OTL logfile created on: 10/6/2011 12:07:12 PM - Run 3
OTL by OldTimer - Version 3.2.29.1     Folder = C:\Users\Greg\Desktop\LOGI
 Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1.96 Gb Total Physical Memory | 1.39 Gb Available Physical Memory | 71.05% Memory free
3.92 Gb Paging File | 2.97 Gb Available in Paging File | 75.68% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 108.89 Gb Total Space | 31.86 Gb Free Space | 29.26% Space Free | Partition Type: NTFS
Drive D: | 108.89 Gb Total Space | 0.58 Gb Free Space | 0.53% Space Free | Partition Type: NTFS
Drive F: | 27.31 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: GREG-KOMPUTER | User Name: Greg | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011/10/05 11:06:26 | 000,582,656 | ---- | M] (OldTimer Tools) -- C:\Users\Greg\Desktop\LOGI\OTL.exe
PRC - [2011/09/06 18:16:42 | 000,974,944 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
PRC - [2011/09/06 18:16:16 | 003,076,144 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
PRC - [2011/05/25 17:29:54 | 001,951,112 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2011/05/25 17:29:48 | 001,336,712 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
PRC - [2011/04/12 13:31:55 | 000,114,688 | ---- | M] () -- C:\Program Files\blueconnect\blueconnect.exe
PRC - [2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010/11/20 14:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2010/09/02 11:52:12 | 000,989,184 | ---- | M] (IVT Corporation) -- C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
PRC - [2010/08/31 14:24:26 | 000,319,574 | ---- | M] (IVT Corporation) -- C:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe
PRC - [2010/08/31 14:21:48 | 000,102,503 | ---- | M] (IVT Corporation) -- C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
PRC - [2010/08/31 14:20:20 | 000,147,563 | ---- | M] (IVT Corporation) -- C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
PRC - [2010/08/19 10:52:14 | 000,241,664 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\ProgramData\DatacardService\DCSHelper.exe
PRC - [2010/08/19 10:52:04 | 000,229,376 | ---- | M] () -- C:\ProgramData\DatacardService\DCService.exe
PRC - [2010/07/01 00:19:10 | 000,356,352 | ---- | M] (Transaction Software, D 81829 Munich) -- D:\Program Files\kamoka\KAMOKA_CD\4_2010\db\tbmux32.exe
PRC - [2010/04/16 14:11:02 | 000,650,920 | ---- | M] () -- C:\Program Files\Samsung\Samsung Update Plus\SUPNotifier.exe
PRC - [2009/12/31 14:13:52 | 000,110,592 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Users\Greg\AppData\Roaming\blueconnect\ouc.exe
PRC - [2009/11/04 06:11:48 | 000,835,072 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe
PRC - [2009/10/26 13:53:14 | 000,091,136 | ---- | M] (SAMSUNG Electronics) -- C:\Program Files\Samsung\Samsung Support Center\SSCKbdHk.exe
PRC - [2009/10/13 12:03:04 | 000,716,800 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
PRC - [2009/10/07 03:31:56 | 002,246,144 | ---- | M] (SEC) -- C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe
PRC - [2009/06/03 13:59:02 | 000,103,720 | ---- | M] (CyberLink) -- C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
PRC - [2009/04/15 16:52:06 | 000,091,432 | ---- | M] (CyberLink Corp.) -- C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe
PRC - [2008/09/26 06:00:00 | 000,199,680 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\spool\drivers\w32x86\3\E_FATIFBE.EXE
PRC - [2007/12/17 04:00:00 | 000,143,872 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE
PRC - [2007/01/11 04:02:00 | 000,113,664 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2011/05/28 22:04:56 | 000,140,288 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2011/04/12 13:31:55 | 000,114,688 | ---- | M] () -- C:\Program Files\blueconnect\blueconnect.exe
