OTL logfile created on: 2012-08-23 18:23:30 - Run 1
OTL by OldTimer - Version 3.2.58.1     Folder = C:\Users\Tomek\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
4,00 Gb Total Physical Memory | 2,13 Gb Available Physical Memory | 53,23% Memory free
6,00 Gb Paging File | 3,70 Gb Available in Paging File | 61,69% Paging File free
Paging file location(s): e:\pagefile.sys 2048 2048 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 98,07 Gb Total Space | 50,10 Gb Free Space | 51,09% Space Free | Partition Type: NTFS
Drive D: | 195,03 Gb Total Space | 20,47 Gb Free Space | 10,50% Space Free | Partition Type: NTFS
Drive E: | 4,98 Gb Total Space | 2,98 Gb Free Space | 59,87% Space Free | Partition Type: FAT32
 
Computer Name: TOMEK-KOMPUTER | User Name: Tomek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-08-23 18:20:43 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Tomek\Desktop\OTL.exe
PRC - [2012-08-20 14:12:40 | 000,494,720 | ---- | M] (TrustPort, a.s.) -- C:\Program Files (x86)\Common Files\TrustPort\bin\tpmgma.exe
PRC - [2012-08-20 14:11:12 | 000,278,840 | ---- | M] (TrustPort, a.s.) -- C:\Program Files (x86)\TrustPort\DataShredder\bin\wipesrv.exe
PRC - [2012-08-20 14:11:10 | 001,061,176 | ---- | M] (TrustPort, a.s.) -- C:\Program Files (x86)\Common Files\TrustPort\bin\tptray.exe
PRC - [2012-08-20 14:11:06 | 000,225,592 | ---- | M] (TrustPort, a.s.) -- C:\Program Files (x86)\TrustPort\DiskProtection\bin\tdwatch.exe
PRC - [2012-08-20 14:11:00 | 000,508,216 | ---- | M] (TrustPort, a.s.) -- C:\Program Files (x86)\TrustPort\Antivirus\bin\gozer.exe
PRC - [2012-08-20 14:10:58 | 000,315,704 | ---- | M] (TrustPort, a.s.) -- C:\Program Files (x86)\TrustPort\Antivirus\bin\avss.exe
PRC - [2012-08-20 14:10:54 | 000,921,912 | ---- | M] (TrustPort, a.s.) -- C:\Program Files (x86)\TrustPort\Antivirus\bin\avcom.exe
PRC - [2012-07-27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012-06-20 09:30:04 | 002,772,112 | ---- | M] (AdFender, Inc.) -- C:\Program Files (x86)\AdFender\AdFender.exe
PRC - [2009-05-18 13:29:16 | 003,866,624 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files (x86)\Analog Devices\SoundMAX\SoundMAX.exe
PRC - [2007-11-27 12:05:34 | 000,323,584 | ---- | M] (Compro Technology, Inc.) -- C:\Program Files (x86)\Common Files\VideoMate\ComproSchedulerDTV.exe
PRC - [2007-11-26 20:25:22 | 010,723,328 | ---- | M] (Compro Technology, Inc.) -- C:\Program Files (x86)\Common Files\VideoMate\ComproRemote.exe
PRC - [2007-09-02 13:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012-08-20 14:11:44 | 000,311,608 | ---- | M] () -- C:\Program Files (x86)\TrustPort\Antivirus\bin\avwinmailin.dll
MOD - [2012-08-20 14:11:34 | 000,074,040 | ---- | M] () -- C:\Program Files (x86)\TrustPort\Antivirus\bin\avoexpresshook.dll
MOD - [2012-08-20 14:11:22 | 000,168,248 | ---- | M] () -- C:\Program Files (x86)\TrustPort\Antivirus\bin\avbatplg.dll
MOD - [2011-04-11 13:17:02 | 000,098,304 | ---- | M] () -- C:\Program Files (x86)\TrustPort\Antivirus\bin\AvEasyHook32.dll
MOD - [2007-09-02 13:58:52 | 000,495,616 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.exe
MOD - [2007-09-02 13:57:36 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\RocketDock\RocketDock.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:[b]64bit:[/b] - [2009-06-05 17:42:04 | 000,111,616 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\SysNative\AEADISRV.EXE -- (AEADIFilters)
SRV - [2012-08-20 14:12:40 | 000,494,720 | ---- | M] (TrustPort, a.s.) [Auto | Running] -- C:\Program Files (x86)\Common Files\TrustPort\bin\tpmgma.exe -- (tpmgma_service)
SRV - [2012-08-20 14:11:12 | 000,278,840 | ---- | M] (TrustPort, a.s.) [Auto | Running] -- C:\Program Files (x86)\TrustPort\DataShredder\bin\wipesrv.exe -- (wipesrv)
SRV - [2012-08-20 14:11:00 | 000,508,216 | ---- | M] (TrustPort, a.s.) [On_Demand | Running] -- C:\Program Files (x86)\TrustPort\Antivirus\bin\gozer.exe -- (gozer)
SRV - [2012-08-20 14:10:58 | 000,315,704 | ---- | M] (TrustPort, a.s.) [On_Demand | Running] -- C:\Program Files (x86)\TrustPort\Antivirus\bin\avss.exe -- (avss_service)
