Infekcija

1

Infekcija

offline
  • Pridružio: 14 Feb 2008
  • Poruke: 12337

Pokupio sam neko smeće dok sam proveravao fajl, te mi je potrebno čišćenje Smile

Primetio sam da se instalirala ekstenzija "PriiceMinuus", koju sam isključio ručno u Chrome-u.

Virus total izveštaj

Ziveli

FRST :
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-06-2015
Ran by Srdjan (administrator) on SRKI94 on 18-06-2015 23:45:41
Running from C:\Users\Srdjan\Desktop
Loaded Profiles: Srdjan (Available Profiles: Srdjan)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe
() C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
() C:\Windows\SysWOW64\ASGT.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
(Apple Inc.) C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\System32\CISVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\GPUTweak.exe
(Flux Software LLC) C:\Users\Srdjan\AppData\Local\FluxSoftware\Flux\flux.exe
(Skillbrains) C:\Users\Srdjan\AppData\Local\Skillbrains\lightshot\5.1.4.17\Lightshot.exe
() C:\Program Files (x86)\WhatPulse2\whatpulse.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Elias Fotinis) C:\Program Files (x86)\DeskPins\DeskPins.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
() C:\Program Files (x86)\WhatPulse2\whatpulse-watchdog.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Windows\System32\Srpskey.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472992 2013-03-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3727824 2015-06-05] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-03-31] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKLM-x32\...\Run: [AdobeCEPServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe [1039248 2013-03-13] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-05-15] (Raptr, Inc)
HKLM-x32\...\Run: [srpskey] => C:\WINDOWS\SYSTEM32\SRPSKEY.EXE
Winlogon\Notify\WB: C:\Program Files (x86)\Stardock\WindowBlinds\fast64.dll [X]
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\...\Run: [LightShot] => C:\Users\Srdjan\AppData\Local\Skillbrains\lightshot\Lightshot.exe [226560 2014-06-18] ()
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\...\Run: [f.lux] => C:\Users\Srdjan\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-24] (Flux Software LLC)
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\...\Run: [WhatPulse] => C:\Program Files (x86)\WhatPulse2\whatpulse.exe [3681792 2015-05-16] ()
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\...\Run: [AirDroid 3] => C:\Program Files (x86)\AirDroid\AirDroid.exe /start
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\...\Run: [GalaxyClient] => [X]
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\...\Run: [Google Update] => "C:\Users\Srdjan\AppData\Local\Google\Update\GoogleUpdate.exe" /c
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31280256 2015-04-17] (Skype Technologies S.A.)
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\...\MountPoints2: {7ec0afdf-6723-11e3-a8d4-94de80d5cafb} - F:\setup.exe
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2013-08-16] (Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [333824 2010-11-21] (Microsoft Corporation)
HKU\S-1-5-18\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe [2690560 2013-07-02] (ASUS)
Startup: C:\Users\Srdjan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DeskPins.lnk [2015-02-25]
ShortcutTarget: DeskPins.lnk -> C:\Program Files (x86)\DeskPins\DeskPins.exe (Elias Fotinis)
ShellIconOverlayIdentifiers: [  MailRuCloudIconOverlay0] -> {64A9418A-B6B1-4112-B75C-E61633C9A31F} =>  No File
ShellIconOverlayIdentifiers: [  MailRuCloudIconOverlay1] -> {6A2E142B-EA63-433A-AC05-5223CBD26E65} =>  No File
ShellIconOverlayIdentifiers: [  MailRuCloudIconOverlay2] -> {6AFCC535-2F12-4F50-9F0A-1CF856CFC95D} =>  No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
ShellIconOverlayIdentifiers-x32: [  MailRuCloudIconOverlay0] -> {64A9418A-B6B1-4112-B75C-E61633C9A31F} =>  No File
ShellIconOverlayIdentifiers-x32: [  MailRuCloudIconOverlay1] -> {6A2E142B-EA63-433A-AC05-5223CBD26E65} =>  No File
ShellIconOverlayIdentifiers-x32: [  MailRuCloudIconOverlay2] -> {6AFCC535-2F12-4F50-9F0A-1CF856CFC95D} =>  No File
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-05-09] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-09] (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-05-13] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-13] (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Filter: AutorunsDisabled - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL [2010-02-28] (Microsoft Corporation)
Filter-x32: AutorunsDisabled - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL [2012-10-31] (Microsoft Corporation)
Hosts: 127.0.0.1 activation.cloud.techsmith.com
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Srdjan\AppData\Roaming\Mozilla\Firefox\Profiles\sk3rsdnk.default
FF Homepage: https://mysearch.avg.com/?cid={82735412-8796-4E46-858F-B91354DAD31E}&mid=f884ffc8592047d3a4af4597c6312308-5fbc70109d56b170764e58d9e4963e23366de3e2&lang=en&ds=AVG&coid=avgtbavg&cmpid=0415av&pr=fr&d=2015-05-07 15:14:12&v=4.1.0.411&pid=wtu&sg=&sap=hp
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-05] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-09] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-09] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2013-03-21] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-05] ()
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll No File
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-13] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-24] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-24] (Google Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2013-03-21] (Adobe Systems)
FF Plugin HKU\S-1-5-21-3012697505-3807635779-1283347855-1000: @onlive.com/OnLiveGameClientDetector,version=1.0.0 -> C:\Program Files (x86)\OnLive\Plugin\npolgdet.dll No File
FF Plugin HKU\S-1-5-21-3012697505-3807635779-1283347855-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Srdjan\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-01] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3012697505-3807635779-1283347855-1000: SkypePlugin -> C:\Users\Srdjan\AppData\Local\SkypePlugin\7.3.0.483\npGatewayNpapi.dll [2015-05-15] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-3012697505-3807635779-1283347855-1000: SkypePlugin64 -> C:\Users\Srdjan\AppData\Local\SkypePlugin\7.3.0.483\npGatewayNpapi-x64.dll [2015-05-15] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-3012697505-3807635779-1283347855-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2015-06-10] ()
FF Extension: Video DownloadHelper - C:\Users\Srdjan\AppData\Roaming\Mozilla\Firefox\Profiles\sk3rsdnk.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2015-04-23]

Chrome:
=======
CHR Profile: C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (No Name) - C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blakpkgjpemejpbmfiglncklihnhjkij [2015-06-18]
CHR Extension: (Nimbus Screenshot) - C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpconcjcammlapcogcnnelfmaeghhagj [2015-05-25]
CHR Extension: (No Name) - C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cklbilaeedbblhpkhjfcnmaocjdodcnm [2015-06-18]
CHR Extension: (Video Downloader professional) - C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2015-06-15]
CHR Extension: (No Name) - C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbbmnbomimdgmecfpbilhoafgmmeagef [2015-06-18]
CHR Extension: (No Name) - C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-06-18]
CHR Extension: (No Name) - C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2015-06-18]
CHR Extension: (No Name) - C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Extensions\immpkjjlgappgfkkfieppnmlhakdmaab [2015-06-18]
CHR Extension: (Disable Extensions Temporarily) - C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcfdefmogcogicollfebhgjiiakbjdje [2015-05-25]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-03-31] (Advanced Micro Devices, Inc.) [File not signed]
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [File not signed]
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3461072 2015-06-05] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [312816 2015-06-05] (AVG Technologies CZ, s.r.o.)
R2 Bonjour Service; C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe [384512 2015-03-09] (Apple Inc.) [File not signed]
S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2014-05-03] (BitRaider, LLC)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-20] (Microsoft Corporation) [File not signed]
S4 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [520416 2014-01-28] (Futuremark)
S3 GalaxyClientService; C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe [1743928 2015-05-26] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6516792 2015-05-26] (GOG.com)
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [22744 2014-10-15] (Microsoft Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1931632 2015-04-21] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-08-09] ()
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe [105448 2014-08-28] (Razer Inc.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-01] (TeamViewer GmbH)
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-08-16] (Microsoft Corporation)
R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [620056 2015-05-07] ()

