OTL logfile created on: 2012-02-12 11:14:32 - Run 2 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\brysio\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 0,21 Gb Available Physical Memory | 10,29% Memory free 4,00 Gb Paging File | 1,34 Gb Available in Paging File | 33,45% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 1397,26 Gb Total Space | 1273,65 Gb Free Space | 91,15% Space Free | Partition Type: NTFS Drive D: | 1397,26 Gb Total Space | 1083,53 Gb Free Space | 77,55% Space Free | Partition Type: NTFS Drive E: | 2794,53 Gb Total Space | 65,52 Gb Free Space | 2,34% Space Free | Partition Type: NTFS Drive F: | 2,91 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Computer Name: FULLWYPAS | User Name: brysio | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-02-12 11:12:26 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\brysio\Downloads\OTL.exe PRC - [2012-02-12 10:57:17 | 001,885,000 | ---- | M] () -- C:\Users\brysio\Downloads\rmvirut.exe PRC - [2012-02-12 07:26:09 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2012-02-08 18:06:20 | 000,246,112 | ---- | M] () -- C:\ProgramData\PLAY ONLINE\OnlineUpdate\ouc.exe PRC - [2012-01-19 12:47:20 | 003,027,840 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe PRC - [2012-01-19 12:47:18 | 011,171,712 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer.exe PRC - [2012-01-19 12:26:18 | 000,116,608 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version7\tv_w32.exe PRC - [2012-01-18 19:54:06 | 024,246,216 | ---- | M] (Dropbox, Inc.) -- C:\Users\brysio\AppData\Roaming\Dropbox\bin\Dropbox.exe PRC - [2011-12-07 21:11:56 | 000,659,224 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe PRC - [2011-11-30 03:17:50 | 000,138,248 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton Internet Security\Engine\19.5.0.145\ccSvcHst.exe PRC - [2011-10-15 09:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe PRC - [2011-10-15 00:54:40 | 000,381,248 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2011-03-14 16:27:28 | 000,236,384 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\ProgramData\DataCardService\DCSHelper.exe PRC - [2011-03-14 12:54:14 | 000,086,016 | ---- | M] (TG Soft Sas www.tgsoft.it) -- C:\VEXPLite\viritsvc.exe PRC - [2010-10-27 21:21:54 | 001,155,072 | ---- | M] (Last.fm) -- C:\Program Files (x86)\Last.fm\LastFM.exe PRC - [2010-04-07 14:00:04 | 005,758,976 | ---- | M] (http://www.emule-project.net) -- C:\Program Files (x86)\eMule\emule.exe PRC - [2010-02-12 10:23:12 | 000,286,720 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe PRC - [2009-12-02 19:40:40 | 000,068,136 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\EnergySaver\GSvr.exe PRC - [2008-03-25 17:21:56 | 000,219,656 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\ET6\GUI.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-02-12 10:57:17 | 001,885,000 | ---- | M] () -- C:\Users\brysio\Downloads\rmvirut.exe MOD - [2012-02-12 07:26:09 | 001,911,768 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2011-12-23 22:41:51 | 008,527,008 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll MOD - [2011-11-01 23:26:32 | 000,087,912 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll MOD - [2011-11-01 23:26:12 | 001,242,472 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll MOD - [2011-10-15 00:54:26 | 000,265,536 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll MOD - [2011-08-23 20:07:34 | 000,155,648 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\ET6\OCK.dll MOD - [2011-08-23 17:48:32 | 002,601,031 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\ET6\Normal.dll MOD - [2011-08-23 17:42:10 | 000,434,243 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\ET6\work.dll MOD - [2011-08-18 11:12:22 | 000,307,200 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\ET6\MFCCPU.DLL MOD - [2011-07-15 11:14:16 | 000,192,512 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\ET6\GVTunner.dll MOD - [2011-06-15 14:19:30 | 000,106,496 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\ET6\SF.dll MOD - [2011-03-01 19:00:58 | 000,126,976 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\ET6\StabilityLib.dll MOD - [2010-12-02 16:01:10 | 000,106,496 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\ET6\HM.dll MOD - [2010-10-27 21:23:04 | 000,106,496 | ---- | M] () -- C:\Program Files (x86)\Last.fm\srv_rtaudioplayback.dll MOD - [2010-10-27 21:22:52 | 000,057,344 | ---- | M] () -- C:\Program Files (x86)\Last.fm\ext_messengernotify.dll MOD - [2010-10-27 21:22:42 | 000,058,880 | ---- | M] () -- C:\Program Files (x86)\Last.fm\ext_skypenotify.dll MOD - [2010-10-27 21:22:08 | 000,147,456 | ---- | M] () -- C:\Program Files (x86)\Last.fm\srv_madtranscode.dll MOD - [2010-10-27 21:22:00 | 000,028,160 | ---- | M] () -- C:\Program Files (x86)\Last.fm\srv_httpinput.dll MOD - [2010-10-27 21:19:28 | 000,372,736 | ---- | M] () -- C:\Program Files (x86)\Last.fm\LastFmFingerprint1.dll MOD - [2010-10-27 21:19:06 | 000,025,088 | ---- | M] () -- C:\Program Files (x86)\Last.fm\breakpad.dll MOD - [2010-10-27 21:18:50 | 000,180,224 | ---- | M] () -- C:\Program Files (x86)\Last.fm\Moose1.dll MOD - [2010-10-27 21:18:34 | 000,540,672 | ---- | M] () -- C:\Program Files (x86)\Last.fm\LastFmTools1.dll MOD - [2010-10-27 21:13:52 | 001,382,507 | ---- | M] () -- C:\Program Files (x86)\Last.fm\libfftw3f-3.dll MOD - [2010-10-27 21:13:52 | 000,074,240 | ---- | M] () -- C:\Program Files (x86)\Last.fm\zlibwapi.dll MOD - [2010-10-19 10:59:46 | 000,065,536 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\ET6\GPTT.dll MOD - [2010-06-24 15:50:08 | 000,094,208 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\ET6\IccLibDll.dll MOD - [2010-06-10 15:52:24 | 000,110,592 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\ET6\AMD8.dll MOD - [2010-03-12 05:40:58 | 004,449,632 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\ET6\Platform.dll MOD - [2010-03-12 05:40:56 | 000,423,256 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\ET6\Device.dll MOD - [2009-12-22 16:52:04 | 000,102,400 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\ET6\ycc.dll MOD - [2008-05-07 15:22:58 | 000,102,400 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\ET6\CIAMIB.dll MOD - [2008-04-16 17:42:30 | 000,376,832 | ---- | M] () -- C:\Program Files (x86)\Last.fm\QtNetwork4.dll MOD - [2008-04-16 17:42:16 | 000,524,288 | ---- | M] () -- C:\Program Files (x86)\Last.fm\QtSql4.dll MOD - [2008-04-16 17:42:02 | 006,701,056 | ---- | M] () -- C:\Program Files (x86)\Last.fm\QtGui4.dll MOD - [2008-04-16 17:36:38 | 000,376,832 | ---- | M] () -- C:\Program Files (x86)\Last.fm\QtXml4.dll MOD - [2008-04-16 17:36:34 | 001,654,784 | ---- | M] () -- C:\Program Files (x86)\Last.fm\QtCore4.dll MOD - [2008-04-02 14:26:50 | 000,233,472 | ---- | M] () -- C:\Program Files (x86)\Last.fm\imageformats\qmng4.dll MOD - [2008-04-02 14:26:34 | 000,021,504 | ---- | M] () -- C:\Program Files (x86)\Last.fm\imageformats\qgif4.dll MOD - [2008-04-02 14:26:28 | 000,135,168 | ---- | M] () -- C:\Program Files (x86)\Last.fm\imageformats\qjpeg4.dll MOD - [2008-03-25 17:21:56 | 000,219,656 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\ET6\GUI.exe MOD - [2003-02-14 14:11:46 | 000,102,400 | ---- | M] () -- C:\Program Files (x86)\GIGABYTE\ET6\Sound.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2012-02-08 18:06:20 | 000,246,112 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe -- (PLAY ONLINE. RunOuc) SRV - [2012-01-19 12:47:20 | 003,027,840 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7) SRV - [2011-12-24 19:40:41 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\MT6Licensing.exe -- (Creative Media Toolbox 6 Licensing Service) SRV - [2011-12-24 19:36:39 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service) SRV - [2011-12-24 00:20:08 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service) SRV - [2011-11-30 03:17:50 | 000,138,248 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton Internet Security\Engine\19.5.0.145\ccSvcHst.exe -- (NIS) SRV - [2011-10-15 09:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService) SRV - [2011-10-15 00:54:40 | 000,381,248 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2011-03-14 12:54:14 | 000,086,016 | ---- | M] (TG Soft Sas www.tgsoft.it) [Auto | Running] -- C:\VEXPLite\viritsvc.exe -- (viritsvclite) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010-02-12 10:23:12 | 000,286,720 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService) SRV - [2009-12-15 21:07:16 | 000,025,832 | ---- | M] (BioWare) [On_Demand | Stopped] -- C:\Program Files (x86)\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe -- (DAUpdaterSvc) SRV - [2009-12-02 19:40:40 | 000,068,136 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\GIGABYTE\EnergySaver\GSvr.exe -- (GEST Service) SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2012-02-08 18:06:21 | 000,421,376 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbwwan.sys -- (ewusbmbb) DRV:[b]64bit:[/b] - [2012-02-08 18:06:21 | 000,222,464 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbmdm.sys -- (hwdatacard) DRV:[b]64bit:[/b] - [2012-02-08 18:06:21 | 000,086,016 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_jubusenum.sys -- (huawei_enumerator) DRV:[b]64bit:[/b] - [2012-02-05 11:13:59 | 000,175,736 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent) DRV:[b]64bit:[/b] - [2011-11-24 03:23:47 | 001,092,728 | R--- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1305000.091\SymEFA64.sys -- (SymEFA) DRV:[b]64bit:[/b] - [2011-11-24 03:23:20 | 000,043,640 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\SymIMV.sys -- (SymIM) DRV:[b]64bit:[/b] - [2011-11-24 02:50:27 | 000,738,936 | R--- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\NISx64\1305000.091\srtsp64.sys -- (SRTSP) DRV:[b]64bit:[/b] - [2011-11-24 02:50:27 | 000,037,496 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1305000.091\srtspx64.sys -- (SRTSPX) Symantec Real Time Storage Protection (PEL) DRV:[b]64bit:[/b] - [2011-11-17 04:37:59 | 000,405,624 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1305000.091\symnets.sys -- (SymNetS) DRV:[b]64bit:[/b] - [2011-11-17 04:17:49 | 000,190,072 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1305000.091\Ironx64.sys -- (SymIRON) DRV:[b]64bit:[/b] - [2011-11-05 00:59:30 | 000,167,048 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1305000.091\ccSetx64.sys -- (ccSet_NIS) DRV:[b]64bit:[/b] - [2011-09-21 10:25:54 | 000,021,992 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz135_x64.sys -- (cpuz135) DRV:[b]64bit:[/b] - [2011-08-16 07:51:40 | 000,451,192 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1305000.091\SymDS64.sys -- (SymDS) DRV:[b]64bit:[/b] - [2011-08-02 17:38:56 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64) DRV:[b]64bit:[/b] - [2011-08-02 17:38:44 | 000,022,528 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netaapl64.sys -- (Netaapl) DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2010-11-20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-11-20 12:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010-11-20 11:49:51 | 000,146,432 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\rmcast.sys -- (RMCAST) DRV:[b]64bit:[/b] - [2010-07-07 22:21:18 | 001,612,888 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ha20x22k.sys -- (ha20x22k) DRV:[b]64bit:[/b] - [2010-07-07 22:21:06 | 001,567,832 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ha20x2k.sys -- (ha20x2k) DRV:[b]64bit:[/b] - [2010-07-07 22:20:56 | 000,118,360 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\emupia2k.sys -- (emupia) DRV:[b]64bit:[/b] - [2010-07-07 22:20:48 | 000,213,080 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctsfm2k.sys -- (ctsfm2k) DRV:[b]64bit:[/b] - [2010-07-07 22:20:40 | 000,015,960 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctprxy2k.sys -- (ctprxy2k) DRV:[b]64bit:[/b] - [2010-07-07 22:16:32 | 000,179,288 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctoss2k.sys -- (ossrv) DRV:[b]64bit:[/b] - [2010-07-07 22:16:24 | 000,697,816 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM) DRV:[b]64bit:[/b] - [2010-07-07 22:16:14 | 000,580,696 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ctac32k.sys -- (ctac32k) DRV:[b]64bit:[/b] - [2010-07-07 22:16:06 | 001,445,976 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CTEXFIFX.sys -- (CTEXFIFX.SYS) DRV:[b]64bit:[/b] - [2010-07-07 22:16:06 | 001,445,976 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTEXFIFX.sys -- (CTEXFIFX) DRV:[b]64bit:[/b] - [2010-07-07 22:15:56 | 000,095,320 