OTL logfile created on: 1/26/2012 11:21:52 PM - Run 1 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Konrad\Downloads 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 5.91 Gb Total Physical Memory | 3.76 Gb Available Physical Memory | 63.63% Memory free 11.83 Gb Paging File | 9.65 Gb Available in Paging File | 81.62% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 99.92 Gb Total Space | 63.02 Gb Free Space | 63.07% Space Free | Partition Type: NTFS Drive D: | 299.31 Gb Total Space | 257.44 Gb Free Space | 86.01% Space Free | Partition Type: NTFS Drive E: | 299.31 Gb Total Space | 219.87 Gb Free Space | 73.46% Space Free | Partition Type: NTFS Drive G: | 3.58 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF Drive Z: | 100.00 Mb Total Space | 71.62 Mb Free Space | 71.62% Space Free | Partition Type: NTFS Computer Name: KONRAD-PC | User Name: Konrad | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012/01/26 23:21:38 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Konrad\Downloads\OTL.exe PRC - [2011/12/21 09:04:05 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2011/12/14 13:13:28 | 000,748,440 | ---- | M] (Spigot, Inc.) -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe PRC - [2011/12/14 12:59:20 | 002,984,832 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe PRC - [2011/12/14 12:59:20 | 002,684,288 | ---- | M] (TeamViewer GmbH) -- c:\program files (x86)\teamviewer\version7\TeamViewer_Desktop.exe PRC - [2011/12/14 12:59:19 | 010,981,248 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe PRC - [2011/12/14 12:41:55 | 000,116,608 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version7\tv_w32.exe PRC - [2011/12/13 17:42:08 | 000,922,976 | ---- | M] (Spigot, Inc.) -- C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe PRC - [2011/08/27 14:07:00 | 000,399,736 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe PRC - [2011/08/27 13:33:35 | 003,058,304 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe PRC - [2011/08/03 12:50:00 | 002,255,464 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe PRC - [2011/06/09 12:06:06 | 000,507,624 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe PRC - [2011/01/25 10:32:28 | 000,166,528 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe PRC - [2010/11/15 09:42:12 | 000,305,792 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe PRC - [2010/10/07 13:05:14 | 000,170,624 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe PRC - [2010/10/05 20:04:12 | 002,655,768 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2010/10/05 20:04:08 | 000,325,656 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2010/09/23 15:53:16 | 001,601,536 | ---- | M] () -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe PRC - [2010/08/17 13:55:42 | 005,732,992 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe PRC - [2010/03/11 23:14:00 | 011,792,992 | ---- | M] (GG Network S.A.) -- C:\Program Files (x86)\Gadu-Gadu 10\gg.exe PRC - [2009/12/15 09:39:38 | 000,096,896 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe PRC - [2009/06/19 09:29:42 | 000,105,016 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe PRC - [2009/06/19 09:29:26 | 002,488,888 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe PRC - [2009/06/15 16:30:42 | 000,084,536 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe PRC - [2008/12/22 16:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe PRC - [2008/08/13 20:00:08 | 000,113,208 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe PRC - [2007/12/04 14:36:33 | 000,017,272 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe PRC - [2007/12/04 13:00:23 | 000,079,224 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe PRC - [2007/12/04 13:00:16 | 000,140,664 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe PRC - [2007/12/04 12:59:53 | 000,247,160 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe PRC - [2007/12/04 12:59:01 | 000,345,464 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe PRC - [2007/11/30 10:20:44 | 000,051,768 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2011/12/21 09:04:06 | 002,124,760 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2011/08/27 14:11:50 | 006,277,280 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll MOD - [2011/02/08 03:54:58 | 000,004,096 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll MOD - [2010/09/23 15:53:16 | 001,601,536 | ---- | M] () -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe MOD - [2010/03/11 23:16:12 | 000,217,696 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\gglog.dll MOD - [2010/03/11 23:16:10 | 000,123,488 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\ggipcradioproxy.dll MOD - [2010/03/11 23:16:08 | 000,017,504 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\ggipc.dll MOD - [2010/03/11 23:16:04 | 000,027,744 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\ggcrypto.dll MOD - [2010/03/11 23:16:02 | 000,356,960 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\ggcommon.dll MOD - [2010/03/11 10:05:22 | 008,806,400 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtGui4.dll MOD - [2010/02/26 06:02:52 | 002,400,256 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtCore4.dll MOD - [2010/02/26 06:02:52 | 001,511,424 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtScript4.dll MOD - [2010/02/26 06:02:52 | 001,036,288 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtNetwork4.dll MOD - [2010/02/26 06:02:52 | 000,389,120 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtXml4.dll MOD - [2010/02/26 06:02:52 | 000,323,584 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtSvg4.dll MOD - [2010/02/26 06:02:50 | 013,545,472 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtWebKit4.dll MOD - [2010/02/26 06:02:46 | 003,334,144 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtXmlPatterns4.dll MOD - [2010/02/26 06:02:10 | 000,311,296 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qtiff4.dll MOD - [2010/02/26 06:02:10 | 000,274,432 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qmng4.dll MOD - [2010/02/26 06:02:10 | 000,143,360 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qjpeg4.dll MOD - [2010/02/26 06:02:10 | 000,027,648 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qgif4.dll MOD - [2010/02/26 06:02:10 | 000,018,944 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qsvg4.dll MOD - [2010/02/17 16:33:22 | 000,059,904 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\zlib1.dll MOD - [2007/11/30 10:20:44 | 000,051,768 | ---- | M] () -- C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2010/11/30 12:19:52 | 000,379,520 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysNative\FBAgent.exe -- (AFBAgent) SRV:[b]64bit:[/b] - [2010/09/17 09:52:26 | 000,267,480 | ---- | M] (Trend Micro Inc.) [On_Demand | Stopped] -- C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe -- (Amsp) SRV:[b]64bit:[/b] - [2010/09/17 09:32:56 | 000,241,488 | ---- | M] (Trend Micro Inc.) [Auto | Running] -- C:\Program Files\Trend Micro\Titanium\TiMiniService.exe -- (TiMiniService) SRV:[b]64bit:[/b] - [2010/04/16 15:07:42 | 000,134,928 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost) SRV:[b]64bit:[/b] - [2009/07/14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009/07/14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV:[b]64bit:[/b] - [2007/12/04 14:36:33 | 000,017,272 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv) SRV:[b]64bit:[/b] - [2007/12/04 13:00:16 | 000,140,664 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus) SRV:[b]64bit:[/b] - [2007/12/04 12:59:53 | 000,247,160 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner) SRV:[b]64bit:[/b] - [2007/12/04 12:59:01 | 000,345,464 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner) SRV - [2011/12/14 13:13:28 | 000,748,440 | ---- | M] (Spigot, Inc.) [Auto | Running] -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe -- (Application Updater) SRV - [2011/12/14 12:59:20 | 002,984,832 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7) SRV - [2011/08/03 12:50:00 | 002,255,464 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService) SRV - [2010/10/05 20:04:12 | 002,655,768 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R) SRV - [2010/10/05 20:04:08 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R) SRV - [2010/03/18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009/12/15 09:39:38 | 000,096,896 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv) SRV - [2009/06/15 16:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService) SRV - [2009/06/10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2011/11/16 23:05:39 | 000,279,616 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV:[b]64bit:[/b] - [2011/11/16 22:53:53 | 000,530,488 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2011/08/03 12:50:00 | 000,027,240 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt) DRV:[b]64bit:[/b] - [2011/03/11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011/03/11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2011/01/27 01:57:12 | 012,273,408 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2010/12/13 14:12:40 | 