OTL logfile created on: 2012-07-09 12:09:52 - Run 1 OTL by OldTimer - Version 3.2.53.1 Folder = I:\ 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 7,98 Gb Total Physical Memory | 7,28 Gb Available Physical Memory | 91,20% Memory free 15,96 Gb Paging File | 15,23 Gb Available in Paging File | 95,41% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 34,18 Gb Total Space | 5,52 Gb Free Space | 16,16% Space Free | Partition Type: NTFS Drive D: | 19,52 Gb Total Space | 19,52 Gb Free Space | 100,00% Space Free | Partition Type: FAT32 Drive E: | 20,79 Gb Total Space | 20,79 Gb Free Space | 100,00% Space Free | Partition Type: FAT32 Drive G: | 65,80 Gb Total Space | 65,71 Gb Free Space | 99,86% Space Free | Partition Type: NTFS Drive H: | 200,01 Gb Total Space | 199,91 Gb Free Space | 99,95% Space Free | Partition Type: NTFS Drive I: | 483,56 Mb Total Space | 67,77 Mb Free Space | 14,01% Space Free | Partition Type: FAT Drive J: | 199,95 Gb Total Space | 199,86 Gb Free Space | 99,95% Space Free | Partition Type: NTFS Computer Name: ADMIN-KOMPUTER | User Name: admin | Logged in as Administrator. Boot Mode: SafeMode | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-07-06 17:06:06 | 000,595,968 | ---- | M] (OldTimer Tools) -- I:\OTL.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2012-07-07 12:04:30 | 000,108,392 | ---- | M] (SurfRight B.V.) [Auto | Stopped] -- C:\Program Files\HitmanPro\hmpsched.exe -- (HitmanProScheduler) SRV:[b]64bit:[/b] - [2012-03-09 07:10:20 | 000,235,520 | ---- | M] (AMD) [Auto | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2012-03-09 01:10:06 | 000,361,984 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Stopped] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service) SRV:[b]64bit:[/b] - [2012-03-07 01:15:14 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2012-06-27 12:29:24 | 002,369,960 | ---- | M] (LogMeIn Inc.) [Auto | Stopped] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2012-06-23 23:34:47 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012-06-16 13:10:56 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2011-06-06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011-03-16 10:42:06 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2011-03-14 17:27:34 | 000,346,976 | ---- | M] () [Auto | Stopped] -- C:\ProgramData\DatacardService\HWDeviceService64.exe -- (HWDeviceService64.exe) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2012-04-27 20:24:24 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV:[b]64bit:[/b] - [2012-03-09 18:40:06 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2012-03-09 18:40:06 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2012-03-09 08:28:08 | 010,857,984 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:[b]64bit:[/b] - [2012-03-09 08:28:08 | 010,857,984 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2012-03-09 05:58:02 | 000,328,704 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2012-03-07 01:04:06 | 000,819,032 | ---- | M] (AVAST Software) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx) DRV:[b]64bit:[/b] - [2012-03-07 01:04:04 | 000,337,240 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP) DRV:[b]64bit:[/b] - [2012-03-07 01:02:20 | 000,053,080 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr) DRV:[b]64bit:[/b] - [2012-03-07 01:01:57 | 000,059,224 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi) DRV:[b]64bit:[/b] - [2012-03-07 01:01:52 | 000,069,976 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt) DRV:[b]64bit:[/b] - [2012-03-07 01:01:32 | 000,024,408 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk) DRV:[b]64bit:[/b] - [2012-01-03 23:22:54 | 000,055,936 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Stopped] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.1) DRV:[b]64bit:[/b] - [2011-12-05 21:47:30 | 000,095,248 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService) DRV:[b]64bit:[/b] - [2011-07-29 05:40:00 | 000,079,104 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronXHCI.sys -- (EtronXHCI) DRV:[b]64bit:[/b] - [2011-07-29 05:40:00 | 000,056,960 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronHub3.sys -- (EtronHub3) DRV:[b]64bit:[/b] - [2011-02-25 18:02:38 | 000,098,816 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_jucdcacm.sys -- (huawei_cdcacm) DRV:[b]64bit:[/b] - [2011-01-30 18:19:32 | 000,086,016 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_jubusenum.sys -- (huawei_enumerator) DRV:[b]64bit:[/b] - [2011-01-13 13:58:30 | 000,413,800 | ---- | M] (Realtek ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2010-11-21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2010-07-27 09:52:16 | 000,117,248 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_hwusbdev.sys -- (ew_hwusbdev) DRV:[b]64bit:[/b] - [2010-02-18 09:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-03-18 16:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi) DRV - [2012-07-04 15:36:25 | 000,030,528 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\GVTDrv64.sys -- (GVTDrv64) DRV - [2012-07-04 15:36:05 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\gdrv.sys -- (gdrv) DRV - [2010-03-12 05:40:48 | 000,052,280 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\GIGABYTE\ET6\amd64\AODDriver.sys -- (AODDriver) DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = pl.v9.com/idg/idg_1338227235_526858 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\..