OTL logfile created on: 2012-05-17 12:04:13 - Run 1
OTL by OldTimer - Version 3.2.43.0     Folder = C:\Users\ANDROID\Desktop
64bit- Enterprise Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

5,90 Gb Total Physical Memory | 3,14 Gb Available Physical Memory | 53,23% Memory free
11,79 Gb Paging File | 9,00 Gb Available in Paging File | 76,33% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 463,71 Gb Total Space | 253,37 Gb Free Space | 54,64% Space Free | Partition Type: NTFS
Drive D: | 1,95 Gb Total Space | 1,95 Gb Free Space | 99,98% Space Free | Partition Type: FAT
Drive J: | 298,09 Gb Total Space | 151,40 Gb Free Space | 50,79% Space Free | Partition Type: NTFS

Computer Name: ANDROID1 | User Name: ANDROID | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - File not found -- 
PRC - [2012-05-17 11:48:38 | 000,595,456 | ---- | M] (OldTimer Tools) -- C:\Users\ANDROID\Desktop\OTL.exe
PRC - [2012-04-23 03:54:58 | 000,096,576 | ---- | M] (Maxthon International ltd.) -- C:\Program Files (x86)\Maxthon3\Bin\Maxthon.exe
PRC - [2012-04-10 00:31:48 | 000,166,912 | ---- | M] (Dell Products, LP.) -- C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
PRC - [2012-04-04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) -- C:\NARZĘDZIOWE\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012-04-04 15:56:38 | 000,462,408 | ---- | M] (Malwarebytes Corporation) -- C:\NARZĘDZIOWE\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2012-04-03 19:18:00 | 001,262,912 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
PRC - [2012-04-03 07:15:44 | 000,382,272 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2012-02-28 17:20:02 | 000,363,800 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2012-02-28 17:19:56 | 000,277,784 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2011-11-29 20:04:56 | 000,013,592 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2011-11-29 20:04:54 | 000,284,440 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
PRC - [2011-09-22 12:03:30 | 000,974,944 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
PRC - [2011-09-16 21:39:24 | 000,115,048 | ---- | M] (Renesas Electronics Corporation) -- C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
PRC - [2011-08-23 11:52:42 | 000,897,024 | ---- | M] (Arcai.com) -- C:\Program Files (x86)\netcut\netcut.exe
PRC - [2011-07-28 18:35:44 | 000,262,144 | ---- | M] (Arcai.com) -- C:\Program Files (x86)\netcut\services\AIPS.exe
PRC - [2011-05-27 16:23:00 | 004,999,976 | ---- | M] (Synaptics Incorporated) -- C:\Program Files (x86)\Synaptics\Scrybe\scrybe.exe
PRC - [2011-05-27 16:23:00 | 001,300,264 | ---- | M] (Synaptics, Inc.) -- C:\Program Files (x86)\Synaptics\Scrybe\Service\ScrybeUpdater.exe
PRC - [2011-05-12 14:06:46 | 000,437,272 | ---- | M] (Sophos Group) -- C:\Program Files (x86)\Sophos\Sophos Anti-Rootkit\sargui.exe
PRC - [2011-05-12 14:05:20 | 000,061,440 | ---- | M] () -- C:\Users\ANDROID\AppData\Local\Temp\mctrcx.exe
PRC - [2011-03-30 15:42:34 | 001,001,808 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
PRC - [2011-03-30 15:42:32 | 001,321,296 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
PRC - [2011-03-30 15:42:30 | 000,923,984 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
PRC - [2011-03-30 15:42:28 | 000,985,424 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
PRC - [2011-02-18 12:47:12 | 000,079,192 | ---- | M] (Research In Motion Limited) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
PRC - [2010-12-17 13:18:44 | 001,208,320 | ---- | M] () -- C:\Program Files (x86)\STMicroelectronics\Accelerometer\FF_Protection.exe
PRC - [2010-11-21 05:24:03 | 000,302,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cmd.exe
PRC - [2009-12-23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\RÓZNE\Alcohol 120\StarWind\StarWindServiceAE.exe
PRC - [2009-07-24 20:38:50 | 000,189,728 | ---- | M] (Protexis Inc.) -- c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
PRC - [2007-03-06 11:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) -- C:\Program Files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2012-05-13 22:18:38 | 000,014,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\acc563eb665e430df4375afb9697a5d9\IAStorCommon.ni.dll
MOD - [2012-05-13 22:18:37 | 000,487,424 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\2d76e5f609280a873c775599b20d407f\IAStorUtil.ni.dll
MOD - [2012-05-13 21:01:18 | 011,833,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\1a690902e9a6293de228c16fab21e2f7\System.Web.ni.dll
MOD - [2012-05-13 21:01:12 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\03dee80574f4ec770b6f77ca030ded6c\System.Runtime.Remoting.ni.dll
MOD - [2012-05-13 21:00:34 | 012,433,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\90555968565afd59bce4b0974e9903bd\System.Windows.Forms.ni.dll
MOD - [2012-05-13 21:00:21 | 001,590,784 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\69f6e582cb79f107c61308b468c1a215\System.Drawing.ni.dll
MOD - [2012-05-13 20:59:45 | 003,347,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\46fce56db7685a586d3eeb7c373e3c1c\WindowsBase.ni.dll
MOD - [2012-05-13 20:59:19 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll
MOD - [2012-05-13 20:59:08 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll
MOD - [2012-05-13 20:59:05 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll
MOD - [2012-05-13 20:58:38 | 011,492,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
MOD - [2012-04-23 03:54:58 | 000,258,368 | ---- | M] () -- C:\Program Files (x86)\Maxthon3\bin\Maxzlib.dll
MOD - [2012-04-23 03:54:42 | 008,527,520 | ---- | M] () -- C:\Program Files (x86)\Maxthon3\Core\Webkit\Npplugins\NPSWF32.dll
MOD - [2011-05-12 14:05:20 | 000,061,440 | ---- | M] () -- C:\Users\ANDROID\AppData\Local\Temp\mctrcx.exe
MOD - [2011-04-13 17:58:01 | 000,311,296 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll
MOD - [2011-03-31 19:29:46 | 000,066,856 | ---- | M] () -- C:\Windows\SysWOW64\SynTPEnhPS.dll
MOD - [2011-03-17 00:11:16 | 004,297,568 | ---- | M] () -- C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf
MOD - [2011-02-04 20:12:31 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_pl_b77a5c561934e089\System.Runtime.Remoting.resources.dll
MOD - [2010-12-17 13:18:44 | 001,208,320 | ---- | M] () -- C:\Program Files (x86)\STMicroelectronics\Accelerometer\FF_Protection.exe


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - [2012-02-02 22:29:52 | 000,628,448 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R) Capability Licensing Service Interface) Intel(R)
SRV:[b]64bit:[/b] - [2011-09-22 12:03:30 | 000,974,944 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe -- (ekrn)
SRV:[b]64bit:[/b] - [2011-08-31 19:08:08 | 001,166,848 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3)
SRV:[b]64bit:[/b] - [2011-07-27 22:04:48 | 001,517,328 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel(R)
SRV:[b]64bit:[/b] - [2011-07-27 21:48:34 | 000,340,240 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
SRV:[b]64bit:[/b] - [2011-07-27 21:44:18 | 000,844,560 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel(R)
SRV:[b]64bit:[/b] - [2011-06-03 13:51:38 | 000,134,928 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr) Intel(R) Centrino(R) Wireless Bluetooth(R)
SRV:[b]64bit:[/b] - [2009-11-17 19:14:26 | 000,098,208 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe -- (AERTFilters)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2012-05-05 12:09:45 | 000,257,696 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-04-23 13:53:52 | 000,008,192 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\srvany.exe -- (KMService)
SRV - [2012-04-10 00:31:48 | 000,166,912 | ---- | M] (Dell Products, LP.) [Auto | Running] -- C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe -- (DellDigitalDelivery)
