OTL logfile created on: 2012-06-30 11:37:39 - Run 3 OTL by OldTimer - Version 3.2.53.0 Folder = C:\Users\Kuba\Desktop\Nowy folder Professional (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,50 Gb Total Physical Memory | 1,96 Gb Available Physical Memory | 55,96% Memory free 6,99 Gb Paging File | 4,96 Gb Available in Paging File | 70,93% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 443,23 Gb Total Space | 285,34 Gb Free Space | 64,38% Space Free | Partition Type: NTFS Drive D: | 488,18 Gb Total Space | 470,09 Gb Free Space | 96,29% Space Free | Partition Type: NTFS Drive E: | 7,96 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: KUBA-KOMPUTER | User Name: Kuba | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2012-06-30 11:00:35 | 000,596,992 | ---- | M] (OldTimer Tools) -- C:\Users\Kuba\Desktop\Nowy folder\OTL.exe PRC - [2012-06-29 19:27:18 | 000,214,016 | ---- | M] (Six Networks) -- C:\Program Files\SIX Projects\Six Updater\Six Launcher.exe PRC - [2012-06-29 16:47:48 | 000,529,232 | ---- | M] (Valve Corporation) -- C:\Program Files\Common Files\Steam\SteamService.exe PRC - [2012-06-29 16:40:03 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files\Steam\Steam.exe PRC - [2012-06-27 12:29:26 | 001,996,200 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe PRC - [2012-06-27 12:29:22 | 001,385,896 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe PRC - [2012-06-07 12:03:01 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2012-05-29 16:52:10 | 000,880,496 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\uTorrent\uTorrent.exe PRC - [2012-05-03 04:55:48 | 003,553,176 | ---- | M] (Xfire Inc.) -- C:\Program Files\Xfire\Xfire.exe PRC - [2012-04-04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe PRC - [2012-03-07 02:15:17 | 004,241,512 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2012-03-07 02:15:14 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2012-02-11 22:52:00 | 000,014,848 | ---- | M] () -- C:\Program Files\SpeedyDrive\mounter.exe PRC - [2012-02-07 21:17:42 | 000,065,448 | ---- | M] (Raptr, Inc) -- C:\Program Files\Raptr\raptr.exe PRC - [2012-02-07 21:17:42 | 000,043,944 | ---- | M] (Raptr, Inc) -- C:\Program Files\Raptr\raptr_im.exe PRC - [2011-10-15 10:53:00 | 001,820,480 | R--- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe PRC - [2011-10-15 10:53:00 | 001,328,960 | R--- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe PRC - [2011-10-15 01:54:40 | 000,381,248 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2011-07-04 19:45:30 | 013,374,048 | ---- | M] (GG Network S.A.) -- C:\Program Files\Gadu-Gadu 10\gg.exe PRC - [2011-01-26 10:59:34 | 003,293,184 | ---- | M] (Tonec Inc.) -- C:\Program Files\Internet Download Manager\IDMan.exe PRC - [2010-05-25 17:28:58 | 000,263,600 | ---- | M] (Tonec Inc.) -- C:\Program Files\Internet Download Manager\IEMonitor.exe PRC - [2009-07-20 11:51:52 | 000,935,208 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe PRC - [2009-07-14 03:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe PRC - [2009-07-14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009-07-14 03:14:12 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe PRC - [2009-03-30 15:00:54 | 000,221,184 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files\Brother\Brmfcmon\BrMfcMon.exe ========== Modules (No Company Name) ========== MOD - [2012-06-29 16:47:48 | 020,313,384 | ---- | M] () -- C:\Program Files\Steam\bin\libcef.dll MOD - [2012-06-29 16:47:48 | 001,099,576 | ---- | M] () -- C:\Program Files\Steam\bin\avcodec-53.dll MOD - [2012-06-29 16:47:48 | 000,895,312 | ---- | M] () -- C:\Program Files\Steam\bin\chromehtml.dll MOD - [2012-06-29 16:47:48 | 000,190,776 | ---- | M] () -- C:\Program Files\Steam\bin\avformat-53.dll MOD - [2012-06-29 16:47:48 | 000,123,192 | ---- | M] () -- C:\Program Files\Steam\bin\avutil-51.dll MOD - [2012-06-07 12:03:01 | 002,042,848 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2012-04-19 21:07:03 | 001,159,168 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\6a6f4be744ed5bc5273cbcf0fcf303e3\System.Management.ni.dll MOD - [2012-04-19 21:06:58 | 017,919,488 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\250b525aa8c17327216e102569c0d766\System.ServiceModel.ni.dll MOD - [2012-04-19 21:05:48 | 000,193,536 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ComponentMod#\7d8e51e92fede804332703770695afdb\System.ComponentModel.DataAnnotations.ni.dll MOD - [2012-04-19 21:05:35 | 000,195,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\5786f917a7b62d63ca8dd5b47aaf9610\UIAutomationTypes.ni.dll MOD - [2012-04-19 21:05:35 | 000,096,768 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\0eb3c18ec758534395684f3ca286a201\UIAutomationProvider.ni.dll MOD - [2012-04-19 21:05:34 | 000,145,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\aea1d325200e1a7b1ee7ec86fba33db4\System.Configuration.Install.ni.dll MOD - [2012-04-19 21:05:24 | 000,767,488 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\dc1f0dbf1d3ba856eccec90b62b55d79\System.Runtime.Remoting.ni.dll MOD - [2012-04-19 21:05:20 | 002,625,024 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\e9f8a45b1063d6c6a62718c88a5623d1\System.Runtime.Serialization.ni.dll MOD - [2012-04-19 21:05:18 | 000,391,680 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\8eca92a64c232f34b5b559625b022369\System.Xml.Linq.ni.dll MOD - [2012-04-19 21:05:09 | 