MOD - [2010/09/26 16:20:42 | 000,159,744 | ---- | M] () -- C:\Program Files\blueconnect\SMSPlugin.dll
MOD - [2010/09/25 15:25:48 | 000,122,880 | ---- | M] () -- C:\Program Files\blueconnect\DeviceMgrPlugin.dll
MOD - [2010/09/25 15:25:38 | 000,237,568 | ---- | M] () -- C:\Program Files\blueconnect\DeviceMgrUIPlugin.dll
MOD - [2010/09/25 15:23:18 | 001,019,904 | ---- | M] () -- C:\Program Files\blueconnect\NDISAPI.dll
MOD - [2010/08/31 14:20:22 | 000,028,672 | ---- | M] () -- C:\Windows\System32\BsMobileCSps.dll
MOD - [2010/06/28 15:41:34 | 000,155,648 | ---- | M] () -- C:\Program Files\blueconnect\DetectDev.dll
MOD - [2010/04/16 14:11:02 | 000,650,920 | ---- | M] () -- C:\Program Files\Samsung\Samsung Update Plus\SUPNotifier.exe
MOD - [2010/04/16 14:11:02 | 000,155,648 | ---- | M] () -- C:\Program Files\Samsung\Samsung Update Plus\HMXML.dll
MOD - [2010/04/12 09:19:56 | 000,237,568 | ---- | M] () -- C:\Program Files\IVT Corporation\BlueSoleil\Mobile\BaseLib.dll
MOD - [2010/03/31 21:59:22 | 000,122,880 | ---- | M] () -- C:\Program Files\IVT Corporation\BlueSoleil\Mobile\s40pack.dll
MOD - [2010/01/14 19:04:08 | 000,065,536 | ---- | M] () -- C:\Program Files\blueconnect\SpeedManagerPlugin.dll
MOD - [2009/12/21 15:29:50 | 000,090,112 | ---- | M] () -- C:\Program Files\blueconnect\DialUpPlugin.dll
MOD - [2009/12/21 13:22:52 | 000,065,536 | ---- | M] () -- C:\Program Files\blueconnect\ConfigFilePlugin.dll
MOD - [2009/12/21 12:31:36 | 000,139,264 | ---- | M] () -- C:\Program Files\blueconnect\NetInfoPlugin.dll
MOD - [2009/06/03 13:59:14 | 000,013,096 | ---- | M] () -- C:\Program Files\CyberLink\Power2Go\CLMLSvcPS.dll
MOD - [2009/06/03 13:59:02 | 000,619,816 | ---- | M] () -- C:\Program Files\CyberLink\Power2Go\CLMediaLibrary.dll
MOD - [2009/05/23 11:02:32 | 000,061,440 | R--- | M] () -- C:\Program Files\blueconnect\XCodec.dll
MOD - [2009/05/23 11:02:30 | 000,061,440 | R--- | M] () -- C:\Program Files\blueconnect\DeviceOperate.dll
MOD - [2009/05/23 11:02:24 | 000,557,056 | R--- | M] () -- C:\Program Files\blueconnect\atcomm.dll
MOD - [2009/01/09 11:31:54 | 000,139,264 | ---- | M] () -- C:\Program Files\blueconnect\LocaleMgrPlugin.dll
MOD - [2009/01/09 11:30:38 | 000,032,768 | ---- | M] () -- C:\Program Files\blueconnect\NotifyServicePlugin.dll
MOD - [2008/11/08 10:52:10 | 000,090,112 | R--- | M] () -- C:\Program Files\blueconnect\FileManager.dll
MOD - [2008/11/08 10:52:08 | 000,014,848 | R--- | M] () -- C:\Program Files\blueconnect\isaputrace.dll
MOD - [2006/08/12 05:48:40 | 000,049,152 | ---- | M] () -- C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll
MOD - [2003/05/01 17:23:28 | 000,041,472 | ---- | M] () -- C:\Program Files\IVT Corporation\BlueSoleil\Mobile\CsCvt.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2011/09/06 18:16:42 | 000,974,944 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
SRV - [2011/05/25 17:29:48 | 001,336,712 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2010/09/02 11:52:12 | 000,989,184 | ---- | M] (IVT Corporation) [Auto | Running] -- C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe -- (BlueSoleilCS)
SRV - [2010/08/31 14:21:48 | 000,102,503 | ---- | M] (IVT Corporation) [On_Demand | Running] -- C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe -- (BsHelpCS)
SRV - [2010/08/31 14:20:20 | 000,147,563 | ---- | M] (IVT Corporation) [Auto | Running] -- C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe -- (BsMobileCS)
SRV - [2010/08/19 10:52:04 | 000,229,376 | ---- | M] () [Auto | Running] -- C:\ProgramData\DatacardService\DCService.exe -- (DCService.exe)
