OTL logfile created on: 2012-07-18 17:20:44 - Run 2 OTL by OldTimer - Version 3.2.54.0 Folder = L:\ Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 7.0.6002.18005) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,21 Gb Available Physical Memory | 60,80% Memory free 4,24 Gb Paging File | 3,23 Gb Available in Paging File | 76,12% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 25,31 Gb Total Space | 1,05 Gb Free Space | 4,16% Space Free | Partition Type: NTFS Drive D: | 75,44 Gb Total Space | 22,41 Gb Free Space | 29,71% Space Free | Partition Type: NTFS Drive F: | 75,55 Gb Total Space | 4,28 Gb Free Space | 5,66% Space Free | Partition Type: NTFS Drive L: | 7,41 Gb Total Space | 5,46 Gb Free Space | 73,69% Space Free | Partition Type: FAT32 Computer Name: DOMEK | User Name: dom | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-07-18 13:43:48 | 000,596,480 | ---- | M] (OldTimer Tools) -- L:\OTL.exe PRC - [2012-06-22 12:44:57 | 000,874,384 | ---- | M] (Opera Software) -- D:\Programy\Opera\opera.exe PRC - [2012-06-14 04:08:56 | 027,595,032 | ---- | M] (Dropbox, Inc.) -- C:\Users\dom\AppData\Roaming\Dropbox\bin\Dropbox.exe PRC - [2012-05-08 23:55:19 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- D:\Programy\Avira\Avira\AntiVir Desktop\sched.exe PRC - [2012-05-08 23:55:14 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- D:\Programy\Avira\Avira\AntiVir Desktop\avguard.exe PRC - [2012-05-08 23:55:14 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- D:\Programy\Avira\Avira\AntiVir Desktop\avshadow.exe PRC - [2012-05-08 23:55:13 | 000,348,624 | ---- | M] (Avira Operations GmbH & Co. KG) -- D:\Programy\Avira\Avira\AntiVir Desktop\avgnt.exe PRC - [2011-11-10 11:17:04 | 003,514,176 | ---- | M] (DT Soft Ltd) -- D:\Programy\DAEMON Tools Lite\DTLite.exe PRC - [2011-10-29 17:15:10 | 000,151,552 | ---- | M] () -- C:\Windows\KMService.exe PRC - [2011-10-29 17:15:10 | 000,008,192 | ---- | M] () -- C:\Windows\System32\srvany.exe PRC - [2009-04-11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2008-01-02 10:40:14 | 000,348,160 | ---- | M] (SAMSUNG Electronics co., LTD.) -- C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe PRC - [2007-07-05 00:41:42 | 000,045,056 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe PRC - [2007-06-28 11:57:04 | 000,482,984 | ---- | M] () -- C:\Program Files\Samsung\Samsung Update Plus\SLUSelfUpdateClient.exe PRC - [2007-06-28 11:54:42 | 000,073,728 | ---- | M] () -- C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe PRC - [2007-06-11 19:53:14 | 000,455,600 | ---- | M] () -- D:\Programy\Lexmark\Lexmark 4800 Series\lxdemon.exe PRC - [2007-06-01 14:06:09 | 000,020,480 | ---- | M] () -- D:\Programy\Lexmark\Lexmark 4800 Series\lxdeamon.exe PRC - [2007-05-29 15:07:58 | 000,598,960 | ---- | M] ( ) -- C:\Windows\System32\lxdecoms.exe PRC - [2006-10-05 06:10:12 | 000,009,216 | ---- | M] (Agere Systems) -- C:\Windows\System32\agrsmsvc.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-06-14 00:59:33 | 012,433,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\f2691cfa7671cdc58179e56ba9227591\System.Windows.Forms.ni.dll MOD - [2012-06-14 00:59:18 | 001,592,320 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\18f9789aa214c657113e676b3a9015aa\System.Drawing.ni.dll MOD - [2012-05-13 11:27:40 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bd76aaaa03ddc15d1840207b5a480644\System.Configuration.ni.dll MOD - [2012-05-13 11:26:18 | 005,450,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d2630342a066a7cb9056d9eb6157687a\System.Xml.ni.dll MOD - [2012-05-13 11:24:07 | 007,953,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\28d633338fc8d29f8af31935ef7d001b\System.ni.dll MOD - [2012-05-13 11:23:47 | 011,492,352 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\af9c9e9d7e0523cd444f8b551baa9cbf\mscorlib.ni.dll MOD - [2009-03-31 20:05:12 | 000,311,296 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll MOD - [2007-08-07 02:31:18 | 000,159,744 | ---- | M] () -- C:\Windows\System32\atitmmxx.dll MOD - [2007-06-11 19:53:14 | 000,455,600 | ---- | M] () -- D:\Programy\Lexmark\Lexmark 4800 Series\lxdemon.exe MOD - [2007-06-08 10:52:43 | 000,036,864 | ---- | M] () -- D:\Programy\Lexmark\Lexmark 