001,819,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualBas#\e8ab3b63bade82c3522613f2b1240c0d\Microsoft.VisualBasic.ni.dll MOD - [2012-04-19 21:04:55 | 001,776,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\035910922f160d304fb834aae41f45a6\System.Xaml.ni.dll MOD - [2012-04-19 21:04:46 | 000,044,544 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Accessibility\01254caa0efc15b5cd48fb3178018701\Accessibility.ni.dll MOD - [2012-04-17 20:16:04 | 013,006,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\17e020ae92d7fab33bcc1c98b25019d0\System.Windows.Forms.ni.dll MOD - [2012-04-17 20:15:57 | 001,651,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\dd57bc19f5807c6dbe8f88d4a23277f6\System.Drawing.ni.dll MOD - [2012-04-17 20:15:48 | 006,754,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data\92cccedc7cda413ff6fc6492cb256b58\System.Data.ni.dll MOD - [2012-04-17 20:15:42 | 000,450,048 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\3555f5f74c56fa92c0ab7a635af91bfa\PresentationFramework.Aero.ni.dll MOD - [2012-04-17 20:15:41 | 017,629,184 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\7f91eecda3ff7ce478146b6458580c98\PresentationFramework.ni.dll MOD - [2012-04-17 20:15:28 | 011,057,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\3963e9ce8d44f50e8367e92a8e3e42e6\PresentationCore.ni.dll MOD - [2012-04-17 20:15:20 | 003,779,072 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\d17606e813f01376bd0def23726ecc62\WindowsBase.ni.dll MOD - [2012-04-17 20:15:16 | 000,144,896 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\b07f0d26a34ad53fc369248f289d1126\System.Numerics.ni.dll MOD - [2012-04-17 20:15:12 | 005,571,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\e997d0200c25f7db6bd32313d50b729d\System.Xml.ni.dll MOD - [2012-04-17 20:15:08 | 000,973,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\ac18c2dcd06bd2a0589bac94ccae5716\System.Configuration.ni.dll MOD - [2012-04-17 20:15:05 | 007,025,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\713647b987b140a17e3c4ffe4c721f85\System.Core.ni.dll MOD - [2012-04-17 20:14:56 | 009,000,960 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\964da027ebca3b263a05cadb8eaa20a3\System.ni.dll MOD - [2012-04-17 20:14:51 | 014,415,872 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\246f1a5abb686b9dcdf22d3505b08cea\mscorlib.ni.dll MOD - [2012-03-20 21:51:59 | 008,527,520 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32.dll MOD - [2011-11-22 02:47:46 | 000,468,992 | ---- | M] () -- C:\Program Files\Raptr\PyQt4.QtNetwork.pyd MOD - [2011-11-22 02:47:44 | 001,609,728 | ---- | M] () -- C:\Program Files\Raptr\PyQt4.QtCore.pyd MOD - [2011-11-22 02:47:44 | 000,302,592 | ---- | M] () -- C:\Program Files\Raptr\PyQt4.QtWebKit.pyd MOD - [2011-11-22 02:47:42 | 005,694,976 | ---- | M] () -- C:\Program Files\Raptr\PyQt4.QtGui.pyd MOD - [2011-11-22 02:46:28 | 000,067,072 | ---- | M] () -- C:\Program Files\Raptr\sip.pyd MOD - [2011-10-24 20:50:38 | 000,079,360 | ---- | M] () -- C:\Program Files\Raptr\easyhook32.dll MOD - [2011-10-24 20:49:56 | 002,717,595 | ---- | M] () -- C:\Program Files\Raptr\heliotrope._purple.pyd MOD - [2011-10-15 01:54:26 | 000,265,536 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll MOD - [2011-09-09 01:47:40 | 001,183,699 | ---- | M] () -- C:\Program Files\Raptr\liboscar.dll MOD - [2011-09-09 01:47:36 | 001,640,221 | ---- | M] () -- C:\Program Files\Raptr\libjabber.dll MOD - [2011-09-09 01:47:32 | 001,052,194 | ---- | M] () -- C:\Program Files\Raptr\libymsg.dll MOD - [2011-09-09 01:47:22 | 000,495,680 | ---- | M] () -- C:\Program Files\Raptr\plugins\libaim.dll MOD - [2011-09-09 01:47:22 | 000,483,306 | ---- | M] () -- C:\Program Files\Raptr\plugins\libicq.dll MOD - [2011-09-09 01:47:16 | 000,655,356 | ---- | M] () -- C:\Program Files\Raptr\plugins\libirc.dll MOD - [2011-09-09 01:47:16 | 000,603,326 | ---- | M] () -- C:\Program Files\Raptr\plugins\ssl-nss.dll MOD - [2011-09-09 01:47:14 | 000,497,782 | ---- | M] () -- C:\Program Files\Raptr\plugins\libyahoojp.dll MOD - [2011-09-09 01:47:14 | 000,474,199 | ---- | M] () -- C:\Program Files\Raptr\plugins\ssl.dll MOD - [2011-09-09 01:47:10 | 001,306,387 | ---- | M] () -- C:\Program Files\Raptr\plugins\libmsn.dll MOD - [2011-09-09 01:47:04 | 000,565,461 | ---- | M] () -- C:\Program Files\Raptr\plugins\libxmpp.dll MOD - [2011-09-09 01:46:56 | 000,506,276 | ---- | M] () -- C:\Program Files\Raptr\plugins\libyahoo.dll MOD - [2011-07-04 19:46:20 | 000,217,696 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\gglog.dll MOD - [2011-07-04 19:46:18 | 000,123,488 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggipcradioproxy.dll MOD - [2011-07-04 19:46:16 | 000,017,504 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggipc.dll MOD - [2011-07-04 19:46:12 | 000,027,744 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggcrypto.dll MOD - [2011-07-04 19:46:10 | 000,356,960 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggcommon.dll MOD - [2011-04-16 05:04:30 | 014,749,696 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtWebKit4.dll MOD - [2011-02-17 11:00:28 | 001,781,760 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtScript4.dll MOD - [2011-02-17 11:00:28 | 000,393,216 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtXml4.dll MOD - [2011-02-17 11:00:28 | 000,327,680 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtSvg4.dll MOD - [2011-02-17 11:00:26 | 001,044,480 