OTL logfile created on: 2012-07-25 17:57:16 - Run 1 OTL by OldTimer - Version 3.2.54.1 Folder = C:\Users\Madness\Desktop 64bit-Windows Vista Home Basic Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation Internet Explorer (Version = 7.0.6001.18000) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 3,19 Gb Available Physical Memory | 79,72% Memory free 8,17 Gb Paging File | 7,51 Gb Available in Paging File | 91,91% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 298,08 Gb Total Space | 28,85 Gb Free Space | 9,68% Space Free | Partition Type: NTFS Drive D: | 298,08 Gb Total Space | 70,68 Gb Free Space | 23,71% Space Free | Partition Type: NTFS Drive E: | 3,55 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Computer Name: MADNESS-PC | User Name: Madness | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-07-25 17:55:48 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Madness\Desktop\OTL.exe PRC - [2012-05-29 15:35:11 | 000,949,104 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-05-29 15:35:15 | 000,783,360 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\gstreamer.dll MOD - [2012-05-29 15:35:15 | 000,316,928 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstoggdec.dll MOD - [2012-05-29 15:35:15 | 000,276,480 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstwebmdec.dll MOD - [2012-05-29 15:35:15 | 000,168,448 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstffmpegcolorspace.dll MOD - [2012-05-29 15:35:15 | 000,099,840 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstcoreplugins.dll MOD - [2012-05-29 15:35:15 | 000,098,816 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstaudioresample.dll MOD - [2012-05-29 15:35:15 | 000,098,816 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstaudioconvert.dll MOD - [2012-05-29 15:35:15 | 000,078,336 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstwavparse.dll MOD - [2012-05-29 15:35:15 | 000,076,800 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstdirectsound.dll MOD - [2012-05-29 15:35:15 | 000,068,608 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstdecodebin2.dll MOD - [2012-05-29 15:35:15 | 000,064,000 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstautodetect.dll MOD - [2012-05-29 15:35:15 | 000,046,592 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstwaveform.dll MOD - [2012-05-29 15:35:15 | 000,045,568 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gsttypefindfunctions.dll MOD - [2012-02-10 15:44:12 | 008,527,008 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll MOD - [2008-01-21 04:46:30 | 000,223,232 | ---- | M] () -- \\.\globalroot\systemroot\syswow64\mswsock.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2008-01-21 04:45:23 | 000,383,544 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2012-06-02 00:21:32 | 000,489,256 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2011-08-03 13:50:00 | 002,255,464 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService) SRV - [2011-08-03 03:31:42 | 000,379,496 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2011-03-02 17:26:44 | 000,066,872 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2010-03-18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2008-07-27 20:03:13 | 000,069,632 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2008-01-21 04:44:52 | 000,428,544 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2008-01-21 04:44:52 | 000,211,968 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2011-12-24 07:49:09 | 000,279,616 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\DRIVERS\dtsoftbus01.sys -- (dtsoftbus01) DRV:[b]64bit:[/b] - [2011-06-02 07:47:22 | 000,177,640 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\ssadmdm.sys -- (ssadmdm) DRV:[b]64bit:[/b] - [2011-06-02 07:47:22 | 000,157,672 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\ssadbus.sys -- (ssadbus) DRV:[b]64bit:[/b] - [2011-06-02 07:47:22 | 000,146,920 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\ssadserd.sys -- (ssadserd) DRV:[b]64bit:[/b] - [2011-06-02 07:47:22 | 