 23:26:17 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Windows Live [2013.12.28 23:26:08 \| 000,518,488 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_7.dll [2013.12.28 23:26:08 \| 000,077,656 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_5.dll [2013.12.28 23:26:08 \| 000,074,072 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_5.dll [2013.12.28 23:26:07 \| 002,526,056 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_43.dll [2013.12.28 23:26:07 \| 002,106,216 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_43.dll [2013.12.28 23:26:07 \| 000,527,192 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_7.dll [2013.12.28 23:26:07 \| 000,276,832 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_43.dll [2013.12.28 23:26:07 \| 000,248,672 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_43.dll [2013.12.28 23:25:58 \| 000,523,088 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_42.dll [2013.12.28 23:25:58 \| 000,453,456 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_42.dll [2013.12.28 23:25:45 \| 004,398,360 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_32.dll [2013.12.28 23:25:45 \| 003,426,072 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_32.dll [2013.12.28 23:25:00 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Local\Windows Live [2013.12.28 23:24:44 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Common Files\Windows Live [2013.12.28 18:56:39 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Common Files\InstallShield [2013.12.28 18:54:46 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ultrafunk [2013.12.28 18:54:46 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultrafunk [2013.12.28 18:48:35 \| 000,000,000 \| ---D \| C] -- C:\Users\Dragoljub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Waves [2013.12.28 18:48:35 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Waves [2013.12.28 18:48:34 \| 000,000,000 \| ---D \| C] -- C:\audio ========== Files - Modified Within 30 Days ========== [2014.01.25 16:00:00 \| 000,000,920 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2014.01.25 15:57:00 \| 000,000,830 \| ---- \| M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2014.01.25 15:46:02 \| 000,602,112 \| ---- \| M] (OldTimer Tools) -- C:\Users\Dragoljub\Desktop\OTL.exe [2014.01.25 15:42:36 \| 000,002,207 \| ---- \| M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2014.01.25 15:42:33 \| 000,000,916 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2014.01.25 15:40:41 \| 000,000,430 \| ---- \| M] () -- C:\Windows\tasks\AutoSmartDefrag.job [2014.01.25 15:40:06 \| 000,000,290 \| ---- \| M] () -- C:\Windows\tasks\AutoKMS.job [2014.01.25 15:39:54 \| 268,435,456 \| -HS- \| M] () -- C:\swapfile.sys [2014.01.25 15:39:52 \| 3435,229,184 \| -HS- \| M] () -- C:\hiberfil.sys [2014.01.25 15:38:14 \| 000,863,592 \| ---- \| M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2014.01.25 15:38:14 \| 000,730,408 \| ---- \| M] () -- C:\Windows\SysNative\perfh009.dat [2014.01.25 15:38:14 \| 000,135,520 \| ---- \| M] () -- C:\Windows\SysNative\perfc009.dat [2014.01.25 13:34:10 \| 000,002,065 \| ---- \| M] () -- C:\Users\Dragoljub\Desktop\JDownloader.lnk [2014.01.25 13:34:10 \| 000,002,029 \| ---- \| M] () -- C:\Users\Dragoljub\Application Data\Microsoft\Internet Explorer\Quick Launch\JDownloader.lnk [2014.01.25 13:25:56 \| 000,081,488 \| ---- \| M] (AppWork UG (haftungsbeschränkt)) -- C:\Users\Dragoljub\Desktop\WebInstaller.exe [2014.01.25 12:17:24 \| 004,081,736 \| ---- \| M] () -- C:\Users\Dragoljub\Desktop\Wifi_Key_Finder_v1.1.0_Final.rar [2014.01.25 11:20:20 \| 000,001,186 \| ---- \| M] () -- C:\Users\Public\Desktop\TeamViewer 9.lnk [2014.01.23 14:14:55 \| 000,001,795 \| ---- \| M] () -- C:\Users\Public\Desktop\iTunes.lnk [2014.01.22 12:38:41 \| 000,063,137 \| -H-- \| M] () -- C:\Users\Dragoljub\Desktop\mvstcdxx.lst [2014.01.20 09:15:30 \| 000,001,163 \| ---- \| M] () -- C:\Users\Dragoljub\Desktop\IObit SmartDefrag.lnk [2014.01.20 09:11:37 \| 000,003,747 \| ---- \| M] () -- C:\Program Files (x86)\Mozilla Firefoxsafeguard-secure-search.xml [2014.01.20 09:11:23 \| 000,046,368 \| ---- \| M] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys [2014.01.19 19:03:44 \| 000,096,168 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2014.01.19 19:03:43 \| 000,264,616 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe [2014.01.19 19:03:43 \| 000,175,016 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe [2014.01.19 19:03:42 \| 000,174,504 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe [2014.01.19 10:53:57 \| 000,001,054 \| RHS- \| M] () -- C:\Users\Dragoljub\ntuser.pol [2014.01.17 19:38:56 \| 000,001,444 \| ---- \| M] () -- C:\Users\Dragoljub\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [2014.01.12 21:40:31 \| 000,065,891 \| ---- \| M] () -- C:\Users\Dragoljub\Desktop\Clip_2.jpg [2014.01.12 18:45:40 \| 000,047,863 \| ---- \| M] () -- C:\Users\Dragoljub\Desktop\1011665_10202053709377671_1021530114_n.jpg [2014.01.11 22:28:19 \| 000,001,095 \| ---- \| M] () -- C:\Users\Dragoljub\Desktop\Trillian.lnk [2014.01.11 22:28:19 \| 000,001,059 \| ---- \| M] () -- C:\Users\Dragoljub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk [2014.01.11 17:52:43 \| 000,001,127 \| ---- \| M] () -- C:\Users\Public\Desktop\SureThing Disc Labeler Gold 6.lnk [2014.01.10 11:52:35 \| 000,062,758 \| ---- \| M] () -- C:\Users\Dragoljub\dsp_stereo_tool.ini [2014.01.06 23:31:05 \| 000,693,240 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2014.01.06 23:31:05 \| 000,105,464 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2014.01.02 16:10:51 \| 000,002,097 \| ---- \| M] () -- C:\Users\Public\Desktop\TMPGEnc 4.0 XPress.lnk [2014.01.02 11:21:39 \| 000,001,863 \| ---- \| M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2014.01.01 18:17:35 \| 000,000,921 \| ---- \| M] () -- C:\Users\Public\Desktop\AIMP3.lnk [2014.01.01 17:28:53 \| 000,001,273 \| ---- \| M] () -- C:\Users\Dragoljub\Desktop\AVS Video Converter.lnk [2013.12.31 19:24:38 \| 000,002,022 \| ---- \| M] () -- C:\Users\Dragoljub\Desktop\Memory Cleaner.lnk [2013.12.30 16:40:53 \| 000,246,090 \| ---- \| M] () -- C:\Users\Dragoljub\Desktop\m1p0108.pdf [2013.12.30 12:20:21 \| 000,002,608 \| ---- \| M] () -- C:\Users\Dragoljub\Documents\Register Sound Forge Pro.htm [2013.12.30 12:18:09 \| 000,001,148 \| ---- \| M] () -- C:\Users\Public\Desktop\Sound Forge Pro 10.0.lnk [2013.12.29 22:16:18 \| 000,002,237 \| ---- \| M] () -- C:\Users\Public\Desktop\ACDSee Pro 7 (64-bit).lnk [2013.12.29 21:29:16 \| 000,067,584 \| --S- \| M] () -- C:\Windows\bootstat.dat [2013.12.29 21:29:16 \| 000,002,244 \| ---- \| M] () -- C:\Windows\SysNative\ASOROSet.bin [2013.12.28 15:47:39 \| 000,001,431 \| ---- \| M] () -- C:\Users\Dragoljub\Desktop\Tu - prečica.lnk ========== Files Created - No Company Name ========== [2014.01.25 13:34:10 \| 000,002,065 \| ---- \| C] () -- C:\Users\Dragoljub\Desktop\JDownloader.lnk [2014.01.25 13:34:10 \| 000,002,029 \| ---- \| C] () -- C:\Users\Dragoljub\Application Data\Microsoft\Internet Explorer\Quick Launch\JDownloader.lnk [2014.01.25 13:34:02 \| 000,002,029 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader.lnk [2014.01.25 13:34:02 \| 000,001,965 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Uninstaller.lnk [2014.01.25 13:34:02 \| 000,001,942 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk [2014.01.25 12:16:03 \| 004,081,736 \| ---- \| C] () -- C:\Users\Dragoljub\Desktop\Wifi_Key_Finder_v1.1.0_Final.rar [2014.01.25 11:20:20 \| 000,001,198 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk [2014.01.25 11:20:20 \| 000,001,186 \| ---- \| C] () -- C:\Users\Public\Desktop\TeamViewer 9.lnk [2014.01.23 14:14:55 \| 000,001,795 \| ---- \| C] () -- C:\Users\Public\Desktop\iTunes.lnk [2014.01.22 12:38:41 \| 000,063,137 \| -H-- \| C] () -- C:\Users\Dragoljub\Desktop\mvstcdxx.lst [2014.01.20 09:15:47 \| 000,000,430 \| ---- \| C] () -- C:\Windows\tasks\AutoSmartDefrag.job [2014.01.20 09:15:30 \| 000,001,163 \| ---- \| C] () -- C:\Users\Dragoljub\Desktop\IObit SmartDefrag.lnk [2014.01.20 09:11:28 \| 000,003,747 \| ---- \| C] () -- C:\Program Files (x86)\Mozilla Firefoxsafeguard-secure-search.xml [2014.01.19 10:53:57 \| 000,001,054 \| RHS- \| C] () -- C:\Users\Dragoljub\ntuser.pol [2014.01.19 10:19:16 \| 000,002,487 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk [2014.01.17 19:38:56 \| 000,001,450 \| ---- \| C] () -- C:\Users\Dragoljub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk [2014.01.17 19:38:56 \| 000,001,444 \| ---- \| C] () -- C:\Users\Dragoljub\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [2014.01.15 10:21:40 \| 000,138,240 \| ---- \| C] () -- C:\Windows\SysNative\OEMLicense.dll [2014.01.15 10:21:40 \| 000,103,936 \| ---- \| C] () -- C:\Windows\SysWow64\OEMLicense.dll [2014.01.14 13:45:04 \| 000,002,579 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk [2014.01.12 21:40:05 \| 000,065,891 \| ---- \| C] () -- C:\Users\Dragoljub\Desktop\Clip_2.jpg [2014.01.12 18:45:32 \| 000,047,863 \| ---- \| C] () -- C:\Users\Dragoljub\Desktop\1011665_10202053709377671_1021530114_n.jpg [2014.01.11 22:28:19 \| 000,001,125 \| ---- \| C] () -- C:\Users\Dragoljub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trillian.lnk [2014.01.11 22:28:19 \| 000,001,095 \| ---- \| C] () -- C:\Users\Dragoljub\Desktop\Trillian.lnk [2014.01.11 22:28:19 \| 000,001,059 \| ---- \| C] () -- C:\Users\Dragoljub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk [2014.01.11 17:52:43 \| 000,001,127 \| ---- \| C] () -- C:\Users\Public\Desktop\SureThing Disc Labeler Gold 6.lnk [2014.01.10 11:52:35 \| 000,062,758 \| ---- \| C] () -- C:\Users\Dragoljub\dsp_stereo_tool.ini [2014.01.02 16:10:51 \| 000,002,097 \| ---- \| C] () -- C:\Users\Public\Desktop\TMPGEnc 4.0 XPress.lnk [2014.01.02 11:21:39 \| 000,001,863 \| ---- \| C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2014.01.01 18:17:35 \| 000,000,921 \| ---- \| C] () -- C:\Users\Public\Desktop\AIMP3.lnk [2014.01.01 17:28:53 \| 000,001,273 \| ---- \| C] () -- C:\Users\Dragoljub\Desktop\AVS Video Converter.lnk [2013.12.31 19:24:38 \| 000,002,022 \| ---- \| C] () -- C:\Users\Dragoljub\Desktop\Memory Cleaner.lnk [2013.12.30 16:40:51 \| 000,246,090 \| ---- \| C] () -- C:\Users\Dragoljub\Desktop\m1p0108.pdf [2013.12.30 12:18:09 \| 000,001,148 \| ---- \| C] () -- C:\Users\Public\Desktop\Sound Forge Pro 10.0.lnk [2013.12.29 22:16:18 \| 000,002,237 \| ---- \| C] () -- C:\Users\Public\Desktop\ACDSee Pro 7 (64-bit).lnk [2013.12.28 23:27:19 \| 000,001,331 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk [2013.12.28 23:27:12 \| 000,001,404 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk [2013.12.28 18:54:46 \| 000,129,024 \| ---- \| C] () -- C:\Windows\UNWISE.EXE [2013.12.28 15:47:39 \| 000,001,431 \| ---- \| C] () -- C:\Users\Dragoljub\Desktop\Tu - prečica.lnk [2013.12.28 15:46:35 \| 000,000,871 \| ---- \| C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Uninstall 6.lnk [2013.12.21 18:39:01 \| 000,048,295 \| ---- \| C] () -- C:\Users\Dragoljub\Clip.jpg [2013.10.21 18:05:12 \| 000,216,064 \| ---- \| C] () -- C:\Windows\SysWow64\gcapi_dll.dll [2013.08.31 03:47:14 \| 000,000,034 \| ---- \| C] () -- C:\Windows\cdplayer.ini [2013.08.30 01:27:22 \| 000,040,960 \| R--- \| C] () -- C:\Windows\SysWow64\ForgiveMe.exe [2013.08.30 01:27:22 \| 000,000,059 \| R--- \| C] () -- C:\Windows\SysWow64\MKScannerSetting.ini [2013.08.22 16:36:43 \| 000,215,943 \| ---- \| C] () -- C:\Windows\SysWow64\dssec.dat [2013.08.22 16:36:42 \| 000,000,741 \| ---- \| C] () -- C:\Windows\SysWow64\NOISE.DAT [2013.08.22 15:46:23 \| 000,067,584 \| --S- \| C] () -- C:\Windows\bootstat.dat [2013.08.22 08:01:23 \| 000,043,131 \| ---- \| C] () -- C:\Windows\mib.bin [2013.08.22 04:32:36 \| 000,046,080 \| ---- \| C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2013.08.22 00:55:20 \| 000,364,544 \| ---- \| C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2013.08.22 00:52:39 \| 000,673,088 \| ---- \| C] () -- C:\Windows\SysWow64\mlang.dat ========== ZeroAccess Check ========== [2013.10.23 10:54:50 \| 000,000,227 \| RHS- \| M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2013.11.05 21:21:27 \| 021,196,664 \| ---- \| M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2013.11.05 19:51:37 \| 018,642,504 \| ---- \| M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2013.08.22 10:49:49 \| 000,921,088 \| ---- \| M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2013.08.22 03:45:10 \| 000,691,712 \| ---- \| M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2013.08.22 10:45:17 \| 000,483,840 \| ---- \| M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] ========== Files - Unicode (All) ========== [2013.12.11 17:42:22 \| 000,000,162 \| -H-- \| M] ()(C:\Users\Dragoljub\Desktop\~$.12.2013. ???? ??????.doc) -- C:\Users\Dragoljub\Desktop\~$.12.2013. БЛИЦ НОВИНИ.doc [2013.12.11 17:42:22 \| 000,000,162 \| -H-- \| C] ()(C:\Users\Dragoljub\Desktop\~$.12.2013. ???? ??????.doc) -- C:\Users\Dragoljub\Desktop\~$.12.2013. БЛИЦ НОВИНИ.doc [2013.10.15 13:11:49 \| 000,000,162 \| -H-- \| M] ()(C:\Users\Dragoljub\Desktop\~$.10.2013. ??????.doc) -- C:\Users\Dragoljub\Desktop\~$.10.2013. новини.doc [2013.10.15 13:11:49 \| 000,000,162 \| -H-- \| C] ()(C:\Users\Dragoljub\Desktop\~$.10.2013. ??????.doc) -- C:\Users\Dragoljub\Desktop\~$.10.2013. новини.doc ========== Alternate Data Streams ========== @Alternate Data Stream - 327 bytes -> C:\ProgramData\TEMP:C0B0C592 @Alternate Data Stream - 165 bytes -> C:\ProgramData\TEMP:BF3D62E7 @Alternate Data Stream - 158 bytes -> C:\Users\Dragoljub\SkyDrive:ms-properties @Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:A7D26093 @Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:373E1720 < End of report >