SRV - [2012-04-04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\NARZĘDZIOWE\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012-04-03 19:18:00 | 001,262,912 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012-04-03 07:15:44 | 000,382,272 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2012-02-28 17:38:54 | 002,343,816 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\INTERNET\hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012-02-28 17:20:02 | 000,363,800 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R)
SRV - [2012-02-28 17:19:56 | 000,277,784 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R)
SRV - [2012-02-17 10:37:02 | 000,276,248 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs) Intel(R)
SRV - [2011-12-22 11:10:25 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2011-11-29 20:04:56 | 000,013,592 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel(R)
SRV - [2011-08-21 23:56:00 | 003,928,736 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc)
SRV - [2011-07-28 18:35:44 | 000,262,144 | ---- | M] (Arcai.com) [Auto | Running] -- C:\Program Files (x86)\netcut\services\AIPS.exe -- (AIPS)
SRV - [2011-05-27 16:23:00 | 001,300,264 | ---- | M] (Synaptics, Inc.) [Auto | Running] -- C:\Program Files (x86)\Synaptics\Scrybe\Service\ScrybeUpdater.exe -- (ScrybeUpdater)
SRV - [2011-05-09 19:27:52 | 000,080,032 | ---- | M] (Atheros Commnucations) [Auto | Running] -- C:\Program Files (x86)\Bluetooth Suite\adminservice.exe -- (AtherosSvc)
SRV - [2011-03-30 15:42:34 | 001,001,808 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe -- (Bluetooth OBEX Service)
SRV - [2011-03-30 15:42:32 | 001,321,296 | ---- | M] (Intel Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe -- (Bluetooth Media Service)
SRV - [2011-03-30 15:42:30 | 000,923,984 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe -- (Bluetooth Device Monitor)
SRV - [2010-12-17 13:18:38 | 000,060,928 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\STMicroelectronics\Accelerometer\InstallFilterService.exe -- (InstallFilterService)
SRV - [2010-06-25 19:07:20 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental)
SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009-12-23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\RÓZNE\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2009-07-24 20:38:50 | 000,189,728 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2007-03-06 11:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe -- (Capture Device Service)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - [2012-05-07 17:19:17 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:[b]64bit:[/b] - [2012-04-23 14:12:50 | 000,341,168 | ---- | M] (PC Tools) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\pctgntdi64.sys -- (pctgntdi)
DRV:[b]64bit:[/b] - [2012-04-04 15:56:40 | 000,024,904 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:[b]64bit:[/b] - [2012-04-03 19:18:00 | 000,249,152 | ---- | M] (NVIDIA Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\nvkflt.sys -- (nvkflt)
DRV:[b]64bit:[/b] - [2012-04-03 19:18:00 | 000,028,992 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2012-02-20 22:36:57 | 011,471,872 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Netwsw00.sys -- (NETwNs64) ___ Sterownik karty Intel(R)
DRV:[b]64bit:[/b] - [2012-02-17 10:28:56 | 014,692,896 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2012-02-16 13:42:00 | 000,676,968 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2011-12-06 04:23:10 | 000,331,264 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel(R)
DRV:[b]64bit:[/b] - [2011-11-29 19:40:32 | 000,568,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:[b]64bit:[/b] - [2011-11-10 01:04:14 | 000,060,184 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) Intel(R)
DRV:[b]64bit:[/b] - [2011-10-25 09:57:38 | 000,213,504 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV:[b]64bit:[/b] - [2011-10-25 09:57:38 | 000,096,768 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)
DRV:[b]64bit:[/b] - [2011-08-26 11:30:26 | 000,069,632 | ---- | M] (Cypress Semiconductor, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\cymfltr.sys -- (cymfltrService)
DRV:[b]64bit:[/b] - [2011-08-26 11:30:24 | 000,116,736 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\cyhid.sys -- (cyhid)
DRV:[b]64bit:[/b] - [2011-08-26 11:30:24 | 000,013,312 | ---- | M] (Cypress Semiconductor, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\cykbfltr.sys -- (cykbfltrService)
DRV:[b]64bit:[/b] - [2011-08-09 14:24:52 | 000,202,576 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)
DRV:[b]64bit:[/b] - [2011-08-08 08:32:08 | 000,299,008 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP)
DRV:[b]64bit:[/b] - [2011-08-08 08:32:08 | 000,299,008 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL)
DRV:[b]64bit:[/b] - [2011-08-04 09:20:38 | 000,187,632 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfw.sys -- (epfw)
DRV:[b]64bit:[/b] - [2011-08-04 09:20:38 | 000,146,432 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)
DRV:[b]64bit:[/b] - [2011-08-04 09:20:38 | 000,062,496 | ---- | M] (ESET) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\epfwwfp.sys -- (epfwwfp)
DRV:[b]64bit:[/b] - [2011-08-04 09:20:38 | 000,038,288 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\EpfwLWF.sys -- (EpfwLWF)
DRV:[b]64bit:[/b] - [2011-07-22 12:28:38 | 000,175,192 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR)
DRV:[b]64bit:[/b] - [2011-06-08 18:22:34 | 000,268,416 | ---- | M] ( ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\OEMDrv.sys -- (X86BDA)
DRV:[b]64bit:[/b] - [2011-05-12 14:03:12 | 000,006,144 | ---- | M] (Sophos Plc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\ED2D.tmp -- (MEMSWEEP2)
DRV:[b]64bit:[/b] - [2011-05-11 18:29:45 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2011-05-11 18:29:45 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2011-05-09 19:28:04 | 000,201,376 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_hcrp.sys -- (BTATH_HCRP)
DRV:[b]64bit:[/b] - [2011-05-09 19:28:04 | 000,154,272 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_rcp.sys -- (BTATH_RCP)
DRV:[b]64bit:[/b] - [2011-05-09 19:28:04 | 000,055,456 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_lwflt.sys -- (BTATH_LWFLT)
DRV:[b]64bit:[/b] - [2011-05-09 19:28:04 | 000,036,000 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_flt.sys -- (AthBTPort)
DRV:[b]64bit:[/b] - [2011-05-09 19:28:02 | 000,298,656 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_a2dp.sys -- (BTATH_A2DP)
DRV:[b]64bit:[/b] - [2011-05-09 19:28:02 | 000,029,344 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_bus.sys -- (BTATH_BUS)
DRV:[b]64bit:[/b] - [2011-03-31 19:32:00 | 001,424,944 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:[b]64bit:[/b] - [2011-03-22 19:14:04 | 000,059,904 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iBtFltCoex.sys -- (iBtFltCoex)
DRV:[b]64bit:[/b] - [2011-03-08 15:44:08 | 000,274,944 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmhsf.sys -- (btmhsf)
DRV:[b]64bit:[/b] - [2011-03-08 15:44:08 | 000,051,712 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btmaux.sys -- (btmaux)
DRV:[b]64bit:[/b] - [2011-03-08 15:44:06 | 000,046,592 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btmaud.sys -- (btmaudio)
DRV:[b]64bit:[/b] - [2011-02-16 19:23:46 | 000,074,240 | ---- | M] (Research In Motion Limited) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RimUsb_AMD64.sys -- (RimUsb)
DRV:[b]64bit:[/b] - [2010-12-17 13:22:48 | 000,025,712 | ---- | M] (ST Microelectronics) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Acceler.sys -- (Acceler)
DRV:[b]64bit:[/b] - [2010-12-17 13:18:38 | 000,019,504 | ---- | M] (ST Microelectronics) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\stdflt.sys -- (stdflt)