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [62152 2014-10-28] (Advanced Micro Devices, Inc.)
R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2014-04-09] (Wondershare)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22680 2012-10-25] ()
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162784 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [287200 2015-05-19] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [253408 2015-05-12] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [256992 2015-04-15] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [378336 2015-05-07] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [224224 2015-05-12] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [40928 2015-03-20] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [281568 2015-05-12] (AVG Technologies CZ, s.r.o.)
S3 b06diag; C:\Windows\system32\drivers\bxdiaga.sys [88104 2012-03-08] (Broadcom Corporation)
S3 BFN7x64; C:\Windows\system32\drivers\Xeno7x64.sys [157288 2012-02-22] (Bigfoot Networks, Inc.)
S3 BRDriver64; C:\ProgramData\BitRaider\BRDriver64.sys [75048 2014-05-03] (BitRaider)
S3 bxfcoe; C:\Windows\system32\drivers\bxfcoe.sys [178216 2012-02-22] (Broadcom Corporation)
S3 bxois; C:\Windows\system32\drivers\bxois.sys [539176 2012-02-22] (Broadcom Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-11-26] (Disc Soft Ltd)
S3 EtronSTOR; C:\Windows\System32\Drivers\EtronSTOR.sys [32512 2012-07-24] (Etron Technology Inc)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [27552 2014-10-21] (REALiX(tm))
R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [24824 2013-02-19] (ASUSTeK Computer Inc.)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-08-16] (Microsoft Corporation)
S2 AODDriver4.2.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-18 23:45 - 2015-06-18 23:46 - 00024158 _____ C:\Users\Srdjan\Desktop\FRST.txt
2015-06-18 23:45 - 2015-06-18 23:45 - 02109952 _____ (Farbar) C:\Users\Srdjan\Desktop\FRST64.exe
2015-06-18 23:34 - 2015-06-18 23:34 - 00000000 ____D C:\ProgramData\kjdejndofepoindbiacfhpbpdigfpgbb
2015-06-18 23:32 - 2015-06-18 23:32 - 00199880 _____ C:\Users\Srdjan\Desktop\Yamb.exe
2015-06-18 23:32 - 2015-06-18 23:32 - 00003238 _____ C:\Windows\System32\Tasks\Bidaily Synchronize Task[973b]
2015-06-18 23:32 - 2015-06-18 23:32 - 00001307 _____ C:\Users\Srdjan\Desktop\Yamb.lnk
2015-06-18 23:32 - 2015-06-18 23:32 - 00000324 _____ C:\Windows\Tasks\Bidaily Synchronize Task[973b].job
2015-06-18 23:32 - 2015-06-18 23:32 - 00000000 ____D C:\ProgramData\ihlibkobelamcemfkgageopcegehhkmg
2015-06-18 23:32 - 2015-06-18 23:32 - 00000000 ____D C:\ProgramData\{9d5bcfde-da64-03e7-9d5b-bcfdeda63f7b}
2015-06-18 18:29 - 2015-06-18 18:29 - 00000846 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2015-06-18 18:29 - 2015-06-18 18:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2015-06-15 21:22 - 2015-06-18 21:55 - 00001680 _____ C:\Windows\setupact.log
2015-06-15 21:22 - 2015-06-15 21:22 - 00000000 _____ C:\Windows\setuperr.log
2015-06-15 18:40 - 2015-06-15 18:51 - 00000000 ____D C:\Users\Srdjan\AppData\Local\SkypePlugin
2015-06-15 02:59 - 2015-06-15 02:59 - 00000000 ____D C:\ProgramData\Baidu
2015-06-14 20:41 - 2015-06-18 23:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-06-13 21:04 - 2015-06-13 21:04 - 00002156 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2015-06-13 11:14 - 2015-06-13 11:14 - 00000000 ____D C:\Users\Srdjan\AppData\Local\MercurySteam
2015-06-13 08:57 - 2015-06-13 08:57 - 00000000 ____D C:\Program Files\Common Files\AV
2015-06-13 08:32 - 2015-06-13 08:32 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\CubetractorSteam
2015-06-12 16:31 - 2015-06-18 23:45 - 00000000 ____D C:\FRST
2015-06-12 02:27 - 2015-06-12 05:34 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\XnView
2015-06-12 02:27 - 2015-06-12 02:27 - 00000000 ____D C:\Users\Srdjan\Desktop\XnView-win-full
2015-06-12 00:47 - 2015-06-12 00:47 - 02280101 _____ C:\Users\Srdjan\Documents\cpu-z_1.72.1-en.zip
2015-06-12 00:47 - 2015-06-12 00:47 - 00000000 ____D C:\Users\Srdjan\Documents\cpu-z_1.72.1-en
2015-06-11 15:16 - 2015-06-11 15:19 - 00000000 ____D C:\Users\Srdjan\Documents\Assassin's Creed Unity
2015-06-11 14:37 - 2015-06-11 14:37 - 00000908 _____ C:\Users\Srdjan\Desktop\Assassin's Creed Unity.lnk
2015-06-11 14:37 - 2015-06-11 14:37 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\Assassin's Creed Unity
2015-06-11 14:15 - 2015-06-11 14:15 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\dvdcss
2015-06-10 16:00 - 2013-02-19 19:02 - 00024824 _____ (ASUSTeK Computer Inc.) C:\Windows\system32\Drivers\IOMap64.sys
2015-06-10 05:21 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-10 05:21 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-10 05:21 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-10 05:21 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-10 05:21 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-06-10 05:21 - 2015-05-25 20:23 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-10 05:21 - 2015-05-25 20:23 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-06-10 05:21 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-06-10 05:21 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-10 05:21 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-10 05:21 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-10 05:21 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-10 05:21 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-10 05:21 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-10 05:21 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-10 05:21 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-10 05:21 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-06-10 05:21 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-10 05:21 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-10 05:21 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-10 05:21 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-10 05:21 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-10 05:21 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-06-10 05:21 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-06-10 05:21 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-06-10 05:21 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-06-10 05:21 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-06-10 05:21 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-06-10 05:21 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-06-10 05:21 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-06-10 05:21 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-06-10 05:21 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-06-10 05:21 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-06-10 05:21 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-06-10 05:21 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-06-10 05:21 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-06-10 05:21 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-06-10 05:21 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-10 05:21 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-10 05:21 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-06-10 05:21 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-06-10 05:21 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-10 05:21 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-06-10 05:21 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-10 05:21 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-06-10 05:21 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-06-10 05:21 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-10 05:21 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-06-10 05:21 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-10 05:21 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-06-10 05:21 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-06-10 05:21 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-06-10 05:21 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-10 05:21 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-06-10 05:21 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-10 05:21 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-06-10 05:21 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-10 05:21 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-06-10 05:21 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-10 05:21 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-10 05:21 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-10 05:21 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-10 05:21 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-10 05:21 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-06-10 05:21 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-10 05:21 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-10 05:21 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-10 05:21 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-10 05:21 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-10 05:21 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-10 05:21 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-10 05:21 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-10 05:21 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-10 05:21 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-10 05:21 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-10 05:21 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-10 05:21 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-10 05:21 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-10 05:21 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-10 05:21 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-10 05:21 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-10 05:21 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-10 05:21 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-10 05:21 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-10 05:21 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-10 05:21 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-10 05:21 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-10 05:21 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-10 05:21 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-10 05:21 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-10 05:21 - 2015-05-22 20:18 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-10 05:21 - 2015-05-22 20:18 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-10 05:21 - 2015-05-22 20:18 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-10 05:21 - 2015-05-22 20:18 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-10 05:21 - 2015-05-22 20:18 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-10 05:21 - 2015-05-22 20:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-10 05:21 - 2015-05-22 20:13 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-10 05:21 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-10 05:21 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-10 05:21 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-10 05:21 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-10 05:21 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-10 05:21 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-10 05:21 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-10 05:21 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-10 05:21 - 2015-05-21 15:19 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-10 05:21 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-10 05:21 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-10 05:21 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-10 05:21 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-10 05:21 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-10 05:21 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-06-10 05:21 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-06-10 05:21 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-06-10 05:21 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-06-10 05:21 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-06-10 05:21 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-10 05:21 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-10 05:21 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-06-09 19:37 - 2015-06-09 21:14 - 00000927 _____ C:\Users\Public\Desktop\Unity 5.1.0f3 (64-bit).lnk
2015-06-09 19:37 - 2015-06-09 19:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unity 5.1.0f3 (64-bit)
2015-06-01 15:01 - 2015-06-01 15:01 - 00000000 ____D C:\Users\Srdjan\AppData\Local\GWX
2015-06-01 04:12 - 2015-06-01 04:12 - 00000000 ____D C:\Users\Srdjan\Documents\Substance Painter
2015-06-01 04:12 - 2015-06-01 04:12 - 00000000 ____D C:\Users\Srdjan\AppData\Local\Allegorithmic
2015-06-01 03:21 - 2015-06-01 03:27 - 00000000 ____D C:\Users\Srdjan\Documents\3dsMax
2015-06-01 03:21 - 2015-06-01 03:21 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\Autodesk
2015-06-01 03:17 - 2015-06-01 03:20 - 00000000 ____D C:\ProgramData\FLEXnet
2015-06-01 03:17 - 2015-06-01 03:17 - 00000000 ____D C:\Users\Srdjan\AppData\Local\Autodesk
2015-06-01 03:13 - 2015-06-01 03:32 - 00000000 ____D C:\ProgramData\Autodesk
2015-06-01 03:13 - 2015-06-01 03:14 - 00000000 ____D C:\Program Files\Autodesk
2015-06-01 03:12 - 2015-06-05 01:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2015-06-01 03:12 - 2015-06-01 03:12 - 00000000 ____D C:\Program Files (x86)\Autodesk
2015-05-31 22:09 - 2015-05-31 22:34 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\WizardWars
2015-05-31 00:22 - 2015-05-31 00:22 - 00002004 _____ C:\Users\Public\Desktop\FileZilla Client.lnk
2015-05-31 00:22 - 2015-05-31 00:21 - 06471520 _____ (Tim Kosse) C:\Users\Srdjan\Downloads\FileZilla_3.11.0.1_win64-setup [1].exe
2015-05-27 03:43 - 2015-05-27 03:43 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\ParadoxInteractive
2015-05-27 02:48 - 2015-05-27 02:48 - 00053346 _____ C:\Users\Srdjan\Downloads\SGPP.user.js
2015-05-26 17:43 - 2015-05-26 18:33 - 00000000 ____D C:\Users\Srdjan\Documents\The Witcher 3
2015-05-26 06:56 - 2015-05-26 06:56 - 00000000 ____D C:\Users\Srdjan\Documents\Steam Cloud
2015-05-25 02:52 - 2015-05-26 20:09 - 00000000 ____D C:\Program Files (x86)\MiniTool Partition Wizard Free 9.0
2015-05-25 02:52 - 2015-01-14 11:28 - 03066880 _____ C:\Windows\system32\pwNative.exe
2015-05-25 02:52 - 2013-09-30 16:26 - 00019152 ____N C:\Windows\system32\pwdrvio.sys
2015-05-25 02:52 - 2013-09-30 16:26 - 00012504 ____N C:\Windows\system32\pwdspio.sys
2015-05-24 19:43 - 2015-05-24 19:43 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2013 Tools for Unity
2015-05-24 19:43 - 2015-05-24 19:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio Tools for Unity
2015-05-24 17:21 - 2015-05-24 17:21 - 01169132 _____ C:\Users\Srdjan\Downloads\FVD-Video-Downloader_6_6_5 (3).crx
2015-05-24 17:20 - 2015-05-24 17:20 - 01169132 _____ C:\Users\Srdjan\Downloads\FVD-Video-Downloader_6_6_5 (2).crx
2015-05-24 16:35 - 2015-05-24 16:36 - 01169132 _____ C:\Users\Srdjan\Downloads\FVD-Video-Downloader_6_6_5.crx
2015-05-24 15:30 - 2015-06-13 08:57 - 00000965 _____ C:\Users\Public\Desktop\AVG 2015.lnk
2015-05-24 15:29 - 2015-05-24 15:29 - 00000000 ____D C:\Users\Srdjan\AppData\Local\Avg
2015-05-24 15:27 - 2015-05-24 15:27 - 04928968 _____ (AVG Technologies) C:\Users\Srdjan\Downloads\avg_free_stb_all_5961p1_177.exe
2015-05-24 15:16 - 2015-05-24 15:16 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-05-24 15:15 - 2015-05-24 15:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-05-24 15:14 - 2015-06-18 23:27 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-24 15:14 - 2015-05-24 15:22 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-24 15:14 - 2015-05-24 15:22 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-24 14:32 - 2015-05-24 14:32 - 00000000 ____D C:\ProgramData\HitmanPro
2015-05-24 14:24 - 2015-05-24 14:48 - 00000000 ____D C:\AdwCleaner
2015-05-24 14:21 - 2015-05-24 14:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unity 5.0.2f1 (64-bit)
2015-05-24 06:16 - 2015-05-24 13:44 - 00000000 ____D C:\Program Files (x86)\WoorkApppp
2015-05-24 06:16 - 2015-05-24 13:44 - 00000000 ____D C:\Program Files (x86)\MyDieAlBox
2015-05-24 06:16 - 2015-05-24 13:44 - 00000000 ____D C:\Program Files (x86)\Badoo Notifications Extension
2015-05-24 06:16 - 2015-05-24 06:16 - 00000000 ____D C:\ProgramData\14093838508146067086
2015-05-24 06:15 - 2015-05-24 13:44 - 00000000 ____D C:\Program Files (x86)\ConnvertAppps
2015-05-23 15:25 - 2015-05-29 03:20 - 00000000 ____D C:\Users\Srdjan\AppData\Local\Spoiler_Alert
2015-05-22 22:23 - 2015-05-22 22:23 - 04197379 _____ C:\Users\Srdjan\Desktop\Torba_zatvorena_1080.psd
2015-05-22 04:13 - 2015-06-14 03:44 - 00000000 ____D C:\Program Files\MyDefrag v4.3.1
2015-05-22 04:13 - 2015-05-31 04:16 - 00000907 _____ C:\Users\Public\Desktop\MyDefrag.lnk
2015-05-22 04:13 - 2015-05-22 04:13 - 00004114 _____ C:\Windows\System32\Tasks\MyDefrag v4.3.1 Monthly
2015-05-22 04:13 - 2015-05-22 04:13 - 00003434 _____ C:\Windows\System32\Tasks\MyDefrag v4.3.1 Daily
2015-05-22 04:13 - 2015-05-22 04:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyDefrag v4.3.1
2015-05-22 04:13 - 2010-05-21 12:11 - 01147392 _____ (J.C. Kessels) C:\Windows\system32\MyDefragScreenSaver_v4.3.1.exe
2015-05-22 04:13 - 2010-05-21 12:11 - 00485376 _____ (J.C. Kessels) C:\Windows\system32\MyDefragScreenSaver_v4.3.1.scr
2015-05-22 03:49 - 2015-05-24 15:22 - 00000000 ____D C:\Program Files (x86)\PragmaEngine
2015-05-20 16:30 - 2015-05-20 16:30 - 00000000 ____D C:\Users\Srdjan\AppData\Local\chip.win32
2015-05-19 22:19 - 2015-05-19 22:19 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\Fatshark
2015-05-19 09:52 - 2015-05-19 09:52 - 00287200 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2015-05-19 08:47 - 2015-06-13 05:21 - 00000132 _____ C:\Users\Srdjan\AppData\Roaming\Adobe PNG Format CC Prefs

