OTL logfile created on: 7/25/2012 9:03:30 AM - Run 1 OTL by OldTimer - Version 3.2.54.1 Folder = C:\Users\Adam\Desktop 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3.87 Gb Total Physical Memory | 2.61 Gb Available Physical Memory | 67.60% Memory free 7.73 Gb Paging File | 6.55 Gb Available in Paging File | 84.73% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 285.99 Gb Total Space | 99.73 Gb Free Space | 34.87% Space Free | Partition Type: NTFS Computer Name: ADAM-KOMPUTER | User Name: Adam | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012/07/25 09:01:10 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Adam\Desktop\OTL.exe PRC - [2012/07/19 06:15:46 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2012/06/27 12:29:26 | 001,996,200 | ---- | M] (LogMeIn Inc.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012/07/19 06:15:46 | 002,003,424 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2011/03/17 01:11:16 | 004,297,568 | ---- | M] () -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2012/07/02 16:15:26 | 000,424,360 | R--- | M] (cFos Software GmbH) [Auto | Stopped] -- C:\Program Files\cFosSpeed\spd.exe -- (cFosSpeedS) SRV:[b]64bit:[/b] - [2011/09/22 12:03:30 | 000,974,944 | ---- | M] (ESET) [Auto | Stopped] -- C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe -- (ekrn) SRV:[b]64bit:[/b] - [2010/10/28 12:14:30 | 000,357,456 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.exe -- (LBTServ) SRV:[b]64bit:[/b] - [2010/09/22 19:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc) SRV:[b]64bit:[/b] - [2010/01/19 05:55:46 | 000,842,784 | ---- | M] (Acer Incorporated) [Auto | Stopped] -- C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe -- (ePowerSvc) SRV:[b]64bit:[/b] - [2009/10/03 04:39:44 | 000,873,248 | ---- | M] (Broadcom Corporation.) [Auto | Stopped] -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins) SRV:[b]64bit:[/b] - [2009/07/14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009/07/04 04:47:12 | 000,240,160 | ---- | M] (Acer) [Auto | Stopped] -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe -- (Updater Service) SRV - [2012/07/21 16:52:19 | 000,830,048 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\12.1.3\ToolbarUpdater.exe -- (vToolbarUpdater12.1.3) SRV - [2012/07/19 06:15:46 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012/07/12 14:20:22 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012/06/27 12:29:24 | 002,369,960 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2012/05/15 12:48:00 | 001,262,400 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService) SRV - [2012/02/23 20:23:42 | 000,489,256 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2012/01/18 14:38:28 | 000,155,320 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion) SRV - [2011/03/23 17:39:59 | 000,075,136 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2011/03/21 13:21:24 | 000,632,832 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2011/02/28 19:44:14 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc) SRV - [2011/02/25 11:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (SeaPort) SRV - [2011/01/05 12:16:52 | 000,540,792 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Zentimo\ZentimoService.exe -- (ZentimoService) SRV - [2010/11/11 00:17:00 | 004,027,856 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc) SRV - [2010/10/19 14:29:03 | 002,011,944 | ---- | M] (TeamViewer GmbH) [Auto | Stopped] -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe -- (TeamViewer5) SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010/03/11 15:06:06 | 000,193,824 | ---- | M] (Protexis Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2) SRV - [2010/01/22 10:10:50 | 000,310,352 | ---- | M] (Dritek System Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe -- (DsiWMIService) SRV - [2010/01/07 03:50:02 | 000,255,744 | ---- | M] (NewTech Infosystems, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe -- (NTI IScheduleSvc) SRV - [2009/12/24 03:39:04 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) SRV - [2009/12/23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Stopped] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2009/12/09 10:48:26 | 002,320,920 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) SRV - [2009/12/09 10:48:24 | 000,268,824 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2009/09/10 15:42:46 | 000,305,448 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe -- (MWLService) SRV - [2009/08/28 11:38:58 | 001,150,496 | ---- | M] (Acer Incorporated) [Auto | Stopped] -- C:\Program Files (x86)\Acer\Registration\GregHSRW.exe -- (Greg_Service) SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2009/02/27 18:04:38 | 000,850,432 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe -- (BlueSoleilCS) SRV - [2009/02/27 17:46:38 | 000,191,488 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe -- (BsHelpCS) SRV - [2009/02/27 17:40:48 | 000,143,467 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsMobileCS.exe -- (BsMobileCS) SRV - [2007/04/21 10:44:52 | 000,535,552 | ---- | M] (AltrixSoft) [Auto | Stopped] -- C:\Program Files (x86)\Chronograph\adjust.exe -- (Adjuster) SRV - [2007/03/06 11:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe -- (Capture Device Service) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2012/07/21 16:52:19 | 000,030,568 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp) DRV:[b]64bit:[/b] - [2012/07/02 16:15:30 | 001,312,168 | ---- | M] (cFos Software GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\cfosspeed6.sys -- (cFosSpeed) DRV:[b]64bit:[/b] - [2012/04/18 19:08:03 | 000,188,736 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA) DRV:[b]64bit:[/b] - [2012/03/01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2012/01/22 20:04:34 | 000,082,816 | ---- | M] (VSO Software) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pcouffin.sys -- (pcouffin) DRV:[b]64bit:[/b] - [2011/08/09 14:24:52 | 000,202,576 | ---- | M] (ESET) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm) DRV:[b]64bit:[/b] - [2011/08/04 09:20:38 | 000,187,632 | ---- | M] (ESET) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\epfw.sys -- (epfw) DRV:[b]64bit:[/b] - [2011/08/04 09:20:38 | 000,146,432 | ---- | M] (ESET) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv) DRV:[b]64bit:[/b] - [2011/08/04 09:20:38 | 000,062,496 | ---- | M] (ESET) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\epfwwfp.sys -- (epfwwfp) DRV:[b]64bit:[/b] - [2011/08/04 09:20:38 | 000,038,288 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\EpfwLWF.sys -- (EpfwLWF) DRV:[b]64bit:[/b] - [2011/06/15 10:30:46 | 000,093,240 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\scdemu.sys -- (SCDEmu) DRV:[b]64bit:[/b] - [2011/06/13 09:26:06 | 000,025,216 | ---- | M] (Dev47Apps) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\droidcam.sys -- (DroidCam) DRV:[b]64bit:[/b] - [2011/06/07 22:28:08 | 000,027,176 