OTL logfile created on: 2012-09-16 12:46:45 - Run 2 OTL by OldTimer - Version 3.2.61.5 Folder = D:\Pobieranie 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,99 Gb Total Physical Memory | 1,64 Gb Available Physical Memory | 41,21% Memory free 7,97 Gb Paging File | 5,04 Gb Available in Paging File | 63,20% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 195,31 Gb Total Space | 126,69 Gb Free Space | 64,86% Space Free | Partition Type: NTFS Drive D: | 368,10 Gb Total Space | 65,83 Gb Free Space | 17,88% Space Free | Partition Type: NTFS Drive E: | 368,10 Gb Total Space | 75,18 Gb Free Space | 20,42% Space Free | Partition Type: NTFS Drive F: | 169,74 Gb Total Space | 9,63 Gb Free Space | 5,67% Space Free | Partition Type: NTFS Drive G: | 296,02 Gb Total Space | 67,03 Gb Free Space | 22,65% Space Free | Partition Type: NTFS Computer Name: KRISS | User Name: KRISS | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-09-16 12:18:03 | 000,600,064 | ---- | M] (OldTimer Tools) -- D:\Pobieranie\OTL.exe PRC - [2012-09-08 04:45:26 | 000,917,984 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2012-08-30 15:02:19 | 001,807,560 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe PRC - [2012-08-28 15:52:56 | 003,671,904 | ---- | M] (DT Soft Ltd) -- G:\SOFT\DAEMON Tools Lite\DTLite.exe PRC - [2012-08-24 12:41:54 | 000,340,520 | ---- | M] (Kaspersky Lab) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe PRC - [2012-08-13 13:33:30 | 003,064,000 | ---- | M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe PRC - [2012-08-09 21:30:20 | 000,287,080 | ---- | M] (Connectify) -- C:\Program Files (x86)\Connectify\ConnectifyD.exe PRC - [2012-08-09 21:30:04 | 000,065,536 | ---- | M] () -- C:\Program Files (x86)\Connectify\ConnectifyService.exe PRC - [2012-08-04 08:02:20 | 001,353,080 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\Steam.exe PRC - [2012-07-27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2012-06-29 12:26:01 | 000,189,248 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrB.exe PRC - [2012-06-29 12:25:51 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2011-08-17 16:12:05 | 000,396,152 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe PRC - [2011-04-11 15:40:12 | 000,082,432 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen7.exe PRC - [2007-04-02 14:15:40 | 000,061,440 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTDevSrv.exe PRC - [2006-07-18 17:15:18 | 000,049,152 | ---- | M] (Vimicro) -- C:\Windows\vmsnap3.exe PRC - [2006-07-04 15:16:32 | 000,049,152 | ---- | M] () -- C:\Windows\Domino.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-09-08 07:08:22 | 020,317,008 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\libcef.dll MOD - [2012-09-08 07:08:14 | 000,902,480 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\chromehtml.DLL MOD - [2012-09-08 07:08:13 | 001,099,616 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avcodec-53.dll MOD - [2012-09-08 07:08:13 | 000,190,816 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avformat-53.dll MOD - [2012-09-08 07:08:13 | 000,123,232 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avutil-51.dll MOD - [2012-09-08 04:45:26 | 002,244,064 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2012-08-30 15:02:18 | 009,813,704 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll MOD - [2011-10-28 18:13:36 | 000,162,816 | ---- | M] () -- C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\libbluray.dll MOD - [2011-10-28 18:13:24 | 006,034,229 | ---- | M] () -- C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\avcodec-lav-53.dll MOD - [2011-10-28 18:13:24 | 000,962,568 | ---- | M] () -- C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\avformat-lav-53.dll MOD - [2011-10-28 18:13:24 | 000,221,581 | ---- | M] () -- C:\Program Files (x86)\K-Lite Codec Pack\Filters\LAV\avutil-lav-51.dll MOD - [2011-09-22 20:43:08 | 003,578,880 | ---- | M] () -- C:\Program Files (x86)\K-Lite Codec Pack\ffdshow\ffdshow.ax MOD - [2011-04-11 15:42:34 | 000,146,432 | ---- | M] () -- C:\Program Files (x86)\Tlen7\plugins\tlen_updater.o2x MOD - [2011-04-11 15:42:20 | 000,051,712 | ---- | M] () -- C:\Program Files (x86)\Tlen7\plugins\tlen_sms_era.o2x MOD - [2011-04-11 15:42:14 | 000,064,000 | ---- | M] () -- C:\Program Files (x86)\Tlen7\plugins\tlen_sms_orange.o2x MOD - [2011-04-11 15:42:06 | 000,069,120 | ---- | M] () -- C:\Program Files (x86)\Tlen7\plugins\tlen_sms_plus.o2x MOD - [2011-04-11 15:42:00 | 000,136,704 | ---- | M] () -- C:\Program Files (x86)\Tlen7\plugins\tlen_sms.o2x MOD - [2011-04-11 15:41:54 | 000,111,616 | ---- | M] () -- C:\Program Files (x86)\Tlen7\plugins\screen_sender.o2x MOD - [2011-04-11 15:41:30 | 000,274,944 | ---- | M] () -- C:\Program Files (x86)\Tlen7\plugins\tlen_xmpp.o2x MOD - [2011-04-11 15:41:22 | 000,499,200 | ---- | M] () -- C:\Program Files (x86)\Tlen7\plugins\tlen_gadu.o2x MOD - [2011-04-11 15:40:42 | 000,140,800 | ---- | M] () -- C:\Program Files (x86)\Tlen7\plugins\tlen_blocker_plugin.o2x MOD - [2011-04-11 15:40:12 | 000,082,432 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen7.exe MOD - [2011-04-11 15:40:10 | 000,116,224 | ---- | M] () -- C:\Program Files (x86)\Tlen7\plugins\tlen_picture.o2x MOD - [2011-04-11 15:40:02 | 000,292,864 | ---- | M] () -- C:\Program Files (x86)\Tlen7\plugins\tlen_protocol_plugin_p2p_video_voip.o2x MOD - [2011-04-11 15:39:30 | 000,184,320 | ---- | M] () -- C:\Program Files (x86)\Tlen7\plugins\tlen_protocol_plugin_p2p_file.o2x MOD - [2011-04-11 15:39:18 | 000,962,560 | ---- | M] () -- C:\Program Files (x86)\Tlen7\plugins\tlen_protocol_plugin_p2p.o2x MOD - [2011-04-11 15:36:58 | 000,050,688 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_message_logger.dll MOD - [2011-04-11 15:36:54 | 001,910,272 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_application.dll MOD - [2011-04-11 15:36:30 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_profiles.dll MOD - [2011-04-11 15:36:24 | 000,087,552 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_editor.dll MOD - [2011-04-11 15:36:16 | 000,425,984 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_main_window.dll MOD - [2011-04-11 15:35:52 | 000,045,568 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gemius.dll MOD - [2011-04-11 15:35:48 | 000,388,096 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_settings_manager.dll MOD - [2011-04-11 15:35:32 | 000,295,424 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_video.dll MOD - [2011-04-11 15:35:00 | 000,045,568 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_language.dll MOD - [2011-04-11 15:34:58 | 000,055,808 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_shortcuts_tab.dll MOD - [2011-04-11 15:34:52 | 000,126,464 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_roster_filters_tab.dll MOD - [2011-04-11 15:34:42 | 000,097,280 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_notifications_tab.dll MOD - [2011-04-11 15:34:34 | 000,683,520 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_plugin.dll MOD - [2011-04-11 15:34:08 | 000,068,096 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_extensions.dll MOD - [2011-04-11 15:34:04 | 000,117,760 | ---- | M] () -- C:\Program Files (x86)\Tlen7\quazip.dll MOD - [2011-04-11 15:33:48 | 000,140,800 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_status_window.dll MOD - [2011-04-11 15:33:42 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_login_window.dll MOD - [2011-04-11 15:33:28 | 000,109,568 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_registration_wizard.dll MOD - [2011-04-11 15:33:22 | 000,609,792 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_archive_importer_plugin.dll MOD - [2011-04-11 15:33:00 | 000,196,608 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_archive.dll MOD - [2011-04-11 15:32:52 | 000,125,952 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_pubdir_search.dll MOD - [2011-04-11 15:32:46 | 000,224,768 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_notification.dll MOD - [2011-04-11 15:32:26 | 000,056,320 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_tray.dll MOD - [2011-04-11 15:32:20 | 000,144,896 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_accounts_tab.dll MOD - [2011-04-11 15:32:12 | 000,291,328 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_roster.dll MOD - [2011-04-11 15:31:36 | 000,197,632 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_roster_filter.dll MOD - [2011-04-11 15:31:30 | 000,069,632 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_tooltip.dll MOD - [2011-04-11 15:31:28 | 000,105,472 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_buddy_dialog.dll MOD - [2011-04-11 15:31:20 | 000,126,976 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_avatar.dll MOD - [2011-04-11 15:30:54 | 001,234,944 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_protocol_plugin.dll MOD - [2011-04-11 15:28:48 | 000,131,072 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_transfers.dll MOD - [2011-04-11 15:28:36 | 000,175,104 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_chat_manager.dll MOD - [2011-04-11 15:28:20 | 000,586,752 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_chat_window.dll MOD - [2011-04-11 15:27:34 | 000,074,240 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_archive.dll MOD - [2011-04-11 15:27:30 | 000,147,456 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_archive_module.dll MOD - [2011-04-11 15:27:20 | 000,406,016 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_db_module.dll MOD - [2011-04-11 15:27:12 | 000,046,592 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_archive_backend.dll MOD - [2011-04-11 15:27:08 | 000,054,272 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_shortcuts.dll MOD - [2011-04-11 15:27:02 | 000,051,712 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_context_menu.dll