OTL logfile created on: 2012-07-25 23:29:27 - Run 1
OTL by OldTimer - Version 3.2.54.1     Folder = F:\
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
5,86 Gb Total Physical Memory | 4,84 Gb Available Physical Memory | 82,57% Memory free
11,72 Gb Paging File | 10,72 Gb Available in Paging File | 91,49% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 220,57 Gb Total Space | 145,53 Gb Free Space | 65,98% Space Free | Partition Type: NTFS
Drive F: | 1,86 Gb Total Space | 0,03 Gb Free Space | 1,35% Space Free | Partition Type: FAT32
Drive G: | 234,02 Gb Total Space | 37,27 Gb Free Space | 15,92% Space Free | Partition Type: NTFS
 
Computer Name: KUBA | User Name: Kuba | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-07-25 23:12:06 | 000,596,480 | ---- | M] (OldTimer Tools) -- F:\OTL.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2012-04-22 13:51:04 | 000,720,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2012-02-28 18:38:54 | 002,343,816 | ---- | M] (LogMeIn Inc.) [Auto | Stopped] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2011-11-18 22:43:30 | 000,419,624 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011-10-01 09:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2011-10-01 09:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2011-01-16 13:30:30 | 000,075,064 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2010-12-28 10:00:34 | 001,296,728 | ---- | M] (www.BitComet.com) [On_Demand | Stopped] -- C:\Program Files (x86)\BitComet\tools\BitCometService.exe -- (BITCOMET_HELPER_SERVICE)
SRV - [2010-05-11 09:40:52 | 000,124,368 | ---- | M] (Toshiba Europe GmbH) [On_Demand | Stopped] -- C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe -- (TemproMonitoringService)
SRV - [2010-05-05 07:20:00 | 001,604,200 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2010-03-18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010-03-03 14:42:02 | 002,320,920 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2010-03-03 14:41:58 | 000,268,824 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2010-01-28 16:44:40 | 000,249,200 | ---- | M] (TOSHIBA CORPORATION) [Auto | Stopped] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe -- (cfWiMAXService)
SRV - [2010-01-15 14:08:38 | 000,935,208 | ---- | M] (Nero AG) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2009-10-06 09:21:50 | 000,051,512 | ---- | M] (TOSHIBA Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe -- (TMachInfo)
SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009-03-10 18:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) [Auto | Stopped] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe -- (ConfigFree Service)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1
IE - HKLM\..\SearchScopes,DefaultScope = {E76500C4-C7EC-4D1D-B7D7-E55FEA1996EF}
IE - HKLM\..\SearchScopes\{8E446AFF-8307-4005-8611-5F10151EA323}: "URL" = http://startsear.ch/?aff=1&q={searchTerms}
IE - HKLM\..\SearchScopes\{E76500C4-C7EC-4D1D-B7D7-E55FEA1996EF}: "URL" = http://www.bing.com/search?q={searchTerms}&form=TSHMDF&pc=MATM&src=IE-SearchBox
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1277000516-2418392974-2558694336-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshiba.msn.com
IE - HKU\S-1-5-21-1277000516-2418392974-2558694336-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKU\S-1-5-21-1277000516-2418392974-2558694336-1001\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-1277000516-2418392974-2558694336-1001\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&AF=100888&babsrc=SP_ss&mntrId=2c8869300000000000001c659d16bc60