000,016,872 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\ssadmdfl.sys -- (ssadmdfl) DRV:[b]64bit:[/b] - [2010-12-21 07:55:02 | 000,036,328 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\ssadadb.sys -- (androidusb) DRV:[b]64bit:[/b] - [2010-03-30 10:35:04 | 000,027,648 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\lganddiag64.sys -- (AndDiag) DRV:[b]64bit:[/b] - [2010-03-30 10:35:04 | 000,027,136 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\lgandgps64.sys -- (AndGps) DRV:[b]64bit:[/b] - [2010-03-30 10:35:00 | 000,033,792 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\lgandmodem64.sys -- (ANDModem) DRV:[b]64bit:[/b] - [2010-03-30 10:35:00 | 000,019,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\lgandbus64.sys -- (Andbus) DRV:[b]64bit:[/b] - [2010-03-22 12:04:42 | 000,323,104 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\Rtlh64.sys -- (RTL8169) DRV:[b]64bit:[/b] - [2010-01-04 02:05:00 | 000,242,816 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\V0400Vid.sys -- (VF0400Vid) DRV:[b]64bit:[/b] - [2009-09-29 09:15:02 | 000,016,384 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\lgbtpt64.sys -- (LgBttPort) DRV:[b]64bit:[/b] - [2009-09-29 09:15:00 | 000,017,408 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\lgvmdm64.sys -- (LGVMODEM) DRV:[b]64bit:[/b] - [2009-09-29 09:15:00 | 000,014,848 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\lgbtbs64.sys -- (lgbusenum) DRV:[b]64bit:[/b] - [2009-06-08 12:18:19 | 000,053,816 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysNative\Drivers\DgiVecp.sys -- (DgiVecp) DRV:[b]64bit:[/b] - [2009-05-04 18:30:28 | 000,016,440 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\DRIVERS\AtiPcie.sys -- (AtiPcie) DRV:[b]64bit:[/b] - [2009-04-03 06:39:58 | 000,034,872 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\usbfilter.sys -- (usbfilter) DRV:[b]64bit:[/b] - [2008-01-21 04:48:56 | 000,016,384 | ---- | M] () [Recognizer | System | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2008-01-21 04:45:19 | 000,046,080 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\wpdusb.sys -- (WpdUsb) DRV:[b]64bit:[/b] - [2008-01-21 04:44:44 | 000,019,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\usb8023x.sys -- (usb_rndisx) DRV:[b]64bit:[/b] - [2008-01-10 03:34:51 | 000,011,576 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysNative\Drivers\SSPORT.sys -- (SSPORT) DRV:[b]64bit:[/b] - [2006-12-20 12:59:02 | 000,140,160 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\adusbser.sys -- (adusbser) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.funmoods.com/results.php?f=4&a=nv1&q={searchTerms} IE - HKLM\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll (Conduit Ltd.) IE - HKLM\..\SearchScopes,DefaultScope = {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2790392 IE - HKLM\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.funmoods.com/?f=1&a=nv1 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll (Conduit Ltd.) IE - HKCU\..\SearchScopes,DefaultScope = {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKCU\..\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}: "URL" = http://start.funmoods.com/?a=nv1&s={searchTerms}&f=4 IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&AF=100888&babsrc=SP_ss&mntrId=9082c8f1000000000000001fd0b4a38f IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2790392 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Madness\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{00ADD29A-66F4-4f22-BCC0-4C1D29DA647B}: C:\Program Files (x86)\LG Electronics\LG PC Suite IV\LinkAir\{00ADD29A-66F4-4f22-BCC0-4C1D29DA647B}\ FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fbphotozoom@installdaddy.com: C:\Program Files (x86)\fbphotozoom\fbphotozoom13.xpi [2012-03-12 15:10:52 | 000,102,233 | ---- | M] () [2012-02-10 13:46:46 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions [2010-08-07 19:30:20 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2011-02-12 23:52:18 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2011-06-05 