OTL logfile created on: 5/9/2012 11:24:16 PM - Run 1
OTL by OldTimer - Version 3.2.42.3     Folder = E:\Download
 Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Stany Zjednoczone | Language: ENU | Date Format: M/d/yyyy
 
3.00 Gb Total Physical Memory | 1.25 Gb Available Physical Memory | 41.55% Memory free
3.50 Gb Paging File | 1.50 Gb Available in Paging File | 43.01% Paging File free
Paging file location(s): c:\pagefile.sys 512 512 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 30.03 Gb Total Space | 5.55 Gb Free Space | 18.47% Space Free | Partition Type: NTFS
Drive D: | 25.05 Gb Total Space | 5.34 Gb Free Space | 21.31% Space Free | Partition Type: NTFS
Drive E: | 233.01 Gb Total Space | 22.23 Gb Free Space | 9.54% Space Free | Partition Type: NTFS
 
Computer Name: TYMEKHP | User Name: Tymek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012/05/09 23:06:50 | 000,595,456 | ---- | M] (OldTimer Tools) -- E:\Download\OTL.exe
PRC - [2012/05/08 17:22:11 | 000,400,344 | ---- | M] (Mozilla Messaging) -- D:\Programy\Mozilla Thunderbird\thunderbird.exe
PRC - [2012/05/04 10:12:58 | 010,591,232 | ---- | M] (Creative Team S.A.) -- D:\Programy\WapSter AQQ\AQQ.exe
PRC - [2012/04/23 22:51:12 | 006,607,532 | ---- | M] () -- D:\Programy\Dtella@MS\dtella.exe
PRC - [2012/04/17 17:19:40 | 003,671,872 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe
PRC - [2012/02/28 18:38:56 | 001,987,976 | ---- | M] (LogMeIn Inc.) -- D:\Programy\Hamachi\hamachi-2-ui.exe
PRC - [2012/02/28 18:38:52 | 001,373,576 | ---- | M] (LogMeIn Inc.) -- D:\Programy\Hamachi\hamachi-2.exe
PRC - [2012/02/15 01:03:14 | 024,246,216 | ---- | M] (Dropbox, Inc.) -- C:\Users\Tymek\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2012/01/24 18:24:26 | 004,200,800 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgui.exe
PRC - [2012/01/24 18:24:26 | 002,416,480 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgtray.exe
PRC - [2011/12/20 18:12:18 | 000,068,896 | ---- | M] (Nalpeiron Ltd.) -- C:\Windows\System32\NLSSRV32.EXE
PRC - [2011/11/28 02:19:04 | 001,229,664 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgnsx.exe
PRC - [2011/10/15 10:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011/10/15 10:53:00 | 001,328,960 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
PRC - [2011/10/14 14:49:38 | 000,745,832 | ---- | M] (Tunngle.net GmbH) -- C:\Program Files\Tunngle\TnglCtrl.exe
PRC - [2011/10/12 07:25:22 | 004,433,248 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
PRC - [2011/10/10 07:23:34 | 000,973,664 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgemcx.exe
PRC - [2011/09/08 21:53:26 | 000,743,264 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgrsx.exe
PRC - [2011/08/15 07:21:40 | 000,337,760 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgcsrvx.exe
PRC - [2011/08/02 07:09:08 | 000,192,776 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe
PRC - [2011/06/06 13:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010/11/20 14:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2010/07/12 08:52:50 | 000,548,864 | ---- | M] () -- D:\Programy\Greenshot\Greenshot.exe
PRC - [2010/05/25 20:53:46 | 002,139,400 | ---- | M] () -- D:\Programy\Acronis Disk Director 11\OSS\reinstall_svc.exe
PRC - [2010/03/23 14:53:06 | 000,495,708 | ---- | M] (IDT, Inc.) -- C:\Program Files\IDT\WDM\sttray.exe
PRC - [2010/03/23 14:53:06 | 000,229,458 | ---- | M] (IDT, Inc.) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\stacsv.exe
PRC - [2009/12/01 14:37:48 | 000,322,624 | ---- | M] (DigitalPersona, Inc.) -- D:\Programy\DigitalPersona\Bin\DpHostW.exe
PRC - [2009/12/01 14:37:46 | 000,842,816 | ---- | M] (DigitalPersona, Inc.) -- D:\Programy\DigitalPersona\Bin\DpAgent.exe
PRC - [2009/07/12 22:04:26 | 001,656,112 | ---- | M] (Validity Sensors, Inc.) -- C:\Windows\System32\vcsFPService.exe
PRC - [2009/04/08 02:40:52 | 001,377,536 | ---- | M] (O&O Software GmbH) -- C:\Windows\System32\oodag.exe
PRC - [2009/04/08 02:39:50 | 002,553,088 | ---- | M] (O&O Software GmbH) -- C:\Windows\System32\oodtray.exe
PRC - [2009/03/02 18:43:08 | 000,081,920 | ---- | M] (Andrea Electronics Corporation) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\AEstSrv.exe
PRC - [2008/11/18 07:09:42 | 000,599,344 | ---- | M] (Validity Sensors, Inc.) -- C:\Windows\System32\vfsFPService.exe
PRC - [2008/04/23 08:46:12 | 000,081,920 | ---- | M] (FirebirdSQL Project) -- C:\Program Files\Firebird\Firebird_2_0\bin\fbguard.exe
PRC - [2008/04/23 08:46:08 | 002,015,232 | ---- | M] (FirebirdSQL Project) -- C:\Program Files\Firebird\Firebird_2_0\bin\fbserver.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012/05/09 16:30:52 | 012,433,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\90555968565afd59bce4b0974e9903bd\System.Windows.Forms.ni.dll