IE - HKU\S-1-5-21-1277000516-2418392974-2558694336-1001\..\SearchScopes\{13D67557-D3CD-43BB-B28F-CBB3F881BCD3}: "URL" = http://rover.ebay.com/rover/1/4908-44618-9400-8/4?satitle={searchTerms}
IE - HKU\S-1-5-21-1277000516-2418392974-2558694336-1001\..\SearchScopes\{8E446AFF-8307-4005-8611-5F10151EA323}: "URL" = http://startsear.ch/?aff=1&q={searchTerms}
IE - HKU\S-1-5-21-1277000516-2418392974-2558694336-1001\..\SearchScopes\{97A676F9-B84C-456D-8B53-4131E0E89D49}: "URL" = http://www.amazon.co.uk/gp/search?ie=UTF8&keywords={searchTerms}&tag=tochibauk-win7-ie-search-21&index=blended&linkCode=ur2
IE - HKU\S-1-5-21-1277000516-2418392974-2558694336-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultengine: "Web Search"
FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.gazeta.pl/0,0.html?p=135"
FF - prefs.js..extensions.enabledItems: {dc572301-7619-498c-a57d-39143191b318}:0.3.8.5
FF - prefs.js..extensions.enabledItems: {FBF6D7FB-F305-4445-BB3D-FEF66579A033}:5.0.1
FF - prefs.js..extensions.enabledItems: {F17C1572-C9EC-4e5c-A542-D05CBB5C5A08}:8.6.7.0
FF - prefs.js..keyword.URL: "http://search.babylon.com/?AF=100888&babsrc=adbartrp&mntrId=2c8869300000000000001c659d16bc60&q="
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nokia.com/EnablerPlugin: C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF - HKLM\Software\MozillaPlugins\@rayv.com/rayvplugin: C:\Program Files (x86)\RayV\RayV\plugins\nprayvplugin.dll (RayV)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-02-04 15:43:04 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-02-04 15:48:10 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012-04-14 15:55:37 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.10\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011-05-18 12:29:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.10\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-02-04 15:43:04 | 000,000,000 | ---D | M]
 
[2010-12-23 22:51:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kuba\AppData\Roaming\mozilla\Extensions
[2010-12-23 22:51:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kuba\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2012-04-28 19:38:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kuba\AppData\Roaming\mozilla\Firefox\Profiles\sfibrfah.default\extensions
[2011-05-03 14:08:58 | 000,000,000 | ---D | M] (Multirow Bookmarks Toolbar) -- C:\Users\Kuba\AppData\Roaming\mozilla\Firefox\Profiles\sfibrfah.default\extensions\{FBF6D7FB-F305-4445-BB3D-FEF66579A033}
[2012-02-02 12:50:32 | 000,000,000 | ---D | M] (Bflix extension) -- C:\Users\Kuba\AppData\Roaming\mozilla\Firefox\Profiles\sfibrfah.default\extensions\info@thebflix.com
[2012-04-28 19:38:18 | 000,000,000 | ---D | M] (Iplex to ALLPlayer) -- C:\Users\Kuba\AppData\Roaming\mozilla\Firefox\Profiles\sfibrfah.default\extensions\IplextoALL@ALLPlayer.org
[2012-02-04 02:22:26 | 000,000,000 | ---D | M] (Nokia Maps 3D browser plugin) -- C:\Users\Kuba\AppData\Roaming\mozilla\Firefox\Profiles\sfibrfah.default\extensions\maps@ovi.com
[2011-09-25 19:25:57 | 000,000,000 | ---D | M] ("NetVideoHunter") -- C:\Users\Kuba\AppData\Roaming\mozilla\Firefox\Profiles\sfibrfah.default\extensions\netvideohunter@netvideohunter.com
[2012-04-28 19:38:43 | 000,000,000 | ---D | M] (YouTube to ALLPlayer) -- C:\Users\Kuba\AppData\Roaming\mozilla\Firefox\Profiles\sfibrfah.default\extensions\YouTubetoALL@ALLPlayer.org