DRV:[b]64bit:[/b] - [2010-11-21 05:24:43 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:[b]64bit:[/b] - [2010-11-21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2010-08-25 16:36:56 | 000,088,864 | ---- | M] (Tonec Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\idmwfp.sys -- (IDMWFP)
DRV:[b]64bit:[/b] - [2010-07-02 02:46:58 | 000,029,288 | ---- | M] (Quanta Computer) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\qicflt.sys -- (qicflt)
DRV:[b]64bit:[/b] - [2010-06-30 02:10:58 | 000,045,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\point64.sys -- (Point64)
DRV:[b]64bit:[/b] - [2010-06-25 19:07:26 | 000,035,344 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\npf.sys -- (NPF)
DRV:[b]64bit:[/b] - [2010-04-12 10:55:00 | 000,091,568 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\scdemu.sys -- (SCDEmu)
DRV:[b]64bit:[/b] - [2009-12-30 12:21:24 | 000,031,800 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\revoflt.sys -- (Revoflt)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-07-14 02:10:47 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rootmdm.sys -- (ROOTMODEM)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009-03-18 18:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:[b]64bit:[/b] - [2009-01-09 16:02:08 | 000,031,744 | ---- | M] (Research in Motion Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RimSerial_AMD64.sys -- (RimVSerPort)
DRV:[b]64bit:[/b] - [2000-01-01 02:00:00 | 000,052,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dc3d.sys -- (dc3d) MS Hardware Device Detection Driver (USB)
DRV - [2012-05-17 11:11:38 | 000,134,024 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\Users\ANDROID\AppData\Local\Temp\esihdrv.sys -- (esihdrv)
DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2005-01-04 02:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2)
DRV - [2000-12-28 17:45:50 | 000,001,600 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysWOW64\drivers\TVCC2000.SYS -- (TVCC2000)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuz0.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local



IE - HKU\S-1-5-21-645119318-3424139724-2110464101-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKU\S-1-5-21-645119318-3424139724-2110464101-1000\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}
IE - HKU\S-1-5-21-645119318-3424139724-2110464101-1000\..\SearchScopes\{41BF236B-7991-43A9-94A0-F63168AE2498}: "URL" = http://audioteka.pl/None,None,None,None,,1,12,UserOpinion,DESC,szukaj.html?szukaj={searchTerms}
IE - HKU\S-1-5-21-645119318-3424139724-2110464101-1000\..\SearchScopes\{85D454E4-D6CB-43C2-AF1A-FD506E05C5A2}: "URL" = http://wss.pl/Search/All/1.aspx?q={searchTerms}
IE - HKU\S-1-5-21-645119318-3424139724-2110464101-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={480B8580-6729-4652-AC38-62FD2993FF11}&mid=f0ede30a8b0d47d08e917d3bcf9781c4-1154e207dbc4722ffe44656dbaf0804d98e8203d&lang=pl&ds=ts024&pr=sa&d=2012-05-03 10:06:52&v=11.0.0.9&sap=dsp&q={searchTerms}
IE - HKU\S-1-5-21-645119318-3424139724-2110464101-1000\..\SearchScopes\{A0FAA3E2-D867-4382-AF64-FE8DA6DC70CA}: "URL" = http://www.google.com/search?hl=pl&q={searchTerms}
IE - HKU\S-1-5-21-645119318-3424139724-2110464101-1000\..\SearchScopes\{B6D2BC1F-9922-4C06-AB3C-E460CE35D577}: "URL" = http://pl.wikipedia.org/w/index.php?title=Specjalna:Szukaj&search={searchTerms}
IE - HKU\S-1-5-21-645119318-3424139724-2110464101-1000\..\SearchScopes\{F048712F-08AE-44AE-B342-EF80DC65E6F5}: "URL" = http://pl.wikipedia.org/w/index.php?title=Specjalna:Szukaj&search={searchTerms}
IE - HKU\S-1-5-21-645119318-3424139724-2110464101-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-645119318-3424139724-2110464101-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local


[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..CT2481033.browser.search.defaultthis.engineName: true
FF - prefs.js..browser.search.defaultenginename: "AVG Secure Search"
FF - prefs.js..browser.search.selectedEngine: "AVG Secure Search"
FF - prefs.js..browser.startup.homepage: "http://www.gazeta.pl/0,0.html?p=128"
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?SSPV=FFSB3&ctid=CT2481033&SearchSource=2&q="
FF - user.js - File not found

FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_235.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@rim.com/npappworld: C:\Program Files (x86)\Research In Motion Limited\BlackBerry App World Browser Plugin\npappworld.dll ()
FF - HKLM\Software\MozillaPlugins\@RIM.com/WebSLLauncher,version=1.0: C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll ()
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\RÓZNE\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@Webzen.com/NPBrowserExt: C:\Program Files (x86)\WEBZEN\BrowserExtension\NPWZCmnCtrl.dll (WEBZEN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\ANDROID\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\ANDROID\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\crossriderapp498@crossrider.com: C:\Users\ANDROID\AppData\Local\RewardsArcade\498\Firefox
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0\extensions\\Components: C:\INTERNET\firefox\components [2012-01-31 12:47:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2012-05-05 13:30:54 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\ANDROID\AppData\Roaming\IDM\idmmzcc3
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\ANDROID\AppData\Roaming\IDM\idmmzcc3

[2012-01-06 13:38:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\ANDROID\AppData\Roaming\mozilla\Extensions
[2012-04-05 13:16:20 | 000,000,000 | ---D | M] (No name found) -- C:\Users\ANDROID\AppData\Roaming\mozilla\Firefox\Profiles\wxwqya3m.default\extensions
[2012-04-05 13:16:22 | 000,000,000 | ---D | M] (Ashampoo PO) -- C:\Users\ANDROID\AppData\Roaming\mozilla\Firefox\Profiles\wxwqya3m.default\extensions\{d43723ae-1ae1-4a25-a6a4-bf0929273cab}
[2012-04-02 09:09:48 | 000,000,000 | ---D | M] (gTranslator) -- C:\Users\ANDROID\AppData\Roaming\mozilla\Firefox\Profiles\wxwqya3m.default\extensions\jyboy.yy@gmail.com
[2012-04-13 20:03:40 | 000,000,945 | ---- | M] () -- C:\Users\ANDROID\AppData\Roaming\Mozilla\Firefox\Profiles\wxwqya3m.default\searchplugins\conduit.xml
[2012-03-04 14:01:20 | 000,000,000 | ---D | M] (Java Console) -- C:\INTERNET\FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}
File not found (No name found) -- C:\USERS\ANDROID\APPDATA\LOCAL\REWARDSARCADE\498\FIREFOX
[2012-01-06 13:38:12 | 000,000,000 | ---D | M] (General Crawler) -- C:\USERS\ANDROID\APPDATA\ROAMING\MOZILLA\EXTENSIONS\{EC8030F7-C20A-464F-9B0E-13A3A9E97384}\GENCRAWLER@SOME.COM
[2012-04-02 09:09:48 | 000,616,227 | ---- | M] () (No name found) -- C:\USERS\ANDROID\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\WXWQYA3M.DEFAULT\EXTENSIONS\{1E9A63EF-84EC-49A4-8D6F-2DD9524E90D0}.XPI

[color=#E56717]========== Chrome  ==========[/color]

CHR - default_search_provider: AVG Secure Search (Enabled)
CHR - default_search_provider: search_url = http://isearch.avg.com/search?cid={480B8580-6729-4652-AC38-62FD2993FF11}&mid=f0ede30a8b0d47d08e917d3bcf9781c4-1154e207dbc4722ffe44656dbaf0804d98e8203d&lang=pl&ds=ts024&pr=sa&d=2012-05-03 10:06:52&v=11.0.0.9&sap=dsp&q={searchTerms}
CHR - default_search_provider: suggest_url = http://clients5.google.com/complete/search?hl={language}&q={searchTerms}&client=ie8&inputencoding={inputEncoding}&outputencoding={outputEncoding}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\ANDROID\AppData\Local\Google\Chrome\Application\18.0.1025.168\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\ANDROID\AppData\Local\Google\Chrome\Application\18.0.1025.168\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\ANDROID\AppData\Local\Google\Chrome\Application\18.0.1025.168\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\ANDROID\AppData\Local\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: Skype Click to Call (Enabled) = C:\Users\ANDROID\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.10.0.9560_0\npSkypeChromePlugin.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\PFiles\Plugins\np-mswmp.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.0.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.0.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.0.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.0.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.0.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.0.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.0.3 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
