OTL logfile created on: 2012-08-13 19:28:25 - Run 1
OTL by OldTimer - Version 3.2.57.0     Folder = D:\
 Starter Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1014,12 Mb Total Physical Memory | 550,99 Mb Available Physical Memory | 54,33% Memory free
1,99 Gb Paging File | 1,58 Gb Available in Paging File | 79,43% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 100,00 Gb Total Space | 62,48 Gb Free Space | 62,48% Space Free | Partition Type: NTFS
Drive D: | 183,07 Gb Total Space | 43,05 Gb Free Space | 23,51% Space Free | Partition Type: NTFS
 
Computer Name: ADAM-KOMPUTER | User Name: Adam | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-08-13 18:59:21 | 000,596,992 | R--- | M] (OldTimer Tools) -- D:\OTL.exe
PRC - [2011-02-25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2010-09-02 12:08:00 | 000,118,784 | ---- | M] () -- C:\Program Files\Asus\ASUS WebStorage\3.0.108.222\AsusWSShellExt.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [On_Demand | Stopped] -- C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe -- (Amsp)
SRV - [2012-08-03 12:46:08 | 000,023,040 | ---- | M] () [Auto | Stopped] -- C:\Program Files\BasicScan\basicscan.exe -- (BasicScan Service)
SRV - [2012-07-19 22:10:02 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-07-10 19:56:54 | 004,419,392 | ---- | M] () [Auto | Stopped] -- c:\program files\common files\akamai/netsession_win_4f7fccd.dll -- (Akamai)
SRV - [2012-06-23 18:11:56 | 000,529,232 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012-06-14 16:20:22 | 000,109,064 | ---- | M] (Wajam) [Auto | Stopped] -- C:\Program Files\Wajam\Updater\WajamUpdater.exe -- (WajamUpdater)
SRV - [2012-06-05 14:17:44 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2011-10-01 08:30:42 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2011-10-01 08:30:36 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2011-08-01 17:24:00 | 003,889,424 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\System32\GameMon.des -- (npggsvc)
SRV - [2011-03-04 00:33:14 | 000,224,680 | ---- | M] () [Auto | Stopped] -- C:\Windows\System32\AsusService.exe -- (AsusService)
SRV - [2011-03-02 05:23:36 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011-02-25 18:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2011-01-13 00:22:26 | 000,091,464 | ---- | M] () [Auto | Stopped] -- C:\ExpressGateUtil\VAWinService.exe -- (VideAceWindowsService)
SRV - [2010-09-17 09:32:44 | 000,161,104 | ---- | M] (Trend Micro Inc.) [Auto | Stopped] -- C:\Program Files\Trend Micro\Titanium\TiMiniService.exe -- (TiMiniService)
SRV - [2009-07-14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\windows\system32\ZDPNDIS5.SYS -- (ZDPNDIS5)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\windows\system32\ZDCndis5.SYS -- (ZDCndis5)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\windows\system32\XDva398.sys -- (XDva398)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\windows\system32\PCANDIS5.SYS -- (PCANDIS5)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Adam\AppData\Local\Temp\kebkrpox.sys -- (Micorsoft Windows Service)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\clwvd.sys -- (clwvd)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\windows\system32\drivers\btwrchid.sys -- (btwrchid)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\windows\system32\drivers\btwavdt.sys -- (btwavdt)
DRV - [2011-12-25 10:54:17 | 000,436,792 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2011-10-01 08:30:42 | 000,019,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Sftvollh.sys -- (Sftvol)
DRV - [2011-10-01 08:30:40 | 000,021,864 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\Sftredirlh.sys -- (Sftredir)
DRV - [2011-10-01 08:30:38 | 000,194,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Sftplaylh.sys -- (Sftplay)
DRV - [2011-10-01 08:30:36 | 000,579,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Sftfslh.sys -- (Sftfs)
DRV - [2010-11-20 11:24:42 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010-11-20 11:24:42 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2010-11-20 10:59:46 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010-09-27 08:23:58 | 000,068,208 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\L1C62x86.sys -- (L1C)
DRV - [2010-09-17 09:32:48 | 000,189,520 | ---- | M] (Trend Micro Inc.) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\tmcomm.sys -- (tmcomm)
DRV - [2010-09-17 09:32:48 | 000,092,112 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\tmtdi.sys -- (tmtdi)
DRV - [2010-09-17 09:32:48 | 000,080,464 | ---- | M] (Trend Micro Inc.) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\tmactmon.sys -- (tmactmon)
DRV - [2010-09-17 09:32:48 | 000,064,080 | ---- | M] (Trend Micro Inc.) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\tmevtmgr.sys -- (tmevtmgr)