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc) DRV:[b]64bit:[/b] - [2011/06/07 22:28:08 | 000,013,352 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt) DRV:[b]64bit:[/b] - [2011/06/02 18:38:46 | 000,088,480 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt) DRV:[b]64bit:[/b] - [2011/06/02 18:38:46 | 000,046,400 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt) DRV:[b]64bit:[/b] - [2011/05/26 21:26:38 | 000,027,016 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IvtBtBus.sys -- (IvtBtBUs) DRV:[b]64bit:[/b] - [2011/05/26 21:26:35 | 000,023,944 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\BtHidBus.sys -- (BtHidBus) DRV:[b]64bit:[/b] - [2011/05/26 21:14:42 | 000,305,200 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:[b]64bit:[/b] - [2011/05/11 20:46:46 | 000,246,376 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR) DRV:[b]64bit:[/b] - [2011/05/11 20:35:32 | 000,041,096 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmFilter.sys -- (WmFilter) DRV:[b]64bit:[/b] - [2011/05/11 20:35:32 | 000,036,872 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmHidLo.sys -- (WmHidLo) DRV:[b]64bit:[/b] - [2011/05/11 20:35:26 | 000,076,552 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmXlCore.sys -- (WmXlCore) DRV:[b]64bit:[/b] - [2011/05/11 20:35:26 | 000,026,248 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmBEnum.sys -- (WmBEnum) DRV:[b]64bit:[/b] - [2011/03/11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011/03/11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2011/01/16 01:22:43 | 004,572,224 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX) DRV:[b]64bit:[/b] - [2010/12/10 19:13:11 | 000,503,352 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2010/11/20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010/11/20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010/11/20 12:43:57 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser) DRV:[b]64bit:[/b] - [2010/09/23 01:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr) DRV:[b]64bit:[/b] - [2010/08/24 19:29:32 | 000,057,936 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt) DRV:[b]64bit:[/b] - [2010/08/24 19:29:10 | 000,063,568 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt) DRV:[b]64bit:[/b] - [2010/07/31 01:36:14 | 000,406,056 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a) DRV:[b]64bit:[/b] - [2010/04/06 19:33:10 | 000,030,088 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btnetBus.sys -- (btnetBUs) DRV:[b]64bit:[/b] - [2010/02/03 16:56:56 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi) DRV:[b]64bit:[/b] - [2010/01/13 09:19:10 | 000,142,848 | ---- | M] () [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\ArcHlp.sys -- (archlp) DRV:[b]64bit:[/b] - [2009/12/17 20:42:08 | 000,538,136 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2009/12/02 09:01:24 | 000,213,280 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService) DRV:[b]64bit:[/b] - [2009/11/06 06:56:06 | 001,550,848 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:[b]64bit:[/b] - [2009/10/02 02:47:38 | 000,098,344 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio) DRV:[b]64bit:[/b] - [2009/09/17 06:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) DRV:[b]64bit:[/b] - [2009/08/28 13:15:32 | 000,132,648 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt) DRV:[b]64bit:[/b] - [2009/08/28 13:15:26 | 000,021,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid) DRV:[b]64bit:[/b] - [2009/08/13 09:38:24 | 000,029,184 | ---- | M] (CSR, plc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcp.sys -- (BthAvrcp) DRV:[b]64bit:[/b] - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009/07/14 02:10:47 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rootmdm.sys -- (ROOTMODEM) DRV:[b]64bit:[/b] - [2009/07/01 06:46:58 | 000,052,264 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btusbflt.sys -- (btusbflt) DRV:[b]64bit:[/b] - [2009/06/22 19:38:32 | 000,116,992 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbmdm.sys -- (hwdatacard) DRV:[b]64bit:[/b] - [2009/06/22 19:26:38 | 000,113,792 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbdev.sys -- (hwusbdev) DRV:[b]64bit:[/b] - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009/06/02 13:15:30 | 000,060,464 | ---- | M] (Egis Technology Inc.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\mwlPSDVDisk.sys -- (mwlPSDVDisk) DRV:[b]64bit:[/b] - [2009/06/02 13:15:30 | 000,022,576 | ---- | M] (Egis Technology Inc.) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\mwlPSDFilter.sys -- (mwlPSDFilter) DRV:[b]64bit:[/b] - [2009/06/02 13:15:30 | 000,020,016 | ---- | M] (Egis Technology Inc.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\mwlPSDNserv.sys -- (mwlPSDNServ) DRV:[b]64bit:[/b] - [2009/05/06 02:46:08 | 000,018,432 | ---- | M] (NewTech Infosystems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NTIDrvr.sys -- (NTIDrvr) DRV:[b]64bit:[/b] - [2009/05/06 02:46:08 | 000,016,896 | ---- | M] (NewTech Infosystems Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UBHelper.sys -- (UBHelper) DRV:[b]64bit:[/b] - [2009/04/07 09:33:08 | 000,035,104 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap) DRV:[b]64bit:[/b] - [2009/01/08 03:20:00 | 000,042,888 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VCommMgr.sys -- (VcommMgr) DRV:[b]64bit:[/b] - [2009/01/03 17:40:26 | 000,047,880 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btcusb.sys -- (Btcsrusb) DRV:[b]64bit:[/b] - [2008/11/25 16:23:42 | 000,036,872 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BlueletSCOAudio.sys -- (BlueletSCOAudio) DRV:[b]64bit:[/b] - [2008/11/25 16:23:34 | 000,036,360 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\blueletaudio.sys -- (BlueletAudio) DRV:[b]64bit:[/b] - [2008/08/28 12:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd) DRV:[b]64bit:[/b] - [2008/07/10 19:20:40 | 000,040,448 | ---- | M] (CSR, plc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthav.sys -- (bthav) DRV:[b]64bit:[/b] - [2008/01/21 20:27:52 | 000,017,032 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VComm.sys -- (VComm) DRV:[b]64bit:[/b] - [2007/08/07 01:03:00 | 000,595,488 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\V0230VID.sys -- (V0230VID) DRV:[b]64bit:[/b] - [2007/04/17 12:51:50 | 000,014,112 | ---- | M] (InterVideo) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\regi.sys -- (regi) DRV:[b]64bit:[/b] - [2006/09/30 11:36:14 | 000,013,008 | ---- | M] () [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\pstrip64.sys -- (PStrip64) DRV:[b]64bit:[/b] - [2006/05/05 01:00:00 | 000,010,752 | ---- | M] (EyePower Games Pte. Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\V0230Vfx.sys -- (V0230Vfx) DRV:[b]64bit:[/b] - [2005/09/24 00:18:34 | 000,261,120 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MarvinBus64.sys -- (MarvinBus) DRV:[b]64bit:[/b] - [2005/04/12 20:21:54 | 000,008,576 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmVirHid.sys -- (WmVirHid) DRV - [2009/07/14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) DRV - [2008/11/25 16:23:34 | 000,036,360 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\blueletaudio.sys -- (BlueletAudio) DRV - [2004/12/29 20:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&m=aspire_5741g&r=27361110j935l0434z125t5452k212 IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&m=aspire_5741g&r=27361110j935l0434z125t5452k212 IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&m=aspire_5741g&r=27361110j935l0434z125t5452k212 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&m=aspire_5741g&r=27361110j935l0434z125t5452k212 IE - HKLM\..\URLSearchHook: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\prxtbMyAs.dll (Conduit Ltd.) IE - HKLM\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.) IE - HKLM\..\URLSearchHook: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files (x86)\Softonic-Polska\tbSoft.dll (Conduit Ltd.) IE - HKLM\..\URLSearchHook: {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files (x86)\free-downloads.net\tbfree.dll (Conduit Ltd.) IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2530240 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&m=aspire_5741g&r=27361110j935l0434z125t5452k212 IE - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://isearch.avg.com/?cid={60442B00-8E8D-448E-A089-33C6F1169235}&mid=de1c55c9c55e47d0bfbda113f0dffc86-095725afb0d1748357333b4436d1ac2f00f41fc4&lang=en&ds=tt014&pr=sa&d=2012-07-21 16:52:20&v=12.1.0.20&sap=hp IE - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) IE - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\URLSearchHook: {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - SOFTWARE\Classes\CLSID\{0BDA0769-FD72-49F4-9266-E1FB004F4D8F}\InprocServer32 File not found IE - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\URLSearchHook: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\prxtbMyAs.dll (Conduit Ltd.) IE - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.) IE - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\URLSearchHook: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files (x86)\Softonic-Polska\tbSoft.dll (Conduit Ltd.) IE - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\URLSearchHook: {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files (x86)\free-downloads.net\tbfree.dll (Conduit Ltd.) IE - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233} IE - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=U3&apn_dtid=OSJ000YYPL&apn_uid=ED341488-6B03-4762-8CFE-2BF72914AD99&apn_sauid=8B30DEF8-7BA1-485B-97EE-C9027641CDFD IE - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\SearchScopes\{234E8FAE-BF2E-4FE6-B229-85817E724E68}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=kw&q={searchTerms}&locale=en_US&apn_ptnrs=U3&apn_dtid=OSJ000YYPL&apn_uid=ED341488-6B03-4762-8CFE-2BF72914AD99&apn_sauid=8B30DEF8-7BA1-485B-97EE-C9027641CDFD IE - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_plPL404 IE - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = https://isearch.avg.com/search?cid={60442B00-8E8D-448E-A089-33C6F1169235}&mid=de1c55c9c55e47d0bfbda113f0dffc86-095725afb0d1748357333b4436d1ac2f00f41fc4&lang=en&ds=tt014&pr=sa&d=2012-07-21 16:52:20&v=12.1.0.20&sap=dsp&q={searchTerms} IE - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\SearchScopes\{ABCE84AE-D642-489B-870F-88873AFC0617}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&type=382950&p={searchTerms} IE - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http://www.daemon-search.com/search/web?q={searchTerms} IE - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2530240 IE - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "Ask.com" FF - prefs.js..browser.search.defaultenginename: "AVG Secure Search" FF - prefs.js..browser.search.defaultthis.engineName: "Softonic-Polska Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2530240&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.order.1: "Ask.com" FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=382950" FF - prefs.js..browser.search.selectedEngine: "AVG Secure Search" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF - prefs.js..extensions.enabledItems: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}:3.2.5.2 FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.2.0185 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 FF - prefs.js..extensions.enabledItems: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}:7.3.3.42 FF - prefs.js..extensions.enabledItems: {ecdee021-0d17-467f-a1ff-c7a115230949}:2.7.2.0 FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2 FF - prefs.js..extensions.enabledItems: iobit@mybrowserbar.com:4.3 FF - prefs.js..extensions.enabledItems: wtxpcom@mybrowserbar.com:4.3 FF - prefs.js..extensions.enabledItems: ffxtlbr@Facemoods.com:1.2.0 FF - prefs.js..keyword.URL: "chrome://browser-region/locale/region.properties" FF - prefs.js..network.proxy.type: 0 FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_265.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_265.dll () FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\12.1.3\\npsitesafety.dll () FF - HKLM\Software\MozillaPlugins\@ganymede/GanymedeNetPlugin,version=1.0: C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll ( ) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@eximion.com/KalydoPlayer3.08.01: C:\Users\Adam\AppData\Roaming\Kalydo\KalydoPlayer\npkalydo.dll (Eximion B.V.) FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Adam\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Adam\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll () FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Adam\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Adam\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Adam\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKCU\Software\MozillaPlugins\BYOND: C:\Program Files (x86)\BYOND\bin\npbyond.dll (BYOND) 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\PROGRAM FILES\ESET\ESET SMART SECURITY\MOZILLA THUNDERBIRD [2012/06/02 08:40:31 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}: C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ [2011/06/01 08:14:29 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3ED591BC-7CC7-495B-A526-B2431356EDC1}: C:\Program Files (x86)\Ad Muncher\FirefoxExtension_2.0 [2012/03/22 14:56:38 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\12.1.0.20\ [2012/07/21 16:52:22 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/07/19 06:15:46 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/04/15 13:32:08 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\SeaMonkey\Extensions\\{3ED591BC-7CC7-495B-A526-B2431356EDC1}: C:\Program Files (x86)\Ad Muncher\FirefoxExtension_2.0 [2012/03/22 14:56:38 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2012/06/02 08:40:31 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}: C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [2011/06/01 08:14:29 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\hideip@hide-ip-soft.com: C:\Windows\vf_hip\ [2010/12/17 18:53:37 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/07/19 06:15:46 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/04/15 13:32:08 | 000,000,000 | ---D | M] [2010/11/05 23:12:42 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Adam\AppData\Roaming\mozilla\Extensions [2012/07/23 17:48:20 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\7wvzun0o.default\extensions [2012/07/15 19:50:12 | 000,000,000 | ---D | M] (MyAshampoo Community Toolbar) -- C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\7wvzun0o.default\extensions\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4} [2012/07/17 19:07:40 | 000,000,000 | ---D | M] (uTorrentBar Community Toolbar) -- C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\7wvzun0o.