12:55:45 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} [2011-04-14 05:08:00 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll [2011-12-09 19:23:32 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll [2011-11-28 18:24:26 | 000,002,310 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml O1 HOSTS File: ([2006-09-18 23:37:24 | 000,000,761 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO) O2 - BHO: (Funmoods Helper Object) - {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} - C:\Program Files (x86)\Funmoods\funmoods\1.5.11.16\bh\funmoods.dll (Funmoods BHO) O2 - BHO: (BitTorrentBar Toolbar) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll (Conduit Ltd.) O2 - BHO: (DealPly) - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Program Files (x86)\DealPly\DealPlyIE.dll (DealPly Technologies Ltd) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (TheBflix Class) - {EDDB2762-766E-42AB-9D07-E15E87F86F6A} - C:\ProgramData\TheBflix\bhoclass.dll (Injector) O3 - HKLM\..\Toolbar: (BitTorrentBar Toolbar) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (@msdxmLC.dll,-1@1033,&Radio) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\Program Files (x86)\Power Video Converter\msdxm.ocx (Microsoft Corporation) O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.) O3 - HKLM\..\Toolbar: (Funmoods Toolbar) - {A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} - C:\Program Files (x86)\Funmoods\funmoods\1.5.11.16\funmoodsTlbr.dll (Funmoods) O3 - HKCU\..\Toolbar\WebBrowser: (BitTorrentBar Toolbar) - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - C:\Program Files (x86)\BitTorrentBar\prxtbBitT.dll (Conduit Ltd.) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation) O4 - HKLM..\Run: [B2C_AGENT] C:\ProgramData\LGMOBILEAX\B2C_Client\B2CNotiAgent.exe (LG Electronics) O4 - HKLM..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.) O4 - HKLM..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\ssmmgr.exe () O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKCU..\Run: [HKCU] C:\Users\Madness\AppData\Roaming\install\server.exe (Microsoft Corporation) O4 - HKCU..\Run: [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe (Samsung) O4 - HKCU..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe () O4 - HKCU..\Run: [Odkurzacz-MCD] C:\Program Files (x86)\Odkurzacz\odk_mcd.exe (Franmo Software) O4 - HKCU..\Run: [RGSC] D:\Gry\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe (Take-Two Interactive Software, Inc.) O4 - HKCU..\Run: [TsUsbRedirectionGroupPolicyExtension] C:\Users\Madness\AppData\Local\Microsoft\Windows\151\TsUsbRedirectionGroupPolicyExtension.exe () O4 - HKCU..\Run: [WinCheck] C:\Users\Madness\AppData\Local\Spruce\WinCheck\WinCheck.exe (PCSafe) O4 - HKCU..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000001 - mmswsock.dll File not found O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000002 - mmswsock.dll File not found O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000003 - mmswsock.dll File not found O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000004 - mmswsock.dll File not found O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000005 - mmswsock.dll File not found O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000006 - mmswsock.dll File not found O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000007 - mmswsock.dll File not found O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000008 - mmswsock.dll File not found O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000009 - mmswsock.dll File not found O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000010 - mmswsock.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - %SystemRoot%\System32\winrnr.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - %SystemRoot%\System32\winrnr.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - %SystemRoot%\System32\winrnr.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - %SystemRoot%\System32\winrnr.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - %SystemRoot%\System32\winrnr.