DRV - [2010-08-03 06:20:56 | 000,011,832 | ---- | M] () [Kernel | System | Stopped] -- C:\Windows\System32\drivers\AsUpIO.sys -- (AsUpIO)
DRV - [2010-06-28 06:24:00 | 000,011,456 | ---- | M] () [Kernel | System | Stopped] -- C:\Windows\System32\drivers\AsIO.sys -- (AsIO)
DRV - [2010-05-27 00:52:32 | 000,006,144 | ---- | M] (ELAN Microelectronic Corp.) [Kernel | On_Demand | Stopped] -- C:\Program Files\Asus\LiveUpdate\DETECTSYS.sys -- (DETECT PS2: )
DRV - [2009-10-05 17:31:50 | 001,221,632 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2009-07-20 10:29:40 | 000,013,880 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr)
DRV - [2009-07-14 00:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp)
DRV - [2008-07-29 03:45:00 | 000,904,192 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\athrusb.sys -- (athrusb)
DRV - [2007-01-16 13:52:20 | 000,017,664 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ZDPSp50.sys -- (ZDPSp50)
DRV - [2007-01-10 10:14:34 | 000,450,560 | ---- | M] (ZyDAS Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WlanBZXP.sys -- (SG762_XP)
DRV - [2005-01-01 10:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\npptNT2.sys -- (NPPTNT2)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.funmoods.com/?f=1&a=adknlg&chnl=adknlg&cd=2XzuyEtN2Y1L1QzuyByEtB0FyCzzyBtDtDtCtDtCyB0FtDyDtN0D0Tzu0CtBtCzztN1L2XzutBtFtCtFtCtFtAtCtB&cr=1906806758
IE - HKLM\..\SearchScopes,Backup.Old.DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP07&src=IE-SearchBox
IE - HKLM\..\SearchScopes\{10F27E35-F6F7-510C-15CE-41B544EA86DF}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1098640
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Backup.Old.Start Page = http://search.babylon.com/?affID=110819&babsrc=HP_ss&mntrId=0c6f7f05000000000000722f68700101
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://eeepc.asus.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://eeepc.asus.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.funmoods.com/?f=1&a=adknlg&chnl=adknlg&cd=2XzuyEtN2Y1L1QzuyByEtB0FyCzzyBtDtDtCtDtCyB0FtDyDtN0D0Tzu0CtBtCzztN1L2XzutBtFtCtFtCtFtAtCtB&cr=1906806758
IE - HKCU\..\SearchScopes,Backup.Old.DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP07&src=IE-SearchBox
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=adknlg&chnl=adknlg&cd=2XzuyEtN2Y1L1QzuyByEtB0FyCzzyBtDtDtCtDtCyB0FtDyDtN0D0Tzu0CtBtCzztN1L2XzutBtFtCtFtCtFtAtCtB&cr=1906806758
IE - HKCU\..\SearchScopes\{10F27E35-F6F7-510C-15CE-41B544EA86DF}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=110819&babsrc=SP_ss&mntrId=0c6f7f05000000000000722f68700101
IE - HKCU\..\SearchScopes\{33524C00-63FB-43DB-A6BF-0A4E14B24649}: "URL" = http://www.basicscan.com/?prt=BscscnPB&keywords={searchTerms}
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1098640
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1:9421;*.local;<local>
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\windows\system32\Adobe\Director\np32dsw_1165635.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Adam\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{22C7F6C6-8D67-4534-92B5-529A0EC09405}: C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension\ [2011-04-30 02:37:31 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{3C5F0F00-683D-4847-89C8-E7AF64FD1CFB}: C:\Program Files\RelevantKnowledge [2012-07-10 07:34:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-07-19 22:10:03 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-03-16 22:16:45 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-07-19 22:10:03 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-03-16 22:16:45 | 000,000,000 | ---D | M]
 
[2012-08-13 18:45:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Adam\AppData\Roaming\mozilla\Extensions
[2012-08-13 18:31:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\xmtm2hsj.default\extensions
[2012-08-05 19:53:36 | 000,000,000 | ---D | M] (PriceGong) -- C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\xmtm2hsj.default\extensions\{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}
[2012-04-27 07:05:21 | 000,000,000 | ---D | M] (DealPly) -- C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\xmtm2hsj.default\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}
[2012-07-15 17:00:38 | 000,000,000 | ---D | M] (free-downloads.net Community Toolbar) -- C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\xmtm2hsj.default\extensions\{ecdee021-0d17-467f-a1ff-c7a115230949}
[2012-08-04 19:50:04 | 000,000,000 | ---D | M] (DownloadnSave) -- C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\xmtm2hsj.default\extensions\501d6dfbd4378@501d6dfbd43b1.info
[2012-03-04 17:03:02 | 000,000,000 | ---D | M] (Battlefield Play4Free) -- C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\xmtm2hsj.default\extensions\battlefieldplay4free@ea.com