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} [2012/07/15 19:50:13 | 000,000,000 | ---D | M] (ST-Polska Community Toolbar) -- C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\7wvzun0o.default\extensions\{c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} [2012/07/16 17:06:41 | 000,000,000 | ---D | M] (free-downloads.net Community Toolbar) -- C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\7wvzun0o.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949} [2011/04/23 08:21:55 | 000,000,000 | ---D | M] ("DAEMON Tools Toolbar") -- C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\7wvzun0o.default\extensions\DTToolbar@toolbarnet.com [2011/01/24 01:24:04 | 000,000,000 | ---D | M] (Facemoods) -- C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\7wvzun0o.default\extensions\ffxtlbr@Facemoods.com [2012/03/22 11:06:18 | 000,000,000 | ---D | M] (Nokia Maps 3D browser plugin) -- C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\7wvzun0o.default\extensions\maps@ovi.com [2011/03/25 23:21:20 | 000,000,000 | ---D | M] (Kino5.pl - OglÄ…daj bez Limitu) -- C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\7wvzun0o.default\extensions\me@paprikka.pl [2012/07/23 17:48:23 | 000,002,331 | ---- | M] () -- C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\7wvzun0o.default\searchplugins\askcom.xml [2011/05/25 16:53:16 | 000,000,933 | ---- | M] () -- C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\7wvzun0o.default\searchplugins\conduit.xml [2010/11/06 14:47:43 | 000,002,059 | ---- | M] () -- C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\7wvzun0o.default\searchplugins\daemon-search.xml [2011/06/26 13:29:42 | 000,000,527 | ---- | M] () -- C:\Users\Adam\AppData\Roaming\Mozilla\Firefox\Profiles\7wvzun0o.default\searchplugins\softonic-pl.xml [2012/05/02 12:07:42 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions [2012/03/22 14:56:38 | 000,000,000 | ---D | M] (Ad Muncher Browser Extensions) -- C:\PROGRAM FILES (X86)\AD MUNCHER\FIREFOXEXTENSION_2.0 [2011/07/31 23:32:39 | 000,101,414 | ---- | M] () (No name found) -- C:\USERS\ADAM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\7WVZUN0O.DEFAULT\EXTENSIONS\KONTAKT.KINO5@GMAIL.COM.XPI [2012/07/19 06:15:46 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2008/07/08 23:07:06 | 000,040,960 | ---- | M] (BYOND) -- C:\Program Files (x86)\mozilla firefox\plugins\npbyond.dll [2012/04/04 13:58:09 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll [2010/11/24 12:12:30 | 000,120,296 | ---- | M] ( ) -- C:\Program Files (x86)\mozilla firefox\plugins\npganymedenet.dll [2010/08/20 11:07:34 | 000,685,552 | ---- | M] (Ganymede Technologies) -- C:\Program Files (x86)\mozilla firefox\plugins\NPMAKAOV2.dll [2012/06/06 11:23:53 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2012/07/21 16:52:16 | 000,003,752 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml [2012/06/06 11:23:53 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2012/06/06 11:23:53 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2012/06/06 11:23:53 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2012/06/06 11:23:53 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2012/06/06 11:23:53 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - Extension: No name found = C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: No name found = C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: No name found = C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnkeikbmmeggmmbmilcfapmgckglglbj\2.2_0\ CHR - Extension: No name found = C:\Users\Adam\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2010/04/06 17:28:19 | 000,000,938 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 127.0.0.1 static3.cdn.ubi.com O1 - Hosts: 127.0.0.1 ubisoft-orbit.s3.amazonaws.com O1 - Hosts: 127.0.0.1 onlineconfigservice.ubi.com O1 - Hosts: 127.0.0.1 orbitservice.ubi.com O1 - Hosts: 127.0.0.1 ubisoft-orbit-savegames.s3.amazonaws.com O2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O2 - BHO: (IObit Toolbar) - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - Reg Error: Value error. File not found O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\12.1.0.20\AVG Secure Search_toolbar.dll () O2 - BHO: (MyAshampoo Toolbar) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\prxtbMyAs.dll (Conduit Ltd.) O2 - BHO: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.) O2 - BHO: (Softonic-Polska Toolbar) - {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files (x86)\Softonic-Polska\tbSoft.dll (Conduit Ltd.) O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O2 - BHO: (free-downloads.net Toolbar) - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files (x86)\free-downloads.net\tbfree.dll (Conduit Ltd.) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM\..\Toolbar: (IObit Toolbar) - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - Reg Error: Value error. File not found O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\12.1.0.20\AVG Secure Search_toolbar.dll () O3 - HKLM\..\Toolbar: (MyAshampoo Toolbar) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\prxtbMyAs.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Softonic-Polska Toolbar) - {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - C:\Program Files (x86)\Softonic-Polska\tbSoft.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKLM\..\Toolbar: (free-downloads.net Toolbar) - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files (x86)\free-downloads.net\tbfree.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3:[b]64bit:[/b] - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3 - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3:[b]64bit:[/b] - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3 - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\Toolbar\WebBrowser: (MyAshampoo Toolbar) - {A1E75A0E-4397-4BA8-BB50-E19FB66890F4} - C:\Program Files (x86)\MyAshampoo\prxtbMyAs.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\Toolbar\WebBrowser: (uTorrentBar Toolbar) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000\..\Toolbar\WebBrowser: (free-downloads.net Toolbar) - {ECDEE021-0D17-467F-A1FF-C7A115230949} - C:\Program Files (x86)\free-downloads.net\tbfree.dll (Conduit Ltd.) O4:[b]64bit:[/b] - HKLM..