OTL logfile created on: 2011-11-13 16:17:57 - Run 1 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Mateusz\Downloads 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,86 Gb Total Physical Memory | 1,70 Gb Available Physical Memory | 44,10% Memory free 7,71 Gb Paging File | 4,85 Gb Available in Paging File | 62,84% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 450,00 Gb Total Space | 130,90 Gb Free Space | 29,09% Space Free | Partition Type: NTFS Drive D: | 13,41 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: MATEUSZ-VAIO | User Name: Mateusz | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-11-13 16:15:50 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Mateusz\Downloads\OTL.exe PRC - [2011-10-19 14:22:47 | 003,045,688 | ---- | M] (Emsi Software GmbH) -- C:\NapsteR\Programy\Emsisoft Anti-Malware\a2service.exe PRC - [2011-10-19 14:21:28 | 003,322,256 | ---- | M] (Emsi Software GmbH) -- C:\NapsteR\Programy\Emsisoft Anti-Malware\a2guard.exe PRC - [2011-09-29 19:10:18 | 002,967,368 | ---- | M] (Connectify) -- C:\Program Files (x86)\Connectify\Connectify.exe PRC - [2011-09-29 19:10:18 | 000,353,096 | ---- | M] () -- C:\Program Files (x86)\Connectify\ConnectifyNetServices.exe PRC - [2011-09-29 19:10:18 | 000,277,832 | ---- | M] (Connectify) -- C:\Program Files (x86)\Connectify\ConnectifyD.exe PRC - [2011-09-29 19:10:08 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\Connectify\ConnectifyService.exe PRC - [2011-08-08 21:18:09 | 000,107,832 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrB.exe PRC - [2011-08-08 21:18:00 | 000,066,872 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2011-03-07 14:33:08 | 000,089,456 | ---- | M] (Elaborate Bytes AG) -- C:\NapsteR\Programy\VirtualCloneDrive\VCDDaemon.exe PRC - [2011-02-25 09:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE PRC - [2010-12-21 10:53:40 | 001,483,264 | ---- | M] (Nokia) -- C:\NapsteR\Programy\NOKIA PC SUITE\Nokia PC Suite 7\PCSuite.exe PRC - [2010-12-08 13:31:06 | 000,628,736 | ---- | M] (Nokia) -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe PRC - [2010-06-22 09:39:28 | 000,183,152 | ---- | M] (Sony Corporation) -- C:\Program Files (x86)\Sony\Media Gallery\VRLPHelper.exe PRC - [2010-06-22 09:39:28 | 000,081,264 | ---- | M] (Sony Corporation) -- C:\Program Files (x86)\Sony\Media Gallery\ElbServer.exe PRC - [2010-06-20 21:47:18 | 000,108,400 | ---- | M] (Sony Corporation) -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe PRC - [2010-06-20 21:47:16 | 000,099,696 | ---- | M] (Sony Corporation) -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe PRC - [2010-06-20 21:47:16 | 000,067,952 | ---- | M] (Sony Corporation) -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe PRC - [2010-06-18 07:07:12 | 000,423,280 | ---- | M] (Sony Corporation) -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe PRC - [2010-06-17 12:44:10 | 000,851,824 | ---- | M] (Sony Corporation) -- C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe PRC - [2010-06-09 15:55:00 | 000,537,456 | ---- | M] (Sony Corporation) -- C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe PRC - [2010-06-08 23:55:16 | 000,013,600 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe PRC - [2010-05-31 19:18:32 | 000,217,968 | ---- | M] (Sony Corporation) -- C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe PRC - [2010-05-31 19:18:32 | 000,120,176 | ---- | M] (Sony Corporation) -- C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe PRC - [2010-05-31 17:01:52 | 000,673,136 | ---- | M] (Sony Corporation) -- C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe PRC - [2010-05-28 21:02:57 | 002,320,920 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2010-05-28 21:02:38 | 000,268,824 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2010-05-26 10:08:08 | 000,055,152 | ---- | M] (Sony Corporation) -- C:\Program Files\Sony\VAIO Care\VCSpt.exe PRC - [2010-05-11 09:16:34 | 000,140,288 | ---- | M] (Nokia) -- C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe PRC - [2010-04-24 00:10:34 | 000,209,768 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe PRC - [2010-04-24 00:10:28 | 000,483,688 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe PRC - [2010-03-04 04:16:06 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe PRC - [2010-03-04 04:16:04 | 000,284,696 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe PRC - [2010-01-20 14:24:12 | 000,087,408 | ---- | M] (Sony Corporation) -- C:\Program Files\Sony\VAIO Personalization Manager\VpmIfPav.exe PRC - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\NapsteR\Programy\Alcohol 52\StarWind\StarWindServiceAE.exe PRC - [2009-10-27 08:15:02 | 000,120,832 | ---- | M] (Nokia) -- C:\Program Files (x86)\PC Connectivity Solution\Transports\NclRSSrv.exe PRC - [2009-10-09 05:45:56 | 000,169,312 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe PRC - [2008-09-18 10:59:10 | 000,104,960 | ---- | M] (ArcSoft, Inc.) -- C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2011-10-17 10:04:38 | 000,428,032 | ---- | M] () -- C:\Users\Mateusz\AppData\Roaming\GENERA~1\EXTENS~1\GenCrawl.dll MOD - [2011-10-13 16:59:13 | 001,358,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\85c13d29137c1ec685fafbfdf46cabca\System.WorkflowServices.ni.dll MOD - [2011-10-13 16:58:45 | 001,705,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\48175dbab2d21970343cacecbd9ee67f\System.ServiceModel.Web.ni.dll MOD - [2011-10-13 16:56:36 | 001,072,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\2fe1102950b6bb637339b982724ad63d\System.IdentityModel.ni.dll MOD - [2011-10-13 16:56:35 | 002,347,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\8dba8803fad87c39c0afbdce6c19fdd0\System.Runtime.Serialization.ni.dll MOD - [2011-10-13 16:56:32 | 000,256,000 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\9123843fd33a30164ceb951c98b7ca2a\SMDiagnostics.ni.dll MOD - [2011-10-13 16:56:31 | 017,400,320 