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CTHWIUT.sys -- (CTHWIUT.SYS) DRV:[b]64bit:[/b] - [2010-07-07 22:15:56 | 000,095,320 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTHWIUT.sys -- (CTHWIUT) DRV:[b]64bit:[/b] - [2010-07-07 22:15:50 | 000,230,488 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CT20XUT.sys -- (CT20XUT.SYS) DRV:[b]64bit:[/b] - [2010-07-07 22:15:50 | 000,230,488 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CT20XUT.sys -- (CT20XUT) DRV:[b]64bit:[/b] - [2009-11-24 02:38:00 | 000,016,008 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGVirHid.sys -- (LGVirHid) DRV:[b]64bit:[/b] - [2009-11-24 02:37:50 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum) DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-06-10 21:35:42 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-05-18 08:47:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV:[b]64bit:[/b] - [2007-07-16 22:29:23 | 000,020,504 | ---- | M] (Hewlett Packard) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hpfx64bulk.sys -- (HPFXBULK) DRV - [2012-02-12 07:25:31 | 000,030,528 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\GVTDrv64.sys -- (GVTDrv64) DRV - [2012-02-12 07:25:18 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\gdrv.sys -- (gdrv) DRV - [2012-02-12 01:52:41 | 002,048,632 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.5.0.145\Definitions\VirusDefs\20120211.006\ex64.sys -- (NAVEX15) DRV - [2012-02-12 01:52:41 | 000,117,880 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.5.0.145\Definitions\VirusDefs\20120211.006\eng64.sys -- (NAVENG) DRV - [2012-02-03 16:29:00 | 000,488,568 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.5.0.145\Definitions\IPSDefs\20120210.002\IDSviA64.sys -- (IDSVia64) DRV - [2012-02-03 01:00:00 | 000,482,936 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl) DRV - [2012-02-03 01:00:00 | 000,138,360 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv) DRV - [2012-01-18 21:32:17 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\etdrv.sys -- (etdrv) DRV - [2011-11-29 05:48:55 | 001,157,240 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.5.0.145\Definitions\BASHDefs\20120207.003\BHDrvx64.sys -- (BHDrvx64) DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-115925802-2818860559-350697997-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKU\S-1-5-21-115925802-2818860559-350697997-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-115925802-2818860559-350697997-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local IE - HKU\S-1-5-21-115925802-2818860559-350697997-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-115925802-2818860559-350697997-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "Web Search" FF - prefs.js..browser.search.defaultenginename: "Web Search" FF - prefs.js..browser.search.order.1: "Web Search" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.startup.homepage: "about:home" FF - prefs.js..keyword.URL: "http://startsear.ch/?aff=1&src=sp&cf=e0bfea4d-3940-11e1-a9fc-001fd0a2d006&q=" FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.2.1: C:\Windows\system32\npDeployJava1.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.2.1: C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\new_plugin\npjp2.dll (Oracle Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\brysio\AppData\Local\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\brysio\AppData\Local\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.5.0.145\IPSFFPlgn\ [2012-02-05 11:15:08 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.5.0.145\coFFPlgn\ [2012-02-12 07:22:50 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-02-12 07:26:09 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012-02-04 11:52:40 | 000,000,000 | ---D | M] [2011-12-23 22:33:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\brysio\AppData\Roaming\mozilla\Extensions [2012-02-12 10:21:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\brysio\AppData\Roaming\mozilla\Firefox\Profiles\tlm9hfzy.default\extensions [2012-01-17 06:00:45 | 000,000,000 | ---D | M] (EPUBReader) -- C:\Users\brysio\AppData\Roaming\mozilla\Firefox\Profiles\tlm9hfzy.default\extensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F} [2012-01-20 19:01:12 | 000,000,000 | ---D | M] (Evernote Web Clipper) -- C:\Users\brysio\AppData\Roaming\mozilla\Firefox\Profiles\tlm9hfzy.default\extensions\{E0B8C461-F8FB-49b4-8373-FE32E9252800} [2012-02-12 07:26:35 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\brysio\AppData\Roaming\mozilla\Firefox\Profiles\tlm9hfzy.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2012-02-10 10:18:21 | 000,000,000 | ---D | M] ("NetVideoHunter") -- C:\Users\brysio\AppData\Roaming\mozilla\Firefox\Profiles\tlm9hfzy.default\extensions\netvideohunter@netvideohunter.com [2012-01-20 05:34:41 | 000,000,000 | ---D | M] (Vividas player plugin) -- C:\Users\brysio\AppData\Roaming\mozilla\Firefox\Profiles\tlm9hfzy.default\extensions\player@vividas.com [2012-02-12 10:21:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\brysio\AppData\Roaming\mozilla\Firefox\Profiles\tlm9hfzy.default\extensions\staged [2012-01-07 16:06:17 | 000,000,792 | ---- | M] () -- C:\Users\brysio\AppData\Roaming\Mozilla\Firefox\Profiles\tlm9hfzy.default\searchplugins\startsear.xml [2012-02-02 05:37:02 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions () (No name found) -- C:\USERS\BRYSIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\TLM9HFZY.DEFAULT\EXTENSIONS\{46551EC9-40F0-4E47-8E18-8E5CF550CFB8}.XPI () (No name found) -- C:\USERS\BRYSIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\TLM9HFZY.DEFAULT\EXTENSIONS\{9D1F059C-CADA-4111-9696-41A62D64E3BA}.XPI () (No name found) -- C:\USERS\BRYSIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\TLM9HFZY.DEFAULT\EXTENSIONS\{A7C6CF7F-112C-4500-A7EA-39801A327E5F}.XPI () (No name found) -- C:\USERS\BRYSIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\TLM9HFZY.