MOD - [2012/05/09 16:30:44 | 001,590,784 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\69f6e582cb79f107c61308b468c1a215\System.Drawing.ni.dll
MOD - [2012/05/09 16:30:22 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll
MOD - [2012/05/09 16:30:18 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll
MOD - [2012/05/09 16:30:17 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll
MOD - [2012/05/09 16:30:06 | 011,492,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
MOD - [2012/05/08 17:22:11 | 001,952,728 | ---- | M] () -- D:\Programy\Mozilla Thunderbird\mozjs.dll
MOD - [2012/05/08 17:22:11 | 000,162,776 | ---- | M] () -- D:\Programy\Mozilla Thunderbird\nsldap32v60.dll
MOD - [2012/05/08 17:22:11 | 000,021,976 | ---- | M] () -- D:\Programy\Mozilla Thunderbird\nsldappr32v60.dll
MOD - [2012/05/04 09:24:38 | 000,971,776 | ---- | M] () -- D:\Programy\WapSter AQQ\System\Shared\Plugins\SMS.dll
MOD - [2012/05/04 09:16:48 | 000,310,272 | ---- | M] () -- D:\Programy\WapSter AQQ\System\Shared\Plugins\Contact.dll
MOD - [2012/04/30 11:26:10 | 001,178,624 | ---- | M] () -- D:\Programy\WapSter AQQ\System\Shared\Plugins\GGNet.dll
MOD - [2012/04/28 04:07:01 | 000,444,400 | ---- | M] () -- C:\Users\Tymek\AppData\Local\Google\Chrome\Application\18.0.1025.168\ppGoogleNaClPluginChrome.dll
MOD - [2012/04/28 04:06:59 | 003,915,248 | ---- | M] () -- C:\Users\Tymek\AppData\Local\Google\Chrome\Application\18.0.1025.168\pdf.dll
MOD - [2012/04/28 04:05:34 | 000,122,880 | ---- | M] () -- C:\Users\Tymek\AppData\Local\Google\Chrome\Application\18.0.1025.168\avutil-51.dll
MOD - [2012/04/28 04:05:33 | 000,220,672 | ---- | M] () -- C:\Users\Tymek\AppData\Local\Google\Chrome\Application\18.0.1025.168\avformat-53.dll
MOD - [2012/04/28 04:05:32 | 001,747,456 | ---- | M] () -- C:\Users\Tymek\AppData\Local\Google\Chrome\Application\18.0.1025.168\avcodec-53.dll
MOD - [2012/04/23 22:51:12 | 006,607,532 | ---- | M] () -- D:\Programy\Dtella@MS\dtella.exe
MOD - [2011/10/27 13:13:16 | 000,043,520 | ---- | M] () -- C:\Windows\System32\CmdLineExt03.dll
MOD - [2011/03/17 01:11:16 | 004,297,568 | ---- | M] () -- C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2011/01/15 21:59:24 | 000,338,944 | ---- | M] () -- C:\Users\Tymek\WapSter\AQQ Folder\Profiles\tymek_jedi\Plugins\Archeolog.dll
MOD - [2010/07/12 08:52:50 | 000,548,864 | ---- | M] () -- D:\Programy\Greenshot\Greenshot.exe
MOD - [2010/07/12 08:52:48 | 000,028,672 | ---- | M] () -- D:\Programy\Greenshot\GreenshotPlugin.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Auto | Stopped] -- C:\Program Files\1268998497\Tymek1268998497L.exe -- (.1268998497)
SRV - [2012/02/28 18:38:52 | 001,373,576 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- D:\Programy\Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012/01/18 13:38:28 | 000,155,320 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion)
SRV - [2011/12/20 18:12:18 | 000,068,896 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\Windows\System32\NLSSRV32.EXE -- (nlsX86cc)
SRV - [2011/11/02 22:22:13 | 001,044,816 | ---- | M] (Flexera Software, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2011/10/15 10:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011/10/14 14:49:38 | 000,745,832 | ---- | M] (Tunngle.net GmbH) [Auto | Running] -- C:\Program Files\Tunngle\TnglCtrl.exe -- (TunngleService)
SRV - [2011/10/12 07:25:22 | 004,433,248 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe -- (AVGIDSAgent)
SRV - [2011/08/02 07:09:08 | 000,192,776 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2012\avgwdsvc.exe -- (avgwd)
SRV - [2011/06/12 12:15:00 | 031,125,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- D:\Programy\Microsoft Office 2010\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2011/06/06 13:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2010/05/25 20:53:46 | 002,139,400 | ---- | M] () [Auto | Running] -- D:\Programy\Acronis Disk Director 11\OSS\reinstall_svc.exe -- (OS Selector)
SRV - [2010/05/18 12:22:18 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2010/03/23 14:53:06 | 000,229,458 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\stacsv.exe -- (STacSV)
SRV - [2009/12/01 14:37:48 | 000,322,624 | ---- | M] (DigitalPersona, Inc.) [Auto | Running] -- D:\Programy\DigitalPersona\Bin\DpHostW.exe -- (DpHost)
SRV - [2009/07/14 03:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc)
SRV - [2009/07/14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/07/14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009/07/12 22:04:26 | 001,656,112 | ---- | M] (Validity Sensors, Inc.) [Auto | Running] -- C:\Windows\System32\vcsFPService.exe -- (vcsFPService)
SRV - [2009/04/08 02:40:52 | 001,377,536 | ---- | M] (O&O Software GmbH) [Auto | Running] -- C:\Windows\System32\oodag.exe -- (O&O Defrag)