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtNetwork4.dll MOD - [2011-02-17 11:00:24 | 009,097,216 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtGui4.dll MOD - [2011-02-17 11:00:24 | 002,560,000 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtCore4.dll MOD - [2011-02-17 10:59:40 | 000,311,296 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qtiff4.dll MOD - [2011-02-17 10:59:40 | 000,274,432 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qmng4.dll MOD - [2011-02-17 10:59:40 | 000,143,360 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qjpeg4.dll MOD - [2011-02-17 10:59:40 | 000,027,648 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qgif4.dll MOD - [2011-02-17 10:59:40 | 000,018,944 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qsvg4.dll MOD - [2011-02-17 10:59:32 | 000,059,904 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\zlib1.dll MOD - [2011-02-15 20:17:28 | 001,213,633 | ---- | M] () -- C:\Program Files\Raptr\libxml2-2.dll MOD - [2011-02-15 20:17:28 | 000,417,501 | ---- | M] () -- C:\Program Files\Raptr\sqlite3.dll MOD - [2010-11-23 01:06:22 | 000,055,808 | ---- | M] () -- C:\Program Files\Raptr\zlib1.dll MOD - [2010-11-23 00:57:36 | 002,042,368 | ---- | M] () -- C:\Program Files\Raptr\libtorrent.pyd MOD - [2010-11-23 00:57:34 | 000,167,936 | ---- | M] () -- C:\Program Files\Raptr\win32gui.pyd MOD - [2010-11-23 00:57:34 | 000,111,104 | ---- | M] () -- C:\Program Files\Raptr\win32file.pyd MOD - [2010-11-23 00:57:34 | 000,096,256 | ---- | M] () -- C:\Program Files\Raptr\win32api.pyd MOD - [2010-11-23 00:57:34 | 000,036,352 | ---- | M] () -- C:\Program Files\Raptr\win32process.pyd MOD - [2010-11-23 00:57:18 | 000,141,312 | ---- | M] () -- C:\Program Files\Raptr\gobject._gobject.pyd MOD - [2010-11-23 00:57:06 | 000,263,168 | ---- | M] () -- C:\Program Files\Raptr\win32com.shell.shell.pyd MOD - [2010-11-23 00:56:56 | 000,354,304 | ---- | M] () -- C:\Program Files\Raptr\pythoncom26.dll MOD - [2010-11-23 00:56:56 | 000,110,592 | ---- | M] () -- C:\Program Files\Raptr\pywintypes26.dll MOD - [2010-11-23 00:56:26 | 000,324,608 | ---- | M] () -- C:\Program Files\Raptr\PIL._imaging.pyd MOD - [2010-11-23 00:56:02 | 000,805,376 | ---- | M] () -- C:\Program Files\Raptr\_ssl.pyd MOD - [2010-11-23 00:56:02 | 000,583,680 | ---- | M] () -- C:\Program Files\Raptr\unicodedata.pyd MOD - [2010-11-23 00:56:02 | 000,356,864 | ---- | M] () -- C:\Program Files\Raptr\_hashlib.pyd MOD - [2010-11-23 00:56:02 | 000,127,488 | ---- | M] () -- C:\Program Files\Raptr\pyexpat.pyd MOD - [2010-11-23 00:56:02 | 000,087,040 | ---- | M] () -- C:\Program Files\Raptr\_ctypes.pyd MOD - [2010-11-23 00:56:02 | 000,044,544 | ---- | M] () -- C:\Program Files\Raptr\_sqlite3.pyd MOD - [2010-11-23 00:56:02 | 000,043,008 | ---- | M] () -- C:\Program Files\Raptr\_socket.pyd MOD - [2010-11-23 00:56:02 | 000,009,216 | ---- | M] () -- C:\Program Files\Raptr\winsound.pyd MOD - [2009-02-27 16:38:20 | 000,139,264 | R--- | M] () -- C:\Program Files\Brother\BrUtilities\BrLogAPI.dll MOD - [2007-05-05 12:40:34 | 000,128,512 | ---- | M] () -- C:\Program Files\WinRar\RarExt.dll ========== Win32 Services (SafeList) ========== SRV - File not found [Disabled | Unknown] -- C:\Program Files\AVAST Software\Avast\afwServ.exe -- (avast! Firewall) SRV - [2012-06-29 18:50:15 | 000,318,632 | ---- | M] (Protection Technology) [Auto | Stopped] -- C:\Windows\System32\appdrvrem01.exe -- (appdrvrem01) Application Driver Auto Removal Service (01) SRV - [2012-06-29 16:47:48 | 000,529,232 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2012-06-27 12:29:22 | 001,385,896 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2012-06-07 12:03:01 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012-05-14 21:27:00 | 004,336,248 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\System32\GameMon.des -- (npggsvc) SRV - [2012-04-04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2012-03-07 02:15:14 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV - [2012-02-11 22:52:00 | 000,014,848 | ---- | M] () [Auto | Running] -- C:\Program Files\SpeedyDrive\mounter.exe -- (DokanMounter) SRV - [2011-10-15 10:53:00 | 002,253,120 | R--- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService) SRV - [2011-10-15 01:54:40 | 000,381,248 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2009-07-20 11:51:52 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0) SRV - [2009-07-14 03:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc) SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009-07-14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) SRV - [2009-07-14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) ========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand | Unknown] -- C:\Users\Kuba\AppData\Local\Temp\aftcaaog.sys -- (aftcaaog) DRV - [2012-06-29 18:50:16 | 002,279,808 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\Windows\System32\drivers\appdrv01.sys -- (appdrv01) Application Driver (01) DRV - [2012-06-06 15:30:56 | 000,007,936 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\IPlayUnlimited\Cabal\Byakko.K32 -- (ByakkoDriver) DRV - [2012-04-04 15:56:40 | 000,022,344 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector) DRV - [2012-03-20 22:14:57 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV - [2012-03-07 02:03:51 | 000,612,184 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx) DRV - [2012-03-07 02:03:38 | 000,337,880 