SRV - [2010/07/01 00:19:10 | 000,356,352 | ---- | M] (Transaction Software, D 81829 Munich) [Auto | Running] -- D:\Program Files\kamoka\KAMOKA_CD\4_2010\db\tbmux32.exe -- (Transbase KAMOKA CD 4_2010 Service)
SRV - [2010/06/04 11:05:49 | 001,343,400 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2009/07/14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008/09/08 07:59:00 | 000,575,488 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2007/12/17 04:00:00 | 000,143,872 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE -- (EPSON_EB_RPCV4_01) EPSON V5 Service4(01)
SRV - [2007/01/11 04:02:00 | 000,113,664 | ---- | M] (SEIKO EPSON CORPORATION) [Auto | Running] -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE -- (EPSON_PM_RPCV4_01) EPSON V3 Service4(01)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2011/08/09 13:57:10 | 000,163,424 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\Windows\System32\drivers\eamonm.sys -- (eamonm)
DRV - [2011/08/04 09:20:38 | 000,103,112 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\epfwwfpr.sys -- (epfwwfpr)
DRV - [2011/08/04 09:20:36 | 000,118,104 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\System32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2010/11/20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/08/26 21:29:28 | 000,022,024 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\btcombus.sys -- (BTCOMBUS)
DRV - [2010/08/26 21:29:26 | 000,025,992 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\btcomport.sys -- (BTCOM)
DRV - [2010/08/18 22:19:44 | 000,017,928 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\btnetdrv.sys -- (BT)
DRV - [2010/04/09 15:24:18 | 000,069,504 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ew_jucdcacm.sys -- (huawei_cdcacm)
DRV - [2010/04/09 15:24:12 | 000,063,616 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ew_jubusenum.sys -- (huawei_enumerator)
DRV - [2010/04/06 18:33:10 | 000,025,864 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\btnetBus.sys -- (btnetBUs)
DRV - [2010/04/06 18:32:48 | 000,023,048 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IvtBtBus.sys -- (IvtBtBUs)
DRV - [2010/04/06 18:32:44 | 000,020,104 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- C:\windows\System32\Drivers\BtHidBus.sys -- (BtHidBus)
DRV - [2010/03/25 10:08:38 | 000,105,984 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2010/03/20 11:56:04 | 000,101,504 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - [2009/11/06 22:53:58 | 001,227,776 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2009/09/28 11:22:00 | 000,315,392 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\yk62x86.sys -- (yukonw7)
DRV - [2009/07/14 01:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp)
DRV - [2009/07/14 01:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\windows\system32\DRIVERS\serial.sys -- (Serial)
DRV - [2009/07/10 15:44:52 | 000,122,880 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IntcHdmi.sys -- (IntcHdmiAddService) Intel(R)
DRV - [2009/05/01 15:41:06 | 000,384,896 | ---- | M] (Phoenix Technologies Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CryptOSD.sys -- (CryptOSD)
DRV - [2009/03/18 17:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2008/08/26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.order.1: "Web Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.wp.pl/"
FF - prefs.js..extensions.enabledItems: ietab@ip.cn:1.98.20110322
FF - prefs.js..extensions.enabledItems: coralietab_updater@mozdev.org:1.4
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..keyword.URL: "http://startsear.ch/?aff=1&q="
