OTL logfile created on: 2012-07-14 18:01:35 - Run 1 OTL by OldTimer - Version 3.2.53.1 Folder = C:\Users\konkor\Desktop 64bit-Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,99 Gb Total Physical Memory | 2,50 Gb Available Physical Memory | 83,49% Memory free 6,19 Gb Paging File | 5,79 Gb Available in Paging File | 93,59% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 232,88 Gb Total Space | 4,01 Gb Free Space | 1,72% Space Free | Partition Type: NTFS Computer Name: KONKOR-PC | User Name: konkor | Logged in as Administrator. Boot Mode: SafeMode | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-07-08 18:59:39 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\konkor\Desktop\OTL.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2008-04-30 20:20:42 | 001,371,136 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) SRV:[b]64bit:[/b] - [2008-04-30 19:42:20 | 000,826,368 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) SRV:[b]64bit:[/b] - [2008-01-19 00:06:52 | 000,383,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2007-12-11 05:11:00 | 000,015,872 | ---- | M] (Agere Systems) [Auto | Stopped] -- C:\Windows\SysNative\agr64svc.exe -- (AgereModemAudio) SRV - [2012-06-23 02:37:12 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012-04-27 07:42:04 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2010-11-16 15:38:16 | 000,339,456 | ---- | M] () [Auto | Stopped] -- C:\ProgramData\DatacardService\HWDeviceService64.exe -- (HWDeviceService64.exe) SRV - [2010-03-18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010-01-15 14:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService) SRV - [2009-07-21 14:34:33 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Stopped] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2009-05-13 16:48:22 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Stopped] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2009-03-29 21:42:16 | 000,066,368 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2008-04-07 09:17:30 | 000,430,592 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2012-02-29 15:52:46 | 000,016,384 | ---- | M] (Microsoft Corporation) [Recognizer | System | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2010-10-09 14:49:52 | 000,085,504 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\ew_jubusenum.sys -- (huawei_enumerator) DRV:[b]64bit:[/b] - [2010-08-27 13:54:02 | 000,138,752 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\ewusbnet.sys -- (ewusbnet) DRV:[b]64bit:[/b] - [2010-08-07 17:49:04 | 000,121,600 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\ewusbmdm.sys -- (hwdatacard) DRV:[b]64bit:[/b] - [2010-07-27 09:52:16 | 000,117,248 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\ew_hwusbdev.sys -- (ew_hwusbdev) DRV:[b]64bit:[/b] - [2010-06-22 00:07:36 | 000,131,688 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA) DRV:[b]64bit:[/b] - [2009-12-08 08:51:31 | 000,074,880 | ---- | M] (Avira GmbH) [File_System | Auto | Stopped] -- C:\Windows\SysNative\DRIVERS\avgntflt.sys -- (avgntflt) DRV:[b]64bit:[/b] - [2009-10-01 02:51:42 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\wpdusb.sys -- (WpdUsb) DRV:[b]64bit:[/b] - [2009-04-10 22:39:38 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\usbser.sys -- (usbser) DRV:[b]64bit:[/b] - [2008-05-02 07:59:48 | 000,166,912 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\Rtlh64.sys -- (RTL8169) DRV:[b]64bit:[/b] - [2008-04-28 06:38:12 | 004,730,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\NETw5v64.sys -- (NETw5v64) Intel(R) DRV:[b]64bit:[/b] - [2008-04-14 08:03:00 | 000,120,720 | ---- | M] (JMicron Technology Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\jmcr.sys -- (JMCR) DRV:[b]64bit:[/b] - [2008-02-29 08:59:00 | 001,252,352 | ---- | M] (Agere Systems) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\agrsm64.sys -- (AgereSoftModem) DRV:[b]64bit:[/b] - [2008-01-24 16:08:34 | 000,057,352 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmXlCore.sys -- (WmXlCore) DRV:[b]64bit:[/b] - [2008-01-24 16:08:24 | 000,015,752 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmVirHid.sys -- (WmVirHid) DRV:[b]64bit:[/b] - [2008-01-24 16:08:14 | 000,034,312 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmHidLo.sys -- (WmHidLo) DRV:[b]64bit:[/b] - [2008-01-24 16:08:04 | 000,032,776 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmFilter.sys -- (WmFilter) DRV:[b]64bit:[/b] - [2008-01-24 16:07:54 | 000,022,024 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmBEnum.sys -- (WmBEnum) DRV:[b]64bit:[/b] - [2008-01-24 07:24:00 | 000,060,928 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\enecir.sys -- (enecir) DRV:[b]64bit:[/b] - [2007-11-29 10:40:46 | 000,008,704 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\usbser_lowerfltx64j.sys -- (UsbserFilt) DRV:[b]64bit:[/b] - [2007-11-29 10:40:38 | 000,022,528 