\Run: [cFosSpeed] C:\Program Files\cFosSpeed\cfosspeed.exe (cFos Software GmbH) O4:[b]64bit:[/b] - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [ApnUpdater] C:\Program Files (x86)\Ask.com\Updater\Updater.exe (Ask) O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe () O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000..\Run: [uTorrent] C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.) O4 - HKU\S-1-5-21-2751873791-3859523459-1514283984-1000..\Run: [WiaExtensionHost64] C:\Users\Adam\AppData\Local\Microsoft\Windows\730\WiaExtensionHost64.exe () O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:[b]64bit:[/b] - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found O8:[b]64bit:[/b] - Extra context menu item: Block frame with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=2.0&pass=53CT76N6&id=menu_ie_frame File not found O8:[b]64bit:[/b] - Extra context menu item: Block image with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=2.0&pass=53CT76N6&id=menu_ie_image File not found O8:[b]64bit:[/b] - Extra context menu item: Block link with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=2.0&pass=53CT76N6&id=menu_ie_link File not found O8:[b]64bit:[/b] - Extra context menu item: Don't filter page with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=2.0&pass=53CT76N6&id=menu_ie_exclude File not found O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O8:[b]64bit:[/b] - Extra context menu item: Funkcja Google Sidewiki - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html File not found O8:[b]64bit:[/b] - Extra context menu item: Report page to the Ad Muncher developers - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=2.0&pass=53CT76N6&id=menu_ie_report File not found O8:[b]64bit:[/b] - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O8:[b]64bit:[/b] - Extra context menu item: Wyslij przez Bluetooth - C:\Program Files (x86)\IVT Corporation\BlueSoleil\TransSend\IE\tsinfo.htm () O8:[b]64bit:[/b] - Extra context menu item: Wyslij przez wiadomosc(&M)... - C:\Program Files (x86)\IVT Corporation\BlueSoleil\TransSend\IE\tssms.htm () O8:[b]64bit:[/b] - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Block frame with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=2.0&pass=53CT76N6&id=menu_ie_frame File not found O8 - Extra context menu item: Block image with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=2.0&pass=53CT76N6&id=menu_ie_image File not found O8 - Extra context menu item: Block link with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=2.0&pass=53CT76N6&id=menu_ie_link File not found O8 - Extra context menu item: Don't filter page with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=2.0&pass=53CT76N6&id=menu_ie_exclude File not found O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Funkcja Google Sidewiki - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html File not found O8 - Extra context menu item: Report page to the Ad Muncher developers - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=2.0&pass=53CT76N6&id=menu_ie_report File not found O8 - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O8 - Extra context menu item: Wyslij przez Bluetooth - C:\Program Files (x86)\IVT Corporation\BlueSoleil\TransSend\IE\tsinfo.htm () O8 - Extra context menu item: Wyslij przez wiadomosc(&M)... - C:\Program Files (x86)\IVT Corporation\BlueSoleil\TransSend\IE\tssms.htm () O8 - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9:[b]64bit:[/b] - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9:[b]64bit:[/b] - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O9 - Extra Button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} http://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx (WRC Class) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.3.1.0.cab (SysInfo Class) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.129.2 10.0.128.2 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A8CEDF50-D431-4866-9200-204FFF01711A}: DhcpNameServer = 10.0.129.2 10.0.128.2 O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\viprotocol - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\SysWOW64\skype4com.dll (Skype Technologies) O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\12.1.3\ViProtocol.dll () O18:[b]64bit:[/b] - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found O18:[b]64bit:[/b] - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found O18:[b]64bit:[/b] - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - File not found O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - File not found O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - File not found O20 - HKLM Winlogon: UserInit - (userinit.exe) - File not found O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - File not found O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:[b]64bit:[/b] - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Program Files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O29:[b]64bit:[/b] - HKLM SecurityProviders - (credssp.dll) - File not found O29 - HKLM SecurityProviders - (credssp.dll) - File not found O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{2601b049-8dfd-11e0-8c82-705ab63b1575}\Shell - "" = AutoRun O33 - MountPoints2\{2601b049-8dfd-11e0-8c82-705ab63b1575}\Shell\AutoRun\command - "" = G:\Startme.exe O33 - MountPoints2\{2bc1a740-e9a4-11df-b1ad-705ab63b1575}\Shell - "" = AutoRun O33 - MountPoints2\{2bc1a740-e9a4-11df-b1ad-705ab63b1575}\Shell\AutoRun\command - "" = E:\setup.exe O33 - MountPoints2\{2ef85f13-cc25-11e0-977f-705ab63b1575}\Shell - "" = AutoRun O33 - MountPoints2\{2ef85f13-cc25-11e0-977f-705ab63b1575}\Shell\AutoRun\command - "" = G:\AutoRun.exe O33 - MountPoints2\{b5ec13ba-bdb0-11e0-b8ec-705ab63b1575}\Shell - "" = AutoRun O33 - MountPoints2\{b5ec13ba-bdb0-11e0-b8ec-705ab63b1575}\Shell\AutoRun\command - "" = G:\AutoRun.exe O33 - MountPoints2\{b5ec13e9-bdb0-11e0-b8ec-705ab63b1575}\Shell - "" = AutoRun O33 - MountPoints2\{b5ec13e9-bdb0-11e0-b8ec-705ab63b1575}\Shell\AutoRun\command - "" = G:\AutoRun.exe O33 - MountPoints2\{c67e215b-cd93-11e0-9686-705ab63b1575}\Shell - "" = AutoRun O33 - MountPoints2\{c67e215b-cd93-11e0-9686-705ab63b1575}\Shell\AutoRun\command - "" = G:\AutoRun.exe O33 - MountPoints2\{c6a87df2-cc22-11e0-bce8-705ab63b1575}\Shell - "" = AutoRun O33 - MountPoints2\{c6a87df2-cc22-11e0-bce8-705ab63b1575}\Shell\AutoRun\command - "" = G:\AutoRun.exe O33 - MountPoints2\{c6a87e29-cc22-11e0-bce8-705ab63b1575}\Shell - "" = AutoRun O33 - MountPoints2\{c6a87e29-cc22-11e0-bce8-705ab63b1575}\Shell\AutoRun\command - "" = G:\AutoRun.exe O33 - MountPoints2\{c6a87e35-cc22-11e0-bce8-705ab63b1575}\Shell - "" = AutoRun O33 - MountPoints2\{c6a87e35-cc22-11e0-bce8-705ab63b1575}\Shell\AutoRun\command - "" = G:\AutoRun.exe O33 - MountPoints2\{fab89af5-0fd4-11e0-822c-705ab63b1575}\Shell - "" = AutoRun O33 - MountPoints2\{fab89af5-0fd4-11e0-822c-705ab63b1575}\Shell\AutoRun\command - "" = "G:\WD SmartWare.exe" autoplay=true O33 - MountPoints2\G\Shell - "" = AutoRun O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\SJ2_setup.exe O33 - MountPoints2\H\Shell - "" = AutoRun O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\AutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012/07/25 09:01:08 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Adam\Desktop\OTL.exe [2012/07/25 07:35:17 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Roaming\hellomoto [2012/07/23 08:10:35 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Roaming\BlueSprig [2012/07/23 08:10:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JetClean [2012/07/23 08:10:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BlueSprig [2012/07/23 08:09:16 | 000,000,000 | ---D | C] -- C:\Users\Adam\Desktop\JtCln.Pr.1.3.0.122_saud_1 [2012/07/22 10:53:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Uniblue [2012/07/21 16:52:39 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\AVG Secure Search [2012/07/21 16:52:22 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG Secure Search [2012/07/21 16:52:19 | 000,030,568 | ---- | C] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys [2012/07/21 16:52:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AVG Secure Search [2012/07/21 16:52:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG Secure Search [2012/07/21 16:51:46 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Roaming\TuneUp Software [2012/07/21 16:51:28 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software [2012/07/21 16:51:22 | 000,000,000 | -HSD | C] -- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936} [2012/07/21 16:51:22 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files [2012/07/21 16:39:36 | 000,000,000 | ---D | C] -- C:\Users\Adam\Desktop\Nowy folder (2) [2012/07/11 22:58:08 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2012/07/11 22:58:08 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2012/07/11 22:58:07 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll [2012/07/11 22:58:07 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll [2012/07/11 22:58:07 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2012/07/11 22:58:06 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2012/07/11 22:58:06 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2012/07/11 22:58:06 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2012/07/11 22:58:05 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2012/07/11 22:58:04 | 002,311,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2012/07/11 22:58:04 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2012/07/11 22:58:04 | 000,818,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2012/07/11 22:58:04 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2012/07/11 05:38:21 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll [2012/07/11 05:38:21 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll [2012/07/11 05:38:07 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll [2012/07/11 05:38:02 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cdosys.dll [2012/07/11 05:38:00 | 001,133,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdosys.dll [2012/07/08 21:35:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SereneScreen [2012/07/08 21:35:05 | 006,938,624 | ---- | C] (SereneScreen) -- C:\Windows\SysNative\MarineAquarium3.scr [2012/07/08 21:35:04 | 006,938,624 | ---- | C] (SereneScreen) -- C:\Windows\SysWow64\MarineAquarium3.scr [2012/07/08 21:35:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SereneScreen [2012/07/08 20:07:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\cFosSpeed Traffic Shaping [2012/07/08 20:07:09 | 001,312,168 | ---- | C] (cFos Software GmbH) -- C:\Windows\SysNative\drivers\cfosspeed6.sys [2012/07/08 20:07:09 | 000,000,000 | ---D | C] -- C:\Program Files\cFosSpeed [2012/07/08 20:07:09 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\cFos [2012/07/08 20:06:43 | 000,000,000 | ---D | C] -- C:\ProgramData\cFos [2012/07/08 20:05:59 | 000,000,000 | ---D | C] -- C:\Users\Adam\Desktop\cFosSpeed 8.02 Build 1972 Final [2012/07/05 09:41:51 | 000,000,000 | ---D | C] -- C:\Users\Adam\Desktop\adrian [2012/07/01 11:03:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth [2012/07/01 11:02:37 | 000,739,832 | ---- | C] (Google Inc.) -- C:\Users\Adam\Desktop\GoogleEarthPluginSetup.exe [2012/06/27 18:07:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi [2012/06/27 18:07:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi [2012/06/26 12:12:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FelCAD [2012/06/26 12:12:21 | 000,000,000 | ---D | C] -- C:\ProgramData\FelCAD [2012/06/26 12:12:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FelCAD [2012/06/25 16:15:42 | 001,394,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml4.dll [2012/01/22 20:04:34 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\Adam\AppData\Roaming\pcouffin.sys [2010/01/16 05:34:32 | 000,036,136 | ---- | C] (Oberon Media) -- C:\ProgramData\FullRemove.exe [6 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012/07/25 09:11:08 | 004,980,736 | ---- | M] () -- C:\Users\Adam\ntuser.dat [2012/07/25 09:03:26 | 012,301,144 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2012/07/25 09:03:26 | 004,761,072 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012/07/25 09:03:26 | 004,238,514 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2012/07/25 09:03:26 | 004,071,798 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2012/07/25 09:03:26 | 000,005,396 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012/07/25 09:01:10 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Adam\Desktop\OTL.exe [2012/07/25 08:59:07 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012/07/25 08:58:50 | 3113,308,160 | -HS- | M] () -- C:\hiberfil.sys [2012/07/25 08:50:00 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012/07/25 08:49:58 | 000,000,306 | -HS- | M] () -- C:\Windows\tasks\Wcwli.job [2012/07/25 08:49:58 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2012/07/25 08:42:00 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012/07/25 08:42:00 | 000,009,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012/07/25 08:34:32 | 000,001,059 | ---- | M] () -- C:\Windows\SysWow64\bscs.ini [2012/07/25 08:21:00 | 000,001,054 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2751873791-3859523459-1514283984-1000UA.job [2012/07/25 08:04:00 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012/07/25 07:54:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012/07/24 17:21:00 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2751873791-3859523459-1514283984-1000Core.job [2012/07/23 08:10:25 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\JetClean.lnk [2012/07/21 16:52:19 | 000,030,568 | ---- | M] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys [2012/07/12 14:20:22 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2012/07/12 