[2012-08-05 19:52:37 | 000,000,000 | ---D | M] (Funmoods.com) -- C:\Users\Adam\AppData\Roaming\mozilla\Firefox\Profiles\xmtm2hsj.default\extensions\ffxtlbr@funmoods.com
[2012-08-07 18:07:13 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012-08-07 18:07:15 | 000,000,000 | ---D | M] (BasicScan) -- C:\Program Files\Mozilla Firefox\extensions\{6AA54174-C9E8-4B07-95A0-0FBC19CBE64C}
[2012-03-20 21:47:37 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012-07-19 22:10:03 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012-03-16 22:16:14 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011-12-09 18:23:32 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
[2012-06-22 15:49:50 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-04-25 11:41:56 | 000,002,313 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2012-06-22 15:49:50 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012-06-22 15:49:50 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012-06-22 15:49:50 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012-06-22 15:49:50 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-06-22 15:49:50 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - homepage: http://start.funmoods.com/?f=1&a=adknlg&chnl=adknlg&cd=2XzuyEtN2Y1L1QzuyByEtB0FyCzzyBtDtDtCtDtCyB0FtDyDtN0D0Tzu0CtBtCzztN1L2XzutBtFtCtFtCtFtAtCtB&cr=1906806758
 
O1 HOSTS File: ([2009-06-10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (TinyBHO Class) - {00e71626-0bef-11dc-8314-0800200c9a66} - C:\Users\Adam\AppData\Roaming\DownloaderGold\ieplug.dll ()
O2 - BHO: (TinyBHO Class) - {00e71626-0bef-11dc-8314-0864264c9a64} - C:\Users\Adam\AppData\Roaming\DownloaderGold\ieplug.dll ()
O2 - BHO: (Shopping Assistant Plugin) - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files\PriceGong\2.6.4\PriceGongIE.dll (PriceGong)
O2 - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)
O2 - BHO: (DownloadnSave Class) - {1E25D9EE-9704-7F1B-8A47-34CF29EE310B} - C:\ProgramData\DownloadnSave\bhoclass.dll ()
O2 - BHO: (Funmoods Helper Object) - {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} - C:\Program Files\Funmoods\1.5.23.22\bh\escort.dll (Funmoods BHO)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (DealPly) - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Program Files\DealPly\DealPlyIE.dll (DealPly Technologies Ltd)
O2 - BHO: (Wajam) - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} - C:\Program Files\Wajam\IE\priam_bho.dll (Wajam)
O2 - BHO: (Plugin for Media Finder) - {AD4DF010-E2FD-43CE-864A-6BD1EDC59AC2} - C:\Users\Adam\AppData\Roaming\Media Finder\Extensions\IEPlugin32.dll (Media Finder)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)
O2 - BHO: (Help the General-Search Project) - {CA4520F3-AE13-4FB1-A513-58E23991C86D} - C:\Users\Adam\AppData\Roaming\MEDIAF~1\EXTENS~1\GENCRA~1.DLL ()
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Windows 7 Starter Helper) - {D381FF29-7CFB-4D4E-B92A-C4EDDC696614} - C:\Program Files\Oceanis\SystemSetting\StarterHelper.dll (Oceanis)
O2 - BHO: (SweetPacks Browser Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Funmoods Toolbar) - {A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} - C:\Program Files\Funmoods\1.5.23.22\escorTlbr.dll (Funmoods)
O3 - HKLM\..\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [ASUSPRP] C:\Program Files\Asus\APRP\aprp.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [ASUSWebStorage] C:\Program Files\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe (ecareme)
O4 - HKLM..\Run: [CapsHook] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [Eee Docking] C:\Program Files\ASUS\Eee Docking\Eee Docking.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
O4 - HKLM..\Run: [HotkeyMon] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [HotkeyService] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [LiveUpdate] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [SuperHybridEngine] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [Sweetpacks Communicator] C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [Trend Micro Client Framework] C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe (Trend Micro Inc.)
O4 - HKLM..\Run: [Trend Micro Titanium] C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe (Trend Micro Inc.)
O4 - HKLM..\Run: [VAWinAgent] C:\ExpressGateUtil\VAWinAgent.exe ()
O4 - HKLM..\Run: [VizorHtmlDialog.exe] C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe (Trend Micro Inc.)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Users\Adam\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc)
O4 - HKCU..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h File not found
O4 - HKCU..\Run: [DpaDrsvl] C:\Users\Adam\AppData\Local\ujlnhpmu\dpadrsvl.exe File not found
O4 - HKCU..\Run: [GG] C:\Users\Adam\AppData\Local\GG\Application\gghub.exe (GG Network S.A.)
