OTL logfile created on: 11/18/2011 3:27:21 PM - Run 2 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Matisz\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000409 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3.86 Gb Total Physical Memory | 2.07 Gb Available Physical Memory | 53.45% Memory free 7.73 Gb Paging File | 5.71 Gb Available in Paging File | 73.93% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 452.97 Gb Total Space | 35.84 Gb Free Space | 7.91% Space Free | Partition Type: NTFS Computer Name: MATISZ-KOMPUTER | User Name: Matisz | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011/11/17 06:58:04 | 003,303,000 | ---- | M] (Akamai Technologies, Inc) -- C:\Users\Matisz\AppData\Local\Akamai\netsession_win.exe PRC - [2011/10/26 18:26:08 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Matisz\Downloads\OTL.exe PRC - [2011/10/03 22:54:38 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2011/10/02 13:34:00 | 001,064,960 | ---- | M] () -- C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe PRC - [2011/08/11 11:46:00 | 000,075,136 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2011/07/30 22:50:27 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe PRC - [2011/05/03 10:54:12 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe PRC - [2011/01/20 10:20:12 | 001,305,408 | ---- | M] (DT Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe PRC - [2011/01/10 14:23:29 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe PRC - [2010/10/07 09:04:26 | 012,661,344 | ---- | M] (GG Network S.A.) -- C:\Program Files (x86)\Gadu-Gadu 10\gg.exe PRC - [2009/11/21 00:34:08 | 000,200,704 | ---- | M] () -- C:\Windows\PLFSetI.exe PRC - [2009/11/13 04:29:08 | 000,181,480 | ---- | M] (Acer Corp.) -- C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe PRC - [2009/11/02 00:39:48 | 001,094,736 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LManager.exe PRC - [2009/10/01 05:01:32 | 002,320,920 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2009/10/01 05:01:30 | 000,268,824 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2009/09/25 00:42:32 | 000,261,888 | ---- | M] (NewTech Infosystems, Inc.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe PRC - [2009/09/25 00:42:28 | 000,062,720 | ---- | M] (NewTech Infosystems, Inc.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe PRC - [2009/09/11 06:42:30 | 000,349,480 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe PRC - [2009/08/28 10:38:58 | 001,150,496 | ---- | M] (Acer Incorporated) -- C:\Program Files (x86)\Acer\Registration\GregHSRW.exe PRC - [2009/08/04 22:09:34 | 000,199,464 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe PRC - [2009/07/04 03:47:12 | 000,240,160 | ---- | M] (Acer) -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe PRC - [2009/06/05 04:03:32 | 000,186,904 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe PRC - [2009/06/05 04:03:06 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2011/10/03 22:54:38 | 001,833,944 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2011/10/02 13:34:00 | 001,064,960 | ---- | M] () -- C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe MOD - [2011/08/29 10:45:39 | 006,277,280 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll MOD - [2010/10/07 09:05:14 | 000,217,696 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\gglog.dll MOD - [2010/10/07 09:05:14 | 000,123,488 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\ggipcradioproxy.dll MOD - [2010/10/07 09:05:10 | 000,017,504 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\ggipc.dll MOD - [2010/10/07 09:05:08 | 000,027,744 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\ggcrypto.dll MOD - [2010/10/07 09:05:06 | 000,356,960 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\ggcommon.dll MOD - [2010/08/06 20:01:42 | 002,404,352 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtCore4.dll MOD - [2010/08/06 20:01:42 | 001,515,520 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtScript4.dll MOD - [2010/08/06 20:01:42 | 001,040,384 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtNetwork4.dll MOD - [2010/08/06 20:01:42 | 000,389,120 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtXml4.dll MOD - [2010/08/06 20:01:42 | 000,323,584 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtSvg4.dll MOD - [2010/08/06 20:01:40 | 013,553,664 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtWebKit4.dll MOD - [2010/08/06 20:01:38 | 008,818,688 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtGui4.dll MOD - [2010/08/06 20:01:22 | 003,334,144 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtXmlPatterns4.dll MOD - [2010/08/06 20:00:32 | 000,311,296 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qtiff4.dll MOD - [2010/08/06 20:00:32 | 000,274,432 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qmng4.dll MOD - [2010/08/06 20:00:32 | 000,143,360 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qjpeg4.dll MOD - [2010/08/06 20:00:32 | 000,027,648 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qgif4.dll MOD - [2010/08/06 20:00:32 | 000,018,944 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qsvg4.dll MOD - [2010/03/19 08:33:38 | 000,059,904 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\zlib1.dll MOD - [2009/11/21 00:34:08 | 000,200,704 | ---- | M] () -- C:\Windows\PLFSetI.exe MOD - [2009/02/03 02:33:56 | 000,460,199 | ---- | M] () -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2009/12/10 10:15:06 | 000,202,752 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2009/11/02 21:48:18 | 000,126,352 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost) SRV:[b]64bit:[/b] - [2009/09/30 23:44:58 | 000,844,320 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe -- (ePowerSvc) SRV:[b]64bit:[/b] - [2009/07/14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009/07/04 03:47:12 | 000,240,160 | ---- | M] (Acer) [Auto | Running] -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe -- (Updater Service) SRV:[b]64bit:[/b] - [2009/03/28 03:10:16 | 000,016,896 | ---- | M] (LSI Corporation) [Auto | Running] -- C:\Program Files\LSI SoftModem\agr64svc.exe -- (AgereModemAudio) SRV - [2011/11/18 08:15:17 | 003,313,752 | ---- | M] () [Auto | Running] -- c:\program files (x86)\common files\akamai/netsession_win_d768ebc.dll -- (Akamai) SRV - [2011/10/12 17:06:48 | 004,700,824 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe -- (NOBU) SRV - [2011/08/11 11:46:00 | 000,075,136 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2011/07/30 22:50:27 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2011/05/03 10:54:12 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2011/02/26 21:59:11 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2010/08/16 18:49:31 | 003,884,360 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWow64\GameMon.des -- (npggsvc) SRV - [2010/07/12 09:54:54 | 001,327,104 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\TriDef 3D\TriDef\Common\TriDefService.exe -- (TriDefService) SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010/01/15 13:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService) SRV - [2009/10/01 05:01:32 | 002,320,920 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R) SRV - [2009/10/01 05:01:30 | 000,268,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R) SRV - [2009/09/25 00:42:28 | 000,062,720 | ---- | M] (NewTech Infosystems, Inc.) [Auto | Running] -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe -- (NTI IScheduleSvc) SRV - [2009/09/11 06:42:46 | 000,305,448 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe -- (MWLService) SRV - [2009/08/28 10:38:58 | 001,150,496 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files (x86)\Acer\Registration\GregHSRW.exe -- (Greg_Service) SRV - [2009/06/10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2009/06/05 04:03:06 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe -- (IAANTMON) Intel(R) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2011/08/11 18:31:36 | 000,203,320 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm) SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.) DRV:[b]64bit:[/b] - [2011/08/11 18:31:32 | 000,095,544 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus) SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.) DRV:[b]64bit:[/b] - [2011/07/30 22:50:28 | 000,123,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb) DRV:[b]64bit:[/b] - [2011/07/30 22:50:28 | 000,088,288 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt) DRV:[b]64bit:[/b] - [2011/07/21 20:15:27 | 000,254,528 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV:[b]64bit:[/b] - [2011/07/21 18:59:45 | 000,088,480 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt) DRV:[b]64bit:[/b] - [2011/07/21 18:59:45 | 000,046,400 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt) DRV:[b]64bit:[/b] - [2011/03/11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011/03/11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2010/11/20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010/11/20 12:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010/09/21 08:07:08 | 000,312,184 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ArcSec.sys -- (ArcSec) DRV:[b]64bit:[/b] - [2010/04/12 09:55:00 | 000,091,568 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\scdemu.sys -- (SCDEmu) DRV:[b]64bit:[/b] - [2009/12/10 12:40:30 | 006,179,328 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:[b]64bit:[/b] - [2009/11/06 21:56:06 | 001,550,848 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:[b]64bit:[/b] - [2009/11/02 21:48:02 | 000,013,784 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB) DRV:[b]64bit:[/b] - [2009/10/26 21:39:44 | 000,151,936 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd) DRV:[b]64bit:[/b] - [2009/09/18 05:12:06 | 000,292,912 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:[b]64bit:[/b] - [2009/09/17 21:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R) DRV:[b]64bit:[/b] - [2009/08/13 20:20:46 | 001,209,856 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem) DRV:[b]64bit:[/b] - [2009/08/06 13:43:58 | 000,320,040 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a) Broadcom NetLink (TM) DRV:[b]64bit:[/b] - [2009/07/22 23:06:26 | 000,040,448 | ---- | M] (Alcor Micro, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmUStor.sys -- (AmUStor) DRV:[b]64bit:[/b] - [2009/07/14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009/07/14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009/07/14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009/06/25 03:23:24 | 000,205,472 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService) DRV:[b]64bit:[/b] - [2009/06/20 03:09:57 | 000,054,272 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\L1E62x64.sys -- (L1E) NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller(NDIS6.20) DRV:[b]64bit:[/b] - [2009/06/10 21:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2009/06/10 21:34:38 | 001,311,232 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX) DRV:[b]64bit:[/b] - [2009/06/10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009/06/10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009/06/10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009/06/10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009/06/05 03:54:36 | 000,408,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2009/06/03 04:15:30 | 000,060,464 | ---- | M] (Egis Technology Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDVDisk.sys -- (mwlPSDVDisk) DRV:[b]64bit:[/b] - [2009/06/03 04:15:30 | 000,022,576 | ---- | M] (Egis Technology Inc.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDFilter.sys -- (mwlPSDFilter) DRV:[b]64bit:[/b] - [2009/06/03 04:15:30 | 000,020,016 | ---- | M] (Egis Technology Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDNserv.sys -- (mwlPSDNServ) DRV:[b]64bit:[/b] - [2009/05/06 01:46:08 | 000,018,432 | ---- | M] (NewTech Infosystems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NTIDrvr.sys -- (NTIDrvr) DRV:[b]64bit:[/b] - [2009/05/06 01:46:08 | 000,016,896 | ---- | M] (NewTech Infosystems Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UBHelper.sys -- (UBHelper) DRV:[b]64bit:[/b] - [2009/03/27 13:25:10 | 000,027,160 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ScreamingBAudio64.sys -- (ScreamBAudioSvc) DRV:[b]64bit:[/b] - [2009/03/18 16:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi) DRV:[b]64bit:[/b] - [2008/12/26 11:56:04 | 000,021,504 | ---- | M] (Avnex) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vcsvad.sys -- (VCSVADHWSer) Avnex Virtual Audio Device (WDM) DRV - [2011/06/08 23:07:05 | 000,040,056 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Softnyx\RakionIS\Bin\rakion64.sys -- (rak) DRV - [2009/07/14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) DRV - [2007/03/13 16:19:24 | 000,031,908 | ---- | M] (Compuware Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\hid8101.sys -- (hid8101) DRV - [2004/12/31 16:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2) DRV - [2002/04/26 11:04:16 | 000,095,484 | ---- | M] (DATOM Dariusz Cielebąk) [Kernel | Auto | Stopped] -- C:\Windows\SysWow64\drivers\KMM4XNT.SYS -- (Kmm4xNT) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&m=aspire_5740d&r=27360610l726l04c8z1i5t4451i36q IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&m=aspire_5740d&r=27360610l726l04c8z1i5t4451i36q IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.maxiwe.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.maxiwe.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.maxiwe.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "" FF - prefs.js..browser.search.defaultthis.engineName: "" FF - prefs.js..browser.search.defaulturl: "" FF - prefs.js..browser.search.order.1: "" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.suggest.enabled: false FF - prefs.js..browser.startup.homepage: "chrome://foxtab/content/homepage.html" FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_0_1.