[2011-07-11 20:04:02 | 000,000,633 | ---- | M] () -- C:\Users\Kuba\AppData\Roaming\Mozilla\Firefox\Profiles\sfibrfah.default\searchplugins\startsear.xml
[2011-05-07 19:04:21 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2011-05-07 19:04:21 | 000,000,000 | ---D | M] (vShare Add-On) -- C:\Program Files (x86)\mozilla firefox\extensions\{dd05fd3d-18df-4ce4-ae53-e795339c5f01}
[2012-04-02 00:32:22 | 000,686,225 | ---- | M] () (No name found) -- C:\USERS\KUBA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SFIBRFAH.DEFAULT\EXTENSIONS\{DC572301-7619-498C-A57D-39143191B318}.XPI
[2011-11-29 21:10:09 | 000,011,098 | ---- | M] () (No name found) -- C:\USERS\KUBA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SFIBRFAH.DEFAULT\EXTENSIONS\SUPPORT@VDOWNLOADER.COM.XPI
[2011-11-19 15:06:40 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2009-11-06 18:37:19 | 000,091,552 | ---- | M] (Coupons, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npCouponPrinter.dll
[2009-11-06 18:37:20 | 000,091,552 | ---- | M] (Coupons, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npMozCouponPrinter.dll
[2011-10-03 11:14:54 | 000,083,456 | ---- | M] (vShare.tv ) -- C:\Program Files (x86)\mozilla firefox\plugins\npvsharetvplg.dll
[2011-10-01 19:38:31 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml
[2012-01-10 15:55:50 | 000,002,310 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
[2011-10-01 19:38:31 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml
[2011-10-01 19:38:31 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml
[2011-10-01 19:38:31 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml
[2011-10-01 19:38:31 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml
[2011-10-01 19:38:31 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (bflix Class) - {0C9F4179-6CE2-4c6a-A3E5-67FF3592A12E} - C:\Program Files (x86)\BFlix\BFlix.dll (bflix)
O2 - BHO: (YouTube To ALLPlayer) - {61DB16C5-B733-43F4-872E-B20DC9E72740} - C:\PROGRA~2\ALLPLA~1\YOUTUB~1.DLL (ALLPlayer.org)
O2 - BHO: (IE5BarLauncherBHO Class) - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll (VShare Inc.)
O2 - BHO: (FlashGetBHO) - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - C:\Users\Kuba\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll (Trend Media Group)
O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\PROGRA~2\ALLPLA~1\Iplex\IPLEXT~1.DLL (ALLCinema Ltd.)
O2 - BHO: (TOSHIBA Media Controller Plug-in) - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
O3 - HKLM\..\Toolbar: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll (VShare Inc.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-1277000516-2418392974-2558694336-1001\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll ()
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe (TOSHIBA Electronics, Inc.)
O4 - HKLM..\Run: [KeNotify] C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe (TOSHIBA CORPORATION)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [SVPWUTIL] C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe (TOSHIBA)
O4 - HKLM..\Run: [ToshibaServiceStation] C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TRCMan] C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TSleepSrv] C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe (TOSHIBA)