SRV - [2012-08-20 14:10:54 | 000,885,048 | ---- | M] (TrustPort, a.s.) [On_Demand | Stopped] -- C:\Program Files (x86)\TrustPort\Antivirus\bin\avas.exe -- (avas_service)
SRV - [2012-08-16 14:27:16 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-07-27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011-03-16 10:42:06 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2012-08-20 17:23:52 | 000,147,288 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV:[b]64bit:[/b] - [2012-08-20 14:13:38 | 000,053,488 | ---- | M] (TrustPort, a.s.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tpsec.sys -- (tpsec)
DRV:[b]64bit:[/b] - [2012-08-20 14:12:28 | 000,051,512 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tdifw.sys -- (tdifw)
DRV:[b]64bit:[/b] - [2012-08-20 14:12:28 | 000,042,808 | ---- | M] (TrustPort, a.s.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\tpdevflt.sys -- (tpdevflt)
DRV:[b]64bit:[/b] - [2012-08-20 14:12:26 | 000,050,488 | ---- | M] (TrustPort, a.s.) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\avasdmft.sys -- (avasdmft)
DRV:[b]64bit:[/b] - [2012-07-30 13:32:08 | 000,203,104 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm)
DRV:[b]64bit:[/b] - [2012-07-30 13:32:08 | 000,102,240 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus)
DRV:[b]64bit:[/b] - [2012-04-18 19:08:03 | 000,188,736 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2012-01-25 12:23:10 | 000,398,112 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)
DRV:[b]64bit:[/b] - [2011-03-14 03:05:16 | 001,410,048 | ---- | M] (Compro Technology, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VMHybr64.sys -- (VMHybrid64)
DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2010-12-21 07:55:02 | 000,172,032 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssm_mdm.sys -- (ssm_mdm)
DRV:[b]64bit:[/b] - [2010-12-21 07:55:02 | 000,136,192 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssm_bus.sys -- (ssm_bus)
DRV:[b]64bit:[/b] - [2010-12-21 07:55:02 | 000,018,944 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssm_mdfl.sys -- (ssm_mdfl)
DRV:[b]64bit:[/b] - [2010-11-21 05:24:43 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:[b]64bit:[/b] - [2010-11-21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2010-08-12 12:07:50 | 000,350,952 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvmf6264.sys -- (NVNET)
DRV:[b]64bit:[/b] - [2009-11-24 18:33:50 | 000,028,264 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvamacpi.sys -- (nvamacpi)
DRV:[b]64bit:[/b] - [2009-07-16 11:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-06-10 22:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009-06-05 17:42:04 | 000,475,136 | ---- | M] (Analog Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ADIHdAud.sys -- (ADIHdAudAddService)
DRV:[b]64bit:[/b] - [2007-10-01 09:56:12 | 000,009,088 | ---- | M] (Compro Tech., Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ComproHID64.sys -- (ComproHID)
DRV - [2012-08-20 14:12:28 | 000,033,592 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files (x86)\TrustPort\PersonalFirewall\bin\TPPFHOOK.sys -- (TPPFHOOK)
DRV - [2012-08-20 14:12:28 | 000,020,792 | ---- | M] () [Kernel | System | Running] -- C:\Program Files (x86)\TrustPort\PersonalFirewall\bin\tdimapper.sys -- (tdimapper)
DRV - [2012-08-20 14:12:26 | 000,061,240 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files (x86)\TrustPort\DiskProtection\bin\EncDsk.sys -- (EncDisk)
DRV - [2012-08-20 14:12:26 | 000,020,280 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\TrustPort\bin\dsio.sys -- (dsio)
DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2007-10-01 09:56:12 | 000,009,088 | ---- | M] (Compro Tech., Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\ComproHID64.sys -- (ComproHID)