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP) DRV - [2012-03-07 02:02:43 | 000,024,408 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswKbd.sys -- (aswKbd) DRV - [2012-03-07 02:02:14 | 000,044,376 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr2.sys -- (aswRdr) DRV - [2012-03-07 02:01:53 | 000,053,848 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2012-03-07 02:01:48 | 000,057,688 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt) DRV - [2012-03-07 02:01:30 | 000,020,696 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2012-02-11 22:52:00 | 000,095,744 | ---- | M] (Windows ® Win 7 DDK provider) [File_System | Auto | Running] -- C:\Windows\System32\drivers\dokan.sys -- (Dokan) DRV - [2011-10-15 10:53:00 | 010,327,360 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2011-07-08 01:21:28 | 000,139,880 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA) DRV - [2011-01-25 12:40:06 | 000,085,768 | ---- | M] (Tonec Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\idmwfp.sys -- (IDMWFP) DRV - [2010-05-20 09:30:59 | 000,014,392 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\AtiPcie.sys -- (AtiPcie) AMD PCI Express (3GIO) DRV - [2009-07-17 05:36:30 | 000,013,216 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ASACPI.sys -- (MTsensor) DRV - [2009-07-14 03:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus) DRV - [2009-07-14 03:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt) DRV - [2009-07-14 03:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc) DRV - [2009-07-14 01:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap) DRV - [2009-07-14 01:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID) DRV - [2009-03-18 17:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3328382339-3973039024-2339690842-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-21-3328382339-3973039024-2339690842-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-3328382339-3973039024-2339690842-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE8SRC IE - HKU\S-1-5-21-3328382339-3973039024-2339690842-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3328382339-3973039024-2339690842-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "about:blank" FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.118.0: C:\Program Files\Battlelog Web Plugins\1.118.0\npesnlaunch.dll File not found FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.122.0: C:\Program Files\Battlelog Web Plugins\1.122.0\npesnlaunch.dll (ESN Social Software AB) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\@Webzen.com/NPBrowserExt: C:\Program Files\WEBZEN\BrowserExtension\NPWZCmnCtrl.dll (WEBZEN) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Kuba\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Kuba\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-03-23 21:14:54 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-06-20 15:02:38 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\Kuba\AppData\Roaming\IDM\idmmzcc3 [2012-05-28 20:13:09 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 13.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-06-20 15:02:38 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 13.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\Kuba\AppData\Roaming\IDM\idmmzcc3 [2012-05-28 20:13:09 | 000,000,000 | ---D | M] [2012-03-20 21:30:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kuba\AppData\Roaming\mozilla\Extensions [2012-05-29 16:44:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kuba\AppData\Roaming\mozilla\Firefox\Profiles\xe7dapnt.default\extensions [2012-03-20 21:29:49 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012-06-07 12:03:01 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2012-02-16 13:12:03 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-02-16 13:12:03 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-02-16 13:12:03 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-02-16 13:12:03 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-02-16 13:12:03 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-02-16 13:12:03 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml ========== Chrome ========== CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\ CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\ CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1426_0\ CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0\ CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\ CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.14_0\ CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1426_0\ CHR - Extension: No name found = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.3_0\ O1 HOSTS File: ([2012-03-20 18:29:27 | 000,000,921 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 genuine.microsoft.com O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com O1 - Hosts: 127.0.0.1 sls.microsoft.com O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.) O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation) O2 - BHO: (VideoFileDownload) - {82EA3E77-7BD2-4744-A8F2-670770767EC5} - C:\Program Files\OApps\bho_project.dll (VideoFileDownload) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation) O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKU\S-1-5-21-3328382339-3973039024-2339690842-1000..\Run: [Akamai NetSession Interface] "C:\Users\Kuba\AppData\Local\Akamai\netsession_win.exe" File not found O4 - HKU\S-1-5-21-3328382339-3973039024-2339690842-1000..