OTL logfile created on: 4/20/2012 7:51:41 PM - Run 2 OTL by OldTimer - Version 3.2.40.0 Folder = D:\ Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2.99 Gb Total Physical Memory | 2.21 Gb Available Physical Memory | 73.71% Memory free 5.99 Gb Paging File | 5.17 Gb Available in Paging File | 86.35% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files Drive C: | 130.17 Gb Total Space | 48.80 Gb Free Space | 37.49% Space Free | Partition Type: NTFS Drive D: | 152.82 Gb Total Space | 100.70 Gb Free Space | 65.89% Space Free | Partition Type: NTFS Drive E: | 219.01 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: UDF Computer Name: FILIP-KOMPUTER | User Name: jjj | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012/04/20 18:29:07 | 000,595,968 | ---- | M] (OldTimer Tools) -- D:\OTL.exe PRC - [2012/03/07 01:15:17 | 004,241,512 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2012/03/07 01:15:14 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2011/08/01 15:35:42 | 000,114,992 | R--- | M] (SweetIM Technologies Ltd.) -- C:\Program Files\SweetIM\Messenger\SweetIM.exe PRC - [2011/03/24 14:30:12 | 001,115,536 | ---- | M] (Discordia, LTD) -- C:\Program Files\Windows iLivid Toolbar\Datamngr\datamngrUI.exe PRC - [2011/02/26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009/12/22 04:31:26 | 000,217,088 | ---- | M] (Teruten) -- C:\Windows\System32\FsUsbExService.Exe PRC - [2009/12/22 04:31:02 | 000,095,568 | ---- | M] (Devguru Co., Ltd.) -- C:\Windows\System32\dgdersvc.exe PRC - [2009/10/20 11:12:58 | 000,013,312 | ---- | M] (DoctorSoft) -- C:\Program Files\AnyPC Client\APLangApp.exe PRC - [2009/06/03 13:59:02 | 000,103,720 | ---- | M] (CyberLink) -- C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe PRC - [2009/04/15 16:52:06 | 000,091,432 | ---- | M] (CyberLink Corp.) -- C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2009/06/03 13:59:14 | 000,013,096 | ---- | M] () -- C:\Program Files\CyberLink\Power2Go\CLMLSvcPS.dll MOD - [2009/06/03 13:59:02 | 000,619,816 | ---- | M] () -- C:\Program Files\CyberLink\Power2Go\CLMediaLibrary.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2012/03/07 01:15:14 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV - [2012/02/11 09:55:47 | 003,340,064 | ---- | M] () [Auto | Running] -- c:\program files\common files\akamai/netsession_win_7de0ed9.dll -- (Akamai) SRV - [2012/01/10 07:59:52 | 000,419,624 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2010/05/29 19:56:14 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc) SRV - [2009/12/22 04:31:26 | 000,217,088 | ---- | M] (Teruten) [Auto | Running] -- C:\Windows\System32\FsUsbExService.Exe -- (FsUsbExService) SRV - [2009/12/22 04:31:02 | 000,095,568 | ---- | M] (Devguru Co., Ltd.) [Auto | Running] -- C:\Windows\System32\dgdersvc.exe -- (dgdersvc) SRV - [2009/08/13 21:58:10 | 000,044,312 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Samsung Casual Games\GameConsole\OberonGameConsoleService.exe -- (OberonGameConsoleService) SRV - [2009/07/14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009/07/14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2008/11/11 09:38:06 | 000,620,544 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Unknown] -- -- (a22m4ltw) DRV - [2012/03/07 01:03:51 | 000,612,184 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\windows\System32\drivers\aswSnx.sys -- (aswSnx) DRV - [2012/03/07 01:03:38 | 000,337,880 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\windows\System32\drivers\aswSP.sys -- (aswSP) DRV - [2012/03/07 01:02:14 | 000,044,376 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr2.sys -- (aswRdr) DRV - [2012/03/07 01:01:53 | 000,053,848 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\windows\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2012/03/07 01:01:48 | 000,057,688 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt) DRV - [2012/03/07 01:01:30 | 000,020,696 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2011/10/24 21:57:46 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sptd.sys -- (sptd) DRV - [2009/12/22 04:31:26 | 000,036,640 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk) DRV - [2009/12/22 04:31:02 | 000,018,136 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dgderdrv.sys -- (dgderdrv) DRV - [2009/11/06 22:53:58 | 001,227,776 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr) DRV - [2009/11/06 06:07:10 | 009,923,624 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2009/09/28 11:22:00 | 000,315,392 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\yk62x86.sys -- (yukonw7) DRV - [2009/09/19 07:30:10 | 000,123,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bmdm.sys -- (ss_bmdm) DRV - [2009/09/19 07:30:10 | 000,100,224 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bserd.sys -- (ss_bserd) DRV - [2009/09/19 07:30:10 | 000,098,432 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM) DRV - [2009/09/19 07:30:10 | 000,014,848 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bmdfl.sys -- (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter) DRV - [2009/07/14 01:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp) DRV - [2009/07/14 01:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb) DRV - [2009/07/14 00:02:53 | 000,657,408 | ---- | M] (Ralink Technology Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\netr28u.sys -- (netr28u) DRV - [2009/06/27 16:55:12 | 000,066,080 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA) DRV - [2009/05/01 16:41:06 | 000,384,896 | ---- | M] (Phoenix Technologies Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CryptOSD.sys -- (CryptOSD) DRV - [2008/08/26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://alawar.pl IE - HKLM\..\URLSearchHook: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files\Free_Lunch_Design\prxtbFree.dll (Conduit Ltd.) IE - HKLM\..\URLSearchHook: {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.) IE - HKLM\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - SOFTWARE\Classes\CLSID\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\InprocServer32 File not found IE - HKLM\..\URLSearchHook: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - SOFTWARE\Classes\CLSID\{c86eb8a9-ccc2-4b6c-b75d-73576ed591bf}\InprocServer32 File not found IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\..\SearchScopes\{8A96AF9E-4074-43b7-BEA3-87217BDA7406}: "URL" = http://www.searchqu.com/web?src=ieb&systemid=406&q={searchTerms} IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3031817 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2789141661-186915839-826018185-1011\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn IE - HKU\S-1-5-21-2789141661-186915839-826018185-1011\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn [color=#E56717]========== FireFox ==========[/color] FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@comrade.gamespy.com/comrade: C:\Program Files\GameSpy\Comrade\npcomrade.dll (IGN Entertainment) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@zylom.com/ZylomGamesPlayer: C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}: C:\Program Files\Crawler\firefox\ [2011/03/20 08:57:46 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012/04/20 15:07:54 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.20\extensions\\Components: C:\Program Files\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.20\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0\extensions\\Components: D:\Program Files\Mozilla Firefox\components [2011/12/27 08:59:22 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins [2011/12/27 08:59:20 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.7\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.7\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2012/04/20 14:05:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\jjj\AppData\Roaming\Mozilla\Extensions [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms} CHR - Extension: YouTube = C:\Users\jjj\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\ CHR - Extension: Szukaj w Google = C:\Users\jjj\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\ CHR - Extension: Gmail = C:\Users\jjj\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0\ O1 HOSTS File: ([2009/06/10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\Program Files\Crawler\ctbr.dll (Crawler.com) O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O2 - BHO: (Free Lunch Design Toolbar) - {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files\Free_Lunch_Design\prxtbFree.dll (Conduit Ltd.) O2 - BHO: (gry Toolbar) - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files\Windows iLivid Toolbar\ToolBar\searchqudtx.dll () O2 - BHO: (UrlHelper Class) - {A40DC6C5-79D0-4ca8-A185-8FF989AF1115} - C:\Program Files\Windows iLivid Toolbar\Datamngr\IEBHO.dll (Discordia, LTD) O2 - BHO: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll File not found O2 - BHO: (Softonic-Polska Toolbar) - {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files\Softonic-Polska\tbSoft.dll File not found O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - D:\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) O2 - BHO: (kikin Plugin) - {E601996F-E400-41CA-804B-CD6373A7EEE2} - C:\Program Files\kikin\ie_kikin.dll File not found O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Users\Filip\AppData\Roaming\Nowe Gadu-Gadu\_userdata\ggbho.1.dll File not found O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKLM\..\Toolbar: (&Crawler Toolbar) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\Program Files\Crawler\ctbr.dll (Crawler.com) O3 - HKLM\..\Toolbar: (Free Lunch Design Toolbar) - {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files\Free_Lunch_Design\prxtbFree.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (gry Toolbar) - {8532a8b7-c06a-41bb-936a-8ce73e4711ed} - C:\Program Files\gry\tbgry.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O3 - HKLM\..\Toolbar: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files\Windows iLivid Toolbar\ToolBar\searchqudtx.dll () O3 - HKLM\..\Toolbar: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll File not found O3 - HKLM\..\Toolbar: (Softonic-Polska Toolbar) - {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files\Softonic-Polska\tbSoft.dll File not found O3 - HKLM\..\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O4 - HKLM..\Run: [APLangApp] C:\Program Files\AnyPC Client\APLangApp.exe (DoctorSoft) O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [CLMLServer] C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe (CyberLink) O4 - HKLM..\Run: [DATAMNGR] C:\Program Files\Windows iLivid Toolbar\Datamngr\datamngrUI.exe (Discordia, LTD) O4 - HKLM..\Run: [NPSStartup] File not found O4 - HKLM..\Run: [NvCplDaemon] C:\windows\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [PDVD8LanguageShortcut] C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe (CyberLink Corp.) O4 - HKLM..\Run: [RemoteControl8] C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe (CyberLink Corp.) O4 - HKLM..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [UpdateLBPShortCut] C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdateP2GoShortCut] C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdatePDRShortCut] C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdatePPShortCut] C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [UpdatePSTShortCut] C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O9 - Extra 'Tools' menuitem : My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - C:\Program Files\kikin\ie_kikin.dll File not found O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL File not found O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll (InterTrust Technologies Corporation, Inc.) O13 - gopher Prefix: missing O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{442FB787-B184-4F19-B4B4-DED6569817AA}: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B7099467-7D9C-45FC-9806-CDB5BCBD1AA8}: DhcpNameServer = 192.168.0.