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI () (No name found) -- C:\USERS\BRYSIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\TLM9HFZY.DEFAULT\EXTENSIONS\FIREFOX@ONLINE-CONVERT.COM.XPI () (No name found) -- C:\USERS\BRYSIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\TLM9HFZY.DEFAULT\EXTENSIONS\FLVMOVIESDOWNLOADER@RZLL.XPI [2012-02-12 07:26:09 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2011-09-16 11:57:06 | 000,189,088 | ---- | M] ( ) -- C:\Program Files (x86)\mozilla firefox\plugins\npVividasPlayer.dll [2011-10-03 10:14:54 | 000,083,456 | ---- | M] (vShare.tv ) -- C:\Program Files (x86)\mozilla firefox\plugins\npvsharetvplg.dll [2012-02-02 05:36:58 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2012-02-02 05:36:58 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2012-02-02 05:36:58 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2012-02-02 05:36:58 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2012-02-02 05:36:58 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-02-02 05:36:58 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Web Search (Enabled) CHR - default_search_provider: search_url = http://startsear.ch/?aff=1&src=sp&cf=e0bfea4d-3940-11e1-a9fc-001fd0a2d006&q={searchTerms} CHR - default_search_provider: suggest_url = CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\brysio\AppData\Local\Google\Chrome\Application\16.0.912.77\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\brysio\AppData\Local\Google\Chrome\Application\16.0.912.77\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Users\brysio\AppData\Local\Google\Chrome\Application\16.0.912.77\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll CHR - plugin: Norton Confidential (Enabled) = C:\Users\brysio\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2012.1.0.30_1\npcoplgn.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: Java Deployment Toolkit 6.0.300.12 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U30 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll CHR - plugin: Google Update (Enabled) = C:\Users\brysio\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: YouTube = C:\Users\brysio\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.3_0\ CHR - Extension: FoxTrick = C:\Users\brysio\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpfbbngccefbbndginomofgpagkjckik\0.8.2_0\ CHR - Extension: Szukaj w Google = C:\Users\brysio\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.16_0\ CHR - Extension: vshare plugin = C:\Users\brysio\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj\1.3_0\ CHR - Extension: Norton Identity Protection = C:\Users\brysio\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2012.5.0.140_0\ CHR - Extension: Gmail = C:\Users\brysio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2012-02-05 15:32:46 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\19.5.0.145\coIEPlg.dll (Symantec Corporation) O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\19.5.0.145\IPS\IPSBHO.DLL (Symantec Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\19.5.0.145\coIEPlg.dll (Symantec Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.) O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [HPUsageTracking] C:\Program Files (x86)\HP\HP UT\bin\hppusg.exe (Hewlett-Packard Company) O4 - HKLM..\Run: [VIRIT LITE MONITOR] C:\VEXPLite\MONLITE.exe (TG Soft S.a.s. - www.tgsoft.it) O4 - HKU\S-1-5-21-115925802-2818860559-350697997-1000..\Run: [eMuleAutoStart] C:\Program Files (x86)\eMule\emule.exe (http://www.emule-project.net) O4 - HKU\S-1-5-21-115925802-2818860559-350697997-1003..\Run: [eMuleAutoStart] C:\Program Files (x86)\eMule\emule.exe (http://www.emule-project.net) O4 - HKU\S-1-5-21-115925802-2818860559-350697997-1003..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKLM..\RunOnce: [EasyTuneVI] C:\Program Files (x86)\GIGABYTE\ET6\ETCall.exe () O4 - HKU\S-1-5-21-115925802-2818860559-350697997-1003..\RunOnce: [InetReg] C:\Program Files (x86)\Creative\Product Registration\English\InetReg.exe (Creative Technology Ltd) O4 - HKU\S-1-5-21-115925802-2818860559-350697997-1003..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-21-115925802-2818860559-350697997-1003..\RunOnce: [StartMSu] C:\Program Files (x86)\Creative\MediaSource5\Startmsu.exe (Creative Technology Ltd) O4 - Startup: C:\Users\brysio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\brysio\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-115925802-2818860559-350697997-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-115925802-2818860559-350697997-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\S-1-5-21-115925802-2818860559-350697997-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 10.2.1) O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30) O16 - DPF: {CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30) O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30) O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab (Creative Software AutoUpdate Support Package 2) O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} http://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab (Creative Software AutoUpdate 2) O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab (Creative Software AutoUpdate Support Package) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2B85A98F-28E8-4017-994C-3FC315217B0C}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2B85A98F-28E8-4017-994C-3FC315217B0C}: NameServer = 62.233.233.233 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8B7733D4-F3CB-4BEE-86F4-4278EA5D501D}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AC370A57-C52C-4950-A6A9-A2626D829077}: DhcpNameServer = 79.163.127.70 217.116.100.65 O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-06-24 18:54:26 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2009-07-15 20:40:10 | 000,000,122 | R--- | M] () - F:\autorun.inf -- [ UDF ] O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-02-12 08:19:10 | 000,082,296 | ---- | C] (TG Soft S.a.s.) -- C:\Windows\SysWow64\drivers\viragtlt.sys [2012-02-12 08:16:37 | 000,000,000 | -H-D | C] -- C:\ProgramData\{50DB8392-5787-4044-B241-1E1694663ECB} [2012-02-12 08:16:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VirIT eXplorer Lite [2012-02-12 08:16:30 | 000,000,000 | ---D | C] -- C:\VEXPLite [2012-02-12 08:15:38 | 000,000,000 | ---D | C] -- C:\Users\brysio\AppData\Local\PackageAware [2012-02-11 13:01:36 | 000,000,000 | ---D | C] -- C:\Users\brysio\AppData\Roaming\foobar2000 [2012-02-11 13:01:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\foobar2000 [2012-02-10 12:49:33 | 000,043,640 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SymIMV.sys [2012-02-10 10:05:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SourceTec [2012-02-10 10:05:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SourceTec [2012-02-08 18:07:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PLAY ONLINE [2012-02-08 18:07:49 | 000,000,000 | ---D | C] -- C:\ProgramData\PLAY ONLINE [2012-02-08 18:07:29 | 000,000,000 | ---D | C] -- C:\ProgramData\DataCardService [2012-02-08 18:07:07 | 001,490,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01007.dll [2012-02-08 18:07:07 | 001,490,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdfCoInstaller01007.dll [2012-02-08 18:07:07 | 001,001,472 | ---- | C] (DiBcom SA) -- C:\Windows\SysNative\drivers\mod7700.sys [2012-02-08 18:07:07 | 000,421,376 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbwwan.sys [2012-02-08 18:07:07 | 000,222,464 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbmdm.sys [2012-02-08 18:07:07 | 000,212,992 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_juwwanecm.sys [2012-02-08 18:07:07 | 000,117,248 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_hwusbdev.sys [2012-02-08 18:07:07 | 000,098,816 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_jucdcacm.sys [2012-02-08 18:07:07 | 000,086,016 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_jubusenum.sys [2012-02-08 18:07:07 | 000,069,632 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_jucdcecm.sys [2012-02-08 18:07:07 | 000,032,768 | ---- | C] (Huawei Tech. Co., Ltd.) -- C:\Windows\SysNative\drivers\ewdcsc.sys [2012-02-08 18:07:07 | 000,028,672 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_juextctrl.sys [2012-02-08 18:07:07 | 000,022,016 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_hwupgrade.sys [2012-02-08 18:07:07 | 000,013,952 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_usbenumfilter.sys [2012-02-08 18:06:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PLAY ONLINE [2012-02-05 17:50:53 | 000,000,000 | ---D | C] -- C:\Users\brysio\AppData\Local\LogMeIn Rescue Applet [2012-02-05 15:36:16 | 000,000,000 | ---D | C] -- C:\Windows\temp [2012-02-05 15:32:50 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN [2012-02-05 11:13:59 | 000,175,736 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS [2012-02-05 11:13:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared [2012-02-05 11:13:59 | 000,000,000 | ---D | C] -- C:\Program Files\Symantec [2012-02-05 11:12:13 | 001,092,728 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1305000.091\SymEFA64.sys [2012-02-05 11:12:13 | 000,738,936 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1305000.091\srtsp64.sys [2012-02-05 11:12:13 | 000,451,192 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1305000.091\SymDS64.sys [2012-02-05 11:12:13 | 000,405,624 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1305000.091\symnets.sys [2012-02-05 11:12:13 | 000,190,072 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1305000.091\Ironx64.sys [2012-02-05 11:12:13 | 000,167,048 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1305000.091\ccSetx64.sys [2012-02-05 11:12:13 | 000,037,496 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1305000.091\srtspx64.sys [2012-02-05 11:12:08 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NISx64 [2012-02-05 11:12:08 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NISx64\1305000.091 [2012-02-05 11:12:07 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security [2012-02-05 11:12:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Norton Internet Security [2012-02-05 07:57:13 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe [2012-02-05 07:57:13 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe [2012-02-05 07:57:13 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe [2012-02-05 07:57:07 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT [2012-02-05 07:51:36 | 000,000,000 | ---D | C] -- C:\Qoobox [2012-02-05 07:29:35 | 000,000,000 | ---D | C] -- C:\Users\brysio\AppData\Roaming\Malwarebytes [2012-02-05 07:29:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2012-02-05 07:19:39 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro [2012-02-05 07:19:39 | 000,000,000 | ---D | C] -- C:\rsit [2012-02-05 07:18:05 | 000,000,000 | ---D | C] -- C:\!KillBox [2012-02-05 07:18:01 | 000,059,392 | ---- | C] (Option^Explicit Software vbtechcd@gmail.com) -- C:\Users\brysio\Desktop\KillBox.exe [2012-02-05 07:06:13 | 004,763,456 | ---- | C] (Sysinternals - www.sysinternals.com) -- C:\Users\brysio\Desktop\procexp.exe [2012-02-05 06:41:16 | 000,000,000 | ---D | C] -- C:\Users\brysio\AppData\Local\NPE [2012-02-04 22:01:34 | 000,000,000 | ---D | C] -- C:\NBRT [2012-02-04 21:51:23 | 000,000,000 | ---D | C] -- C:\NPE [2012-02-04 11:49:42 | 000,000,000 | ---D | C] -- C:\Users\brysio\AppData\Local\Diagnostics [2012-02-04 09:31:34 | 000,034,152 | ---- | C] (GEAR Software Inc.) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys [2012-02-04 09:22:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VS Revo Group [2012-02-04 09:22:02 | 000,000,000 | ---D | C] -- C:\Users\brysio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller [2012-02-04 09:10:37 | 000,000,000 | ---D | C] -- C:\Users\brysio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton [2012-02-03 05:21:29 | 000,000,000 | ---D | C] -- C:\found.000 [2012-02-01 09:38:21 | 000,000,000 | ---D | C] -- C:\Users\brysio\AppData\Roaming\dll-files.com [2012-02-01 09:38:12 | 001,060,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc71.dll [2012-02-01 05:26:50 | 000,000,000 | ---D | C] -- C:\Users\brysio\AppData\Roaming\Creative [2012-01-29 10:39:24 | 000,000,000 | ---D | C] -- C:\Windows\pss [2012-01-29 09:07:29 | 000,000,000 | ---D | C] -- C:\Users\brysio\.swt [2012-01-29 08:50:52 | 000,000,000 | ---D | C] -- C:\Users\brysio\AppData\Local\Eclipse [2012-01-29 08:50:42 | 000,000,000 | ---D | C] -- C:\Users\brysio\workspace [2012-01-28 20:01:48 | 000,000,000 | ---D | C] -- C:\Users\brysio\.netbeans [2012-01-28 16:05:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes [2012-01-28 16:05:50 | 000,000,000 | ---D | C] -- C:\Program Files\Apache Software Foundation [2012-01-28 16:05:34 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes [2012-01-28 16:05:34 | 000,000,000 | ---D | C] -- C:\Program Files\iPod [2012-01-28 16:04:33 | 