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdcx64) DRV:[b]64bit:[/b] - [2007-11-29 10:40:38 | 000,017,920 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcdx64) DRV:[b]64bit:[/b] - [2007-11-29 10:40:38 | 000,008,704 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\usbser_lowerfltx64.sys -- (upperdev) DRV:[b]64bit:[/b] - [2007-10-25 16:06:06 | 000,019,752 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | Boot | Running] -- C:\Windows\SysNative\DRIVERS\EMSC.SYS -- (EMSC) DRV:[b]64bit:[/b] - [2007-10-15 06:53:18 | 000,090,152 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio) DRV:[b]64bit:[/b] - [2007-10-15 06:53:18 | 000,019,496 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\btwrchid.sys -- (btwrchid) DRV:[b]64bit:[/b] - [2007-10-15 06:53:16 | 000,117,288 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt) DRV:[b]64bit:[/b] - [2007-09-17 15:53:34 | 000,029,184 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\pccsmcfdx64.sys -- (pccsmcfd) DRV:[b]64bit:[/b] - [2007-05-17 11:38:06 | 000,033,584 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\btwl2cap.sys -- (btwl2cap) DRV:[b]64bit:[/b] - [2006-11-02 11:10:09 | 000,103,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\sdbus.sys -- (sdbus) DRV - [2007-10-25 16:06:04 | 000,017,192 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | Boot | Running] -- C:\Windows\SysWOW64\drivers\EMSC.sys -- (EMSC) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = IE - HKLM\..\URLSearchHook: {3796e649-4334-4cbf-89d3-a927554ad438} - C:\Program Files (x86)\PC_Gear_EN_Generic\prxtbPC_G.dll (Conduit Ltd.) IE - HKLM\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.) IE - HKLM\..\URLSearchHook: {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Program Files (x86)\Ashampoo_PO\prxtbAsha.dll (Conduit Ltd.) IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2139138 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-858130797-3001701696-3980745133-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank IE - HKU\S-1-5-21-858130797-3001701696-3980745133-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/ IE - HKU\S-1-5-21-858130797-3001701696-3980745133-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = IE - HKU\S-1-5-21-858130797-3001701696-3980745133-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKU\S-1-5-21-858130797-3001701696-3980745133-1000\..\URLSearchHook: {3796e649-4334-4cbf-89d3-a927554ad438} - C:\Program Files (x86)\PC_Gear_EN_Generic\prxtbPC_G.dll (Conduit Ltd.) IE - HKU\S-1-5-21-858130797-3001701696-3980745133-1000\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.) IE - HKU\S-1-5-21-858130797-3001701696-3980745133-1000\..\URLSearchHook: {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Program Files (x86)\Ashampoo_PO\prxtbAsha.dll (Conduit Ltd.) IE - HKU\S-1-5-21-858130797-3001701696-3980745133-1000\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKU\S-1-5-21-858130797-3001701696-3980745133-1000\..\SearchScopes\{043C5167-00BB-4324-AF7E-62013FAEDACF}: "URL" = http://vshare.toolbarhome.com/search.aspx?q={searchTerms}&srch=dsp IE - HKU\S-1-5-21-858130797-3001701696-3980745133-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-858130797-3001701696-3980745133-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/web/{searchTerms}?babsrc=SP_ss&affID=100474&mntrId=4e33d3f2000000000000000000000000 IE - HKU\S-1-5-21-858130797-3001701696-3980745133-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7RNTN_plPL352 IE - HKU\S-1-5-21-858130797-3001701696-3980745133-1000\..\SearchScopes\{BAB17434-3509-4511-AF64-C235CE60E29F}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2481033 IE - HKU\S-1-5-21-858130797-3001701696-3980745133-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "about:blank" FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_262.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll () FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.633: c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.633: c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.633: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.633: c:\program files (x86)\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc) FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-03-07 22:04:29 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-07-08 18:40:51 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-04-27 07:42:04 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012-07-08 18:40:50 | 000,000,000 | ---D | M] [2012-03-12 18:48:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\konkor\AppData\Roaming\mozilla\Extensions [2012-07-05 20:48:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\konkor\AppData\Roaming\mozilla\Firefox\Profiles\j4521hjf.default\extensions [2012-07-05 20:48:33 | 000,000,000 | ---D | M] (Ashampoo PO Community Toolbar) -- C:\Users\konkor\AppData\Roaming\mozilla\Firefox\Profiles\j4521hjf.default\extensions\{d43723ae-1ae1-4a25-a6a4-bf0929273cab} [2012-04-10 