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-18 23:46 - 2015-03-24 14:33 - 00000000 ____D C:\Users\Srdjan\AppData\Local\whatpulse
2015-06-18 23:40 - 2009-07-14 06:45 - 00029376 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-18 23:40 - 2009-07-14 06:45 - 00029376 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-18 23:37 - 2013-12-16 17:24 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\Skype
2015-06-18 23:36 - 2014-12-14 14:37 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\Raptr
2015-06-18 23:34 - 2014-09-13 14:42 - 00000000 ____D C:\Program Files (x86)\Steam
2015-06-18 23:33 - 2014-08-07 16:21 - 171327488 _____ C:\Users\Srdjan\AppData\Local\SageThumbs.db3
2015-06-18 23:33 - 2014-04-28 14:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-06-18 23:32 - 2014-02-10 12:17 - 00000000 ____D C:\Users\Srdjan\AppData\Local\Battle.net
2015-06-18 22:53 - 2013-12-16 17:12 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-18 18:20 - 2013-12-17 07:59 - 01188528 _____ C:\Windows\WindowsUpdate.log
2015-06-18 12:44 - 2013-12-17 15:46 - 00000000 ____D C:\ProgramData\MFAData
2015-06-17 23:26 - 2015-04-13 02:15 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\AIMP3
2015-06-17 03:29 - 2013-12-20 03:49 - 00000000 ____D C:\ProgramData\Unity
2015-06-17 03:01 - 2013-12-22 02:21 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\KeePass
2015-06-16 14:28 - 2013-12-17 19:44 - 00000000 ____D C:\Users\Srdjan\Documents\Euro Truck Simulator 2
2015-06-16 14:25 - 2015-01-02 19:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2 Multiplayer
2015-06-16 14:25 - 2015-01-02 19:02 - 00000000 ____D C:\Program Files (x86)\Euro Truck Simulator 2 Multiplayer
2015-06-16 13:58 - 2014-05-18 12:31 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\uTorrent
2015-06-16 04:08 - 2015-03-24 21:46 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\Everything
2015-06-15 06:07 - 2014-07-23 02:54 - 00000000 ____D C:\Users\Srdjan\AppData\Local\CrashDumps
2015-06-15 06:07 - 2014-01-03 19:07 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\TeamViewer
2015-06-15 06:07 - 2013-12-17 17:07 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\DAEMON Tools Lite
2015-06-15 04:44 - 2015-02-12 00:32 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\vlc
2015-06-14 23:22 - 2015-05-01 04:17 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\FarSky
2015-06-14 21:18 - 2014-06-30 03:47 - 00000000 ____D C:\Users\Srdjan\Documents\Visual Studio 2013
2015-06-14 13:48 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-13 08:57 - 2014-03-31 16:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-06-12 17:55 - 2014-01-12 05:47 - 00000125 _____ C:\Users\Srdjan\AppData\Roaming\licecap.ini
2015-06-12 15:31 - 2014-09-04 21:39 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2015-06-12 05:57 - 2015-04-17 17:39 - 00000000 ____D C:\Users\Srdjan\AppData\Local\ProjectExplore
2015-06-11 17:33 - 2014-03-09 19:43 - 00000000 ____D C:\Windows\pss
2015-06-11 14:37 - 2014-06-27 00:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
2015-06-11 03:29 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-06-10 22:09 - 2014-12-04 11:16 - 00000000 __SHD C:\Users\Srdjan\AppData\Local\EmieBrowserModeList
2015-06-10 22:09 - 2014-04-29 01:26 - 00000000 __SHD C:\Users\Srdjan\AppData\Local\EmieUserList
2015-06-10 22:09 - 2014-04-29 01:26 - 00000000 __SHD C:\Users\Srdjan\AppData\Local\EmieSiteList
2015-06-10 19:07 - 2009-07-14 07:13 - 00791212 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-10 16:00 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-06-10 15:58 - 2009-07-14 06:45 - 05146600 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-10 15:56 - 2015-04-15 04:01 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-10 15:56 - 2014-05-06 03:00 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-10 15:56 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-10 12:13 - 2013-12-16 17:26 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-10 12:08 - 2013-12-16 17:49 - 00000000 ____D C:\Windows\system32\MRT
2015-06-10 11:57 - 2013-12-16 17:49 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-09 19:38 - 2013-12-20 01:09 - 00000000 ____D C:\Users\Srdjan\AppData\Local\Unity
2015-06-08 20:14 - 2013-12-16 16:21 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-06-07 04:50 - 2015-04-29 22:37 - 00002069 _____ C:\Users\Srdjan\Desktop\Code.lnk
2015-06-07 04:50 - 2015-04-29 22:37 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Corporation
2015-06-07 04:50 - 2015-04-29 22:37 - 00000000 ____D C:\Users\Srdjan\AppData\Local\SquirrelTemp
2015-06-07 04:49 - 2015-04-29 22:37 - 00000000 ____D C:\Users\Srdjan\AppData\Local\Code
2015-06-07 03:17 - 2014-01-06 01:03 - 00000132 _____ C:\Users\Srdjan\AppData\Roaming\Adobe PNG Format CS6 Prefs
2015-06-07 00:47 - 2013-12-16 16:27 - 00119584 _____ C:\Users\Srdjan\AppData\Local\GDIPFONTCACHEV1.DAT
2015-06-06 19:52 - 2014-12-18 22:55 - 00000971 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-06-06 16:00 - 2013-12-16 23:04 - 00000000 ____D C:\Users\Srdjan
2015-06-05 03:17 - 2014-07-24 00:29 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\CDisplayEx
2015-06-03 22:08 - 2014-02-10 12:17 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-06-02 22:55 - 2014-08-18 16:01 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\FileZilla
2015-06-02 05:10 - 2013-12-18 06:37 - 00000000 ____D C:\Users\Srdjan\Documents\My Games
2015-06-02 05:09 - 2014-12-14 02:04 - 00000000 ____D C:\Users\Srdjan\Documents\SavedGames
2015-06-02 03:43 - 2014-03-17 02:09 - 00000022 _____ C:\Windows\GPU-Z.INI
2015-06-01 04:07 - 2013-12-16 16:28 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-01 02:49 - 2013-12-16 23:08 - 00000000 ____D C:\Program Files (x86)\Google
2015-05-31 00:22 - 2014-08-18 16:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2015-05-31 00:22 - 2014-08-18 16:01 - 00000000 ____D C:\Program Files (x86)\FileZilla FTP Client
2015-05-30 18:35 - 2014-12-25 23:33 - 00000000 ____D C:\Users\Srdjan\AppData\Local\MyCity_Facts_Generator
2015-05-30 05:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2015-05-29 19:32 - 2014-05-04 07:15 - 00000000 ____D C:\Users\Srdjan\.VirtualBox
2015-05-27 03:43 - 2013-12-20 04:58 - 00000000 ____D C:\ProgramData\Steam
2015-05-26 20:15 - 2015-04-21 17:56 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2015-05-26 19:07 - 2014-06-28 19:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2015-05-26 19:07 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-05-24 19:43 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-05-24 15:22 - 2013-12-16 23:09 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-05-24 15:22 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Resources
2015-05-24 15:15 - 2013-12-16 23:08 - 00000000 ____D C:\Users\Srdjan\AppData\Local\Google
2015-05-24 15:14 - 2014-07-21 06:31 - 00000000 ____D C:\Users\Srdjan\AppData\Local\Deployment
2015-05-24 14:44 - 2014-10-19 00:33 - 00000000 ____D C:\Users\Srdjan\AppData\Local\Avg2015
2015-05-24 14:33 - 2014-12-10 12:28 - 00078104 _____ C:\Windows\SysWOW64\debug.log
2015-05-24 04:46 - 2014-08-23 14:23 - 00000000 ____D C:\Users\Srdjan\AppData\Local\Adobe
2015-05-23 17:27 - 2014-12-24 02:51 - 00000000 ____D C:\Users\Srdjan\Documents\AirDroid
2015-05-23 14:48 - 2014-01-06 01:25 - 00000000 ____D C:\Windows\SysWOW64\directx
2015-05-22 03:49 - 2015-02-01 08:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Life Is Strange
2015-05-21 20:38 - 2014-05-04 17:11 - 00000000 ____D C:\SharedVM
2015-05-20 23:26 - 2013-12-17 18:30 - 00000000 ____D C:\Program Files (x86)\Java
2015-05-20 23:11 - 2013-12-16 17:11 - 00000000 ____D C:\Program Files\Java
2015-05-20 16:30 - 2015-04-04 16:22 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-05-20 16:30 - 2015-04-04 16:22 - 00000000 ___SD C:\Windows\system32\GWX
2015-05-20 14:44 - 2015-03-24 14:33 - 00000000 ____D C:\Program Files (x86)\WhatPulse2
2015-05-20 14:33 - 2014-06-24 15:48 - 00000000 ____D C:\Program Files (x86)\Raptr
2015-05-19 07:41 - 2014-01-09 03:10 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\OBS
2015-05-19 05:30 - 2014-01-01 04:51 - 00007607 _____ C:\Users\Srdjan\AppData\Local\resmon.resmoncfg

==================== Files in the root of some directories =======

2014-04-09 13:45 - 2014-04-09 13:45 - 0000120 _____ () C:\Users\Srdjan\AppData\Roaming\03915780.dat
2015-05-19 08:47 - 2015-06-13 05:21 - 0000132 _____ () C:\Users\Srdjan\AppData\Roaming\Adobe PNG Format CC Prefs
2014-01-06 01:03 - 2015-06-07 03:17 - 0000132 _____ () C:\Users\Srdjan\AppData\Roaming\Adobe PNG Format CS6 Prefs
2014-08-07 16:24 - 2014-08-07 17:00 - 0000132 _____ () C:\Users\Srdjan\AppData\Roaming\Adobe Targa Format CS6 Prefs
2014-07-20 04:29 - 2014-07-20 04:29 - 0000099 _____ () C:\Users\Srdjan\AppData\Roaming\LauncherSettings_live.cfg
2014-01-12 05:47 - 2015-06-12 17:55 - 0000125 _____ () C:\Users\Srdjan\AppData\Roaming\licecap.ini
2014-11-06 00:13 - 2014-11-06 00:13 - 0000000 _____ () C:\Users\Srdjan\AppData\Roaming\Stardockfences_debug_snapshot.dat
2014-07-20 04:23 - 2014-07-20 04:24 - 0000040 _____ () C:\Users\Srdjan\AppData\Roaming\TheHunterSettings_steam_live.cfg
2014-08-18 14:42 - 2014-08-19 13:00 - 0004957 _____ () C:\Users\Srdjan\AppData\Roaming\wifi_speakers.dat
2014-11-29 08:48 - 2015-05-06 03:23 - 0001456 _____ () C:\Users\Srdjan\AppData\Local\Adobe Save for Web 13.0 Prefs
2014-04-29 01:34 - 2014-07-21 23:05 - 0005120 _____ () C:\Users\Srdjan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-06-16 18:21 - 2014-06-16 18:21 - 1065984 _____ () C:\Users\Srdjan\AppData\Local\file__0.localstorage
2014-01-09 04:13 - 2014-01-09 04:13 - 0000000 ___SH () C:\Users\Srdjan\AppData\Local\LumaEmu
2015-03-13 20:11 - 2015-03-13 20:11 - 0006511 _____ () C:\Users\Srdjan\AppData\Local\recently-used.xbel
2014-01-01 04:51 - 2015-05-19 05:30 - 0007607 _____ () C:\Users\Srdjan\AppData\Local\resmon.resmoncfg
2014-08-07 16:21 - 2015-06-18 23:33 - 171327488 _____ () C:\Users\Srdjan\AppData\Local\SageThumbs.db3
2013-12-17 18:43 - 2013-12-17 18:43 - 0000003 _____ () C:\Users\Srdjan\AppData\Local\updater.log
2013-12-17 18:43 - 2014-10-08 16:17 - 0000439 _____ () C:\Users\Srdjan\AppData\Local\UserProducts.xml

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-13 07:21

==================== End of log ============================



https://www.mycity.rs/must-login.png

rip
  • argus  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 27 Apr 2008
  • Poruke: 9160
  • Gde živiš: Prokuplje

Pozdrav, obrisi ga sa desktopa Mr. Green


Preuzmi smeenk-ov zoek.zip ili zoek.rar () sa ovog ili ovog linka i sačuvaj ga na Desktop.

Raspakuj arhivu u neki folder (uputstvo), a zatim:

zatvori browser i ostale pokrenute programe;
privremeno deaktiviraj zaštitni softver ( ukoliko je to potrebno ) Uputstvo ;
dvoklikom pokreni zoek na ikonicu programa ;
pričekaj da se alat startuje ...


U beli okvir prozora iskopiraj sledeći tekst:


createsrpoint;
autoclean;
emptyalltemp;
bitsadmin /reset /allusers;b
ipconfig /flushdns;b


Klikni na dugme i pričekaj da se skeniranje završi.


zoek ce po potrebi, restartovati Windows a na kraju rada, otvoriti Notepad sa izveštajem o skeniranju.

Napomena:Izveštaj će biti sačuvan pod nazivom zoek-results.log na sistemskoj particiji (tipična lokacija: C:\zoek-results.log)


Arrow Kopiraj sadrzaj tog loga u poruku.




Korak 2.



Ponovo pokreni Farbar i postavi nove izvestaje.

offline
  • Pridružio: 14 Feb 2008
  • Poruke: 12337

Poz,

zaspao sam tokom skeniranja pa zato kasni log.

Zoek ::

Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by Srdjan on pet 19.06.2015 at 14:21:26,45.
Microsoft Windows 7 Ultimate  6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Srdjan\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

19.6.2015 14:23:27 Zoek.exe System Restore Point Created Successfully.