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\tbr {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\Program Files\Crawler\ctbr.dll (Crawler.com) O20 - AppInit_DLLs: (C:\PROGRA~1\WI3C8A~1\Datamngr\datamngr.dll) - C:\Program Files\Windows iLivid Toolbar\Datamngr\datamngr.dll (Discordia, LTD) O20 - AppInit_DLLs: (C:\PROGRA~1\WI3C8A~1\Datamngr\IEBHO.dll) - C:\Program Files\Windows iLivid Toolbar\Datamngr\IEBHO.dll (Discordia, LTD) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012/04/20 18:52:24 | 000,000,000 | --SD | C] -- C:\ComboFix [2012/04/20 18:52:20 | 000,000,000 | ---D | C] -- C:\Qoobox [2012/04/20 17:52:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2012 [2012/04/20 17:52:21 | 000,000,000 | ---D | C] -- C:\Users\jjj\AppData\Roaming\TuneUp Software [2012/04/20 17:52:09 | 000,000,000 | ---D | C] -- C:\Program Files\TuneUp Utilities 2012 [2012/04/20 17:51:38 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software [2012/04/20 17:51:32 | 000,000,000 | -HSD | C] -- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936} [2012/04/20 17:51:12 | 000,000,000 | ---D | C] -- C:\Users\jjj\AppData\Roaming\WinRAR [2012/04/20 17:50:12 | 000,000,000 | ---D | C] -- C:\Users\jjj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR [2012/04/20 17:50:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR [2012/04/20 15:11:25 | 000,000,000 | ---D | C] -- C:\Users\jjj\AppData\Roaming\Adobe [2012/04/20 15:08:19 | 000,337,880 | ---- | C] (AVAST Software) -- C:\windows\System32\drivers\aswSP.sys [2012/04/20 15:08:19 | 000,020,696 | ---- | C] (AVAST Software) -- C:\windows\System32\drivers\aswFsBlk.sys [2012/04/20 15:08:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus [2012/04/20 15:08:18 | 000,053,848 | ---- | C] (AVAST Software) -- C:\windows\System32\drivers\aswTdi.sys [2012/04/20 15:08:18 | 000,044,376 | ---- | C] (AVAST Software) -- C:\windows\System32\drivers\aswRdr2.sys [2012/04/20 15:08:17 | 000,612,184 | ---- | C] (AVAST Software) -- C:\windows\System32\drivers\aswSnx.sys [2012/04/20 15:08:15 | 000,057,688 | ---- | C] (AVAST Software) -- C:\windows\System32\drivers\aswMonFlt.sys [2012/04/20 15:07:42 | 000,041,184 | ---- | C] (AVAST Software) -- C:\windows\avastSS.scr [2012/04/20 15:07:41 | 000,201,352 | ---- | C] (AVAST Software) -- C:\windows\System32\aswBoot.exe [2012/04/20 15:07:30 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software [2012/04/20 15:07:30 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software [2012/04/20 14:05:43 | 000,000,000 | ---D | C] -- C:\Users\jjj\AppData\Roaming\Mozilla [2012/04/20 14:05:43 | 000,000,000 | ---D | C] -- C:\Users\jjj\AppData\Local\Mozilla [2012/04/20 14:01:01 | 000,000,000 | ---D | C] -- C:\Users\jjj\AppData\Local\Diagnostics [2012/04/20 13:32:15 | 000,000,000 | ---D | C] -- C:\Program Files\Axesstel [2012/04/20 13:28:10 | 000,000,000 | ---D | C] -- C:\Users\jjj\AppData\Local\Google [2012/04/20 13:27:08 | 000,000,000 | ---D | C] -- C:\Users\jjj\Documents\Youcam [2012/04/12 16:49:45 | 000,000,000 | ---D | C] -- C:\Users\jjj\Desktop\Nowy folder [2012/04/12 16:47:01 | 000,000,000 | ---D | C] -- C:\Users\jjj\Desktop\Mody do GTA SAN ANDREAS [2012/04/12 16:25:28 | 000,000,000 | ---D | C] -- C:\Users\jjj\Documents\GTA San Andreas User Files [2012/04/12 16:25:27 | 000,000,000 | ---D | C] -- C:\Users\jjj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games [2012/04/12 16:23:19 | 000,000,000 | ---D | C] -- C:\Users\jjj\AppData\Local\Power2Go [2012/04/12 16:22:49 | 000,000,000 | R--D | C] -- C:\Users\jjj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup [2012/04/12 16:22:49 | 000,000,000 | R--D | C] -- C:\Users\jjj\Searches [2012/04/12 16:22:49 | 000,000,000 | R--D | C] -- C:\Users\jjj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools [2012/04/12 16:22:41 | 000,000,000 | ---D | C] -- C:\Users\jjj\AppData\Roaming\Identities [2012/04/12 16:22:38 | 000,000,000 | R--D | C] -- C:\Users\jjj\Contacts [2012/04/12 16:22:37 | 000,000,000 | ---D | C] -- C:\Users\jjj\AppData\Local\VirtualStore [2012/04/12 16:21:29 | 000,000,000 | -HSD | C] -- C:\Users\jjj\Ustawienia lokalne [2012/04/12 16:21:29 | 000,000,000 | -HSD | C] -- C:\Users\jjj\AppData\Local\Temporary Internet Files [2012/04/12 16:21:29 | 000,000,000 | -HSD | C] -- C:\Users\jjj\Szablony [2012/04/12 16:21:29 | 000,000,000 | -HSD | C] -- C:\Users\jjj\SendTo [2012/04/12 16:21:29 | 000,000,000 | -HSD | C] -- C:\Users\jjj\Recent [2012/04/12 16:21:29 | 000,000,000 | -HSD | C] -- C:\Users\jjj\PrintHood [2012/04/12 16:21:29 | 000,000,000 | -HSD | C] -- C:\Users\jjj\NetHood [2012/04/12 16:21:29 | 000,000,000 | -HSD | C] -- C:\Users\jjj\Documents\Moje wideo [2012/04/12 16:21:29 | 000,000,000 | -HSD | C] -- C:\Users\jjj\Documents\Moje obrazy [2012/04/12 16:21:29 | 000,000,000 | -HSD | C] -- C:\Users\jjj\Moje dokumenty [2012/04/12 16:21:29 | 000,000,000 | -HSD | C] -- C:\Users\jjj\Documents\Moja muzyka [2012/04/12 16:21:29 | 000,000,000 | -HSD | C] -- C:\Users\jjj\Menu Start [2012/04/12 16:21:29 | 000,000,000 | -HSD | C] -- C:\Users\jjj\AppData\Local\Historia [2012/04/12 16:21:29 | 000,000,000 | -HSD | C] -- C:\Users\jjj\Dane aplikacji [2012/04/12 16:21:29 | 000,000,000 | -HSD | C] -- C:\Users\jjj\AppData\Local\Dane aplikacji [2012/04/12 16:21:29 | 000,000,000 | -HSD | C] -- C:\Users\jjj\Cookies [2012/04/12 16:21:28 | 000,000,000 | --SD | C] -- C:\Users\jjj\AppData\Roaming\Microsoft [2012/04/12 16:21:28 | 000,000,000 | R--D | C] -- C:\Users\jjj\Videos [2012/04/12 16:21:28 | 000,000,000 | R--D | C] -- C:\Users\jjj\Saved Games [2012/04/12 16:21:28 | 000,000,000 | R--D | C] -- C:\Users\jjj\Pictures [2012/04/12 16:21:28 | 000,000,000 | R--D | C] -- C:\Users\jjj\Music [2012/04/12 16:21:28 | 000,000,000 | R--D | C] -- C:\Users\jjj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance [2012/04/12 16:21:28 | 000,000,000 | R--D | C] -- C:\Users\jjj\Links [2012/04/12 16:21:28 | 000,000,000 | R--D | C] -- C:\Users\jjj\Favorites [2012/04/12 16:21:28 | 000,000,000 | R--D | C] -- C:\Users\jjj\Downloads [2012/04/12 16:21:28 | 000,000,000 | R--D | C] -- C:\Users\jjj\Documents [2012/04/12 16:21:28 | 000,000,000 | R--D | C] -- C:\Users\jjj\Desktop [2012/04/12 16:21:28 | 000,000,000 | R--D | C] -- C:\Users\jjj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories [2012/04/12 16:21:28 | 000,000,000 | -H-D | C] -- C:\Users\jjj\AppData [2012/04/12 16:21:28 | 000,000,000 | ---D | C] -- C:\Users\jjj\AppData\Local\Temp [2012/04/12 16:21:28 | 000,000,000 | ---D | C] -- C:\Users\jjj\AppData\Local\Microsoft Help [2012/04/12 16:21:28 | 000,000,000 | ---D | C] -- C:\Users\jjj\AppData\Local\Microsoft [2012/04/12 16:21:28 | 000,000,000 | ---D | C] -- C:\Users\jjj\AppData\Roaming\Media Center Programs [2012/04/12 16:21:28 | 000,000,000 | ---D | C] -- C:\Users\jjj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam [2012/04/12 16:21:28 | 000,000,000 | ---D | C] -- C:\Users\jjj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite [2012/04/11 15:52:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RocketDock [6 C:\windows\System32\*.tmp files -> C:\windows\System32\*.tmp -> ] [1 C:\windows\*.tmp files -> C:\windows\*.tmp -> ] [1 C:\*.tmp files -> C:\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012/04/20 19:18:44 | 000,014,736 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012/04/20 19:18:44 | 000,014,736 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012/04/20 19:15:59 | 000,707,522 | ---- | M] () -- C:\windows\System32\perfh015.dat [2012/04/20 19:15:59 | 000,624,776 | ---- | M] () -- C:\windows\System32\perfh009.dat [2012/04/20 19:15:59 | 000,140,504 | ---- | M] () -- C:\windows\System32\perfc015.dat [2012/04/20 19:15:59 | 000,110,414 | ---- | M] () -- C:\windows\System32\perfc009.dat [2012/04/20 19:08:14 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat [2012/04/20 19:08:09 | 2411,679,744 | -HS- | M] () -- C:\hiberfil.sys [2012/04/20 15:08:19 | 000,001,954 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk [2012/04/20 15:08:15 | 000,002,577 | ---- | M] () -- C:\windows\System32\config.nt [2012/04/20 13:56:36 | 000,006,576 | ---- | M] () -- C:\bootsqm.dat [2012/04/20 13:32:15 | 000,000,840 | ---- | M] () -- C:\Users\Public\Desktop\AxessManager.lnk [2012/04/12 16:23:27 | 000,001,126 | ---- | M] () -- C:\Users\jjj\Desktop\CyberLink DVD Suite.lnk [2012/04/12 16:23:26 | 000,001,075 | ---- | M] () -- C:\Users\jjj\Desktop\CyberLink YouCam.lnk [6 C:\windows\System32\*.tmp files -> C:\windows\System32\*.tmp -> ] [1 C:\windows\*.tmp files -> C:\windows\*.tmp -> ] [1 C:\*.tmp files -> C:\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012/04/20 15:08:19 | 000,001,954 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk [2012/04/20 13:56:36 | 000,006,576 | ---- | C] () -- C:\bootsqm.dat [2012/04/20 13:32:15 | 000,000,840 | ---- | C] () -- C:\Users\Public\Desktop\AxessManager.lnk [2012/04/12 16:22:52 | 000,001,381 | ---- | C] () -- C:\Users\jjj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk [2012/04/12 16:21:28 | 000,001,126 | ---- | C] () -- C:\Users\jjj\Desktop\CyberLink DVD Suite.lnk [2012/04/12 16:21:28 | 000,001,075 | ---- | C] () -- C:\Users\jjj\Desktop\CyberLink YouCam.lnk [2011/05/26 16:01:17 | 000,057,344 | ---- | C] () -- C:\windows\System32\Hidhlp.dll [2011/05/26 16:01:17 | 000,049,152 | ---- | C] () -- C:\windows\System32\iFT2491.dll [2011/05/07 15:52:55 | 000,000,038 | ---- | C] () -- C:\windows\avisplitter.ini [2011/05/07 15:52:53 | 000,183,808 | ---- | C] () -- C:\windows\System32\xvidvfw.dll [2011/05/07 15:52:53 | 000,080,896 | ---- | C] () -- C:\windows\System32\ff_vfw.dll [2011/05/07 13:03:23 | 002,601,752 | ---- | C] () -- C:\windows\System32\pbsvc_moh.exe [2011/04/17 10:30:01 | 000,001,349 | ---- | C] () -- C:\windows\disney.ini [2011/04/09 18:55:28 | 000,179,261 | ---- | C] () -- C:\windows\System32\xlive.dll.cat [2011/02/27 19:44:24 | 000,165,376 | ---- | C] () -- C:\windows\System32\unrar.dll [2011/02/27 11:55:41 | 000,000,812 | ---- | C] () -- C:\windows\System32\drivers\scdskr01.dat [2011/02/27 11:55:41 | 000,000,541 | ---- | C] () -- C:\windows\System32\drivers\scdhkr01.dat [2011/02/27 11:55:41 | 000,000,500 | ---- | C] () -- C:\windows\System32\drivers\RSTable.dat [2011/02/27 11:55:41 | 000,000,036 | ---- | C] () -- C:\windows\System32\drivers\scdstr01.dat [2011/02/09 20:17:15 | 000,000,376 | ---- | C] () -- C:\windows\ODBC.INI [2011/01/12 12:47:38 | 000,139,832 | ---- | C] () -- C:\windows\System32\drivers\PnkBstrK.sys [2011/01/12 12:47:23 | 000,218,496 | ---- | C] () -- C:\windows\System32\PnkBstrB.exe [2011/01/12 12:47:19 | 000,794,408 | ---- | C] () -- C:\windows\System32\pbsvc.exe [2011/01/12 12:47:19 | 000,075,064 | ---- | C] () -- C:\windows\System32\PnkBstrA.exe [2010/12/10 18:05:09 | 000,110,592 | ---- | C] () -- C:\windows\System32\FsUsbExDevice.Dll [2010/12/10 18:05:09 | 000,036,640 | ---- | C] () -- C:\windows\System32\FsUsbExDisk.Sys [2010/06/12 17:32:22 | 000,104,448 | ---- | C] () -- C:\windows\setwall.exe [2010/06/07 18:00:58 | 000,192,512 | ---- | C] () -- C:\windows\System32\srkey.exe [2010/06/05 18:36:51 | 000,644,608 | ---- | C] () -- C:\windows\System32\xvidcore.dll [2010/06/05 18:36:51 | 000,258,048 | ---- | C] () -- C:\windows\System32\libFLAC.dll [2010/05/30 18:15:27 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010/05/25 16:12:57 | 000,000,675 | ---- | C] () -- C:\windows\HAMMER.INI [2010/05/22 15:51:52 | 000,000,053 | ---- | C] () -- C:\windows\WININIT.INI [2010/05/22 15:51:49 | 000,000,000 | ---- | C] () -- C:\windows\SETUP32.INI [2010/05/22 14:06:57 | 000,004,096 | ---- | C] () -- C:\windows\d3dx.dat [2010/05/22 13:42:23 | 000,000,002 | ---- | C] () -- C:\windows\HotFixList.ini [2010/05/22 13:34:11 | 000,131,368 | ---- | C] () -- C:\ProgramData\FullRemove.exe [color=#E56717]========== LOP Check ==========[/color] [2011/03/28 14:24:41 | 000,000,000 | -HSD | M] -- C:\Users\Filip\AppData\Roaming\.# [2010/11/30 10:36:55 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\1by1 [2010/07/02 13:35:34 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Alawar [2011/02/10 21:13:17 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Ascaron Entertainment [2010/07/01 09:00:13 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Awem [2011/11/04 15:29:33 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Babylon [2010/07/02 14:30:29 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\BeachPartyCraze [2011/10/31 19:07:59 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\BitTorrent [2011/05/07 11:52:56 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\BlackBean [2011/05/07 12:12:11 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Braid [2010/06/06 17:10:44 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\CasualForge [2011/03/16 17:32:29 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Chromeflower [2011/03/16 18:09:39 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\CrystalApp [2011/03/16 17:32:11 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\CrystalSpace [2011/02/03 18:21:55 