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - %SystemRoot%\System32\winrnr.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - %SystemRoot%\System32\winrnr.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - %SystemRoot%\System32\winrnr.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - %SystemRoot%\System32\winrnr.dll File not found O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - %SystemRoot%\System32\winrnr.dll File not found O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25) O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.63 62.179.1.62 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9789AD0C-BAA2-41D3-82B8-6EBD359BCDF4}: DhcpNameServer = 62.179.1.63 62.179.1.62 O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\vnd.ms.radio - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Handler\vnd.ms.radio {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\Program Files (x86)\Power Video Converter\msdxm.ocx (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe () O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\Madness\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O24 - Desktop BackupWallPaper: C:\Users\Madness\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008-01-19 22:00:00 | 000,000,122 | R--- | M] () - E:\autorun.inf -- [ UDF ] O33 - MountPoints2\{0b21ad1d-98ce-11e0-961f-b3431383fd37}\Shell - "" = AutoRun O33 - MountPoints2\{0b21ad1d-98ce-11e0-961f-b3431383fd37}\Shell\AutoRun\command - "" = F:\Launcher.exe O33 - MountPoints2\{0e371e5b-091f-11e0-b755-c6235e5ff6de}\Shell - "" = AutoRun O33 - MountPoints2\{0e371e5b-091f-11e0-b755-c6235e5ff6de}\Shell\AutoRun\command - "" = G:\Launcher.exe O33 - MountPoints2\{1c9a72ed-91dd-11df-b54c-820954832a20}\Shell - "" = AutoRun O33 - MountPoints2\{1c9a72ed-91dd-11df-b54c-820954832a20}\Shell\AutoRun\command - "" = F:\Launcher.exe O33 - MountPoints2\{4616bae9-c91d-11e0-a059-cb4b4a669812}\Shell - "" = AutoRun O33 - MountPoints2\{4616bae9-c91d-11e0-a059-cb4b4a669812}\Shell\AutoRun\command - "" = F:\Launcher.exe O33 - MountPoints2\{5c92b77b-9253-11df-b886-c1c53f2a92c6}\Shell - "" = AutoRun O33 - MountPoints2\{5c92b77b-9253-11df-b886-c1c53f2a92c6}\Shell\AutoRun\command - "" = F:\Launcher.exe O33 - MountPoints2\{5ff31fa3-f052-11e0-b198-83cdd8401199}\Shell - "" = AutoRun O33 - MountPoints2\{5ff31fa3-f052-11e0-b198-83cdd8401199}\Shell\AutoRun\command - "" = H:\OblivionLauncher.exe O33 - MountPoints2\{83bb73bb-7c98-11e0-8626-e7e8e03e6267}\Shell - "" = AutoRun O33 - MountPoints2\{83bb73bb-7c98-11e0-8626-e7e8e03e6267}\Shell\AutoRun\command - "" = F:\AutoRunCardDetector.exe O33 - MountPoints2\{a56b45b4-2d47-11e1-9304-949c7ad262ca}\Shell - "" = AutoRun O33 - MountPoints2\{a56b45b4-2d47-11e1-9304-949c7ad262ca}\Shell\AutoRun\command - "" = F:\autorun.exe O33 - MountPoints2\{bced36b2-91db-11df-835e-b13b200b586c}\Shell - "" = AutoRun O33 - MountPoints2\{bced36b2-91db-11df-835e-b13b200b586c}\Shell\AutoRun\command - "" = F:\Launcher.exe O33 - MountPoints2\{e1b5984a-91da-11df-a9cc-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{e1b5984a-91da-11df-a9cc-806e6f6e6963}\Shell\AutoRun\command - "" = E:\setup.exe -- [2008-01-19 22:00:00 | 000,109,624 | R--- | M] (Microsoft Corporation) O33 - MountPoints2\E\Shell - "" = AutoRun O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\setup.exe -- [2008-01-19 22:00:00 | 000,109,624 | R--- | M] (Microsoft Corporation) O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-07-25 17:55:48 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Madness\Desktop\OTL.exe [2012-07-25 16:18:14 | 000,000,000 | ---D | C] -- C:\Users\Madness\AppData\Roaming\hellomoto [2012-07-22 12:54:02 | 000,000,000 | ---D | C] -- C:\Users\Madness\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Illusion [2012-07-22 12:54:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Illusion [2012-07-19 23:23:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TKM17 [2012-07-13 13:24:18 | 000,000,000 | ---D | C] -- C:\Users\Madness\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Electronic Arts [2012-05-24 16:55:36 | 000,231,936 | ---- | C] (Ufasoft) -- C:\Windows\Installer\{70916080-a57e-82f0-5a2e-e6c6f4c8827d}\L\00000008.