==== Empty Folders Check ======================

C:\PROGRA~2\AGEIA Technologies deleted successfully
C:\PROGRA~2\dumps deleted successfully
C:\PROGRA~2\Origin Games deleted successfully
C:\PROGRA~2\PragmaEngine deleted successfully
C:\PROGRA~2\Stardock deleted successfully
C:\PROGRA~3\Hi-Rez Studios deleted successfully
C:\PROGRA~3\LumaEmu_SteamCloud deleted successfully
C:\PROGRA~3\Solid State Networks deleted successfully
C:\PROGRA~3\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} deleted successfully
C:\Users\Srdjan\AppData\Roaming\BitTorrent deleted successfully
C:\Users\Srdjan\AppData\Roaming\Curse Advertising deleted successfully
C:\Users\Srdjan\AppData\Roaming\GHISLER deleted successfully
C:\Users\Srdjan\AppData\Roaming\IonFx deleted successfully
C:\Users\Srdjan\AppData\Roaming\IrfanView deleted successfully
C:\Users\Srdjan\AppData\Roaming\Media Player Classic deleted successfully
C:\Users\Srdjan\AppData\Roaming\MMFApplications deleted successfully
C:\Users\Srdjan\AppData\Roaming\Samsung deleted successfully
C:\Users\Srdjan\AppData\Local\CrashDumps deleted successfully
C:\Users\Srdjan\AppData\Local\Downloaded Installations deleted successfully
C:\Users\Srdjan\AppData\Local\Dxtory Software deleted successfully
C:\Users\Srdjan\AppData\Local\EmieBrowserModeList deleted successfully
C:\Users\Srdjan\AppData\Local\EmieSiteList deleted successfully
C:\Users\Srdjan\AppData\Local\EmieUserList deleted successfully
C:\Users\Srdjan\AppData\Local\NCSOFT deleted successfully
C:\Users\Srdjan\AppData\Local\PACE Anti-Piracy deleted successfully
C:\Users\Srdjan\AppData\Local\Samsung deleted successfully
C:\Users\Srdjan\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-3012697505-3807635779-1283347855-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5C0D11B8-C5F6-4be3-AD2C-2B1A3EB94AB6} deleted successfully
HKEY_USERS\S-1-5-21-3012697505-3807635779-1283347855-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7AEFE841-DCA1-4A95-80CB-BE935D020300} deleted successfully
HKEY_USERS\S-1-5-21-3012697505-3807635779-1283347855-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7AEFE841-DCA1-4A95-80CB-BE935D020300} deleted successfully
HKEY_USERS\S-1-5-21-3012697505-3807635779-1283347855-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BFF1FF83-D72B-46DC-AC26-DEE8D1BD8B3F} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AEFE841-DCA1-4A95-80CB-BE935D020300} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WtuSystemSupport deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WtuSystemSupport deleted successfully

==== FireFox Fix ======================

ProfilePath: C:\Users\Srdjan\AppData\Roaming\Mozilla\Firefox\Profiles\sk3rsdnk.default

user.js not found
---- Lines mysearch removed from prefs.js ----
user_pref("browser.startup.homepage", "https://mysearch.avg.com/?cid={82735412-8796-4E46-858F-B91354DAD31E}&mid=f884ffc8592047d3a4af4597c6312308-5fbc7
---- Lines extensions.sbGsz3r89cxmoecx removed from prefs.js ----
user_pref("extensions.sbGsz3r89cxmoecx.epoch", "1433101543");
user_pref("extensions.sbGsz3r89cxmoecx.url", "http://toolkitcard.in/sync2/?q=hfZ9oe84hylSBGhEAen0rja7rda7tMqLDe49CNU0kVrMCMlNhd9Fqja8rTnEqdwFrTrMBzqUo
---- FireFox user.js and prefs.js backups ----

prefs_19.06.2015_1437_.backup

==== Batch Command(s) Run By Tool======================


==== Deleting Files \ Folders ======================

C:\PROGRA~2\AGEIA Technologies not found
C:\PROGRA~2\dumps not found
C:\PROGRA~2\Origin Games not found
C:\PROGRA~2\PragmaEngine not found
C:\PROGRA~2\Stardock not found
C:\PROGRA~3\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} not found
C:\PROGRA~2\ConnvertAppps deleted
C:\PROGRA~2\WoorkApppp deleted
C:\PROGRA~2\Badoo Notifications Extension deleted
C:\PROGRA~2\MyDieAlBox deleted
C:\Users\Srdjan\AppData\Roaming\Code deleted
C:\Users\Srdjan\AppData\Roaming\livestreamer deleted
C:\Users\Srdjan\AppData\Roaming\WizardWars deleted
C:\PROGRA~3\ihlibkobelamcemfkgageopcegehhkmg deleted
C:\PROGRA~3\kjdejndofepoindbiacfhpbpdigfpgbb deleted
C:\windows\SysNative\Tasks\Bidaily Synchronize Task[973b] deleted
C:\PROGRA~3\{9d5bcfde-da64-03e7-9d5b-bcfdeda63f7b} deleted
C:\PROGRA~3\14093838508146067086 deleted
C:\Users\Srdjan\AppData\Local\AVG Web TuneUp deleted
C:\Users\Srdjan\.android deleted
C:\STF3639.tmp deleted
C:\STF4985.tmp deleted
C:\STF88F5.tmp deleted
C:\STF9B06.tmp deleted
C:\STFABC6.tmp deleted
C:\STFB41.tmp deleted
C:\STFEEC3.tmp deleted
C:\install.exe deleted
C:\found.000 deleted
C:\Users\Srdjan\AppData\Roaming\licecap.ini deleted
C:\Users\Srdjan\AppData\Roaming\Common deleted
C:\PROGRA~3\AVG Web TuneUp deleted
C:\Users\Srdjan\AppData\Local\updater.log deleted
C:\Users\Srdjan\AppData\Local\node-webkit deleted
C:\Users\Srdjan\AppData\Local\CrashRpt deleted
C:\Users\Srdjan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LightShot deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\AVG SafeGuard toolbar deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\AVG Web TuneUp deleted
C:\windows\SysNative\GroupPolicy\Machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\windows\SysNative\GroupPolicy\gpt.ini deleted
C:\Windows\Syswow64\REN1A18.tmp deleted
C:\Windows\SysWow64\AI_RecycleBin deleted
C:\Users\Srdjan\AppData\Roaming\Mozilla\Firefox\Profiles\sk3rsdnk.default\jetpack deleted
"C:\Users\Srdjan\AppData\Local\LumaEmu" deleted
"C:\Users\Srdjan\AppData\Roaming\Roogoo\RSD.sav" deleted
"C:\PROGRA~2\AVG Web TuneUp\TBAPI.dll" deleted
"C:\Users\Srdjan\AppData\Local\Skillbrains\lightshot\5.1.4.17\Lightshot.dll" deleted
"C:\Users\Srdjan\AppData\Local\Skillbrains\lightshot\5.1.4.17\Lightshot.exe" deleted
"C:\Users\Srdjan\AppData\Roaming\Roogoo" deleted
"C:\PROGRA~2\AVG Web TuneUp" not deleted
"C:\PROGRA~3\Package Cache" deleted
"C:\Users\Srdjan\AppData\Local\Skillbrains" deleted
"C:\Users\Srdjan\AppData\LocalLow\AVG Web TuneUp" deleted
"C:\Users\Srdjan\AppData\Local\Skillbrains\lightshot" deleted
"C:\Users\Srdjan\AppData\Local\Skillbrains\lightshot\5.1.4.17" deleted

==== Firefox Extensions ======================

ProfilePath: C:\Users\Srdjan\AppData\Roaming\Mozilla\Firefox\Profiles\sk3rsdnk.default
- Video DownloadHelper - %ProfilePath%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Srdjan\AppData\Roaming\Mozilla\Firefox\Profiles\sk3rsdnk.default
C62322C77D1AAB77B1CF1130FCC3673A   - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll -   Shockwave Flash
E26F56A6E9E6E20132E53890E67C7FDC   - C:\Users\Srdjan\AppData\Local\SkypePlugin\7.3.0.483\npGatewayNpapi.dll -   Skype Web Plugin
60C7FDA90EB23BD3165F2AFB8DF8B456   - C:\Users\Srdjan\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll -   Unity Player
F690119ACB9236A2C1A83ECA24877673   - C:\Users\Srdjan\AppData\Local\SkypePlugin\7.3.0.483\npGatewayNpapi-x64.dll -   Skype Web Plugin


==== Chromium Look ======================

Google Chrome Version: 43.0.2357.124


Nimbus Screenshot - Srdjan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpconcjcammlapcogcnnelfmaeghhagj
Disable Extensions Temporarily - Srdjan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcfdefmogcogicollfebhgjiiakbjdje
Badoo Notifications Extension - Srdjan\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gngmhdpofjbdiecihebaaooakicnjjmc