SRV - [2009/03/02 18:43:08 | 000,081,920 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\AEstSrv.exe -- (AESTFilters)
SRV - [2008/11/18 07:09:42 | 000,599,344 | ---- | M] (Validity Sensors, Inc.) [Auto | Running] -- C:\Windows\System32\vfsFPService.exe -- (vfsFPService)
SRV - [2008/04/23 08:46:12 | 000,081,920 | ---- | M] (FirebirdSQL Project) [Auto | Running] -- C:\Program Files\Firebird\Firebird_2_0\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance)
SRV - [2008/04/23 08:46:08 | 002,015,232 | ---- | M] (FirebirdSQL Project) [On_Demand | Running] -- C:\Program Files\Firebird\Firebird_2_0\bin\fbserver.exe -- (FirebirdServerDefaultInstance)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Unknown] -- C:\Users\Tymek\AppData\Local\Temp\uwtdipow.sys -- (uwtdipow)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\UIUSYS.SYS -- (UIUSys)
DRV - File not found [Kernel | On_Demand | Unknown] --  -- (acuhjatp)
DRV - [2012/05/08 02:25:30 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2012/01/02 23:37:29 | 000,428,088 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2011/11/01 01:56:37 | 000,083,872 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt)
DRV - [2011/11/01 01:56:35 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2011/10/15 10:53:00 | 010,327,360 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2011/10/07 07:23:48 | 000,230,608 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2011/10/04 07:21:28 | 000,016,720 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AVGIDSShim.sys -- (AVGIDSShim)
DRV - [2011/09/13 07:30:10 | 000,032,592 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\System32\drivers\avgrkx86.sys -- (Avgrkx86)
DRV - [2011/08/08 07:08:58 | 000,040,016 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\System32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2011/07/11 02:14:38 | 000,295,248 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2011/07/11 02:14:14 | 000,024,272 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AVGIDSFilter.sys -- (AVGIDSFilter)
DRV - [2011/07/11 02:14:12 | 000,134,736 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AVGIDSDriver.sys -- (AVGIDSDriver)
DRV - [2011/07/11 02:14:12 | 000,023,120 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\AVGIDSEH.sys -- (AVGIDSEH)
DRV - [2011/07/08 01:21:28 | 000,139,880 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2011/05/13 18:57:42 | 000,025,656 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\hpdskflt.sys -- (hpdskflt)
DRV - [2011/05/13 18:57:20 | 000,035,896 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Accelerometer.sys -- (Accelerometer)
DRV - [2011/05/12 20:29:20 | 000,132,608 | ---- | M] () [Kernel | Auto | Running] -- C:\HaspEmulPPE.W2K\HASPp\Haspnt.sys -- (Haspnt)
DRV - [2011/02/14 18:03:52 | 000,170,080 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\snapman.sys -- (snapman)
DRV - [2010/11/20 14:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010/11/20 14:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010/11/20 14:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010/11/20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010/11/20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\winusb.sys -- (WinUSB)
DRV - [2010/11/20 11:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010/11/20 11:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010/04/01 17:30:34 | 000,032,000 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\stppp.sys -- (stppp)
DRV - [2010/04/01 17:30:34 | 000,030,464 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\st330.sys -- (ST330)
DRV - [2010/04/01 17:30:34 | 000,012,672 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\stbus.sys -- (STBUS)
DRV - [2010/03/23 14:53:06 | 000,423,424 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA)
DRV - [2010/03/12 18:22:18 | 000,081,920 | ---- | M] (Prolific Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ser2pl.sys -- (Ser2pl)
DRV - [2010/03/05 02:01:10 | 000,571,264 | ---- | M] (Line 6) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\L6TPortGX.sys -- (L6TPortGX)
DRV - [2010/02/03 15:56:56 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2010/01/13 16:36:40 | 006,755,840 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw5s32.sys -- (NETw5s32) Sterownik karty Intel(R)
DRV - [2010/01/10 00:16:04 | 000,863,232 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\XXLHASP.sys -- (XXLHASP)
DRV - [2009/09/23 10:25:18 | 000,120,432 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\jmcr.sys -- (JMCR)
DRV - [2009/09/16 08:02:40 | 000,027,136 | ---- | M] (Tunngle.net) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tap0901t.sys -- (tap0901t) TAP-Win32 Adapter V9 (Tunngle)
DRV - [2009/07/28 01:59:30 | 000,017,320 | ---- | M] (JMicron ) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\johci.sys -- (johci)