\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.) IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10011&barid={BF59559D-9F8A-11E1-B9B8-50E549C6E0A7} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = pl.v9.com/idg/idg_1338227235_526858 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKCU\..\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.) IE - HKCU\..\SearchScopes,DefaultScope = {02885A83-CA56-4DB3-B309-3D49B2F400CB} IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=112555&tt=060612_5_&babsrc=SP_ss&mntrId=9ccec36f00000000000050e549c6e0a7 IE - HKCU\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10011&barid={BF59559D-9F8A-11E1-B9B8-50E549C6E0A7} IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)" FF - prefs.js..browser.search.defaultthis.engineName: "uTorrentControl2 Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.order.1: "Search the web (Babylon)" FF - prefs.js..browser.search.selectedEngine: "uTorrentControl2 Customized Web Search" FF - prefs.js..browser.startup.homepage: "http://domredi.com/1/" FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&SearchSource=2&q=" FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_262.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-04-25 15:45:49 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: H:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: H:\Program Files (x86)\Mozilla Firefox\plugins [2012-05-22 17:42:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\admin\AppData\Roaming\mozilla\Extensions [2012-05-16 21:08:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\admin\AppData\Roaming\mozilla\Firefox\Profiles\extensions [2012-06-26 12:57:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\admin\AppData\Roaming\mozilla\Firefox\Profiles\l1lg83bg.default\extensions [2012-06-26 12:57:11 | 000,000,000 | ---D | M] (uTorrentControl2 Community Toolbar) -- C:\Users\admin\AppData\Roaming\mozilla\Firefox\Profiles\l1lg83bg.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03} [2012-06-07 21:16:04 | 000,000,935 | ---- | M] () -- C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\l1lg83bg.default\searchplugins\conduit.xml [2012-06-13 22:17:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2012-06-13 22:17:52 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions\ffxtlbr@babylon.com O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:[b]64bit:[/b] - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) O2 - BHO: (uTorrentControl2 Toolbar) - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\PROGRA~2\ALLPLA~1\Iplex\IPLEXT~1.DLL (ALLCinema Ltd.) O2 - BHO: (SweetPacks Browser Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O2 - BHO: (Yontoo) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll (Yontoo LLC) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) O3 - HKLM\..\Toolbar: (uTorrentControl2 Toolbar) - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files (x86)\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O3 - HKLM\..\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [WSDPrintProxy] C:\Users\admin\AppData\Local\Microsoft\Windows\813\WSDPrintProxy.exe () O4 - HKLM..\Run: [AMD AVT] C:\Windows\SysWow64\cmd.exe (Microsoft Corporation) O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD) O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [DataCardMonitor] H:\Program Files (x86)\blueconnect\DataCardMonitor.exe File not found O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [SweetIM] C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [Sweetpacks Communicator] C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.) O4 - HKCU..\Run: [ALLUpdate] C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe () O4 - HKCU..\Run: [DAEMON Tools Lite] "E:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun File not found O4 - HKCU..\Run: [EADM] "H:\Program Files (x86)\Origin\Origin.exe" -AutoStart File not found O4 - HKCU..\Run: [Gadu-Gadu 10] C:\Program Files (x86)\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKCU..\Run: [HW_OPENEYE_OUC_] "H:\Program Files (x86)\blueconnect\UpdateDog\ouc.exe" File not found O4 - HKCU..