==== Chromium Startpages ======================

C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Preferences
/*","https://*.googleusercontent.com/*"],"manifest_permissions":[]},"commands":{},"content_settings":[],"creation_flags":1,"events":["alarms.onAlarm","gcm.onMessage","identity.onSignInChanged","notifications.onButtonClicked","notifications.onClicked","notifications.onClosed","notifications.onPermissionLevelChanged","notifications.onShowSettings","runtime.onInstalled","runtime.onStartup","runtime.onSuspend","storage.onChanged"],"from_bookmark":false,"from_webstore":false,"granted_permissions":{"api":["alarms","background","gcm","identity","metricsPrivate","notifications","storage","tabs","webstorePrivate"],"explicit_host":["*://*.google.com/*","*://*.gstatic.com/*","https://*.googleapis.com/*","https://*.googleusercontent.com/*"],"manifest_permissions":[]},"incognito_content_settings":[],"incognito_preferences":{},"initial_keybindings_set":true,"install_time":"13076989975025936","location":5,"manifest":{"background":{"persistent":false,"scripts":["utility.js","cards.js","background.js"]},"description":"Integrates Google Now into Chrome.","icons":{"128":"images/icon128.png","16":"images/icon16.png","48":"images/icon48.png"},"key":"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhqJr32OFD/bMXW4Md7jMfd7LbwHXVc6x5bBQG5U+dloofoxrICDR20yur/40mQ8O//0sS1b8srvbab1CRlSrxoNCr9T80NAkfzx0gHyVS+p1Zow+1FzLMu9PiGwwFyN80HIB7GI/dIa0wC9K/2OrrzcHEhVH96DacTtWQqjfDVtZPjT7Xwv23dgoWcpbkRC86jMJot3dmX9xnn0KzoVc9gDOHSIkBLbkkr6Sp3LGXCCM4L0DJgxdFwaLr5WBzgC3y5x0/wwPIwN4PtIaK3BhH6njlksfnKwwIJ9iRT41V4BqbWu4mszO/7VJ3HJyw2DBpIc2grU9ZRRxrV3fRQG4wIDAQAB","manifest_version":2,"name":"Google Now","oauth2":{"auto_approve":true,"scopes":["https://www.googleapis.com/auth/gcm","https://www.googleapis.com/auth/googlenow"]},"optional_permissions":["background"],"permissions":["alarms","gcm","identity","metricsPrivate","notifications","storage","tabs","webstorePrivate","*://*.google.com/*","*://*.gstatic.com/*","https://*.googleapis.com/chromenow/v1/*","https://*.googleapis.com/gcm/*","https://*.googleusercontent.com/*"],"version":"1.2.0.1"},"path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\43.0.2357.65\\resources\\google_now","preferences":{},"regular_only_preferences":{},"state":1,"was_installed_by_default":false,"was_installed_by_oem":false}}},"google":{"services":{"last_username":"srki94@hotmail.com","username":"srki94@hotmail.com"}},"homepage":"","homepage_is_newtabpage":false,"pinned_tabs":[],"prefs":{"preference_reset_time":"13079136777011030"},"protection":{"macs":{"browser":{"show_home_button":"242750E5E43B596CD587AF61254FDADAB45161682FDDB0E192B4020C2CE5121C"},"default_search_provider":{"keyword":"8502EDAA246FF6B188C85C05F6080DA65076EE0A62D4EE8E39BD82FA093D73A4","name":"AA0695735AB7D8823CD47748A9EC6BB326F7A60C92606150D9296DAFEC83EE6E","search_url":"4B998657BB2032A178ED09715D63C117D1513F429B2A3DC4E97D81CCABDA307E"},"default_search_provider_data":{"template_url_data":"E59BE7E1DEF64B0C62466691BFD45ED4B6EA996D8154F55885732A76BE9BF0A8"},"extensions":{"settings":{"aegfbpchoheaflicfmggkmlmcccpjpgd":"553AFFDDE91B937E5BD3A236FF09B685AC19B94CA99D4462C65AD0F8FED865B1","ahfgeienlihckogmohjhadlkjgocpleb":"B5DD90DB4D3085E531315FDE43CFB02E4E0FD97FBE391BEE0288F128C5541BAA","bepbmhgboaologfdajaanbcjmnhjmhfn":"1DAC1988E8FFE2A013504D3AD21F06A98719856548AA2529623923AF263DFF4D","blakpkgjpemejpbmfiglncklihnhjkij":"7238E152D95CDDBA7D7AAC55356D041CF2C799B4931B5D20BB83E9C6F4C8E216","bpconcjcammlapcogcnnelfmaeghhagj":"4B4AB85E23BA11A614670B6A3C844BCC414B88AB7074619E73A082543241BB9B","cklbilaeedbblhpkhjfcnmaocjdodcnm":"A0CD786119AC4954A2C6CDB1A94A43E9A027A2FF090F68A9B9DCF00628F37927","eemcgdkfndhakfknompkggombfjjjeno":"77279870BB6A9A55675392009BBA1E68A2EFB0B5CDD4474EDB77B94A6749CF41","elicpjhcidhpjomhibiffojpinpmmpil":"6B2932CE169EE099FD89F0E9071D71409AC4C363E515CA4FF805EF17A6648197","ennkphjdgehloodpbhlhldgbnhmacadg":"05AAF4ADAB9623D6927CBEA1A0B4DA52662F5B51C3D21F5D2338FDD5747A815E","fbbmnbomimdgmecfpbilhoafgmmeagef":"18339F5714655BB857BECA41168DE6054D90E909F8FD2F951C5B7B37AEBD7AA0","fepbnnnkkadjhjahcafoaglimekefifl":"89487AF6097762CA59714CD0A9F7E0EEEBEDFB678846A62F01CD5E46D2F207E3","fploionmjgeclbkemipmkogoaohcdbig":"D4F12A0C661DAF8D67BF0E2699978870428C97F1B4660BDBAA41C9796067A0CB","gaabphjjdcjiimoakeoggokfiiganaja":"1F91E995DB98412C6030AE475AFD81FBEFB4C5660AF3C1EB3D21DF495AE63F38","gfdkimpbcpahaombhbimeihdjnejgicl":"F6E0703B4694DBC7EC51195F3AC90701AFD804D771FB539F0C1852F1D31E4442","gighmmpiobklfepjocnamgkkbiglidom":"D6E9D6BDB3926653A7F870D2C6E27342B01F966B01792406F14241A809D993C6","gkojfkhlekighikafcpjkiklfbnlmeio":"510DBD27CB08E3AFCFC893AED60AF8A68BC55F0AC296CED67BC2EE97296966EB","immpkjjlgappgfkkfieppnmlhakdmaab":"DE89A8606CAB85E1C747D39C02417BB5ABDDCF069E05F0DAB77AA0495A128176","kjdejndofepoindbiacfhpbpdigfpgbb":"73B51DBF77FCA84E8F8AF7B5D51E1E6792A4B01855569EEFF72FD7B63C1995DF","kmendfapggjehodndflmmgagdbamhnfd":"6574BC143BEEAC29D4F753A587C94B58492B0E9FF5A93C30398CC92F498226FA","lcfdefmogcogicollfebhgjiiakbjdje":"F0BEE76D5DAE04504BBA63228D76D118108578828C6FCBF8A5DC7D5152BCCE6D","lfmhcpmkbdkbgbmkjoiopeeegenkdikp":"6B8AE347B309EFF3AA51F61791A85729767A7A11F0167DBBA682683C9C445F4A","mfehgcgbbipciphmccgaenjidiccnmng":"A83CE829637E9DB7BA7500ABBE6C51DC4147CCB8417D0CA1B9FA215C311DC6D3","mfffpogegjflfpflabcdkioaeobkgjik":"386B56B6C86F95D15E8880D4419615D057F3537B8AFD485EF2CD084E16756FA5","mgndgikekgjfcpckkfioiadnlibdjbkf":"10A93142148BC9383C5FE548427CF86B809EFEF2DA73621D245E347739D708ED","mhjfbmdgcfjbbpaeojofohoefgiehjai":"85E0C72716371B0553A844829607D8B86C7091E61B401AD374019B2B51F511BA","nbpagnldghgfoolbancepceaanlmhfmd":"92D661243EBA38E404CEA0A5DBF0DC6338BECDDC852EF0B12AFF216A13CF4D5A","neajdppkdcdipfabeoofebfddakdcjhd":"049E9AFFFA5DC38ECCA0E319151A564F3DFAAFB0910418EE3F17E59240FD272D","nkeimhogjdpnpccoofpliimaahmaaome":"98F5EC6A18DC470FDE7FAABA2F230DDDB66B005D68EE1B817F2904C73D3CD991","pafkbggdmjlpgkdkcbjmhmfcdpncadgh":"A9D2250CCE3A1B8E0D111903C146B8BCE6252ED14F0C312EFA227455042CCF99"}},"google":{"services":{"last_username":"1C65CB3B23428A442D56F02152C0C287659D2DDC61DC4565F6342618A66E523C","username":"7F510DD8DB373545804313F281E25D4386893C375089A0BC9DAD43180CE4EED6"}},"homepage":"D7C425638AAC91A0219ACD1FA111A5F07CA94023DF1043640CE3B8A737403B34","homepage_is_newtabpage":"BEBC6F2CB9B49CA4B50AFAFE8BCD8F2DF0859BF518DD5E45C9C3347DFE908169","pinned_tabs":"BF9DA4BB9029A09A89293111DAE058C80C9F70C97CA9131D305A0EDF0F741308","prefs":{"preference_reset_time":"F09B285AE5A961FE40F7B14ADE55A888B7C152C1FC595F0916E322B4C076BF53"},"profile":{"reset_prompt_memento":"B4FB997DF484B4E1EDF31D4B7CBDA2CD7F009E8EC9501505CB77EF356628AC22"},"safebrowsing":{"incidents_sent":"5D50EA9878A4211D8B32D18938357358AA1B300E2C4B723841D8773D335DCE9E"},"search_provider_overrides":"220FB47110FF83DEB1C459A86BAD9A9050F9CE59F11CAFC173841A3D8EC21201","session":{"restore_on_startup":"1023013C044699EBED84C20F4F5AE97A3E91EC1C0A227AB4296254E372206F16","startup_urls":"3448674A2BBD78A9FFDC958645E3898E273839B3372B66C6F852D070FB652356"},"software_reporter":{"prompt_reason":"B2B9B3328A36B5844B5169134B7792F2E08DAAEAF11AADD4EB25126BBEAA99A9","prompt_seed":"A688987F841FF9D080AEAB2050E4D08F82032BF2D8D7A9358B2C60335CD00F1A","prompt_version":"008B8D2386B14C4E6462724AAE28A516FF15B302269FB16A5B101E8CF8C03FD2"},"sync":{"remaining_rollback_tries":"27EB432F1F23B51AFC3DE7A984246115035335D8C7A34A6E8F9C982D5B30D324"}},"super_mac":"066895FE3068F6E391873E0F64CB9351F01B12C6D6101CC1DB53D5CE883B44AB"},"session":{"restore_on_startup":5,"startup_urls":[]},"sync":{"remaining_rollback_tries":0}}


==== Chromium Fix ======================

C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.azlyrics.com_0.localstorage deleted successfully
C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.azlyrics.com_0.localstorage-journal deleted successfully
C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.darklyrics.com_0.localstorage deleted successfully
C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.darklyrics.com_0.localstorage-journal deleted successfully
C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.lyricsmode.com_0.localstorage deleted successfully
C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.lyricsmode.com_0.localstorage-journal deleted successfully
C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.metrolyrics.com_0.localstorage deleted successfully
C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.metrolyrics.com_0.localstorage-journal deleted successfully
C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_our.amplifinder.biz_0.localstorage deleted successfully
C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_our.amplifinder.biz_0.localstorage-journal deleted successfully
C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage deleted successfully
C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage-journal deleted successfully
C:\Users\Srdjan\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gngmhdpofjbdiecihebaaooakicnjjmc deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/p/?LinkId=255141"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google  Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9490A9E7-B0E9-D9EA-365C-3EE2B532055E} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1DAA6762-0F78-B6E5-EE41-AAC6A8C4B3B1} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{969FB8EF-38D0-4607-CFDE-397D08A961A3} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{471A07E9-3E75-283E-9320-32E903B10ACD} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG Web TuneUp deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AirDroid 3 deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ProxyCap deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SandboxieControl deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\srpskey deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Srdjan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Srdjan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F6MSLV1K will be deleted at reboot
C:\Users\Srdjan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GU5DPP2W will be deleted at reboot
C:\Users\Srdjan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W4AW37TF will be deleted at reboot
C:\Users\Srdjan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YB9AYXSB will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\Srdjan\AppData\Local\Mozilla\Firefox\Profiles\sk3rsdnk.default\cache2 emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
C:\Users\Srdjan\AppData\Local\Google\Chrome SxS\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=1169 folders=823 4216076943 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Srdjan\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Srdjan\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\PROGRA~2\AVG Web TuneUp"  not found
"C:\Users\Srdjan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F6MSLV1K" not found
"C:\Users\Srdjan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GU5DPP2W" not found
"C:\Users\Srdjan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W4AW37TF" not found
"C:\Users\Srdjan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YB9AYXSB" not found

==== EOF on pet 19.06.2015 at 17:30:18,60 ======================


FRST :
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-06-2015
Ran by Srdjan (administrator) on SRKI94 on 19-06-2015 18:31:56
Running from C:\Users\Srdjan\Desktop
Loaded Profiles: Srdjan (Available Profiles: Srdjan)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
() C:\Windows\SysWOW64\ASGT.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
(Apple Inc.) C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\System32\CISVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\GPUTweak.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
(Flux Software LLC) C:\Users\Srdjan\AppData\Local\FluxSoftware\Flux\flux.exe
() C:\Program Files (x86)\WhatPulse2\whatpulse.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Elias Fotinis) C:\Program Files (x86)\DeskPins\DeskPins.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe
(ASUS) C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(ATI Technologies Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Program Files (x86)\WhatPulse2\whatpulse-watchdog.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472992 2013-03-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3727824 2015-06-05] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-03-31] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKLM-x32\...\Run: [AdobeCEPServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe [1039248 2013-03-13] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55568 2015-05-15] (Raptr, Inc)
HKLM-x32\...\Run: [srpskey] => C:\WINDOWS\SYSTEM32\SRPSKEY.EXE
Winlogon\Notify\WB: C:\Program Files (x86)\Stardock\WindowBlinds\fast64.dll [X]
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\...\Run: [LightShot] => C:\Users\Srdjan\AppData\Local\Skillbrains\lightshot\Lightshot.exe
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\...\Run: [f.lux] => C:\Users\Srdjan\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-24] (Flux Software LLC)
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\...\Run: [WhatPulse] => C:\Program Files (x86)\WhatPulse2\whatpulse.exe [3681792 2015-05-16] ()
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7416088 2015-02-19] (Piriform Ltd)
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\...\Run: [AirDroid 3] => C:\Program Files (x86)\AirDroid\AirDroid.exe /start
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\...\Run: [GalaxyClient] => [X]
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\...\Run: [Google Update] => "C:\Users\Srdjan\AppData\Local\Google\Update\GoogleUpdate.exe" /c
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31280256 2015-04-17] (Skype Technologies S.A.)
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\...\MountPoints2: {7ec0afdf-6723-11e3-a8d4-94de80d5cafb} - F:\setup.exe
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2013-08-16] (Microsoft Corporation) <==== ATTENTION
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [333824 2010-11-21] (Microsoft Corporation)
HKU\S-1-5-18\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe [2690560 2013-07-02] (ASUS)
Startup: C:\Users\Srdjan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DeskPins.lnk [2015-02-25]
ShortcutTarget: DeskPins.lnk -> C:\Program Files (x86)\DeskPins\DeskPins.exe (Elias Fotinis)
ShellIconOverlayIdentifiers: [  MailRuCloudIconOverlay0] -> {64A9418A-B6B1-4112-B75C-E61633C9A31F} =>  No File
ShellIconOverlayIdentifiers: [  MailRuCloudIconOverlay1] -> {6A2E142B-EA63-433A-AC05-5223CBD26E65} =>  No File
ShellIconOverlayIdentifiers: [  MailRuCloudIconOverlay2] -> {6AFCC535-2F12-4F50-9F0A-1CF856CFC95D} =>  No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
ShellIconOverlayIdentifiers-x32: [  MailRuCloudIconOverlay0] -> {64A9418A-B6B1-4112-B75C-E61633C9A31F} =>  No File
ShellIconOverlayIdentifiers-x32: [  MailRuCloudIconOverlay1] -> {6A2E142B-EA63-433A-AC05-5223CBD26E65} =>  No File
ShellIconOverlayIdentifiers-x32: [  MailRuCloudIconOverlay2] -> {6AFCC535-2F12-4F50-9F0A-1CF856CFC95D} =>  No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3012697505-3807635779-1283347855-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-05-09] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-09] (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-05-13] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-13] (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Filter: AutorunsDisabled - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL [2010-02-28] (Microsoft Corporation)
Filter-x32: AutorunsDisabled - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL [2012-10-31] (Microsoft Corporation)
Hosts: 127.0.0.1 activation.cloud.techsmith.com
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Srdjan\AppData\Roaming\Mozilla\Firefox\Profiles\sk3rsdnk.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-05] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-09] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-09] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2013-03-21] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-05] ()
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll No File
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-13] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-24] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-24] (Google Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2013-03-21] (Adobe Systems)
FF Plugin HKU\S-1-5-21-3012697505-3807635779-1283347855-1000: @onlive.com/OnLiveGameClientDetector,version=1.0.0 -> C:\Program Files (x86)\OnLive\Plugin\npolgdet.dll No File
FF Plugin HKU\S-1-5-21-3012697505-3807635779-1283347855-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Srdjan\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-01] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3012697505-3807635779-1283347855-1000: SkypePlugin -> C:\Users\Srdjan\AppData\Local\SkypePlugin\7.3.0.483\npGatewayNpapi.dll [2015-05-15] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-3012697505-3807635779-1283347855-1000: SkypePlugin64 -> C:\Users\Srdjan\AppData\Local\SkypePlugin\7.3.0.483\npGatewayNpapi-x64.dll [2015-05-15] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-3012697505-3807635779-1283347855-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2015-06-10] ()
FF Extension: Video DownloadHelper - C:\Users\Srdjan\AppData\Roaming\Mozilla\Firefox\Profiles\sk3rsdnk.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2015-04-23]