000,000,000 | ---D | C] -- C:\Program Files\glassfish-3.1.1 [2012-01-28 16:00:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetBeans [2012-01-28 15:59:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime [2012-01-28 15:59:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime [2012-01-28 15:58:36 | 000,000,000 | ---D | C] -- C:\Program Files\NetBeans 7.1 [2012-01-28 15:50:25 | 000,000,000 | ---D | C] -- C:\Program Files\Oracle [2012-01-28 15:43:35 | 000,750,488 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\npdeployJava1.dll [2012-01-28 15:43:35 | 000,263,560 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe [2012-01-28 15:43:35 | 000,188,808 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe [2012-01-28 15:43:35 | 000,188,808 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\java.exe [2012-01-28 15:11:45 | 000,000,000 | ---D | C] -- C:\Users\brysio\.nbi [2012-01-28 13:51:44 | 000,000,000 | ---D | C] -- C:\Users\brysio\AppData\Roaming\Microsoft Corporation [2012-01-28 13:47:05 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server [2012-01-28 13:46:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft SQL Server [2012-01-28 13:46:28 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Sync Framework [2012-01-28 13:46:15 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Synchronization Services [2012-01-28 13:46:15 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition [2012-01-28 13:42:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft ASP.NET [2012-01-28 13:42:54 | 000,000,000 | ---D | C] -- C:\Program Files\IIS [2012-01-28 13:42:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IIS [2012-01-28 13:42:08 | 000,000,000 | ---D | C] -- C:\Users\brysio\Documents\Visual Studio 2008 [2012-01-28 13:41:39 | 000,000,000 | ---D | C] -- C:\Users\brysio\Documents\Visual Studio 2010 [2012-01-28 13:28:47 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Help Viewer [2012-01-28 13:26:11 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH [2012-01-28 11:32:52 | 000,000,000 | ---D | C] -- C:\d83cdb893caa502bde [2012-01-25 19:41:48 | 001,447,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll [2012-01-25 19:41:47 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll [2012-01-25 19:41:47 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll [2012-01-25 19:41:47 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll [2012-01-25 19:41:47 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll [2012-01-25 19:41:47 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll [2012-01-14 19:01:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts [2012-01-14 19:01:06 | 000,000,000 | ---D | C] -- C:\Users\brysio\AppData\Local\EA Core [2012-01-14 18:58:52 | 000,000,000 | ---D | C] -- C:\Users\brysio\Documents\BioWare [2012-01-14 18:51:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR [2012-01-14 18:48:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard [2012-01-14 18:48:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Media Center Programs [2012-01-14 18:39:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Dragon Age [2010-07-07 20:36:44 | 000,014,336 | ---- | C] ( ) -- C:\Windows\SysWow64\a3d.dll [2010-07-07 20:10:22 | 000,012,800 | ---- | C] ( ) -- C:\Windows\SysWow64\killapps.exe [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-02-12 10:57:01 | 000,001,062 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-115925802-2818860559-350697997-1000UA.job [2012-02-12 09:20:03 | 000,002,562 | ---- | M] () -- C:\Windows\diagwrn.xml [2012-02-12 09:20:03 | 000,001,908 | ---- | M] () -- C:\Windows\diagerr.xml [2012-02-12 09:16:33 | 000,005,616 | ---- | M] () -- C:\Users\brysio\Desktop\Raport zgodności z systemem Windows.htm [2012-02-12 09:08:46 | 000,070,144 | ---- | M] () -- C:\Windows\listcmd.bin [2012-02-12 08:25:25 | 001,662,556 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012-02-12 08:25:25 | 000,737,730 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2012-02-12 08:25:25 | 000,651,938 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012-02-12 08:25:25 | 000,154,418 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2012-02-12 08:25:25 | 000,120,870 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2012-02-12 08:18:52 | 000,082,296 | ---- | M] (TG Soft S.a.s.) -- C:\Windows\SysWow64\drivers\viragtlt.sys [2012-02-12 08:16:33 | 000,000,636 | ---- | M] () -- C:\Users\Public\Desktop\VirIT eXplorer Lite.lnk [2012-02-12 07:39:42 | 001,767,738 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1305000.091\Cat.DB [2012-02-12 07:35:02 | 000,013,440 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012-02-12 07:35:02 | 000,013,440 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012-02-12 07:25:31 | 000,030,528 | ---- | M] () -- C:\Windows\GVTDrv64.sys [2012-02-12 07:25:31 | 000,000,004 | ---- | M] () -- C:\Windows\SysWow64\GVTunner.ref [2012-02-12 07:25:18 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\Windows\gdrv.sys [2012-02-12 07:22:02 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-02-12 07:21:51 | 1609,277,440 | -HS- | M] () -- C:\hiberfil.sys [2012-02-12 07:20:17 | 000,000,820 | ---- | M] () -- C:\Windows\SysNative\DVCState-{00000006-00000000-00000000-00001102-0000000B-00431102}.rfx [2012-02-12 07:20:16 | 000,063,336 | ---- | M] () -- C:\Windows\SysNative\BMXStateBkp-{00000006-00000000-00000000-00001102-0000000B-00431102}.rfx [2012-02-12 07:20:16 | 000,063,336 | ---- | M] () -- C:\Windows\SysNative\BMXState-{00000006-00000000-00000000-00001102-0000000B-00431102}.rfx [2012-02-11 21:57:02 | 000,001,010 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-115925802-2818860559-350697997-1000Core.job [2012-02-11 13:01:04 | 000,001,031 | ---- | M] () -- C:\Users\Public\Desktop\foobar2000.lnk [2012-02-10 10:05:51 | 000,001,116 | ---- | M] () -- C:\Users\Public\Desktop\Sothink FLV Player.lnk [2012-02-09 20:01:01 | 000,000,043 | ---- | M] () -- C:\Windows\MezzmoMediaServer.INI [2012-02-09 19:58:46 | 000,001,080 | ---- | M] () -- C:\Windows\SysNative\settingsbkup.sfm [2012-02-09 19:58:46 | 000,001,080 | ---- | M] () -- C:\Windows\SysNative\settings.sfm [2012-02-08 18:16:30 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_netaapl64_01009.Wdf [2012-02-08 18:09:32 | 000,001,061 | ---- | M] () -- C:\Users\brysio\Desktop\PLAY