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Greg\AppData\Local\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Greg\AppData\Local\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/09/08 07:20:39 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/09/26 19:03:15 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.5\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2010/10/20 13:30:13 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.5\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2011/09/30 12:37:06 | 000,000,000 | ---D | M]
 
[2010/10/20 13:30:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Greg\AppData\Roaming\mozilla\Extensions
[2010/10/20 13:30:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Greg\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2011/08/24 16:34:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Greg\AppData\Roaming\mozilla\Firefox\Profiles\42c1mz4p.default\extensions
[2011/07/13 09:38:48 | 000,000,000 | ---D | M] (IE Tab 2 (FF 3.6+)) -- C:\Users\Greg\AppData\Roaming\mozilla\Firefox\Profiles\42c1mz4p.default\extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB}
[2010/05/31 11:41:31 | 000,000,000 | ---D | M] (Integra Plug-in by Tomasz Gienas) -- C:\Users\Greg\AppData\Roaming\mozilla\Firefox\Profiles\42c1mz4p.default\extensions\coralietab_updater@mozdev.org
[2011/04/12 12:27:55 | 000,000,000 | ---D | M] (IE Tab Plus) -- C:\Users\Greg\AppData\Roaming\mozilla\Firefox\Profiles\42c1mz4p.default\extensions\ietab@ip.cn
[2011/07/11 20:04:02 | 000,000,633 | ---- | M] () -- C:\Users\Greg\AppData\Roaming\Mozilla\Firefox\Profiles\42c1mz4p.default\searchplugins\startsear.xml
[2010/08/27 13:45:54 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010/08/27 13:45:54 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
() (No name found) -- C:\USERS\GREG\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\42C1MZ4P.DEFAULT\EXTENSIONS\INTEGRA@INTEGRA.COM.PL.XPI
[2011/09/08 07:20:39 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2010/08/27 13:45:25 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011/08/31 12:38:58 | 000,082,944 | ---- | M] (vShare.tv ) -- C:\Program Files\mozilla firefox\plugins\npvsharetvplg.dll
[2011/09/05 09:58:47 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2011/09/05 09:58:47 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2011/09/05 09:58:47 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2011/09/05 09:58:47 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2011/09/05 09:58:47 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2011/09/05 09:58:47 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
 
O1 HOSTS File: ([2009/06/10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (IE5BarLauncherBHO Class) - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.)
O3 - HKLM\..\Toolbar: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: [BtTray] C:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe (IVT Corporation)
O4 - HKLM..\Run: [CLMLServer] C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe (CyberLink)
O4 - HKLM..\Run: [DataCardMonitor] C:\Program Files\blueconnect\DataCardMonitor.exe (Huawei Technologies Co., Ltd.)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [PDVD8LanguageShortcut] C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe (CyberLink Corp.)
O4 - HKLM..\Run: [RemoteControl8] C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateLBPShortCut] C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateP2GoShortCut] C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePDRShortCut] C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePPShortCut] C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePSTShortCut] C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKCU..\Run: [EPSON SX110 Series] C:\windows\System32\spool\DRIVERS\W32X86\3\E_FATIFBE.EXE (SEIKO EPSON CORPORATION)