\Run: [RGSC] H:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent File not found O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2F93B19C-7313-4310-B118-E59EC5E0890C}: DhcpNameServer = 171.25.182.1 171.25.182.2 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D1BB9F9C-1254-4A90-85EF-D0CA5930FBDE}: NameServer = 213.158.199.1 213.158.199.5 O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2012-07-06 17:56:56 | 000,000,125 | RHS- | M] () - I:\autorun.inf -- [ FAT ] O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-07-07 13:04:50 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Malwarebytes [2012-07-07 13:04:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2012-07-07 13:04:44 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2012-07-07 13:04:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2012-07-07 13:04:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2012-07-07 12:04:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro [2012-07-07 12:04:29 | 000,000,000 | ---D | C] -- C:\Program Files\HitmanPro [2012-07-07 12:04:15 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro [2012-07-06 15:11:26 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\hellomoto [2012-07-03 13:58:52 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\blueconnect [2012-07-03 13:55:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\blueconnect [2012-07-03 13:54:53 | 001,490,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01007.dll [2012-07-03 13:54:53 | 001,490,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdfCoInstaller01007.dll [2012-07-03 13:54:53 | 001,001,472 | ---- | C] (DiBcom SA) -- C:\Windows\SysNative\drivers\mod7700.sys [2012-07-03 13:54:53 | 000,421,376 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbwwan.sys [2012-07-03 13:54:53 | 000,221,312 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbmdm.sys [2012-07-03 13:54:53 | 000,212,992 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_juwwanecm.sys [2012-07-03 13:54:53 | 000,117,248 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_hwusbdev.sys [2012-07-03 13:54:53 | 000,098,816 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_jucdcacm.sys [2012-07-03 13:54:53 | 000,086,016 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_jubusenum.sys [2012-07-03 13:54:53 | 000,069,632 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_jucdcecm.sys [2012-07-03 13:54:53 | 000,032,768 | ---- | C] (Huawei Tech. Co., Ltd.) -- C:\Windows\SysNative\drivers\ewdcsc.sys [2012-07-03 13:54:53 | 000,028,672 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_juextctrl.sys [2012-07-03 13:54:53 | 000,022,016 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_hwupgrade.sys [2012-07-03 13:54:53 | 000,013,952 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_usbenumfilter.sys [2012-07-03 13:54:17 | 000,000,000 | ---D | C] -- C:\ProgramData\DatacardService [2012-07-02 19:19:03 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\Microsoft Games [2012-06-29 14:30:48 | 000,033,856 | -H-- | C] (LogMeIn, Inc.) -- C:\Windows\SysNative\hamachi.sys [2012-06-29 14:30:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi [2012-06-29 14:30:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi [2012-06-28 12:19:07 | 000,000,000 | ---D | C] -- C:\Users\admin\Documents\TmForever [2012-06-28 12:19:07 | 000,000,000 | ---D | C] -- C:\ProgramData\TmForever [2012-06-28 12:18:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TmNationsForever [2012-06-28 10:20:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip [2012-06-28 10:20:37 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip [2012-06-27 11:37:47 | 000,000,000 | ---D | C] -- C:\Users\admin\P-7-78-8964-9648-3874 [2012-06-26 21:35:23 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR [2012-06-26 21:35:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR [2012-06-26 21:35:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinRAR [2012-06-26 12:57:12 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\Google [2012-06-26 12:57:12 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\CRE [2012-06-26 12:57:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Conduit [2012-06-26 12:57:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\uTorrentControl2 [2012-06-26 12:57:09 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\Conduit [2012-06-26 12:56:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\uTorrent [2012-06-26 12:56:40 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\uTorrent [2012-06-20 16:49:08 | 000,000,000 | ---D | C] -- C:\Users\admin\Documents\Rockstar Games [2012-06-19 16:26:36 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\Rockstar Games [2012-06-19 