CHR - plugin: RIM Handheld Application Loader (Enabled) = C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: BlackBerry AppWorld (Enabled) = C:\Program Files (x86)\Research In Motion Limited\BlackBerry App World Browser Plugin\npappworld.dll
CHR - plugin: WEBZEN Browser Extension (Enabled) = C:\Program Files (x86)\WEBZEN\BrowserExtension\NPWZCmnCtrl.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\R\u00D3ZNE\VLC\npvlc.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - Extension: Adblock Plus (Beta) = C:\Users\ANDROID\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.2_0\
CHR - Extension: Do Not Track Plus = C:\Users\ANDROID\AppData\Local\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd\2.2.0.510_0\
CHR - Extension: Skype Click to Call = C:\Users\ANDROID\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.10.0.9560_0\
CHR - Extension: Illimitux = C:\Users\ANDROID\AppData\Local\Google\Chrome\User Data\Default\Extensions\mamnihopcnbfnbfnnneplcohmnkkpipb\1.0_0\

O1 HOSTS File: ([2012-05-07 17:24:14 | 000,000,191 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 127.0.0.1 serial.alcohol-soft.com
O1 - Hosts: 127.0.0.1 www.alcohol-soft.com
O1 - Hosts: 127.0.0.1 images.alcohol-soft.com
O1 - Hosts: 127.0.0.1 trial.alcohol-soft.com
O1 - Hosts: 127.0.0.1 alcohol-soft.com
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (SACert Class) - {740FE5FB-65F1-46C5-9E54-A19C8A8D7AC2} - C:\Windows\SysWOW64\SoftAheadCert.dll (SoftAhead Inc.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\INTERNET\skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (FlashGetBHO) - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - C:\Users\ANDROID\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll (Trend Media Group)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Vuze Remote Toolbar) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuz0.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-645119318-3424139724-2110464101-1000\..\Toolbar\WebBrowser: (Vuze Remote Toolbar) - {BA14329E-9550-4989-B3F2-9732E92D17CC} - C:\Program Files (x86)\Vuze_Remote\prxtbVuz0.dll (Conduit Ltd.)
O4:[b]64bit:[/b] - HKLM..\Run: [AthBtTray] C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Atheros Commnucations)
O4:[b]64bit:[/b] - HKLM..\Run: [AtherosBtStack] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Communications)
O4:[b]64bit:[/b] - HKLM..\Run: [BTMTrayAgent] C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Chew7Hale] C:\Windows\SysNative\hale.exe ()
O4:[b]64bit:[/b] - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET)
O4:[b]64bit:[/b] - HKLM..\Run: [FreeFallProtection] C:\Program Files (x86)\STMicroelectronics\Accelerometer\FF_Protection.exe ()
O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IntelliPoint] C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IntelPAN] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel(R) Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [itype] C:\Program Files\Microsoft IntelliType Pro\itype.exe (Microsoft Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\NARZĘDZIOWE\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)
O4 - HKLM..\Run: [RIMBBLaunchAgent.exe] C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe (Research In Motion Limited)
O4 - HKU\S-1-5-21-645119318-3424139724-2110464101-1000..\Run: [AlcoholAutomount] C:\RÓZNE\Alcohol 120\AxAutoMntSrv.exe (Alcohol Soft Development Team)
O4 - HKU\S-1-5-21-645119318-3424139724-2110464101-1000..\Run: [DIMPobieranie aktualizacji...1300677038363] c:\Program Files (x86)\Corel\CorelDRAW Graphics Suite X5\Programs\DIM.exe (Corel Corporation)
O4 - HKU\S-1-5-21-645119318-3424139724-2110464101-1000..\Run: [Odkurzacz-MCD] C:\NARZĘDZIOWE\Odkurzacz\odk_mcd.exe (Franmo Software)
O4 - HKU\S-1-5-21-645119318-3424139724-2110464101-1008..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-645119318-3424139724-2110464101-1008..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\ANDROID\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-645119318-3424139724-2110464101-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-645119318-3424139724-2110464101-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-645119318-3424139724-2110464101-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-645119318-3424139724-2110464101-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKU\S-1-5-21-645119318-3424139724-2110464101-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O7 - HKU\S-1-5-21-645119318-3424139724-2110464101-1008\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8:[b]64bit:[/b] - Extra context menu item: ????3?? - Reg Error: Value error. File not found
O8:[b]64bit:[/b] - Extra context menu item: ????3?????? - Reg Error: Value error. File not found
O8:[b]64bit:[/b] - Extra context menu item: Download all by FlashGet3 - C:\Users\ANDROID\AppData\Roaming\FlashGetBHO\GetAllUrl.htm ()
O8:[b]64bit:[/b] - Extra context menu item: Download all links with IDM - C:\RÓZNE\Internet Download Manager\IEGetAll.htm File not found
O8:[b]64bit:[/b] - Extra context menu item: Download by FlashGet3 - C:\Users\ANDROID\AppData\Roaming\FlashGetBHO\GetUrl.htm ()
O8:[b]64bit:[/b] - Extra context menu item: Download FLV video content with IDM - C:\RÓZNE\Internet Download Manager\IEGetVL.htm File not found
O8:[b]64bit:[/b] - Extra context menu item: Download with &Media Finder - C:\Program Files (x86)\Media Finder\hook.html File not found
O8:[b]64bit:[/b] - Extra context menu item: Download with IDM - C:\RÓZNE\Internet Download Manager\IEExt.htm File not found
O8:[b]64bit:[/b] - Extra context menu item: Pobierz  FlashGetem3 - C:\Users\ANDROID\AppData\Roaming\FlashGetBHO\GetUrl.htm ()
O8:[b]64bit:[/b] - Extra context menu item: Pobierz wszystko FlashGetem3 - C:\Users\ANDROID\AppData\Roaming\FlashGetBHO\GetAllUrl.htm ()
O8:[b]64bit:[/b] - Extra context menu item: 使用快车3下载 - C:\Users\ANDROID\AppData\Roaming\FlashGetBHO\GetUrl.htm ()
O8:[b]64bit:[/b] - Extra context menu item: 使用快车3下载全部链接 - C:\Users\ANDROID\AppData\Roaming\FlashGetBHO\GetAllUrl.htm ()
O8 - Extra context menu item: ????3?? - Reg Error: Value error. File not found
O8 - Extra context menu item: ????3?????? - Reg Error: Value error. File not found
O8 - Extra context menu item: Download all by FlashGet3 - C:\Users\ANDROID\AppData\Roaming\FlashGetBHO\GetAllUrl.htm ()
O8 - Extra context menu item: Download all links with IDM - C:\RÓZNE\Internet Download Manager\IEGetAll.htm File not found
O8 - Extra context menu item: Download by FlashGet3 - C:\Users\ANDROID\AppData\Roaming\FlashGetBHO\GetUrl.htm ()
O8 - Extra context menu item: Download FLV video content with IDM - C:\RÓZNE\Internet Download Manager\IEGetVL.htm File not found
O8 - Extra context menu item: Download with &Media Finder - C:\Program Files (x86)\Media Finder\hook.html File not found
O8 - Extra context menu item: Download with IDM - C:\RÓZNE\Internet Download Manager\IEExt.htm File not found
O8 - Extra context menu item: Pobierz  FlashGetem3 - C:\Users\ANDROID\AppData\Roaming\FlashGetBHO\GetUrl.htm ()
O8 - Extra context menu item: Pobierz wszystko FlashGetem3 - C:\Users\ANDROID\AppData\Roaming\FlashGetBHO\GetAllUrl.htm ()
O8 - Extra context menu item: 使用快车3下载 - C:\Users\ANDROID\AppData\Roaming\FlashGetBHO\GetUrl.htm ()