ONLINE.lnk [2012-02-08 18:07:53 | 000,001,043 | ---- | M] () -- C:\Users\Public\Desktop\PLAY ONLINE.lnk [2012-02-08 18:07:12 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ew_jubusenum_01007.Wdf [2012-02-08 18:06:21 | 001,490,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01007.dll [2012-02-08 18:06:21 | 001,490,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdfCoInstaller01007.dll [2012-02-08 18:06:21 | 001,001,472 | ---- | M] (DiBcom SA) -- C:\Windows\SysNative\drivers\mod7700.sys [2012-02-08 18:06:21 | 000,421,376 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbwwan.sys [2012-02-08 18:06:21 | 000,222,464 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbmdm.sys [2012-02-08 18:06:21 | 000,212,992 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_juwwanecm.sys [2012-02-08 18:06:21 | 000,117,248 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_hwusbdev.sys [2012-02-08 18:06:21 | 000,098,816 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_jucdcacm.sys [2012-02-08 18:06:21 | 000,086,016 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_jubusenum.sys [2012-02-08 18:06:21 | 000,069,632 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_jucdcecm.sys [2012-02-08 18:06:21 | 000,032,768 | ---- | M] (Huawei Tech. Co., Ltd.) -- C:\Windows\SysNative\drivers\ewdcsc.sys [2012-02-08 18:06:21 | 000,028,672 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_juextctrl.sys [2012-02-08 18:06:21 | 000,022,016 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_hwupgrade.sys [2012-02-08 18:06:21 | 000,013,952 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_usbenumfilter.sys [2012-02-05 15:32:46 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts [2012-02-05 11:13:59 | 000,175,736 | ---- | M] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS [2012-02-05 11:13:59 | 000,007,488 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT [2012-02-05 11:13:59 | 000,000,855 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF [2012-02-05 11:13:44 | 000,002,584 | ---- | M] () -- C:\Users\Public\Desktop\Norton Internet Security.lnk [2012-02-05 11:11:45 | 000,001,295 | ---- | M] () -- C:\Users\brysio\Desktop\Norton Installation Files.lnk [2012-02-04 11:28:12 | 000,002,032 | ---- | M] () -- C:\Users\brysio\Desktop\Creative Audio Control Panel.lnk [2012-02-04 10:41:08 | 359,397,569 | ---- | M] () -- C:\Windows\MEMORY.DMP [2012-02-04 09:22:02 | 000,001,264 | ---- | M] () -- C:\Users\brysio\Desktop\Revo Uninstaller.lnk [2012-02-04 09:10:37 | 000,001,377 | ---- | M] () -- C:\Users\brysio\Desktop\Pliki instalacyjne Norton.lnk [2012-02-02 09:28:38 | 000,000,960 | ---- | M] () -- C:\Users\Public\Desktop\calibre - E-book management.lnk [2012-02-01 19:12:16 | 000,001,021 | ---- | M] () -- C:\Users\brysio\Desktop\Dropbox.lnk [2012-02-01 19:12:16 | 000,001,001 | ---- | M] () -- C:\Users\brysio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2012-02-01 06:10:32 | 000,635,880 | ---- | M] () -- C:\Users\brysio\Desktop\fxTradePracticeLauncher.exe [2012-02-01 06:08:39 | 000,635,880 | ---- | M] () -- C:\Users\brysio\Desktop\fxTradeLauncher.exe [2012-02-01 06:08:21 | 000,002,058 | ---- | M] () -- C:\Users\brysio\Desktop\Media Player Classic - Home Cinema x64.lnk [2012-01-30 03:26:29 | 001,637,758 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2012-01-29 10:14:26 | 001,359,824 | ---- | M] () -- C:\Users\brysio\Desktop\pc-decrapifier-2.2.8.exe [2012-01-28 17:14:18 | 000,002,062 | -H-- | M] () -- C:\Users\brysio\Documents\Default.rdp [2012-01-28 16:05:55 | 000,001,783 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk [2012-01-28 16:00:20 | 000,002,007 | ---- | M] () -- C:\Users\Public\Desktop\NetBeans IDE 7.1.lnk [2012-01-28 15:58:24 | 000,000,628 | ---- | M] () -- C:\Windows\SysNative\mapisvc.inf [2012-01-28 15:43:24 | 000,188,808 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe [2012-01-28 15:43:24 | 000,188,808 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\java.exe [2012-01-27 05:25:06 | 000,000,172 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1305000.091\isolate.ini [2012-01-26 06:36:17 | 000,002,403 | ---- | M] () -- C:\Users\brysio\Desktop\Google Chrome.lnk [2012-01-24 05:51:02 | 000,002,029 | ---- | M] () -- C:\Users\brysio\Desktop\fxTrade Practice.lnk [2012-01-21 08:40:44 | 000,000,324 | ---- | M] () -- C:\Users\brysio\Desktop\Dragon Age Początek.lnk [2012-01-18 21:32:17 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\Windows\etdrv.sys [2012-01-16 07:09:59 | 000,007,602 | ---- | M] () -- C:\Users\brysio\AppData\Local\Resmon.ResmonCfg [2012-01-14 13:37:55 | 000,000,970 | ---- | M] () -- C:\Users\brysio\Desktop\NapiProjekt.lnk [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-02-12 09:16:34 | 000,005,616 | ---- | C] () -- C:\Users\brysio\Desktop\Raport zgodności z systemem Windows.htm [2012-02-12 09:10:12 | 000,002,562 | ---- | C] () -- C:\Windows\diagwrn.xml [2012-02-12 09:10:12 | 000,001,908 | ---- | C] () -- C:\Windows\diagerr.xml [2012-02-12 08:24:31 | 000,070,144 | ---- | C] () -- C:\Windows\listcmd.bin [2012-02-12 08:16:33 | 000,000,636 | ---- | C] () -- C:\Users\Public\Desktop\VirIT eXplorer Lite.lnk [2012-02-11 13:01:04 | 000,001,113 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk [2012-02-11 13:01:04 | 000,001,031 | ---- | C] () -- C:\Users\Public\Desktop\foobar2000.lnk [2012-02-10 10:05:51 | 000,001,116 | ---- | C] () -- C:\Users\Public\Desktop\Sothink FLV Player.lnk [2012-02-08 18:16:30 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_netaapl64_01009.Wdf [2012-02-08 18:09:32 | 000,001,061 | ---- | C] () -- C:\Users\brysio\Desktop\PLAY ONLINE.lnk [2012-02-08 18:07:52 | 000,001,043 | ---- | C] () -- C:\Users\Public\Desktop\PLAY ONLINE.lnk [2012-02-08 18:07:12 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ew_jubusenum_01007.Wdf [2012-02-05 12:02:16 | 000,000,043 | ---- | C] () -- C:\Windows\MezzmoMediaServer.INI [2012-02-05 11:14:04 | 001,767,738 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1305000.091\Cat.DB [2012-02-05 11:13:59 | 000,007,488 | ---- | C] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT [2012-02-05 11:13:59 | 000,000,855 | ---- | C] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF [2012-02-05 11:13:44 | 000,002,584 | ---- | C] () -- C:\Users\Public\Desktop\Norton Internet Security.lnk [2012-02-05 