DRV - [2007-09-12 14:04:34 | 001,552,384 | ---- | M] (Compro Technology, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\VMHybr64.sys -- (VMHybrid64)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-2136796100-2545110371-3970058897-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-2136796100-2545110371-3970058897-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2136796100-2545110371-3970058897-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_271.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.6.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.6.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_271.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1166636.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.6.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.6.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.2: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmconverter@gmail.com: C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ [2012-08-23 13:47:40 | 000,000,000 | ---D | M]
 
 
O1 HOSTS File: ([2012-07-24 16:09:13 | 000,000,855 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 64.191.102.135 www.karachan.org
O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [SoundMAX] C:\Program Files (x86)\Analog Devices\SoundMAX\soundmax.exe (Analog Devices, Inc.)
O4 - HKLM..\Run: [AntivirusCommunicatorAgent] C:\Program Files (x86)\TrustPort\Antivirus\bin\avcom.exe (TrustPort, a.s.)
O4 - HKLM..\Run: [KeePass 2 PreLoad] C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe (Dominik Reichl)
O4 - HKLM..\Run: [TrustPortDiskProtectionWatchDog] C:\Program Files (x86)\TrustPort\DiskProtection\bin\TDWatch.exe (TrustPort, a.s.)
O4 - HKLM..\Run: [TrustPortTray] C:\Program Files (x86)\Common Files\TrustPort\Bin\tptray.exe (TrustPort, a.s.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2136796100-2545110371-3970058897-1001..\Run: [RocketDock] C:\Program Files (x86)\RocketDock\RocketDock.exe ()
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutorun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\S-1-5-21-2136796100-2545110371-3970058897-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL (Microsoft Corporation)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6D37FBD0-4E18-413F-8874-5841B9B8A860}: DhcpNameServer = 192.168.1.1
O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Program Files (x86)\Common Files\TrustPort\bin\wsctool.exe) - C:\Program Files (x86)\Common Files\TrustPort\bin\wsctool.exe ()
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (tpnative)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-08-23 18:20:43 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Tomek\Desktop\OTL.exe
[2012-08-23 16:08:55 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\KeePass
[2012-08-23 16:08:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\KeePass Password Safe 2
[2012-08-23 13:47:40 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
[2012-08-23 13:47:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake
[2012-08-23 13:44:35 | 000,000,000 | ---D | C] -- D:\Documents\Freemake
[2012-08-23 13:37:56 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfds.dll.bak
[2012-08-23 13:37:33 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Shark007
[2012-08-23 13:37:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Shark007
[2012-08-23 13:37:32 | 001,416,704 | ---- | C] (MPC-HC Team) -- C:\Windows\SysNative\VSFilter.dll
[2012-08-23 13:37:32 | 000,360,960 | ---- | C] (fccHandler) -- C:\Windows\SysNative\aacacm.acm
[2012-08-23 13:37:32 | 000,180,224 | ---- | C] (fccHandler) -- C:\Windows\SysNative\ac3acm.acm
[2012-08-23 13:37:32 | 000,124,909 | ---- | C] (Open Source Software community project) -- C:\Windows\SysNative\pthreadGC2.dll
[2012-08-23 13:37:32 | 000,000,000 | ---D | C] -- C:\Program Files\Shark007
[2012-08-23 13:37:04 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfds.dll.bak
[2012-08-23 13:36:37 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Win7codecs
[2012-08-23 13:36:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shark007 Codecs
[2012-08-23 13:36:00 | 000,289,768 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe
[2012-08-23 13:35:55 | 000,189,416 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe
[2012-08-23 13:35:55 | 000,188,904 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\java.exe
