OTL logfile created on: 2012-07-20 13:37:51 - Run 4
OTL by OldTimer - Version 3.2.54.0     Folder = C:\Users\Adam\Desktop
 Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,97 Gb Total Physical Memory | 2,19 Gb Available Physical Memory | 73,99% Memory free
5,93 Gb Paging File | 5,13 Gb Available in Paging File | 86,55% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 39,90 Gb Total Space | 11,70 Gb Free Space | 29,31% Space Free | Partition Type: NTFS
Drive D: | 200,00 Gb Total Space | 143,90 Gb Free Space | 71,95% Space Free | Partition Type: NTFS
Drive E: | 58,09 Gb Total Space | 38,04 Gb Free Space | 65,48% Space Free | Partition Type: NTFS
 
Computer Name: ADAM-KOMPUTER | User Name: Adam | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-07-20 09:59:52 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Adam\Desktop\OTL.exe
PRC - [2012-06-18 07:00:46 | 000,874,384 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe
PRC - [2012-05-15 11:28:16 | 001,820,480 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
PRC - [2012-05-15 11:27:34 | 000,857,920 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
PRC - [2012-03-05 21:21:07 | 000,253,952 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Program Files\blueconnect\DataCardMonitor.exe
PRC - [2011-07-10 12:40:03 | 000,151,552 | ---- | M] () -- C:\Windows\KMService.exe
PRC - [2011-07-10 12:40:03 | 000,008,192 | ---- | M] () -- C:\Windows\System32\srvany.exe
PRC - [2011-06-24 06:22:20 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
PRC - [2011-02-25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010-11-20 14:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2010-11-20 14:16:54 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
PRC - [2010-09-15 10:37:40 | 000,095,568 | ---- | M] (Devguru Co., Ltd.) -- C:\Windows\System32\dgdersvc.exe
PRC - [2010-05-28 08:25:04 | 000,233,472 | ---- | M] (Teruten) -- C:\Windows\System32\FsUsbExService.Exe
PRC - [2009-06-23 17:43:40 | 000,110,592 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Users\Adam\AppData\Roaming\blueconnect\ouc.exe
PRC - [2009-05-14 15:47:54 | 000,731,840 | ---- | M] (ESET) -- D:\ESET NOD32 Antivirus\ekrn.exe
PRC - [2009-05-14 15:47:08 | 002,029,640 | ---- | M] (ESET) -- D:\ESET NOD32 Antivirus\egui.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2011-03-17 01:11:16 | 004,297,568 | ---- | M] () -- C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2012-07-12 23:07:08 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-05-15 12:26:00 | 001,262,400 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2011-07-10 12:40:03 | 000,008,192 | ---- | M] () [Auto | Running] -- C:\Windows\System32\srvany.exe -- (KMService)
SRV - [2011-06-12 12:15:00 | 031,125,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2010-09-15 10:37:40 | 000,095,568 | ---- | M] (Devguru Co., Ltd.) [Auto | Running] -- C:\Windows\System32\dgdersvc.exe -- (dgdersvc)
SRV - [2010-07-08 10:40:04 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2010-05-28 08:25:04 | 000,233,472 | ---- | M] (Teruten) [Auto | Running] -- C:\Windows\System32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009-07-14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009-07-14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009-05-14 15:54:22 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- D:\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv)
SRV - [2009-05-14 15:47:54 | 000,731,840 | ---- | M] (ESET) [Auto | Running] -- D:\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\synth3dvsc.sys -- (Synth3dVsc)
DRV - File not found [Kernel | On_Demand | Unknown] --  -- (aewuuybb)