O4 - HKCU..\Run: [HW_OPENEYE_OUC_blueconnect] C:\Program Files\blueconnect\UpdateDog\ouc.exe (Huawei Technologies Co., Ltd.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{37E72176-4A42-432A-BED0-ACEFBA4EB236}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4F2ADB00-11A9-4C88-A4B4-B4F5791A8E85}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{76C9E7FD-546C-4B17-9DC1-F12EB6B13797}: NameServer = 213.158.199.1 213.158.199.5
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\System32\skype4com.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2010/08/19 18:49:08 | 000,126,976 | R--- | M] () - F:\AutoRun.exe -- [ CDFS ]
O32 - AutoRun File - [2009/05/05 03:59:04 | 000,000,045 | R--- | M] () - F:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{009ccdd8-6afb-11df-af25-0024548315b8}\Shell - "" = AutoRun
O33 - MountPoints2\{009ccdd8-6afb-11df-af25-0024548315b8}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{009ccde8-6afb-11df-af25-0024548315b8}\Shell - "" = AutoRun
O33 - MountPoints2\{009ccde8-6afb-11df-af25-0024548315b8}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{0ea46141-69d0-11df-b3ff-0024548315b8}\Shell - "" = AutoRun
O33 - MountPoints2\{0ea46141-69d0-11df-b3ff-0024548315b8}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{12e09727-8768-11e0-8b40-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{12e09727-8768-11e0-8b40-806e6f6e6963}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{12e09759-8768-11e0-8b40-0024548315b8}\Shell - "" = AutoRun
O33 - MountPoints2\{12e09759-8768-11e0-8b40-0024548315b8}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{2dfe7e6f-642a-11e0-9661-0024548315b8}\Shell - "" = AutoRun
O33 - MountPoints2\{2dfe7e6f-642a-11e0-9661-0024548315b8}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{2dfe7e82-642a-11e0-9661-0024548315b8}\Shell - "" = AutoRun
O33 - MountPoints2\{2dfe7e82-642a-11e0-9661-0024548315b8}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{2dfe7e8d-642a-11e0-9661-0024548315b8}\Shell - "" = AutoRun
O33 - MountPoints2\{2dfe7e8d-642a-11e0-9661-0024548315b8}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{42634924-9395-11e0-aaae-0024548315b8}\Shell - "" = AutoRun
O33 - MountPoints2\{42634924-9395-11e0-aaae-0024548315b8}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{4e525720-a3b2-11e0-a5f5-00030d000001}\Shell - "" = AutoRun
O33 - MountPoints2\{4e525720-a3b2-11e0-a5f5-00030d000001}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{5a3b2f24-7b7e-11df-8d45-0024548315b8}\Shell - "" = AutoRun
O33 - MountPoints2\{5a3b2f24-7b7e-11df-8d45-0024548315b8}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{6e9445fb-69cc-11df-9c9a-0024548315b8}\Shell - "" = AutoRun
O33 - MountPoints2\{6e9445fb-69cc-11df-9c9a-0024548315b8}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{6e94460d-69cc-11df-9c9a-0024548315b8}\Shell - "" = AutoRun
O33 - MountPoints2\{6e94460d-69cc-11df-9c9a-0024548315b8}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{7168ffb4-d9d9-11e0-bce6-0024548315b8}\Shell - "" = AutoRun
O33 - MountPoints2\{7168ffb4-d9d9-11e0-bce6-0024548315b8}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{7aded886-6a8a-11df-9819-0024548315b8}\Shell - "" = AutoRun
O33 - MountPoints2\{7aded886-6a8a-11df-9819-0024548315b8}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{89c160ba-6b11-11df-8cc6-0024548315b8}\Shell - "" = AutoRun
O33 - MountPoints2\{89c160ba-6b11-11df-8cc6-0024548315b8}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{993dcd31-7957-11df-8c3d-0024548315b8}\Shell - "" = AutoRun
O33 - MountPoints2\{993dcd31-7957-11df-8c3d-0024548315b8}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{9d4362a6-734a-11e0-8e47-0024548315b8}\Shell - "" = AutoRun