[2012-08-23 13:35:55 | 000,108,008 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\WindowsAccessBridge-64.dll
[2012-08-23 13:35:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2012-08-23 13:35:38 | 000,246,760 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe
[2012-08-23 13:35:33 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
[2012-08-23 13:35:33 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
[2012-08-23 13:35:33 | 000,095,208 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
[2012-08-23 13:35:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2012-08-23 13:32:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
[2012-08-23 12:17:35 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\ElevatedDiagnostics
[2012-08-23 12:08:53 | 000,050,488 | ---- | C] (TrustPort, a.s.) -- C:\Windows\SysNative\drivers\avasdmft.sys
[2012-08-23 12:08:43 | 000,225,456 | ---- | C] (TrustPort, a.s.) -- C:\Windows\SysNative\avinspect64.dll
[2012-08-23 12:08:43 | 000,202,200 | ---- | C] (TrustPort, a.s.) -- C:\Windows\SysWow64\avinspect.dll
[2012-08-23 12:08:42 | 000,053,488 | ---- | C] (TrustPort, a.s.) -- C:\Windows\SysNative\drivers\tpsec.sys
[2012-08-23 12:08:42 | 000,042,808 | ---- | C] (TrustPort, a.s.) -- C:\Windows\SysNative\drivers\tpdevflt.sys
[2012-08-23 12:08:42 | 000,030,248 | ---- | C] (TrustPort, a.s.) -- C:\Windows\SysNative\tpnative.exe
[2012-08-23 12:06:40 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\Auslogics
[2012-08-23 12:04:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auslogics
[2012-08-23 12:04:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Auslogics
[2012-08-23 11:51:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraISO
[2012-08-23 11:51:56 | 000,000,000 | ---D | C] -- D:\Documents\My ISO Files
[2012-08-23 11:51:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\EZB Systems
[2012-08-23 10:59:01 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Auslogics Software
[2012-08-23 10:58:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Bitdefender
[2012-08-23 00:28:16 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\FreePascal
[2012-08-20 17:23:52 | 000,147,288 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys
[2012-08-20 17:23:50 | 000,320,856 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\VBoxNetFltNobj.dll
[2012-08-20 13:01:04 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\hdd_guardian
[2012-08-20 13:01:04 | 000,000,000 | ---D | C] -- C:\ProgramData\hdd_guardian
[2012-08-20 13:01:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HDD Guardian 0.4.1.0
[2012-08-20 13:01:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HDD Guardian 0.4.1.0
[2012-08-19 15:24:29 | 000,000,000 | ---D | C] -- C:\Users\Tomek\Desktop\vFolder
[2012-08-18 11:42:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Marvell
[2012-08-18 11:30:05 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\DriverGenius
[2012-08-18 11:25:47 | 000,000,000 | ---D | C] -- C:\ProgramData\DriverGenius
[2012-08-18 11:25:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Genius Professional Edition
[2012-08-18 11:25:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Driver-Soft
[2012-08-15 17:42:32 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
[2012-08-15 17:42:01 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll
[2012-08-15 17:42:01 | 000,492,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll
[2012-08-15 17:42:01 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\splwow64.exe
[2012-08-15 17:41:06 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2012-08-15 17:41:06 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2012-08-15 17:41:06 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2012-08-15 17:41:06 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2012-08-15 17:41:06 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2012-08-15 17:41:06 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2012-08-15 17:41:06 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2012-08-15 17:41:06 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2012-08-15 17:41:06 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2012-08-15 17:41:06 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2012-08-15 17:41:06 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2012-08-15 17:41:05 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2012-08-15 17:41:05 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2012-08-15 17:40:41 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netapi32.dll