000,138,024 | ---- | M] (ELAN Microelectronics Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD) DRV:[b]64bit:[/b] - [2010/11/20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010/11/20 12:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010/11/20 12:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2010/11/05 16:45:48 | 000,438,808 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2010/10/14 17:28:16 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel(R) DRV:[b]64bit:[/b] - [2010/10/14 14:53:12 | 001,147,232 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x) DRV:[b]64bit:[/b] - [2010/09/21 08:59:38 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) Intel(R) DRV:[b]64bit:[/b] - [2010/09/17 09:52:28 | 000,144,464 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tmcomm.sys -- (tmcomm) DRV:[b]64bit:[/b] - [2010/09/17 09:52:28 | 000,105,552 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tmtdi.sys -- (tmtdi) DRV:[b]64bit:[/b] - [2010/09/17 09:52:28 | 000,090,704 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tmactmon.sys -- (tmactmon) DRV:[b]64bit:[/b] - [2010/09/17 09:52:28 | 000,067,664 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tmevtmgr.sys -- (tmevtmgr) DRV:[b]64bit:[/b] - [2010/08/24 10:55:44 | 000,076,912 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C) DRV:[b]64bit:[/b] - [2010/08/11 07:11:26 | 000,044,032 | ---- | M] (Alcor Micro, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmUStor.sys -- (AmUStor) DRV:[b]64bit:[/b] - [2010/04/16 15:07:28 | 000,013,832 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB) DRV:[b]64bit:[/b] - [2009/07/20 10:29:40 | 000,015,416 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kbfiltr.sys -- (kbfiltr) DRV:[b]64bit:[/b] - [2009/07/14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009/07/14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009/07/14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009/06/10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009/06/10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009/06/10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009/06/10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2008/10/13 13:20:38 | 001,451,008 | ---- | M] (C-Media Electronics Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CM10664.sys -- (USBMULCD) DRV:[b]64bit:[/b] - [2008/05/23 16:27:28 | 000,154,168 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr) DRV:[b]64bit:[/b] - [2007/12/04 14:53:44 | 000,027,216 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr.sys -- (aswRdr) DRV:[b]64bit:[/b] - [2007/12/04 14:52:31 | 000,055,888 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt) DRV:[b]64bit:[/b] - [2007/12/04 14:51:59 | 000,048,720 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi) DRV - [2010/07/26 12:57:20 | 000,017,024 | ---- | M] (ASUS) [Kernel | System | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys -- (ATKWMIACPIIO) DRV - [2009/07/14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) DRV - [2009/07/02 16:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64) DRV - [2007/12/04 14:52:16 | 000,045,648 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\Windows\SysWOW64\drivers\aswMonFlt.sys -- (aswMonFlt) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\URLSearchHook: {5c5b9468-d672-4eb7-b52f-b5afabf28c5b} - C:\Program Files (x86)\SFT_Polska\prxtbSFT_.dll (Conduit Ltd.) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 69 DB 06 4E B8 A7 CC 01 [binary data] IE - HKCU\..\URLSearchHook: {5c5b9468-d672-4eb7-b52f-b5afabf28c5b} - C:\Program Files (x86)\SFT_Polska\prxtbSFT_.dll (Conduit Ltd.) IE - HKCU\..\URLSearchHook: {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\4.9\pdfforgeToolbarIE.dll (Spigot, Inc.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "Yahoo" FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=827316&ilc=12" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.startup.homepage: "http://www.interia.pl/" FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=827316&p=" FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Konrad\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{22C7F6C6-8D67-4534-92B5-529A0EC09405}: C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension\ [2011/08/27 13:41:22 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/01/23 15:16:04 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/10/06 12:20:19 | 000,000,000 | ---D | M] [2011/11/21 00:22:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Konrad\AppData\Roaming\mozilla\Extensions [2011/12/15 