@ [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-07-25 17:55:48 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Madness\Desktop\OTL.exe [2012-07-25 17:45:45 | 000,055,224 | ---- | M] () -- C:\Windows\diagerr.xml [2012-07-25 17:45:45 | 000,002,159 | ---- | M] () -- C:\Windows\diagwrn.xml [2012-07-25 17:32:53 | 000,236,528 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012-07-25 17:32:47 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-07-25 17:31:38 | 000,002,413 | ---- | M] () -- C:\Windows\SysWow64\lgAxconfig.ini [2012-07-25 17:31:34 | 000,001,046 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012-07-25 17:30:57 | 000,003,712 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2012-07-25 17:30:57 | 000,003,712 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2012-07-25 17:14:30 | 000,001,460 | ---- | M] () -- C:\Users\Madness\AppData\Local\d3d9caps64.dat [2012-07-25 16:38:18 | 000,007,916 | ---- | M] () -- C:\Users\Madness\AppData\Local\d3d9caps.dat [2012-07-25 16:16:53 | 000,044,666 | ---- | M] () -- C:\Users\Madness\Desktop\0006935650.jpg [2012-07-25 16:12:56 | 000,809,852 | ---- | M] () -- C:\Users\Madness\Desktop\5875_01.jpg [2012-07-25 15:56:27 | 000,575,414 | ---- | M] () -- C:\Users\Madness\Desktop\0520651581.jpg [2012-07-25 15:53:53 | 000,128,203 | ---- | M] () -- C:\Users\Madness\Desktop\0516422252.jpg [2012-07-25 15:48:00 | 000,001,050 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012-07-25 15:25:56 | 000,101,309 | ---- | M] () -- C:\Users\Madness\Desktop\426913_365028446899561_634230836_n.jpg [2012-07-25 15:23:11 | 000,043,639 | ---- | M] () -- C:\Users\Madness\Desktop\deepthroat_28030-090.jpg [2012-07-25 15:23:06 | 000,044,839 | ---- | M] () -- C:\Users\Madness\Desktop\frenzy_28030-001.jpg [2012-07-25 14:24:37 | 000,069,892 | ---- | M] () -- C:\Users\Madness\Desktop\77094318_800_s.jpg [2012-07-25 13:47:05 | 000,093,445 | ---- | M] () -- C:\Users\Madness\Desktop\0007368421.jpg [2012-07-25 13:46:55 | 000,173,114 | ---- | M] () -- C:\Users\Madness\Desktop\0505378371.jpg [2012-07-25 13:46:27 | 000,400,144 | ---- | M] () -- C:\Users\Madness\Desktop\0509254749.jpg [2012-07-25 13:44:54 | 000,098,597 | ---- | M] () -- C:\Users\Madness\Desktop\0006923534.jpg [2012-07-25 13:44:20 | 000,190,011 | ---- | M] () -- C:\Users\Madness\Desktop\0519617482.jpg [2012-07-25 13:28:10 | 000,099,364 | ---- | M] () -- C:\Users\Madness\Desktop\1.jpg [2012-07-25 12:55:33 | 000,088,927 | ---- | M] () -- C:\Users\Madness\Desktop\0526767161.jpg [2012-07-25 12:51:07 | 000,092,640 | ---- | M] () -- C:\Users\Madness\Desktop\0526617168.jpg [2012-07-25 12:45:10 | 000,062,090 | ---- | M] () -- C:\Users\Madness\Desktop\0007187379.jpg [2012-07-25 12:45:05 | 000,108,881 | ---- | M] () -- C:\Users\Madness\Desktop\0008665630.jpg [2012-07-25 12:40:11 | 000,145,217 | ---- | M] () -- C:\Users\Madness\Desktop\002.jpg [2012-07-25 12:38:35 | 000,081,537 | ---- | M] () -- C:\Users\Madness\Desktop\01.jpg [2012-07-25 12:33:10 | 000,206,173 | ---- | M] () -- C:\Users\Madness\Desktop\0528138395.jpg [2012-07-20 01:41:43 | 000,201,728 | ---- | M] () -- C:\Users\Madness\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-07-17 23:33:37 | 000,010,003 | ---- | M] () -- C:\Users\Madness\Desktop\ReceBogaSwargi.gif [2012-07-13 13:24:18 | 000,001,002 | ---- | M] () -- C:\Users\Madness\Desktop\Warhammer Online - Age of Reckoning.lnk [2012-07-13 13:23:33 | 042,929,231 | ---- | M] () -- C:\Users\Madness\Desktop\WarhammerOnlineInstaller.exe [2012-07-09 13:52:36 | 000,022,607 | ---- | M] () -- C:\Users\Madness\Desktop\Bez tytułu.jpg [2012-07-08 22:07:10 | 005,030,974 | ---- | M] () -- C:\Users\Madness\Desktop\perun_orzel.mp3 [2012-07-04 20:54:24 | 001,711,824 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012-07-04 20:54:24 | 000,747,676 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2012-07-04 20:54:24 | 000,664,654 