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@idsoftware.com/QuakeLive: C:\ProgramData\id Software\QuakeLive\npquakezero.dll (id Software Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.448: C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/10/03 22:54:39 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/10/30 02:03:56 | 000,000,000 | ---D | M] [2010/06/28 22:20:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Matisz\AppData\Roaming\mozilla\Extensions [2011/11/12 10:37:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Matisz\AppData\Roaming\mozilla\Firefox\Profiles\ub2337zl.default\extensions [2011/11/12 10:37:44 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Matisz\AppData\Roaming\mozilla\Firefox\Profiles\ub2337zl.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2011/08/18 09:17:23 | 000,000,000 | ---D | M] (Battlefield Heroes Updater) -- C:\Users\Matisz\AppData\Roaming\mozilla\Firefox\Profiles\ub2337zl.default\extensions\battlefieldheroespatcher@ea.com [2011/04/08 15:43:31 | 000,000,000 | ---D | M] (Fast Dial) -- C:\Users\Matisz\AppData\Roaming\mozilla\Firefox\Profiles\ub2337zl.default\extensions\fastdial@telega.phpnet.us [2011/05/10 19:53:51 | 000,000,000 | ---D | M] (Ovi Maps 3D browser plugin) -- C:\Users\Matisz\AppData\Roaming\mozilla\Firefox\Profiles\ub2337zl.default\extensions\maps@ovi.com [2011/10/24 18:34:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2010/07/30 23:22:15 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files (x86)\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2010/07/03 12:40:55 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010/08/22 00:09:35 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2010/11/10 07:21:35 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2010/12/24 10:26:07 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2011/03/09 20:26:11 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011/07/13 20:53:23 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} [2011/10/24 18:34:52 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} () (No name found) -- C:\USERS\MATISZ\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\UB2337ZL.DEFAULT\EXTENSIONS\{EF4E370E-D9F0-4E00-B93E-A4F274CFDD5A}.XPI () (No name found) -- C:\USERS\MATISZ\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\UB2337ZL.DEFAULT\EXTENSIONS\IPLEXTOALL@ALLPLAYER.ORG.XPI [2011/10/03 22:54:39 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2011/10/03 04:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll [2010/07/27 15:13:46 | 000,027,136 | ---- | M] (NHN USA Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npijjiautoinstallpluginff.dll [2011/10/03 22:54:36 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2011/10/03 22:54:36 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2011/10/03 22:54:36 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2011/10/03 22:54:36 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2011/10/03 22:54:36 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2011/10/03 22:54:36 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms} CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\15.0.874.120\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U26 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Users\Matisz\AppData\Roaming\Mozilla\plugins\np-mswmp.dll CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\15.0.874.120\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\15.0.874.120\pdf.dll CHR - plugin: Babylon Chrome Plugin (Enabled) = C:\Users\Matisz\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.0_0\BabylonChromePI.dll CHR - plugin: ijji Auto Install Plugin for Mozilla (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npijjiautoinstallpluginff.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.69\npGoogleUpdate3.dll CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll CHR - plugin: QUAKE LIVE (Enabled) = C:\ProgramData\id Software\QuakeLive\npquakezero.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin O1 HOSTS File: ([2009/06/10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O2:[b]64bit:[/b] - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg64.dll (Google Inc.) O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll (Google Inc.) O2 - BHO: (no name) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - No CLSID value found. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll File not found O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3:[b]64bit:[/b] - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [Acer ePower Management] C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Acer Incorporated) O4:[b]64bit:[/b] - HKLM..\Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (AlcorMicro Co., Ltd.) O4:[b]64bit:[/b] - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [mwlDaemon] C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe (Egis Technology Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [PLFSetI] C:\Windows\PLFSetI.exe () O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [BackupManagerTray] C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe (NewTech Infosystems, Inc.) O4 - HKLM..\Run: [EgisTecLiveUpdate] C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe (Egis Technology Inc.) O4 - HKLM..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.) O4 - HKLM..\Run: [NeroFilterCheck] C:\Windows\SysWOW64\NeroCheck.exe (Ahead Software Gmbh) O4 - HKLM..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe (Symantec Corporation) O4 - HKLM..\Run: [PlayMovie] C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe (Acer Corp.) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Users\Matisz\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc) O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKCU..\Run: [Gadu-Gadu 10] C:\Program Files (x86)\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKCU..\Run: [KPeerNexonEU] C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe (NEXON Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 3 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O8:[b]64bit:[/b] - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000 File not found O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 File not found O8:[b]64bit:[/b] - Extra context menu item: Funkcja Google Sidewiki - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html File not found O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000 File not found O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Funkcja Google Sidewiki - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html File not found O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} http://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx (WRC Class) O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{079E895E-A34A-44CA-AB30-B5385D4D0B79}: DhcpNameServer = 192.32.12.29 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A9C21A23-CE3F-4B6A-BC90-B15DE0D9CCC2}: DhcpNameServer = 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ms-itss - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18:[b]64bit:[/b] - Protocol\Filter\text/xml - No CLSID value found O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{0626bc64-8312-11df-b251-00262d7943e6}\Shell - "" = AutoRun O33 - MountPoints2\{0626bc64-8312-11df-b251-00262d7943e6}\Shell\AutoRun\command - "" = E:\Autorun.exe O33 - MountPoints2\{3d853d3b-b3c8-11e0-b6ba-00262d7943e6}\Shell - "" = AutoRun O33 - MountPoints2\{3d853d3b-b3c8-11e0-b6ba-00262d7943e6}\Shell\AutoRun\command - "" = E:\SETUP.EXE O33 - MountPoints2\{3d853d3b-b3c8-11e0-b6ba-00262d7943e6}\Shell\dinstall\command - "" = E:\DirectX\dxsetup.