DRV - [2012-05-15 12:26:00 | 011,354,944 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2012-04-18 19:08:04 | 000,148,800 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2012-03-22 16:29:57 | 000,473,656 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2010-11-20 14:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010-11-20 14:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010-11-20 14:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010-11-20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010-11-20 12:21:14 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010-11-20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010-11-20 11:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010-11-20 11:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010-09-15 10:37:40 | 000,018,120 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dgderdrv.sys -- (dgderdrv)
DRV - [2010-09-15 10:33:32 | 000,036,640 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2010-06-21 05:26:36 | 000,121,576 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdm.sys -- (ssadmdm)
DRV - [2010-06-21 05:26:36 | 000,096,488 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM)
DRV - [2010-06-21 05:26:36 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter)
DRV - [2010-04-27 04:25:20 | 000,132,424 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdm.sys -- (sscdmdm)
DRV - [2010-04-27 04:25:20 | 000,110,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdserd.sys -- (sscdserd) SAMSUNG Mobile Modem Diagnostic Serial Port (WDM)
DRV - [2010-04-27 04:25:20 | 000,104,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)
DRV - [2010-04-27 04:25:20 | 000,014,920 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV - [2009-07-14 00:13:48 | 001,035,776 | ---- | M] (LSI Corp) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2009-07-14 00:02:51 | 004,231,168 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\netw5v32.sys -- (netw5v32) Sterownik karty Intel(R)
DRV - [2009-07-14 00:02:47 | 000,050,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\L1C62x86.sys -- (L1C) NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20)
DRV - [2009-06-22 20:38:22 | 000,102,912 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2009-06-22 20:26:04 | 000,100,736 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbdev.sys -- (hwusbdev)
DRV - [2009-05-14 15:49:34 | 000,093,312 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\epfwwfpr.sys -- (epfwwfpr)
DRV - [2009-05-14 15:47:14 | 000,107,256 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\System32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009-05-14 15:41:10 | 000,114,472 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\Windows\System32\drivers\eamon.sys -- (eamon)
DRV - [2007-05-09 12:44:30 | 000,075,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\slabser.sys -- (slabser)
DRV - [2007-05-09 12:44:30 | 000,058,368 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\slabbus.sys -- (slabbus) Suunto Sports Instrument driver (WDM)
DRV - [2007-03-28 08:51:40 | 000,043,008 | ---- | M] (Winbond Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\winbondcir.sys -- (winbondcir)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_265.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.448: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Adam\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: D:\ESET NOD32 Antivirus\Mozilla Thunderbird [2012-07-20 12:49:17 | 000,000,000 | ---D | M]
 
 
O1 HOSTS File: ([2012-07-10 07:02:13 | 000,000,939 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 genuine.microsoft.com
O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com
O1 - Hosts: 127.0.0.1 sls.microsoft.com
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [DataCardMonitor] C:\Program Files\blueconnect\DataCardMonitor.exe (Huawei Technologies Co., Ltd.)
O4 - HKLM..\Run: [egui] D:\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Windows\System32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKCU..\Run: [ALLUpdate] "C:\Program Files\ALLPlayer\ALLUpdate.exe" "sleep" File not found