[2012-08-15 17:40:41 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browcli.dll
[2012-08-15 17:40:41 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\browcli.dll
[2012-08-15 17:40:09 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll
[2012-08-14 22:54:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AdFender
[2012-08-14 22:54:06 | 000,000,000 | ---D | C] -- C:\ProgramData\AdFender
[2012-08-14 22:54:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AdFender
[2012-08-13 18:30:48 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2012-08-13 14:04:52 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\GHISLER
[2012-08-13 13:54:09 | 000,000,000 | ---D | C] -- C:\Program Files\totalcmd
[2012-08-13 13:54:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander
[2012-08-13 13:54:09 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Roaming\GHISLER
[2012-08-12 18:34:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP3
[2012-08-12 05:59:30 | 001,370,624 | ---- | C] (xy-VSFilter Team) -- C:\Windows\SysWow64\VSFilter.dll
[2012-08-09 23:08:48 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt
[2012-08-08 21:02:21 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\Facebook
[2012-07-30 13:32:08 | 000,203,104 | ---- | C] (DEVGURU Co., LTD.(www.devguru.co.kr)) -- C:\Windows\SysNative\drivers\ssudmdm.sys
[2012-07-30 13:32:08 | 000,102,240 | ---- | C] (DEVGURU Co., LTD.(www.devguru.co.kr)) -- C:\Windows\SysNative\drivers\ssudbus.sys
[2012-07-29 00:44:28 | 000,000,000 | ---D | C] -- C:\Users\Tomek\VirtualBox VMs
[2012-07-25 16:33:31 | 000,000,000 | ---D | C] -- C:\Users\Tomek\AppData\Local\AdFender
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-08-23 18:21:36 | 000,136,093 | ---- | M] () -- C:\Users\Tomek\Desktop\Bez tytsgsdfg.png
[2012-08-23 18:20:43 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Tomek\Desktop\OTL.exe
[2012-08-23 18:09:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012-08-23 17:57:40 | 000,021,472 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012-08-23 17:57:40 | 000,021,472 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012-08-23 17:50:32 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-08-23 17:49:01 | 000,008,988 | ---- | M] () -- C:\Users\Tomek\Desktop\Bez tytułu.png
[2012-08-23 13:35:51 | 001,034,216 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\npDeployJava1.dll
[2012-08-23 13:35:51 | 000,916,456 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\deployJava1.dll
[2012-08-23 13:35:51 | 000,289,768 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe
[2012-08-23 13:35:51 | 000,189,416 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe
[2012-08-23 13:35:51 | 000,188,904 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\java.exe
[2012-08-23 13:35:51 | 000,108,008 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\WindowsAccessBridge-64.dll
[2012-08-23 13:35:30 | 000,821,736 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\npDeployJava1.dll
[2012-08-23 13:35:30 | 000,746,984 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\deployJava1.dll
[2012-08-23 13:35:30 | 000,246,760 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe
[2012-08-23 13:35:30 | 000,174,056 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
[2012-08-23 13:35:30 | 000,174,056 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
[2012-08-23 13:35:30 | 000,095,208 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
[2012-08-22 12:35:19 | 005,629,193 | ---- | M] () -- D:\Documents\OpCode-book.pdf
[2012-08-22 12:01:44 | 001,276,752 | ---- | M] () -- D:\Documents\HP_Compaq_6910p_Service_manual.pdf
[2012-08-20 17:23:52 | 000,147,288 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys
[2012-08-20 17:23:50 | 000,320,856 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\VBoxNetFltNobj.dll
[2012-08-20 14:13:54 | 000,030,248 | ---- | M] (TrustPort, a.s.) -- C:\Windows\SysNative\tpnative.exe
[2012-08-20 14:13:38 | 000,053,488 | ---- | M] (TrustPort, a.s.) -- C:\Windows\SysNative\drivers\tpsec.sys
[2012-08-20 14:13:20 | 000,225,456 | ---- | M] (TrustPort, a.s.) -- C:\Windows\SysNative\avinspect64.dll
[2012-08-20 14:13:12 | 000,202,200 | ---- | M] (TrustPort, a.s.) -- C:\Windows\SysWow64\avinspect.dll
[2012-08-20 14:12:28 | 000,051,512 | ---- | M] () -- C:\Windows\SysNative\drivers\tdifw.sys
[2012-08-20 14:12:28 | 000,042,808 | ---- | M] (TrustPort, a.s.) -- C:\Windows\SysNative\drivers\tpdevflt.sys
[2012-08-20 14:12:26 | 000,050,488 | ---- | M] (TrustPort, a.s.) -- C:\Windows\SysNative\drivers\avasdmft.sys
[2012-08-19 23:32:51 | 001,558,380 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012-08-19 23:32:51 | 000,701,022 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2012-08-19 23:32:51 | 000,618,714 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012-08-19 23:32:51 | 000,136,040 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2012-08-19 23:32:51 | 000,107,034 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012-08-17 14:00:00 | 001,416,704 | ---- | M] (MPC-HC Team) -- C:\Windows\SysNative\VSFilter.dll
[2012-08-16 14:27:16 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012-08-16 14:27:16 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012-08-15 17:45:18 | 000,418,560 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012-08-15 17:42:32 | 000,503,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
[2012-08-15 17:42:01 | 000,751,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll
[2012-08-15 17:42:01 | 000,492,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll
[2012-08-15 17:42:01 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\splwow64.exe
[2012-08-15 17:41:06 | 002,312,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2012-08-15 17:41:06 | 001,494,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2012-08-15 17:41:06 | 001,427,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2012-08-15 17:41:06 | 000,816,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2012-08-15 17:41:06 | 000,717,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2012-08-15 17:41:06 | 000,248,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2012-08-15 17:41:06 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2012-08-15 17:41:06 | 000,173,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2012-08-15 17:41:06 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2012-08-15 17:41:06 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2012-08-15 17:41:06 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2012-08-15 17:41:05 | 000,237,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2012-08-15 17:41:05 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2012-08-15 17:40:41 | 000,073,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\netapi32.dll
[2012-08-15 17:40:41 | 000,059,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\browcli.dll
[2012-08-15 17:40:41 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\browcli.dll
[2012-08-15 17:40:09 | 000,956,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll
[2012-08-14 22:54:07 | 000,001,057 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AdFender.lnk
[2012-08-13 10:53:50 | 136,233,660 | ---- | M] () -- D:\Documents\Rodzynki.7z
[2012-08-12 05:59:30 | 001,370,624 | ---- | M] (xy-VSFilter Team) -- C:\Windows\SysWow64\VSFilter.dll
[2012-07-30 13:32:08 | 000,203,104 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) -- C:\Windows\SysNative\drivers\ssudmdm.sys
[2012-07-30 13:32:08 | 000,102,240 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) -- C:\Windows\SysNative\drivers\ssudbus.sys
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-08-23 18:21:33 | 000,136,093 | ---- | C] () -- C:\Users\Tomek\Desktop\Bez tytsgsdfg.png
[2012-08-23 17:47:19 | 000,008,988 | ---- | C] () -- C:\Users\Tomek\Desktop\Bez tytułu.png