21:50:22 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions [2012-03-12 21:09:49 | 000,413,408 | ---- | M] () (No name found) -- C:\USERS\KONKOR\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\J4521HJF.DEFAULT\EXTENSIONS\{C45C406E-AB73-11D8-BE73-000A95BE3B12}.XPI [2012-04-27 07:42:04 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2012-04-10 21:50:16 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2012-04-10 21:50:16 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2012-04-10 21:50:16 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2012-04-10 21:50:16 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2012-04-10 21:50:16 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-04-10 21:50:16 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms} CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\20.0.1132.47\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\20.0.1132.47\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\20.0.1132.47\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: Java Deployment Toolkit 6.0.210.7 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U21 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: QuickTime Plug-in 7.6.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.6.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.6.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.6.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.6.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.6.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.6.7 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll CHR - plugin: DivX OVS Helper Plug-in (Enabled) = C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll CHR - plugin: DivX Web Player (Enabled) = C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll CHR - plugin: Veetle TV Player (Enabled) = C:\Program Files (x86)\Veetle\Player\npvlc.dll CHR - plugin: Veetle TV Core (Enabled) = C:\Program Files (x86)\Veetle\plugins\npVeetle.dll CHR - plugin: RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = c:\program files (x86)\real\realplayer\Netscape6\nprpjplug.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll CHR - plugin: RealJukebox NS Plugin (Enabled) = c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\konkor\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.3_0\ CHR - Extension: PC Gear EN Generic = C:\Users\konkor\AppData\Local\Google\Chrome\User Data\Default\Extensions\jokmfbcmohghocigimginpgjnghgepci\2.3.15.10_0\ CHR - Extension: DivX Plus Web Player HTML5 \u003Cvideo\u003E = C:\Users\konkor\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0\ O1 HOSTS File: ([2006-09-18 23:37:24 | 000,000,761 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O2 - BHO: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll () O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.4.35.10\bh\BabylonToolbar.dll (Babylon BHO) O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O2 - BHO: (PC Gear EN Generic Toolbar) - {3796e649-4334-4cbf-89d3-a927554ad438} - C:\Program Files (x86)\PC_Gear_EN_Generic\prxtbPC_G.dll (Conduit Ltd.) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.) O2 - BHO: (Ashampoo PO Toolbar) - {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Program Files (x86)\Ashampoo_PO\prxtbAsha.dll (Conduit Ltd.) O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3 - HKLM\..\Toolbar: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll () O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (PC Gear EN Generic Toolbar) - {3796e649-4334-4cbf-89d3-a927554ad438} - C:\Program Files (x86)\PC_Gear_EN_Generic\prxtbPC_G.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.4.35.10\BabylonToolbarTlbr.dll (Babylon Ltd.) O3 - HKLM\..\Toolbar: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Ashampoo PO Toolbar) - {d43723ae-1ae1-4a25-a6a4-bf0929273cab} - C:\Program Files (x86)\Ashampoo_PO\prxtbAsha.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-858130797-3001701696-3980745133-1000\..\Toolbar\WebBrowser: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll () O3:[b]64bit:[/b] - HKU\S-1-5-21-858130797-3001701696-3980745133-1000\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3 - HKU\S-1-5-21-858130797-3001701696-3980745133-1000\..\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-858130797-3001701696-3980745133-1000\..\Toolbar\WebBrowser: (PC Gear EN Generic Toolbar) - {3796E649-4334-4CBF-89D3-A927554AD438} - C:\Program Files (x86)\PC_Gear_EN_Generic\prxtbPC_G.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-858130797-3001701696-3980745133-1000\..\Toolbar\WebBrowser: (uTorrentBar Toolbar) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-858130797-3001701696-3980745133-1000\..\Toolbar\WebBrowser: (Ashampoo PO Toolbar) - {D43723AE-1AE1-4A25-A6A4-BF0929273CAB} - C:\Program Files (x86)\Ashampoo_PO\prxtbAsha.dll (Conduit Ltd.) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Windows\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Logitech Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe () O4 - HKLM..\Run: [WLSS] C:\Program Files (x86)\Program DJ\Wireless Switch\wlss.exe (Compal Electronics, Inc.) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-21-858130797-3001701696-3980745133-1000..\Run: [HW_OPENEYE_OUC_PLAY ONLINE] C:\Program Files (x86)\PLAY ONLINE\UpdateDog\ouc.exe (Huawei Technologies Co., Ltd.) O4 - HKU\S-1-5-21-858130797-3001701696-3980745133-1000..\Run: [Nokia.PCSync] C:\Program Files (x86)\Nokia\Nokia PC Suite 6\PCSync2.exe (Time Information Services Ltd.) O4 - HKU\S-1-5-21-858130797-3001701696-3980745133-1000..\Run: [wincredprovider] C:\Users\konkor\AppData\Local\Microsoft\Windows\1629\wincredprovider.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O8:[b]64bit:[/b] - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O8:[b]64bit:[/b] - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O8 - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O8 - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9:[b]64bit:[/b] - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9:[b]64bit:[/b] - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra Button: Wyślij do interfejsu Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : Wyślij do urządzenia &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O16:[b]64bit:[/b] - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16:[b]64bit:[/b] - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16:[b]64bit:[/b] - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool) O16 - DPF: {4BFD075D-C36E-4F28-BB0A-5D472795197A} http://download06.managerzone.com/soccer-3d/PowerLoader.cab (PowerLoader Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {9522589E-57B9-46C5-9A77-1F1C1CCBE550} file:///C:/Users/konkor/AppData/Local/Temp/OnlineScanner/is2007ols/fscax.cab (F-Secure Online Scanner 2.1 (CD version)) O16 - DPF: {CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA} http://java.sun.com/update/1.4.2/jinstall-1_4_2_19-windows-i586.cab (Java Plug-in 1.4.2_19) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{473C2603-6327-40AC-A13E-F946D9EF9319}: DhcpNameServer = 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\vsharechrome - No CLSID value found O18 - Protocol\Handler\vsharechrome {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files (x86)\vShare\vshare_toolbar.dll () O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\konkor\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O24 - Desktop BackupWallPaper: C:\Users\konkor\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{1320ae52-3c5c-11e1-ad79-001fe2f66a3b}\Shell - "" = AutoRun O33 - MountPoints2\{1320ae52-3c5c-11e1-ad79-001fe2f66a3b}\Shell\AutoRun\command - "" = E:\AutoRun.exe O33 - MountPoints2\{1320ae73-3c5c-11e1-ad79-001fe2f66a3b}\Shell - "" = AutoRun O33 - MountPoints2\{1320ae73-3c5c-11e1-ad79-001fe2f66a3b}\Shell\AutoRun\command - "" = E:\AutoRun.exe O33 - MountPoints2\{69b283b5-b2a7-11e0-be46-001fe2f66a3b}\Shell - "" = AutoRun O33 - MountPoints2\{69b283b5-b2a7-11e0-be46-001fe2f66a3b}\Shell\AutoRun\command - "" = E:\AutoRun.exe O33 - MountPoints2\{69b283cc-b2a7-11e0-be46-001fe2f66a3b}\Shell - "" = AutoRun O33 - MountPoints2\{69b283cc-b2a7-11e0-be46-001fe2f66a3b}\Shell\AutoRun\command - "" = E:\AutoRun.exe O33 - MountPoints2\{833962c4-bdde-11e0-8117-001fe2f66a3b}\Shell - "" = AutoRun O33 - MountPoints2\{833962c4-bdde-11e0-8117-001fe2f66a3b}\Shell\AutoRun\command - "" = E:\AutoRun.exe O33 - MountPoints2\{833962d8-bdde-11e0-8117-001fe2f66a3b}\Shell - "" = AutoRun O33 - MountPoints2\{833962d8-bdde-11e0-8117-001fe2f66a3b}\Shell\AutoRun\command - "" = E:\AutoRun.exe O33 - MountPoints2\{833962f5-bdde-11e0-8117-001fe2f66a3b}\Shell - "" = AutoRun O33 - MountPoints2\{833962f5-bdde-11e0-8117-001fe2f66a3b}\Shell\AutoRun\command - "" = E:\AutoRun.exe O33 - MountPoints2\{c708e523-1295-11df-8814-001fe2f66a3b}\Shell\AutoRun\command - "" = E:\setupSNK.exe O33 - MountPoints2\{cbb08034-be80-11e0-abe2-001fe2f66a3b}\Shell - "" = AutoRun O33 - MountPoints2\{cbb08034-be80-11e0-abe2-001fe2f66a3b}\Shell\AutoRun\command - "" = E:\AutoRun.exe O33 - MountPoints2\{d6af88a9-e9e3-11df-b659-001fe2f66a3b}\Shell\AutoRun\command - "" = E:\0qw6vege.exe O33 - MountPoints2\{d6af88a9-e9e3-11df-b659-001fe2f66a3b}\Shell\open\Command - "" = E:\0qw6vege.exe O33 - MountPoints2\{e6b107e6-9ccd-11e0-90b4-001fe2f66a3b}\Shell - "" = AutoRun O33 - MountPoints2\{e6b107e6-9ccd-11e0-90b4-001fe2f66a3b}\Shell\AutoRun\command - "" = E:\NokiaPCIA_Autorun.exe O33 - MountPoints2\E\Shell - "" = AutoRun O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\AutoRun.exe O33 - MountPoints2\F\Shell - "" = AutoRun O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-07-08 21:39:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Symantec [2012-07-08 21:39:15 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security Scan [2012-07-08 21:39:15 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NSSx64 [2012-07-08 21:39:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Norton Security Scan [2012-07-08 21:39:15 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NSSx64\0307020.005 [2012-07-08 21:39:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Norton [2012-07-08 21:39:12 | 000,000,000 | ---D | C] -- C:\ProgramData\NortonInstaller [2012-07-08 21:39:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NortonInstaller [2012-07-08 20:37:48 | 000,000,000 | ---D | C] -- C:\_OTL [2012-07-08 18:59:39 | 000,595,968 | ---- | C] (OldTimer Tools) -- C:\Users\konkor\Desktop\OTL.exe [2012-07-08 18:17:49 | 000,000,000 | ---D | C] -- C:\Users\konkor\AppData\Roaming\hellomoto [2012-07-05 20:48:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ashampoo_PO [2012-07-05 20:48:10 | 000,000,000 | ---D | C] -- C:\Users\konkor\AppData\Roaming\Ashampoo [2012-07-05 20:47:52 | 000,000,000 | ---D | C] -- C:\Users\konkor\AppData\Local\ashampoo [2012-07-05 20:47:52 | 000,000,000 | ---D | C] -- C:\ProgramData\ashampoo [2012-07-05 20:47:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo [2012-07-05 20:47:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ashampoo [2012-06-28 12:58:40 | 000,000,000 | ---D | C] -- C:\Users\konkor\AppData\Roaming\XnView [2012-06-28 12:58:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XnView [2012-06-28 12:58:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\XnView [2012-06-24 12:33:18 | 000,000,000 | ---D | C] -- C:\Users\konkor\AppData\Roaming\NapiProjekt [2012-06-21 17:01:02 | 002,622,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll [2012-06-21 17:01:02 | 000,057,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe [2012-06-21 17:01:02 | 000,044,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll [2012-06-21 17:00:28 | 000,701,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll [2012-06-21 17:00:28 | 000,577,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll [2012-06-21 17:00:28 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll [2012-06-21 17:00:28 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll [2012-06-21 17:00:28 | 000,038,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll [2012-06-21 17:00:28 | 000,035,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll [2012-06-21 17:00:12 | 000,171,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll [2012-06-21 17:00:12 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe [2012-06-21 17:00:11 | 000,186,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll [2012-06-21 17:00:11 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-07-14 17:59:37 | 000,001,460 | ---- | M] () -- C:\Users\konkor\AppData\Local\d3d9caps64.dat [2012-07-14 17:51:25 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-07-14 17:47:41 | 000,271,945 | ---- | M] () -- C:\ProgramData\nvModes.dat [2012-07-14 17:47:41 | 000,271,945 | ---- | M] () -- C:\ProgramData\nvModes.001 [2012-07-14 17:47:33 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012-07-14 17:47:24 | 000,003,776 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2012-07-14 17:47:24 | 000,003,776 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2012-07-14 11:21:57 | 000,002,140 | ---- | M] () -- C:\Windows\bthservsdp.dat [2012-07-09 07:37:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012-07-09 07:05:59 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012-07-08 21:39:21 | 000,001,130 | ---- | M] () -- C:\Users\Public\Desktop\Norton Security Scan.lnk [2012-07-08 18:59:39 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\konkor\Desktop\OTL.exe [2012-07-08 18:40:53 | 000,001,419 | ---- | M] () -- C:\Users\konkor\Desktop\DivX Movies.lnk [2012-07-08 18:40:39 | 000,000,907 | ---- | M] () -- C:\Users\Public\Desktop\DivX Plus Player.lnk [2012-07-06 17:43:12 | 001,495,500 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012-07-06 17:43:12 | 000,672,390 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2012-07-06 17:43:12 | 000,596,246 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012-07-06 17:43:12 | 000,130,766 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2012-07-06 17:43:12 | 000,104,320 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2012-07-05 20:47:45 | 000,001,118 | ---- | M] () -- C:\Users\Public\Desktop\Ashampoo Burning Studio 2012.lnk [2012-07-03 17:19:31 | 000,189,440 | ---- | M] () -- C:\Users\konkor\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-06-28 12:58:58 | 000,000,758 | ---- | M] () -- C:\Users\konkor\Desktop\XnView.lnk [2012-06-23 02:37:12 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2012-06-23 02:37:12 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2012-06-23 02:37:07 | 009,815,752 