O4 - HKCU..\Run: [HW_OPENEYE_OUC_blueconnect] C:\Program Files\blueconnect\UpdateDog\ouc.exe (Huawei Technologies Co., Ltd.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Wyślij &do programu OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 151.152.153.10 151.152.153.20
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0E9BF245-EC65-49F6-8ED2-C238AC36D2AF}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{12A2F7C6-B89C-488C-89E2-20E3ABF1E645}: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A33F57F6-DC1F-4220-9C70-355D3524BE88}: DhcpNameServer = 151.152.153.10 151.152.153.20
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\text/html {574940E0-1B7A-4881-8FA3-1E809714B156} - Reg Error: Value error. File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{718387b4-053f-11df-94a8-00269e59df6c}\Shell - "" = AutoRun
O33 - MountPoints2\{718387b4-053f-11df-94a8-00269e59df6c}\Shell\AutoRun\command - "" = G:\_AUTORUN\AUTORUN.EXE
O33 - MountPoints2\{8e1df290-66f7-11e1-bb33-00269e59df6c}\Shell - "" = AutoRun
O33 - MountPoints2\{8e1df290-66f7-11e1-bb33-00269e59df6c}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{8e1df29f-66f7-11e1-bb33-00269e59df6c}\Shell - "" = AutoRun
O33 - MountPoints2\{8e1df29f-66f7-11e1-bb33-00269e59df6c}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{eebb9ae2-a0c0-11e0-a26d-f565213a6f47}\Shell - "" = AutoRun
O33 - MountPoints2\{eebb9ae2-a0c0-11e0-a26d-f565213a6f47}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a
O33 - MountPoints2\H\Shell - "" = AutoRun
O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-07-20 10:42:56 | 000,000,000 | ---D | C] -- C:\Program Files\HitmanPro
[2012-07-20 10:32:24 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro
[2012-07-20 10:30:12 | 007,718,272 | ---- | C] (SurfRight B.V.) -- C:\Users\Adam\Desktop\HitmanPro36.exe
[2012-07-20 10:10:01 | 000,000,000 | ---D | C] -- C:\_OTL
[2012-07-20 10:04:00 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Adam\Desktop\OTL.exe
[2012-07-19 11:28:35 | 000,000,000 | ---D | C] -- C:\Users\Adam\Desktop\com.sixtostart.zombiesrun
[2012-07-18 12:00:20 | 000,000,000 | ---D | C] -- C:\Users\Adam\Desktop\RoombreakADGlobal
[2012-07-12 12:50:15 | 000,000,000 | ---D | C] -- C:\Program Files\Disabled Startup
[2012-07-11 23:53:11 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2012-07-11 23:53:10 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2012-07-11 23:53:10 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2012-07-11 23:53:09 | 001,800,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2012-07-11 23:53:09 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2012-07-11 23:53:09 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2012-07-11 23:53:08 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2012-07-11 23:50:49 | 002,345,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2012-07-11 22:53:37 | 000,219,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
[2012-07-11 22:53:35 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml3r.dll
[2012-07-11 22:53:33 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdosys.dll
[2012-06-22 07:05:50 | 002,422,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2012-06-22 07:05:50 | 000,045,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2012-06-22 07:05:15 | 000,577,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
[2012-06-22 07:05:15 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
[2012-06-22 07:05:15 | 000,035,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
[2012-06-22 07:04:56 | 000,171,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2012-06-22 07:04:56 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-07-20 13:35:58 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-07-20 13:35:53 | 2388,336,640 | -HS- | M] () -- C:\hiberfil.sys
[2012-07-20 13:35:17 | 000,013,440 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012-07-20 13:35:17 | 000,013,440 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012-07-20 13:34:41 | 000,632,023 | ---- | M] () -- C:\Users\Adam\Desktop\adwcleaner.exe