[2012-08-23 16:08:03 | 000,001,127 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass 2.lnk
[2012-08-23 13:37:32 | 004,329,472 | ---- | C] () -- C:\Windows\SysNative\x264vfw.dll
[2012-08-23 13:37:32 | 001,313,792 | ---- | C] () -- C:\Windows\SysNative\ac3filter.acm
[2012-08-23 13:37:32 | 000,205,824 | ---- | C] () -- C:\Windows\SysNative\unrar.dll
[2012-08-23 13:37:32 | 000,148,992 | ---- | C] ( ) -- C:\Windows\SysNative\lagarith.dll
[2012-08-23 13:37:32 | 000,137,216 | ---- | C] () -- C:\Windows\SysNative\mlc.dll
[2012-08-23 13:37:32 | 000,092,160 | ---- | C] () -- C:\Windows\SysNative\ff_vfw.dll
[2012-08-23 12:08:53 | 000,051,512 | ---- | C] () -- C:\Windows\SysNative\drivers\tdifw.sys
[2012-08-22 12:35:19 | 005,629,193 | ---- | C] () -- D:\Documents\OpCode-book.pdf
[2012-08-22 12:01:39 | 001,276,752 | ---- | C] () -- D:\Documents\HP_Compaq_6910p_Service_manual.pdf
[2012-08-14 22:54:07 | 000,001,057 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AdFender.lnk
[2012-08-13 17:12:49 | 000,015,168 | ---- | C] () -- C:\Windows\SysNative\drivers\nvflash.sys
[2012-08-13 10:52:55 | 136,233,660 | ---- | C] () -- D:\Documents\Rodzynki.7z
[2012-07-23 12:31:38 | 004,428,800 | ---- | C] () -- C:\Windows\SysWow64\x264vfw.dll
[2012-07-21 20:20:16 | 000,000,600 | ---- | C] () -- C:\Users\Tomek\AppData\Local\PUTTY.RND
[2012-07-19 23:28:09 | 001,574,790 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012-07-19 08:40:34 | 000,000,162 | ---- | C] () -- C:\Windows\ODBC.INI
[2012-07-19 02:34:57 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
[2012-07-02 23:28:06 | 000,112,640 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2012-06-26 16:02:40 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2012-06-26 16:02:38 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2012-06-26 16:02:38 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2012-06-26 16:02:38 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2012-06-26 16:02:38 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2012-06-09 22:21:56 | 000,178,688 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2012-05-21 21:28:58 | 000,155,648 | ---- | C] () -- C:\Windows\SysWow64\mlc.dll
[2012-05-15 02:21:50 | 000,423,744 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2011-12-08 02:32:24 | 000,216,064 | ---- | C] ( ) -- C:\Windows\SysWow64\lagarith.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-08-23 14:50:31 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\AIMP3
[2012-08-23 15:25:15 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Auslogics
[2012-07-20 18:11:53 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\AVG
[2012-08-23 10:48:39 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\FileZilla
[2012-08-13 13:54:09 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\GHISLER
[2012-07-20 17:27:24 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\HD Tune Pro
[2012-08-20 13:01:04 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\hdd_guardian
[2012-08-23 16:12:45 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\KeePass
[2012-07-20 21:31:23 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Maxthon3
[2012-07-20 01:51:00 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\NapiProjekt
[2012-07-19 02:51:04 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Opera
[2012-08-11 17:28:53 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Origin
[2012-07-20 17:28:28 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Samsung
[2012-08-23 13:37:48 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Shark007
[2012-08-23 14:50:31 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\uTorrent
[2012-08-23 13:36:51 | 000,000,000 | ---D | M] -- C:\Users\Tomek\AppData\Roaming\Win7codecs
[2009-07-14 07:08:49 | 000,025,390 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========[/color]
[C:\Windows\SoftwareDistribution] ->  -> Unknown point type
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 145 bytes -> C:\ProgramData\TEMP:0B4227B4
@Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:07BF512B

< End of report >