14:20:22 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2012/07/12 06:19:03 | 000,484,568 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012/07/08 21:35:06 | 000,000,924 | ---- | M] () -- C:\Users\Adam\Desktop\Marine Aquarium 3.lnk [2012/07/08 20:07:37 | 000,001,229 | ---- | M] () -- C:\Users\Adam\Desktop\cFosSpeed Calibration.lnk [2012/07/08 20:07:10 | 000,001,387 | ---- | M] () -- C:\Users\Adam\Desktop\Funkcje cFosSpeed.lnk [2012/07/05 16:37:50 | 004,273,264 | ---- | M] () -- C:\Users\Adam\Desktop\Kamap_10_android.apk [2012/07/03 17:40:50 | 000,037,450 | ---- | M] () -- C:\Users\Adam\Documents\umowa_czesciowa.pdf [2012/07/02 16:15:30 | 001,312,168 | ---- | M] (cFos Software GmbH) -- C:\Windows\SysNative\drivers\cfosspeed6.sys [2012/07/01 11:02:38 | 000,739,832 | ---- | M] (Google Inc.) -- C:\Users\Adam\Desktop\GoogleEarthPluginSetup.exe [2012/06/27 23:53:04 | 000,524,288 | -HS- | M] () -- C:\Users\Adam\ntuser.dat{c24abe18-c09a-11e1-9408-705ab63b1575}.TMContainer00000000000000000002.regtrans-ms [2012/06/27 23:53:04 | 000,524,288 | -HS- | M] () -- C:\Users\Adam\ntuser.dat{c24abe18-c09a-11e1-9408-705ab63b1575}.TMContainer00000000000000000001.regtrans-ms [2012/06/27 23:53:04 | 000,065,536 | -HS- | M] () -- C:\Users\Adam\ntuser.dat{c24abe18-c09a-11e1-9408-705ab63b1575}.TM.blf [2012/06/27 23:07:12 | 005,242,880 | ---- | M] () -- C:\Users\Adam\ntuser.dat.gbck [2012/06/26 12:13:03 | 000,001,774 | ---- | M] () -- C:\Users\Public\Desktop\FelCAD 1.3.lnk [2012/06/25 22:25:20 | 000,000,302 | ---- | M] () -- C:\Users\Adam\Documents\ax_files.xml [2012/06/25 16:15:42 | 001,394,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml4.dll [6 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012/07/23 08:10:25 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\JetClean.lnk [2012/07/08 21:35:06 | 000,000,924 | ---- | C] () -- C:\Users\Adam\Desktop\Marine Aquarium 3.lnk [2012/07/08 20:07:10 | 000,001,387 | ---- | C] () -- C:\Users\Adam\Desktop\Funkcje cFosSpeed.lnk [2012/07/08 05:28:29 | 000,001,229 | ---- | C] () -- C:\Users\Adam\Desktop\cFosSpeed Calibration.lnk [2012/07/05 16:36:22 | 004,273,264 | ---- | C] () -- C:\Users\Adam\Desktop\Kamap_10_android.apk [2012/07/03 17:40:50 | 000,037,450 | ---- | C] () -- C:\Users\Adam\Documents\umowa_czesciowa.pdf [2012/06/27 23:08:00 | 000,524,288 | -HS- | C] () -- C:\Users\Adam\ntuser.dat{c24abe18-c09a-11e1-9408-705ab63b1575}.TMContainer00000000000000000002.regtrans-ms [2012/06/27 23:08:00 | 000,524,288 | -HS- | C] () -- C:\Users\Adam\ntuser.dat{c24abe18-c09a-11e1-9408-705ab63b1575}.TMContainer00000000000000000001.regtrans-ms [2012/06/27 23:08:00 | 000,065,536 | -HS- | C] () -- C:\Users\Adam\ntuser.dat{c24abe18-c09a-11e1-9408-705ab63b1575}.TM.blf [2012/06/26 12:12:25 | 000,001,774 | ---- | C] () -- C:\Users\Public\Desktop\FelCAD 1.3.lnk [2012/04/01 19:12:21 | 000,033,134 | ---- | C] () -- C:\Users\Adam\AppData\Roaming\UserTile.png [2012/02/19 21:29:46 | 000,000,218 | ---- | C] () -- C:\Users\Adam\AppData\Local\recently-used.xbel [2012/02/19 21:18:08 | 000,005,504 | ---- | C] () -- C:\Users\Adam\buw32.lc [2012/01/22 20:05:01 | 000,000,022 | ---- | C] () -- C:\Windows\SysWow64\sycd5.dll [2012/01/22 20:04:34 | 000,099,384 | ---- | C] () -- C:\Users\Adam\AppData\Roaming\inst.exe [2012/01/22 20:04:34 | 000,007,859 | ---- | C] () -- C:\Users\Adam\AppData\Roaming\pcouffin.cat [2012/01/22 20:04:34 | 000,001,167 | ---- | C] () -- C:\Users\Adam\AppData\Roaming\pcouffin.inf [2012/01/13 07:43:23 | 000,000,000 | ---- | C] () -- C:\Users\Adam\AppData\Local\{FD3668DF-A4E5-4149-BD76-39429E15D383} [2011/11/17 23:39:16 | 000,000,000 | ---- | C] () -- C:\Users\Adam\AppData\Local\{D7BE6229-B6B7-4143-A201-5E44E9266CE7} [2011/11/16 14:46:58 | 000,007,602 | ---- | C] () -- C:\Users\Adam\AppData\Local\Resmon.ResmonCfg [2011/10/24 21:32:04 | 000,000,000 | ---- | C] () -- C:\Users\Adam\AppData\Local\{A5304E4C-788E-4BEA-9D8A-A159F03E589F} [2011/10/14 18:49:45 | 000,000,000 | ---- | C] () -- C:\Users\Adam\AppData\Local\{872CFCAA-7320-43FA-A7DD-0071F41A41B2} [2011/10/01 08:41:55 | 000,524,288 | -HS- | C] () -- C:\Users\Adam\ntuser.dat{26695018-ebf7-11e0-a347-705ab63b1575}.TMContainer00000000000000000002.regtrans-ms [2011/10/01 08:41:53 | 000,524,288 | -HS- | C] () -- C:\Users\Adam\ntuser.dat{26695018-ebf7-11e0-a347-705ab63b1575}.TMContainer00000000000000000001.regtrans-ms [2011/10/01 08:41:53 | 000,065,536 | -HS- | C] () -- C:\Users\Adam\ntuser.dat{26695018-ebf7-11e0-a347-705ab63b1575}.TM.blf [2011/09/28 18:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2011/09/25 15:46:21 | 000,000,000 | ---- | C] () -- C:\Users\Adam\AppData\Local\{5484B390-1014-48C1-A4BA-2716FFBC1504} [2011/08/29 23:49:49 | 000,000,000 | ---- | C] () -- C:\Users\Adam\AppData\Local\{D5E96B1C-BBA9-46BE-BF16-686211D34BBB} [2011/08/12 22:27:32 | 000,524,288 | -HS- | C] () -- C:\Users\Adam\ntuser.dat{df02f54c-c4cc-11e0-b2b8-705ab63b1575}.TMContainer00000000000000000002.regtrans-ms [2011/08/12 22:27:32 | 000,524,288 | -HS- | C] () -- C:\Users\Adam\ntuser.dat{df02f54c-c4cc-11e0-b2b8-705ab63b1575}.TMContainer00000000000000000001.regtrans-ms [2011/08/12 22:27:32 | 000,065,536 | -HS- | C] () -- C:\Users\Adam\ntuser.dat{df02f54c-c4cc-11e0-b2b8-705ab63b1575}.TM.blf [2011/07/31 02:31:56 | 000,000,000 | ---- | C] () -- C:\Users\Adam\AppData\Local\{517A1495-43EC-4D32-99C8-FB349ED48B49} [2011/06/29 07:45:19 | 000,524,288 | -HS- | C] () -- C:\Users\Adam\ntuser.dat{d30aeea0-a210-11e0-b9b9-705ab63b1575}.TMContainer00000000000000000002.regtrans-ms [2011/06/29 07:45:18 | 000,524,288 | -HS- | C] () -- C:\Users\Adam\ntuser.dat{d30aeea0-a210-11e0-b9b9-705ab63b1575}.TMContainer00000000000000000001.regtrans-ms [2011/06/29 07:45:18 | 000,065,536 | -HS- | C] () -- C:\Users\Adam\ntuser.dat{d30aeea0-a210-11e0-b9b9-705ab63b1575}.TM.blf [2011/06/13 09:47:49 | 000,000,033 | ---- | C] () -- C:\ProgramData\droidcam-settings [2011/06/05 13:57:46 | 000,524,288 | -HS- | C] () -- C:\Users\Adam\ntuser.dat{aba16f3d-8f67-11e0-9549-705ab63b1575}.TMContainer00000000000000000002.regtrans-ms [2011/06/05 13:57:46 | 000,524,288 | -HS- | C] () -- C:\Users\Adam\ntuser.dat{aba16f3d-8f67-11e0-9549-705ab63b1575}.TMContainer00000000000000000001.regtrans-ms [2011/06/05 13:57:46 | 000,065,536 | -HS- | C] () -- C:\Users\Adam\ntuser.dat{aba16f3d-8f67-11e0-9549-705ab63b1575}.TM.blf [2011/05/26 21:18:48 | 000,000,000 | ---- | C] () -- C:\Users\Adam\AppData\Local\{23B52476-EE83-44A7-BBF0-A9AA34D0060F} [2011/03/16 21:49:21 | 000,004,608 | ---- | C] () -- C:\Users\Adam\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011/03/05 11:44:38 | 000,860,211 | ---- | C] () -- C:\Windows\SysWow64\XSIFtk-3.6.2.1.dll [2011/02/19 09:49:51 | 000,237,568 | ---- | C] () -- C:\Windows\SysWow64\qtmlClient.dll [2011/02/19 09:49:51 | 000,000,000 | ---- | C] () -- C:\Windows\Graffiti5.2Pin.ini [2011/02/18 09:33:19 | 000,210,456 | ---- | C] () -- C:\Windows\SysWow64\IVIresizeW7.dll [2011/02/18 09:33:19 | 000,206,360 | ---- | C] () -- C:\Windows\SysWow64\IVIresizeA6.dll [2011/02/18 09:33:19 | 000,198,168 | ---- | C] () -- C:\Windows\SysWow64\IVIresizeP6.dll [2011/02/18 09:33:19 | 000,198,168 | ---- | C] () -- C:\Windows\SysWow64\IVIresizeM6.dll [2011/02/18 09:33:19 | 000,194,072 | ---- | C] () -- C:\Windows\SysWow64\IVIresizePX.dll [2011/02/18 09:33:19 | 000,026,136 | ---- | C] () -- C:\Windows\SysWow64\IVIresize.dll [2011/01/19 03:17:58 | 000,000,173 | ---- | C] () -- C:\Users\Adam\AppData\Local\msmathematics.qat.Adam [2010/12/26 11:42:51 | 001,602,820 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2010/12/13 00:35:15 | 000,000,408 | ---- | C] () -- C:\Windows\wininit.ini [2010/12/11 12:00:52 | 000,011,088 | ---- | C] () -- C:\Users\Adam\AppData\Roaming\PStrip.bko [2010/12/11 11:45:21 | 000,011,193 | ---- | C] () -- C:\Users\Adam\AppData\Roaming\PStrip.bk! [2010/12/11 11:45:18 | 000,011,193 | ---- | C] () -- C:\Users\Adam\AppData\Roaming\PStrip.bak [2010/12/11 11:38:41 | 000,011,193 | ---- | C] () -- C:\Users\Adam\AppData\Roaming\PStrip.ini [2010/12/05 21:44:03 | 000,000,038 | ---- | C] () -- C:\Windows\pbMv.INI [2010/12/05 18:13:33 | 000,000,008 | RHS- | C] () -- C:\ProgramData\EDE30F25AC.sys [2010/12/05 18:13:32 | 000,005,642 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys [2010/11/26 19:38:35 | 000,000,262 | ---- | C] () -- C:\Windows\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}_WiseFW.ini [2010/11/13 15:43:31 | 000,006,432 | ---- | C] () -- C:\Windows\SysWow64\SHORTCUT.INI [2010/11/13 15:43:03 | 000,000,259 | ---- | C] () -- C:\Windows\SysWow64\REMOTEDEVICE.INI [2010/11/13 15:38:48 | 000,005,971 | ---- | C] () -- C:\Windows\SysWow64\LOCALSERVICE.INI [2010/11/13 15:38:47 | 000,000,105 | ---- | C] () -- C:\Windows\SysWow64\LOCALDEVICE.INI [2010/11/13 15:36:43 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\BSPRINT.INI [2010/11/12 16:53:19 | 000,000,783 | ---- | C] () -- C:\Windows\NTIWVEDT.INI [2010/11/12 16:53:00 | 000,000,029 | ---- | C] () -- C:\Windows\CDMKR32.INI [2010/11/11 14:51:32 | 000,006,484 | ---- | C] () -- C:\Users\Adam\AppData\Roaming\wklnhst.dat [2010/11/06 18:42:18 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2010/11/06 18:42:13 | 000,189,248 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2010/11/05 23:11:46 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat [2010/11/05 22:35:02 | 000,146,432 | ---- | C] () -- C:\Users\Adam\AppData\Local\GDIPFONTCACHEV1.DAT [2010/11/05 22:34:44 | 005,242,880 | ---- | C] () -- C:\Users\Adam\ntuser.dat.gbck [2010/11/05 22:34:44 | 004,980,736 | ---- | C] () -- C:\Users\Adam\ntuser.dat [2010/11/05 22:34:44 | 000,524,288 | -HS- | C] () -- C:\Users\Adam\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms [2010/11/05 22:34:44 | 000,524,288 | -HS- | C] () -- C:\Users\Adam\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms [2010/11/05 22:34:44 | 000,065,536 | -HS- | C] () -- C:\Users\Adam\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf [2010/11/05 22:34:44 | 000,000,020 | -HS- | C] () -- C:\Users\Adam\ntuser.ini [color=#E56717]========== LOP Check ==========[/color] [2010/11/12 00:18:16 | 000,000,000 | -HSD | M] -- C:\Users\Adam\AppData\Roaming\.# [2011/06/12 23:26:37 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\ALK Technologies [2011/08/03 12:25:10 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\blueconnect [2012/07/23 08:10:35 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\BlueSprig [2011/01/24 01:28:33 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\com.w3i.FlipToast [2012/02/05 18:14:12 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\DAEMON Tools Lite [2011/11/03 13:58:13 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\DBV [2011/02/21 07:23:56 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Dream Aquarium [2010/11/24 03:33:04 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\ESET [2011/06/20 07:42:42 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\FDRLab [2011/11/17 18:19:30 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Gadu-Gadu 10 [2010/11/06 09:22:39 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\GameConsole [2012/06/15 01:50:41 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\GanymedeNet [2011/07/07 05:50:32 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\GlarySoft [2011/08/19 18:46:00 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Graphisoft [2012/07/25 07:35:23 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\hellomoto [2010/12/11 10:56:14 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Kalydo [2010/12/05 13:50:58 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Leadertech [2011/05/29 10:32:50 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Lionhead Studios [2012/07/08 21:35:16 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Marine Aquarium 3 [2010/11/10 21:47:15 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Mirillis [2011/06/01 08:16:23 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Nokia [2010/12/17 16:17:57 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Nokia Ovi Suite [2011/10/11 10:58:55 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\OpenFM [2010/11/08 21:34:46 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\PC Suite [2012/01/01 19:49:41 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\PlayFirst [2012/07/22 10:14:59 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\proDAD [2011/03/23 17:39:58 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\PunkBuster [2011/06/03 19:58:19 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Sony [2012/02/25 15:07:50 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\SplitMediaLabs [2010/11/26 22:09:23 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\TeamViewer [2011/02/01 20:41:46 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Template [2011/06/19 12:26:41 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Thinstall [2012/07/21 16:51:46 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\TuneUp Software [2010/11/09 22:26:02 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Ubisoft [2011/02/18 09:46:34 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Ulead Systems [2010/12/13 00:44:23 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Unity [2012/07/25 08:48:55 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\uTorrent [2012/01/22 20:04:51 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Vso [2010/12/04 22:28:21 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Windows Live Writer [2010/12/28 00:27:23 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\WoN 2 [2011/06/19 07:45:13 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\YoWindow [2011/01/08 22:41:49 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Zentimo [2012/06/28 07:24:13 | 000,032,604 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [2012/07/25 08:49:58 | 000,000,306 | -HS- | M] () -- C:\Windows\Tasks\Wcwli.job [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 121 bytes -> C:\ProgramData\Temp:0B9176C0 < End of report >