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011/11/17 23:58:54 | 000,000,000 | ---D | C] -- C:\Users\Matisz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ad-Remover [2011/11/17 19:14:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth [2011/11/16 23:18:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Skyrim [2011/11/16 23:18:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Battlefield 3 [2011/11/13 21:51:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Call of Duty- Modern Warfare 3 [2011/11/05 16:33:35 | 000,000,000 | ---D | C] -- C:\Users\Matisz\Desktop\t [2011/11/05 15:14:18 | 000,000,000 | ---D | C] -- C:\Users\Matisz\Desktop\Allegro wear [2011/11/03 16:54:28 | 000,000,000 | ---D | C] -- C:\ProgramData\boost_interprocess [2011/11/03 07:18:29 | 000,000,000 | ---D | C] -- C:\Users\Matisz\AppData\Local\Akamai [2011/11/02 00:51:41 | 000,000,000 | ---D | C] -- C:\Users\Matisz\Documents\HyperCam3 [2011/11/02 00:48:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HyperCam 3 [2011/11/02 00:47:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Solveig Multimedia [2011/11/02 00:47:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HyperCam 3 [2011/11/02 00:21:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CamStudio [2011/11/02 00:21:00 | 000,065,536 | ---- | C] (RenderSoft Software) -- C:\Windows\SysWow64\camcodec.dll [2011/11/02 00:13:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CamStudio [2011/11/02 00:13:24 | 000,049,664 | ---- | C] (CamStudio Group) -- C:\Windows\SysNative\CamCodec.dll [2011/11/02 00:13:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CamStudio 2.6b [2011/11/01 19:25:09 | 000,000,000 | ---D | C] -- C:\Users\Matisz\Desktop\Originals [2011/10/28 22:05:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER [2011/10/28 22:04:46 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH [2011/10/28 16:12:17 | 000,000,000 | ---D | C] -- C:\Users\Matisz\Desktop\28.10.2011 [2011/10/26 19:35:33 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\SPReview [2011/10/26 18:26:36 | 000,000,000 | ---D | C] -- C:\_OTL [2011/10/25 20:39:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ad-Remover [2011/10/25 15:49:11 | 000,000,000 | ---D | C] -- C:\UsbFix [2011/10/24 18:35:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2011/10/23 18:19:19 | 000,000,000 | ---D | C] -- C:\Users\Matisz\AppData\Roaming\GHISLER [2011/10/23 17:30:46 | 000,000,000 | ---D | C] -- C:\Users\Matisz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis [2011/10/23 17:30:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\hijack [2011/10/22 16:25:55 | 000,000,000 | ---D | C] -- C:\Users\Matisz\Documents\Battlefield 2 [2009/11/05 04:33:04 | 000,036,136 | ---- | C] (Oberon Media) -- C:\ProgramData\FullRemove.exe [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011/11/18 15:08:00 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011/11/18 14:07:07 | 000,017,600 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011/11/18 14:07:07 | 000,017,600 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011/11/18 14:00:37 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TemplW2728.html [2011/11/18 14:00:37 | 000,002,089 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempIM2728.html [2011/11/18 13:59:07 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011/11/18 13:58:59 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011/11/18 13:58:45 | 3111,518,208 | -HS- | M] () -- C:\hiberfil.sys [2011/11/18 00:56:21 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\Tempyf4084.html [2011/11/17 23:58:54 | 000,001,899 | ---- | M] () -- C:\Users\Matisz\Desktop\Ad-Remover.lnk [2011/11/17 16:57:38 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\Tempjj2852.html [2011/11/17 01:15:41 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempKJ1800.html [2011/11/16 19:37:03 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempID2836.html [2011/11/16 09:19:27 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempKq2824.html [2011/11/16 01:13:47 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempkI3088.html [2011/11/15 22:45:42 | 000,000,116 | ---- | M] () -- C:\Windows\NeroDigital.ini [2011/11/15 20:13:29 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempCH3044.html [2011/11/15 01:11:20 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempzZ3900.html [2011/11/15 01:11:20 | 000,002,089 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TemppN3900.html [2011/11/14 19:21:28 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempUO3148.html [2011/11/14 15:50:43 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempER1620.html [2011/11/14 01:09:32 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempFw3328.html [2011/11/13 00:32:27 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempgE1476.html [2011/11/13 00:32:27 | 000,002,089 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TemptV1476.html [2011/11/12 18:09:24 | 000,002,348 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2011/11/12 16:40:56 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\Tempyf3172.html [2011/11/12 15:46:30 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempCX5020.html [2011/11/12 15:46:30 | 000,002,089 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempnI5020.html [2011/11/12 12:52:27 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempwW4256.html [2011/11/12 11:50:17 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempVO3156.html [2011/11/12 01:45:25 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempAJq768.html [2011/11/12 01:45:25 | 000,002,089 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempNZx768.html [2011/11/11 16:30:57 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TemptH2744.html [2011/11/11 12:07:46 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempPZ3552.html [2011/11/11 02:14:28 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\Templt3148.html [2011/11/11 00:02:23 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempPp3500.html [2011/11/10 18:03:58 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\Tempmp2288.html [2011/11/10 16:14:26 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\Tempfr2748.html [2011/11/10 03:35:44 | 000,391,032 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2011/11/10 03:33:59 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TemphV3608.html [2011/11/10 03:33:59 | 000,002,089 | ---- | M] () -- C:\Users\Matisz\AppData\Local\Tempgw3608.html [2011/11/09 22:58:42 | 000,028,846 | ---- | M] () -- C:\Users\Matisz\Desktop\jaaa.jpg [2011/11/09 19:50:19 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempvY2524.html [2011/11/09 09:07:07 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempyY2688.html [2011/11/09 01:40:07 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempHl6092.html [2011/11/08 21:30:37 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempDD2776.html [2011/11/08 01:27:31 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempFg5512.html [2011/11/07 19:23:36 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\Tempio1896.html [2011/11/06 19:25:24 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\Tempag2116.html [2011/11/06 19:25:24 | 000,002,089 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempZp2116.html [2011/11/06 18:04:11 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempZv2192.html [2011/11/06 12:24:58 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempCw3076.html [2011/11/06 03:42:05 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempHL2372.html [2011/11/06 01:24:32 | 001,885,175 | ---- | M] () -- C:\Users\Matisz\Documents\IMGP0007.JPG [2011/11/06 01:24:29 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempHz2956.html [2011/11/05 17:03:18 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempNG2504.html [2011/11/05 03:42:46 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempgR2716.html [2011/11/04 18:12:41 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempzV2472.html [2011/11/04 01:14:29 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempXH4552.html [2011/11/03 20:36:26 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempSt2644.html [2011/11/03 16:54:28 | 000,002,002 | ---- | M] () -- C:\Users\Public\Desktop\Norton Online Backup.lnk [2011/11/03 01:04:36 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempYq3096.html [2011/11/03 01:04:36 | 000,002,089 | ---- | M] () -- C:\Users\Matisz\AppData\Local\Tempwo3096.html [2011/11/02 17:17:02 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempQe4392.html [2011/11/02 01:05:47 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempQA2676.html [2011/11/02 00:54:52 | 000,000,096 | ---- | M] () -- C:\Windows\SMM_HCEditor.INI [2011/11/02 00:53:55 | 033,852,734 | ---- | M] () -- C:\Users\Matisz\Documents\clip0002.avi [2011/11/02 00:53:00 | 000,008,704 | ---- | M] () -- C:\Users\Matisz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011/11/02 00:48:01 | 000,001,051 | ---- | M] () -- C:\Users\Matisz\Desktop\HyperCam 3.lnk [2011/11/02 00:35:25 | 154,560,718 | ---- | M] () -- C:\Users\Matisz\Documents\clip0001.avi [2011/11/02 00:21:59 | 000,001,022 | ---- | M] () -- C:\Users\Public\Desktop\CamStudio.lnk [2011/11/02 00:21:00 | 000,001,077 | ---- | M] () -- C:\Windows\SysWow64\unins000.dat [2011/11/02 00:20:55 | 000,695,578 | ---- | M] () -- C:\Windows\SysWow64\unins000.exe [2011/11/02 00:13:26 | 000,000,983 | ---- | M] () -- C:\Users\Public\Desktop\CamStudio-Recorder.lnk [2011/11/01 23:03:09 | 000,009,120 | ---- | M] () -- C:\Users\Matisz\Desktop\Bear solo.wlmp [2011/11/01 22:53:56 | 111,222,116 | ---- | M] () -- C:\Users\Matisz\Desktop\Bear solo 1.wmv [2011/11/01 21:53:33 | 768,427,110 | ---- | M] () -- C:\Users\Matisz\Documents\broswer_cam0002.avi [2011/11/01 21:35:47 | 052,711,312 | ---- | M] () -- C:\Users\Matisz\Documents\broswer_cam0001.avi [2011/11/01 19:25:09 | 000,136,453 | ---- | M] () -- C:\Users\Matisz\Desktop\28.10 028.jpg [2011/11/01 18:51:59 | 001,591,892 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011/11/01 18:51:59 | 000,712,016 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2011/11/01 18:51:59 | 000,628,918 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011/11/01 18:51:59 | 000,143,014 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2011/11/01 18:51:59 | 000,112,358 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011/11/01 18:14:52 | 000,309,526 | ---- | M] () -- C:\Users\Matisz\Desktop\cmentarz2006_1.jpg [2011/11/01 16:46:36 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempHl3872.html [2011/11/01 13:07:06 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempvE1096.html [2011/10/31 22:44:40 | 000,048,751 | ---- | M] () -- C:\Users\Matisz\Desktop\249798_170262619701748_100001540332723_413322_1098691_n.jpg [2011/10/31 21:09:10 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\Templx1336.html [2011/10/31 14:45:26 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempCY3036.html [2011/10/31 08:57:17 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempeK1580.html [2011/10/30 23:15:47 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempDT1580.html [2011/10/30 21:09:09 | 000,082,184 | ---- | M] () -- C:\Users\Matisz\Desktop\Obraz.jpeg [2011/10/30 18:39:35 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempGT2132.html [2011/10/30 11:39:34 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\Tempgt2552.html [2011/10/30 01:09:42 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempPh2448.html [2011/10/30 01:09:42 | 000,002,089 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempRV2448.html [2011/10/29 17:04:12 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\Temphh1460.html [2011/10/29 12:36:49 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempMc2176.html [2011/10/29 12:36:49 | 000,002,089 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempUh2176.html [2011/10/29 12:26:52 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\Tempwj3372.html [2011/10/29 12:26:52 | 000,002,089 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempmP3372.html [2011/10/29 03:59:38 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempFY2776.html [2011/10/28 22:07:58 | 000,000,412 | ---- | M] () -- C:\Windows\ODBC.INI [2011/10/28 17:13:23 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempoI3028.html [2011/10/28 02:35:56 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempIb4972.html [2011/10/28 02:35:56 | 000,002,089 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempgG4972.html [2011/10/27 20:20:06 | 000,047,854 | ---- | M] () -- C:\Users\Matisz\Desktop\723ab09b7b77d8f9196e0230e6da7e26.jpg [2011/10/27 17:26:13 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempAn5172.html [2011/10/27 16:18:26 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempmL4388.html [2011/10/26 23:44:51 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempNR2820.html [2011/10/26 20:38:48 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempYb3952.html [2011/10/26 19:54:04 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempAP2592.html [2011/10/26 19:49:10 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msclmd.dll [2011/10/26 19:49:09 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msclmd.dll [2011/10/26 18:12:23 | 000,001,226 | ---- | M] () -- C:\Users\Matisz\AppData\Roaming\wklnhst.dat [2011/10/26 17:44:26 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\Tempks6108.html [2011/10/26 17:44:26 | 000,002,089 