OTL logfile created on: 14/04/2012 06:49:51 - Run OTLPE by OldTimer - Version 3.1.48.0 Folder = J:\ 64bit-Windows 7 Home Premium (Version = 6.1.7601) - Type = System Internet Explorer (Version = 9.0.8112.16421) Locale: 00000809 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 8.00 Gb Total Physical Memory | 6.00 Gb Available Physical Memory | 79.00% Memory free 16.00 Gb Paging File | 14.00 Gb Available in Paging File | 88.00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 157.72 Gb Total Space | 60.88 Gb Free Space | 38.60% Space Free | Partition Type: NTFS Drive H: | 2048.00 Gb Total Space | 1898.88 Gb Free Space | 92.72% Space Free | Partition Type: NTFS Drive J: | 1.87 Gb Total Space | 1.35 Gb Free Space | 72.40% Space Free | Partition Type: FAT32 Drive L: | 146.48 Gb Total Space | 62.13 Gb Free Space | 42.42% Space Free | Partition Type: NTFS Drive T: | 98.56 Gb Total Space | 58.60 Gb Free Space | 59.46% Space Free | Partition Type: NTFS Computer Name: VAIO | User Name: Adi Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days Using ControlSet: ControlSet001 [color=#E56717]========== LOP Check ==========[/color] [2012/04/09 07:55:22 | 000,000,000 | ---D | M] -- C:\Users\Adi\AppData\Roaming\.minecraft [2012/02/14 15:15:51 | 000,000,000 | ---D | M] -- C:\Users\Adi\AppData\Roaming\Audacity [2011/08/28 11:15:48 | 000,000,000 | ---D | M] -- C:\Users\Adi\AppData\Roaming\Avnex [2011/06/29 10:19:08 | 000,000,000 | ---D | M] -- C:\Users\Adi\AppData\Roaming\Canneverbe Limited [2012/01/21 13:24:23 | 000,000,000 | ---D | M] -- C:\Users\Adi\AppData\Roaming\FileZilla [2011/08/28 11:40:36 | 000,000,000 | ---D | M] -- C:\Users\Adi\AppData\Roaming\GetRightToGo [2011/06/28 17:07:24 | 000,000,000 | ---D | M] -- C:\Users\Adi\AppData\Roaming\GHISLER [2012/01/09 17:07:20 | 000,000,000 | ---D | M] -- C:\Users\Adi\AppData\Roaming\ImgBurn [2011/06/30 18:30:39 | 000,000,000 | ---D | M] -- C:\Users\Adi\AppData\Roaming\ipla [2012/02/19 09:01:12 | 000,000,000 | ---D | M] -- C:\Users\Adi\AppData\Roaming\iPlus [2011/12/18 11:45:59 | 000,000,000 | ---D | M] -- C:\Users\Adi\AppData\Roaming\Leadertech [2012/03/27 18:47:13 | 000,000,000 | ---D | M] -- C:\Users\Adi\AppData\Roaming\Notepad++ [2011/12/18 18:57:33 | 000,000,000 | ---D | M] -- C:\Users\Adi\AppData\Roaming\Rovio [2011/12/27 15:04:40 | 000,000,000 | ---D | M] -- C:\ProgramData\ALLPlayer [2009/07/14 07:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data [2012/03/12 20:59:11 | 000,000,000 | ---D | M] -- C:\ProgramData\AVAST Software [2012/01/21 20:50:35 | 000,000,000 | ---D | M] -- C:\ProgramData\Babylon [2011/06/29 10:19:08 | 000,000,000 | ---D | M] -- C:\ProgramData\Canneverbe Limited [2012/01/06 21:49:58 | 000,000,000 | ---D | M] -- C:\ProgramData\DAEMON Tools Lite [2009/07/14 07:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Desktop [2009/07/14 07:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Documents [2011/06/25 13:45:09 | 000,000,000 | ---D | M] -- C:\ProgramData\Electronic Arts [2011/06/17 12:03:11 | 000,000,000 | ---D | M] -- C:\ProgramData\Evernote [2009/07/14 07:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favorites [2011/06/24 10:44:27 | 000,000,000 | ---D | M] -- C:\ProgramData\Gadu-Gadu 10 [2012/03/30 20:49:45 | 000,000,000 | ---D | M] -- C:\ProgramData\GG [2012/03/25 15:08:47 | 000,000,000 | ---D | M] -- C:\ProgramData\Hi-Rez Studios [2011/10/12 19:28:39 | 000,000,000 | ---D | M] -- C:\ProgramData\hssff [2012/01/07 02:16:32 | 000,000,000 | ---D | M] -- C:\ProgramData\ipla [2012/02/11 23:51:09 | 000,000,000 | ---D | M] -- C:\ProgramData\OpenFM [2011/07/24 09:49:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Partner [2011/06/22 20:13:12 | 000,000,000 | ---D | M] -- C:\ProgramData\RDRM [2011/11/12 22:33:24 | 000,000,000 | ---D | M] -- C:\ProgramData\regid.1986-12.com.adobe [2011/08/26 21:09:19 | 000,000,000 | ---D | M] -- C:\ProgramData\Speedbit [2009/07/14 07:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu [2011/09/10 16:51:16 | 000,000,000 | ---D | M] -- C:\ProgramData\TechSmith [2012/03/13 15:05:15 | 000,000,000 | ---D | M] -- C:\ProgramData\TEMP [2009/07/14 07:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Templates [2011/06/17 12:28:26 | 000,000,000 | ---D | M] -- C:\ProgramData\Uninstall [2012/01/04 23:45:20 | 000,000,000 | ---D | M] -- C:\ProgramData\VS [2012/04/13 21:30:00 | 000,000,902 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1456623502-3680393620-1486400092-1004Core.job [2012/04/13 21:30:00 | 000,000,924 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1456623502-3680393620-1486400092-1004UA.job [2012/02/16 16:22:52 | 000,032,604 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< MD5 for: WS2_32.DLL >[/color] [2012/04/10 14:18:11 | 000,207,360 | ---- | M] (Microsoft Corporation) MD5=131970B01C07AE2F94814FCD767EBAF7 -- C:\Windows\System32\ws2_32.dll [2012/04/10 14:18:11 | 000,207,360 | ---- | M] (Microsoft Corporation) MD5=131970B01C07AE2F94814FCD767EBAF7 -- C:\Windows\SysWOW64\ws2_32.dll [2010/11/20 15:27:29 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_50ddb631e4f59005\ws2_32.dll [2012/04/12 13:35:22 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\Windows\ws2_32.dll [2012/04/12 13:35:22 | 000,297,984 | ---- | M] (Microsoft Corporation) MD5=4BBFA57F594F7E8A8EDC8F377184C3F0 -- C:\ws2_32.dll [2009/07/14 03:41:58 | 000,296,448 | ---- | M] (Microsoft Corporation) MD5=7083F463788CB34FCC42F565D56F89E8 -- C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_4eaca269e8070c6b\ws2_32.dll [2010/11/20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll [2009/07/14 03:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_f28e06e62fa99b35\ws2_32.dll [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 130 bytes -> C:\ProgramData\TEMP:E41EAF13 @Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:05EE1EEF @Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:F7F48F12 < End of report >