O33 - MountPoints2\{9d4362a6-734a-11e0-8e47-0024548315b8}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{a70204d2-036e-11e0-8d10-0024548315b8}\Shell - "" = AutoRun
O33 - MountPoints2\{a70204d2-036e-11e0-8d10-0024548315b8}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{ac7a5008-c81b-11e0-a91f-00030d000001}\Shell - "" = AutoRun
O33 - MountPoints2\{ac7a5008-c81b-11e0-a91f-00030d000001}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{af2e1d84-76e8-11e0-80e9-0024548315b8}\Shell - "" = AutoRun
O33 - MountPoints2\{af2e1d84-76e8-11e0-80e9-0024548315b8}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a
O33 - MountPoints2\{c56690a6-7a14-11df-af7d-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{c56690a6-7a14-11df-af7d-806e6f6e6963}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{de9b12fd-7c66-11e0-8d4c-0024548315b8}\Shell - "" = AutoRun
O33 - MountPoints2\{de9b12fd-7c66-11e0-8d4c-0024548315b8}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{e3c191d2-79fe-11df-8416-0024548315b8}\Shell - "" = AutoRun
O33 - MountPoints2\{e3c191d2-79fe-11df-8416-0024548315b8}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{f59ccf74-e032-11e0-aa12-0024548315b8}\Shell - "" = AutoRun
O33 - MountPoints2\{f59ccf74-e032-11e0-aa12-0024548315b8}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\{fe18af0a-64ed-11e0-ada3-0024548315b8}\Shell - "" = AutoRun
O33 - MountPoints2\{fe18af0a-64ed-11e0-ada3-0024548315b8}\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe -- [2010/08/19 18:49:08 | 000,126,976 | R--- | M] ()
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011/10/05 13:09:44 | 000,000,000 | ---D | C] -- C:\Users\Greg\Desktop\LOGI
[2011/09/30 12:37:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
[2011/09/30 12:37:06 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET
[2011/09/30 12:37:06 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2011/09/26 19:03:15 | 000,000,000 | ---D | C] -- C:\Program Files\vShare.tv plugin
[2010/08/25 19:59:08 | 000,004,096 | ---- | C] ( ) -- C:\windows\System32\IGFXDEVLib.dll
[2010/05/28 22:18:48 | 001,025,536 | ---- | C] (Karol Winnicki) -- C:\Program Files\BESTplayer.exe
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011/10/06 11:47:00 | 000,001,054 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1624614489-1438924107-3198493719-1000UA.job
[2011/10/06 08:55:21 | 000,014,736 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/10/06 08:55:21 | 000,014,736 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/10/06 08:47:42 | 000,001,055 | ---- | M] () -- C:\windows\System32\bscs.ini
[2011/10/06 08:47:38 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2011/10/06 08:47:32 | 1579,634,688 | -HS- | M] () -- C:\hiberfil.sys
[2011/10/05 13:48:10 | 000,754,464 | ---- | M] () -- C:\windows\System32\perfh015.dat
[2011/10/05 13:48:10 | 000,671,718 | ---- | M] () -- C:\windows\System32\perfh009.dat
[2011/10/05 13:48:10 | 000,158,380 | ---- | M] () -- C:\windows\System32\perfc015.dat
[2011/10/05 13:48:10 | 000,128,290 | ---- | M] () -- C:\windows\System32\perfc009.dat
[2011/10/05 13:47:00 | 000,001,002 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1624614489-1438924107-3198493719-1000Core.job
[2011/10/02 15:48:28 | 000,002,401 | ---- | M] () -- C:\Users\Greg\Desktop\Google Chrome.lnk
[2011/09/14 10:51:29 | 000,032,256 | ---- | M] () -- C:\Users\Greg\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011/06/14 11:32:55 | 000,000,000 | ---- | C] () -- C:\windows\System32\BSPRINT.INI
[2010/10/20 12:56:35 | 000,000,092 | ---- | C] () -- C:\Users\Greg\AppData\Local\fusioncache.dat
[2010/09/02 11:52:18 | 000,001,055 | ---- | C] () -- C:\windows\System32\bscs.ini