O8 - Extra context menu item: 使用快车3下载全部链接 - C:\Users\ANDROID\AppData\Roaming\FlashGetBHO\GetAllUrl.htm ()
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\INTERNET\skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\INTERNET\skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C316FF37-C839-4398-9F4E-473717A8E997}: NameServer = 194.204.152.34,194.204.159.1
O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\INTERNET\skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:[b]64bit:[/b] - AppInit_DLLs: (c:\Windows\System32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (c:\Windows\SysWOW64\nvinit.dll) - c:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011-12-22 20:22:21 | 000,027,638 | ---- | M] () - C:\AutoMapaSetupLog.txt -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2012-05-17 11:48:27 | 000,595,456 | ---- | C] (OldTimer Tools) -- C:\Users\ANDROID\Desktop\OTL.exe
[2012-05-17 11:22:54 | 000,000,000 | ---D | C] -- C:\ProgramData\GFI Software
[2012-05-17 11:08:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2012-05-17 10:42:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos
[2012-05-17 10:42:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sophos
[2012-05-17 10:15:34 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
[2012-05-17 10:15:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Trend Micro
[2012-05-17 09:52:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Lavasoft
[2012-05-17 09:49:57 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\AppData\Roaming\Ad-Aware Antivirus
[2012-05-17 09:30:07 | 000,000,000 | ---D | C] -- C:\Program Files\SkanerOnline
[2012-05-15 17:22:06 | 000,341,168 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\pctgntdi64.sys
[2012-05-15 17:22:06 | 000,145,432 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\pctwfpfilter64.sys
[2012-05-15 16:57:39 | 000,426,616 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\PCTCore64.sys
[2012-05-15 16:57:36 | 000,251,528 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\PCTSD64.sys
[2012-05-15 16:55:40 | 000,000,000 | ---D | C] -- C:\ProgramData\PC Tools
[2012-05-15 16:55:38 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\AppData\Roaming\TestApp
[2012-05-15 16:35:03 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\AppData\Local\ElevatedDiagnostics
[2012-05-15 12:23:59 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2012-05-15 12:23:53 | 000,000,000 | ---D | C] -- C:\Program Files\ATI
[2012-05-15 12:10:27 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\AppData\Roaming\Blitware
[2012-05-15 12:10:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Robot
[2012-05-15 12:10:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Driver Robot
[2012-05-14 12:24:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2012-05-14 12:23:03 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2012-05-14 12:01:38 | 000,466,456 | ---- | C] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2012-05-14 12:01:37 | 000,444,952 | ---- | C] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2012-05-14 12:01:37 | 000,122,904 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll
[2012-05-14 12:01:37 | 000,109,080 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll
[2012-05-14 12:01:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenAL
[2012-05-14 12:01:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Futuremark Shared
[2012-05-14 11:39:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2012-05-14 11:38:08 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\NV
[2012-05-14 11:38:08 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\NV
[2012-05-14 11:17:54 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2012-05-14 11:17:12 | 006,122,816 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcpl.dll
[2012-05-14 11:17:12 | 003,149,632 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvc64.dll
[2012-05-14 11:17:12 | 002,561,856 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvcr.dll
[2012-05-14 11:17:12 | 000,858,432 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nv3dappshext.dll
[2012-05-14 11:17:12 | 000,118,080 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvmctray.dll
[2012-05-14 11:17:12 | 000,063,296 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvshext.dll
[2012-05-14 11:17:12 | 000,055,616 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nv3dappshextr.dll
[2012-05-14 11:16:41 | 000,068,928 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2012-05-14 11:16:41 | 000,061,248 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2012-05-14 11:16:27 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2012-05-14 11:02:21 | 025,720,128 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
[2012-05-14 11:02:21 | 025,246,528 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
[2012-05-14 11:02:21 | 019,584,320 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
[2012-05-14 11:02:21 | 017,984,320 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
[2012-05-14 11:02:21 | 017,551,680 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
[2012-05-14 11:02:21 | 015,279,424 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll
[2012-05-14 11:02:21 | 010,102,592 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll
[2012-05-14 11:02:21 | 008,138,048 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
[2012-05-14 11:02:21 | 008,029,504 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
[2012-05-14 11:02:21 | 005,981,504 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
[2012-05-14 11:02:21 | 002,881,344 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll
[2012-05-14 11:02:21 | 002,740,544 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll
[2012-05-14 11:02:21 | 002,681,152 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
[2012-05-14 11:02:21 | 002,524,992 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
[2012-05-14 11:02:21 | 002,444,608 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll
[2012-05-14 11:02:21 | 002,367,808 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
[2012-05-14 11:02:21 | 001,738,048 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco64.dll
[2012-05-14 11:02:21 | 001,466,176 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvgenco64.dll
[2012-05-14 11:02:21 | 000,948,544 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvumdshimx.dll
[2012-05-14 11:02:21 | 000,818,496 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvumdshim.dll
[2012-05-14 11:02:21 | 000,364,352 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdecodemft.dll
[2012-05-14 11:02:21 | 000,301,376 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvdecodemft.dll
[2012-05-14 11:02:21 | 000,249,152 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvkflt.sys
[2012-05-14 11:02:21 | 000,246,592 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvinitx.dll
[2012-05-14 11:02:21 | 000,202,048 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvinit.dll
[2012-05-14 11:02:21 | 000,028,992 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvpciflt.sys
[2012-05-14 10:30:40 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\AppData\Roaming\Auslogics
[2012-05-14 10:28:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
[2012-05-14 10:28:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Auslogics
[2012-05-13 21:41:31 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maxthon
[2012-05-13 21:41:28 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\AppData\Roaming\Maxthon3
[2012-05-13 21:41:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Maxthon3
[2012-05-13 21:02:09 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat
[2012-05-13 21:02:09 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat
[2012-05-13 15:34:41 | 000,366,696 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoptimusmft.dll