12:33:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Konrad\AppData\Roaming\mozilla\Firefox\Profiles\6vi8ypx4.default\extensions [2012/01/23 15:16:04 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2012/01/02 12:57:05 | 000,000,000 | ---D | M] (Widgi Toolbar Platform) -- C:\PROGRAM FILES (X86)\COMMON FILES\SPIGOT\WTXPCOM [2011/12/15 12:33:48 | 000,000,000 | ---D | M] (pdfforge Toolbar) -- C:\PROGRAM FILES (X86)\PDFFORGE TOOLBAR\FF [2011/12/21 09:04:06 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2011/08/31 21:57:25 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll [2003/01/13 15:08:06 | 000,499,712 | ---- | M] (Morgan Multimedia) -- C:\Program Files (x86)\mozilla firefox\plugins\npjp2.dll [2011/12/21 06:04:32 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2011/12/21 06:04:32 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2011/12/21 06:04:32 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2011/12/21 06:04:32 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2011/12/21 06:04:32 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2011/12/21 06:04:32 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Yahoo! (Enabled) CHR - default_search_provider: search_url = http://search.yahoo.com/search?ei={inputEncoding}&fr=crmas&p={searchTerms} CHR - default_search_provider: suggest_url = http://ff.search.yahoo.com/gossip?output=fxjson&command={searchTerms} CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\16.0.912.75\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll CHR - plugin: Java Deployment Toolkit 6.0.270.7 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U27 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\plugins\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\plugins\nprpjplug.dll CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\16.0.912.75\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\16.0.912.75\pdf.dll CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: Flash Player 10 = C:\Users\Konrad\AppData\Local\Google\Chrome\User Data\Default\Extensions\dldmjpllkojdldpdkljnalkmodjgomdk\1.1.2_0\ O1 HOSTS File: ([2009/06/10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:[b]64bit:[/b] - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.) O2:[b]64bit:[/b] - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\6.5.1234\6.5.1234\TmBpIe64.dll (Trend Micro Inc.) O2 - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll (Trend Micro Inc.) O2 - BHO: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngin.dll (Conduit Ltd.) O2 - BHO: (SFT_Polska Toolbar) - {5c5b9468-d672-4eb7-b52f-b5afabf28c5b} - C:\Program Files (x86)\SFT_Polska\prxtbSFT_.dll (Conduit Ltd.) O2 - BHO: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\4.9\pdfforgeToolbarIE.dll (Spigot, Inc.) O2 - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.) O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\PROGRA~2\ALLPLA~1\Iplex\IPLEXT~1.DLL (ALLCinema Ltd.) O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\ProgramData\Gadu-Gadu 10\_userdata\ggbho.2.dll (GG Network S.A.) O3 - HKLM\..\Toolbar: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngin.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (SFT_Polska Toolbar) - {5c5b9468-d672-4eb7-b52f-b5afabf28c5b} - C:\Program Files (x86)\SFT_Polska\prxtbSFT_.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files (x86)\pdfforge Toolbar\IE\4.9\pdfforgeToolbarIE.dll (Spigot, Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (SFT_Polska Toolbar) - {5C5B9468-D672-4EB7-B52F-B5AFABF28C5B} - C:\Program Files (x86)\SFT_Polska\prxtbSFT_.dll (Conduit Ltd.) O4:[b]64bit:[/b] - HKLM..\Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Alcor Micro Corp.) O4:[b]64bit:[/b] - HKLM..\Run: [ETDCtrl] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.) O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [Trend Micro Client Framework] C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe (Trend Micro Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [Trend Micro Titanium] C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe (Trend Micro Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [VizorHtmlDialog.exe] C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe (Trend Micro Inc.) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software) O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS) O4 - HKLM..\Run: [SearchSettings] C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.) O4 - HKLM..\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe () O4 - HKCU..\Run: [ALLUpdate] C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe () O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKCU..\Run: [Facebook Update] C:\Users\Konrad\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.) O4 - HKCU..\Run: [uTorrent] C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O9 - Extra Button: Wyslij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyslij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27) O16 - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 50.7.244.146 212.117.175.185 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D6BE7BC5-D638-45CD-AA48-426B7CCBE083}: DhcpNameServer = 50.7.244.146 212.117.175.185 O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\6.5.1234\6.5.1234\TmBpIe64.dll (Trend Micro Inc.) O18:[b]64bit:[/b] - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.) O18 - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.) O18 - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll (Trend Micro Inc.) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation) O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) -C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006/10/17 03:13:11 | 000,000,000 | R--D | M] - G:\AutoRun -- [ UDF ] O32 - AutoRun File - [2006/10/17 02:36:41 | 000,569,344 | R--- | M] (Electronic Arts Inc.) - G:\AutoRun.exe -- [ UDF ] O32 - AutoRun File - [2006/10/17 03:06:25 | 000,000,152 | R--- | M] () - G:\autorun.inf -- [ UDF ] O32 - AutoRun File - [2006/10/13 09:01:46 | 000,528,384 | R--- | M] (Electronic Arts Inc.) - G:\AutoRunGUI.dll -- [ UDF ] O33 - MountPoints2\{38d68163-d0ec-11e0-89c1-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{38d68163-d0ec-11e0-89c1-806e6f6e6963}\Shell\AutoRun\command - "" = F:\InstAll.exe O33 - MountPoints2\{9fd0db2b-109d-11e1-bdf7-f46d0451d92c}\Shell - "" = AutoRun O33 - MountPoints2\{9fd0db2b-109d-11e1-bdf7-f46d0451d92c}\Shell\AutoRun\command - "" = G:\AutoRun.exe -- [2006/10/17 02:36:41 | 000,569,344 | R--- | M] (Electronic Arts Inc.) O33 - MountPoints2\{dbea2480-d0af-11e0-aaf5-f46d0451d92c}\Shell - "" = AutoRun O33 - MountPoints2\{dbea2480-d0af-11e0-aaf5-f46d0451d92c}\Shell\AutoRun\command - "" = H:\SETUP.EXE O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012/01/26 23:18:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Trend Micro [2012/01/26 23:18:28 | 000,000,000 | ---D | C] -- C:\Users\Konrad\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis [2012/01/26 23:18:20 | 000,000,000 | ---D | C] -- C:\Users\Konrad\Desktop\logi [2012/01/19 15:28:14 | 000,000,000 | ---D | C] -- C:\Users\Konrad\Documents\Damian [2012/01/19 14:38:14 | 000,000,000 | ---D | C] -- C:\ProgramData\HPSSUPPLY [2012/01/17 10:19:01 | 001,447,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll [2012/01/17 10:19:00 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll [2012/01/17 10:19:00 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll [2012/01/17 10:19:00 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll [2012/01/17 10:19:00 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll [2012/01/17 10:19:00 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll [2012/01/12 14:24:46 | 000,000,000 | ---D | C] -- C:\Users\Konrad\AppData\Local\Facebook [2012/01/11 11:40:45 | 001,572,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll [2012/01/11 11:40:45 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll [2012/01/11 11:40:44 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll [2012/01/11 11:40:44 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll [2012/01/11 11:40:42 | 000,918,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2012/01/11 11:40:41 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2012/01/11 11:40:37 | 001,731,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll [2012/01/11 11:40:36 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\packager.dll [2012/01/11 11:40:35 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\packager.dll [2012/01/04 11:52:51 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll [2012/01/04 11:52:50 | 001,544,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll [1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012/01/26 23:29:05 | 000,000,932 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-4268371191-45780851-3341368197-1000UA.job [2012/01/26 23:18:29 | 000,002,981 | ---- | M] () -- C:\Users\Konrad\Desktop\HiJackThis.lnk [2012/01/26 22:44:01 | 000,000,898 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012/01/26 21:10:50 | 000,002,432 | ---- | M] () -- C:\Users\Konrad\AppData\Local\TempWT5564.html [2012/01/26 21:10:50 | 000,002,089 | ---- | M] () -- C:\Users\Konrad\AppData\Local\Temphd5564.html [2012/01/26 21:05:00 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012/01/26 18:28:05 | 000,024,000 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012/01/26 18:28:05 | 000,024,000 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012/01/26 18:22:54 | 000,000,894 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012/01/26 18:22:24 | 467,787,775 | -HS- | M] () -- C:\hiberfil.sys [2012/01/25 14:36:24 | 000,000,910 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-4268371191-45780851-3341368197-1000Core.job [2012/01/24 13:33:52 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt [2012/01/24 13:31:42 | 000,413,312 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012/01/23 15:16:07 | 000,001,138 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2012/01/20 16:11:04 | 001,580,660 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012/01/20 16:11:04 | 000,709,308 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2012/01/20 16:11:04 | 000,635,590 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012/01/20 16:11:04 | 000,138,726 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2012/01/20 16:11:04 | 000,110,274 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2012/01/19 16:55:08 | 000,000,000 | -H-- | M] () -- C:\Users\Konrad\Documents\Default.rdp [2012/01/19 11:02:45 | 015,147,884 | ---- | M] () -- C:\Users\Konrad\Desktop\Oliver Twizt - Love Trip (David Jones Remix).mp3 [2012/01/18 19:17:18 | 000,002,432 | ---- | M] () -- C:\Users\Konrad\AppData\Local\TempaJ1712.html [2012/01/18 19:17:18 | 000,002,089 | ---- | M] () -- C:\Users\Konrad\AppData\Local\TempYJ1712.html [2012/01/17 11:15:49 | 000,045,056 | ---- | M] () -- C:\Windows\SysNative\acovcnt.exe [2012/01/12 15:38:03 | 000,002,274 | ---- | M] () -- C:\Windows\SysNative\AutoRunFilter.ini [2012/01/09 14:31:47 | 000,000,866 | ---- | M] () -- C:\Users\Konrad\Desktop\CCleaner.lnk [2012/01/09 14:30:10 | 000,581,154 | ---- | M] () -- C:\Users\Konrad\Desktop\1.jpg [2012/01/03 13:16:45 | 000,739,248 | ---- | M] () -- C:\Users\Konrad\Desktop\opracowanie tobor-nowacki.pdf [2012/01/02 13:05:57 | 000,002,432 | ---- | M] () -- C:\Users\Konrad\AppData\Local\TempeB4236.html [2012/01/02 13:05:57 | 000,002,089 | ---- | M] () -- C:\Users\Konrad\AppData\Local\TempuS4236.html [2012/01/01 15:37:48 | 000,002,432 | ---- | M] () -- C:\Users\Konrad\AppData\Local\Tempbr4568.html [2012/01/01 15:37:48 | 000,002,089 | ---- | M] () -- C:\Users\Konrad\AppData\Local\TempLa4568.html [2011/12/31 14:57:50 | 000,002,432 | ---- | M] () -- C:\Users\Konrad\AppData\Local\TempPG3476.html [2011/12/31 14:57:50 | 000,002,089 | ---- | M] () -- C:\Users\Konrad\AppData\Local\Tempgg3476.html [2011/12/29 16:24:20 | 000,002,432 | ---- | M] () -- C:\Users\Konrad\AppData\Local\TempEK3752.html [2011/12/29 16:24:20 | 000,002,089 | ---- | M] () -- C:\Users\Konrad\AppData\Local\TempOQ3752.html [2011/12/28 17:17:09 | 000,002,432 | ---- | M] () -- C:\Users\Konrad\AppData\Local\TempZE4632.html [2011/12/28 17:17:09 | 000,002,089 | ---- | M] () -- C:\Users\Konrad\AppData\Local\TempqP4632.html [2011/12/28 00:18:03 | 000,002,432 | ---- | M] () -- C:\Users\Konrad\AppData\Local\TempuV4976.html [2011/12/28 00:18:03 | 000,002,089 | ---- | M] () -- C:\Users\Konrad\AppData\Local\TempzY4976.html [1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012/01/26 23:18:29 | 000,002,981 | ---- | C] () -- C:\Users\Konrad\Desktop\HiJackThis.lnk [2012/01/26 21:10:50 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempWT5564.html [2012/01/26 21:10:50 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\Temphd5564.html [2012/01/24 13:31:31 | 000,413,312 | ---- | C] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012/01/23 15:16:07 | 000,001,138 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2012/01/23 15:16:06 | 000,001,150 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk [2012/01/19 16:55:08 | 000,000,000 | -H-- | C] () -- C:\Users\Konrad\Documents\Default.rdp [2012/01/19 11:02:25 | 015,147,884 | ---- | C] () -- C:\Users\Konrad\Desktop\Oliver Twizt - Love Trip (David Jones Remix).mp3 [2012/01/18 18:50:18 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempaJ1712.html [2012/01/18 18:50:18 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempYJ1712.html [2012/01/12 14:24:49 | 000,000,932 | ---- | C] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-4268371191-45780851-3341368197-1000UA.job [2012/01/12 14:24:48 | 000,000,910 | ---- | C] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-4268371191-45780851-3341368197-1000Core.job [2012/01/09 