16:26:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games [2012-06-19 13:48:13 | 000,000,000 | ---D | C] -- C:\Users\admin\Desktop\gotowy server by grzegorz2047 ver. 1.2 BETA [2012-06-18 20:17:58 | 000,000,000 | ---D | C] -- C:\Users\admin\Documents\Diablo III [2012-06-18 19:38:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III [2012-06-18 19:38:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard Entertainment [2012-06-18 19:38:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Blizzard Entertainment [2012-06-18 19:36:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Battle.net [2012-06-17 22:43:07 | 000,000,000 | ---D | C] -- C:\Users\admin\Desktop\Nowy folder [2012-06-14 15:17:14 | 000,000,000 | ---D | C] -- C:\Users\admin\Desktop\Minecraft-Server [2012-06-13 22:21:46 | 000,000,000 | ---D | C] -- C:\Users\admin\Desktop\Ride the Lightning [2012-06-13 22:17:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2012-06-13 22:17:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Babylon [2012-06-13 22:17:43 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Babylon [2012-06-13 22:17:42 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\YourFileDownloader [2012-06-13 22:17:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\YourFileDownloader [2012-06-10 19:39:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Gimnazjum klasa 2 - Puls zycia [2010-11-03 12:33:35 | 000,695,296 | ---- | C] (AnjoCaido) -- C:\Users\admin\AppData\Roaming\MinecraftSP.exe [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-07-09 12:13:04 | 000,810,622 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2012-07-09 12:13:04 | 000,675,954 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012-07-09 12:13:04 | 000,178,134 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2012-07-09 12:13:04 | 000,143,734 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2012-07-09 12:13:04 | 000,006,204 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012-07-09 12:04:26 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-07-09 12:04:17 | 2132,729,855 | -HS- | M] () -- C:\hiberfil.sys [2012-07-07 16:25:54 | 000,021,072 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012-07-07 16:25:54 | 000,021,072 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012-07-07 14:34:33 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012-07-07 13:37:52 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2012-07-07 12:04:30 | 000,001,939 | ---- | M] () -- C:\Users\Public\Desktop\HitmanPro.lnk [2012-07-06 19:52:45 | 000,003,552 | ---- | M] () -- C:\bootsqm.dat [2012-07-04 15:36:25 | 000,030,528 | ---- | M] () -- C:\Windows\GVTDrv64.sys [2012-07-04 15:36:25 | 000,000,004 | ---- | M] () -- C:\Windows\SysWow64\GVTunner.ref [2012-07-04 15:36:05 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\Windows\gdrv.sys [2012-07-03 13:58:46 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf [2012-07-03 13:55:09 | 000,000,736 | ---- | M] () -- C:\Users\Public\Desktop\blueconnect.lnk [2012-07-03 13:54:55 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ew_jubusenum_01007.Wdf [2012-07-01 12:14:05 | 000,007,597 | ---- | M] () -- C:\Users\admin\AppData\Local\Resmon.ResmonCfg [2012-06-28 12:18:42 | 000,000,779 | ---- | M] () -- C:\Users\Public\Desktop\TmNationsForever.lnk [2012-06-28 12:16:48 | 000,023,777 | ---- | M] () -- C:\Users\admin\Desktop\adolf_hitler1.jpg [2012-06-27 22:36:06 | 000,048,180 | ---- | M] () -- C:\Users\admin\Desktop\XD1.jpg [2012-06-27 21:50:36 | 000,021,149 | ---- | M] () -- C:\Users\admin\Desktop\HITLERXD.jpg [2012-06-26 12:56:55 | 000,000,947 | ---- | M] () -- C:\Users\Public\Desktop\µTorrent.lnk [2012-06-25 22:09:55 | 000,149,577 | ---- | M] () -- C:\Users\admin\Desktop\Gammon Grenade26.jpg [2012-06-25 22:09:46 | 000,149,577 | ---- | M] () -- C:\Users\admin\Desktop\Gammon Grenade.jpg [2012-06-23 23:34:47 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2012-06-23 23:34:47 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2012-06-23 22:27:53 | 000,066,332 | ---- | M] () -- C:\Users\admin\Desktop\SLIPKNOT KWEJK.jpg [2012-06-23 22:27:44 | 000,066,332 | ---- | M] () -- C:\Users\admin\Desktop\Muzyka.jpg [2012-06-20 22:20:29 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\soufoda2.gif [2012-06-20 16:41:33 | 000,001,055 | ---- | M] () -- C:\Users\Public\Desktop\Grand Theft Auto IV.lnk [2012-06-20 14:07:10 | 000,022,335 | ---- | M] () -- C:\Users\admin\Desktop\NA 101AB.jpg [2012-06-19 21:52:23 | 000,160,855 | ---- | M] () -- C:\Users\admin\Desktop\101XD.jpg [2012-06-19 16:26:06 | 000,000,935 | ---- | M] () -- C:\Users\Public\Desktop\Rockstar Games Social Club.lnk [2012-06-18 20:42:05 | 000,000,193 | ---- | M] () -- C:\Windows\WORDPAD.INI [2012-06-18 19:52:41 | 000,000,688 | ---- | M] () -- C:\Users\Public\Desktop\Diablo