DRV - [2009/07/14 01:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp)
DRV - [2009/02/23 12:25:52 | 003,715,072 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NETw5v32.sys -- (netw5v32) Intel(R)
DRV - [2008/09/04 18:47:00 | 000,054,784 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\enecir.sys -- (enecir)
DRV - [2008/05/02 11:58:12 | 000,017,536 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2008/01/09 11:28:34 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\seehcri.sys -- (seehcri)
DRV - [2007/06/18 18:12:04 | 000,016,768 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\HpqKbFiltr.sys -- (HpqKbFiltr)
DRV - [2006/11/22 11:01:48 | 000,693,760 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\hardlock.sys -- (Hardlock)
DRV - [2001/06/04 06:00:00 | 000,014,112 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\PS2.sys -- (Ps2)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage
 
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage
 
IE - HKU\S-1-5-21-2253585001-3510287530-1081708119-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKU\S-1-5-21-2253585001-3510287530-1081708119-1000\..\SearchScopes,DefaultScope = ${searchCLSID}
IE - HKU\S-1-5-21-2253585001-3510287530-1081708119-1000\..\SearchScopes\${searchCLSID}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKU\S-1-5-21-2253585001-3510287530-1081708119-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2253585001-3510287530-1081708119-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-21-2253585001-3510287530-1081708119-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage
IE - HKU\S-1-5-21-2253585001-3510287530-1081708119-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2253585001-3510287530-1081708119-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2253585001-3510287530-1081708119-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.0: C:\Program Files\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll File not found
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: D:\Programy\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: D:\Programy\Microsoft Office 2010\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: D:\Programy\Microsoft Office 2010\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: D:\Programy\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: D:\Programy\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@soe.sony.com/installer,version=1.0.3:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Tymek\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Tymek\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\otis@digitalpersona.com: D:\Programy\DigitalPersona\Bin\FirefoxExt\ [2010/03/20 12:41:27 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG2012\Firefox4\ [2012/02/01 11:25:29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.2pre\extensions\\Plugins: D:\Programy\Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: D:\Programy\Firefox 7\components [2011/11/17 00:56:44 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Plugins: D:\Programy\Firefox 7\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Components: D:\Programy\Mozilla Thunderbird\components [2011/08/19 00:30:13 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Plugins: D:\Programy\Mozilla Thunderbird\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\avgthb@avg.com: C:\Program Files\AVG\AVG2012\Thunderbird\ [2011/12/28 23:58:06 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\otis@digitalpersona.com: D:\Programy\DigitalPersona\Bin\firefoxext [2010/03/20 12:41:27 | 000,000,000 | ---D | M]
 
[2011/05/29 12:39:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tymek\AppData\Roaming\mozilla\Extensions
[2011/05/29 12:39:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tymek\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2012/01/02 21:29:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Tymek\AppData\Roaming\mozilla\Firefox\Profiles\4uwquzg9.default\extensions
[2012/01/02 21:29:43 | 000,644,152 | ---- | M] () (No name found) -- C:\USERS\TYMEK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4UWQUZG9.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2011/10/30 22:25:47 | 000,434,392 | ---- | M] () (No name found) -- C:\USERS\TYMEK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4UWQUZG9.DEFAULT\EXTENSIONS\{D4DD63FA-01E4-46A7-B6B1-EDAB7D6AD389}.XPI
[2011/11/01 01:33:41 | 000,688,571 | ---- | M] () (No name found) -- C:\USERS\TYMEK\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4UWQUZG9.DEFAULT\EXTENSIONS\{EF4E370E-D9F0-4E00-B93E-A4F274CFDD5A}.XPI
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms},