MOD - [2011-04-11 15:26:54 | 000,937,984 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_uigenerator.dll MOD - [2011-04-11 15:26:44 | 000,076,800 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_utils.dll MOD - [2011-04-11 15:26:38 | 000,062,464 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_message_box.dll MOD - [2011-04-11 15:26:34 | 000,239,104 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_gui_widgets.dll MOD - [2011-04-11 15:25:48 | 000,109,568 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_audio.dll MOD - [2011-04-11 15:25:36 | 000,236,544 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_roster.dll MOD - [2011-04-11 15:25:32 | 000,459,776 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_plugin.dll MOD - [2011-04-11 15:24:54 | 000,094,208 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_network.dll MOD - [2011-04-11 15:24:40 | 000,166,400 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_settings.dll MOD - [2011-04-11 15:24:30 | 000,272,896 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_data.dll MOD - [2011-04-11 15:24:02 | 000,045,568 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_xml.dll MOD - [2011-04-11 15:23:58 | 000,052,224 | ---- | M] () -- C:\Program Files (x86)\Tlen7\tlen_core.dll MOD - [2011-03-03 14:56:04 | 002,293,248 | ---- | M] () -- C:\Program Files (x86)\Tlen7\QtCore4.dll MOD - [2011-02-22 19:24:24 | 000,195,584 | ---- | M] () -- C:\Program Files (x86)\Tlen7\phonon_backend\phonon_ds94.dll MOD - [2011-02-22 19:21:56 | 000,028,672 | ---- | M] () -- C:\Program Files (x86)\Tlen7\imageformats\qico4.dll MOD - [2011-02-22 19:21:48 | 000,284,672 | ---- | M] () -- C:\Program Files (x86)\Tlen7\imageformats\qtiff4.dll MOD - [2011-02-22 19:21:24 | 000,220,672 | ---- | M] () -- C:\Program Files (x86)\Tlen7\imageformats\qmng4.dll MOD - [2011-02-22 19:21:10 | 000,026,624 | ---- | M] () -- C:\Program Files (x86)\Tlen7\imageformats\qgif4.dll MOD - [2011-02-22 19:21:02 | 000,196,608 | ---- | M] () -- C:\Program Files (x86)\Tlen7\imageformats\qjpeg4.dll MOD - [2011-02-22 19:13:52 | 010,837,504 | ---- | M] () -- C:\Program Files (x86)\Tlen7\QtWebKit4.dll MOD - [2011-02-22 16:39:52 | 000,266,752 | ---- | M] () -- C:\Program Files (x86)\Tlen7\phonon4.dll MOD - [2011-02-22 16:26:06 | 008,173,568 | ---- | M] () -- C:\Program Files (x86)\Tlen7\QtGui4.dll MOD - [2011-02-22 16:11:26 | 000,970,752 | ---- | M] () -- C:\Program Files (x86)\Tlen7\QtNetwork4.dll MOD - [2011-02-22 16:09:52 | 000,339,968 | ---- | M] () -- C:\Program Files (x86)\Tlen7\QtXml4.dll MOD - [2006-07-04 15:16:32 | 000,049,152 | ---- | M] () -- C:\Windows\Domino.exe [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2012-08-06 12:24:22 | 000,361,984 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service) SRV:[b]64bit:[/b] - [2012-07-28 04:09:44 | 000,239,616 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2012-09-08 04:45:26 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012-08-24 12:41:54 | 000,340,520 | ---- | M] (Kaspersky Lab) [Auto | Running] -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe -- (AVP) SRV - [2012-08-13 13:33:30 | 003,064,000 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service) SRV - [2012-08-09 21:30:04 | 000,065,536 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Connectify\ConnectifyService.exe -- (Connectify) SRV - [2012-08-02 14:41:26 | 000,529,232 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2012-07-27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2012-07-03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2012-06-29 12:26:01 | 000,189,248 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrB.exe -- (PnkBstrB) SRV - [2012-06-29 12:25:51 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2012-06-07 19:12:14 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012-01-18 14:38:28 | 000,155,320 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion) SRV - [2011-11-29 11:50:03 | 002,916,736 | ---- | M] (TeamViewer GmbH) [On_Demand | Stopped] -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7) SRV - [2011-11-14 15:25:16 | 002,072,896 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- G:\SOFT\TuneUP 2012\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc) SRV - [2011-08-15 10:02:12 | 000,130,976 | ---- | M] (Futuremark Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe -- (Futuremark SystemInfo Service) SRV - [2011-07-01 11:46:40 | 000,014,848 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe -- (OpenVPNService) SRV - [2010-03-18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2007-04-02 14:15:40 | 000,061,440 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files (x86)\Creative\Shared Files\CTDevSrv.exe -- (CTDevice_Srv) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2012-08-24 12:41:54 | 000,353,296 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\Windows\SysNative\drivers\klif.sys -- (KLIF) DRV:[b]64bit:[/b] - [2012-08-23 13:03:27 | 000,556,632 | ---- | M] () [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\2155035drv.sys -- (2155035drv) DRV:[b]64bit:[/b] - [2012-07-28 06:07:44 | 010,278,912 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2012-07-28 03:14:46 | 000,368,640 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2012-07-03 13:46:44 | 000,024,904 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector) DRV:[b]64bit:[/b] - [2012-05-02 10:18:35 | 000,027,176 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc) DRV:[b]64bit:[/b] - [2012-05-02 10:18:35 | 000,013,352 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt) DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2012-01-03 23:22:54 | 000,055,936 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Stopped] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.1) DRV:[b]64bit:[/b] - [2012-01-03 23:22:54 | 000,055,936 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.01) DRV:[b]64bit:[/b] - [2011-12-04 13:13:01 | 000,033,608 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi) DRV:[b]64bit:[/b] - [2011-11-20 06:04:36 | 000,031,344 | ---- | M] (Connectify) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\cnnctfy2.sys -- (cnnctfy2) DRV:[b]64bit:[/b] - [2011-11-19 14:20:58 | 000,530,488 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2011-11-11 16:24:56 | 000,035,112 | ---- | M] (TeamViewer GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\teamviewervpn.sys -- (teamviewervpn) DRV:[b]64bit:[/b] - [2011-09-02 08:30:36 | 000,060,696 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt) DRV:[b]64bit:[/b] - [2011-09-02 08:30:24 | 000,066,840 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt) DRV:[b]64bit:[/b] - [2011-08-23 22:57:24 | 000,565,352 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2011-07-01 11:46:40 | 000,031,232 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901) DRV:[b]64bit:[/b] - [2011-04-20 03:07:48 | 001,930,240 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athurx.sys -- (athur) DRV:[b]64bit:[/b] - [2011-02-10 15:52:34 | 000,181,760 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc) DRV:[b]64bit:[/b] - [2011-02-10 15:52:34 | 000,082,432 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub) DRV:[b]64bit:[/b] - [2010-11-23 12:33:00 | 000,300,648 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService) DRV:[b]64bit:[/b] - [2010-11-21 05:24:43 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2010-11-21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub) DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc) DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc) DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt) DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2010-04-27 17:57:20 | 000,016,200 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmVirHid.sys -- (WmVirHid) DRV:[b]64bit:[/b] - [2010-04-27 17:57:14 | 000,036,936 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmHidLo.sys -- (WmHidLo) DRV:[b]64bit:[/b] - [2010-04-27 17:57:12 | 000,026,440 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmBEnum.sys -- (WmBEnum) DRV:[b]64bit:[/b] - [2010-04-27 15:03:12 | 000,077,512 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmXlCore.sys -- (WmXlCore) DRV:[b]64bit:[/b] - [2010-04-27 15:02:42 | 000,043,976 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmFilter.sys -- (WmFilter) DRV:[b]64bit:[/b] - [2010-02-18 10:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64) DRV:[b]64bit:[/b] - [2009-12-22 03:26:36 | 000,038,456 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter) DRV:[b]64bit:[/b] - [2009-11-18 08:12:00 | 000,032,344 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBfilt64.sys -- (MBfilt) DRV:[b]64bit:[/b] - [2009-10-14 20:18:38 | 000,040,464 | ---- | M] (Kaspersky Lab) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\klbg.sys -- (KLBG) DRV:[b]64bit:[/b] - [2009-10-02 18:39:32 | 000,021,008 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klmouflt.sys -- (klmouflt) DRV:[b]64bit:[/b] - [2009-09-14 13:46:42 | 000,027,152 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klim6.sys -- (KLIM6) DRV:[b]64bit:[/b] - [2009-09-01 14:29:56 | 000,157,712 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kl1.sys -- (kl1) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-03-25 18:48:00 | 000,153,128 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018mdm.sys -- (s1018mdm) DRV:[b]64bit:[/b] - [2009-03-25 18:48:00 | 000,146,472 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018unic.sys -- (s1018unic) DRV:[b]64bit:[/b] - [2009-03-25 18:48:00 | 000,133,160 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018mgmt.sys -- (s1018mgmt) DRV:[b]64bit:[/b] - [2009-03-25 18:48:00 | 000,128,552 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018obex.sys -- (s1018obex) DRV:[b]64bit:[/b] - [2009-03-25 18:48:00 | 000,113,704 