Profil

Sass Drake Poslao: 25 Jan 2014 16:38 Idi na vrh
offline Sass Drake Anti Malware Fighter Rank 2 Pridružio: 26 Avg 2010 Poruke: 10622 Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Kakvo je sada stanje sa Internet Explorerom i ostatkom sistema?

Profil

popaj 2 Poslao: 25 Jan 2014 16:42 Idi na vrh
offline popaj 2 Novi MyCity građanin Pridružio: 27 Okt 2013 Poruke: 15	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! IE radi sada odlično, po meni brće od ostalih browsera. Hvala na pomoći

Profil

Sass Drake Poslao: 25 Jan 2014 16:55 Idi na vrh
offline Sass Drake Anti Malware Fighter Rank 2 Pridružio: 26 Avg 2010 Poruke: 10622 Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Ponovo pokreni OTL i klikni na dugme CleanUp. • Sledeća procedura će implementirati završno čišćenje. Preuzmi "Xplode"-ov DelFix alat i snimi ga na Desktop. Dvoklikom pokreni alat i štikliraj kućice ispred sledećih opcija; Remove disinfection tools Create registry backup Purge System Restore Klikni na dugme Run i pričekaj trenutak dok alat ne završi svoj rad. Od ovog trenutka, svi korišćeni alati u ovoj temi bi trebali biti obrisani. Alat će takođe formirati izveštaj za tebe. (C:\DelFix.txt) Alat će snimiti i zdravo stanje registy-ja i napraviti backup koristeci integrisan program "ERUNT" u %windir%\ERUNT\DelFix Alat briše stare system restore tačke i pravi novu, svežu tačku nakon čišćenja. Posjeti temu Testirajte da li vam je pretraživač ranjiv, pročitaj i isprati link koji stoji u njoj. Preporučujem da za zaštitu USB memorijskih uređaja koristiš MCShield. Nema nikakve veze sa antivirus-om tj. neće ometati njegov rad, a pokazao se kao jedan od najboljih vida zaštite od malware-a koji se prenosi putem USB mem. uređaja. Home Page MCShield-a: http://www.mcshield.net Više o MCShield-u možeš saznati u ovoj temi: http://www.mycity.rs/MyCity-Laboratorija/MCShield-v3.html Facebook stranica MCShield-a: http://www.facebook.com/MCShield

Profil

popaj Poslao: 25 Jan 2014 18:25 Idi na vrh
offline popaj Građanin Pridružio: 05 Jun 2004 Poruke: 81	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Hvala još jednom. p.s. MCShield već koristim, odličan je

Profil

MyCity » Ambulanta -> Arhiva Ambulante » Internet explorer ne radi

Ko je trenutno na forumu

Ukupno su 860 korisnika na forumu :: 7 registrovanih, 1 sakriven i 852 gosta :: [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:: Korisnici trenutno na forumu: comi_pfc, hyla, ILGromovnik, MB120mm, Metanoja, nenad81, opt1

Svaki korisnik ovog sajta je odgovoran za sadržaj svoje poruke koju objavi na sajtu. Sajt se odriče svake odgovornosti za sadržaj tih poruka.
Postavljanjem vaše poruke ili vašeg autorskog dela na ovaj sajt, saglasni ste da ovaj sajt postaje distributer vašeg dela, i odričete se mogućnosti njegovog povlačenja ili brisanja, bez saglasnosti uprave sajta.
Distribucija sadržaja sa ovog sajta je dozvoljena samo u nekomercijalne svrhe, uz obaveznu napomenu da je sadržaj preuzet sa ovog sajta, i uz obavezno navođenje adrese MyCity sajta. Za sve ostale vidove distribucije obavezni ste da prethodno zatražite odobrenje od vlasnika MyCity sajta.
MyCity pokrenuo, administrira i razvija Predrag Damnjanović, a o uređenju sajta se brine MyCity Tim.
Ukoliko želite da nas kontaktirate kliknite ovde.
Naši sajtovi:
Vesti, Vojni forum, Zaštita od virusa, TekstPesme.rs

This content is licensed under a Creative Commons License.
Based on phpBB 2, translated by Simke, designed by