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\cc3d9cb5c17d1863e3146c2a0d5c9e86\System.ServiceModel.ni.dll MOD - [2011-10-13 16:55:19 | 000,452,608 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\cf95add46bfba066f035bd78f6e21d86\IAStorUtil.ni.dll MOD - [2011-10-13 16:23:53 | 011,807,744 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\5a95ba97100404e2ab26b5a9ab9ef965\System.Web.ni.dll MOD - [2011-10-13 16:23:43 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\018d2569cf208acbe8ad73908705f607\System.Runtime.Remoting.ni.dll MOD - [2011-10-13 16:23:04 | 012,431,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d76221993c2fdfb991b8c12ae50a30eb\System.Windows.Forms.ni.dll MOD - [2011-10-13 16:22:53 | 001,586,688 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e245eb9c1067cabd5673fe832d28613\System.Drawing.ni.dll MOD - [2011-10-13 16:22:25 | 003,325,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\3136e12cfb8809d39813e76c766c782c\WindowsBase.ni.dll MOD - [2011-10-13 16:22:21 | 000,680,960 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\9b8dcad25a3be7d4a3f3b8b384f3190a\System.Security.ni.dll MOD - [2011-10-13 16:22:16 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\275680f2b9db0501d53c50ea7d7a43f0\System.Xml.ni.dll MOD - [2011-10-13 16:22:13 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\e9ebeb7959f1c916ebf6fca8f7077d6c\System.Configuration.ni.dll MOD - [2011-10-13 16:22:11 | 007,949,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\95b9866ab6e4437ef5dc5855ebab4e33\System.ni.dll MOD - [2011-10-13 16:21:58 | 011,490,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\1b31ced9bb880d94fff1c6d47c16a81e\mscorlib.ni.dll MOD - [2011-09-29 19:10:22 | 000,035,144 | ---- | M] () -- C:\Program Files (x86)\Connectify\Scannify.dll MOD - [2011-09-29 19:10:20 | 000,022,856 | ---- | M] () -- C:\Program Files (x86)\Connectify\DriverLib.dll MOD - [2011-09-29 19:10:18 | 000,014,152 | ---- | M] () -- C:\Program Files (x86)\Connectify\BuildProps.dll MOD - [2010-07-21 01:12:30 | 000,098,304 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Serialization.resources\3.0.0.0_pl_b77a5c561934e089\System.Runtime.Serialization.resources.dll MOD - [2010-07-21 01:12:09 | 000,311,296 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll MOD - [2010-01-20 13:57:56 | 000,495,616 | ---- | M] () -- C:\Program Files\Sony\VAIO Personalization Manager\sqlite3.dll MOD - [2008-08-12 09:16:16 | 002,023,424 | ---- | M] () -- C:\NapsteR\Programy\NOKIA PC SUITE\Nokia PC Suite 7\QtCore4.dll MOD - [2008-07-29 12:47:56 | 000,016,384 | ---- | M] () -- C:\NapsteR\Programy\NOKIA PC SUITE\Nokia PC Suite 7\imageformats\qsvg4.dll MOD - [2008-07-29 12:47:38 | 000,135,168 | ---- | M] () -- C:\NapsteR\Programy\NOKIA PC SUITE\Nokia PC Suite 7\imageformats\qjpeg4.dll MOD - [2008-07-29 12:11:18 | 000,253,952 | ---- | M] () -- C:\NapsteR\Programy\NOKIA PC SUITE\Nokia PC Suite 7\QtSvg4.dll MOD - [2008-07-29 12:01:12 | 007,331,840 | ---- | M] () -- C:\NapsteR\Programy\NOKIA PC SUITE\Nokia PC Suite 7\QtGUI4.dll MOD - [2008-07-29 11:50:26 | 000,364,544 | ---- | M] () -- C:\NapsteR\Programy\NOKIA PC SUITE\Nokia PC Suite 7\QtXml4.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2011-09-23 14:37:08 | 001,429,608 | ---- | M] (Sony Corporation) [On_Demand | Running] -- C:\Program Files\Sony\VAIO Update Common\VUAgent.exe -- (VUAgent) SRV:[b]64bit:[/b] - [2010-09-22 17:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc) SRV:[b]64bit:[/b] - [2010-06-24 21:06:19 | 000,202,752 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2010-06-21 18:00:52 | 000,575,856 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Program Files\Sony\VAIO Power Management\SPMService.exe -- (VAIO Power Management) SRV:[b]64bit:[/b] - [2010-06-09 15:57:16 | 000,101,232 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe -- (VcmXmlIfHelper) SRV:[b]64bit:[/b] - [2010-06-09 15:56:02 | 000,384,880 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe -- (VcmINSMgr) SRV:[b]64bit:[/b] - [2010-06-09 15:55:00 | 000,537,456 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe -- (VcmIAlzMgr) SRV:[b]64bit:[/b] - [2010-06-08 23:55:14 | 000,952,096 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins) SRV:[b]64bit:[/b] - [2010-06-08 17:00:04 | 000,836,608 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Program Files\Sony\VAIO Smart Network\VSNService.exe -- (VSNService) SRV:[b]64bit:[/b] - [2010-06-06 22:13:46 | 000,304,496 | ---- | M] (Sony Corporation) [On_Demand | Running] -- C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe -- (SpfService) SRV:[b]64bit:[/b] - [2010-05-25 05:23:52 | 000,252,416 | ---- | M] (Sony Corporation) [Auto | Stopped] -- C:\Program Files\Sony\VAIO Care\VCPerfService.exe -- (SampleCollector) SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2011-10-19 14:22:47 | 003,045,688 | ---- | M] (Emsi Software GmbH) [Auto | Running] -- C:\NapsteR\Programy\Emsisoft Anti-Malware\a2service.exe -- (a2AntiMalware) SRV - [2011-10-13 16:15:16 | 000,419,624 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2011-09-29 19:10:08 | 000,069,632 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Connectify\ConnectifyService.exe -- (Connectify) SRV - [2011-08-08 21:18:09 | 000,107,832 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrB.exe -- (PnkBstrB) SRV - [2011-08-08 21:18:00 | 000,066,872 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2011-08-04 13:34:48 | 002,329,480 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\NapsteR\Programy\Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2011-02-28 17:44:14 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc) SRV - [2011-02-25 09:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (SeaPort) SRV - [2010-12-08 13:31:06 | 000,628,736 | ---- | M] (Nokia) [On_Demand | Running] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2010-08-03 05:30:45 | 000,867,080 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2010-06-20 21:47:18 | 000,108,400 