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018bus.sys -- (s1018bus) DRV:[b]64bit:[/b] - [2009-03-25 18:48:00 | 000,034,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018nd5.sys -- (s1018nd5) DRV:[b]64bit:[/b] - [2009-03-25 18:48:00 | 000,019,496 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018mdfl.sys -- (s1018mdfl) DRV:[b]64bit:[/b] - [2008-10-21 11:22:44 | 000,145,960 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0017unic.sys -- (s0017unic) DRV:[b]64bit:[/b] - [2008-10-21 11:22:44 | 000,128,552 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0017obex.sys -- (s0017obex) DRV:[b]64bit:[/b] - [2008-10-21 11:22:44 | 000,034,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0017nd5.sys -- (s0017nd5) DRV:[b]64bit:[/b] - [2008-10-21 11:22:42 | 000,152,616 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0017mdm.sys -- (s0017mdm) DRV:[b]64bit:[/b] - [2008-10-21 11:22:42 | 000,133,160 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0017mgmt.sys -- (s0017mgmt) DRV:[b]64bit:[/b] - [2008-10-21 11:22:42 | 000,019,496 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0017mdfl.sys -- (s0017mdfl) DRV:[b]64bit:[/b] - [2008-10-21 11:22:40 | 000,113,704 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0017bus.sys -- (s0017bus) DRV:[b]64bit:[/b] - [2007-06-23 14:46:10 | 000,308,096 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vvftav303.sys -- (vvftav303) DRV:[b]64bit:[/b] - [2007-03-25 13:26:26 | 001,494,656 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbVM303.sys -- (ZSMC0303) DRV - [2011-11-08 13:47:38 | 000,011,856 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Stopped] -- G:\SOFT\TuneUP 2012\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv) DRV - [2011-01-06 12:06:56 | 000,011,888 | ---- | M] (MSI) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Setup Files\Ms7640vJ40\NTIOLib_X64.sys -- (NTIOLib_1_0_6) DRV - [2010-10-22 11:37:36 | 000,014,136 | ---- | M] (MSI) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys -- (NTIOLib_1_0_4) DRV - [2010-05-10 11:44:40 | 000,033,592 | ---- | M] (Your Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\MSI\Live Update 5\msibios64_100507.sys -- (MSI_MSIBIOS_010507) DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) DRV - [2008-02-01 18:24:06 | 000,032,240 | ---- | M] (Cyberlink Corp.) [Kernel | Auto | Running] -- G:\SOFT\PowerDVD\PowerDVD8\000.fcl -- ({FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL Inc.) IE - HKLM\..\SearchScopes,DefaultScope = {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = http://slirsredirect.search.aol.com/redirector/sredir?sredir=2685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20111122174126439&tb_oid=22-11-2011&tb_mrud=22-11-2011 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1305682616-1473174457-2273009738-1000\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL Inc.) IE - HKU\S-1-5-21-1305682616-1473174457-2273009738-1000\..\SearchScopes,DefaultScope = {712F5E6E-EA5B-4DB4-98DF-296BEC1FB4D0} IE - HKU\S-1-5-21-1305682616-1473174457-2273009738-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-1305682616-1473174457-2273009738-1000\..\SearchScopes\{712F5E6E-EA5B-4DB4-98DF-296BEC1FB4D0}: "URL" = http://www.google.com/search?hl=pl&q={searchTerms} IE - HKU\S-1-5-21-1305682616-1473174457-2273009738-1000\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = http://slirsredirect.search.aol.com/redirector/sredir?sredir=2685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20111122174126439&tb_oid=22-11-2011&tb_mrud=22-11-2011 IE - HKU\S-1-5-21-1305682616-1473174457-2273009738-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "www.google.pl" FF - prefs.js..extensions.enabledAddons: {1280606b-2510-4fe0-97ef-9b5a22eafe30}:0.7.8.1 FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_265.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.0: C:\Windows\system32\npDeployJava1.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.0: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll () FF - HKLM\Software\MozillaPlugins\@gametap.com/npdd,version=1.0: G:\Downloader\npdd.dll (Metaboli) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\KRISS\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\KRISS\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\KRISS\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-09-08 04:45:26 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012-09-08 04:45:24 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\THBExt [2012-08-24 12:24:46 | 000,000,000 | ---D | M] [2011-11-19 02:52:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\KRISS\AppData\Roaming\mozilla\Extensions [2011-11-18 13:41:14 | 000,000,000 | ---D | M] (No name found) -- C:\Users\KRISS\AppData\Roaming\mozilla\Firefox\Profiles\1nueqzaq.default\extensions [2012-08-29 16:27:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\KRISS\AppData\Roaming\mozilla\Firefox\Profiles\mfuztpqh.default\extensions [2012-05-14 21:01:52 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Users\KRISS\AppData\Roaming\mozilla\Firefox\Profiles\mfuztpqh.