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012-07-04 20:54:24 | 000,169,516 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2012-07-04 20:54:24 | 000,132,450 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-07-25 16:16:53 | 000,044,666 | ---- | C] () -- C:\Users\Madness\Desktop\0006935650.jpg [2012-07-25 16:12:56 | 000,809,852 | ---- | C] () -- C:\Users\Madness\Desktop\5875_01.jpg [2012-07-25 15:56:27 | 000,575,414 | ---- | C] () -- C:\Users\Madness\Desktop\0520651581.jpg [2012-07-25 15:53:53 | 000,128,203 | ---- | C] () -- C:\Users\Madness\Desktop\0516422252.jpg [2012-07-25 15:25:56 | 000,101,309 | ---- | C] () -- C:\Users\Madness\Desktop\426913_365028446899561_634230836_n.jpg [2012-07-25 15:23:11 | 000,043,639 | ---- | C] () -- C:\Users\Madness\Desktop\deepthroat_28030-090.jpg [2012-07-25 15:23:06 | 000,044,839 | ---- | C] () -- C:\Users\Madness\Desktop\frenzy_28030-001.jpg [2012-07-25 14:24:37 | 000,069,892 | ---- | C] () -- C:\Users\Madness\Desktop\77094318_800_s.jpg [2012-07-25 13:47:05 | 000,093,445 | ---- | C] () -- C:\Users\Madness\Desktop\0007368421.jpg [2012-07-25 13:46:55 | 000,173,114 | ---- | C] () -- C:\Users\Madness\Desktop\0505378371.jpg [2012-07-25 13:46:27 | 000,400,144 | ---- | C] () -- C:\Users\Madness\Desktop\0509254749.jpg [2012-07-25 13:44:54 | 000,098,597 | ---- | C] () -- C:\Users\Madness\Desktop\0006923534.jpg [2012-07-25 13:44:20 | 000,190,011 | ---- | C] () -- C:\Users\Madness\Desktop\0519617482.jpg [2012-07-25 13:28:10 | 000,099,364 | ---- | C] () -- C:\Users\Madness\Desktop\1.jpg [2012-07-25 12:55:33 | 000,088,927 | ---- | C] () -- C:\Users\Madness\Desktop\0526767161.jpg [2012-07-25 12:51:07 | 000,092,640 | ---- | C] () -- C:\Users\Madness\Desktop\0526617168.jpg [2012-07-25 12:45:10 | 000,062,090 | ---- | C] () -- C:\Users\Madness\Desktop\0007187379.jpg [2012-07-25 12:45:05 | 000,108,881 | ---- | C] () -- C:\Users\Madness\Desktop\0008665630.jpg [2012-07-25 12:40:11 | 000,145,217 | ---- | C] () -- C:\Users\Madness\Desktop\002.jpg [2012-07-25 12:38:35 | 000,081,537 | ---- | C] () -- C:\Users\Madness\Desktop\01.jpg [2012-07-25 12:33:10 | 000,206,173 | ---- | C] () -- C:\Users\Madness\Desktop\0528138395.jpg [2012-07-17 23:31:58 | 000,010,003 | ---- | C] () -- C:\Users\Madness\Desktop\ReceBogaSwargi.gif [2012-07-13 13:24:18 | 000,001,002 | ---- | C] () -- C:\Users\Madness\Desktop\Warhammer Online - Age of Reckoning.lnk [2012-07-13 13:23:28 | 042,929,231 | ---- | C] () -- C:\Users\Madness\Desktop\WarhammerOnlineInstaller.exe [2012-07-09 13:52:35 | 000,022,607 | ---- | C] () -- C:\Users\Madness\Desktop\Bez tytułu.jpg [2012-07-08 22:06:25 | 005,030,974 | ---- | C] () -- C:\Users\Madness\Desktop\perun_orzel.mp3 [2012-05-24 16:50:35 | 000,232,960 | ---- | C] () -- C:\Windows\Installer\{70916080-a57e-82f0-5a2e-e6c6f4c8827d}\U\00000008.@ [2012-05-24 16:50:35 | 000,092,160 | ---- | C] () -- C:\Windows\Installer\{70916080-a57e-82f0-5a2e-e6c6f4c8827d}\U\80000032.@ [2012-05-24 16:50:35 | 000,080,896 | ---- | C] () -- C:\Windows\Installer\{70916080-a57e-82f0-5a2e-e6c6f4c8827d}\U\80000064.@ [2012-05-24 16:50:35 | 000,000,804 | ---- | C] () -- C:\Windows\Installer\{70916080-a57e-82f0-5a2e-e6c6f4c8827d}\L\00000004.@ [2012-05-24 16:50:34 | 000,016,896 | ---- | C] () -- C:\Windows\Installer\{70916080-a57e-82f0-5a2e-e6c6f4c8827d}\U\80000000.@ [2012-05-24 16:50:34 | 000,002,048 | ---- | C] () -- C:\Windows\Installer\{70916080-a57e-82f0-5a2e-e6c6f4c8827d}\U\00000004.@ [2012-05-24 16:50:34 | 000,001,632 | ---- | C] () -- C:\Windows\Installer\{70916080-a57e-82f0-5a2e-e6c6f4c8827d}\U\000000cb.