Chrome:
=======
CHR Profile: C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Nimbus Screenshot) - C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpconcjcammlapcogcnnelfmaeghhagj [2015-05-25]
CHR Extension: (Video Downloader professional) - C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2015-06-15]
CHR Extension: (Disable Extensions Temporarily) - C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcfdefmogcogicollfebhgjiiakbjdje [2015-05-25]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-03-31] (Advanced Micro Devices, Inc.) [File not signed]
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [File not signed]
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3461072 2015-06-05] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [312816 2015-06-05] (AVG Technologies CZ, s.r.o.)
R2 Bonjour Service; C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe [384512 2015-03-09] (Apple Inc.) [File not signed]
S3 BRSptSvc; C:\ProgramData\BitRaider\BRSptSvc.exe [477960 2014-05-03] (BitRaider, LLC)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-20] (Microsoft Corporation) [File not signed]
S4 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [520416 2014-01-28] (Futuremark)
S3 GalaxyClientService; C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe [1743928 2015-05-26] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6516792 2015-05-26] (GOG.com)
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [22744 2014-10-15] (Microsoft Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1931632 2015-04-21] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-08-09] ()
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe [105448 2014-08-28] (Razer Inc.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-01] (TeamViewer GmbH)
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-08-16] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [62152 2014-10-28] (Advanced Micro Devices, Inc.)
R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2014-04-09] (Wondershare)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22680 2012-10-25] ()
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162784 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [287200 2015-05-19] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [253408 2015-05-12] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [256992 2015-04-15] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [378336 2015-05-07] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [224224 2015-05-12] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [40928 2015-03-20] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [281568 2015-05-12] (AVG Technologies CZ, s.r.o.)
S3 b06diag; C:\Windows\system32\drivers\bxdiaga.sys [88104 2012-03-08] (Broadcom Corporation)
S3 BFN7x64; C:\Windows\system32\drivers\Xeno7x64.sys [157288 2012-02-22] (Bigfoot Networks, Inc.)
S3 BRDriver64; C:\ProgramData\BitRaider\BRDriver64.sys [75048 2014-05-03] (BitRaider)
S3 bxfcoe; C:\Windows\system32\drivers\bxfcoe.sys [178216 2012-02-22] (Broadcom Corporation)
S3 bxois; C:\Windows\system32\drivers\bxois.sys [539176 2012-02-22] (Broadcom Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-11-26] (Disc Soft Ltd)
S3 EtronSTOR; C:\Windows\System32\Drivers\EtronSTOR.sys [32512 2012-07-24] (Etron Technology Inc)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [27552 2014-10-21] (REALiX(tm))
R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [24824 2013-02-19] (ASUSTeK Computer Inc.)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-08-16] (Microsoft Corporation)
S2 AODDriver4.2.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-19 18:31 - 2015-06-19 18:32 - 00022633 _____ C:\Users\Srdjan\Desktop\FRST.txt
2015-06-19 17:31 - 2015-06-19 17:31 - 00000000 ____D C:\Users\Srdjan\AppData\Local\CrashRpt
2015-06-19 14:52 - 2015-06-19 14:21 - 00024064 _____ C:\Windows\zoek-delete.exe
2015-06-19 14:23 - 2015-06-19 17:30 - 00023471 _____ C:\zoek-results.log
2015-06-19 14:21 - 2015-06-19 14:44 - 00000000 ____D C:\zoek_backup
2015-06-19 13:50 - 2015-06-19 17:29 - 00000704 _____ C:\Windows\PFRO.log
2015-06-18 23:45 - 2015-06-18 23:45 - 02109952 _____ (Farbar) C:\Users\Srdjan\Desktop\FRST64.exe
2015-06-18 23:32 - 2015-06-19 17:32 - 00000324 _____ C:\Windows\Tasks\Bidaily Synchronize Task[973b].job
2015-06-18 18:29 - 2015-06-18 18:29 - 00000846 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2015-06-18 18:29 - 2015-06-18 18:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2015-06-15 21:22 - 2015-06-19 17:29 - 00001792 _____ C:\Windows\setupact.log
2015-06-15 21:22 - 2015-06-15 21:22 - 00000000 _____ C:\Windows\setuperr.log
2015-06-15 18:40 - 2015-06-15 18:51 - 00000000 ____D C:\Users\Srdjan\AppData\Local\SkypePlugin
2015-06-15 02:59 - 2015-06-15 02:59 - 00000000 ____D C:\ProgramData\Baidu
2015-06-14 20:41 - 2015-06-18 23:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-06-13 21:04 - 2015-06-13 21:04 - 00002156 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2015-06-13 11:14 - 2015-06-13 11:14 - 00000000 ____D C:\Users\Srdjan\AppData\Local\MercurySteam
2015-06-13 08:57 - 2015-06-13 08:57 - 00000000 ____D C:\Program Files\Common Files\AV
2015-06-13 08:32 - 2015-06-13 08:32 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\CubetractorSteam
2015-06-12 16:31 - 2015-06-19 18:31 - 00000000 ____D C:\FRST
2015-06-12 02:27 - 2015-06-12 05:34 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\XnView
2015-06-12 02:27 - 2015-06-12 02:27 - 00000000 ____D C:\Users\Srdjan\Desktop\XnView-win-full
2015-06-12 00:47 - 2015-06-12 00:47 - 02280101 _____ C:\Users\Srdjan\Documents\cpu-z_1.72.1-en.zip
2015-06-12 00:47 - 2015-06-12 00:47 - 00000000 ____D C:\Users\Srdjan\Documents\cpu-z_1.72.1-en
2015-06-11 15:16 - 2015-06-11 15:19 - 00000000 ____D C:\Users\Srdjan\Documents\Assassin's Creed Unity
2015-06-11 14:37 - 2015-06-11 14:37 - 00000908 _____ C:\Users\Srdjan\Desktop\Assassin's Creed Unity.lnk
2015-06-11 14:37 - 2015-06-11 14:37 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\Assassin's Creed Unity
2015-06-11 14:15 - 2015-06-11 14:15 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\dvdcss
2015-06-10 16:00 - 2013-02-19 19:02 - 00024824 _____ (ASUSTeK Computer Inc.) C:\Windows\system32\Drivers\IOMap64.sys
2015-06-10 05:21 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-10 05:21 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-10 05:21 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-10 05:21 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-10 05:21 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-06-10 05:21 - 2015-05-25 20:23 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-10 05:21 - 2015-05-25 20:23 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-06-10 05:21 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-06-10 05:21 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-06-10 05:21 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-10 05:21 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-10 05:21 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-10 05:21 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-10 05:21 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-10 05:21 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-10 05:21 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-10 05:21 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-10 05:21 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-06-10 05:21 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-10 05:21 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-10 05:21 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-10 05:21 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-10 05:21 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-10 05:21 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-06-10 05:21 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-06-10 05:21 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-06-10 05:21 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-06-10 05:21 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-06-10 05:21 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-06-10 05:21 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-06-10 05:21 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-06-10 05:21 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-06-10 05:21 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-06-10 05:21 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-06-10 05:21 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-06-10 05:21 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-06-10 05:21 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-06-10 05:21 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-06-10 05:21 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-06-10 05:21 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 19:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-10 05:21 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-10 05:21 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-06-10 05:21 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-06-10 05:21 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 05:21 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-10 05:21 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-06-10 05:21 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-10 05:21 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-06-10 05:21 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-06-10 05:21 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-10 05:21 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-06-10 05:21 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-10 05:21 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-06-10 05:21 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-06-10 05:21 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-06-10 05:21 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-10 05:21 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-06-10 05:21 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-10 05:21 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-06-10 05:21 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-10 05:21 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-06-10 05:21 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-10 05:21 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-10 05:21 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-10 05:21 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-10 05:21 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-10 05:21 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-06-10 05:21 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-10 05:21 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-10 05:21 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-10 05:21 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-10 05:21 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-10 05:21 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-10 05:21 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-10 05:21 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-10 05:21 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-10 05:21 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-10 05:21 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-10 05:21 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-10 05:21 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-10 05:21 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-10 05:21 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-10 05:21 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-10 05:21 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-10 05:21 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-10 05:21 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-10 05:21 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-10 05:21 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-10 05:21 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-10 05:21 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-10 05:21 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-10 05:21 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-10 05:21 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-10 05:21 - 2015-05-22 20:18 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-10 05:21 - 2015-05-22 20:18 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-10 05:21 - 2015-05-22 20:18 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-10 05:21 - 2015-05-22 20:18 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-10 05:21 - 2015-05-22 20:18 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-10 05:21 - 2015-05-22 20:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-10 05:21 - 2015-05-22 20:13 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-10 05:21 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-10 05:21 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-10 05:21 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-10 05:21 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-10 05:21 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-10 05:21 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-10 05:21 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-10 05:21 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-10 05:21 - 2015-05-21 15:19 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-10 05:21 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-10 05:21 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-10 05:21 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-10 05:21 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-10 05:21 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-10 05:21 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-06-10 05:21 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-06-10 05:21 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-06-10 05:21 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-06-10 05:21 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-06-10 05:21 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-10 05:21 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-10 05:21 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-06-09 19:37 - 2015-06-09 21:14 - 00000927 _____ C:\Users\Public\Desktop\Unity 5.1.0f3 (64-bit).lnk
2015-06-09 19:37 - 2015-06-09 19:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unity 5.1.0f3 (64-bit)
2015-06-01 15:01 - 2015-06-01 15:01 - 00000000 ____D C:\Users\Srdjan\AppData\Local\GWX
2015-06-01 04:12 - 2015-06-01 04:12 - 00000000 ____D C:\Users\Srdjan\Documents\Substance Painter
2015-06-01 04:12 - 2015-06-01 04:12 - 00000000 ____D C:\Users\Srdjan\AppData\Local\Allegorithmic
2015-06-01 03:21 - 2015-06-01 03:27 - 00000000 ____D C:\Users\Srdjan\Documents\3dsMax
2015-06-01 03:21 - 2015-06-01 03:21 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\Autodesk
2015-06-01 03:17 - 2015-06-01 03:20 - 00000000 ____D C:\ProgramData\FLEXnet
2015-06-01 03:17 - 2015-06-01 03:17 - 00000000 ____D C:\Users\Srdjan\AppData\Local\Autodesk
2015-06-01 03:13 - 2015-06-01 03:32 - 00000000 ____D C:\ProgramData\Autodesk
2015-06-01 03:13 - 2015-06-01 03:14 - 00000000 ____D C:\Program Files\Autodesk
2015-06-01 03:12 - 2015-06-05 01:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2015-06-01 03:12 - 2015-06-01 03:12 - 00000000 ____D C:\Program Files (x86)\Autodesk
2015-05-31 00:22 - 2015-05-31 00:22 - 00002004 _____ C:\Users\Public\Desktop\FileZilla Client.lnk
2015-05-31 00:22 - 2015-05-31 00:21 - 06471520 _____ (Tim Kosse) C:\Users\Srdjan\Downloads\FileZilla_3.11.0.1_win64-setup [1].exe
2015-05-27 03:43 - 2015-05-27 03:43 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\ParadoxInteractive
2015-05-27 02:48 - 2015-05-27 02:48 - 00053346 _____ C:\Users\Srdjan\Downloads\SGPP.user.js
2015-05-26 17:43 - 2015-05-26 18:33 - 00000000 ____D C:\Users\Srdjan\Documents\The Witcher 3
2015-05-26 06:56 - 2015-05-26 06:56 - 00000000 ____D C:\Users\Srdjan\Documents\Steam Cloud
2015-05-25 02:52 - 2015-05-26 20:09 - 00000000 ____D C:\Program Files (x86)\MiniTool Partition Wizard Free 9.0
2015-05-25 02:52 - 2015-01-14 11:28 - 03066880 _____ C:\Windows\system32\pwNative.exe
2015-05-25 02:52 - 2013-09-30 16:26 - 00019152 ____N C:\Windows\system32\pwdrvio.sys
2015-05-25 02:52 - 2013-09-30 16:26 - 00012504 ____N C:\Windows\system32\pwdspio.sys
2015-05-24 19:43 - 2015-05-24 19:43 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2013 Tools for Unity
2015-05-24 19:43 - 2015-05-24 19:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio Tools for Unity
2015-05-24 17:21 - 2015-05-24 17:21 - 01169132 _____ C:\Users\Srdjan\Downloads\FVD-Video-Downloader_6_6_5 (3).crx
2015-05-24 17:20 - 2015-05-24 17:20 - 01169132 _____ C:\Users\Srdjan\Downloads\FVD-Video-Downloader_6_6_5 (2).crx
2015-05-24 16:35 - 2015-05-24 16:36 - 01169132 _____ C:\Users\Srdjan\Downloads\FVD-Video-Downloader_6_6_5.crx
2015-05-24 15:30 - 2015-06-13 08:57 - 00000965 _____ C:\Users\Public\Desktop\AVG 2015.lnk
2015-05-24 15:29 - 2015-05-24 15:29 - 00000000 ____D C:\Users\Srdjan\AppData\Local\Avg
2015-05-24 15:27 - 2015-05-24 15:27 - 04928968 _____ (AVG Technologies) C:\Users\Srdjan\Downloads\avg_free_stb_all_5961p1_177.exe
2015-05-24 15:16 - 2015-05-24 15:16 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-05-24 15:15 - 2015-05-24 15:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-05-24 15:14 - 2015-06-19 18:27 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-24 15:14 - 2015-05-24 15:22 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-24 15:14 - 2015-05-24 15:22 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-24 14:32 - 2015-05-24 14:32 - 00000000 ____D C:\ProgramData\HitmanPro
2015-05-24 14:24 - 2015-05-24 14:48 - 00000000 ____D C:\AdwCleaner
2015-05-24 14:21 - 2015-05-24 14:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unity 5.0.2f1 (64-bit)
2015-05-23 15:25 - 2015-05-29 03:20 - 00000000 ____D C:\Users\Srdjan\AppData\Local\Spoiler_Alert
2015-05-22 22:23 - 2015-05-22 22:23 - 04197379 _____ C:\Users\Srdjan\Desktop\Torba_zatvorena_1080.psd
2015-05-22 04:13 - 2015-06-14 03:44 - 00000000 ____D C:\Program Files\MyDefrag v4.3.1
2015-05-22 04:13 - 2015-05-31 04:16 - 00000907 _____ C:\Users\Public\Desktop\MyDefrag.lnk
2015-05-22 04:13 - 2015-05-22 04:13 - 00004114 _____ C:\Windows\System32\Tasks\MyDefrag v4.3.1 Monthly
2015-05-22 04:13 - 2015-05-22 04:13 - 00003434 _____ C:\Windows\System32\Tasks\MyDefrag v4.3.1 Daily
2015-05-22 04:13 - 2015-05-22 04:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyDefrag v4.3.1
2015-05-22 04:13 - 2010-05-21 12:11 - 01147392 _____ (J.C. Kessels) C:\Windows\system32\MyDefragScreenSaver_v4.3.1.exe
2015-05-22 04:13 - 2010-05-21 12:11 - 00485376 _____ (J.C. Kessels) C:\Windows\system32\MyDefragScreenSaver_v4.3.1.scr
2015-05-20 16:30 - 2015-05-20 16:30 - 00000000 ____D C:\Users\Srdjan\AppData\Local\chip.win32