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Tymek\AppData\Local\Google\Chrome\Application\18.0.1025.168\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Tymek\AppData\Local\Google\Chrome\Application\18.0.1025.168\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Tymek\AppData\Local\Google\Chrome\Application\18.0.1025.168\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Tymek\AppData\Local\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: AVG Internet Security (Enabled) = C:\Users\Tymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.1901_0\plugins/avgnpss.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit)  (Enabled) = C:\Users\Tymek\AppData\Local\Google\Chrome\Application\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Users\Tymek\AppData\Local\Google\Chrome\Application\plugins\nprpjplug.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = D:\Programy\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = D:\Programy\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = D:\Programy\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = D:\Programy\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = D:\Programy\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = D:\Programy\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = D:\Programy\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = D:\Programy\Microsoft Office 2010\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = D:\Programy\Microsoft Office 2010\Office14\NPSPWRAP.DLL
CHR - plugin: Picasa (Enabled) = D:\Programy\Picasa3\npPicasa3.dll
CHR - Extension: YouTube = C:\Users\Tymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Go Extensions = C:\Users\Tymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdlogpoaigpjcfjfllhjdaniobkjnkmg\0.1\
CHR - Extension: Adblock Plus (Beta) = C:\Users\Tymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.2_0\
CHR - Extension: Szukaj w Google = C:\Users\Tymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Autocomplete = on = C:\Users\Tymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecpgkdflcnofdbbkiggklcfmgbnbabhh\1.0\
CHR - Extension: FlashBlock = C:\Users\Tymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gofhjkjmkpinhpoiabjplobcaignabnl\0.9.31_0\
CHR - Extension: Bookmarks = C:\Users\Tymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihaibgdemjcpnllmndlpdkfiggadlcgi\0.9_0\
CHR - Extension: Downloads = C:\Users\Tymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfchnphgogjhineanplmfkofljiagjfb\1\
CHR - Extension: AVG Safe Search = C:\Users\Tymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.1901_0\
CHR - Extension: Speed Dial 2 = C:\Users\Tymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpfpebmajhhopeonhlcgidhclcccjcik\1.6.0.8_0\
CHR - Extension: Gmail = C:\Users\Tymek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2010/05/24 09:00:24 | 000,001,099 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1		static3.cdn.ubi.com
O1 - Hosts: 127.0.0.1		ubisoft-orbit.s3.amazonaws.com
O1 - Hosts: 127.0.0.1		onlineconfigservice.ubi.com
O1 - Hosts: 127.0.0.1		orbitservice.ubi.com
O1 - Hosts: 127.0.0.1		ubisoft-orbit-savegames.s3.amazonaws.com
O2 - BHO: (DigitalPersona Personal Extension) - {395610AE-C624-4f58-B89E-23733EA00F9A} - D:\Programy\DigitalPersona\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Programy\Microsoft Office 2010\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Programy\Microsoft Office 2010\Office14\URLREDIR.DLL (Microsoft Corporation)
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [BCSSync] D:\Programy\Microsoft Office 2010\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [DpAgent] D:\Programy\DigitalPersona\Bin\DpAgent.exe (DigitalPersona, Inc.)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] D:\Programy\Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [OODefragTray] C:\Windows\System32\oodtray.exe (O&O Software GmbH)
O4 - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun File not found
O4 - HKU\S-1-5-20..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun File not found
O4 - HKU\S-1-5-21-2253585001-3510287530-1081708119-1000..\Run: [Greenshot] D:\Programy\Greenshot\Greenshot.exe ()
O4 - HKU\S-1-5-21-2253585001-3510287530-1081708119-1001..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun File not found
O4 - HKU\S-1-5-19..\RunOnce: []  File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: []  File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2253585001-3510287530-1081708119-1001..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Tymek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ArcGIS License Manager 10 CRACKED.lnk = C:\Cracked License Manager 10\start_lic_mgr_invisible.vbs ()