[2012-05-13 15:34:41 | 000,326,248 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoptimusmft.dll
[2012-05-13 15:34:40 | 001,496,168 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6420150.dll
[2012-05-13 15:34:40 | 001,427,048 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvgenco642090.dll
[2012-05-13 15:34:40 | 000,012,392 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvBridge.kmd
[2012-05-13 15:31:00 | 000,326,760 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhotkey.dll
[2012-05-13 14:29:39 | 005,559,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2012-05-13 14:29:36 | 003,968,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2012-05-13 14:29:35 | 003,913,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2012-05-13 12:21:22 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\AppData\Roaming\FOG Downloader
[2012-05-10 11:34:56 | 001,544,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2012-05-07 19:11:43 | 000,074,344 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\SysNative\RtNicProp64.dll
[2012-05-07 19:11:42 | 000,676,968 | ---- | C] (Realtek                                            ) -- C:\Windows\SysNative\drivers\Rt64win7.sys
[2012-05-07 17:30:01 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2012-05-07 17:30:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2012-05-07 17:23:52 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Alcohol 120%
[2012-05-07 17:23:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alcohol 120%
[2012-05-07 13:36:16 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell Inc
[2012-05-05 20:17:41 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\AppData\Local\KSafe
[2012-05-05 20:15:47 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\AppData\Roaming\kingsoft
[2012-05-05 20:15:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Kingsoft
[2012-05-05 19:42:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Odkurzacz
[2012-05-05 13:37:25 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2012-05-05 13:32:18 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\AppData\Roaming\ESET
[2012-05-05 13:30:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
[2012-05-05 13:30:52 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2012-05-05 12:10:10 | 000,000,000 | ---D | C] -- C:\ComboFix
[2012-05-05 11:41:23 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET
[2012-05-05 11:32:03 | 000,031,800 | ---- | C] (VS Revo Group) -- C:\Windows\SysNative\drivers\revoflt.sys
[2012-05-03 11:54:24 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\AppData\Local\Microsoft Corporation
[2012-05-03 11:53:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Windows 7 Upgrade Advisor
[2012-05-03 11:14:00 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
[2012-05-03 10:34:35 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\AppData\Local\PC_Drivers_Headquarters
[2012-05-03 10:34:15 | 000,000,000 | ---D | C] -- C:\ProgramData\PC Drivers HeadQuarters
[2012-05-03 10:07:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Keyboard
[2012-05-03 10:06:52 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft IntelliType Pro
[2012-05-03 10:04:52 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\AppData\Local\SlimWare Utilities Inc
[2012-05-03 10:04:44 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2012-05-03 10:04:36 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Downloaded Installers
[2012-05-03 09:44:06 | 000,000,000 | -H-D | C] -- C:\ProgramData\{5A76C6B3-3FA8-46D0-AA81-62C3805E38BC}
[2012-05-03 09:40:16 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\AppData\Roaming\DeviceDoctorSoftware
[2012-05-01 16:48:54 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\Desktop\[Filtr wulgaryzmów]
[2012-05-01 16:39:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverEasy
[2012-04-28 16:04:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Dell Digital Delivery
[2012-04-24 17:03:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2012-04-23 13:46:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
[2012-04-23 13:46:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2012-04-23 13:44:53 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Synchronization Services
[2012-04-23 13:44:11 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Sync Framework
[2012-04-23 13:44:11 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2012-04-23 13:41:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 8
[2012-04-23 13:40:32 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Analysis Services
[2012-04-23 13:40:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Analysis Services
[2012-04-23 13:40:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2012-04-23 13:39:57 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2012-04-23 13:39:42 | 000,000,000 | R--D | C] -- C:\MSOCache
[2012-04-23 13:36:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2012-04-23 11:07:35 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro
[2012-04-22 08:40:59 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\Documents\Notesy programu OneNote
[2012-04-21 07:44:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2012-04-19 08:10:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Converber
[2012-04-18 17:22:12 | 000,000,000 | R--D | C] -- C:\Users\ANDROID\AppData\Roaming\Brother
[2012-04-18 17:14:57 | 000,176,128 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\SysWow64\BroSNMP.dll
[2012-04-18 17:14:57 | 000,073,728 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysWow64\BrDctF2.dll
[2012-04-18 17:14:57 | 000,004,608 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysWow64\BrDctF2L.dll
[2012-04-18 17:14:57 | 000,003,072 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysWow64\BrDctF2S.dll
[2012-04-18 17:14:56 | 001,560,576 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\SysNative\BrWia09b.dll
[2012-04-18 17:14:56 | 000,050,176 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\SysNative\BrUsi09a.dll
[2012-04-18 17:14:54 | 000,167,936 | ---- | C] (brother) -- C:\Windows\SysWow64\NSSearch.dll
[2012-04-18 14:19:06 | 000,000,000 | ---D | C] -- C:\MATS
[2012-04-18 12:18:04 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt
[2012-04-18 08:18:47 | 000,000,000 | ---D | C] -- C:\Users\ANDROID\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Converber
[2 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2012-05-17 12:09:16 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012-05-17 12:03:24 | 000,001,066 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-645119318-3424139724-2110464101-1000UA.job
[2012-05-17 12:03:21 | 000,001,014 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-645119318-3424139724-2110464101-1000Core.job
[2012-05-17 11:48:38 | 000,595,456 | ---- | M] (OldTimer Tools) -- C:\Users\ANDROID\Desktop\OTL.exe
[2012-05-17 11:43:10 | 000,001,050 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012-05-17 10:38:29 | 001,031,666 | ---- | M] () -- C:\Users\ANDROID\Desktop\haxfix(3).exe
[2012-05-17 10:26:33 | 000,741,328 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2012-05-17 10:26:32 | 001,671,304 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012-05-17 10:26:32 | 000,655,052 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012-05-17 10:26:32 | 000,155,892 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2012-05-17 10:26:32 | 000,121,924 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012-05-17 10:20:42 | 000,001,046 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012-05-17 10:20:23 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl
[2012-05-17 10:20:13 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-05-17 10:19:53 | 453,640,191 | -HS- | M] () -- C:\hiberfil.sys