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-19 18:32 - 2013-12-16 17:24 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\Skype
2015-06-19 18:25 - 2015-03-24 14:33 - 00000000 ____D C:\Users\Srdjan\AppData\Local\whatpulse
2015-06-19 17:54 - 2013-12-17 15:46 - 00000000 ____D C:\ProgramData\MFAData
2015-06-19 17:53 - 2013-12-16 17:12 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-19 17:39 - 2009-07-14 06:45 - 00029376 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-19 17:39 - 2009-07-14 06:45 - 00029376 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-19 17:35 - 2013-12-17 07:59 - 01223634 _____ C:\Windows\WindowsUpdate.log
2015-06-19 17:33 - 2014-12-14 14:37 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\Raptr
2015-06-19 17:30 - 2014-08-07 16:21 - 171393024 _____ C:\Users\Srdjan\AppData\Local\SageThumbs.db3
2015-06-19 17:29 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-19 15:32 - 2014-12-10 00:35 - 00000008 __RSH C:\ProgramData\ntuser.pol
2015-06-19 14:40 - 2013-12-16 23:04 - 00000000 ____D C:\Users\Srdjan
2015-06-19 14:40 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2015-06-19 13:50 - 2014-04-28 14:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-06-19 02:48 - 2014-05-04 07:15 - 00000000 ____D C:\Users\Srdjan\.VirtualBox
2015-06-19 02:22 - 2013-12-20 03:49 - 00000000 ____D C:\ProgramData\Unity
2015-06-19 01:34 - 2014-09-13 14:42 - 00000000 ____D C:\Program Files (x86)\Steam
2015-06-18 23:32 - 2014-02-10 12:17 - 00000000 ____D C:\Users\Srdjan\AppData\Local\Battle.net
2015-06-17 23:26 - 2015-04-13 02:15 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\AIMP3
2015-06-17 03:01 - 2013-12-22 02:21 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\KeePass
2015-06-16 14:28 - 2013-12-17 19:44 - 00000000 ____D C:\Users\Srdjan\Documents\Euro Truck Simulator 2
2015-06-16 14:25 - 2015-01-02 19:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2 Multiplayer
2015-06-16 14:25 - 2015-01-02 19:02 - 00000000 ____D C:\Program Files (x86)\Euro Truck Simulator 2 Multiplayer
2015-06-16 13:58 - 2014-05-18 12:31 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\uTorrent
2015-06-16 04:08 - 2015-03-24 21:46 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\Everything
2015-06-15 06:07 - 2014-01-03 19:07 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\TeamViewer
2015-06-15 06:07 - 2013-12-17 17:07 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\DAEMON Tools Lite
2015-06-15 04:44 - 2015-02-12 00:32 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\vlc
2015-06-14 23:22 - 2015-05-01 04:17 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\FarSky
2015-06-14 21:18 - 2014-06-30 03:47 - 00000000 ____D C:\Users\Srdjan\Documents\Visual Studio 2013
2015-06-13 08:57 - 2014-03-31 16:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-06-13 05:21 - 2015-05-19 08:47 - 00000132 _____ C:\Users\Srdjan\AppData\Roaming\Adobe PNG Format CC Prefs
2015-06-12 15:31 - 2014-09-04 21:39 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2015-06-12 05:57 - 2015-04-17 17:39 - 00000000 ____D C:\Users\Srdjan\AppData\Local\ProjectExplore
2015-06-11 17:33 - 2014-03-09 19:43 - 00000000 ____D C:\Windows\pss
2015-06-11 14:37 - 2014-06-27 00:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
2015-06-11 03:29 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-06-10 19:07 - 2009-07-14 07:13 - 00791212 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-10 16:00 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-06-10 15:58 - 2009-07-14 06:45 - 05146600 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-10 15:56 - 2015-04-15 04:01 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-10 15:56 - 2014-05-06 03:00 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-10 15:56 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-10 12:13 - 2013-12-16 17:26 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-10 12:08 - 2013-12-16 17:49 - 00000000 ____D C:\Windows\system32\MRT
2015-06-10 11:57 - 2013-12-16 17:49 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-09 19:38 - 2013-12-20 01:09 - 00000000 ____D C:\Users\Srdjan\AppData\Local\Unity
2015-06-08 20:14 - 2013-12-16 16:21 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-06-07 04:50 - 2015-04-29 22:37 - 00002069 _____ C:\Users\Srdjan\Desktop\Code.lnk
2015-06-07 04:50 - 2015-04-29 22:37 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Corporation
2015-06-07 04:50 - 2015-04-29 22:37 - 00000000 ____D C:\Users\Srdjan\AppData\Local\SquirrelTemp
2015-06-07 04:49 - 2015-04-29 22:37 - 00000000 ____D C:\Users\Srdjan\AppData\Local\Code
2015-06-07 03:17 - 2014-01-06 01:03 - 00000132 _____ C:\Users\Srdjan\AppData\Roaming\Adobe PNG Format CS6 Prefs
2015-06-07 00:47 - 2013-12-16 16:27 - 00119584 _____ C:\Users\Srdjan\AppData\Local\GDIPFONTCACHEV1.DAT
2015-06-06 19:52 - 2014-12-18 22:55 - 00000971 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-06-05 03:17 - 2014-07-24 00:29 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\CDisplayEx
2015-06-03 22:08 - 2014-02-10 12:17 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-06-02 22:55 - 2014-08-18 16:01 - 00000000 ____D C:\Users\Srdjan\AppData\Roaming\FileZilla
2015-06-02 05:10 - 2013-12-18 06:37 - 00000000 ____D C:\Users\Srdjan\Documents\My Games
2015-06-02 05:09 - 2014-12-14 02:04 - 00000000 ____D C:\Users\Srdjan\Documents\SavedGames
2015-06-02 03:43 - 2014-03-17 02:09 - 00000022 _____ C:\Windows\GPU-Z.INI
2015-06-01 02:49 - 2013-12-16 23:08 - 00000000 ____D C:\Program Files (x86)\Google
2015-05-31 00:22 - 2014-08-18 16:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2015-05-31 00:22 - 2014-08-18 16:01 - 00000000 ____D C:\Program Files (x86)\FileZilla FTP Client
2015-05-30 18:35 - 2014-12-25 23:33 - 00000000 ____D C:\Users\Srdjan\AppData\Local\MyCity_Facts_Generator
2015-05-30 05:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2015-05-27 03:43 - 2013-12-20 04:58 - 00000000 ____D C:\ProgramData\Steam
2015-05-26 20:15 - 2015-04-21 17:56 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2015-05-26 19:07 - 2014-06-28 19:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2015-05-26 19:07 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-05-24 19:43 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-05-24 15:22 - 2013-12-16 23:09 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-05-24 15:22 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Resources
2015-05-24 15:15 - 2013-12-16 23:08 - 00000000 ____D C:\Users\Srdjan\AppData\Local\Google
2015-05-24 15:14 - 2014-07-21 06:31 - 00000000 ____D C:\Users\Srdjan\AppData\Local\Deployment
2015-05-24 14:44 - 2014-10-19 00:33 - 00000000 ____D C:\Users\Srdjan\AppData\Local\Avg2015
2015-05-24 14:33 - 2014-12-10 12:28 - 00078104 _____ C:\Windows\SysWOW64\debug.log
2015-05-24 04:46 - 2014-08-23 14:23 - 00000000 ____D C:\Users\Srdjan\AppData\Local\Adobe
2015-05-23 17:27 - 2014-12-24 02:51 - 00000000 ____D C:\Users\Srdjan\Documents\AirDroid
2015-05-23 14:48 - 2014-01-06 01:25 - 00000000 ____D C:\Windows\SysWOW64\directx
2015-05-22 03:49 - 2015-02-01 08:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Life Is Strange
2015-05-21 20:38 - 2014-05-04 17:11 - 00000000 ____D C:\SharedVM
2015-05-20 23:26 - 2013-12-17 18:30 - 00000000 ____D C:\Program Files (x86)\Java
2015-05-20 23:11 - 2013-12-16 17:11 - 00000000 ____D C:\Program Files\Java
2015-05-20 16:30 - 2015-04-04 16:22 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-05-20 16:30 - 2015-04-04 16:22 - 00000000 ___SD C:\Windows\system32\GWX
2015-05-20 14:44 - 2015-03-24 14:33 - 00000000 ____D C:\Program Files (x86)\WhatPulse2
2015-05-20 14:33 - 2014-06-24 15:48 - 00000000 ____D C:\Program Files (x86)\Raptr

==================== Files in the root of some directories =======

2014-04-09 13:45 - 2014-04-09 13:45 - 0000120 _____ () C:\Users\Srdjan\AppData\Roaming\03915780.dat
2015-05-19 08:47 - 2015-06-13 05:21 - 0000132 _____ () C:\Users\Srdjan\AppData\Roaming\Adobe PNG Format CC Prefs
2014-01-06 01:03 - 2015-06-07 03:17 - 0000132 _____ () C:\Users\Srdjan\AppData\Roaming\Adobe PNG Format CS6 Prefs
2014-08-07 16:24 - 2014-08-07 17:00 - 0000132 _____ () C:\Users\Srdjan\AppData\Roaming\Adobe Targa Format CS6 Prefs
2014-07-20 04:29 - 2014-07-20 04:29 - 0000099 _____ () C:\Users\Srdjan\AppData\Roaming\LauncherSettings_live.cfg
2014-11-06 00:13 - 2014-11-06 00:13 - 0000000 _____ () C:\Users\Srdjan\AppData\Roaming\Stardockfences_debug_snapshot.dat
2014-07-20 04:23 - 2014-07-20 04:24 - 0000040 _____ () C:\Users\Srdjan\AppData\Roaming\TheHunterSettings_steam_live.cfg
2014-08-18 14:42 - 2014-08-19 13:00 - 0004957 _____ () C:\Users\Srdjan\AppData\Roaming\wifi_speakers.dat
2014-11-29 08:48 - 2015-05-06 03:23 - 0001456 _____ () C:\Users\Srdjan\AppData\Local\Adobe Save for Web 13.0 Prefs
2014-04-29 01:34 - 2014-07-21 23:05 - 0005120 _____ () C:\Users\Srdjan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-06-16 18:21 - 2014-06-16 18:21 - 1065984 _____ () C:\Users\Srdjan\AppData\Local\file__0.localstorage
2015-03-13 20:11 - 2015-03-13 20:11 - 0006511 _____ () C:\Users\Srdjan\AppData\Local\recently-used.xbel
2014-01-01 04:51 - 2015-05-19 05:30 - 0007607 _____ () C:\Users\Srdjan\AppData\Local\resmon.resmoncfg
2014-08-07 16:21 - 2015-06-19 17:30 - 171393024 _____ () C:\Users\Srdjan\AppData\Local\SageThumbs.db3
2013-12-17 18:43 - 2014-10-08 16:17 - 0000439 _____ () C:\Users\Srdjan\AppData\Local\UserProducts.xml