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerInstaller.exe [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-08 21:39:21 | 000,001,130 | ---- | C] () -- C:\Users\Public\Desktop\Norton Security Scan.lnk [2012-07-08 21:39:15 | 000,000,172 | ---- | C] () -- C:\Windows\SysNative\drivers\NSSx64\0307020.005\isolate.ini [2012-07-08 18:40:53 | 000,001,419 | ---- | C] () -- C:\Users\konkor\Desktop\DivX Movies.lnk [2012-07-05 20:47:45 | 000,001,118 | ---- | C] () -- C:\Users\Public\Desktop\Ashampoo Burning Studio 2012.lnk [2012-06-28 12:58:30 | 000,000,758 | ---- | C] () -- C:\Users\konkor\Desktop\XnView.lnk [2012-05-04 23:05:07 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\Tempew4452.html [2012-05-04 23:05:07 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\Tempyj4452.html [2012-04-14 15:01:56 | 000,258,048 | ---- | C] () -- C:\Windows\SysWow64\libFLAC.dll [2012-04-11 02:03:54 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\Tempp11184.html [2012-04-11 02:03:54 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\Tempf11184.html [2012-04-10 21:42:32 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempFy4572.html [2012-04-10 21:42:32 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempRe4572.html [2012-03-12 02:35:13 | 000,000,517 | ---- | C] () -- C:\Users\konkor\SciTE.session [2012-03-06 22:49:09 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempC31268.html [2012-03-06 22:49:09 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\Temps31268.html [2012-02-22 21:47:51 | 000,004,910 | ---- | C] () -- C:\ProgramData\qjaxlkio.dss [2012-02-19 12:37:03 | 000,000,680 | ---- | C] () -- C:\Users\konkor\AppData\Local\d3d9caps.dat [2012-02-04 16:00:33 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\Tempt11608.html [2012-02-04 16:00:33 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\Tempq11608.html [2011-12-04 13:31:43 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempNJ1216.html [2011-12-04 13:31:43 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempMv1216.html [2011-12-03 22:31:39 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\Tempu10308.html [2011-12-03 22:31:39 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempR10308.html [2011-11-27 13:39:53 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempPXL468.html [2011-11-27 13:39:53 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempCqh468.html [2011-11-26 11:49:22 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempMK4640.html [2011-11-26 11:49:22 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempCR4640.html [2011-11-25 21:09:33 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempyJ4928.html [2011-11-25 21:09:33 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempWO4928.html [2011-11-16 11:57:10 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempsDB500.html [2011-11-16 11:57:10 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempJom500.html [2011-11-06 17:40:46 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\Temprn4672.html [2011-11-06 17:40:46 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempnE4672.html [2011-10-10 11:34:29 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempWI3176.html [2011-10-10 11:34:29 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\Temptd3176.html [2011-10-10 10:01:46 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempKJ5076.html [2011-10-10 10:01:46 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempCs5076.html [2011-10-09 22:37:43 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\Tempv12396.html [2011-10-09 22:37:43 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\Tempw12396.html [2011-10-09 21:55:15 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempZ19076.html [2011-10-09 21:55:15 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\Tempn19076.html [2011-10-09 21:11:38 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\Tempc14496.html [2011-10-09 21:11:38 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempK14496.html [2011-10-09 11:54:23 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\Tempp11060.html [2011-10-09 11:54:23 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\Tempb11060.html [2011-10-09 00:12:23 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempmG6612.html [2011-10-09 00:12:23 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempMh6612.html [2011-10-08 19:24:35 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempX29608.html [2011-10-08 19:24:35 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\Tempy29608.html [2011-10-08 14:24:17 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempU23436.html [2011-10-08 14:24:17 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempT23436.html [2011-10-08 14:05:07 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempQ21396.html [2011-10-08 14:05:07 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempU21396.html [2011-10-08 13:42:33 