[2012-05-17 10:15:34 | 000,002,985 | ---- | M] () -- C:\Users\ANDROID\Desktop\HiJackThis.lnk
[2012-05-17 09:44:47 | 000,294,216 | ---- | M] () -- C:\Users\ANDROID\Desktop\gmer.zip
[2012-05-17 08:43:18 | 660,178,480 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012-05-15 16:58:26 | 001,859,950 | ---- | M] () -- C:\Windows\SysNative\drivers\Cat.DB
[2012-05-15 16:10:42 | 000,000,352 | ---- | M] () -- C:\Windows\tasks\Driver Robot.job
[2012-05-15 12:10:26 | 000,001,172 | ---- | M] () -- C:\Users\Public\Desktop\Driver Robot.lnk
[2012-05-14 12:26:34 | 000,016,848 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012-05-14 12:26:33 | 000,016,848 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012-05-14 12:01:38 | 000,466,456 | ---- | M] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2012-05-14 12:01:38 | 000,122,904 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll
[2012-05-14 12:01:37 | 000,444,952 | ---- | M] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2012-05-14 12:01:37 | 000,109,080 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll
[2012-05-14 10:47:22 | 002,392,064 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012-05-14 10:28:35 | 000,001,281 | ---- | M] () -- C:\Users\ANDROID\Desktop\Auslogics Registry Cleaner.lnk
[2012-05-13 21:41:31 | 000,001,090 | ---- | M] () -- C:\Users\ANDROID\Desktop\Maxthon 3.lnk
[2012-05-13 21:02:31 | 000,419,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\systemcpl.dll
[2012-05-13 21:02:31 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\slwga.dll
[2012-05-13 21:02:31 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\slwga.dll
[2012-05-13 21:02:30 | 001,008,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\user32.dll
[2012-05-13 14:16:48 | 000,107,946 | ---- | M] () -- C:\Windows\SysWow64\slmgr.vbs.removewat
[2012-05-13 14:16:48 | 000,107,946 | ---- | M] () -- C:\Windows\SysNative\slmgr.vbs.removewat
[2012-05-13 14:13:00 | 000,381,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sppcommdlg.dll
[2012-05-13 14:12:57 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\sppwmi.dll
[2012-05-13 14:12:56 | 000,142,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sppwmi.dll
[2012-05-13 14:12:56 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\slwga.dll.bak
[2012-05-13 14:12:56 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\slwga.dll.bak
[2012-05-13 14:12:00 | 000,349,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\slui.exe
[2012-05-13 14:12:00 | 000,002,048 | ---- | M] () -- C:\Windows\SysNative\winver.exe
[2012-05-13 14:12:00 | 000,001,536 | ---- | M] () -- C:\Windows\SysWow64\winver.exe
[2012-05-13 12:08:58 | 000,000,000 | ---- | M] () -- C:\Users\ANDROID\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip
[2012-05-07 20:03:31 | 000,018,604 | ---- | M] () -- C:\Windows\SysNative\results.xml
[2012-05-07 17:24:44 | 000,000,110 | ---- | M] () -- C:\Users\ANDROID\Documents\ax_files.xml
[2012-05-07 17:24:14 | 000,000,191 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2012-05-07 17:24:13 | 000,000,723 | ---- | M] () -- C:\Users\Public\Desktop\Alcohol 120%.lnk
[2012-05-07 17:19:17 | 000,834,544 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys
[2012-05-07 14:12:45 | 000,000,784 | ---- | M] () -- C:\Users\ANDROID\Desktop\HD Tune Pro.lnk
[2012-05-07 12:13:39 | 000,000,414 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2012-05-05 19:42:57 | 000,000,836 | ---- | M] () -- C:\Users\ANDROID\Desktop\Odkurzacz.lnk
[2012-05-05 12:09:45 | 000,419,488 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012-05-05 12:09:44 | 000,070,304 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012-05-05 12:09:42 | 008,744,608 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerInstaller.exe
[2012-05-05 11:32:03 | 000,000,785 | ---- | M] () -- C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
[2012-05-03 11:59:30 | 001,647,442 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012-05-03 11:53:22 | 000,002,115 | ---- | M] () -- C:\Users\Public\Desktop\Doradca uaktualnienia systemu Windows 7.lnk
[2012-05-03 11:14:00 | 000,000,794 | ---- | M] () -- C:\Users\ANDROID\Desktop\Start Unlocker.lnk
[2012-05-02 13:08:39 | 000,002,369 | ---- | M] () -- C:\Users\ANDROID\Desktop\Google Chrome.lnk
[2012-05-01 16:39:59 | 000,000,782 | ---- | M] () -- C:\Users\Public\Desktop\DriverEasy.lnk
[2012-04-29 16:24:07 | 000,000,785 | ---- | M] () -- C:\Users\Public\Desktop\World of Warcraft.lnk
[2012-04-23 14:18:02 | 000,251,528 | ---- | M] (PC Tools) -- C:\Windows\SysNative\drivers\PCTSD64.sys
[2012-04-23 14:12:56 | 000,145,432 | ---- | M] (PC Tools) -- C:\Windows\SysNative\drivers\pctwfpfilter64.sys
[2012-04-23 14:12:50 | 000,341,168 | ---- | M] (PC Tools) -- C:\Windows\SysNative\drivers\pctgntdi64.sys
[2012-04-23 13:53:52 | 000,008,192 | ---- | M] () -- C:\Windows\SysWow64\srvany.exe
[2012-04-23 13:36:00 | 000,000,708 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012-04-23 12:36:50 | 000,426,616 | ---- | M] (PC Tools) -- C:\Windows\SysNative\drivers\PCTCore64.sys
[2012-04-21 07:44:50 | 000,002,212 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2012-04-18 17:15:29 | 000,000,050 | ---- | M] () -- C:\Windows\SysNative\bridf08b.dat
[2 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2012-05-17 11:41:49 | 000,302,592 | ---- | C] () -- C:\Users\ANDROID\Desktop\gmer.exe
[2012-05-17 10:38:29 | 001,031,666 | ---- | C] () -- C:\Users\ANDROID\Desktop\haxfix(3).exe
[2012-05-17 10:15:34 | 000,002,985 | ---- | C] () -- C:\Users\ANDROID\Desktop\HiJackThis.lnk
[2012-05-17 09:44:45 | 000,294,216 | ---- | C] () -- C:\Users\ANDROID\Desktop\gmer.zip
[2012-05-15 16:57:43 | 001,859,950 | ---- | C] () -- C:\Windows\SysNative\drivers\Cat.DB
[2012-05-15 16:25:59 | 000,537,850 | ---- | C] () -- C:\HaxFix.exe
[2012-05-15 12:10:28 | 000,000,352 | ---- | C] () -- C:\Windows\tasks\Driver Robot.job
[2012-05-15 12:10:26 | 000,001,172 | ---- | C] () -- C:\Users\Public\Desktop\Driver Robot.lnk
[2012-05-14 11:17:12 | 002,553,991 | ---- | C] () -- C:\Windows\SysNative\nvcoproc.bin
[2012-05-14 11:02:21 | 000,014,252 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb
[2012-05-14 10:47:01 | 002,392,064 | ---- | C] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012-05-14 10:46:59 | 660,178,480 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2012-05-14 10:28:35 | 000,001,281 | ---- | C] () -- C:\Users\ANDROID\Desktop\Auslogics Registry Cleaner.lnk
[2012-05-13 21:41:31 | 000,001,090 | ---- | C] () -- C:\Users\ANDROID\Desktop\Maxthon 3.lnk
[2012-05-13 12:08:58 | 000,000,000 | ---- | C] () -- C:\Users\ANDROID\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip
[2012-05-07 17:24:44 | 000,000,110 | ---- | C] () -- C:\Users\ANDROID\Documents\ax_files.xml
[2012-05-07 17:23:04 | 000,000,723 | ---- | C] () -- C:\Users\Public\Desktop\Alcohol 120%.lnk
[2012-05-07 17:19:17 | 000,834,544 | ---- | C] () -- C:\Windows\SysNative\drivers\sptd.sys
[2012-05-07 14:12:45 | 000,000,784 | ---- | C] () -- C:\Users\ANDROID\Desktop\HD Tune Pro.lnk
[2012-05-07 12:13:39 | 000,000,414 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2012-05-05 19:42:57 | 000,000,836 | ---- | C] () -- C:\Users\ANDROID\Desktop\Odkurzacz.lnk
[2012-05-05 11:32:03 | 000,000,785 | ---- | C] () -- C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
[2012-05-03 11:53:22 | 000,002,127 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Doradca uaktualnienia systemu Windows 7.lnk
[2012-05-03 11:53:22 | 000,002,115 | ---- | C] () -- C:\Users\Public\Desktop\Doradca uaktualnienia systemu Windows 7.lnk
[2012-05-03 11:14:00 | 000,000,794 | ---- | C] () -- C:\Users\ANDROID\Desktop\Start Unlocker.lnk
[2012-05-03 10:34:16 | 000,002,793 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Detective.lnk
[2012-05-01 16:39:59 | 000,000,782 | ---- | C] () -- C:\Users\Public\Desktop\DriverEasy.lnk
[2012-04-23 13:54:43 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\srvany.exe