O4 - HKLM..\Run: [TWebCamera] C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe (TOSHIBA CORPORATION.)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKU\.DEFAULT..\Run: [TOSHIBA Online Product Information] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe (TOSHIBA)
O4 - HKU\S-1-5-18..\Run: [TOSHIBA Online Product Information] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe (TOSHIBA)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1277000516-2418392974-2558694336-1001..\Run: []  File not found
O4 - HKU\S-1-5-21-1277000516-2418392974-2558694336-1001..\Run: [ALLUpdate] C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe ()
O4 - HKU\S-1-5-21-1277000516-2418392974-2558694336-1001..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-1277000516-2418392974-2558694336-1001..\Run: [NokiaPCInternetAccess] C:\Program Files (x86)\Nokia\PC Internet Access\NPCIA.exe (Nokia)
O4 - HKU\S-1-5-21-1277000516-2418392974-2558694336-1001..\Run: [NokiaSuite.exe] C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe (Nokia)
O4 - HKU\S-1-5-21-1277000516-2418392974-2558694336-1001..\Run: [RayV] C:\Program Files (x86)\RayV\RayV\RayV.exe (RayV)
O4 - HKU\S-1-5-21-1277000516-2418392974-2558694336-1001..\Run: [Steam] G:\Steam\Steam.exe (Valve Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
O4 - Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\S-1-5-21-1277000516-2418392974-2558694336-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1277000516-2418392974-2558694336-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O8 - Extra context menu item: Download all by FlashGet3 - C:\Users\Kuba\AppData\Roaming\FlashGetBHO\GetAllUrl.htm ()
O8 - Extra context menu item: Download by FlashGet3 - C:\Users\Kuba\AppData\Roaming\FlashGetBHO\GetUrl.htm ()
O8 - Extra context menu item: 使用快车3下载 - C:\Users\Kuba\AppData\Roaming\FlashGetBHO\GetUrl.htm ()
O8 - Extra context menu item: 使用快车3下载全部链接 - C:\Users\Kuba\AppData\Roaming\FlashGetBHO\GetAllUrl.htm ()
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E47FC9ED-776C-434B-9B67-013F0214A936}: NameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O31 - SafeBoot: UseAlternatShell - 1
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-05-21 22:32:42 | 000,000,000 | ---D | M] - F:\AutoMapa 5.3 -- [ FAT32 ]
O33 - MountPoints2\{042a9a6a-3d06-11e1-8b2a-88ae1d4d581b}\Shell - "" = AutoRun
O33 - MountPoints2\{042a9a6a-3d06-11e1-8b2a-88ae1d4d581b}\Shell\AutoRun\command - "" = F:\NokiaPCIA_Autorun.exe
O33 - MountPoints2\{6a7f250a-4cc0-11e0-a612-1c659d16bc60}\Shell - "" = AutoRun
O33 - MountPoints2\{6a7f250a-4cc0-11e0-a612-1c659d16bc60}\Shell\AutoRun\command - "" = F:\.\Autorun.exe AUTORUN=1
O33 - MountPoints2\{77db176b-4db1-11e0-a50b-1c659d16bc60}\Shell - "" = AutoRun
O33 - MountPoints2\{77db176b-4db1-11e0-a50b-1c659d16bc60}\Shell\AutoRun\command - "" = F:\.\Autorun.exe AUTORUN=1
O33 - MountPoints2\{9452afbf-1daf-11e0-bdc7-1c659d16bc60}\Shell - "" = AutoRun
O33 - MountPoints2\{9452afbf-1daf-11e0-bdc7-1c659d16bc60}\Shell\AutoRun\command - "" = G:\.\Autorun.exe AUTORUN=1
O33 - MountPoints2\{953de2f1-d16b-11e1-aa13-88ae1d4d581b}\Shell - "" = AutoRun
O33 - MountPoints2\{953de2f1-d16b-11e1-aa13-88ae1d4d581b}\Shell\AutoRun\command - "" = F:\NokiaPCIA_Autorun.exe
O33 - MountPoints2\{a1f2384a-4c05-11e0-948d-88ae1d4d581b}\Shell - "" = AutoRun
O33 - MountPoints2\{a1f2384a-4c05-11e0-948d-88ae1d4d581b}\Shell\AutoRun\command - "" = F:\.\Autorun.exe AUTORUN=1
O33 - MountPoints2\{b0a88335-a962-11e1-bb89-88ae1d4d581b}\Shell - "" = AutoRun
O33 - MountPoints2\{b0a88335-a962-11e1-bb89-88ae1d4d581b}\Shell\AutoRun\command - "" = H:\Autorun.exe