O4 - HKCU..\Run: [Media Finder] C:\Program Files\Media Finder\Media Finder.exe (Media Finder)
O4 - HKCU..\Run: [Optimizer Pro] C:\Program Files\Optimizer Pro\OptProLauncher.exe (PC Utilities Pro)
O4 - HKCU..\Run: [slpnpjmsunllayr] C:\ProgramData\slpnpjms.exe (Origin PC)
O4 - HKCU..\Run: [snappydeeSA] C:\Users\Adam\AppData\Local\snappydeeSA\bin\1.0.6.0\snappydeeSA.exe ()
O4 - HKCU..\Run: [SpeedUpMyPC] C:\Program Files\Uniblue\SpeedUpMyPC\launcher.exe (Uniblue Systems Ltd)
O4 - HKCU..\Run: [Steam] D:\steam\Steam.exe (Valve Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\windows\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Download with &Media Finder - C:\Program Files\Media Finder\hook.html ()
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4CFC8520-86A4-482C-8609-F408E7120270}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9A021308-C4C9-4878-B4B1-46AE14AB81FC}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E0699C15-5422-4FBD-8186-6D89D39309F3}: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)
O18 - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Users\Adam\AppData\Local\ujlnhpmu\dpadrsvl.exe) - C:\Users\Adam\AppData\Local\ujlnhpmu\dpadrsvl.exe File not found
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKCU Winlogon: Shell - (C:\Program Files\Oceanis\SystemSetting\WallPaperAgent.exe) - C:\Program Files\Oceanis\SystemSetting\WallPaperAgent.exe (Oceanis)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2030-01-02 17:46:18 | 000,000,000 | -HSD | C] -- C:\Boot
[2012-08-13 18:47:06 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\{26304147-BA84-44C4-95B5-1B6808CD70CF}
[2012-08-13 18:46:53 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\{ECFF42F3-6125-4090-B316-B4075E22F4E6}
[2012-08-13 18:46:01 | 000,000,000 | ---D | C] -- C:\Users\Adam\Desktop\Download
[2012-08-13 18:45:07 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Roaming\Media Finder
[2012-08-13 18:45:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Finder
[2012-08-13 18:45:05 | 000,000,000 | ---D | C] -- C:\Program Files\Media Finder
[2012-08-13 18:44:50 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Roaming\Uniblue
[2012-08-13 18:44:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
[2012-08-13 18:44:46 | 000,000,000 | ---D | C] -- C:\Program Files\Uniblue
[2012-08-13 18:07:38 | 000,089,088 | ---- | C] (Origin PC) -- C:\ProgramData\slpnpjms.exe
[2012-08-13 18:07:36 | 000,000,000 | ---D | C] -- C:\ProgramData\xgthdccauqqutio
[2012-08-13 18:07:12 | 000,089,088 | ---- | C] (Origin PC) -- C:\Users\Adam\0.9213110698117829.exe
[2012-08-13 18:06:36 | 000,000,000 | ---D | C] -- C:\windows\Sun
[2012-08-12 14:33:32 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\{6B0FECB6-00EA-443A-B60D-7D8FFF783459}
[2012-08-12 14:33:18 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\{81E2294F-97CD-42D6-90BA-B6255C4D3417}
[2012-08-11 15:20:54 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\ElevatedDiagnostics
[2012-08-09 19:41:06 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Roaming\ijjigame
[2012-08-08 14:22:41 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
[2012-08-08 14:22:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\San Andreas Multiplayer
[2012-08-08 13:52:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MTA San Andreas 1.3
[2012-08-08 13:52:07 | 000,000,000 | ---D | C] -- C:\ProgramData\MTA San Andreas All
[2012-08-08 11:00:22 | 000,000,000 | ---D | C] -- C:\Program Files\Rockstar Games
[2012-08-08 10:56:35 | 000,000,000 | ---D | C] -- C:\Users\Adam\Desktop\mnnn
[2012-08-06 14:07:11 | 000,000,000 | ---D | C] -- C:\ProgramData\BasicScan
[2012-08-06 14:07:11 | 000,000,000 | ---D | C] -- C:\Program Files\BasicScan
[2012-08-06 14:06:13 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\SnappyDeeSA
[2012-08-05 19:55:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2012-08-05 19:55:12 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2012-08-05 19:53:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong
[2012-08-05 19:53:35 | 000,000,000 | ---D | C] -- C:\Program Files\PriceGong
[2012-08-05 19:53:18 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
[2012-08-05 19:53:03 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\Wajam
[2012-08-05 19:52:32 | 000,000,000 | ---D | C] -- C:\Program Files\Wajam
[2012-08-05 19:52:10 | 000,000,000 | ---D | C] -- C:\Program Files\Funmoods
[2012-08-05 19:19:34 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rigs of Rods 0.38.67
[2012-08-05 19:18:25 | 000,000,000 | ---D | C] -- C:\Users\Adam\Documents\Rigs of Rods 0.38
[2012-08-05 19:17:13 | 000,000,000 | ---D | C] -- C:\Program Files\Rigs of Rods 0.38
[2012-08-05 16:23:06 | 000,000,000 | ---D | C] -- C:\ProgramData\TrackMania
[2012-08-05 16:22:41 | 000,000,000 | ---D | C] -- C:\Users\Adam\Documents\TrackMania
[2012-08-05 16:13:18 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
[2012-08-04 19:49:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Premium
[2012-08-04 19:49:04 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Roaming\SendSpace
[2012-08-04 19:48:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro
[2012-08-04 19:48:50 | 000,000,000 | ---D | C] -- C:\Program Files\Optimizer Pro
[2012-08-04 19:48:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DownloadnSave
[2012-08-04 19:48:31 | 000,000,000 | ---D | C] -- C:\ProgramData\DownloadnSave
[2012-08-04 19:47:19 | 000,000,000 | ---D | C] -- C:\ProgramData\InstallMate
[2012-08-04 12:24:18 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\{15FF5809-C480-4BF8-A115-DA6DFFA175B2}
[2012-08-04 12:24:05 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\{799E145B-D1BA-4A96-B13B-D93A06E42B21}
[2012-08-03 13:24:43 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Roaming\Opera
[2012-08-03 13:24:43 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\Opera
[2012-08-02 09:48:44 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\{4454CD9E-35A0-4CCD-90EF-C48FC274D83A}
[2012-08-02 09:48:26 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\{62EE410B-1B75-4020-A992-979C6E9E07C6}
[2012-07-30 22:58:15 | 000,089,088 | ---- | C] (Origin PC) -- C:\Users\Adam\ms.exe
[2012-07-28 17:40:37 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\{984122A2-0EA9-4863-B177-46A970AFE4B9}
[2012-07-28 17:40:24 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\{4042D06E-4FBB-42EE-A832-4B86FF3D547F}
[2012-07-28 17:38:49 | 000,000,000 | ---D | C] -- C:\ProgramData\SweetIM
[2012-07-28 17:38:49 | 000,000,000 | ---D | C] -- C:\Program Files\SweetIM
[2012-07-27 08:41:29 | 000,000,000 | ---D | C] -- C:\Users\Adam\Documents\ACR
[2012-07-27 08:41:28 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\CrashRpt
[2012-07-27 08:35:07 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\Unity
[2012-07-27 08:24:40 | 000,000,000 | ---D | C] -- C:\Program Files\ACR
[2012-07-27 08:21:22 | 000,000,000 | ---D | C] -- C:\windows\System32\directx
[2012-07-26 09:33:21 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\{F2B1EC45-1339-471D-A43D-8F036F1C8DCD}
[2012-07-25 19:44:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HLTooLz
[2012-07-25 19:44:25 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HLTooLz
[2012-07-25 19:19:24 | 000,000,000 | ---D | C] -- C:\Program Files\Oceanis
[2012-07-24 18:17:00 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\{F71DD313-CF36-45B6-8DB9-61F63AE2473A}
[2012-07-24 18:16:44 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\{FE7AEC18-1F90-416D-9D49-102B9EF34134}
[2012-07-22 19:25:44 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\{ADA3F2D7-2ACF-47AA-BE5D-5FF8F87049FB}
[2012-07-22 19:25:20 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\{B62F3291-F427-47DE-9878-7B5037A877C8}
[2012-07-22 19:14:29 | 000,000,000 | ---D | C] -- C:\windows\System32\Adobe
[2012-07-22 15:54:05 | 000,000,000 | ---D | C] -- C:\Users\Adam\Documents\GTA Unlimited Drift  Files