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe -- (SOHCImp) SRV - [2010-06-20 21:47:16 | 000,067,952 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe -- (SOHDs) SRV - [2010-06-18 07:07:12 | 000,423,280 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe -- (SOHDms) SRV - [2010-06-17 12:44:10 | 000,851,824 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe -- (VCFw) SRV - [2010-06-01 15:31:28 | 002,804,568 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe -- (NOBU) SRV - [2010-05-31 19:18:32 | 000,217,968 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe -- (VAIO Event Service) SRV - [2010-05-28 21:02:57 | 002,320,920 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R) SRV - [2010-05-28 21:02:38 | 000,268,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R) SRV - [2010-04-24 00:10:34 | 000,209,768 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa) SRV - [2010-04-24 00:10:28 | 000,483,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist) SRV - [2010-03-18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010-03-18 10:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon) SRV - [2010-03-04 04:16:06 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel(R) SRV - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\NapsteR\Programy\Alcohol 52\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2009-10-09 05:45:56 | 000,169,312 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor8.0) SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2008-09-18 10:59:10 | 000,104,960 | ---- | M] (ArcSoft, Inc.) [Auto | Running] -- C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe -- (uCamMonitor) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2011-10-18 07:31:23 | 000,031,344 | ---- | M] (Connectify) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\cnnctfy2.sys -- (cnnctfy2) DRV:[b]64bit:[/b] - [2011-05-01 01:23:08 | 000,310,728 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt) DRV:[b]64bit:[/b] - [2011-05-01 01:17:03 | 000,503,352 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2011-04-25 12:28:06 | 000,042,696 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt) DRV:[b]64bit:[/b] - [2011-03-11 07:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011-03-11 07:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2011-01-15 17:21:04 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone) DRV:[b]64bit:[/b] - [2010-12-16 23:58:14 | 000,040,816 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO) DRV:[b]64bit:[/b] - [2010-09-22 23:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr) DRV:[b]64bit:[/b] - [2010-07-30 13:18:04 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt) DRV:[b]64bit:[/b] - [2010-07-30 13:18:02 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev) DRV:[b]64bit:[/b] - [2010-07-30 13:18:00 | 000,026,624 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc) DRV:[b]64bit:[/b] - [2010-07-30 13:17:56 | 000,019,456 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd) DRV:[b]64bit:[/b] - [2010-06-24 21:34:53 | 000,271,872 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel(R) DRV:[b]64bit:[/b] - [2010-06-24 21:33:43 | 010,326,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2010-06-24 21:06:24 | 006,107,136 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:[b]64bit:[/b] - [2010-06-23 21:04:45 | 000,021,544 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid) DRV:[b]64bit:[/b] - [2010-06-23 21:04:43 | 000,342,056 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwampfl.sys -- (btwampfl) DRV:[b]64bit:[/b] - [2010-06-23 21:04:43 | 000,135,720 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt) DRV:[b]64bit:[/b] - [2010-06-23 21:04:43 | 000,102,952 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio) DRV:[b]64bit:[/b] - [2010-06-23 21:04:09 | 000,039,464 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap) DRV:[b]64bit:[/b] - [2010-06-23 21:03:07 | 000,078,848 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\risdsne64.sys -- (risdsnpe) DRV:[b]64bit:[/b] - [2010-06-23 21:02:59 | 000,094,208 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rimssne64.sys -- (rimspci) DRV:[b]64bit:[/b] - [2010-06-17 10:04:04 | 000,014,848 | ---- | M] (Sony Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VBTUSB.sys -- (VBTUSB) DRV:[b]64bit:[/b] - [2010-05-31 22:36:54 | 000,299,568 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService) DRV:[b]64bit:[/b] - [2010-05-31 22:36:48 | 000,402,720 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7) DRV:[b]64bit:[/b] - [2010-05-31 22:36:41 | 001,573,888 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:[b]64bit:[/b] - [2010-05-31 21:10:13 | 000,231,328 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService) DRV:[b]64bit:[/b] - [2010-05-28 21:03:12 | 000,158,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd) DRV:[b]64bit:[/b] - [2010-05-28 21:02:36 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R) DRV:[b]64bit:[/b] - [2010-04-26 21:20:29 | 000,012,032 | ---- | M] (Sony Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SFEP.sys -- (SFEP) DRV:[b]64bit:[/b] - [2010-04-24 00:10:32 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol) DRV:[b]64bit:[/b] - [2010-04-24 00:10:28 | 000,269,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay) DRV:[b]64bit:[/b] - [2010-04-24 00:10:28 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir) DRV:[b]64bit:[/b] - [2010-04-24 00:10:20 | 000,721,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs) DRV:[b]64bit:[/b] - [2010-03-04 03:51:40 | 000,540,696 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2009-10-10 03:41:20 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 01:06:32 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser) DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-05-26 14:32:04 | 000,019,968 | ---- | M] (ArcSoft, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ArcSoftKsUFilter.sys -- (ArcSoftKsUFilter) DRV:[b]64bit:[/b] - [2009-03-18 16:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi) DRV:[b]64bit:[/b] - [2008-08-28 10:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd) DRV:[b]64bit:[/b] - [2008-06-16 03:00:00 | 000,055,024 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64) DRV - [2011-10-19 14:16:29 | 000,085,800 | ---- | M] (Emsi Software GmbH) [File_System | On_Demand | Running] -- C:\NapsteR\Programy\Emsisoft Anti-Malware\a2accx64.sys -- (a2acc) DRV - [2011-10-19 14:15:56 | 000,048,216 | ---- | M] (Emsi Software GmbH) [File_System | System | Running] -- C:\NapsteR\Programy\Emsisoft Anti-Malware\a2dix64.sys -- (a2injectiondriver) DRV - [2010-05-05 08:40:54 | 000,014,720 | ---- | M] (Emsi Software GmbH) [Kernel | System | Running] -- C:\NapsteR\Programy\Emsisoft Anti-Malware\a2util64.sys -- (a2util) DRV - [2010-01-29 10:40:16 | 000,115,600 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\NapsteR\Programy\UltraISO\drivers\ISODrv64.sys -- (ISODrive) DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-159937567-2010567452-3429551030-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKU\S-1-5-21-159937567-2010567452-3429551030-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-gb IE - HKU\S-1-5-21-159937567-2010567452-3429551030-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = CA DB CA 7D F5 FD CB 01 [binary data] IE - HKU\S-1-5-21-159937567-2010567452-3429551030-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2321: C:\NapsteR\Programy\K-Lite Codec Pack 2\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1483: C:\NapsteR\Programy\K-Lite Codec Pack 2\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Mateusz\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Mateusz\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Mateusz\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll () FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Mateusz\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Mateusz\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2011-10-27 08:25:18 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\Extensions [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms} CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\15.0.874.106\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Java Deployment Toolkit 6.0.200.2 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U20 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\NapsteR\Programy\K-Lite Codec Pack 2\Real\browser\plugins\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\NapsteR\Programy\K-Lite Codec Pack 2\Real\browser\plugins\nprpjplug.dll CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\15.0.874.106\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\15.0.874.106\pdf.dll CHR - plugin: Chrome DAP extension (Enabled) = C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\2.0.8_0\lib/npdapchrome.dll CHR - plugin: Download Accelerator Plus (DAP) Opera/NS6 plugin (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\plugins\npdap.dll CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\Mateusz\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\Mateusz\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.69\npGoogleUpdate3.dll CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: Vividas Player Plugin = C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\choofoanehnlponopnapopbnkeldllka\4.1_0\ CHR - Extension: Babylon Chrome OCR = C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.1_0\ CHR - Extension: Download Accelerator Plus (DAP) = C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\2.0.8_0\ CHR - Extension: General Downloader plugin = C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkcbebbklfkjeocpmoamnopdllfekind\1.0.1_0\ CHR - Extension: SoundCloud Downloader = C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndmjkapccdjaajegggkopajaabdkjmag\0.31_0\ CHR - Extension: General Crawler = C:\Users\Mateusz\AppData\Local\Google\Chrome\User Data\Default\Extensions\paghhfjmdbbioiilongloblgfaaggfdj\1.6_0\ O1 HOSTS File: ([2011-11-11 13:13:22 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2:[b]64bit:[/b] - BHO: (Plugin for GeneralDownloader) - {AD4DF010-E2FD-43CE-864A-6BD1EDC59AC2} - C:\Users\Mateusz\AppData\Roaming\General Downloader\Extensions\IEPlugin64.dll (General World) O2 - BHO: (Babylon IE plugin) - {9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.) O2 - BHO: (Help the General-Search Project) - {CA4520F3-AE13-4FB1-A513-58E23991C86D} - C:\Users\Mateusz\AppData\Roaming\GENERA~1\EXTENS~1\GenCrawl.dll () O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\NapsteR\Programy\ALPLAYER\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O4:[b]64bit:[/b] - HKLM..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe (Alps Electric Co., Ltd.) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4 - HKLM..\Run: [a-squared] C:\NAPSTER\PROGRAMY\EMSISOFT ANTI-MALWARE\a2guard.exe (Emsi Software GmbH) O4 - HKLM..\Run: [Babylon Client] C:\Program Files (x86)\Babylon\Babylon-Pro\Babylon.exe (Babylon Ltd.) O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) O4 - HKLM..\Run: [ISBMgr.exe] C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Sony Corporation) O4 - HKLM..\Run: [SHTtray.exe] C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe (Sony Corporation) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [VirtualCloneDrive] C:\NapsteR\Programy\VirtualCloneDrive\VCDDaemon.exe (Elaborate Bytes AG) O4 - HKU\S-1-5-21-159937567-2010567452-3429551030-1000..\Run: [AlcoholAutomount] C:\NapsteR\Programy\Alcohol 52\AxAutoMntSrv.exe (Alcohol Soft Development Team) O4 - HKU\S-1-5-21-159937567-2010567452-3429551030-1000..\Run: [ALLUpdate] C:\NapsteR\Programy\ALPLAYER\ALLUpdate.exe () O4 - HKU\S-1-5-21-159937567-2010567452-3429551030-1000..\Run: [CAHeadless] C:\Program Files (x86)\Adobe\Elements Organizer 8.0\CAHeadless\ElementsAutoAnalyzer.exe (Adobe Systems Incorporated) O4 - HKU\S-1-5-21-159937567-2010567452-3429551030-1000..