O33 - MountPoints2\{b59f8d17-2bc9-11e0-bc83-88ae1d4d581b}\Shell - "" = AutoRun
O33 - MountPoints2\{b59f8d17-2bc9-11e0-bc83-88ae1d4d581b}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{c51fa98c-50b5-11e0-b185-1c659d16bc60}\Shell - "" = AutoRun
O33 - MountPoints2\{c51fa98c-50b5-11e0-b185-1c659d16bc60}\Shell\AutoRun\command - "" = F:\.\Autorun.exe AUTORUN=1
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-07-23 23:45:16 | 000,000,000 | ---D | C] -- C:\Users\Kuba\Desktop\NOD32_v3.0.642_32bit_PL
[2012-07-23 23:41:28 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\hellomoto
[2012-07-23 16:34:32 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2012-07-23 16:08:28 | 000,000,000 | ---D | C] -- C:\ProgramData\7531CC920008F1C30000F30BE56C34C7
[2012-07-23 15:13:09 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live Security Platinum
[2012-07-23 15:11:16 | 000,000,000 | ---D | C] -- C:\ProgramData\7531CC920008F1C30000F30BF875F002
[2012-07-23 14:08:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Convert MP4 to MP3
[2012-07-23 14:08:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Convert MP4 to MP3
[2012-07-19 18:18:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia
[2012-07-19 18:17:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nokia
[2012-07-19 18:17:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PC Connectivity Solution
[2012-07-18 11:08:53 | 000,000,000 | ---D | C] -- C:\Users\Kuba\Desktop\eq_presets
[2012-07-18 11:06:42 | 000,000,000 | ---D | C] -- C:\Users\Kuba\Desktop\foobar2000
[2012-07-18 11:06:23 | 003,243,406 | ---- | C] (foobar2000.org) -- C:\Users\Kuba\Desktop\foobar2000_v1.1.13.exe
[2012-07-12 03:31:56 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2012-07-12 03:31:55 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2012-07-12 03:31:54 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2012-07-12 03:31:53 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2012-07-12 03:31:52 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2012-07-12 03:31:51 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2012-07-11 21:54:53 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll
[2012-07-11 21:54:46 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cdosys.dll
[2012-07-08 20:44:26 | 000,000,000 | ---D | C] -- C:\Users\Kuba\Desktop\fm2011-ekstraklasa_3d_2
[2012-07-08 19:35:45 | 000,000,000 | ---D | C] -- C:\Users\Kuba\Desktop\Nowy folder
[2012-07-03 11:25:05 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TOSHIBA
[2012-07-03 11:19:04 | 000,000,000 | R--D | C] -- C:\Users\Kuba\Desktop\1.3.19_64
[3 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-07-25 23:26:43 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-07-25 23:26:38 | 425,725,951 | -HS- | M] () -- C:\hiberfil.sys
[2012-07-25 23:24:48 | 003,670,016 | -HS- | M] () -- C:\Users\Kuba\NTUSER.DAT
[2012-07-25 23:09:39 | 000,001,040 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012-07-25 23:06:42 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2012-07-23 23:42:10 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012-07-23 16:34:55 | 000,000,350 | -H-- | M] () -- C:\Windows\tasks\avast! Emergency Update.job
[2012-07-23 16:34:55 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2012-07-23 14:12:11 | 000,107,552 | ---- | M] () -- C:\Users\Kuba\Desktop\Plik audio 06.mp3
[2012-07-23 11:46:58 | 000,144,889 | ---- | M] () -- C:\Users\Kuba\Desktop\Plik audio 06.mp4