O4 - Startup: C:\Users\Tymek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Tymek\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\Windows\system32\install\explorer.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2253585001-3510287530-1081708119-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2253585001-3510287530-1081708119-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2253585001-3510287530-1081708119-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0
O7 - HKU\S-1-5-21-2253585001-3510287530-1081708119-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\Windows\system32\install\explorer.exe (Microsoft Corporation)
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - D:\Programy\Microsoft Office 2010\Office14\EXCEL.EXE (Microsoft Corporation)
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-2253585001-3510287530-1081708119-1000\..Trusted Domains: line6.net ([]* in Trusted sites)
O15 - HKU\S-1-5-21-2253585001-3510287530-1081708119-1001\..Trusted Domains: line6.net ([]* in Trusted sites)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3BD0EA62-40E2-4F98-92AF-C98A7074FEB9}: DhcpNameServer = 7.254.254.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8A7F5CBB-AD21-4840-96CB-39919D8F38D9}: DhcpNameServer = 192.168.176.2 149.156.96.9
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C09E2B60-651E-44B7-AFC4-CAE88658AA77}: DhcpNameServer = 10.205.0.1 149.156.96.9
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C09E2B60-651E-44B7-AFC4-CAE88658AA77}: NameServer = 62.233.233.233,87.204.204.204
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - D:\Programy\Microsoft Office 2010\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{187accd3-a9e8-11df-af03-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{187accd3-a9e8-11df-af03-806e6f6e6963}\Shell\AutoRun\command - "" = I:\SetupLauncher.exe
O34 - HKLM BootExecute: (autocheck autochk /r \??\H:)
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (OODBS)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012/05/09 13:36:32 | 003,968,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2012/05/09 13:36:31 | 003,913,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2012/05/09 13:36:31 | 002,343,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2012/05/09 13:30:21 | 001,077,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2012/05/09 00:28:15 | 000,000,000 | ---D | C] -- C:\Users\Tymek\AppData\Local\SniperV2
[2012/05/08 23:53:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rebellion
[2012/05/08 17:22:34 | 000,000,000 | ---D | C] -- C:\Users\Tymek\Desktop\TEMAT1_29
[2012/05/08 02:44:08 | 000,000,000 | ---D | C] -- C:\Users\Tymek\AppData\Local\Risen2
[2012/05/08 02:41:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deep Silver
[2012/05/08 02:25:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
[2012/05/08 02:25:30 | 000,242,240 | ---- | C] (DT Soft Ltd) -- C:\Windows\System32\drivers\dtsoftbus01.sys
[2012/05/08 02:25:16 | 000,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Lite
[2012/05/06 09:43:25 | 000,000,000 | ---D | C] -- C:\Users\Tymek\Desktop\ewopis dokumenty
[2012/04/26 02:11:24 | 000,000,000 | ---D | C] -- C:\Program Files\Ad-Remover
[2012/04/26 00:50:50 | 000,393,216 | ---- | C] (FirebirdSQL Project) -- C:\Windows\System32\GDS32.DLL
[2012/04/26 00:50:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firebird 2.0
[2012/04/26 00:37:57 | 000,000,000 | ---D | C] -- C:\Users\Tymek\Desktop\Ewopis_baza
[2012/04/23 18:38:01 | 000,000,000 | ---D | C] -- C:\Users\Tymek\AppData\Local\Risen
[2012/04/19 16:46:28 | 000,000,000 | ---D | C] -- C:\Users\Tymek\Documents\Witcher 2
[2012/04/19 16:46:28 | 000,000,000 | ---D | C] -- C:\Users\Tymek\AppData\Local\The Witcher 2
[2012/04/19 03:50:18 | 000,000,000 | ---D | C] -- C:\Users\Tymek\Desktop\temat 1 GI do druku
[2012/04/17 20:55:22 | 000,000,000 | ---D | C] -- C:\ProgramData\firebird
[2012/04/17 20:54:21 | 000,000,000 | ---D | C] -- C:\Program Files\Firebird
[2012/04/17 20:53:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EWOPIS
[2012/04/17 20:53:36 | 000,000,000 | ---D | C] -- C:\Program Files\Geobid
[2012/04/16 20:51:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
[2012/04/16 20:51:36 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Sync Framework
[2012/04/12 22:23:07 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2012/04/12 22:23:05 | 001,799,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2012/04/12 22:23:05 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2012/04/12 22:23:04 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2012/04/12 22:23:04 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2012/04/12 22:23:03 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2010/05/29 11:07:57 | 000,148,736 | ---- | C] (Avanquest Software) -- C:\ProgramData\hpe9185.dll
[5 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
File not found -- C:\Windows\System32\drivers\mshdmd.sys.