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKU\S-1-5-21-3328382339-3973039024-2339690842-1000..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.) O4 - HKU\S-1-5-21-3328382339-3973039024-2339690842-1000..\Run: [Raptr] C:\Program Files\Raptr\raptrstub.exe (Raptr, Inc) O4 - HKU\S-1-5-21-3328382339-3973039024-2339690842-1000..\Run: [Steam] C:\Program Files\Steam\steam.exe (Valve Corporation) O4 - HKU\S-1-5-21-3328382339-3973039024-2339690842-1000..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - Startup: C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk = C:\Program Files\Xfire\Xfire.exe (Xfire Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8 - Extra context menu item: Ściągnij przez IDM - C:\Program Files\Internet Download Manager\IEExt.htm () O8 - Extra context menu item: Ściągnij wszystkie linki przez IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm () O8 - Extra context menu item: Ściągnij zawartość wideo FLV przez IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm () O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.4.1) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.4.1) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{94D41CAA-A7A4-4C6C-B18C-C7A0F34F919A}: DhcpNameServer = 192.168.1.254 O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2008-09-08 19:13:26 | 000,000,058 | R--- | M] () - E:\autorun.inf -- [ CDFS ] O33 - MountPoints2\{0cf8f640-ae3a-11e1-a8a2-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{0cf8f640-ae3a-11e1-a8a2-806e6f6e6963}\Shell\AutoRun\command - "" = E:\FalloutLauncher.exe -- [2012-04-27 15:14:50 | 001,593,344 | R--- | M] (Bethesda Softworks) O33 - MountPoints2\{7290ca4a-72c6-11e1-a50b-5404a6849869}\Shell - "" = AutoRun O33 - MountPoints2\{7290ca4a-72c6-11e1-a50b-5404a6849869}\Shell\AutoRun\command - "" = L:\autoplay.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2012-06-30 11:38:51 | 000,000,000 | ---D | C] -- C:\Users\Kuba\Desktop\Nowy folder (6) [2012-06-30 11:18:25 | 016,872,089 | ---- | C] (Oleg N. Scherbakov) -- C:\Users\Kuba\Desktop\Six Updater v2.9.7pre1 setup.exe [2012-06-30 11:14:04 | 000,000,000 | ---D | C] -- C:\Users\Kuba\Desktop\Nowy folder (3) [2012-06-30 11:01:37 | 000,000,000 | ---D | C] -- C:\_OTL [2012-06-30 11:00:43 | 000,000,000 | ---D | C] -- C:\Users\Kuba\Desktop\Nowy folder [2012-06-30 09:33:29 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Local\SIX_Projects [2012-06-30 09:31:09 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\six-updater [2012-06-30 09:31:08 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\six-zsync [2012-06-30 09:30:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Six Projects [2012-06-30 09:30:06 | 000,000,000 | ---D | C] -- C:\Program Files\SIX Projects [2012-06-30 09:26:10 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Local\ArmA 2 [2012-06-30 09:26:07 | 000,000,000 | ---D | C] -- C:\Program Files\Bohemia Interactive [2012-06-30 09:02:37 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Local\ArmA 2 OA [2012-06-30 09:02:37 | 000,000,000 | ---D | C] -- C:\Users\Kuba\Documents\ArmA 2 [2012-06-30 09:02:36 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive [2012-06-30 09:02:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive [2012-06-30 00:28:17 | 000,000,000 | ---D | C] -- C:\Users\Kuba\Doctor Web [2012-06-29 23:23:39 | 000,000,000 | ---D | C] -- C:\HarddiskVolumeShadowCopy7 [2012-06-29 23:21:21 | 000,000,000 | ---D | C] -- C:\HarddiskVolumeShadowCopy12 [2012-06-29 23:20:38 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Restore Explorer [2012-06-29 23:20:38 | 000,000,000 | ---D | C] -- C:\Program Files\System Restore Explorer [2012-06-29 18:50:16 | 002,279,808 | ---- | C] (Protection Technology) -- C:\Windows\System32\drivers\appdrv01.sys [2012-06-29 18:50:15 | 000,318,632 | ---- | C] (Protection Technology) -- C:\Windows\System32\appdrvrem01.exe [2012-06-29 17:04:14 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Local\Fallout3 [2012-06-29 16:53:23 | 000,000,000 | ---D | C] -- C:\Program Files\Bethesda Softworks [2012-06-29 16:39:51 | 000,000,000 | ---D | C] -- C:\Program Files\Steam [2012-06-29 16:30:08 | 000,026,176 | -H-- | C] (LogMeIn, Inc.) -- C:\Windows\System32\hamachi.sys [2012-06-29 16:30:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi [2012-06-29 16:27:49 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2012-06-28 19:52:40 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Local\ESET [2012-06-28 19:40:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET [2012-06-28 19:40:04 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET [2012-06-28 19:40:04 | 000,000,000 | ---D | C] -- C:\Program Files\ESET [2012-06-28 19:31:17 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Local\G DATA [2012-06-28 19:27:27 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\Malwarebytes [2012-06-28 19:27:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2012-06-28 19:27:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2012-06-28 19:27:14 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2012-06-28 19:27:14 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2012-06-28 18:08:14 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\.minecraft [2012-06-28 17:25:05 | 000,000,000 | ---D | C] -- C:\Program Files\Battlelog Web Plugins [2012-06-28 16:15:18 | 000,000,000 | ---D | C] -- C:\Users\Kuba\Desktop\SilversRoaDv3 [2012-06-28 11:46:32 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Terra Nova mod [2012-06-28 11:09:32 | 000,000,000 | ---D | C] -- C:\Program Files\OApps [2012-06-28 11:09:31 | 000,000,000 | ---D | C] -- C:\Program Files\TorrentSearch [2012-06-28 11:09:21 | 000,000,000 | ---D | C] -- C:\Program Files\intellidownload [2012-06-26 15:42:17 | 000,000,000 | ---D | C] -- C:\Users\Kuba\Desktop\Nowy folder (4) [2012-06-24 21:08:16 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ [2012-06-24 21:08:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++ [2012-06-24 21:08:14 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\Notepad++ [2012-06-24 21:08:14 | 000,000,000 | ---D | C] -- C:\Program Files\Notepad++ [2012-06-21 19:43:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother [2012-06-21 19:43:22 | 000,176,128 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\System32\BroSNMP.dll [2012-06-21 19:43:22 | 000,004,608 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\BrDctF2L.dll [2012-06-21 19:43:21 | 001,534,464 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\System32\BrWia09b.dll [2012-06-21 19:43:21 | 000,073,728 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\BrDctF2.dll [2012-06-21 19:43:21 | 000,053,760 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\System32\BrUsi09a.dll [2012-06-21 19:43:21 | 000,012,288 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\System32\BrDctF2S.dll [2012-06-21 19:43:17 | 000,000,000 | ---D | C] -- C:\Program Files\Brother [2012-06-21 19:43:16 | 000,167,936 | ---- | C] (brother) -- C:\Windows\System32\NSSearch.dll [2012-06-21 19:42:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Brother [2012-06-21 19:42:39 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\InstallShield [2012-06-20 14:40:26 | 000,000,000 | ---D | C] -- C:\Users\Kuba\Desktop\Nowy folder (5) [2012-06-17 17:59:02 | 000,000,000 | ---D | C] -- C:\Windows\Minidump [2012-06-17 16:54:56 | 000,000,000 | ---D | C] -- C:\Users\Kuba\DoctorWeb [2012-06-16 22:31:41 | 004,336,248 | ---- | C] (INCA Internet Co., Ltd.) -- C:\Windows\System32\GameMon.des [2012-06-16 22:30:14 | 000,004,682 | ---- | C] (INCA Internet Co., Ltd.) -- C:\Windows\System32\npptNT2.sys [2012-06-16 22:29:31 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\INCA Shared [2012-06-16 11:24:51 | 000,000,000 | ---D | C] -- C:\Users\Kuba\Desktop\Nowy folder (2) [2012-06-15 18:23:32 | 000,000,000 | ---D | C] -- C:\Hybrid Theory [2012-06-12 21:53:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight [2012-06-12 21:53:34 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight [2012-06-10 02:50:22 | 000,000,000 | ---D | C] -- C:\Nowy folder [2012-06-09 12:54:48 | 000,000,000 | ---D | C] -- C:\Program Files\SilkroadR [2012-06-09 08:59:43 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java [2012-06-09 08:59:28 | 000,000,000 | ---D | C] -- C:\Program Files\Oracle [2012-06-09 08:58:57 | 000,772,504 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll [2012-06-09 08:40:02 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\edxLabs [2012-06-08 17:52:48 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\Xfire [2012-06-08 17:52:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Xfire [2012-06-08 17:52:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xfire [2012-06-08 17:52:45 | 000,000,000 | ---D | C] -- C:\Program Files\Xfire [2012-06-08 10:52:10 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Local\Diagnostics [2012-06-08 03:43:23 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Joymax [2012-06-06 23:39:14 | 000,230,920 | ---- | C] (WEBZEN, INC.) -- C:\Windows\System32\EPWZCmnCtrl.dll [2012-06-06 23:39:02 | 000,000,000 | ---D | C] -- C:\ProgramData\WEBZEN [2012-06-06 23:34:29 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard [2012-06-06 23:34:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\C9 [2012-06-06 23:26:21 | 000,000,000 | ---D | C] -- C:\Program Files\WEBZEN [2012-06-05 22:25:17 | 000,022,016 | ---- | C] (Unlock Studios) -- C:\Byakko.exe [2012-06-05 20:55:29 | 000,000,000 | ---D | C] -- C:\Program Files\IPlayUnlimited [2012-06-03 21:12:24 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\FOG Downloader [2012-06-03 14:05:14 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft [2012-06-03 14:03:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows - LIVE [2012-06-03 14:03:07 | 000,000,000 | ---D | C] -- C:\Windows\System32\xlive [2012-06-03 14:03:06 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Games for Windows - LIVE [2012-06-03 14:02:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zuxxez [2012-06-03 14:00:27 | 000,000,000 | ---D | C] -- C:\Program Files\Zuxxez [2012-06-02 13:55:50 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\Ubisoft ========== Files - Modified Within 30 Days ========== [2012-06-30 11:20:11 | 000,001,648 | ---- | M] () -- C:\Users\Kuba\Desktop\Six Launcher — skrót.lnk [2012-06-30 11:18:51 | 016,872,089 | ---- | M] (Oleg N. Scherbakov) -- C:\Users\Kuba\Desktop\Six Updater v2.9.7pre1 setup.exe [2012-06-30 11:17:06 | 000,737,242 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2012-06-30 11:17:06 | 000,651,450 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2012-06-30 11:17:06 | 000,153,930 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2012-06-30 11:17:06 | 000,120,382 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2012-06-30 11:14:01 | 000,001,054 