III.lnk [2012-06-14 15:37:33 | 000,080,139 | ---- | M] () -- C:\Users\admin\Desktop\Rifle Grenade adapter.jpg [2012-06-13 22:17:53 | 000,000,250 | ---- | M] () -- C:\user.js [2012-06-13 22:17:43 | 000,001,979 | ---- | M] () -- C:\Users\Public\Desktop\YourFile Downloader.lnk [2012-06-11 20:11:32 | 000,039,726 | ---- | M] () -- C:\Users\admin\Desktop\ubikacja kwejk.jpg [2012-06-11 19:09:56 | 000,087,805 | ---- | M] () -- C:\Users\admin\Desktop\Zdjęcie0829.jpg [2012-06-10 19:39:08 | 000,001,488 | ---- | M] () -- C:\Users\Public\Desktop\Gimnazjum klasa 2 - Puls życia.lnk [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-07 13:04:46 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2012-07-07 12:04:30 | 000,001,939 | ---- | C] () -- C:\Users\Public\Desktop\HitmanPro.lnk [2012-07-06 19:52:45 | 000,003,552 | ---- | C] () -- C:\bootsqm.dat [2012-07-03 13:58:46 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf [2012-07-03 13:55:09 | 000,000,736 | ---- | C] () -- C:\Users\Public\Desktop\blueconnect.lnk [2012-07-03 13:54:55 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ew_jubusenum_01007.Wdf [2012-07-03 13:51:49 | 000,000,004 | ---- | C] () -- C:\Windows\SysWow64\GVTunner.ref [2012-06-28 12:18:42 | 000,000,779 | ---- | C] () -- C:\Users\Public\Desktop\TmNationsForever.lnk [2012-06-28 12:16:46 | 000,023,777 | ---- | C] () -- C:\Users\admin\Desktop\adolf_hitler1.jpg [2012-06-27 22:36:04 | 000,048,180 | ---- | C] () -- C:\Users\admin\Desktop\XD1.jpg [2012-06-27 21:50:34 | 000,021,149 | ---- | C] () -- C:\Users\admin\Desktop\HITLERXD.jpg [2012-06-26 12:56:55 | 000,000,947 | ---- | C] () -- C:\Users\Public\Desktop\µTorrent.lnk [2012-06-25 22:09:55 | 000,149,577 | ---- | C] () -- C:\Users\admin\Desktop\Gammon Grenade26.jpg [2012-06-25 22:03:52 | 000,149,577 | ---- | C] () -- C:\Users\admin\Desktop\Gammon Grenade.jpg [2012-06-23 22:27:53 | 000,066,332 | ---- | C] () -- C:\Users\admin\Desktop\SLIPKNOT KWEJK.jpg [2012-06-23 22:21:21 | 000,066,332 | ---- | C] () -- C:\Users\admin\Desktop\Muzyka.jpg [2012-06-20 22:20:29 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\soufoda2.gif [2012-06-20 16:41:33 | 000,001,055 | ---- | C] () -- C:\Users\Public\Desktop\Grand Theft Auto IV.lnk [2012-06-20 14:07:10 | 000,022,335 | ---- | C] () -- C:\Users\admin\Desktop\NA 101AB.jpg [2012-06-19 21:52:21 | 000,160,855 | ---- | C] () -- C:\Users\admin\Desktop\101XD.jpg [2012-06-19 16:26:06 | 000,000,935 | ---- | C] () -- C:\Users\Public\Desktop\Rockstar Games Social Club.lnk [2012-06-18 20:42:05 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI [2012-06-18 19:38:27 | 000,000,688 | ---- | C] () -- C:\Users\Public\Desktop\Diablo III.lnk [2012-06-14 21:49:06 | 000,007,597 | ---- | C] () -- C:\Users\admin\AppData\Local\Resmon.ResmonCfg [2012-06-14 15:37:32 | 000,080,139 | ---- | C] () -- C:\Users\admin\Desktop\Rifle Grenade adapter.jpg [2012-06-13 22:17:53 | 000,000,250 | ---- | C] () -- C:\user.js [2012-06-13 22:17:43 | 000,001,979 | ---- | C] () -- C:\Users\Public\Desktop\YourFile Downloader.lnk [2012-06-11 20:11:32 | 000,039,726 | ---- | C] () -- C:\Users\admin\Desktop\ubikacja kwejk.jpg [2012-06-11 20:10:54 | 000,087,805 | ---- | C] () -- C:\Users\admin\Desktop\Zdjęcie0829.jpg [2012-06-07 21:39:44 | 000,004,608 | ---- | C] () -- C:\Users\admin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-06-07 13:41:43 | 000,093,672 | ---- | C] () -- C:\Users\admin\AppData\Roaming\Uninstal.exe [2012-06-07 13:32:44 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\Minecraft 1.2.0_02 Installer (Cracked).exe [2012-05-12 13:44:56 | 001,636,610 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2012-04-26 12:49:55 | 000,030,528 | ---- | C] () -- C:\Windows\GVTDrv64.sys [2012-04-25 15:44:41 | 000,258,048 | ---- | C] () -- C:\Windows\SysWow64\libFLAC.dll [2012-04-25 15:43:54 | 000,644,608 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2012-04-25 15:43:54 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2012-04-25 15:43:53 | 000,175,616 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2012-04-25 15:43:52 | 000,079,360 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll [2012-04-25 15:37:48 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini [2012-04-25 15:25:57 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2012-03-09 06:31:26 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat [2012-03-09 06:31:26 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat [2012-03-09 01:26:20 | 000,054,784 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll [2012-01-31 07:00:24 | 000,016,896 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll [2011-09-13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat [2011-04-09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat < End of report >