14:29:15 | 000,581,154 | ---- | C] () -- C:\Users\Konrad\Desktop\1.jpg [2012/01/03 13:16:45 | 000,739,248 | ---- | C] () -- C:\Users\Konrad\Desktop\opracowanie tobor-nowacki.pdf [2012/01/02 12:57:17 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempeB4236.html [2012/01/02 12:57:17 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempuS4236.html [2012/01/01 15:26:22 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\Tempbr4568.html [2012/01/01 15:26:22 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempLa4568.html [2011/12/31 14:51:17 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempPG3476.html [2011/12/31 14:51:17 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\Tempgg3476.html [2011/12/29 14:32:51 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempEK3752.html [2011/12/29 14:32:51 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempOQ3752.html [2011/12/28 16:50:31 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempZE4632.html [2011/12/28 16:50:31 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempqP4632.html [2011/12/27 19:57:31 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempuV4976.html [2011/12/27 19:57:31 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempzY4976.html [2011/12/24 16:22:36 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempCQ6452.html [2011/12/23 09:40:00 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempNG4636.html [2011/12/23 09:40:00 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempCs4636.html [2011/12/21 20:56:27 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\Tempyn5672.html [2011/12/21 20:56:27 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempGr5672.html [2011/12/16 09:59:38 | 000,157,469 | ---- | C] () -- C:\Windows\hpoins27.dat [2011/12/15 13:13:13 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempuP2016.html [2011/12/15 13:13:13 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\Tempor2016.html [2011/12/10 21:40:12 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempUk3668.html [2011/12/10 21:40:12 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempYM3668.html [2011/11/25 14:57:39 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempGqq744.html [2011/11/23 13:44:11 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempWr4128.html [2011/11/19 16:38:35 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempuI4236.html [2011/11/19 16:38:35 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempWp4236.html [2011/11/18 11:56:11 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempVRU196.html [2011/11/18 11:56:11 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempVPp196.html [2011/11/15 18:38:59 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\Tempe16092.html [2011/11/15 18:38:59 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\Tempq16092.html [2011/11/12 17:52:38 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TemppQ8196.html [2011/11/12 17:52:38 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempOr8196.html [2011/11/09 17:12:33 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempMC4824.html [2011/11/07 18:42:34 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\Tempsc2332.html [2011/11/07 18:42:34 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempVW2332.html [2011/11/03 17:26:38 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempYb4312.html [2011/10/30 20:47:50 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempvE3404.html [2011/10/30 13:45:52 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\Tempmv3488.html [2011/10/30 13:45:52 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempMs3488.html [2011/10/29 10:42:45 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempcQ4836.html [2011/10/29 10:42:45 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempnP4836.html [2011/10/26 19:11:05 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempEH4368.html [2011/10/25 18:04:45 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\Tempov5552.html [2011/10/25 18:04:45 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempkC5552.html [2011/10/24 20:32:24 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempSm5292.html [2011/10/23 17:18:02 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempTz3872.html [2011/10/13 11:43:05 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempGX7056.html [2011/10/13 11:43:05 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TemplS7056.html [2011/10/10 20:53:42 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempUO3308.html [2011/10/07 18:07:14 