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} [2011-11-19 02:52:09 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\KRISS\AppData\Roaming\mozilla\Firefox\Profiles\mfuztpqh.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011-11-19 02:52:09 | 000,000,000 | ---D | M] (zblack) -- C:\Users\KRISS\AppData\Roaming\mozilla\Firefox\Profiles\mfuztpqh.default\extensions\{50931610-3d8e-11dd-ae16-0800200c9a66} [2011-11-19 02:52:09 | 000,000,000 | ---D | M] (Aero Fox XL) -- C:\Users\KRISS\AppData\Roaming\mozilla\Firefox\Profiles\mfuztpqh.default\extensions\{5c8bfb7c-9a54-11dc-8314-0800200c9a66} [2011-11-19 02:52:14 | 000,000,000 | ---D | M] (Black Stratini) -- C:\Users\KRISS\AppData\Roaming\mozilla\Firefox\Profiles\mfuztpqh.default\extensions\{b41cb5f0-2e52-11de-8c30-0800200c9a66} [2012-08-27 13:05:31 | 000,000,000 | ---D | M] (uTorrentBar Community Toolbar) -- C:\Users\KRISS\AppData\Roaming\mozilla\Firefox\Profiles\mfuztpqh.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} [2012-08-29 16:27:37 | 000,000,000 | ---D | M] (PitchDark) -- C:\Users\KRISS\AppData\Roaming\mozilla\Firefox\Profiles\mfuztpqh.default\extensions\{c1dffba0-628e-11d9-9669-0800200c9a66} [2011-11-19 02:52:09 | 000,000,000 | ---D | M] (Разпознаване на устройство Logitech) -- C:\Users\KRISS\AppData\Roaming\mozilla\Firefox\Profiles\mfuztpqh.default\extensions\DeviceDetection@logitech.com [2011-11-19 02:52:09 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\KRISS\AppData\Roaming\mozilla\Firefox\Profiles\mfuztpqh.default\extensions\engine@conduit.com [2012-06-27 02:17:40 | 000,000,000 | ---D | M] (LavaFox V2) -- C:\Users\KRISS\AppData\Roaming\mozilla\Firefox\Profiles\mfuztpqh.default\extensions\info@djzig.com [2011-11-19 02:52:14 | 000,000,000 | ---D | M] (No name found) -- C:\Users\KRISS\AppData\Roaming\mozilla\Firefox\Profiles\mfuztpqh.default\extensions\{5c8bfb7c-9a54-11dc-8314-0800200c9a66}\chrome\win\mozapps\extensions [2011-11-18 13:41:14 | 000,512,595 | ---- | M] () (No name found) -- C:\Users\KRISS\AppData\Roaming\mozilla\firefox\profiles\1nueqzaq.default\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi [2012-08-16 07:33:39 | 002,282,511 | ---- | M] () (No name found) -- C:\Users\KRISS\AppData\Roaming\mozilla\firefox\profiles\mfuztpqh.default\extensions\nasanightlaunch@example.com.xpi [2012-05-31 15:51:36 | 000,505,801 | ---- | M] () (No name found) -- C:\Users\KRISS\AppData\Roaming\mozilla\firefox\profiles\mfuztpqh.default\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi [2012-08-04 21:59:58 | 002,966,066 | ---- | M] () (No name found) -- C:\Users\KRISS\AppData\Roaming\mozilla\firefox\profiles\mfuztpqh.default\extensions\{c7b3cf78-9cbc-47b9-ba47-bb84a56069dd}.xpi [2012-07-25 21:40:20 | 000,741,958 | ---- | M] () (No name found) -- C:\Users\KRISS\AppData\Roaming\mozilla\firefox\profiles\mfuztpqh.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2009-07-12 00:54:54 | 000,514,213 | ---- | M] () (No name found) -- C:\Users\KRISS\AppData\Roaming\mozilla\firefox\profiles\mfuztpqh.default\extensions\{50931610-3d8e-11dd-ae16-0800200c9a66}\chrome\tmp.xpi [2010-04-01 09:10:00 | 000,001,502 | ---- | M] () (No name found) -- C:\Users\KRISS\AppData\Roaming\mozilla\firefox\profiles\mfuztpqh.default\extensions\{5c8bfb7c-9a54-11dc-8314-0800200c9a66}\chrome\win\mozapps\xpinstall\xpinstallConfirm.css [2010-04-01 08:51:04 | 000,001,362 | ---- | M] () (No name found) -- C:\Users\KRISS\AppData\Roaming\mozilla\firefox\profiles\mfuztpqh.default\extensions\{5c8bfb7c-9a54-11dc-8314-0800200c9a66}\chrome\win\mozapps\xpinstall\xpinstallItemGeneric.png [2012-09-08 04:45:22 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2012-09-08 04:45:21 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012-09-08 04:45:21 | 000,000,000 | ---D | M] (Blokowanie banerów) -- C:\Program Files (x86)\mozilla firefox\extensions\KavAntiBanner@Kaspersky.ru [2012-09-08 04:45:21 | 000,000,000 | ---D | M] (Kaspersky URL Advisor) -- C:\Program Files (x86)\mozilla firefox\extensions\linkfilter@kaspersky.ru [2012-09-08 04:45:27 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2012-01-13 14:35:43 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll [2011-10-03 11:14:54 | 000,083,456 | ---- | M] (vShare.tv ) -- C:\Program Files (x86)\mozilla firefox\plugins\npvsharetvplg.dll [2011-10-26 20:49:56 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll [2005-09-05 09:11:48 | 000,098,304 | ---- | M] (Zylom) -- C:\Program Files (x86)\mozilla firefox\plugins\npzylomgamesplayer.dll [2012-04-27 00:56:51 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2012-04-27 00:56:51 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2012-04-27 00:56:51 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2012-04-27 00:56:51 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2012-04-27 