4800 Series\app4r.monitor.core.dll MOD - [2007-06-08 10:52:43 | 000,028,672 | ---- | M] () -- D:\Programy\Lexmark\Lexmark 4800 Series\app4r.monitor.common.dll MOD - [2007-06-08 10:52:00 | 000,057,344 | ---- | M] () -- D:\Programy\Lexmark\Lexmark 4800 Series\app4r.devmons.mcmdevmon.dll MOD - [2007-06-01 14:06:28 | 000,011,776 | ---- | M] () -- D:\Programy\Lexmark\Lexmark 4800 Series\app4r.devmons.mcmdevmon.autoplayutil.dll MOD - [2007-06-01 14:06:09 | 000,020,480 | ---- | M] () -- D:\Programy\Lexmark\Lexmark 4800 Series\lxdeamon.exe MOD - [2007-05-24 22:21:25 | 000,278,528 | ---- | M] () -- D:\Programy\Lexmark\Lexmark 4800 Series\lxdescw.dll MOD - [2007-05-03 17:39:31 | 000,589,824 | ---- | M] () -- C:\Windows\System32\spool\drivers\w32x86\3\lxdedatr.dll MOD - [2007-03-26 09:39:35 | 000,073,728 | ---- | M] () -- C:\Windows\System32\spool\drivers\w32x86\3\lxdecats.dll MOD - [2006-08-12 05:48:40 | 000,049,152 | ---- | M] () -- C:\Program Files\Samsung\Samsung Magic Doctor\HookDllPS2.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2012-07-12 01:19:13 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012-05-08 23:55:19 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- D:\Programy\Avira\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2012-05-08 23:55:14 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- D:\Programy\Avira\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2011-10-29 17:15:10 | 000,008,192 | ---- | M] () [Auto | Running] -- C:\Windows\System32\srvany.exe -- (KMService) SRV - [2010-02-19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2008-01-19 09:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2007-06-28 11:54:42 | 000,073,728 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe -- (Samsung Update Plus) SRV - [2007-05-29 15:07:58 | 000,598,960 | ---- | M] ( ) [Auto | Running] -- C:\Windows\System32\lxdecoms.exe -- (lxde_device) SRV - [2007-05-29 15:06:43 | 000,099,248 | ---- | M] () [Auto | Stopped] -- C:\Windows\System32\spool\DRIVERS\W32X86\3\\lxdeserv.exe -- (lxdeCATSCustConnectService) SRV - [2006-10-05 06:10:12 | 000,009,216 | ---- | M] (Agere Systems) [Auto | Running] -- C:\Windows\System32\agrsmsvc.exe -- (AgereModemAudio) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp) DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive) DRV - [2012-05-08 23:55:19 | 000,137,928 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb) DRV - [2012-05-08 23:55:19 | 000,083,392 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt) DRV - [2011-11-25 20:02:37 | 000,239,168 | ---- | M] (DT Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV - [2011-09-16 00:55:04 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr) DRV - [2010-06-17 16:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2010-01-27 04:09:02 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\npf.sys -- (NPF) WinPcap Packet Driver (NPF) DRV - [2008-03-13 01:19:28 | 000,013,312 | ---- | M] (SAMSUNG ELECTRONICS CO., LTD.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\KMDFMEMIO.sys -- (KMDFMEMIO) DRV - [2007-09-13 08:17:58 | 000,755,712 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr) DRV - [2007-08-07 02:30:52 | 002,601,472 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (R300) DRV - [2007-08-07 02:30:52 | 002,601,472 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag) DRV - [2007-04-26 03:15:26 | 000,007,680 | ---- | M] (ATI Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\AtiPcie.sys -- (AtiPcie) ATI PCI Express (3GIO) DRV - [2006-11-28 09:11:00 | 001,161,888 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem) DRV - [2006-11-07 10:42:30 | 000,086,368 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\w200obex.sys -- (w200obex) DRV - [2006-11-07 10:42:28 | 000,088,560 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\w200mgmt.sys -- (w200mgmt) Sony Ericsson W200 USB WMC Device Management Drivers (WDM) DRV - [2006-11-07 10:42:24 | 000,097,056 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\w200mdm.sys -- (w200mdm) DRV - [2006-11-07 10:42:22 | 000,009,328 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\w200mdfl.sys -- (w200mdfl) DRV - [2006-11-07 10:42:16 | 000,061,504 