@ [2012-04-06 18:57:14 | 000,000,888 | ---- | C] () -- C:\Users\Madness\.recently-used.xbel [2012-03-28 22:11:08 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe [2012-03-28 22:11:06 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll [2012-03-28 22:11:06 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll [2012-03-28 22:11:06 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll [2012-03-28 22:11:06 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll [2011-12-24 07:16:04 | 000,286,208 | ---- | C] () -- C:\Windows\SysWow64\binkw32.dll [2011-12-12 20:28:44 | 000,000,552 | ---- | C] () -- C:\Users\Madness\AppData\Local\d3d8caps.dat [2011-09-29 19:01:11 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\Tempzmc260.html [2011-09-29 19:01:11 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\Tempvjn260.html [2011-09-29 19:01:11 | 000,002,089 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempNka260.html [2011-09-21 13:07:45 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempJrI480.html [2011-09-21 13:07:45 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempDxE480.html [2011-09-02 22:28:57 | 000,098,344 | ---- | C] () -- C:\Windows\unTMV.exe [2011-08-17 21:44:37 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\Tempaez260.html [2011-08-17 21:44:36 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempxIn260.html [2011-08-03 22:17:03 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\Tempe12596.html [2011-08-03 22:17:03 | 000,002,089 | ---- | C] () -- C:\Users\Madness\AppData\Local\Tempr12596.html [2011-08-03 22:17:02 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\Tempn12596.html [2011-08-03 03:31:54 | 000,311,912 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe [2011-07-28 22:20:53 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempPHn996.html [2011-07-28 22:20:53 | 000,002,089 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempDJw996.html [2011-07-28 22:20:52 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\Tempphq996.html [2011-07-28 00:50:18 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempCTt740.html [2011-07-03 23:25:54 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\Tempm23004.html [2011-06-29 13:19:59 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempEOp780.html [2011-06-29 13:19:59 | 000,002,089 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempjGR780.html [2011-06-07 16:38:52 | 000,058,158 | ---- | C] () -- C:\Users\Madness\AppData\Roaming\SQLite3.dll [2011-06-02 21:47:55 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempnuT748.html [2011-05-19 20:41:32 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempMlj292.html [2011-05-19 20:41:32 | 000,002,089 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempybU292.html [2011-05-09 14:59:15 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempxzX796.html [2011-05-01 12:36:48 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempFUs260.html [2011-04-17 21:12:12 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempiWa320.html [2011-04-17 21:12:12 | 000,002,089 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempEjJ320.html [2011-04-11 15:32:38 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempBnD308.html [2011-03-24 23:42:07 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempDLZ484.html [2011-03-24 23:42:07 | 000,002,089 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempePH484.html [2011-03-20 13:18:15 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempCNg824.html [2011-03-18 23:28:21 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\CommonDL.dll [2011-03-18 23:28:21 | 000,002,413 | ---- | C] () -- C:\Windows\SysWow64\lgAxconfig.ini [2011-03-18 20:43:11 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempmaU844.html [2011-03-18 20:43:11 | 000,002,089 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempXSf844.html [2011-03-14 16:26:11 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempzeI476.html [2011-03-14 16:26:11 | 000,002,089 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempTrd476.html [2011-03-13 03:33:46 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempoVq188.html [2011-03-13 03:33:46 | 000,002,089 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempfsA188.html [2011-03-08 00:26:28 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempfhK964.html [2011-03-08 00:26:28 | 000,002,089 | ---- | C] () -- C:\Users\Madness\AppData\Local\Tempevc964.html [2011-03-03 19:10:38 | 000,000,095 | ---- | C] () -- C:\Users\Madness\AppData\Local\fusioncache.dat [2011-03-02 