11:12:09 | 000,003,434 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1305000.091\SymEFA.inf [2012-02-05 11:12:09 | 000,002,852 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1305000.091\SymDS.inf [2012-02-05 11:12:09 | 000,001,441 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1305000.091\SymNet.inf [2012-02-05 11:12:09 | 000,001,438 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1305000.091\srtsp64.inf [2012-02-05 11:12:09 | 000,001,420 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1305000.091\srtspx64.inf [2012-02-05 11:12:09 | 000,000,853 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1305000.091\ccSetx64.inf [2012-02-05 11:12:09 | 000,000,772 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1305000.091\Iron.inf [2012-02-05 11:12:08 | 000,007,496 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1305000.091\SymDS64.cat [2012-02-05 11:12:08 | 000,007,468 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1305000.091\ccSetx64.cat [2012-02-05 11:12:08 | 000,007,462 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1305000.091\srtspx64.cat [2012-02-05 11:12:08 | 000,007,460 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1305000.091\SymEFA64.cat [2012-02-05 11:12:08 | 000,007,458 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1305000.091\symnet64.cat [2012-02-05 11:12:08 | 000,007,458 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1305000.091\srtsp64.cat [2012-02-05 11:12:08 | 000,007,450 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1305000.091\iron.cat [2012-02-05 11:12:08 | 000,004,782 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1305000.091\SymVTcer.dat [2012-02-05 11:12:08 | 000,000,172 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1305000.091\isolate.ini [2012-02-05 08:14:34 | 000,000,004 | ---- | C] () -- C:\Windows\SysWow64\GVTunner.ref [2012-02-05 07:57:13 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe [2012-02-05 07:57:13 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe [2012-02-05 07:57:13 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe [2012-02-05 07:57:13 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe [2012-02-05 07:57:13 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe [2012-02-05 07:03:55 | 000,001,295 | ---- | C] () -- C:\Users\brysio\Desktop\Norton Installation Files.lnk [2012-02-04 11:28:12 | 000,002,032 | ---- | C] () -- C:\Users\brysio\Desktop\Creative Audio Control Panel.lnk [2012-02-04 09:22:02 | 000,001,264 | ---- | C] () -- C:\Users\brysio\Desktop\Revo Uninstaller.lnk [2012-02-04 09:10:37 | 000,001,377 | ---- | C] () -- C:\Users\brysio\Desktop\Pliki instalacyjne Norton.lnk [2012-02-01 06:10:31 | 000,635,880 | ---- | C] () -- C:\Users\brysio\Desktop\fxTradePracticeLauncher.exe [2012-02-01 06:08:37 | 000,635,880 | ---- | C] () -- C:\Users\brysio\Desktop\fxTradeLauncher.exe [2012-01-29 12:49:35 | 000,014,276 | ---- | C] () -- C:\Users\brysio\Documents\Example2.class [2012-01-29 10:14:20 | 001,359,824 | ---- | C] () -- C:\Users\brysio\Desktop\pc-decrapifier-2.2.8.exe [2012-01-28 16:05:54 | 000,001,783 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk [2012-01-28 16:00:20 | 000,002,007 | ---- | C] () -- C:\Users\Public\Desktop\NetBeans IDE 7.1.lnk [2012-01-28 15:58:24 | 000,000,628 | ---- | C] () -- C:\Windows\SysNative\mapisvc.inf [2012-01-28 13:28:04 | 001,637,758 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2012-01-21 08:40:44 | 000,000,324 | ---- | C] () -- C:\Users\brysio\Desktop\Dragon Age Początek.lnk [2012-01-21 00:34:41 | 359,397,569 | ---- | C] () -- C:\Windows\MEMORY.DMP [2012-01-16 07:09:59 | 000,007,602 | ---- | C] () -- C:\Users\brysio\AppData\Local\Resmon.ResmonCfg [2012-01-12 22:29:40 | 000,030,528 | ---- | C] () -- C:\Windows\GVTDrv64.sys [2012-01-02 19:29:43 | 000,176,826 | ---- | C] () -- C:\Windows\hppins11.dat [2012-01-02 19:29:42 | 000,005,707 | ---- | C] () -- C:\Windows\hppmdl11.dat [2011-12-24 00:19:05 | 000,164,864 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL [2011-12-24 00:19:05 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL [2011-10-15 00:54:52 | 000,321,856 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe [2010-07-07 21:23:10 | 000,017,868 | ---- | C] () -- C:\Windows\SysWow64\instwdm.ini [2010-07-07 21:23:06 | 000,000,054 | ---- | C] () -- C:\Windows\SysWow64\ctzapxx.ini [2010-07-07 20:33:04 | 000,002,560 | ---- | C] () -- C:\Windows\SysWow64\CTXFIRES.DLL [2010-07-07 20:21:00 | 000,384,647 | ---- | C] () -- C:\Windows\SysWow64\ctdnlstr.dat [2010-07-07 20:21:00 | 000,051,787 | ---- | C] () -- C:\Windows\SysWow64\ctdlang.dat [2010-07-07 20:10:30 | 000,007,680 | ---- | C] () -- C:\Windows\SysWow64\enlocstr.exe [2009-07-14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009-07-14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2009-07-14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2009-07-14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009-07-14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009-07-01 10:12:32 | 000,000,285 | ---- | C] () -- C:\Windows\SysWow64\kill.ini [2009-06-10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [color=#E56717]========== LOP Check ==========[/color] [2012-01-10 20:33:53 | 000,000,000 | ---D | M] -- C:\Users\brysio\AppData\Roaming\calibre [2012-02-01 09:38:21 | 000,000,000 | ---D | M] -- C:\Users\brysio\AppData\Roaming\dll-files.com [2012-02-12 07:24:52 | 000,000,000 | ---D | M] -- C:\Users\brysio\AppData\Roaming\Dropbox [2012-02-11 19:57:04 | 000,000,000 | ---D | M] -- C:\Users\brysio\AppData\Roaming\foobar2000 [2012-01-01 16:04:08 | 000,000,000 | ---D | M] -- C:\Users\brysio\AppData\Roaming\GHISLER [2011-12-24 09:34:33 | 000,000,000 | ---D | M] -- C:\Users\brysio\AppData\Roaming\Leadertech [2012-01-07 10:22:49 | 000,000,000 | ---D | M] -- C:\Users\brysio\AppData\Roaming\NapiProjekt [2011-12-24 08:17:17 | 000,000,000 | ---D | M] -- C:\Users\brysio\AppData\Roaming\OpenOffice.org [2012-01-18 21:23:55 | 000,000,000 | ---D | M] -- C:\Users\brysio\AppData\Roaming\TeamViewer [2012-02-09 20:04:02 | 000,000,000 | ---D | M] -- C:\Users\brysio\AppData\Roaming\TuneUpMedia [2011-12-24 06:41:58 | 000,000,004 | -HS- | M] () -- C:\Windows\Tasks\FOLDER.TSX [2012-02-04 10:42:38 | 000,032,592 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] < End of report >