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\DAEMON Tools [2011/04/11 15:38:15 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\DAEMON Tools Lite [2011/04/17 11:18:04 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Disney Interactive Studios [2012/02/14 16:56:55 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\e-pity [2010/06/09 15:54:35 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\EnchantedCavern [2011/04/12 17:05:55 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\FarmingSimulator2008 [2010/07/02 18:44:32 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\FashionCrazePol [2011/07/06 18:52:50 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\FOG Downloader [2010/06/09 15:48:59 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Friday's games [2011/02/03 19:40:56 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Gadu-Gadu 10 [2010/07/02 09:00:53 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Gaijin Ent [2010/05/24 18:27:52 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\GameConsole [2010/06/06 14:46:07 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Games [2012/02/16 19:11:23 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\go [2011/03/15 18:55:55 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\InterTrust [2012/02/16 19:11:12 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\ipla [2011/02/02 17:50:01 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\kikin [2010/06/09 14:08:31 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Land Of Runes [2010/07/20 15:27:03 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Leadertech [2010/07/02 12:21:52 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Meridian93 [2010/12/11 20:21:21 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\ML [2011/04/12 17:23:49 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Mount&Blade [2010/08/02 12:05:40 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Nowe Gadu-Gadu [2010/05/30 15:55:54 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\OpenFM [2010/10/08 11:18:10 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Opera [2011/03/20 09:25:39 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Participatory Culture Foundation [2011/04/01 14:12:24 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\PC Suite [2011/03/26 08:18:36 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\PCF-VLC [2010/05/22 14:39:17 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\PlayFirst [2011/05/07 16:27:31 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\ProtectDISC [2011/01/12 14:51:18 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\RDRM [2011/10/29 17:21:51 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Rovio [2011/04/01 14:06:37 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Samsung [2010/07/02 07:34:52 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Shape games [2011/05/17 19:11:06 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Template [2011/02/02 17:40:29 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Thunderbird [2011/12/26 19:20:31 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\uTorrent [2010/07/01 17:28:13 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\V-Games [2011/01/27 15:52:36 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\Windows Live Writer [2010/07/01 14:42:07 | 000,000,000 | ---D | M] -- C:\Users\Filip\AppData\Roaming\World-Loom [2012/02/20 08:15:43 | 000,000,000 | -HSD | M] -- C:\Users\FilipXD\AppData\Roaming\.# [2012/02/22 08:55:14 | 000,000,000 | ---D | M] -- C:\Users\FilipXD\AppData\Roaming\DAEMON Tools Lite [2012/02/20 08:11:16 | 000,000,000 | ---D | M] -- C:\Users\FilipXD\AppData\Roaming\GameConsole [2012/04/20 17:52:21 | 000,000,000 | ---D | M] -- C:\Users\jjj\AppData\Roaming\TuneUp Software [2011/10/01 08:10:37 | 000,032,608 | ---- | M] () -- C:\windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 151 bytes -> C:\ProgramData\Temp:ABE89FFE @Alternate Data Stream - 145 bytes -> C:\ProgramData\Temp:4CF61E54 @Alternate Data Stream - 130 bytes -> C:\ProgramData\Temp:A42A9F39 @Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:E1F04E8D < End of report >