17:42:49 | 001,688,310 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011-02-28 17:43:51 | 000,103,736 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2011-02-28 17:43:48 | 000,669,184 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe [2011-02-28 17:43:48 | 000,066,872 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2011-02-13 22:46:18 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempCVN672.html [2011-02-13 22:46:18 | 000,002,089 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempqzI672.html [2011-02-10 20:00:27 | 000,002,048 | -HS- | C] () -- C:\Windows\Installer\{70916080-a57e-82f0-5a2e-e6c6f4c8827d}\@ [2011-02-10 20:00:27 | 000,002,048 | -HS- | C] () -- C:\Users\Madness\AppData\Local\{70916080-a57e-82f0-5a2e-e6c6f4c8827d}\@ [2011-01-31 16:39:01 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempKeu876.html [2011-01-31 16:39:01 | 000,002,089 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempCxV876.html [2011-01-20 17:51:04 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\Tempesb852.html [2011-01-19 22:01:24 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempBPh832.html [2011-01-19 22:01:24 | 000,002,089 | ---- | C] () -- C:\Users\Madness\AppData\Local\Tempzhq832.html [2011-01-19 16:14:48 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempkdZ332.html [2011-01-19 16:14:48 | 000,002,089 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempgYn332.html [2011-01-12 16:14:20 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempQdj292.html [2011-01-04 22:20:29 | 000,086,426 | ---- | C] () -- C:\Users\Madness\Obraz.jpeg [2011-01-04 19:34:37 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TemplBd512.html [2011-01-04 19:34:37 | 000,002,089 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempAoW512.html [2010-12-12 02:02:50 | 000,007,916 | ---- | C] () -- C:\Users\Madness\AppData\Local\d3d9caps.dat [2010-10-31 15:00:38 | 000,000,068 | ---- | C] () -- C:\Windows\Power Video Converter.INI [2010-10-14 19:47:44 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2010-10-10 12:53:04 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\Tempqwq688.html [2010-10-10 12:53:04 | 000,002,089 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempukC688.html [2010-09-10 19:27:13 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\Temppow776.html [2010-09-10 19:27:13 | 000,002,089 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempPsA776.html [2010-09-05 11:04:46 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempjjT324.html [2010-09-01 14:40:57 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempxHU328.html [2010-09-01 14:40:57 | 000,002,089 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempxQc328.html [2010-08-25 11:36:57 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempYyY556.html [2010-08-24 23:57:55 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempqZU856.html [2010-08-24 23:57:55 | 000,002,089 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempIbv856.html [2010-08-17 18:46:13 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempjWC884.html [2010-08-17 18:46:13 | 000,002,089 | ---- | C] () -- C:\Users\Madness\AppData\Local\Templja884.html [2010-08-06 18:04:23 | 000,479,232 | ---- | C] () -- C:\Windows\ssndii.exe [2010-08-06 17:35:01 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempqAp496.html [2010-08-04 23:55:02 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempdLu352.html [2010-08-04 23:55:02 | 000,002,089 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempNeL352.html [2010-07-18 12:25:17 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempOwU256.html [2010-07-18 12:13:53 | 000,002,432 | ---- | C] () -- C:\Users\Madness\AppData\Local\TempJQe280.html [2010-07-18 02:53:12 | 000,201,728 | ---- | C] () -- C:\Users\Madness\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-07-17 21:48:36 | 000,001,460 | ---- | C] () -- C:\Users\Madness\AppData\Local\d3d9caps64.dat [2005-07-18 01:26:49 | 000,002,438 | -H-- | C] () -- C:\Users\Madness\AppData\Roaming\cglogs.dat < End of report >