[2012-07-22 15:13:18 | 000,000,000 | ---D | C] -- C:\Program Files\uTorrent
[2012-07-22 15:10:07 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Roaming\uTorrent
[2012-07-20 10:06:44 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Local\ApplicationHistory
[2012-07-20 00:46:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GTA San Andreas Patch v1.0
[2012-07-20 00:46:58 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GTA San Andreas Patch v1.0
[2012-07-20 00:25:57 | 000,000,000 | ---D | C] -- C:\windows\System32\URTTEMP
[2012-07-19 22:08:16 | 000,000,000 | ---D | C] -- C:\Users\Adam\Documents\Cross Fire
[2012-07-19 22:08:01 | 000,000,000 | ---D | C] -- C:\CFLog
[2012-07-17 12:52:21 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6 [PL] SznaJK3r
[2012-07-16 19:00:37 | 000,000,000 | ---D | C] -- C:\Users\Adam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wolfenstein - Enemy Territory
[2012-07-16 19:00:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wolfenstein - Enemy Territory
[2012-07-16 18:54:02 | 000,000,000 | ---D | C] -- C:\Program Files\Wolfenstein - Enemy Territory
[2 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-08-13 19:26:54 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2012-08-13 19:26:51 | 797,532,160 | -HS- | M] () -- C:\hiberfil.sys
[2012-08-13 19:24:54 | 000,001,028 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2012-08-13 18:45:07 | 000,001,017 | ---- | M] () -- C:\Users\Public\Desktop\Media Finder.lnk
[2012-08-13 18:44:57 | 000,000,206 | ---- | M] () -- C:\windows\tasks\SpeedUpMyPC.job
[2012-08-13 18:44:49 | 000,001,088 | ---- | M] () -- C:\Users\Public\Desktop\SpeedUpMyPC.lnk
[2012-08-13 18:07:51 | 000,089,088 | ---- | M] (Origin PC) -- C:\Users\Adam\ms.exe
[2012-08-13 18:07:38 | 000,000,051 | ---- | M] () -- C:\ProgramData\qoncmjepijpbcns
[2012-08-13 18:07:12 | 000,089,088 | ---- | M] (Origin PC) -- C:\ProgramData\slpnpjms.exe
[2012-08-13 18:07:12 | 000,089,088 | ---- | M] (Origin PC) -- C:\Users\Adam\0.9213110698117829.exe
[2012-08-13 17:49:04 | 000,001,032 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2012-08-13 10:09:49 | 000,001,311 | ---- | M] () -- C:\Users\Public\Desktop\San Andreas Mod Installer.lnk
[2012-08-12 19:04:00 | 000,196,811 | ---- | M] () -- C:\Users\Adam\Desktop\aaaa.jpg
[2012-08-12 18:56:14 | 000,179,410 | ---- | M] () -- C:\Users\Adam\Desktop\d.jpg
[2012-08-12 15:58:55 | 000,002,167 | ---- | M] () -- C:\Users\Public\Desktop\Need For Speed World.lnk
[2012-08-12 14:33:00 | 001,108,568 | ---- | M] () -- C:\Users\Adam\Desktop\111_1332.JPG
[2012-08-12 14:32:52 | 001,021,768 | ---- | M] () -- C:\Users\Adam\Desktop\111_1331.JPG
[2012-08-12 14:31:40 | 001,048,580 | ---- | M] () -- C:\Users\Adam\Desktop\111_1330.JPG
[2012-08-12 14:31:34 | 001,140,448 | ---- | M] () -- C:\Users\Adam\Desktop\111_1329.JPG
[2012-08-12 14:31:26 | 001,130,644 | ---- | M] () -- C:\Users\Adam\Desktop\111_1328.JPG
[2012-08-12 14:31:24 | 001,059,192 | ---- | M] () -- C:\Users\Adam\Desktop\111_1327.JPG
[2012-08-12 14:31:18 | 001,045,068 | ---- | M] () -- C:\Users\Adam\Desktop\111_1326.JPG
[2012-08-12 14:31:10 | 001,081,852 | ---- | M] () -- C:\Users\Adam\Desktop\111_1325.JPG
[2012-08-12 14:31:06 | 001,084,604 | ---- | M] () -- C:\Users\Adam\Desktop\111_1324.JPG
[2012-08-11 19:34:45 | 000,009,696 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012-08-11 19:34:45 | 000,009,696 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012-08-11 15:14:27 | 000,001,368 | ---- | M] () -- C:\preference.xml
[2012-08-11 12:50:35 | 000,047,846 | ---- | M] () -- C:\Users\Adam\Desktop\open.jpg
[2012-08-09 18:56:14 | 000,000,557 | ---- | M] () -- C:\windows\System32\MyDefrag.debuglog
[2012-08-08 14:25:53 | 000,001,060 | ---- | M] () -- C:\Users\Adam\Desktop\samp — skrót.lnk
[2012-08-08 14:06:05 | 000,001,384 | ---- | M] () -- C:\Users\Public\Desktop\MTA San Andreas 1.3.lnk
[2012-08-06 14:06:19 | 000,000,000 | ---- | M] () -- C:\ProgramData\f42241223b29aea2cab90f611f46052b_c