[2012-07-20 13:07:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012-07-20 10:29:48 | 007,718,272 | ---- | M] (SurfRight B.V.) -- C:\Users\Adam\Desktop\HitmanPro36.exe
[2012-07-20 09:59:52 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Adam\Desktop\OTL.exe
[2012-07-19 13:26:11 | 000,032,926 | ---- | M] () -- C:\Users\Adam\Desktop\MBP Ledziny.ods
[2012-07-19 12:22:44 | 000,033,095 | ---- | M] () -- C:\Users\Adam\Desktop\MP z OI Ledziny.ods
[2012-07-19 11:21:06 | 200,475,145 | ---- | M] () -- C:\Users\Adam\Desktop\com.sixtostart.zombiesrun.rar
[2012-07-18 14:55:54 | 000,039,108 | ---- | M] () -- C:\Users\Adam\Desktop\SP_1_Ledziny.ods
[2012-07-18 11:23:08 | 000,032,871 | ---- | M] () -- C:\Users\Adam\Desktop\ZS_Ledziny_Grudzien.ods
[2012-07-18 10:50:07 | 000,024,923 | ---- | M] () -- C:\Users\Adam\Desktop\Analiza_gaz.ods
[2012-07-18 08:46:29 | 000,701,260 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2012-07-18 08:46:29 | 000,618,912 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012-07-18 08:46:29 | 000,136,246 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2012-07-18 08:46:29 | 000,107,232 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012-07-13 00:07:06 | 000,000,116 | ---- | M] () -- C:\Windows\NeroDigital.ini
[2012-07-12 23:07:05 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012-07-12 23:07:05 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012-07-12 07:02:54 | 000,431,288 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012-07-10 07:02:13 | 000,000,939 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-07-20 13:34:41 | 000,632,023 | ---- | C] () -- C:\Users\Adam\Desktop\adwcleaner.exe
[2012-07-19 13:26:11 | 000,032,926 | ---- | C] () -- C:\Users\Adam\Desktop\MBP Ledziny.ods
[2012-07-19 12:22:44 | 000,033,095 | ---- | C] () -- C:\Users\Adam\Desktop\MP z OI Ledziny.ods
[2012-07-19 10:48:28 | 200,475,145 | ---- | C] () -- C:\Users\Adam\Desktop\com.sixtostart.zombiesrun.rar
[2012-07-18 12:31:56 | 000,039,108 | ---- | C] () -- C:\Users\Adam\Desktop\SP_1_Ledziny.ods
[2012-07-18 11:23:08 | 000,032,871 | ---- | C] () -- C:\Users\Adam\Desktop\ZS_Ledziny_Grudzien.ods
[2012-07-18 10:50:07 | 000,024,923 | ---- | C] () -- C:\Users\Adam\Desktop\Analiza_gaz.ods
[2011-07-13 15:38:48 | 000,000,127 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2011-07-10 12:40:43 | 000,008,192 | ---- | C] () -- C:\Windows\System32\srvany.exe
[2011-06-24 10:27:02 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2011-06-24 10:22:18 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2011-05-27 13:49:21 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat
[2011-04-24 14:45:42 | 000,548,864 | ---- | C] () -- C:\Windows\System32\JWinAPI.dll
[2010-11-16 01:43:41 | 000,151,552 | ---- | C] () -- C:\Windows\KMService.exe
[2010-10-05 13:47:20 | 000,110,592 | ---- | C] () -- C:\Windows\System32\FsUsbExDevice.Dll
[2010-10-05 13:47:20 | 000,036,640 | ---- | C] () -- C:\Windows\System32\FsUsbExDisk.Sys
[2010-09-15 10:41:54 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll
[2010-09-15 10:41:54 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll
[2010-09-15 10:41:54 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll
[2010-09-15 10:41:54 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll
[2010-05-01 12:00:07 | 000,008,704 | ---- | C] () -- C:\Users\Adam\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
[color=#E56717]========== Custom Scans ==========[/color]
 
[color=#A23BEC]< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders >[/color]
"!Do not use this registry key" = Use the SHGetFolderPath or SHGetKnownFolderPath function instead
"AppData" = C:\Users\Adam\AppData\Roaming -- [2012-07-20 13:35:03 | 000,000,000 | ---D | M]
"Local AppData" = C:\Users\Adam\AppData\Local -- [2012-07-20 13:35:01 | 000,000,000 | ---D | M]
"My Video" = C:\Users\Adam\Videos -- [2012-07-12 07:03:21 | 000,000,000 | R--D | M]