[2012-07-22 19:18:09 | 004,234,461 | ---- | M] () -- C:\Users\Kuba\Desktop\Pih - DowA3d Rzeczowy Nr 2 [2011].rar
[2012-07-19 18:18:01 | 000,002,100 | ---- | M] () -- C:\Users\Public\Desktop\Nokia Suite.lnk
[2012-07-18 16:22:46 | 197,310,314 | ---- | M] () -- C:\Users\Kuba\Desktop\Waldemar.Kasa-Prawda.Naga.2010.rar
[2012-07-18 15:59:02 | 140,327,266 | ---- | M] () -- C:\Users\Kuba\Desktop\Pih - Dowód Rzeczowy Nr 2 [2011].rar
[2012-07-18 15:57:34 | 109,608,235 | ---- | M] () -- C:\Users\Kuba\Desktop\DonGURALesko - Zaklinacz Deszczu [2011](1).rar
[2012-07-18 15:51:37 | 070,143,437 | ---- | M] () -- C:\Users\Kuba\Desktop\GrubSon & BRK – Gruby Brzuch CAŁA PŁYTA.rar
[2012-07-18 11:13:12 | 004,386,956 | ---- | M] () -- C:\Users\Kuba\Desktop\zix___by_neonasahi-d32o51k.rar
[2012-07-18 11:08:02 | 000,003,526 | ---- | M] () -- C:\Users\Kuba\Desktop\eq_presets.zip
[2012-07-18 11:06:28 | 003,243,406 | ---- | M] (foobar2000.org) -- C:\Users\Kuba\Desktop\foobar2000_v1.1.13.exe
[2012-07-18 10:56:23 | 099,109,168 | ---- | M] () -- C:\Users\Kuba\Desktop\Paktofonika-Kinematografia.rar
[2012-07-15 14:53:29 | 004,493,772 | ---- | M] () -- C:\Users\Kuba\Desktop\Donatan R-WNONOC Nie lubimy robi- Borixon- Ka....mp3
[2012-07-13 18:53:16 | 000,024,438 | ---- | M] () -- C:\Users\Kuba\Desktop\531681_10150990500463463_2007067787_n.jpg
[2012-07-13 18:53:04 | 000,028,911 | ---- | M] () -- C:\Users\Kuba\Desktop\431973_10150659786788463_850620246_n.jpg
[2012-07-03 11:17:44 | 071,923,526 | ---- | M] () -- C:\Users\Kuba\Desktop\vap-20110217100554.zip
[2012-07-03 11:13:41 | 071,067,921 | ---- | M] () -- C:\Users\Kuba\Desktop\vap-20091208100040.zip
[2012-07-01 23:34:36 | 000,074,986 | ---- | M] () -- C:\Users\Kuba\Desktop\554224_257915417646542_1156811353_n.jpg
[2012-06-29 23:21:20 | 000,000,656 | ---- | M] () -- C:\Users\Public\Desktop\Need for Speed The Run.lnk
[2012-06-28 14:49:31 | 000,084,950 | ---- | M] () -- C:\Users\Kuba\Desktop\F_10390033_06_12.pdf
[3 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-07-23 16:34:55 | 000,000,350 | -H-- | C] () -- C:\Windows\tasks\avast! Emergency Update.job
[2012-07-23 16:05:24 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt
[2012-07-23 16:05:16 | 000,380,928 | ---- | C] () -- C:\Windows\SysWow64\actskin4.ocx
[2012-07-23 15:50:31 | 039,769,408 | ---- | C] () -- C:\Users\Kuba\Desktop\setuppol.exe
[2012-07-23 14:10:08 | 000,107,552 | ---- | C] () -- C:\Users\Kuba\Desktop\Plik audio 06.mp3
[2012-07-23 14:09:36 | 000,144,889 | ---- | C] () -- C:\Users\Kuba\Desktop\Plik audio 06.mp4
[2012-07-22 19:18:08 | 004,234,461 | ---- | C] () -- C:\Users\Kuba\Desktop\Pih - DowA3d Rzeczowy Nr 2 [2011].rar
[2012-07-19 18:18:01 | 000,002,100 | ---- | C] () -- C:\Users\Public\Desktop\Nokia Suite.lnk
[2012-07-18 16:16:45 | 197,310,314 | ---- | C] () -- C:\Users\Kuba\Desktop\Waldemar.Kasa-Prawda.Naga.2010.rar
[2012-07-18 15:52:10 | 109,608,235 | ---- | C] () -- C:\Users\Kuba\Desktop\DonGURALesko - Zaklinacz Deszczu [2011](1).rar
[2012-07-18 15:50:45 | 140,327,266 | ---- | C] () -- C:\Users\Kuba\Desktop\Pih - Dowód Rzeczowy Nr 2 [2011].rar
[2012-07-18 15:48:46 | 070,143,437 | ---- | C] () -- C:\Users\Kuba\Desktop\GrubSon & BRK – Gruby Brzuch CAŁA PŁYTA.rar
[2012-07-18 11:13:05 | 004,386,956 | ---- | C] () -- C:\Users\Kuba\Desktop\zix___by_neonasahi-d32o51k.rar
[2012-07-18 11:08:02 | 000,003,526 | ---- | C] () -- C:\Users\Kuba\Desktop\eq_presets.zip