[2055/09/19 08:29:11 | 000,002,012 | ---- | M] () -- C:\Windows\System32\NAV_75_cltDynam.dat
[2012/05/09 22:58:26 | 000,001,034 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/05/09 22:58:02 | 000,000,908 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2253585001-3510287530-1081708119-1000UA.job
[2012/05/09 22:57:59 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/05/09 18:38:05 | 097,582,226 | ---- | M] () -- C:\Windows\System32\drivers\AVG\incavi.avm
[2012/05/09 18:37:33 | 000,317,019 | ---- | M] () -- C:\Windows\System32\drivers\AVG\iavichjg.avm
[2012/05/09 17:55:00 | 000,000,856 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2253585001-3510287530-1081708119-1000Core.job
[2012/05/09 17:29:00 | 000,001,030 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/05/09 16:36:40 | 000,013,792 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/05/09 16:36:40 | 000,013,792 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/05/09 16:35:40 | 000,737,980 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2012/05/09 16:35:40 | 000,652,148 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012/05/09 16:35:40 | 000,154,636 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2012/05/09 16:35:40 | 000,121,080 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012/05/09 16:29:25 | 000,000,310 | -HS- | M] () -- C:\Windows\tasks\RWMVMECYUK.job
[2012/05/09 16:29:07 | 000,509,776 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012/05/09 16:28:11 | 001,953,810 | ---- | M] () -- C:\Windows\System32\oodbs.lor
[2012/05/09 16:24:02 | 000,000,000 | ---- | M] () -- C:\Windows\System32\Access.dat
[2012/05/09 11:30:45 | 000,342,042 | ---- | M] () -- C:\Users\Tymek\Desktop\mapa.jpg
[2012/05/08 02:25:30 | 000,242,240 | ---- | M] (DT Soft Ltd) -- C:\Windows\System32\drivers\dtsoftbus01.sys
[2012/04/26 02:11:26 | 000,001,850 | ---- | M] () -- C:\Users\Tymek\Desktop\AD-R.lnk
[2012/04/24 14:18:28 | 000,000,662 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Dtella.lnk
[2012/04/19 03:08:53 | 000,000,206 | ---- | M] () -- C:\Windows\EurekaLog.ini
[2012/04/17 20:58:08 | 001,343,488 | ---- | M] () -- C:\EWOPIS.FDB
[5 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
File not found -- C:\Windows\System32\drivers\mshdmd.sys.
[2012/05/09 16:28:51 | 000,509,776 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2012/05/09 11:30:51 | 000,342,042 | ---- | C] () -- C:\Users\Tymek\Desktop\mapa.jpg
[2012/04/26 02:11:26 | 000,001,850 | ---- | C] () -- C:\Users\Tymek\Desktop\AD-R.lnk
[2012/04/17 20:58:03 | 001,343,488 | ---- | C] () -- C:\EWOPIS.FDB
[2012/02/23 11:58:33 | 000,000,034 | ---- | C] () -- C:\Windows\DTLite.INI
[2012/02/22 15:00:33 | 000,000,092 | ---- | C] () -- C:\Windows\mp3wavcon.ini
[2012/02/22 14:56:13 | 000,000,005 | ---- | C] () -- C:\Windows\System32\SySmp3con.dat
[2012/02/22 14:56:02 | 000,237,568 | ---- | C] () -- C:\Windows\System32\lame_enc.dll
[2012/02/04 21:30:00 | 000,013,030 | ---- | C] () -- C:\Users\Tymek\AppData\Local\PDOXUSRS.NET
[2012/01/26 23:53:55 | 000,000,063 | ---- | C] () -- C:\Windows\wininit.ini
[2012/01/21 23:48:24 | 000,194,042 | ---- | C] () -- C:\Windows\Angry Birds Uninstaller.exe
[2011/12/18 00:53:36 | 000,000,000 | ---- | C] () -- C:\Windows\coder.ini
[2011/11/08 19:08:38 | 000,508,224 | ---- | C] () -- C:\Windows\System32\ICCProfiles.dll
[2011/11/01 01:43:01 | 000,083,872 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys
[2011/11/01 01:43:00 | 000,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys
[2011/10/28 00:36:07 | 000,000,000 | ---- | C] () -- C:\Windows\System32\Access.dat
[2011/10/26 12:56:27 | 000,043,520 | ---- | C] () -- C:\Windows\System32\CmdLineExt03.dll
[2011/10/13 01:42:36 | 000,000,128 | ---- | C] () -- C:\Windows\System32\wsdock.dll
[2011/09/30 10:42:51 | 000,138,056 | ---- | C] () -- C:\Users\Tymek\AppData\Roaming\PnkBstrK.sys
[2011/09/27 19:32:45 | 000,072,192 | ---- | C] () -- C:\Windows\unlite3.exe
[2011/09/27 15:59:42 | 000,000,040 | ---- | C] () -- C:\Windows\iltwain.ini
[2011/09/15 02:11:16 | 001,048,576 | ---- | C] () -- C:\Windows\System32\syndata.bin
[2011/08/23 15:54:26 | 000,000,001 | ---- | C] () -- C:\Windows\System32\SI.bin
[2011/08/05 08:37:50 | 000,000,383 | ---- | C] () -- C:\Windows\System32\haspdos.sys
[2011/06/23 23:34:12 | 000,007,605 | ---- | C] () -- C:\Users\Tymek\AppData\Local\Resmon.ResmonCfg
[2011/05/29 12:39:32 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2011/05/23 15:46:40 | 000,000,206 | ---- | C] () -- C:\Windows\EurekaLog.ini
[2011/05/21 13:03:24 | 000,000,171 | ---- | C] () -- C:\Windows\CrdEdit.INI
[2011/05/21 13:03:20 | 000,000,038 | ---- | C] () -- C:\Windows\DnaGsiConverter.INI
[2011/05/12 20:35:59 | 000,000,168 | ---- | C] () -- C:\Windows\geonet.ini
[2011/04/09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2011/04/05 00:29:57 | 000,225,280 | ---- | C] () -- C:\Windows\System32\SDL.dll
[2011/03/24 00:47:44 | 000,087,552 | ---- | C] () -- C:\Windows\System32\cpwmon2k.dll
[2011/02/23 23:15:30 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2011/02/22 22:27:14 | 000,114,688 | RHS- | C] () -- C:\Windows\System32\uk-UA5.dll