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\Templ19164.html [2011-10-08 13:42:33 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempB19164.html [2011-10-08 13:03:01 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempV17068.html [2011-10-08 13:03:01 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempP17068.html [2011-10-08 13:02:39 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempO17068.html [2011-10-08 13:02:39 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\Tempn17068.html [2011-10-07 00:22:36 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\Tempw23896.html [2011-10-07 00:22:36 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempV23896.html [2011-10-04 10:19:49 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempEY4696.html [2011-10-04 10:19:49 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\Temptf4696.html [2011-09-22 18:02:07 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempgS4348.html [2011-09-22 18:02:07 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\TemprK4348.html [2010-11-07 22:48:08 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\Templn2260.html [2010-11-07 22:48:08 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\Temptw2260.html [2010-11-07 16:09:29 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempnM3540.html [2010-11-07 16:09:29 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempvE3540.html [2010-11-07 11:40:18 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\Temphg4656.html [2010-11-07 11:40:18 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempNm4656.html [2010-11-07 11:29:05 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempIS4056.html [2010-11-07 11:29:05 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\TemppF4056.html [2010-11-07 11:10:50 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempYL3196.html [2010-11-07 11:10:50 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempZA3196.html [2010-11-07 00:13:01 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempAP3468.html [2010-11-07 00:13:01 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\Temppc3468.html [2010-11-07 00:10:19 | 000,002,432 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempNx3468.html [2010-11-07 00:10:19 | 000,002,089 | ---- | C] () -- C:\Users\konkor\AppData\Local\TempnL3468.html [2010-04-17 11:07:16 | 000,417,792 | ---- | C] () -- C:\Users\konkor\GL4JavbJauGljJNI14.dll [2009-07-12 21:28:00 | 000,189,440 | ---- | C] () -- C:\Users\konkor\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009-07-11 13:20:50 | 000,271,945 | ---- | C] () -- C:\ProgramData\nvModes.001 [2009-07-11 13:15:01 | 000,271,945 | ---- | C] () -- C:\ProgramData\nvModes.dat [2009-07-11 00:01:04 | 000,001,460 | ---- | C] () -- C:\Users\konkor\AppData\Local\d3d9caps64.dat [color=#E56717]========== LOP Check ==========[/color] [2012-07-05 20:48:14 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\Ashampoo [2011-11-04 16:46:28 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\Babylon [2012-05-17 18:25:57 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\BESTplayer [2010-04-21 21:16:42 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1 [2011-10-04 10:19:48 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\Gadu-Gadu 10 [2012-07-08 18:17:56 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\hellomoto [2012-07-02 18:18:04 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\ipla [2011-06-27 23:59:48 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\IrfanView [2012-02-22 21:56:39 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\MOVAVI [2012-06-24 12:34:49 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\NapiProjekt [2010-08-26 23:17:21 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\Nokia [2010-08-26 23:23:21 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\Nokia Multimedia Player [2010-07-27 23:33:58 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\OpenOffice.org [2011-07-13 17:56:34 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\Opera [2010-08-26 23:17:37 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\PC Suite [2011-01-03 14:25:43 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\PhotoScape [2011-08-18 07:41:30 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\PLAY ONLINE [2010-11-25 23:30:08 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\RDRM [2012-05-05 10:54:47 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\Tlen.pl [2010-02-07 22:10:42 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\Transcend [2012-06-24 13:05:51 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\uTorrent [2009-07-18 18:39:20 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\VistaCodecs [2012-06-28 13:05:05 | 000,000,000 | ---D | M] -- C:\Users\konkor\AppData\Roaming\XnView [2012-07-14 11:21:57 | 000,032,672 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] < End of report >