[2012-04-23 13:36:00 | 000,000,708 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012-04-21 07:44:50 | 000,002,212 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2012-04-17 11:48:23 | 000,000,404 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2012-04-14 15:56:22 | 000,016,384 | ---- | C] () -- C:\Program Files (x86)\uik.dat
[2012-04-14 15:55:32 | 000,000,005 | ---- | C] () -- C:\Program Files (x86)\is.dat
[2012-04-07 21:58:57 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2012-04-07 21:58:57 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2012-04-07 21:58:57 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2012-04-07 21:58:57 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2012-04-07 21:58:57 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2012-04-03 07:16:04 | 000,423,744 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2012-03-29 11:33:04 | 000,178,176 | ---- | C] () -- C:\Windows\SysWow64\msimmg32.dll
[2012-03-08 10:29:15 | 000,000,002 | ---- | C] () -- C:\ProgramData\timerxfile
[2012-03-08 10:29:15 | 000,000,002 | ---- | C] () -- C:\ProgramData\datesavefile
[2012-03-08 10:29:15 | 000,000,001 | ---- | C] () -- C:\ProgramData\varsavefile
[2012-03-08 10:28:12 | 000,004,768 | ---- | C] () -- C:\ProgramData\operaprefs.ini
[2012-02-17 10:27:56 | 000,963,912 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin
[2012-02-17 10:27:56 | 000,261,208 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin
[2012-02-17 10:24:50 | 000,058,880 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2012-02-17 09:29:28 | 013,209,600 | ---- | C] () -- C:\Windows\SysWow64\ig4icd32.dll
[2012-02-05 12:50:06 | 000,011,761 | ---- | C] () -- C:\Users\ANDROID\AppData\Local\unins000.msg
[2012-02-05 12:50:06 | 000,003,783 | ---- | C] () -- C:\Users\ANDROID\AppData\Local\unins000.dat
[2012-02-02 22:08:26 | 000,001,536 | ---- | C] () -- C:\Windows\SysWow64\IusEventLog.dll
[2012-02-01 17:25:01 | 000,000,256 | ---- | C] () -- C:\Windows\SysWow64\pool.bin
[2012-02-01 13:26:04 | 000,210,456 | ---- | C] () -- C:\Windows\SysWow64\IVIresizeW7.dll
[2012-02-01 13:26:04 | 000,206,360 | ---- | C] () -- C:\Windows\SysWow64\IVIresizeA6.dll
[2012-02-01 13:26:04 | 000,198,168 | ---- | C] () -- C:\Windows\SysWow64\IVIresizeP6.dll
[2012-02-01 13:26:04 | 000,198,168 | ---- | C] () -- C:\Windows\SysWow64\IVIresizeM6.dll
[2012-02-01 13:26:04 | 000,194,072 | ---- | C] () -- C:\Windows\SysWow64\IVIresizePX.dll
[2012-02-01 13:26:04 | 000,026,136 | ---- | C] () -- C:\Windows\SysWow64\IVIresize.dll
[2012-02-01 13:09:49 | 000,007,605 | ---- | C] () -- C:\Users\ANDROID\AppData\Local\Resmon.ResmonCfg
[2012-01-31 13:01:39 | 000,001,600 | ---- | C] () -- C:\Windows\SysWow64\drivers\TVCC2000.SYS
[2012-01-31 12:47:28 | 000,000,333 | ---- | C] () -- C:\Windows\Ulead32.ini
[2012-01-04 12:59:39 | 000,548,864 | ---- | C] () -- C:\Windows\SysWow64\JWinAPI.dll
[2011-12-30 23:03:11 | 000,338,944 | ---- | C] () -- C:\Windows\binkw32_www.przeklej.pl.dll
[2011-12-27 13:40:33 | 000,000,204 | ---- | C] () -- C:\Windows\SysWow64\secustat.dat
[2011-12-27 13:36:40 | 000,000,025 | ---- | C] () -- C:\Windows\libem.INI
[2011-12-23 13:51:37 | 000,066,856 | ---- | C] () -- C:\Windows\SysWow64\SynTPEnhPS.dll
[2011-12-23 01:31:12 | 001,647,442 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011-12-22 22:30:27 | 000,137,465 | ---- | C] () -- C:\Windows\HPHins15.dat
[2011-12-22 22:30:27 | 000,002,828 | ---- | C] () -- C:\Windows\hphmdl15.dat
[2011-12-22 14:57:13 | 000,032,768 | ---- | C] () -- C:\Windows\Packet.dll
[2011-12-19 19:27:03 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin
[2010-06-25 19:03:12 | 000,053,299 | ---- | C] () -- C:\Windows\SysWow64\pthreadVC.dll

[color=#E56717]========== LOP Check ==========[/color]

[2012-05-17 11:32:32 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\Ad-Aware Antivirus
[2012-05-14 10:14:42 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\AIMP3
[2012-04-05 13:16:14 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\Ashampoo
[2012-05-14 10:31:02 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\Auslogics
[2012-05-17 00:31:50 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\Azureus
[2012-03-08 16:14:52 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\BITS
[2012-05-15 12:10:27 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\Blitware
[2012-02-28 08:59:42 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\Canneverbe Limited
[2012-05-15 17:51:09 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\COWON
[2011-12-19 19:24:07 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\Cypress
[2012-05-03 09:40:16 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\DeviceDoctorSoftware
[2012-05-01 09:32:37 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\DMCache
[2011-12-19 17:16:56 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\Easeware
[2012-05-05 13:32:18 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\ESET
[2011-12-27 13:36:31 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\FlashGet
[2011-12-27 13:36:21 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\FlashGetBHO
[2012-05-13 12:21:22 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\FOG Downloader
[2012-01-06 13:19:39 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\GetRightToGo
[2011-12-30 15:36:36 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\HD Tune Pro
[2012-04-23 16:33:59 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\IDM
[2012-05-05 20:15:47 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\kingsoft
[2012-05-13 21:41:58 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\Maxthon3
[2012-01-06 14:08:53 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\Media Finder
[2012-04-03 10:42:48 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\MetaQuotes
[2012-04-07 14:36:16 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\MMG
[2011-12-22 14:07:20 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\Notepad++
[2012-02-28 08:59:40 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\OpenCandy
[2011-12-19 22:37:14 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\Opera
[2012-04-01 13:25:53 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\PCToolsFirewallPlus
[2012-01-05 14:44:28 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\Radmin
[2012-03-28 10:57:46 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\Raptr
[2012-02-12 15:12:10 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\Research In Motion
[2012-02-01 19:20:54 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\Schlumberger
[2011-12-23 13:54:43 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\Synaptics
[2012-05-05 20:03:32 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\TeamViewer
[2012-05-15 16:55:38 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\TestApp
[2012-04-14 12:31:01 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\TuneUp Software
[2012-02-01 13:39:34 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\Ulead Systems
[2012-02-04 16:09:18 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\VS Revo Group
[2012-03-02 20:01:57 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\wargaming.net
[2012-02-01 12:36:05 | 000,000,000 | ---D | M] -- C:\Users\ANDROID\AppData\Roaming\YoWindow
[2012-05-15 16:10:42 | 000,000,352 | ---- | M] () -- C:\Windows\Tasks\Driver Robot.job
[2012-05-13 15:29:05 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 146 bytes -> C:\ProgramData\TEMP:CB0AACC9
@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:430C6D84
@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:1AAB2E68
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:D06A4C76
@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:C31F31E6
@Alternate Data Stream - 105 bytes -> C:\ProgramData\TEMP:DFC5A2B2

< End of report >