"{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}" = C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Libraries -- [2012-07-12 07:03:21 | 000,000,000 | R--D | M]
"My Pictures" = C:\Users\Adam\Pictures -- [2012-07-12 07:03:21 | 000,000,000 | R--D | M]
"Desktop" = C:\Users\Adam\Desktop -- [2012-07-20 13:34:41 | 000,000,000 | R--D | M]
"History" = C:\Users\Adam\AppData\Local\Microsoft\Windows\History -- [2010-01-19 18:21:12 | 000,000,000 | -HSD | M]
"NetHood" = C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Network Shortcuts -- [2012-03-22 14:23:52 | 000,000,000 | ---D | M]
"{56784854-C6CB-462B-8169-88E350ACB882}" = C:\Users\Adam\Contacts -- [2012-07-12 07:03:21 | 000,000,000 | R--D | M]
"Cookies" = C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Cookies -- [2012-07-20 10:35:36 | 000,000,000 | -HSD | M]
"Favorites" = C:\Users\Adam\Favorites -- [2012-07-12 07:03:21 | 000,000,000 | R--D | M]
"SendTo" = C:\Users\Adam\AppData\Roaming\Microsoft\Windows\SendTo -- [2011-11-28 11:47:47 | 000,000,000 | R--D | M]
"Start Menu" = C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu -- [2012-07-12 07:03:21 | 000,000,000 | R--D | M]
"My Music" = C:\Users\Adam\Music -- [2012-07-12 07:03:21 | 000,000,000 | R--D | M]
"Programs" = C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs -- [2012-07-12 07:03:21 | 000,000,000 | R--D | M]
"Recent" = C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Recent -- [2012-07-20 13:43:27 | 000,000,000 | R--D | M]
"CD Burning" = C:\Users\Adam\AppData\Local\Microsoft\Windows\Burn\Burn1 -- [2011-02-02 14:49:48 | 000,000,000 | RH-D | M]
"PrintHood" = C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Printer Shortcuts -- [2009-07-14 04:04:34 | 000,000,000 | ---D | M]
"{7D1D3A04-DEBB-4115-95CF-2F29DA2920DA}" = C:\Users\Adam\Searches -- [2012-07-12 07:03:21 | 000,000,000 | R--D | M]
"{374DE290-123F-4565-9164-39C4925E467B}" = C:\Users\Adam\Downloads -- [2012-07-12 07:03:21 | 000,000,000 | R--D | M]
"{A520A1A4-1780-4FF6-BD18-167343C5AF16}" = C:\Users\Adam\AppData\LocalLow -- [2012-07-20 13:35:02 | 000,000,000 | ---D | M]
"Startup" = C:\Program Files\My applications -- [2012-07-12 12:50:15 | 000,000,000 | R--D | M]
"Administrative Tools" = C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools -- [2012-07-12 07:03:21 | 000,000,000 | R--D | M]
"Personal" = C:\Users\Adam\Documents -- [2012-07-20 13:32:42 | 000,000,000 | R--D | M]
"{BFB9D5E0-C6A9-404C-B2B2-AE6DB6AF4968}" = C:\Users\Adam\Links -- [2012-07-12 07:03:21 | 000,000,000 | R--D | M]
"Cache" = C:\Users\Adam\AppData\Local\Microsoft\Windows\Temporary Internet Files -- [2012-07-20 13:19:03 | 000,000,000 | -HSD | M]
"Templates" = C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Templates -- [2010-10-05 14:05:39 | 000,000,000 | ---D | M]
"{4C5C32FF-BB9D-43B0-B5B4-2D72E54EAAA4}" = C:\Users\Adam\Saved Games -- [2012-07-12 07:03:21 | 000,000,000 | R--D | M]
"Fonts" = C:\Windows\Fonts -- [2012-05-23 12:53:40 | 000,000,000 | R-SD | M]
 
[color=#A23BEC]< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders >[/color]
"AppData" = %USERPROFILE%\AppData\Roaming -- [2012-07-20 13:35:03 | 000,000,000 | ---D | M]
"Cache" = %USERPROFILE%\AppData\Local\Microsoft\Windows\Temporary Internet Files -- [2012-07-20 13:19:03 | 000,000,000 | -HSD | M]
"Cookies" = %USERPROFILE%\AppData\Roaming\Microsoft\Windows\Cookies -- [2012-07-20 10:35:36 | 000,000,000 | -HSD | M]
"Desktop" = %USERPROFILE%\Desktop -- [2012-07-20 13:34:41 | 000,000,000 | R--D | M]
"Favorites" = %USERPROFILE%\Favorites -- [2012-07-12 07:03:21 | 000,000,000 | R--D | M]
"History" = %USERPROFILE%\AppData\Local\Microsoft\Windows\History -- [2010-01-19 18:21:12 | 000,000,000 | -HSD | M]
"Local AppData" = %USERPROFILE%\AppData\Local -- [2012-07-20 13:35:01 | 000,000,000 | ---D | M]
"My Music" = %USERPROFILE%\Music -- [2012-07-12 07:03:21 | 000,000,000 | R--D | M]
"My Pictures" = %USERPROFILE%\Pictures -- [2012-07-12 07:03:21 | 000,000,000 | R--D | M]