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\Temprz5636.html [2011/10/07 18:07:14 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempzK5636.html [2011/10/04 17:50:09 | 000,000,490 | R--- | C] () -- C:\Windows\cm106.ini [2011/10/01 18:04:17 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempJk5248.html [2011/10/01 18:04:17 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\Tempqa5248.html [2011/09/26 16:33:07 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempCq1764.html [2011/09/26 16:33:07 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempIg1764.html [2011/09/26 14:28:51 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempIJ4140.html [2011/09/26 14:28:51 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\Tempjv4140.html [2011/09/20 09:47:18 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TemprU3364.html [2011/09/20 09:47:18 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempAu3364.html [2011/09/19 16:52:15 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempWT4652.html [2011/09/19 16:52:15 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempQT4652.html [2011/09/17 23:10:56 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempSU1180.html [2011/09/17 23:10:56 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TemplJ1180.html [2011/09/15 09:55:27 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\Tempwp3356.html [2011/09/15 09:55:27 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempTA3356.html [2011/09/13 18:14:37 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TemplT4064.html [2011/09/13 18:14:37 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\Tempix4064.html [2011/09/11 12:05:08 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempBB2044.html [2011/09/11 12:05:08 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\Tempfc2044.html [2011/09/07 17:22:56 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempPB3820.html [2011/09/07 17:22:56 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempAG3820.html [2011/09/04 22:45:10 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\Tempke2236.html [2011/09/04 22:45:10 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempcC2236.html [2011/09/04 18:32:55 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempbX4820.html [2011/09/04 18:32:55 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempSb4820.html [2011/09/02 12:54:22 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TemprV4504.html [2011/09/02 12:54:22 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempLw4504.html [2011/09/01 19:42:43 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini [2011/08/31 23:08:00 | 000,000,026 | ---- | C] () -- C:\Windows\Irremote.ini [2011/08/28 17:39:22 | 000,002,432 | ---- | C] () -- C:\Users\Konrad\AppData\Local\Tempsl5308.html [2011/08/28 17:39:22 | 000,002,089 | ---- | C] () -- C:\Users\Konrad\AppData\Local\TempWt5308.html [2011/08/27 18:47:50 | 000,258,048 | ---- | C] () -- C:\Windows\SysWow64\libFLAC.dll [2011/08/27 14:03:43 | 000,000,761 | ---- | C] () -- C:\Windows\m3jp2k.ini [2011/08/27 14:03:43 | 000,000,714 | ---- | C] () -- C:\Windows\m3jpeg.ini [2011/08/27 14:03:43 | 000,000,702 | ---- | C] () -- C:\Windows\mmtvmj.ini [2011/08/27 14:03:40 | 000,019,968 | ---- | C] () -- C:\Windows\SysWow64\cpuinf32.dll [2011/08/27 14:03:39 | 000,152,064 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2011/08/27 14:03:38 | 000,644,608 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2011/08/27 13:28:45 | 000,014,051 | ---- | C] () -- C:\Windows\SysWow64\RaCoInst.dat [2011/08/27 13:28:39 | 000,147,456 | ---- | C] () -- C:\Windows\SysWow64\DiagFunc.dll [2011/08/27 13:28:39 | 000,000,451 | ---- | C] () -- C:\Windows\SysWow64\DiagFunc.ini [2011/08/27 13:13:35 | 000,960,940 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin [2011/08/27 13:13:35 | 000,213,332 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin [2011/08/27 13:13:35 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin [2011/08/27 13:11:12 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\drivers\IntelMEFWVer.dll [2009/07/14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009/07/14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2009/07/14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2009/07/14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009/07/14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009/07/13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009/06/10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [2008/01/18 16:56:22 | 000,000,932 | ---- | C] () -- C:\Windows\hpomdl27.dat < End of report >