[2012-07-18 10:53:06 | 099,109,168 | ---- | C] () -- C:\Users\Kuba\Desktop\Paktofonika-Kinematografia.rar
[2012-07-15 14:51:19 | 004,493,772 | ---- | C] () -- C:\Users\Kuba\Desktop\Donatan R-WNONOC Nie lubimy robi- Borixon- Ka....mp3
[2012-07-13 18:53:16 | 000,024,438 | ---- | C] () -- C:\Users\Kuba\Desktop\531681_10150990500463463_2007067787_n.jpg
[2012-07-13 18:53:04 | 000,028,911 | ---- | C] () -- C:\Users\Kuba\Desktop\431973_10150659786788463_850620246_n.jpg
[2012-07-03 11:14:22 | 071,923,526 | ---- | C] () -- C:\Users\Kuba\Desktop\vap-20110217100554.zip
[2012-07-03 11:10:18 | 071,067,921 | ---- | C] () -- C:\Users\Kuba\Desktop\vap-20091208100040.zip
[2012-07-01 23:34:35 | 000,074,986 | ---- | C] () -- C:\Users\Kuba\Desktop\554224_257915417646542_1156811353_n.jpg
[2012-06-28 14:49:31 | 000,084,950 | ---- | C] () -- C:\Users\Kuba\Desktop\F_10390033_06_12.pdf
[2012-05-30 22:06:54 | 000,122,880 | ---- | C] () -- C:\Windows\UnGins.exe
[2012-03-08 01:24:13 | 000,010,716 | ---- | C] () -- C:\Windows\scunin.dat
[2012-02-26 16:28:28 | 000,014,840 | ---- | C] () -- C:\Windows\War3Unin.dat
[2012-02-24 00:30:21 | 000,057,344 | ---- | C] () -- C:\Windows\rzrunins.exe
[2012-02-11 02:48:18 | 004,078,592 | ---- | C] () -- C:\Windows\SysWow64\x264vfw.dll
[2012-02-11 02:48:18 | 000,216,064 | ---- | C] ( ) -- C:\Windows\SysWow64\lagarith.dll
[2012-02-11 02:48:17 | 000,644,608 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2012-02-11 02:48:17 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2012-02-11 02:48:15 | 000,175,616 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2012-02-11 02:48:12 | 000,079,360 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2012-02-10 03:52:51 | 000,258,048 | ---- | C] () -- C:\Windows\SysWow64\libFLAC.dll
[2012-02-04 15:39:00 | 000,160,785 | ---- | C] () -- C:\Windows\hpoins45.dat.temp
[2012-02-04 15:38:59 | 000,000,450 | ---- | C] () -- C:\Windows\hpomdl45.dat.temp
[2012-02-04 15:26:34 | 000,002,560 | ---- | C] () -- C:\Windows\_MSRSTRT.EXE
[2011-04-19 10:04:05 | 000,098,304 | ---- | C] () -- C:\Windows\SysWow64\redmonnt.dll
[2011-03-21 16:59:30 | 000,170,420 | ---- | C] () -- C:\Windows\hpoins45.dat
[2011-03-21 16:59:30 | 000,000,450 | ---- | C] () -- C:\Windows\hpomdl45.dat
[2011-02-11 19:56:38 | 000,000,468 | ---- | C] () -- C:\Windows\SysWow64\secustat.dat
[2011-02-11 19:54:31 | 000,001,770 | ---- | C] () -- C:\Windows\SysWow64\secushr.dat
[2011-02-11 19:50:15 | 000,000,025 | ---- | C] () -- C:\Windows\libem.INI
[2011-01-21 23:42:41 | 000,007,597 | ---- | C] () -- C:\Users\Kuba\AppData\Local\Resmon.ResmonCfg
[2011-01-21 00:31:07 | 000,017,920 | ---- | C] () -- C:\Users\Kuba\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-01-16 13:30:33 | 000,215,128 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011-01-16 13:30:30 | 002,434,856 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_bc2.exe
[2011-01-16 13:30:30 | 000,075,064 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2010-12-23 23:31:45 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2010-12-22 22:56:24 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2010-12-22 20:49:53 | 001,607,084 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010-12-22 17:32:34 | 000,058,712 | ---- | C] () -- C:\Users\Kuba\AppData\Local\GDIPFONTCACHEV1.DAT
[2010-12-22 17:28:51 | 000,000,020 | -HS- | C] () -- C:\Users\Kuba\ntuser.ini
[2010-12-22 17:28:50 | 003,670,016 | -HS- | C] () -- C:\Users\Kuba\NTUSER.DAT