\Run: [Connectify] C:\Program Files (x86)\Connectify\Connectify.exe (Connectify) O4 - HKU\S-1-5-21-159937567-2010567452-3429551030-1000..\Run: [DownloadAccelerator] C:\Program Files (x86)\DAP\DAP.EXE (SpeedBit Ltd.) O4 - HKU\S-1-5-21-159937567-2010567452-3429551030-1000..\Run: [Elbserver] C:\Program Files (x86)\Sony\Media Gallery\ElbServer.exe (Sony Corporation) O4 - HKU\S-1-5-21-159937567-2010567452-3429551030-1000..\Run: [Facebook Update] C:\Users\Mateusz\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.) O4 - HKU\S-1-5-21-159937567-2010567452-3429551030-1000..\Run: [PC Suite Tray] C:\NapsteR\Programy\NOKIA PC SUITE\Nokia PC Suite 7\PCSuite.exe (Nokia) O4 - HKU\S-1-5-21-159937567-2010567452-3429551030-1000..\Run: [VRLPHelper] C:\Program Files (x86)\Sony\Media Gallery\VRLPHelper.exe (Sony Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKU\S-1-5-21-159937567-2010567452-3429551030-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8:[b]64bit:[/b] - Extra context menu item: &Clean Traces - C:\Program Files (x86)\DAP\Privacy Package\dapcleanerie.htm () O8:[b]64bit:[/b] - Extra context menu item: &Download with &DAP - C:\Program Files (x86)\DAP\dapextie.htm () O8:[b]64bit:[/b] - Extra context menu item: Download &all with DAP - C:\Program Files (x86)\DAP\dapextie2.htm () O8:[b]64bit:[/b] - Extra context menu item: Funkcja Google Sidewiki - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html File not found O8:[b]64bit:[/b] - Extra context menu item: Translate this web page with Babylon - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.) O8:[b]64bit:[/b] - Extra context menu item: Translate with Babylon - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.) O8 - Extra context menu item: &Clean Traces - C:\Program Files (x86)\DAP\Privacy Package\dapcleanerie.htm () O8 - Extra context menu item: &Download with &DAP - C:\Program Files (x86)\DAP\dapextie.htm () O8 - Extra context menu item: Download &all with DAP - C:\Program Files (x86)\DAP\dapextie2.htm () O8 - Extra context menu item: Funkcja Google Sidewiki - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html File not found O8 - Extra context menu item: Translate this web page with Babylon - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.) O8 - Extra context menu item: Translate with Babylon - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.) O9 - Extra Button: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll (Evernote Corporation) O9 - Extra 'Tools' menuitem : Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll (Evernote Corporation) O9 - Extra Button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.) O9 - Extra 'Tools' menuitem : Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{342A60AB-FD5C-4177-9041-C83FDAABFD57}: NameServer = 192.168.104.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{483DE130-6D5E-479C-B2DA-23476692A940}: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9E19C038-DD7B-4829-B255-EDCC2483F5D9}: NameServer = 194.204.152.34,194.204.159.1 O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010-12-31 22:47:01 | 000,000,049 | R--- | M] () - D:\autorun.inf -- [ CDFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-11-13 12:42:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALLPlayer [2011-11-13 12:42:48 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\AppData\Local\ALLPlayer [2011-11-13 12:16:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SubEdit-Player [2011-11-11 21:55:17 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Desktop\Nowy folder [2011-11-11 17:31:29 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\AppData\Roaming\EurekaLog [2011-11-11 17:24:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2011-11-11 17:23:53 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2011-11-11 17:23:53 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2011-11-11 17:23:53 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2011-11-11 17:14:34 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN [2011-11-11 12:49:49 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe [2011-11-11 12:49:49 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe [2011-11-11 12:49:49 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe [2011-11-11 12:49:37 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT [2011-11-11 12:49:26 | 000,000,000 | ---D | C] -- C:\Qoobox [2011-11-11 12:47:35 | 004,289,940 | R--- | C] (Swearware) -- C:\Users\Mateusz\Desktop\ComboFix.exe [2011-11-10 08:49:28 | 000,000,000 | ---D | C] -- C:\3822cb7a32767470d7 [2011-11-10 08:15:17 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\AppData\Local\{1B232A80-EDCC-402F-B901-8CE0AC69052B} [2011-11-10 08:15:16 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\AppData\Local\{25A7647B-167C-4BA5-B9FB-45975BAF3E14} [2011-11-09 17:24:48 | 002,870,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.backup.exe [2011-11-09 17:24:47 | 000,000,000 | ---D | C] -- C:\Windows\W7SOC [2011-11-09 16:50:38 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\AppData\Local\Babylon [2011-11-09 16:44:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Babylon [2011-11-09 16:44:07 | 000,000,000 | ---D | C] -- C:\Program Files\Babylon [2011-11-09 16:44:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Babylon [2011-11-09 16:44:03 | 000,332,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uxtheme.dll.backup [2011-11-09 16:44:01 | 002,851,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\themeui.dll.backup [2011-11-09 16:41:50 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\AppData\Roaming\Babylon [2011-11-09 16:41:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Babylon [2011-11-09 16:41:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\UniversalThemePatcher [2011-11-09 16:30:20 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Desktop\games [2011-11-02 21:46:37 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Desktop\Music [2011-11-01 13:51:46 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\.android [2011-11-01 13:48:28 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Desktop\SDK [2011-11-01 12:29:36 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Desktop\jar [2011-10-31 13:51:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\3DO [2011-10-31 13:43:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\3DO Shared [2011-10-27 08:26:03 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Desktop\Download [2011-10-27 08:25:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\General Downloader [2011-10-27 08:25:17 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\AppData\Roaming\General Downloader [2011-10-24 09:43:55 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Desktop\Muzyka [2011-10-23 15:43:45 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\AppData\Local\Facebook [2011-10-23 15:43:26 | 000,493,520 | ---- | C] (Facebook Inc.) -- C:\Users\Mateusz\Desktop\FacebookVideoCallSetup_v1.2.203.0.exe [2011-10-22 20:09:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Activision [2011-10-22 19:03:37 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\AppData\Local\SKIDROW [2011-10-22 19:03:36 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Documents\Hard Reset [2011-10-21 13:55:05 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\AppData\Roaming\Rovio [2011-10-21 13:53:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rovio [2011-10-19 20:01:33 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Desktop\Mama [2011-10-19 17:00:29 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Documents\Ubisoft [2011-10-19 14:00:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ubisoft [2011-10-19 14:00:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ubisoft [2011-10-19 13:46:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware [2011-10-19 13:46:39 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Documents\Anti-Malware [2011-10-18 07:31:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Connectify [2011-10-18 07:31:23 | 000,031,344 | ---- | C] (Connectify) -- C:\Windows\SysNative\drivers\cnnctfy2.sys [2011-10-18 07:31:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Connectify [2011-10-18 07:30:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Connectify [2011-10-18 07:30:31 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\AppData\Local\Chris_Pietschmann_(http__ [2011-10-17 22:35:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Virtual Router [2011-10-16 16:55:47 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\AppData\Roaming\BitDefender [2011-10-16 16:55:14 | 000,000,000 | ---D | C] -- C:\ProgramData\BitDefender [2011-10-16 16:55:14 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\BitDefender [2011-10-16 16:55:14 | 000,000,000 | ---D | C] -- C:\Program Files\BitDefender [2011-10-16 16:54:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\BitDefender [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-11-13 16:20:00 | 000,000,912 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011-11-13 16:19:39 | 002,359,296 | -HS- | M] () -- C:\Users\Mateusz\NTUSER.DAT [2011-11-13 15:24:00 | 000,001,066 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-159937567-2010567452-3429551030-1000UA.job [2011-11-13 15:24:00 | 000,001,014 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-159937567-2010567452-3429551030-1000Core.job [2011-11-13 13:48:06 | 000,000,936 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-159937567-2010567452-3429551030-1000UA.job [2011-11-13 12:42:56 | 000,001,049 | ---- | M] () -- C:\Users\Mateusz\Desktop\Napi-projekt.lnk [2011-11-13 12:42:56 | 000,000,864 | ---- | M] () -- C:\Users\Mateusz\Desktop\ALLPlayer V4.7.lnk [2011-11-13 12:16:57 | 000,000,974 | ---- | M] () -- C:\Users\Mateusz\Desktop\SubEdit-Player.lnk [2011-11-13 11:47:15 | 000,001,171 | ---- | M] () -- C:\Users\Mateusz\Desktop\Media Player Classic.lnk [2011-11-13 11:36:01 | 000,000,908 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011-11-13 11:35:46 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011-11-13 11:35:46 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011-11-13 11:32:25 | 004,086,956 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2011-11-13 11:32:25 | 001,874,538 | ---- | M] () -- C:\Windows\SysNative\prfh0816.dat [2011-11-13 11:32:25 | 001,811,204 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011-11-13 11:32:25 | 001,746,966 | ---- | M] () -- C:\Windows\SysNative\perfh008.dat [2011-11-13 11:32:25 | 001,643,782 | ---- | M] () -- C:\Windows\SysNative\perfh014.dat [2011-11-13 11:32:25 | 001,628,584 | ---- | M] () -- C:\Windows\SysNative\perfh00B.dat [2011-11-13 11:32:25 | 001,318,672 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2011-11-13 11:32:25 | 001,277,234 | ---- | M] () -- C:\Windows\SysNative\prfc0816.dat [2011-11-13 11:32:25 | 001,249,870 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011-11-13 11:32:25 | 001,225,630 | ---- | M] () -- C:\Windows\SysNative\perfc00B.dat [2011-11-13 11:32:25 | 001,220,578 | ---- | M] () -- C:\Windows\SysNative\perfc014.dat [2011-11-13 11:32:24 | 001,818,340 | ---- | M] () -- C:\Windows\SysNative\perfh005.dat [2011-11-13 11:32:24 | 001,657,368 | ---- | M] () -- C:\Windows\SysNative\perfh006.dat [2011-11-13 11:32:24 | 001,265,270 | ---- | M] () -- C:\Windows\SysNative\perfc005.dat [2011-11-13 11:32:24 | 001,232,918 | ---- | M] () -- C:\Windows\SysNative\perfc008.dat [2011-11-13 11:32:24 | 001,223,286 | ---- | M] () -- C:\Windows\SysNative\perfc006.dat [2011-11-13 11:32:24 | 000,005,668 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011-11-13 11:28:03 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2011-11-13 11:27:58 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011-11-13 11:27:54 | 3106,480,128 | -HS- | M] () -- C:\hiberfil.sys [2011-11-13 08:02:26 | 002,943,883 | -H-- | M] () -- C:\Users\Mateusz\AppData\Local\IconCache.db [2011-11-11 17:17:50 | 000,002,358 | ---- | M] () -- C:\Users\Mateusz\Desktop\Google