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempIX6108.html [2011/10/26 15:43:28 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempFO2648.html [2011/10/26 15:43:28 | 000,002,089 | ---- | M] () -- C:\Users\Matisz\AppData\Local\Tempyy2648.html [2011/10/26 06:28:20 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempWd3672.html [2011/10/26 06:28:20 | 000,002,089 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TemptP3672.html [2011/10/25 20:44:26 | 000,002,432 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempMW5796.html [2011/10/25 20:44:26 | 000,002,089 | ---- | M] () -- C:\Users\Matisz\AppData\Local\TempNr5796.html [2011/10/24 22:22:59 | 000,003,722 | ---- | M] () -- C:\Users\Matisz\Desktop\praca na polaka.rtf [2011/10/24 16:18:52 | 000,077,448 | ---- | M] () -- C:\Users\Matisz\Desktop\Alba.jpg [2011/10/23 17:30:46 | 000,002,995 | ---- | M] () -- C:\Users\Matisz\Desktop\HiJackThis.lnk [2011/10/23 17:29:45 | 001,402,880 | ---- | M] () -- C:\Users\Matisz\Desktop\HiJackThis.msi [2011/10/22 16:26:46 | 000,002,184 | ---- | M] () -- C:\Users\Public\Desktop\Graj teraz w BF2 JS!.lnk [2011/10/22 16:26:46 | 000,002,162 | ---- | M] () -- C:\Users\Public\Desktop\Battlefield 2 Jednostki specjalne.lnk [2011/10/22 16:26:46 | 000,002,112 | ---- | M] () -- C:\Users\Public\Desktop\Graj w Battlefield 2 w sieci!.lnk [2011/10/22 16:26:45 | 000,002,090 | ---- | M] () -- C:\Users\Public\Desktop\Battlefield 2.lnk [2011/10/22 14:44:33 | 000,067,284 | ---- | M] () -- C:\Users\Matisz\.TransferManager.db [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011/11/18 14:00:37 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TemplW2728.html [2011/11/18 14:00:37 | 000,002,089 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempIM2728.html [2011/11/17 23:58:54 | 000,001,899 | ---- | C] () -- C:\Users\Matisz\Desktop\Ad-Remover.lnk [2011/11/17 22:37:01 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\Tempyf4084.html [2011/11/17 16:21:20 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\Tempjj2852.html [2011/11/16 21:58:49 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempKJ1800.html [2011/11/16 14:46:26 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempID2836.html [2011/11/16 09:15:52 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempKq2824.html [2011/11/15 23:10:53 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempkI3088.html [2011/11/15 22:52:45 | 000,409,088 | ---- | C] () -- C:\Users\Matisz\Desktop\krowy.exe [2011/11/15 12:34:04 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempCH3044.html [2011/11/14 22:40:06 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempzZ3900.html [2011/11/14 22:40:06 | 000,002,089 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TemppN3900.html [2011/11/14 16:12:13 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempUO3148.html [2011/11/14 15:50:17 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempER1620.html [2011/11/13 20:19:04 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempFw3328.html [2011/11/12 23:13:06 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempgE1476.html [2011/11/12 23:13:06 | 000,002,089 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TemptV1476.html [2011/11/12 16:34:11 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\Tempyf3172.html [2011/11/12 12:59:17 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempCX5020.html [2011/11/12 12:59:17 | 000,002,089 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempnI5020.html [2011/11/12 12:34:36 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempwW4256.html [2011/11/12 10:35:35 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempVO3156.html [2011/11/11 20:32:45 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempAJq768.html [2011/11/11 20:32:45 | 000,002,089 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempNZx768.html [2011/11/11 14:08:48 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TemptH2744.html [2011/11/11 11:37:12 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempPZ3552.html [2011/11/11 00:11:17 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\Templt3148.html [2011/11/10 18:43:12 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempPp3500.html [2011/11/10 17:44:36 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\Tempmp2288.html [2011/11/10 13:58:43 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\Tempfr2748.html [2011/11/09 22:58:42 | 000,028,846 | ---- | C] () -- C:\Users\Matisz\Desktop\jaaa.jpg [2011/11/09 20:28:22 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TemphV3608.html [2011/11/09 20:28:22 | 000,002,089 | ---- | C] () -- C:\Users\Matisz\AppData\Local\Tempgw3608.html [2011/11/09 14:59:11 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempvY2524.html [2011/11/09 07:25:23 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempyY2688.html [2011/11/08 21:42:33 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempHl6092.html [2011/11/08 17:24:51 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempDD2776.html [2011/11/07 21:28:10 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempFg5512.html [2011/11/06 19:27:40 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\Tempio1896.html [2011/11/06 19:13:51 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\Tempag2116.html [2011/11/06 19:13:51 | 000,002,089 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempZp2116.html [2011/11/06 16:10:17 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempZv2192.html [2011/11/06 10:19:18 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempCw3076.html [2011/11/06 01:31:09 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempHL2372.html [2011/11/05 23:25:47 | 001,885,175 | ---- | C] () -- C:\Users\Matisz\Documents\IMGP0007.JPG [2011/11/05 22:25:29 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempHz2956.html [2011/11/05 12:13:36 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempNG2504.html [2011/11/04 21:15:16 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempgR2716.html [2011/11/04 15:12:59 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempzV2472.html [2011/11/03 23:16:42 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempXH4552.html [2011/11/03 14:53:58 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempSt2644.html [2011/11/02 18:43:24 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempYq3096.html [2011/11/02 18:43:24 | 000,002,089 | ---- | C] () -- C:\Users\Matisz\AppData\Local\Tempwo3096.html [2011/11/02 15:14:17 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempQe4392.html [2011/11/02 00:54:52 | 000,000,096 | ---- | C] () -- C:\Windows\SMM_HCEditor.INI [2011/11/02 00:53:39 | 033,852,734 | ---- | C] () -- C:\Users\Matisz\Documents\clip0002.avi [2011/11/02 00:48:01 | 000,001,051 | ---- | C] () -- C:\Users\Matisz\Desktop\HyperCam 3.lnk [2011/11/02 00:32:52 | 154,560,718 | ---- | C] () -- C:\Users\Matisz\Documents\clip0001.avi [2011/11/02 00:21:59 | 000,001,022 | ---- | C] () -- C:\Users\Public\Desktop\CamStudio.lnk [2011/11/02 00:21:00 | 000,695,578 | ---- | C] () -- C:\Windows\SysWow64\unins000.exe [2011/11/02 00:21:00 | 000,001,077 | ---- | C] () -- C:\Windows\SysWow64\unins000.dat [2011/11/02 00:13:26 | 000,000,983 | ---- | C] () -- C:\Users\Public\Desktop\CamStudio-Recorder.lnk [2011/11/01 22:50:33 | 111,222,116 | ---- | C] () -- C:\Users\Matisz\Desktop\Bear solo 1.wmv [2011/11/01 22:49:05 | 000,009,120 | ---- | C] () -- C:\Users\Matisz\Desktop\Bear solo.wlmp [2011/11/01 21:49:47 | 768,427,110 | ---- | C] () -- C:\Users\Matisz\Documents\broswer_cam0002.avi [2011/11/01 21:35:34 | 052,711,312 | ---- | C] () -- C:\Users\Matisz\Documents\broswer_cam0001.avi [2011/11/01 19:19:02 | 000,136,453 | ---- | C] () -- C:\Users\Matisz\Desktop\28.10 028.jpg [2011/11/01 18:14:44 | 000,309,526 | ---- | C] () -- C:\Users\Matisz\Desktop\cmentarz2006_1.jpg [2011/11/01 18:04:01 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempQA2676.html [2011/11/01 13:54:26 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempHl3872.html [2011/10/31 22:44:37 | 000,048,751 | ---- | C] () -- C:\Users\Matisz\Desktop\249798_170262619701748_100001540332723_413322_1098691_n.jpg [2011/10/31 21:33:37 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempvE1096.html [2011/10/31 19:55:00 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\Templx1336.html [2011/10/31 10:40:20 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempCY3036.html [2011/10/30 23:08:13 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempDT1580.html [2011/10/30 21:16:27 | 000,082,184 | ---- | C] () -- C:\Users\Matisz\Desktop\Obraz.jpeg [2011/10/30 19:47:40 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempeK1580.html [2011/10/30 16:37:49 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempGT2132.html [2011/10/30 09:55:01 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\Tempgt2552.html [2011/10/29 21:45:52 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempPh2448.html [2011/10/29 21:45:52 | 000,002,089 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempRV2448.html [2011/10/29 12:37:04 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\Temphh1460.html [2011/10/29 12:30:05 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempMc2176.html [2011/10/29 12:30:05 | 000,002,089 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempUh2176.html [2011/10/29 09:58:56 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\Tempwj3372.html [2011/10/29 09:58:56 | 000,002,089 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempmP3372.html [2011/10/28 22:07:58 | 000,000,412 | ---- | C] () -- C:\Windows\ODBC.INI [2011/10/28 20:39:03 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempFY2776.html [2011/10/28 12:58:04 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempoI3028.html [2011/10/27 20:20:02 | 000,047,854 | ---- | C] () -- C:\Users\Matisz\Desktop\723ab09b7b77d8f9196e0230e6da7e26.jpg [2011/10/27 19:43:47 | 000,077,448 | ---- | C] () -- C:\Users\Matisz\Desktop\Alba.jpg [2011/10/27 17:51:13 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempIb4972.html [2011/10/27 17:51:13 | 000,002,089 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempgG4972.html [2011/10/27 16:48:32 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempAn5172.html [2011/10/27 13:59:28 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempmL4388.html [2011/10/26 22:21:24 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempNR2820.html [2011/10/26 20:07:34 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempYb3952.html [2011/10/26 17:46:57 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempAP2592.html [2011/10/26 15:50:25 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\Tempks6108.html [2011/10/26 15:50:25 | 000,002,089 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempIX6108.html [2011/10/26 14:06:44 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempFO2648.html [2011/10/26 14:06:44 | 000,002,089 | ---- | C] () -- C:\Users\Matisz\AppData\Local\Tempyy2648.html [2011/10/25 20:48:39 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempWd3672.html [2011/10/25 20:48:39 | 000,002,089 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TemptP3672.html [2011/10/25 19:24:14 | 000,002,432 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempMW5796.html [2011/10/25 19:24:14 | 000,002,089 | ---- | C] () -- C:\Users\Matisz\AppData\Local\TempNr5796.html [2011/10/24 21:57:59 | 000,003,722 | ---- | C] () -- C:\Users\Matisz\Desktop\praca na polaka.rtf [2011/10/23 18:19:19 | 000,000,545 | ---- | C] () -- C:\Windows\UC.PIF [2011/10/23 18:19:19 | 000,000,545 | ---- | C] () -- C:\Windows\RAR.PIF [2011/10/23 18:19:19 | 000,000,545 | ---- | C] () -- C:\Windows\PKZIP.PIF [2011/10/23 18:19:19 | 000,000,545 | ---- | C] () -- C:\Windows\PKUNZIP.PIF [2011/10/23 18:19:19 | 000,000,545 | ---- | C] () -- C:\Windows\NOCLOSE.PIF [2011/10/23 18:19:19 | 000,000,545 | ---- | C] () -- C:\Windows\LHA.PIF [2011/10/23 18:19:19 | 000,000,545 | ---- | C] () -- C:\Windows\ARJ.PIF [2011/10/23 17:30:46 | 000,002,995 | ---- | C] () -- C:\Users\Matisz\Desktop\HiJackThis.lnk [2011/10/23 17:29:42 | 001,402,880 | ---- | C] () -- C:\Users\Matisz\Desktop\HiJackThis.msi [2011/10/22 16:26:46 | 000,002,184 | ---- | C] () -- C:\Users\Public\Desktop\Graj teraz w BF2 JS!.lnk [2011/10/22 16:26:46 | 000,002,162 | ---- | C] () -- C:\Users\Public\Desktop\Battlefield 2 Jednostki specjalne.lnk [2011/10/22 16:26:46 | 000,002,112 | ---- | C] () -- C:\Users\Public\Desktop\Graj w Battlefield 2 w sieci!.lnk [2011/10/22 16:26:45 | 000,002,090 | ---- | C] () -- C:\Users\Public\Desktop\Battlefield 2.lnk [2011/10/22 14:44:33 | 000,067,284 | ---- | C] () -- C:\Users\Matisz\.TransferManager.db [2011/10/16 10:38:01 | 000,679,936 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2011/07/04 08:34:43 | 000,000,000 | ---- | C] () -- C:\Windows\Viewer.INI [2011/06/19 14:20:35 | 000,002,623 | ---- | C] () -- C:\Windows\Irremote.ini [2011/06/14 14:37:39 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\dancemat.exe [2011/05/31 07:39:50 | 000,058,368 | ---- | C] () -- C:\Windows\SysWow64\bdmpegv.dll [2011/05/31 07:38:18 | 000,015,360 | ---- | C] () -- C:\Windows\SysWow64\bdmjpeg.dll [2011/05/30 16:44:24 | 000,000,000 | ---- | C] () -- C:\Users\Matisz\AppData\Local\{AD61FF5B-9657-4388-B82E-350795EB48F8} [2011/05/04 15:02:56 | 000,000,000 | ---- | C] () -- C:\Users\Matisz\AppData\Local\{AC063CD9-DAD8-4F1D-A9DE-ECBFD3273471} [2011/04/09 17:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2011/03/15 13:37:17 | 000,000,547 | ---- | C] () -- C:\Windows\Patch.ini [2011/03/05 22:39:02 | 000,000,008 | ---- | C] () -- C:\Users\Matisz\AppData\Roaming\DofusAppId0_3 [2011/03/05 22:29:40 | 000,000,008 | ---- | C] () -- C:\Users\Matisz\AppData\Roaming\DofusAppId0_1 [2011/03/05 11:03:50 | 000,000,173 | ---- | C] () -- C:\Users\Matisz\AppData\Roaming\D2Info0 [2011/03/05 11:03:50 | 000,000,008 | ---- | C] () -- C:\Users\Matisz\AppData\Roaming\DofusAppId0_2 [2011/03/03 16:15:37 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI [2011/02/27 18:30:52 | 000,000,094 | ---- | C] () -- C:\Users\Matisz\AppData\Local\fusioncache.dat [2011/02/27 16:48:17 | 001,616,126 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011/02/22 12:50:00 | 000,000,612 | ---- | C] () -- C:\Windows\mp3wavcon.ini [2011/02/22 12:49:16 | 000,000,005 | ---- | C] () -- C:\Windows\SysWow64\SySmp3con.dat [2011/02/17 21:01:52 | 000,000,001 | ---- | C] () -- C:\Windows\SysWow64\SI.bin [2011/02/07 21:51:40 | 000,180,224 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2011/01/21 12:18:42 | 000,001,226 | ---- | C] () -- C:\Users\Matisz\AppData\Roaming\wklnhst.dat [2010/10/10 10:54:03 | 000,000,540 | ---- | C] () -- C:\Windows\wininit.ini [2010/09/30 22:39:42 | 000,000,716 | ---- | C] () -- C:\Windows\unins000.dat [2010/08/20 13:50:41 | 000,669,184 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe [2010/07/30 23:23:10 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010/07/24 23:49:51 | 000,000,000 | ---- | C] () -- C:\Windows\ViewNX.INI [2010/07/24 21:05:36 | 000,000,268 | RH-- | C] () -- C:\ProgramData\Galaxy Swirl [2010/07/24 21:05:36 | 000,000,268 | RH-- | C] () -- C:\Users\Matisz\AppData\Roaming\Frameworks [2010/07/24 21:05:36 | 000,000,020 | -H-- | C] () -- C:\ProgramData\PKP_DLdw.DAT [2010/07/24 21:05:36 | 000,000,012 | RH-- | C] () -- C:\ProgramData\Guitars [2010/07/22 15:10:19 | 000,008,704 | ---- | C] () -- C:\Users\Matisz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010/07/21 11:08:40 | 000,000,116 | ---- | C] () -- C:\Windows\NeroDigital.ini [2010/07/02 21:46:58 | 000,270,240 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2010/07/02 21:46:56 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2010/07/02 20:52:59 | 000,066,936 | -HS- | C] () -- C:\Windows\hrinfo_1.drv [2010/06/29 07:30:27 | 000,066,936 | -HS- | C] () -- C:\Windows\hrinfo_0.drv [2010/06/28 22:20:10 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat [2010/01/31 06:40:23 | 000,626,688 | ---- | C] () -- C:\Windows\Image.dll [2010/01/31 06:40:23 | 000,200,704 | ---- | C] () -- C:\Windows\PLFSetI.exe [2010/01/31 06:40:23 | 000,020,480 | ---- | C] () -- C:\Windows\USB_VIDEO_REG.exe [2010/01/31 06:40:23 | 000,000,323 | ---- | C] () -- C:\Windows\PidList.ini [2010/01/31 06:36:55 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2010/01/31 06:15:59 | 000,001,653 | ---- | C] () -- C:\Windows\WPatchProgress.ini [2009/11/05 01:21:23 | 000,000,193 | ---- | C] () -- C:\Windows\Prelaunch.ini [2009/11/05 01:21:23 | 000,000,169 | ---- | C] () -- C:\Windows\WisLangCode.ini [2009/11/05 01:21:23 | 000,000,147 | ---- | C] () -- C:\Windows\WisPriority.ini [2009/07/14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009/07/14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2009/07/14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2009/07/14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009/07/14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009/07/13 22:59:36 | 000,982,196 | ---- | C] () -- C:\Windows\SysWow64\igkrng500.bin [2009/07/13 22:59:36 | 000,139,824 | ---- | C] () -- C:\Windows\SysWow64\igfcg500.bin [2009/07/13 22:59:36 | 000,097,448 | ---- | C] () -- C:\Windows\SysWow64\igfcg500m.bin [2009/07/13 22:59:35 | 000,417,344 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng500.bin [2009/07/13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009/06/10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [2003/07/06 15:18:58 | 000,036,864 | ---- | C] () -- C:\Windows\SysWow64\mathdll.dll [2003/04/08 10:40:22 | 000,005,679 | ---- | C] () -- C:\Windows\SysWow64\OUTLPERF.INI [color=#E56717]========== LOP Check ==========[/color] [2011/09/15 15:49:32 | 000,000,000 | -HSD | M] -- C:\Users\Matisz\AppData\Roaming\.# [2011/03/17 16:17:55 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\.minecraft [2011/03/05 11:03:52 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\app [2011/05/09 00:22:35 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\Avnex [2011/09/01 19:04:04 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\Bioshock2 [2010/06/29 01:10:21 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\DAEMON Tools Lite [2011/05/18 22:33:22 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\Docx2Rtf [2011/03/05 22:35:30 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\Dofus 2 [2011/03/05 11:03:50 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\Dofus-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1 [2011/03/05 22:39:02 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\Dofus-3.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1 [2011/03/05 22:29:40 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\Dofus.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1 [2011/03/11 12:04:54 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\FlashGet [2010/07/10 16:46:41 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\FreeAudioPack [2010/07/14 11:41:59 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\FreeCDRipper [2011/06/18 10:15:19 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\Gadu-Gadu 10 [2010/06/30 02:46:54 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\GameConsole [2011/10/23 18:19:19 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\GHISLER [2011/06/22 13:15:52 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\Gzegzolka XP [2010/08/25 01:44:12 | 000,000,000 | -H-D | M] -- C:\Users\Matisz\AppData\Roaming\ijjigame [2010/09/20 19:19:48 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\ipla [2011/05/08 13:51:34 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\IrfanView [2011/02/24 17:14:14 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\Leadertech [2011/02/04 19:15:04 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\Mirillis [2010/07/24 21:08:34 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\Nikon [2011/05/18 22:33:04 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\NwDocx [2010/06/29 16:49:40 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\OpenFM [2011/08/01 13:21:42 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\PhotoScape [2010/10/12 21:04:14 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\PowerCinema [2011/03/05 11:03:52 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1 [2011/05/09 10:07:56 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\Screaming Bee [2011/01/21 12:18:45 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\Template [2011/07/25 19:41:33 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\Tibia [2010/08/25 12:47:42 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\TS3Client [2010/08/03 17:12:45 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\Ubisoft [2011/03/13 10:15:09 | 000,000,000 | ---D | M] -- C:\Users\Matisz\AppData\Roaming\VitySoft [2011/10/12 06:15:33 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 146 bytes -> C:\ProgramData\Temp:AB689DEA @Alternate Data Stream - 135 bytes -> C:\ProgramData\Temp:5D7E5A8F @Alternate Data Stream - 125 bytes -> C:\ProgramData\Temp:E3C56885 @Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:E1F04E8D < End of report >