[2010-12-22 17:28:50 | 000,524,288 | -HS- | C] () -- C:\Users\Kuba\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2010-12-22 17:28:50 | 000,524,288 | -HS- | C] () -- C:\Users\Kuba\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2010-12-22 17:28:50 | 000,065,536 | -HS- | C] () -- C:\Users\Kuba\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2010-08-27 06:59:39 | 000,000,000 | ---- | C] () -- C:\Windows\NDSTray.INI
[2010-08-27 06:45:45 | 000,451,072 | ---- | C] () -- C:\Windows\SysWow64\ISSRemoveSP.exe
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-06-09 00:53:57 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\2K Sports
[2011-01-06 17:06:49 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\aerix
[2012-01-10 15:55:48 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Babylon
[2012-01-10 23:24:58 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\BitComet
[2012-02-11 17:51:09 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\BITS
[2010-12-22 20:30:49 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\DAEMON Tools Lite
[2012-04-17 16:09:33 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\e-pity
[2011-02-11 19:49:57 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\FlashGet
[2011-02-11 19:49:56 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\FlashGetBHO
[2011-11-03 21:44:11 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Gadu-Gadu 10
[2012-07-23 23:41:39 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\hellomoto
[2011-03-11 19:59:02 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\internet niemcy
[2012-06-08 02:20:06 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\ipla
[2011-11-03 21:29:23 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Kadu
[2011-09-02 18:33:26 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Leadertech
[2012-02-10 04:02:29 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\NapiProjekt
[2011-02-15 22:50:33 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\net
[2012-07-21 13:21:14 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Nokia
[2011-10-02 23:30:55 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Opera
[2012-03-11 22:41:55 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\PC Suite
[2011-04-16 19:11:25 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\RayV
[2011-03-19 22:48:01 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\RDRM
[2012-03-08 01:09:41 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\SoftGrid Client
[2011-04-19 10:09:18 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Softinterface, Inc
[2011-11-20 12:29:31 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Sports Interactive
[2010-12-23 22:51:18 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Thunderbird
[2011-02-14 00:09:39 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Toshiba
[2011-01-17 00:27:28 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\TP
[2011-05-19 20:32:58 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Verbindungsassistent
[2012-02-20 13:57:30 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\wargaming.net
[2010-12-22 17:30:52 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\WinBatch
[2012-05-31 22:46:39 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\WinISO Computing
[2012-07-23 16:34:55 | 000,000,350 | -H-- | M] () -- C:\Windows\Tasks\avast! Emergency Update.job
[2012-07-25 22:51:38 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 105 bytes -> C:\ProgramData\TEMP:A9662AE0

< End of report >