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-13 07:21

==================== End of log ============================



https://www.mycity.rs/must-login.png

rip
  • argus  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 27 Apr 2008
  • Poruke: 9160
  • Gde živiš: Prokuplje

1. Otvori Notepad (Text Document) i iskopiraj sledeći tekst unutar kod polja ispod:

Start
CreateRestorePoint:
closeprocesses:
emptytemp:
C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Preferences
Task: {5D429AA9-11B7-4EAB-9BEA-D7329EFFB2E1} - \Bidaily Synchronize Task[973b] No Task File <==== ATTENTION
Task: C:\Windows\Tasks\Bidaily Synchronize Task[973b].job => c:\programdata\{9d5bcfde-da64-03e7-9d5b-bcfdeda63f7b}\yamb.exe <==== ATTENTION
AlternateDataStreams: C:\Program Files\Common Files\Microsoft Shared:I9rXLavx15ILuWvMmS
AlternateDataStreams: C:\ProgramData\Microsoft:qGENiJ0bY5bWc0EDr3FmZLSU
AlternateDataStreams: C:\ProgramData\Microsoft:rHEgsE9FVEmXyBPUYdMwzI7mLC7
ShortcutTarget: DeskPins.lnk -> C:\Program Files (x86)\DeskPins\DeskPins.exe (Elias Fotinis)
ShellIconOverlayIdentifiers: [  MailRuCloudIconOverlay0] -> {64A9418A-B6B1-4112-B75C-E61633C9A31F} =>  No File
ShellIconOverlayIdentifiers: [  MailRuCloudIconOverlay1] -> {6A2E142B-EA63-433A-AC05-5223CBD26E65} =>  No File
ShellIconOverlayIdentifiers: [  MailRuCloudIconOverlay2] -> {6AFCC535-2F12-4F50-9F0A-1CF856CFC95D} =>  No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
ShellIconOverlayIdentifiers-x32: [  MailRuCloudIconOverlay0] -> {64A9418A-B6B1-4112-B75C-E61633C9A31F} =>  No File
ShellIconOverlayIdentifiers-x32: [  MailRuCloudIconOverlay1] -> {6A2E142B-EA63-433A-AC05-5223CBD26E65} =>  No File
ShellIconOverlayIdentifiers-x32: [  MailRuCloudIconOverlay2] -> {6AFCC535-2F12-4F50-9F0A-1CF856CFC95D} =>  No File
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF Plugin HKU\S-1-5-21-3012697505-3807635779-1283347855-1000: @onlive.com/OnLiveGameClientDetector,version=1.0.0 -> C:\Program Files (x86)\OnLive\Plugin\npolgdet.dll No File
S2 AODDriver4.2.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
RemoveProxy:
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
CMD: ipconfig /flushdns
CMD: bitsadmin /reset /allusers
End


2. Sačuvaj notepad na Desktop pod nazivom fixlist.txt
To možes uraditi i iz notepad-a => klik na File potom na Save As i u novom prozoru, dole pod File Name: staviš za naziv fixlist.txt
Napomena: Važno je da se oba fajla, FRST i fixlist nalaze na istoj lokaciji jer u suprotnom fix nece raditi.

3. Ponovo pokreni FRST/FRST64, klikni jednom na dugme Fix i sačekaj.
Ukoliko alat zatraži restart sistema, dozvoli mu i postaraj se da alat kompletira fix nakon restarta sistema.



Alat će formirati log (Fixlog.txt) na Desktop-u. Potrebno je sadržaj tog loga iskopirati u poruku.
Napomena: Ukoliko te alat upozori da postoji novija verzija, postaraj se da preuzmes i koristiš ažuriranu kopiju FRST-a.

offline
  • Pridružio: 14 Feb 2008
  • Poruke: 12337

Fix result of Farbar Recovery Scan Tool (x64) Version:13-06-2015
Ran by Srdjan at 2015-06-19 19:45:24 Run:4
Running from C:\Users\Srdjan\Desktop
Loaded Profiles: Srdjan (Available Profiles: Srdjan)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CreateRestorePoint:
closeprocesses:
emptytemp:
C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Preferences
Task: {5D429AA9-11B7-4EAB-9BEA-D7329EFFB2E1} - \Bidaily Synchronize Task[973b] No Task File <==== ATTENTION
Task: C:\Windows\Tasks\Bidaily Synchronize Task[973b].job => c:\programdata\{9d5bcfde-da64-03e7-9d5b-bcfdeda63f7b}\yamb.exe <==== ATTENTION
AlternateDataStreams: C:\Program Files\Common Files\Microsoft Shared:I9rXLavx15ILuWvMmS
AlternateDataStreams: C:\ProgramData\Microsoft:qGENiJ0bY5bWc0EDr3FmZLSU
AlternateDataStreams: C:\ProgramData\Microsoft:rHEgsE9FVEmXyBPUYdMwzI7mLC7
ShortcutTarget: DeskPins.lnk -> C:\Program Files (x86)\DeskPins\DeskPins.exe (Elias Fotinis)
ShellIconOverlayIdentifiers: [  MailRuCloudIconOverlay0] -> {64A9418A-B6B1-4112-B75C-E61633C9A31F} =>  No File
ShellIconOverlayIdentifiers: [  MailRuCloudIconOverlay1] -> {6A2E142B-EA63-433A-AC05-5223CBD26E65} =>  No File
ShellIconOverlayIdentifiers: [  MailRuCloudIconOverlay2] -> {6AFCC535-2F12-4F50-9F0A-1CF856CFC95D} =>  No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
ShellIconOverlayIdentifiers-x32: [  MailRuCloudIconOverlay0] -> {64A9418A-B6B1-4112-B75C-E61633C9A31F} =>  No File
ShellIconOverlayIdentifiers-x32: [  MailRuCloudIconOverlay1] -> {6A2E142B-EA63-433A-AC05-5223CBD26E65} =>  No File
ShellIconOverlayIdentifiers-x32: [  MailRuCloudIconOverlay2] -> {6AFCC535-2F12-4F50-9F0A-1CF856CFC95D} =>  No File
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF Plugin HKU\S-1-5-21-3012697505-3807635779-1283347855-1000: @onlive.com/OnLiveGameClientDetector,version=1.0.0 -> C:\Program Files (x86)\OnLive\Plugin\npolgdet.dll No File
S2 AODDriver4.2.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
RemoveProxy:
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
CMD: ipconfig /flushdns
CMD: bitsadmin /reset /allusers
End
*****************

Restore point was successfully created.
Processes closed successfully.
C:\Users\Srdjan\AppData\Local\Google\Chrome\User Data\Default\Preferences => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5D429AA9-11B7-4EAB-9BEA-D7329EFFB2E1}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5D429AA9-11B7-4EAB-9BEA-D7329EFFB2E1}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Bidaily Synchronize Task[973b]" => key removed successfully
C:\Windows\Tasks\Bidaily Synchronize Task[973b].job => moved successfully.
C:\Program Files\Common Files\Microsoft Shared => ":I9rXLavx15ILuWvMmS" ADS removed successfully.
C:\ProgramData\Microsoft => ":qGENiJ0bY5bWc0EDr3FmZLSU" ADS removed successfully.
C:\ProgramData\Microsoft => ":rHEgsE9FVEmXyBPUYdMwzI7mLC7" ADS removed successfully.
C:\Program Files (x86)\DeskPins\DeskPins.exe => moved successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\  MailRuCloudIconOverlay0" => key removed successfully
HKCR\CLSID\{64A9418A-B6B1-4112-B75C-E61633C9A31F} => key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\  MailRuCloudIconOverlay1" => key removed successfully
HKCR\CLSID\{6A2E142B-EA63-433A-AC05-5223CBD26E65} => key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\  MailRuCloudIconOverlay2" => key removed successfully
HKCR\CLSID\{6AFCC535-2F12-4F50-9F0A-1CF856CFC95D} => key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => key removed successfully
HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => key not found.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\  MailRuCloudIconOverlay0" => key removed successfully
HKCR\Wow6432Node\CLSID\{64A9418A-B6B1-4112-B75C-E61633C9A31F} => key not found.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\  MailRuCloudIconOverlay1" => key removed successfully
HKCR\Wow6432Node\CLSID\{6A2E142B-EA63-433A-AC05-5223CBD26E65} => key not found.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\  MailRuCloudIconOverlay2" => key removed successfully
HKCR\Wow6432Node\CLSID\{6AFCC535-2F12-4F50-9F0A-1CF856CFC95D} => key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
"HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\Software\MozillaPlugins\@onlive.com/OnLiveGameClientDetector,version=1.0.0" => key removed successfully
C:\Program Files (x86)\OnLive\Plugin\npolgdet.dll not found.
AODDriver4.2.0 => Service removed successfully
EagleX64 => Service removed successfully
gdrv => Service removed successfully
VGPU => Service removed successfully
xhunter1 => Service removed successfully

========= RemoveProxy: =========

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
HKU\S-1-5-21-3012697505-3807635779-1283347855-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully


========= End of RemoveProxy: =========


========= reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f =========

The operation completed successfully.



========= End of Reg: =========


========= reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f =========

The operation completed successfully.



========= End of Reg: =========


=========  ipconfig /flushdns =========


Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========


=========  bitsadmin /reset /allusers =========


BITSADMIN version 3.0 [ 7.5.7601 ]
BITS administration utility.
(C) Copyright 2000-2006 Microsoft Corp.

BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.

Unable to cancel {9934B271-FE6C-4409-8803-FE8E1B95B20D}.
0 out of 1 jobs canceled.

========= End of CMD: =========

EmptyTemp: => 454.9 MB temporary data Removed.


The system needed a reboot..

==== End of Fixlog 19:45:52 ====

rip
  • argus  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 27 Apr 2008
  • Poruke: 9160
  • Gde živiš: Prokuplje

Srki jel sve u redu?

offline
  • Pridružio: 14 Feb 2008
  • Poruke: 12337

argus ::Srki jel sve u redu?

Ovog puta kasnim jer sam pekao palačinke.
Ima i za AMF tim, sa kremom i medom Ziveli

Sve izgleda OK, bar ono što mogu da vidim Mr. Green
Plašio sam se za ono što nisam video.

Hvala argus Ziveli

rip
  • argus  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 27 Apr 2008
  • Poruke: 9160
  • Gde živiš: Prokuplje

Sledeća procedura će implementirati završno čišćenje.



Arrow Preuzmi "Xplode"-ov DelFix alat i snimi ga na Desktop.

Dvoklikom pokreni alat i štikliraj kućice ispred sledećih opcija;
Remove disinfection tools
Create registry backup
Purge System Restore


Klikni na dugme Run i pričekaj trenutak dok alat ne završi svoj rad.

Od ovog trenutka, svi korišćeni alati u ovoj temi bi trebali biti obrisani.
Ukoliko neki alat ili izveštaj nije uklonjen, slobodno ih obriši ručno.


Alat će takođe formirati izveštaj za tebe. (C:\DelFix.txt)
- Alat će snimiti i zdravo stanje registy-ja i napraviti backup koristeci integrisan program "ERUNT" u %windir%\ERUNT\DelFix
- DelFix briše stare system restore tačke i pravi novu, svežu tačku nakon čišćenja.

offline
  • Pridružio: 14 Feb 2008
  • Poruke: 12337

Sređeno. Ziveli

rip
  • argus  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 27 Apr 2008
  • Poruke: 9160
  • Gde živiš: Prokuplje

Ziveli

Ko je trenutno na forumu
 

Ukupno su 611 korisnika na forumu :: 15 registrovanih, 6 sakrivenih i 590 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: bojank, djordje92sm, GreenMan, ILGromovnik, Insan, Korisnik038, kybonacci, Leonardo, m0nstrum_, nemkea71, Pohovani_00, raykan, rsk, Snorks, Živković