[2012-08-05 19:52:10 | 000,031,465 | ---- | M] () -- C:\Users\Adam\AppData\Local\funmoods.crx
[2012-08-05 19:52:09 | 000,384,844 | ---- | M] () -- C:\Users\Adam\AppData\Local\funmoods-speeddial.crx
[2012-07-30 22:59:54 | 185,746,695 | ---- | M] () -- C:\windows\MEMORY.DMP
[2012-07-30 22:58:15 | 000,093,320 | ---- | M] () -- C:\Users\Adam\0.8269413380941101.exe
[2012-07-25 10:18:35 | 000,719,378 | ---- | M] () -- C:\windows\System32\perfh015.dat
[2012-07-25 10:18:35 | 000,636,632 | ---- | M] () -- C:\windows\System32\perfh009.dat
[2012-07-25 10:18:35 | 000,144,442 | ---- | M] () -- C:\windows\System32\perfc015.dat
[2012-07-25 10:18:35 | 000,114,352 | ---- | M] () -- C:\windows\System32\perfc009.dat
[2012-07-20 10:06:44 | 000,000,092 | ---- | M] () -- C:\Users\Adam\AppData\Local\fusioncache.dat
[2 C:\Program Files\*.tmp files -> C:\Program Files\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2030-01-02 17:46:19 | 000,383,786 | RHS- | C] () -- C:\bootmgr
[2012-08-13 18:45:07 | 000,001,017 | ---- | C] () -- C:\Users\Public\Desktop\Media Finder.lnk
[2012-08-13 18:44:57 | 000,000,206 | ---- | C] () -- C:\windows\tasks\SpeedUpMyPC.job
[2012-08-13 18:44:49 | 000,001,088 | ---- | C] () -- C:\Users\Public\Desktop\SpeedUpMyPC.lnk
[2012-08-13 18:07:22 | 000,000,051 | ---- | C] () -- C:\ProgramData\qoncmjepijpbcns
[2012-08-13 10:09:49 | 000,001,311 | ---- | C] () -- C:\Users\Public\Desktop\San Andreas Mod Installer.lnk
[2012-08-12 19:03:58 | 000,196,811 | ---- | C] () -- C:\Users\Adam\Desktop\aaaa.jpg
[2012-08-12 18:56:01 | 000,179,410 | ---- | C] () -- C:\Users\Adam\Desktop\d.jpg
[2012-08-12 15:58:55 | 000,002,167 | ---- | C] () -- C:\Users\Public\Desktop\Need For Speed World.lnk
[2012-08-12 14:34:22 | 001,140,448 | ---- | C] () -- C:\Users\Adam\Desktop\111_1329.JPG
[2012-08-12 14:34:22 | 001,130,644 | ---- | C] () -- C:\Users\Adam\Desktop\111_1328.JPG
[2012-08-12 14:34:22 | 001,108,568 | ---- | C] () -- C:\Users\Adam\Desktop\111_1332.JPG
[2012-08-12 14:34:22 | 001,084,604 | ---- | C] () -- C:\Users\Adam\Desktop\111_1324.JPG
[2012-08-12 14:34:22 | 001,081,852 | ---- | C] () -- C:\Users\Adam\Desktop\111_1325.JPG
[2012-08-12 14:34:22 | 001,059,192 | ---- | C] () -- C:\Users\Adam\Desktop\111_1327.JPG
[2012-08-12 14:34:22 | 001,048,580 | ---- | C] () -- C:\Users\Adam\Desktop\111_1330.JPG
[2012-08-12 14:34:22 | 001,045,068 | ---- | C] () -- C:\Users\Adam\Desktop\111_1326.JPG
[2012-08-12 14:34:22 | 001,021,768 | ---- | C] () -- C:\Users\Adam\Desktop\111_1331.JPG
[2012-08-11 12:49:59 | 000,047,846 | ---- | C] () -- C:\Users\Adam\Desktop\open.jpg
[2012-08-08 14:25:53 | 000,001,060 | ---- | C] () -- C:\Users\Adam\Desktop\samp — skrót.lnk
[2012-08-08 13:52:50 | 000,001,384 | ---- | C] () -- C:\Users\Public\Desktop\MTA San Andreas 1.3.lnk
[2012-08-06 14:06:19 | 000,000,000 | ---- | C] () -- C:\ProgramData\f42241223b29aea2cab90f611f46052b_c
[2012-08-05 19:55:28 | 000,000,557 | ---- | C] () -- C:\windows\System32\MyDefrag.debuglog
[2012-08-05 19:52:24 | 000,384,844 | ---- | C] () -- C:\Users\Adam\AppData\Local\funmoods-speeddial.crx
[2012-08-05 19:52:23 | 000,031,465 | ---- | C] () -- C:\Users\Adam\AppData\Local\funmoods.crx
[2012-07-30 22:58:15 | 000,093,320 | ---- | C] () -- C:\Users\Adam\0.8269413380941101.exe
[2012-07-25 19:19:27 | 000,002,008 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oceanis Change Background W7.lnk
[2012-07-20 10:06:44 | 000,000,092 | ---- | C] () -- C:\Users\Adam\AppData\Local\fusioncache.dat
[2012-03-04 19:05:20 | 000,138,264 | ---- | C] () -- C:\windows\System32\drivers\PnkBstrK.sys
[2012-03-04 19:05:20 | 000,138,056 | ---- | C] () -- C:\Users\Adam\AppData\Roaming\PnkBstrK.sys
[2012-03-04 19:04:58 | 000,234,768 | ---- | C] () -- C:\windows\System32\PnkBstrB.exe
[2012-03-04 19:04:34 | 000,075,136 | ---- | C] () -- C:\windows\System32\PnkBstrA.exe
[2012-01-30 20:16:48 | 000,192,512 | ---- | C] () -- C:\windows\off-road-uninst.exe
[2012-01-27 20:57:38 | 000,114,688 | ---- | C] () -- C:\windows\System32\WLANUTL.dll