[2011/01/11 20:58:21 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2010/12/28 13:34:42 | 000,010,240 | ---- | C] () -- C:\Users\Tymek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/11/10 13:11:16 | 000,000,022 | -HS- | C] () -- C:\Users\Tymek\AppData\Roaming\Sys6925.Config Collection.sys
[2010/11/10 13:11:16 | 000,000,022 | -HS- | C] () -- C:\Windows\Sys3390 SettingsCollection.bin
[2010/11/10 12:58:38 | 000,090,112 | ---- | C] () -- C:\Users\Tymek\AppData\Roaming\chrtmp
[2010/11/06 19:43:04 | 000,138,520 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2010/11/06 19:42:59 | 000,234,536 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2010/11/06 19:41:39 | 000,075,136 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2010/06/10 20:10:09 | 000,000,522 | ---- | C] () -- C:\Windows\ACadGeod.ini
[2010/05/29 19:42:48 | 000,073,728 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2010/05/29 11:08:16 | 000,005,007 | ---- | C] () -- C:\ProgramData\mtbjfghn.xbe
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010/12/28 13:39:57 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\ACD Systems
[2011/11/01 01:59:42 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Atari
[2011/05/24 16:48:27 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Autodesk
[2011/10/30 12:01:39 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\AVG2012
[2010/12/30 20:22:48 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Babylon
[2011/10/28 19:33:34 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Bentley
[2010/03/19 19:07:57 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\BESTplayer
[2012/05/08 09:27:02 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\BitTorrent
[2011/05/07 22:48:12 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Bridge!
[2010/05/29 11:08:16 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Carambis
[2011/10/13 01:54:08 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Cream Software
[2012/03/30 14:42:22 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\CrystalIdea Software
[2012/05/08 23:42:47 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\DAEMON Tools Lite
[2011/10/30 02:30:38 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\DAEMON Tools Pro
[2012/02/22 14:20:10 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\DarknessII
[2011/07/10 21:22:00 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Day 1 Studios
[2010/05/29 19:17:58 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\DeviceDoctorSoftware
[2010/03/19 14:37:03 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\DigitalPersona
[2012/01/27 16:35:17 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Downloaded Installations
[2010/11/14 12:20:08 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\DriverCure
[2012/05/09 16:34:17 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Dropbox
[2012/01/03 19:58:30 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\ESRI
[2012/04/19 22:52:37 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\EurekaLog
[2012/05/09 13:48:34 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\foobar2000
[2011/12/09 01:13:30 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\GHISLER
[2011/12/18 23:35:09 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Greenshot
[2012/03/28 12:34:57 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\gtk-2.0
[2010/08/29 12:12:26 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\HDRsoft
[2010/03/19 13:44:28 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Hewlett Packard Company
[2010/12/12 00:21:58 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Hothead Games
[2011/10/25 17:34:33 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Legalis
[2012/01/24 01:24:29 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\LibreOffice
[2010/03/24 02:14:15 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Line 6
[2011/06/08 23:31:54 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Lionhead Studios
[2012/01/27 16:50:53 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Nitro PDF
[2010/05/29 00:04:27 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Opera
[2012/02/14 21:05:42 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Origin
[2010/03/24 02:14:16 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\PACE Anti-Piracy
[2010/11/14 12:20:06 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\ParetoLogic
[2011/03/17 02:43:19 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\PunkBuster
[2012/01/21 23:45:16 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Rovio
[2012/03/18 02:05:20 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Softland
[2010/06/08 21:58:43 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\SumatraPDF
[2011/05/29 12:39:31 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Thunderbird
[2010/04/11 22:18:15 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Tific
[2012/01/03 00:03:44 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Trine2
[2011/10/28 22:18:14 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Tunngle
[2010/03/23 00:39:41 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\Ubisoft
[2010/08/02 23:11:44 | 000,000,000 | ---D | M] -- C:\Users\Tymek\AppData\Roaming\zenses
[2012/05/09 16:29:25 | 000,000,310 | -HS- | M] () -- C:\Windows\Tasks\RWMVMECYUK.job
[2012/01/29 01:04:30 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:A1454082

< End of report >