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\w200bus.sys -- (w200bus) Sony Ericsson W200 driver (WDM) DRV - [2006-11-02 09:30:56 | 002,589,184 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NETw2v32.sys -- (NETw2v32) Intel(R) DRV - [2006-11-02 09:30:56 | 000,047,104 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Rtnicxp.sys -- (RTL8023xp) DRV - [1996-04-03 21:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\giveio.sys -- (giveio) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1710393817-1163594516-1520260726-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-21-1710393817-1163594516-1520260726-1003\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKU\S-1-5-21-1710393817-1163594516-1520260726-1003\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-1710393817-1163594516-1520260726-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKU\S-1-5-21-1710393817-1163594516-1520260726-1003\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.google.pl/cse?q={searchTerms}&cx=partner-pub-2489206448026482%3A4041638047&tbm=&ie=UTF-8#gsc.tab=0&gsc.q={searchTerms} IE - HKU\S-1-5-21-1710393817-1163594516-1520260726-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "" FF - prefs.js..browser.search.defaultenginename: "Google " FF - prefs.js..browser.search.order.1: "Google " FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "about:home" FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_265.dll () FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: D:\Programy\OFFICE~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: D:\Programy\OFFICE~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\dom\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\dom\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: D:\Programy\Firefox\components [2012-05-17 21:06:35 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: D:\Programy\Firefox\plugins [2011-05-06 12:36:39 | 000,000,000 | ---D | M] [2011-10-28 12:40:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\dom\AppData\Roaming\mozilla\Extensions [2012-07-18 17:05:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\dom\AppData\Roaming\mozilla\Firefox\Profiles\np67w0xo.default\extensions [2011-10-29 11:14:00 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION [color=#E56717]========== Chrome ==========[/color] CHR - homepage: http://www.v9.com/idg/idg_1327446450_178719 CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms} CHR - homepage: http://www.v9.com/idg/idg_1327446450_178719 CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\dom\AppData\Local\Google\Chrome\Application\20.0.1132.57\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\dom\AppData\Local\Google\Chrome\Application\20.0.1132.57\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Users\dom\AppData\Local\Google\Chrome\Application\20.0.1132.57\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll CHR - plugin: Adobe Acrobat (Enabled) = D:\Programy\Firefox\plugins\nppdf32.dll CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = D:\Programy\Firefox\plugins\np-mswmp.dll CHR - plugin: Java Deployment Toolkit 6.0.310.5 (Enabled) = D:\Programy\Firefox\plugins\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll CHR - plugin: 2007 Microsoft Office system (Enabled) = D:\Programy\Firefox\plugins\NPOFF12.DLL CHR - plugin: Microsoft Office 2010 (Enabled) = D:\Programy\OFFICE~2\Office14\NPAUTHZ.DLL CHR - plugin: Microsoft Office 2010 (Enabled) = D:\Programy\OFFICE~2\Office14\NPSPWRAP.DLL CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = D:\Programy\Firefox\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = D:\Programy\Firefox\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = D:\Programy\Firefox\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = D:\Programy\Firefox\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = D:\Programy\Firefox\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = D:\Programy\Firefox\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = D:\Programy\Firefox\plugins\npqtplugin7.dll CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll CHR - plugin: Google Update (Enabled) = C:\Users\dom\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll CHR - Extension: YouTube = C:\Users\dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Szukaj w Google = C:\Users\dom\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ O1 HOSTS File: ([2012-07-18 13:07:36 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Programy\Office 2010\Office14\URLREDIR.DLL (Microsoft Corporation) O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [avgnt] D:\Programy\Avira\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) O4 - HKLM..