[2012-01-07 16:22:09 | 000,000,048 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2011-12-24 16:50:18 | 000,005,576 | ---- | C] () -- C:\windows\Language.ini
[2011-12-24 16:49:11 | 000,000,520 | ---- | C] () -- C:\windows\System32\drivers\RTEQEX0.dat
[2011-04-30 02:19:51 | 000,224,680 | ---- | C] () -- C:\windows\System32\AsusService.exe
[2011-04-30 02:19:51 | 000,025,616 | ---- | C] () -- C:\windows\AsAcpiSvrLang.ini
[2011-04-30 02:17:47 | 000,131,984 | ---- | C] () -- C:\ProgramData\FullRemove.exe
[2011-04-30 02:16:34 | 000,011,832 | ---- | C] () -- C:\windows\System32\drivers\AsUpIO.sys
[2011-04-30 02:16:32 | 000,011,456 | ---- | C] () -- C:\windows\System32\drivers\AsIO.sys
[2011-04-30 02:16:08 | 000,000,873 | ---- | C] () -- C:\windows\Reboot.ini
[2011-04-30 02:08:52 | 000,014,051 | ---- | C] () -- C:\windows\System32\RaCoInst.dat
[2011-04-30 02:05:41 | 000,004,692 | ---- | C] () -- C:\windows\System32\drivers\SamSfPa.dat
[2011-04-30 02:05:41 | 000,000,008 | ---- | C] () -- C:\windows\System32\drivers\rtkhdaud.dat
[2011-02-16 18:14:42 | 000,719,378 | ---- | C] () -- C:\windows\System32\perfh015.dat
[2011-02-16 18:14:42 | 000,337,158 | ---- | C] () -- C:\windows\System32\perfi015.dat
[2011-02-16 18:14:42 | 000,144,442 | ---- | C] () -- C:\windows\System32\perfc015.dat
[2011-02-16 18:14:42 | 000,038,710 | ---- | C] () -- C:\windows\System32\perfd015.dat
[2010-12-06 13:44:53 | 000,013,880 | ---- | C] ( ) -- C:\windows\System32\drivers\kbfiltr.sys
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-03-16 22:08:35 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\.minecraft
[2011-04-30 02:33:47 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\ASUS WebStorage
[2012-04-25 11:41:44 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Babylon
[2012-03-04 21:22:44 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\BitTorrent
[2012-08-13 18:59:24 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\DownloaderGold
[2011-04-30 02:18:09 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\E-Cam
[2012-01-12 20:17:53 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Gadu-Gadu
[2012-08-13 18:13:54 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\GG
[2012-05-18 19:26:12 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\GHISLER
[2012-08-09 19:41:20 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\ijjigame
[2012-08-13 18:46:01 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Media Finder
[2011-12-25 07:35:29 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\MusicNet
[2012-02-08 06:28:10 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Need for Speed World
[2012-01-05 22:20:38 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\OpenCandy
[2012-08-03 13:24:43 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Opera
[2012-08-04 19:49:04 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\SendSpace
[2012-08-07 18:07:44 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\SoftGrid Client
[2011-12-24 18:17:58 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\TP
[2012-08-13 18:44:50 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Uniblue
[2012-08-06 21:26:49 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\uTorrent
[2012-03-10 07:48:51 | 000,000,000 | ---D | M] -- C:\Users\Adam\AppData\Roaming\Windows Live Writer
[2012-05-18 05:51:03 | 000,032,604 | ---- | M] () -- C:\windows\Tasks\SCHEDLGU.TXT
[2012-08-13 18:44:57 | 000,000,206 | ---- | M] () -- C:\windows\Tasks\SpeedUpMyPC.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Files - Unicode (All) ==========[/color]
[2011-12-24 16:50:39 | 000,000,059 | ---- | M] ()(C:\windows\System32\??) -- C:\windows\System32\ɞ
[2011-12-24 16:50:39 | 000,000,059 | ---- | C] ()(C:\windows\System32\??) -- C:\windows\System32\ɞ
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 40 bytes -> C:\Users\Adam\Dane aplikacji:NT
@Alternate Data Stream - 153 bytes -> C:\ProgramData\Temp:417F5F46

< End of report >