[2010/08/31 14:20:22 | 000,028,672 | ---- | C] () -- C:\windows\System32\BsMobileCSps.dll
[2010/08/25 20:30:02 | 000,439,308 | ---- | C] () -- C:\windows\System32\igcompkrng500.bin
[2010/08/25 20:30:00 | 000,982,240 | ---- | C] () -- C:\windows\System32\igkrng500.bin
[2010/08/25 20:30:00 | 000,092,356 | ---- | C] () -- C:\windows\System32\igfcg500m.bin
[2010/08/25 19:57:00 | 000,000,151 | ---- | C] () -- C:\windows\System32\GfxUI.exe.config
[2010/08/25 19:52:00 | 000,208,896 | ---- | C] () -- C:\windows\System32\iglhsip32.dll
[2010/08/25 19:52:00 | 000,143,360 | ---- | C] () -- C:\windows\System32\iglhcp32.dll
[2010/08/06 14:12:23 | 001,184,831 | ---- | C] () -- C:\windows\unins000.exe
[2010/08/06 14:12:23 | 000,001,290 | ---- | C] () -- C:\windows\unins000.dat
[2010/07/14 10:06:02 | 000,032,256 | ---- | C] () -- C:\Users\Greg\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/06/01 12:03:48 | 000,000,812 | ---- | C] () -- C:\windows\System32\drivers\scdskr01.dat
[2010/06/01 12:03:48 | 000,000,541 | ---- | C] () -- C:\windows\System32\drivers\scdhkr01.dat
[2010/06/01 12:03:48 | 000,000,500 | ---- | C] () -- C:\windows\System32\drivers\RSTable.dat
[2010/06/01 12:03:48 | 000,000,036 | ---- | C] () -- C:\windows\System32\drivers\scdstr01.dat
[2010/05/27 21:52:35 | 000,000,002 | ---- | C] () -- C:\windows\HotFixList.ini
[2010/05/27 21:35:46 | 000,131,368 | ---- | C] () -- C:\ProgramData\FullRemove.exe
[2010/04/06 18:33:10 | 000,025,864 | ---- | C] () -- C:\windows\System32\drivers\btnetBus.sys
[2010/01/22 10:04:30 | 000,081,920 | ---- | C] () -- C:\windows\System32\BsVistaCommon.dll
[2009/12/31 02:26:21 | 000,754,464 | ---- | C] () -- C:\windows\System32\perfh015.dat
[2009/12/31 02:26:21 | 000,337,158 | ---- | C] () -- C:\windows\System32\perfi015.dat
[2009/12/31 02:26:21 | 000,158,380 | ---- | C] () -- C:\windows\System32\perfc015.dat
[2009/12/31 02:26:21 | 000,038,710 | ---- | C] () -- C:\windows\System32\perfd015.dat
[2009/12/31 02:10:45 | 000,004,608 | ---- | C] () -- C:\windows\System32\HdmiCoin.dll
[2009/12/31 02:10:44 | 000,134,592 | ---- | C] () -- C:\windows\System32\igfcg500.bin
[2009/12/30 09:18:58 | 000,307,200 | ---- | C] () -- C:\windows\SetDisplayResolution.exe
[2009/07/14 06:57:37 | 000,067,584 | --S- | C] () -- C:\windows\bootstat.dat
[2009/07/14 06:33:53 | 000,351,896 | ---- | C] () -- C:\windows\System32\FNTCACHE.DAT
[2009/07/14 04:05:48 | 000,671,718 | ---- | C] () -- C:\windows\System32\perfh009.dat
[2009/07/14 04:05:48 | 000,291,294 | ---- | C] () -- C:\windows\System32\perfi009.dat
[2009/07/14 04:05:48 | 000,128,290 | ---- | C] () -- C:\windows\System32\perfc009.dat
[2009/07/14 04:05:48 | 000,031,548 | ---- | C] () -- C:\windows\System32\perfd009.dat
[2009/07/14 04:05:05 | 000,000,741 | ---- | C] () -- C:\windows\System32\NOISE.DAT
[2009/07/14 04:04:11 | 000,215,943 | ---- | C] () -- C:\windows\System32\dssec.dat
[2009/07/14 01:55:01 | 000,043,131 | ---- | C] () -- C:\windows\mib.bin
[2009/07/14 01:51:43 | 000,073,728 | ---- | C] () -- C:\windows\System32\BthpanContextHandler.dll
[2009/07/14 01:42:10 | 000,064,000 | ---- | C] () -- C:\windows\System32\BWContextHandler.dll
[2009/06/10 23:26:10 | 000,673,088 | ---- | C] () -- C:\windows\System32\mlang.dat
[2009/05/01 16:24:14 | 000,000,184 | ---- | C] () -- C:\windows\System32\drivers\osdauth.dat
[2009/05/01 15:41:06 | 000,000,020 | ---- | C] () -- C:\windows\System32\drivers\OSDSig.dat
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 145 bytes -> C:\ProgramData\Temp:E1F04E8D
@Alternate Data Stream - 128 bytes -> C:\ProgramData\Temp:4CF61E54
@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:ABE89FFE
@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:A42A9F39

< End of report >