Chrome.lnk [2011-11-11 16:48:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-159937567-2010567452-3429551030-1000Core.job [2011-11-11 13:13:35 | 000,000,215 | ---- | M] () -- C:\Windows\system.ini [2011-11-11 13:13:22 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts [2011-11-11 12:47:51 | 004,289,940 | R--- | M] (Swearware) -- C:\Users\Mateusz\Desktop\ComboFix.exe [2011-11-10 14:57:40 | 000,304,672 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2011-11-10 09:43:20 | 000,524,288 | -HS- | M] () -- C:\Users\Mateusz\NTUSER.DAT{e04ac903-0b72-11e1-9207-c0cb38e5f3e3}.TMContainer00000000000000000002.regtrans-ms [2011-11-10 09:43:20 | 000,065,536 | -HS- | M] () -- C:\Users\Mateusz\NTUSER.DAT{e04ac903-0b72-11e1-9207-c0cb38e5f3e3}.TM.blf [2011-11-10 09:43:19 | 000,524,288 | -HS- | M] () -- C:\Users\Mateusz\NTUSER.DAT{e04ac903-0b72-11e1-9207-c0cb38e5f3e3}.TMContainer00000000000000000001.regtrans-ms [2011-11-09 17:45:12 | 000,925,184 | ---- | M] () -- C:\Windows\expstart.exe [2011-11-09 16:44:03 | 000,332,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\uxtheme.dll [2011-11-09 16:44:01 | 002,851,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\themeui.dll [2011-11-08 23:49:56 | 000,389,904 | ---- | M] () -- C:\test.xml [2011-11-08 22:49:27 | 000,000,110 | ---- | M] () -- C:\Users\Mateusz\Desktop\liceum.xon.url [2011-11-01 12:27:38 | 000,020,422 | ---- | M] () -- C:\Users\Mateusz\Desktop\andReceiver-1.1.3-eng.zip [2011-10-31 13:31:16 | 000,000,443 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.ics [2011-10-31 12:54:55 | 000,081,984 | ---- | M] () -- C:\Windows\SysNative\bdod.bin [2011-10-27 08:25:20 | 000,000,715 | ---- | M] () -- C:\Users\Mateusz\Desktop\General Downloader.lnk [2011-10-27 08:04:11 | 000,777,285 | ---- | M] () -- C:\Users\Mateusz\tracklist.png [2011-10-27 07:58:43 | 000,222,794 | ---- | M] () -- C:\Users\Mateusz\Desktop\Grime And Punishment 071 - Cyberoptics (Megatron Vomit 3).mp3 [2011-10-23 15:43:36 | 000,493,520 | ---- | M] (Facebook Inc.) -- C:\Users\Mateusz\Desktop\FacebookVideoCallSetup_v1.2.203.0.exe [2011-10-22 20:09:48 | 000,000,285 | ---- | M] () -- C:\Windows\game.ini [2011-10-18 16:32:32 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2011-10-18 16:32:22 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ccdcmbx64_01009.Wdf [2011-10-18 07:31:35 | 000,001,031 | ---- | M] () -- C:\Users\Mateusz\Desktop\Connectify.lnk [2011-10-18 07:31:23 | 000,031,344 | ---- | M] (Connectify) -- C:\Windows\SysNative\drivers\cnnctfy2.sys [2011-10-16 17:16:39 | 000,000,850 | ---- | M] () -- C:\Windows\SysNative\ProductTweaks.xml [2011-10-16 17:16:39 | 000,000,385 | ---- | M] () -- C:\Windows\SysNative\user_gensett.xml [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-11-13 12:42:56 | 000,001,049 | ---- | C] () -- C:\Users\Mateusz\Desktop\Napi-projekt.lnk [2011-11-13 12:42:56 | 000,000,864 | ---- | C] () -- C:\Users\Mateusz\Desktop\ALLPlayer V4.7.lnk [2011-11-13 12:42:48 | 000,258,048 | ---- | C] () -- C:\Windows\SysWow64\libFLAC.dll [2011-11-13 12:42:47 | 000,797,184 | ---- | C] () -- C:\Windows\SysWow64\ac3filter.ax [2011-11-13 12:16:57 | 000,000,974 | ---- | C] () -- C:\Users\Mateusz\Desktop\SubEdit-Player.lnk [2011-11-13 11:47:15 | 000,001,171 | ---- | C] () -- C:\Users\Mateusz\Desktop\Media Player Classic.lnk [2011-11-11 17:17:50 | 000,002,358 | ---- | C] () -- C:\Users\Mateusz\Desktop\Google Chrome.lnk [2011-11-11 12:49:49 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe [2011-11-11 12:49:49 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe [2011-11-11 12:49:49 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe [2011-11-11 12:49:49 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe [2011-11-11 12:49:49 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe [2011-11-10 09:06:44 | 000,524,288 | -HS- | C] () -- C:\Users\Mateusz\NTUSER.DAT{e04ac903-0b72-11e1-9207-c0cb38e5f3e3}.TMContainer00000000000000000002.regtrans-ms [2011-11-10 09:06:44 | 000,524,288 | -HS- | C] () -- C:\Users\Mateusz\NTUSER.DAT{e04ac903-0b72-11e1-9207-c0cb38e5f3e3}.TMContainer00000000000000000001.regtrans-ms [2011-11-10 09:06:44 | 000,065,536 | -HS- | C] () -- C:\Users\Mateusz\NTUSER.DAT{e04ac903-0b72-11e1-9207-c0cb38e5f3e3}.TM.blf [2011-11-09 17:26:21 | 000,925,184 | ---- | C] () -- C:\Windows\expstart.exe [2011-11-08 22:49:27 | 000,000,110 | ---- | C] () -- C:\Users\Mateusz\Desktop\liceum.xon.url [2011-11-01 12:27:40 | 000,020,422 | ---- | C] () -- C:\Users\Mateusz\Desktop\andReceiver-1.1.3-eng.zip [2011-10-27 08:25:20 | 000,000,715 | ---- | C] () -- C:\Users\Mateusz\Desktop\General Downloader.lnk [2011-10-27 08:04:17 | 000,777,285 | ---- | C] () -- C:\Users\Mateusz\tracklist.png [2011-10-27 07:58:56 | 000,222,794 | ---- | C] () -- C:\Users\Mateusz\Desktop\Grime And Punishment 071 - Cyberoptics (Megatron Vomit 3).mp3 [2011-10-23 15:43:50 | 000,000,936 | ---- | C] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-159937567-2010567452-3429551030-1000UA.job [2011-10-23 15:43:50 | 000,000,914 | ---- | C] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-159937567-2010567452-3429551030-1000Core.job [2011-10-22 20:09:47 | 000,000,285 | ---- | C] () -- C:\Windows\game.ini [2011-10-18 16:32:32 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2011-10-18 16:32:22 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ccdcmbx64_01009.Wdf [2011-10-18 07:31:35 | 000,001,031 | ---- | C] () -- C:\Users\Mateusz\Desktop\Connectify.lnk [2011-10-16 18:15:06 | 000,081,984 | ---- | C] () -- C:\Windows\SysNative\bdod.bin [2011-10-16 17:16:39 | 000,000,850 | ---- | C] () -- C:\Windows\SysNative\ProductTweaks.xml [2011-10-16 17:16:39 | 000,000,385 | ---- | C] () -- C:\Windows\SysNative\user_gensett.xml [2011-10-13 21:29:40 | 000,042,392 | ---- | C] () -- C:\Windows\SysWow64\xfcodec.dll [2011-09-08 11:15:32 | 000,109,216 | ---- | C] () -- C:\Windows\SysWow64\EasyHook64.dll [2011-09-08 11:15:32 | 000,084,480 | ---- | C] () -- C:\Windows\SysWow64\EasyHook32.dll [2011-08-11 02:36:53 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini [2011-08-10 10:04:43 | 000,019,968 | ---- | C] () -- C:\Windows\SysWow64\cpuinf32.dll [2011-07-26 18:18:40 | 000,000,978 | ---- | C] () -- C:\Windows\eReg.dat [2011-07-16 13:14:48 | 000,107,832 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2011-07-16 13:14:33 | 000,066,872 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2011-07-16 13:14:32 | 000,682,280 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe [2011-06-28 13:09:08 | 000,035,883 | ---- | C] () -- C:\Windows\DIIUnin.dat [2011-06-27 21:33:03 | 000,003,584 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-06-27 20:59:39 | 000,164,352 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2011-06-27 20:59:38 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini [2011-06-27 20:59:37 | 000,568,850 | ---- | C] () -- C:\Windows\SysWow64\x264vfw.dll [2011-06-27 20:59:36 | 003,596,288 | ---- | C] () -- C:\Windows\SysWow64\qt-dx331.dll [2011-06-27 20:59:36 | 000,644,608 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2011-06-27 20:59:36 | 000,217,088 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2011-06-27 20:59:36 | 000,005,120 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll [2011-06-27 20:59:36 | 000,000,547 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll.manifest [2011-06-19 11:22:13 | 000,000,017 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\resmon.resmoncfg [2011-04-29 11:28:45 | 000,000,085 | -HS- | C] () -- C:\ProgramData\.zreglib [2011-04-22 17:56:52 | 000,016,490 | ---- | C] () -- C:\Windows\War3Unin.dat [2011-04-18 22:17:05 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2011-04-18 20:36:41 | 007,532,650 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011-04-18 18:00:34 | 002,943,883 | -H-- | C] () -- C:\Users\Mateusz\AppData\Local\IconCache.db [2011-04-18 15:35:40 | 000,068,680 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\GDIPFONTCACHEV1.DAT [2010-07-21 02:36:14 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2010-07-21 01:13:13 | 000,870,560 | ---- | C] () -- C:\Windows\SysWow64\igkrng575.bin [2010-07-21 01:13:13 | 000,208,896 | ---- | C] () -- C:\Windows\SysWow64\iglhsip32.dll [2010-07-21 01:13:13 | 000,143,360 | ---- | C] () -- C:\Windows\SysWow64\iglhcp32.dll [2010-07-21 01:13:12 | 000,104,636 | ---- | C] () -- C:\Windows\SysWow64\igfcg575m.bin [2010-07-21 01:13:11 | 000,127,868 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng575.bin [2010-07-21 01:13:03 | 000,028,732 | ---- | C] () -- C:\Windows\SysWow64\ativvsny.dat [2010-07-21 01:13:03 | 000,026,936 | ---- | C] () -- C:\Windows\SysWow64\ativvsnl.dat [2009-07-14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009-07-14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2009-07-14 03:35:42 | 000,001,405 | ---- | C] () -- C:\Windows\msdfmap.ini [2009-07-14 03:34:57 | 000,000,435 | ---- | C] () -- C:\Windows\win.ini [2009-07-14 03:34:57 | 000,000,215 | ---- | C] () -- C:\Windows\system.ini [2009-07-14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2009-07-14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009-07-14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009-06-10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [color=#E56717]========== LOP Check ==========[/color] [2011-06-03 16:50:33 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\.minecraft [2011-04-29 12:27:10 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Ashampoo [2011-07-01 08:54:56 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Auslogics [2011-11-12 19:11:02 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Babylon [2011-10-16 16:55:47 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\BitDefender [2011-08-10 10:04:56 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\bsplayer [2011-07-29 19:40:50 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Command & Conquer 3 Wojny o tyberium [2011-04-19 08:56:34 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\DAEMON Tools Lite [2011-04-26 13:09:17 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\DAEMON Tools Pro [2011-11-13 11:47:29 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\EurekaLog [2011-05-01 22:09:06 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Gadu-Gadu 10 [2011-10-27 08:26:03 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\General Downloader [2011-10-14 16:54:27 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Mumble [2011-07-31 20:26:12 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Need for Speed World [2011-05-02 21:44:06 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\No Company Name [2011-06-27 21:32:58 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Nokia [2011-05-25 20:54:57 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\PC Suite [2011-08-12 14:00:42 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\RedDotGames [2011-10-21 13:55:05 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Rovio [2011-10-22 08:36:07 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\SoftGrid Client [2011-06-27 19:17:26 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Soldat [2011-08-03 18:24:39 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Sony [2011-07-31 20:21:21 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\SONY Drivers Update Utility [2011-04-18 20:37:09 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\TP [2011-10-19 19:57:43 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\TS3Client [2011-06-16 11:02:05 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Windows Live Writer [2011-11-11 16:48:00 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-159937567-2010567452-3429551030-1000Core.job [2011-11-13 13:48:06 | 000,000,936 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-159937567-2010567452-3429551030-1000UA.job [2011-11-05 09:06:28 | 000,032,604 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:553CA6CA < End of report >