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3328382339-3973039024-2339690842-1000UA.job [2012-06-30 11:10:57 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-06-30 11:10:52 | 2817,089,536 | -HS- | M] () -- C:\hiberfil.sys [2012-06-30 11:10:16 | 000,009,792 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012-06-30 11:10:16 | 000,009,792 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012-06-30 09:10:52 | 008,363,095 | ---- | M] () -- C:\Users\Kuba\Desktop\ARMA2_OA_Build_94364.zip [2012-06-30 01:00:38 | 000,001,300 | ---- | M] () -- C:\Users\Kuba\Desktop\Steam.exe.lnk [2012-06-30 00:27:48 | 092,052,048 | ---- | M] () -- C:\Users\Kuba\Desktop\4v7wtssv.exe [2012-06-30 00:24:12 | 000,609,365 | ---- | M] () -- C:\Users\Kuba\Desktop\adwcleaner.exe [2012-06-29 23:21:03 | 000,000,736 | RHS- | M] () -- C:\ProgramData\ntuser.pol [2012-06-29 22:01:28 | 000,000,215 | ---- | M] () -- C:\Users\Kuba\Desktop\ARMA 2.url [2012-06-29 22:01:28 | 000,000,215 | ---- | M] () -- C:\Users\Kuba\Desktop\ARMA 2 Operation Arrowhead.url [2012-06-29 20:59:53 | 000,001,741 | ---- | M] () -- C:\Users\Public\Desktop\Minecraft.lnk [2012-06-29 19:10:48 | 000,001,656 | ---- | M] () -- C:\Users\Kuba\Desktop\Fallout3.lnk [2012-06-29 18:50:16 | 002,279,808 | ---- | M] (Protection Technology) -- C:\Windows\System32\drivers\appdrv01.sys [2012-06-29 18:50:15 | 000,318,632 | ---- | M] (Protection Technology) -- C:\Windows\System32\appdrvrem01.exe [2012-06-28 16:20:04 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3328382339-3973039024-2339690842-1000Core.job [2012-06-28 16:11:14 | 1527,742,285 | ---- | M] () -- C:\Users\Kuba\Desktop\SilversRoaDv3.rar [2012-06-27 13:54:46 | 000,001,029 | ---- | M] () -- C:\Users\Kuba\Desktop\Europa Universalis III - Mody.lnk [2012-06-26 23:39:36 | 000,000,606 | ---- | M] () -- C:\Users\Kuba\Desktop\Europa Universalis III.lnk [2012-06-21 19:43:52 | 000,000,050 | ---- | M] () -- C:\Windows\System32\bridf07a.dat [2012-06-21 19:43:51 | 000,000,404 | ---- | M] () -- C:\Windows\BRWMARK.INI [2012-06-21 19:43:51 | 000,000,027 | ---- | M] () -- C:\Windows\BRPP2KA.INI [2012-06-20 20:57:31 | 000,001,006 | ---- | M] () -- C:\Users\Public\Desktop\OpenFM.lnk [2012-06-20 20:57:31 | 000,000,977 | ---- | M] () -- C:\Users\Public\Desktop\Gadu-Gadu 10.lnk [2012-06-20 15:04:40 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt [2012-06-20 15:04:40 | 000,001,922 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk [2012-06-17 16:45:41 | 000,001,448 | ---- | M] () -- C:\Users\Kuba\Desktop\StarCraft II.lnk [2012-06-17 13:12:57 | 000,075,776 | ---- | M] () -- C:\Users\Kuba\Desktop\jeefogui.com [2012-06-15 18:23:09 | 059,411,755 | ---- | M] () -- C:\LP.HybridTheory by PLOPEN.rar [2012-06-14 19:49:58 | 000,000,080 | ---- | M] () -- C:\Users\Kuba\AppData\Roaming\mBot.ini [2012-06-14 14:40:56 | 000,000,854 | ---- | M] () -- C:\Users\Kuba\.recently-used.xbel [2012-06-12 16:15:55 | 000,002,358 | ---- | M] () -- C:\Users\Kuba\Desktop\Google Chrome.lnk [2012-06-09 09:23:06 | 000,001,233 | ---- | M] () -- C:\Windows\ATACK.exe [2012-06-09 08:58:46 | 000,174,024 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe [2012-06-09 08:58:46 | 000,174,024 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\java.exe [2012-06-08 17:52:47 | 000,000,961 | ---- | M] () -- C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk [2012-06-08 17:52:47 | 000,000,925 | ---- | M] () -- C:\Users\Public\Desktop\Xfire.lnk [2012-06-08 10:43:04 | 000,237,438 | ---- | M] () -- C:\Users\Kuba\Documents\cc_20120608_104242.reg [2012-06-06 23:34:15 | 000,000,103 | ---- | M] () -- C:\Users\Kuba\Desktop\C9.url [2012-06-06 22:42:10 | 000,140,800 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2012-06-06 22:41:54 | 000,283,304 | ---- | M] () -- C:\Windows\System32\PnkBstrB.xtr [2012-06-06 22:41:18 | 000,280,904 | ---- | M] () -- C:\Windows\System32\PnkBstrB.ex0 [2012-06-05 22:26:48 | 000,007,936 | ---- | M] () -- C:\Byakko.K32 [2012-06-05 22:26:45 | 000,022,016 | ---- | M] (Unlock Studios) -- C:\Byakko.exe [2012-06-03 13:47:30 | 000,001,447 | ---- | M] () -- C:\Users\Kuba\Desktop\Daemon Tools.lnk [2012-06-02 14:18:47 | 000,000,828 | ---- | M] () -- C:\Users\Kuba\Desktop\Anno 1404.lnk ========== Files Created - No Company Name ========== [2012-06-30 11:20:11 | 000,001,648 | ---- | C] () -- C:\Users\Kuba\Desktop\Six Launcher — skrót.lnk [2012-06-30 09:10:27 | 008,363,095 | ---- | C] () -- C:\Users\Kuba\Desktop\ARMA2_OA_Build_94364.zip [2012-06-30 01:00:38 | 000,001,300 | ---- | C] () -- C:\Users\Kuba\Desktop\Steam.exe.lnk [2012-06-30 00:25:09 | 092,052,048 | ---- | C] () -- C:\Users\Kuba\Desktop\4v7wtssv.exe [2012-06-30 00:24:09 | 000,609,365 | ---- | C] () -- C:\Users\Kuba\Desktop\adwcleaner.exe [2012-06-29 22:01:28 | 000,000,215 | ---- | C] () -- C:\Users\Kuba\Desktop\ARMA 2.url [2012-06-29 22:01:28 | 000,000,215 | ---- | C] () -- C:\Users\Kuba\Desktop\ARMA 2 Operation Arrowhead.url [2012-06-29 19:10:48 | 000,001,656 | ---- | C] () -- C:\Users\Kuba\Desktop\Fallout3.lnk [2012-06-28 18:08:15 | 000,001,741 | ---- | C] () -- C:\Users\Public\Desktop\Minecraft.lnk [2012-06-28 15:35:38 | 1527,742,285 | ---- | C] () -- C:\Users\Kuba\Desktop\SilversRoaDv3.rar [2012-06-27 13:54:46 | 000,001,029 | ---- | C] () -- C:\Users\Kuba\Desktop\Europa Universalis III - Mody.lnk [2012-06-26 23:39:36 | 000,000,606 | ---- | C] () -- C:\Users\Kuba\Desktop\Europa Universalis III.lnk [2012-06-21 19:43:52 | 