\Run: [BCSSync] D:\Programy\Office 2010\Office14\BCSSync.exe (Microsoft Corporation) O4 - HKLM..\Run: [lxdeamon] D:\Programy\Lexmark\Lexmark 4800 Series\lxdeamon.exe () O4 - HKLM..\Run: [lxdemon.exe] D:\Programy\Lexmark\Lexmark 4800 Series\lxdemon.exe () O4 - HKLM..\Run: [QuickTime Task] D:\Programy\QTTask.exe (Apple Inc.) O4 - HKLM..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) O4 - HKU\S-1-5-21-1710393817-1163594516-1520260726-1003..\Run: [DAEMON Tools Lite] D:\Programy\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKU\S-1-5-21-1710393817-1163594516-1520260726-1003..\Run: [Odkurzacz-MCD] D:\Programy\Odkurzacz\odk_mcd.exe (Franmo Software) O4 - Startup: C:\Users\dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\dom\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoHotStart = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1710393817-1163594516-1520260726-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1710393817-1163594516-1520260726-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - D:\Programy\Office 2010\Office14\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Wyślij &do programu OneNote - D:\Programy\Office 2010\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Programy\Office 2010\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Programy\Office 2010\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - D:\Programy\Office 2010\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - D:\Programy\Office 2010\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7186AA61-E2A5-4555-91F6-ECEBBB0F1F44}: DhcpNameServer = 192.168.1.1 O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img11.jpg O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img11.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-07-18 13:10:52 | 000,000,000 | ---D | C] -- C:\Windows\temp [2012-07-18 13:10:52 | 000,000,000 | ---D | C] -- C:\Users\dom\AppData\Local\temp [2012-07-18 13:09:34 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN [2012-07-18 12:59:17 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe [2012-07-18 12:59:17 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe [2012-07-18 12:59:17 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe [2012-07-18 12:50:39 | 000,000,000 | ---D | C] -- C:\Qoobox [2012-07-18 12:50:17 | 000,000,000 | ---D | C] -- C:\Windows\erdnt [2012-07-13 13:27:36 | 000,000,000 | ---D | C] -- C:\Users\dom\Desktop\auto [2012-07-12 03:03:45 | 002,047,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2012-07-11 17:30:41 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll [2012-07-10 21:50:58 | 000,000,000 | ---D | C] -- C:\Users\dom\Desktop\Nowy folder [2012-07-10 00:35:24 | 000,000,000 | ---D | C] -- C:\Users\dom\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1 [2012-07-10 00:35:24 | 000,000,000 | ---D | C] -- C:\Users\dom\AppData\Roaming\Adobe Mini Bridge CS5 [2012-07-09 20:33:58 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1986-12.com.adobe [2012-07-09 20:30:07 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe Media Player [2012-07-09 20:30:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe [2012-07-09 20:28:03 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe AIR [2012-07-07 16:29:16 | 000,000,000 | ---D | C] -- C:\tp [2012-07-05 16:51:07 | 000,000,000 | ---D | C] -- C:\Users\dom\Desktop\karta [2012-07-02 02:26:28 | 000,000,000 | ---D | C] -- C:\Program Files\Rockstar Games [2012-07-02 02:22:10 | 000,000,000 | ---D | C] -- C:\Users\dom\Documents\GTA San Andreas User Files [2012-06-30 14:03:36 | 000,000,000 | ---D | C] -- C:\Program Files\Alcohol Soft [2012-06-26 21:23:00 | 000,000,000 | ---D | C] -- C:\Users\dom\AppData\Local\Macromedia [2012-06-25 16:00:48 | 000,000,000 | ---D | C] -- C:\Program Files\Dropbox [2012-06-25 16:00:10 | 000,000,000 | ---D | C] -- C:\Users\dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox [2012-06-25 15:58:36 | 000,000,000 | ---D | C] -- C:\Users\dom\AppData\Roaming\Dropbox [2012-06-21 08:42:46 | 002,422,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll [2012-06-21 08:42:46 | 000,045,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll [2012-06-21 08:42:25 | 000,577,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll [2012-06-21 08:42:25 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll [2012-06-21 08:42:25 | 000,035,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll [2012-06-21 08:42:10 | 000,171,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll [2012-06-21 08:42:10 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-07-18 17:19:40 | 000,711,708 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2012-07-18 17:19:40 | 000,631,636 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2012-07-18 17:19:40 | 000,149,662 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2012-07-18 17:19:40 | 000,118,262 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2012-07-18 17:19:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012-07-18 17:15:18 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2012-07-18 17:15:18 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2012-07-18 17:14:47 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-07-18 17:13:47 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat [2012-07-18 13:07:36 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts [2012-07-18 10:49:40 | 000,001,050 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1710393817-1163594516-1520260726-1003UA.job [2012-07-18 10:49:40 | 000,000,998 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1710393817-1163594516-1520260726-1003Core.job [2012-07-15 20:02:36 | 000,162,304 | ---- | M] () -- C:\Users\dom\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-07-15 17:28:02 | 000,000,757 | ---- | M] () -- C:\Users\dom\Desktop\Zagraj.lnk [2012-07-12 20:06:09 | 000,002,032 | ---- | M] () -- C:\Users\dom\Desktop\Google Chrome.lnk [2012-07-12 03:24:24 | 003,728,864 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2012-07-12 01:19:13 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe [2012-07-12 01:19:13 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [2012-07-10 13:45:28 | 003,531,434 | ---- | M] () -- C:\Users\dom\Desktop\DSC_0959.JPG [2012-06-30 14:11:14 | 177,125,444 | ---- | M] () -- C:\Windows\MEMORY.DMP [2012-06-27 13:21:00 | 000,006,363 | ---- | M] () -- C:\ProgramData\lxde [2012-06-25 16:05:34 | 000,000,939 | ---- | M] () -- C:\Users\dom\Desktop\Dropbox.lnk [2012-06-25 16:01:29 | 000,000,893 | ---- | M] () -- C:\Users\dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-18 12:59:17 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe [2012-07-18 12:59:17 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe [2012-07-18 12:59:17 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe [2012-07-18 12:59:17 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe [2012-07-18 12:59:17 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe [2012-07-15 17:28:02 | 000,000,757 | ---- | C] () -- C:\Users\dom\Desktop\Zagraj.lnk [2012-07-10 13:45:28 | 003,531,434 | ---- | C] () -- C:\Users\dom\Desktop\DSC_0959.JPG [2012-07-09 20:33:35 | 000,000,794 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS5.lnk [2012-07-09 20:32:36 | 000,000,768 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS5.lnk [2012-07-09 20:32:03 | 000,000,831 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS5.lnk [2012-07-09 20:29:24 | 000,000,888 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS5.lnk [2012-07-09 20:29:14 | 000,001,308 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS5.lnk [2012-07-09 20:28:09 | 000,000,874 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk [2012-06-30 14:11:14 | 177,125,444 | ---- | C] () -- C:\Windows\MEMORY.DMP [2012-06-25 16:05:34 | 000,000,939 | ---- | C] () -- C:\Users\dom\Desktop\Dropbox.lnk [2012-06-25 16:01:03 | 000,000,893 | ---- | C] () -- C:\Users\dom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2012-01-23 