"My Video" = %USERPROFILE%\Videos -- [2012-07-12 07:03:21 | 000,000,000 | R--D | M]
"NetHood" = %USERPROFILE%\AppData\Roaming\Microsoft\Windows\Network Shortcuts -- [2012-03-22 14:23:52 | 000,000,000 | ---D | M]
"Personal" = %USERPROFILE%\Documents -- [2012-07-20 13:32:42 | 000,000,000 | R--D | M]
"Programs" = %USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs -- [2012-07-12 07:03:21 | 000,000,000 | R--D | M]
"Recent" = %USERPROFILE%\AppData\Roaming\Microsoft\Windows\Recent -- [2012-07-20 13:43:27 | 000,000,000 | R--D | M]
"SendTo" = %USERPROFILE%\AppData\Roaming\Microsoft\Windows\SendTo -- [2011-11-28 11:47:47 | 000,000,000 | R--D | M]
"Startup" = C:\Program Files\My applications -- [2012-07-12 12:50:15 | 000,000,000 | R--D | M]
"Start Menu" = %USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu -- [2012-07-12 07:03:21 | 000,000,000 | R--D | M]
"Templates" = %USERPROFILE%\AppData\Roaming\Microsoft\Windows\Templates -- [2010-10-05 14:05:39 | 000,000,000 | ---D | M]
"{374DE290-123F-4565-9164-39C4925E467B}" = %USERPROFILE%\Downloads -- [2012-07-12 07:03:21 | 000,000,000 | R--D | M]
"PrintHood" = %USERPROFILE%\AppData\Roaming\Microsoft\Windows\Printer Shortcuts -- [2009-07-14 04:04:34 | 000,000,000 | ---D | M]
"CD Burning" = %USERPROFILE%\AppData\Local\Microsoft\Windows\Burn\Burn1 -- [2011-02-02 14:49:48 | 000,000,000 | RH-D | M]
 
[color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders >[/color]
"Common Desktop" = C:\Users\Public\Desktop -- [2012-06-12 07:50:03 | 000,000,000 | RH-D | M]
"Common Start Menu" = C:\ProgramData\Microsoft\Windows\Start Menu -- [2010-12-22 22:07:37 | 000,000,000 | R--D | M]
"CommonVideo" = C:\Users\Public\Videos -- [2009-07-14 06:41:57 | 000,000,000 | R--D | M]
"CommonPictures" = C:\Users\Public\Pictures -- [2009-07-14 06:41:57 | 000,000,000 | R--D | M]
"Common Programs" = C:\ProgramData\Microsoft\Windows\Start Menu\Programs -- [2012-07-20 13:31:33 | 000,000,000 | R--D | M]
"CommonMusic" = C:\Users\Public\Music -- [2009-07-14 06:41:57 | 000,000,000 | R--D | M]
"Common Administrative Tools" = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools -- [2010-01-19 01:20:09 | 000,000,000 | R--D | M]
"Common Startup" = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup -- [2009-07-14 06:41:57 | 000,000,000 | R--D | M]
"Common Documents" = C:\Users\Public\Documents -- [2012-03-14 11:44:27 | 000,000,000 | R--D | M]
"OEM Links" = C:\ProgramData\OEM Links
"Common Templates" = C:\ProgramData\Microsoft\Windows\Templates -- [2010-11-02 00:45:32 | 000,000,000 | ---D | M]
"Common AppData" = C:\ProgramData -- [2012-07-20 12:43:33 | 000,000,000 | -H-D | M]
 
[color=#A23BEC]< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders >[/color]
"Common Desktop" = %PUBLIC%\Desktop -- [2012-06-12 07:50:03 | 000,000,000 | RH-D | M]
"Common Documents" = %PUBLIC%\Documents -- [2012-03-14 11:44:27 | 000,000,000 | R--D | M]
"CommonPictures" = %PUBLIC%\Pictures -- [2009-07-14 06:41:57 | 000,000,000 | R--D | M]
"CommonMusic" = %PUBLIC%\Music -- [2009-07-14 06:41:57 | 000,000,000 | R--D | M]
"CommonVideo" = %PUBLIC%\Videos -- [2009-07-14 06:41:57 | 000,000,000 | R--D | M]
"{3D644C9B-1FB8-4f30-9B45-F670235F79C0}" = %PUBLIC%\Downloads -- [2009-07-14 06:41:57 | 000,000,000 | R--D | M]
"Common Start Menu" = %ProgramData%\Microsoft\Windows\Start Menu -- [2010-12-22 22:07:37 | 000,000,000 | R--D | M]
"Common Programs" = %ProgramData%\Microsoft\Windows\Start Menu\Programs -- [2012-07-20 13:31:33 | 000,000,000 | R--D | M]
"Common Startup" = %ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup -- [2009-07-14 06:41:57 | 000,000,000 | R--D | M]
"Common AppData" = %ProgramData% -- [2012-07-20 12:43:33 | 000,000,000 | -H-D | M]
"Common Templates" = %ProgramData%\Microsoft\Windows\Templates -- [2010-11-02 00:45:32 | 000,000,000 | ---D | M]
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 176 bytes -> C:\ProgramData\TEMP:1CE11B51

< End of report >