000,000,050 | ---- | C] () -- C:\Windows\System32\bridf07a.dat [2012-06-21 19:43:51 | 000,000,404 | ---- | C] () -- C:\Windows\BRWMARK.INI [2012-06-21 19:43:51 | 000,000,027 | ---- | C] () -- C:\Windows\BRPP2KA.INI [2012-06-20 20:57:31 | 000,001,006 | ---- | C] () -- C:\Users\Public\Desktop\OpenFM.lnk [2012-06-20 20:57:31 | 000,000,977 | ---- | C] () -- C:\Users\Public\Desktop\Gadu-Gadu 10.lnk [2012-06-20 20:56:54 | 000,000,973 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gadu-Gadu 10.lnk [2012-06-20 15:04:40 | 000,001,922 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk [2012-06-17 16:45:41 | 000,001,448 | ---- | C] () -- C:\Users\Kuba\Desktop\StarCraft II.lnk [2012-06-17 13:12:40 | 000,075,776 | ---- | C] () -- C:\Users\Kuba\Desktop\jeefogui.com [2012-06-16 22:30:13 | 000,005,174 | ---- | C] () -- C:\Windows\System32\nppt9x.vxd [2012-06-15 18:21:53 | 059,411,755 | ---- | C] () -- C:\LP.HybridTheory by PLOPEN.rar [2012-06-14 19:42:27 | 000,000,080 | ---- | C] () -- C:\Users\Kuba\AppData\Roaming\mBot.ini [2012-06-14 14:40:56 | 000,000,854 | ---- | C] () -- C:\Users\Kuba\.recently-used.xbel [2012-06-09 09:00:03 | 000,001,233 | ---- | C] () -- C:\Windows\ATACK.exe [2012-06-08 17:52:47 | 000,000,961 | ---- | C] () -- C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk [2012-06-08 17:52:47 | 000,000,925 | ---- | C] () -- C:\Users\Public\Desktop\Xfire.lnk [2012-06-08 10:42:45 | 000,237,438 | ---- | C] () -- C:\Users\Kuba\Documents\cc_20120608_104242.reg [2012-06-08 10:30:54 | 000,000,736 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2012-06-06 23:34:15 | 000,000,103 | ---- | C] () -- C:\Users\Kuba\Desktop\C9.url [2012-06-05 22:25:21 | 000,007,936 | ---- | C] () -- C:\Byakko.K32 [2012-06-03 13:47:30 | 000,001,447 | ---- | C] () -- C:\Users\Kuba\Desktop\Daemon Tools.lnk [2012-06-02 14:18:47 | 000,000,828 | ---- | C] () -- C:\Users\Kuba\Desktop\Anno 1404.lnk [2012-05-04 14:55:55 | 000,140,800 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2012-05-04 14:55:50 | 000,138,056 | ---- | C] () -- C:\Users\Kuba\AppData\Roaming\PnkBstrK.sys [2012-05-04 14:55:10 | 000,283,304 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe [2012-05-04 14:55:04 | 000,076,888 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe [2012-05-03 04:55:52 | 000,042,392 | ---- | C] () -- C:\Windows\System32\xfcodec.dll [2012-03-30 04:20:39 | 000,465,318 | ---- | C] () -- C:\Program Files\jop 1.exe [2012-03-20 23:32:12 | 000,000,017 | ---- | C] () -- C:\Users\Kuba\AppData\Local\resmon.resmoncfg [2012-03-20 18:33:06 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll [2012-03-20 18:25:08 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini [2012-03-20 18:25:03 | 000,038,664 | ---- | C] () -- C:\Windows\Ascd_tmp.ini [2012-02-11 22:52:00 | 000,035,840 | ---- | C] () -- C:\Windows\System32\dokan.dll [2011-10-15 01:54:52 | 000,321,856 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe ========== LOP Check ========== [2012-06-29 20:59:52 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\.minecraft [2012-05-26 17:44:37 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Azureus [2012-03-22 20:38:21 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Canneverbe Limited [2012-06-26 16:12:37 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\DAEMON Tools Lite [2012-06-30 11:09:56 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\DMCache [2012-06-16 21:41:39 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\edxLabs [2012-06-03 21:15:02 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\FOG Downloader [2012-06-30 00:55:28 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\foobar2000 [2012-03-20 22:19:48 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Gadu-Gadu 10 [2012-04-22 19:57:56 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\GameRanger [2012-06-14 14:40:56 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\gtk-2.0 [2012-06-21 19:41:47 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\IDM [2012-03-21 00:41:47 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\LolClient [2012-05-18 15:08:14 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\LolClient2 [2012-06-24 21:40:57 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Notepad++ [2012-04-21 14:55:36 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Opera [2012-05-04 14:26:24 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Origin [2012-06-30 11:11:46 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Raptr [2012-05-26 12:22:55 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\runic games [2012-06-30 09:36:07 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\six-updater [2012-06-30 09:31:08 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\six-zsync [2012-06-02 13:55:50 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Ubisoft [2012-06-30 11:42:08 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\uTorrent [2012-04-03 18:12:07 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\wargaming.net [2012-06-12 15:28:55 | 000,032,590 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Alternate Data Streams ========== @Alternate Data Stream - 4096 bytes -> C:\Users\Public\Documents\desktop.ini:gs5sys @Alternate Data Stream - 4096 bytes -> C:\ProgramData:gs5sys @Alternate Data Stream - 1536 bytes -> C:\Users\Kuba\Documents\desktop.ini:gs5sys @Alternate Data Stream - 1536 bytes -> C:\Users\Kuba\Desktop\desktop (2).ini:gs5sys < End of report >