12:04:39 | 000,000,680 | ---- | C] () -- C:\Users\dom\AppData\Local\d3d9caps.dat [2011-11-14 16:19:05 | 000,150,996 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT [2011-10-30 13:04:27 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2011-10-30 13:04:27 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin [2011-10-30 13:03:44 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin [2011-10-29 17:29:32 | 000,006,363 | ---- | C] () -- C:\ProgramData\lxde [2011-10-29 17:17:39 | 000,151,552 | ---- | C] () -- C:\Windows\KMService.exe [2011-10-29 17:17:39 | 000,008,192 | ---- | C] () -- C:\Windows\System32\srvany.exe [2011-10-29 13:34:55 | 000,348,160 | ---- | C] () -- C:\Windows\System32\lxdecoin.dll [2011-10-29 13:30:35 | 000,000,060 | -H-- | C] () -- C:\Windows\System32\lxderwrd.ini [2011-10-29 13:30:00 | 000,348,160 | ---- | C] () -- C:\Windows\System32\lxdeinst.dll [2011-10-29 13:29:59 | 000,434,176 | ---- | C] ( ) -- C:\Windows\System32\lxdehcp.dll [2011-10-29 13:29:58 | 000,356,352 | ---- | C] ( ) -- C:\Windows\System32\lxdeinpa.dll [2011-10-29 13:29:58 | 000,339,968 | ---- | C] ( ) -- C:\Windows\System32\lxdeiesc.dll [2011-10-29 13:29:57 | 000,950,272 | ---- | C] ( ) -- C:\Windows\System32\lxdeusb1.dll [2011-10-29 13:29:56 | 001,200,128 | ---- | C] ( ) -- C:\Windows\System32\lxdeserv.dll [2011-10-29 13:29:56 | 000,053,248 | ---- | C] ( ) -- C:\Windows\System32\lxdeprox.dll [2011-10-29 13:29:55 | 000,647,168 | ---- | C] ( ) -- C:\Windows\System32\lxdepmui.dll [2011-10-29 13:29:54 | 000,565,248 | ---- | C] ( ) -- C:\Windows\System32\lxdelmpm.dll [2011-10-29 13:29:52 | 000,320,432 | ---- | C] ( ) -- C:\Windows\System32\lxdeih.exe [2011-10-29 13:29:50 | 000,663,552 | ---- | C] ( ) -- C:\Windows\System32\lxdehbn3.dll [2011-10-29 13:29:50 | 000,208,896 | ---- | C] () -- C:\Windows\System32\lxdegrd.dll [2011-10-29 13:29:48 | 000,598,960 | ---- | C] ( ) -- C:\Windows\System32\lxdecoms.exe [2011-10-29 13:29:47 | 000,860,160 | ---- | C] ( ) -- C:\Windows\System32\lxdecomc.dll [2011-10-29 13:29:47 | 000,364,544 | ---- | C] ( ) -- C:\Windows\System32\lxdecomm.dll [2011-10-29 13:29:46 | 000,365,488 | ---- | C] ( ) -- C:\Windows\System32\lxdecfg.exe [2011-10-28 13:37:37 | 000,444,283 | ---- | C] () -- C:\Program Files\Common Files\WinPcapNmap.exe [2011-10-26 23:29:25 | 000,165,376 | ---- | C] () -- C:\Windows\System32\unrar.dll [2011-10-26 20:32:18 | 000,162,304 | ---- | C] () -- C:\Users\dom\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-04-19 23:10:32 | 000,059,904 | ---- | C] () -- C:\Windows\System32\OVDecode.dll [color=#E56717]========== LOP Check ==========[/color] [2011-10-28 12:38:59 | 000,000,000 | ---D | M] -- C:\Users\dom\AppData\Roaming\Audacity [2011-10-27 00:16:48 | 000,000,000 | ---D | M] -- C:\Users\dom\AppData\Roaming\BESTplayer [2012-01-27 11:24:38 | 000,000,000 | ---D | M] -- C:\Users\dom\AppData\Roaming\DAEMON Tools Lite [2012-07-18 17:15:54 | 000,000,000 | ---D | M] -- C:\Users\dom\AppData\Roaming\Dropbox [2012-02-27 12:33:49 | 000,000,000 | ---D | M] -- C:\Users\dom\AppData\Roaming\e-pity [2011-10-28 13:29:26 | 000,000,000 | ---D | M] -- C:\Users\dom\AppData\Roaming\Gadu-Gadu [2012-05-22 18:12:45 | 000,000,000 | ---D | M] -- C:\Users\dom\AppData\Roaming\GHISLER [2012-06-03 13:57:21 | 000,000,000 | ---D | M] -- C:\Users\dom\AppData\Roaming\Kalypso Media [2012-01-10 13:15:59 | 000,000,000 | ---D | M] -- C:\Users\dom\AppData\Roaming\Lexmark Productivity Studio [2011-11-08 21:51:14 | 000,000,000 | ---D | M] -- C:\Users\dom\AppData\Roaming\NapiProjekt [2012-07-09 15:46:31 | 000,000,000 | ---D | M] -- C:\Users\dom\AppData\Roaming\ObviousIdea [2011-10-26 20:28:03 | 000,000,000 | ---D | M] -- C:\Users\dom\AppData\Roaming\Opera [2012-02-19 20:48:53 | 000,000,000 | ---D | M] -- C:\Users\dom\AppData\Roaming\Origin [2012-07-10 00:35:24 | 000,000,000 | ---D | M] -- C:\Users\dom\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1 [2012-07-10 15:55:09 | 000,000,000 | ---D | M] -- C:\Users\dom\AppData\Roaming\uTorrent [2012-04-04 18:13:14 | 000,000,000 | ---D | M] -- C:\Users\dom\AppData\Roaming\VDownloader [2012-07-18 17:13:48 | 000,032,546 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] < End of report >