00:56:51 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-04-27 00:56:51 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - homepage: about:blank CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = http://www.google.com/search?hl=pl&q={searchTerms} CHR - default_search_provider: suggest_url = CHR - homepage: about:blank CHR - plugin: Shockwave Flash (Enabled) = C:\Users\KRISS\AppData\Local\Google\Chrome\Application\21.0.1180.83\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll CHR - plugin: Java Deployment Toolkit 6.0.290.11 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nprpjplug.dll CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFF12.DLL CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\KRISS\AppData\Local\Google\Chrome\Application\21.0.1180.83\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\KRISS\AppData\Local\Google\Chrome\Application\21.0.1180.83\pdf.dll CHR - plugin: Winamp Application Detector (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll CHR - plugin: Zylom Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npzylomgamesplayer.dll CHR - plugin: Google Update (Enabled) = C:\Users\KRISS\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: YouTube = C:\Users\KRISS\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Szukaj w Google = C:\Users\KRISS\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: Skype Click to Call = C:\Users\KRISS\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.2.0.10687_0\ CHR - Extension: Gmail = C:\Users\KRISS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2012-08-24 02:59:11 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2:[b]64bit:[/b] - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\x64\ievkbd.dll (Kaspersky Lab) O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2:[b]64bit:[/b] - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2:[b]64bit:[/b] - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\x64\klwtbbho.dll (Kaspersky Lab) O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL Inc.) O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll (Kaspersky Lab) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab) O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [Domino] C:\Windows\Domino.exe () O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Logitech Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [VMSnap3] C:\Windows\vmsnap3.exe (Vimicro) O4 - HKLM..\Run: [AMD AVT] C:\Windows\SysWow64\cmd.exe (Microsoft Corporation) O4 - HKLM..\Run: [AVP] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe (Kaspersky Lab) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKU\S-1-5-21-1305682616-1473174457-2273009738-1000..\Run: [Connectify] C:\Program Files (x86)\Connectify\Connectify.exe (Connectify) O4 - HKU\S-1-5-21-1305682616-1473174457-2273009738-1000..\Run: [DAEMON Tools Lite] G:\SOFT\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKU\S-1-5-21-1305682616-1473174457-2273009738-1000..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation) O4 - HKU\S-1-5-21-1305682616-1473174457-2273009738-1000..\Run: [Tlen.pl] C:\Program Files (x86)\Tlen7\tlen7.exe () O4 - HKU\S-1-5-21-1305682616-1473174457-2273009738-1000..\Run: [uTorrent] C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1305682616-1473174457-2273009738-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1305682616-1473174457-2273009738-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1305682616-1473174457-2273009738-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\S-1-5-21-1305682616-1473174457-2273009738-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0 O8:[b]64bit:[/b] - Extra context menu item: Dodaj do blokowanych banerów - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm () O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Dodaj do blokowanych banerów - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm () O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 File not found O9:[b]64bit:[/b] - Extra Button: &Wirtualna klawiatura - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\x64\klwtbbho.dll (Kaspersky Lab) O9:[b]64bit:[/b] - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) O9:[b]64bit:[/b] - Extra Button: &Sprawdzanie adresów - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\x64\klwtbbho.dll (Kaspersky Lab) O9 - Extra Button: &Wirtualna klawiatura - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab) O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: &Sprawdzanie adresów - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll (Kaspersky Lab) O16 - DPF: {3352B5B9-82E8-4FFD-9EB1-1A3E60056904} http://www.chilkatsoft.com/download/ChilkatCrypt2.cab (Chilkat Crypt2) O16 - DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} http://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab (Creative Software AutoUpdate) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30) O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab (Creative Software AutoUpdate Support Package 2) O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab (Creative Software AutoUpdate Support Package) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DC15184D-36D4-4D81-9D01-E6852EE349F6}: NameServer = 194.204.159.1,194.204.152.34 O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:[b]64bit:[/b] - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll) - C:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll (Kaspersky Lab) O20 - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll (Kaspersky Lab) O20 - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll) - C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll (Kaspersky Lab) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - Winlogon\Notify\klogon: DllName - (%SystemRoot%\System32\klogon.dll) - C:\Windows\SysNative\klogon.dll (Kaspersky Lab) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2012-07-23 11:55:29 | 000,000,000 | ---D | M] - D:\Auto Muza -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-09-16 12:13:28 | 000,000,000 | ---D | C] -- C:\879b8b7db6614ade5d7d0ee2106d7f63 [2012-09-16 11:57:51 | 000,000,000 | ---D | C] -- C:\LOGI [2012-09-16 10:03:35 | 000,000,000 | ---D | C] -- C:\Users\KRISS\AppData\Roaming\.wtw [2012-09-16 10:03:15 | 000,000,000 | ---D | C] -- C:\Users\KRISS\AppData\Local\TempDIR [2012-09-16 10:03:15 | 000,000,000 | ---D | C] -- C:\Program Files\K2T [2012-09-15 19:30:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SnadBoy's Revelation v2 [2012-09-15 19:30:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SnadBoy's Revelation v2 [2012-09-15 16:37:46 | 000,000,000 | ---D | C] -- D:\Dokumenty\Tryst [2012-09-15 16:37:46 | 000,000,000 | ---D | C] -- C:\Users\KRISS\AppData\Roaming\Tryst [2012-09-15 16:37:45 | 000,000,000 | ---D | C] -- C:\ProgramData\JAGUAR [2012-09-15 16:07:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite [2012-09-10 22:44:38 | 000,000,000 | ---D | C] -- D:\Dokumenty\Gofer Wieśka [2012-09-09 17:20:03 | 000,000,000 | ---D | C] -- D:\Dokumenty\BMW [2012-09-08 04:45:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2012-09-05 12:32:37 | 000,000,000 | ---D | C] -- C:\Users\KRISS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Connectify Hotspot [2012-09-02 11:06:07 | 000,000,000 | ---D | C] -- D:\Dokumenty\FLiNGTrainer [2012-09-01 13:08:15 | 000,000,000 | ---D | C] -- C:\Users\KRISS\Desktop\dziadek [2012-08-30 16:42:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Rockstar Games [2012-08-30 16:28:43 | 000,000,000 | ---D | C] -- C:\Users\KRISS\Desktop\Backup po max payne z Dokumenty-Rockstar Games [2012-08-25 12:08:17 | 000,000,000 | ---D | C] -- C:\Windows\Profiles [2012-08-25 00:58:05 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI [2012-08-25 00:58:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD APP [2012-08-25 00:57:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center [2012-08-24 12:24:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security 2010 [2012-08-24 12:23:42 | 000,353,296 | ---- | C] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\klif.sys [2012-08-24 10:55:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab [2012-08-24 10:55:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Kaspersky Lab [2012-08-24 10:53:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\v9Soft [2012-08-24 10:28:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab Setup Files [2012-08-24 04:57:33 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt [2012-08-24 04:15:22 | 000,000,000 | ---D | C] -- C:\Users\KRISS\AppData\Roaming\Malwarebytes [2012-08-24 04:15:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2012-08-24 04:15:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2012-08-24 04:15:12 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2012-08-24 04:15:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2012-08-24 03:12:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner [2012-08-24 03:12:31 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner [2012-08-24 03:01:58 | 000,000,000 | ---D | C] -- C:\Windows\temp [2012-08-24 02:59:19 | 000,000,000 | ---D | C] -- C:\$RECYCLE.BIN [2012-08-24 02:40:58 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe [2012-08-24 02:40:58 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe [2012-08-24 02:40:58 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe [2012-08-24 02:40:53 | 000,000,000 | ---D | C] -- C:\Qoobox [2012-08-24 02:40:29 | 000,000,000 | ---D | C] -- C:\Windows\erdnt [2012-08-23 12:43:36 | 000,000,000 | ---D | C] -- C:\Users\KRISS\AppData\Roaming\Wise Registry Cleaner [2012-08-23 12:43:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Registry Cleaner [2012-08-23 12:43:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Wise [2012-08-23 12:13:21 | 000,000,000 | ---D | C] -- C:\Windows\Minidump [2012-08-22 02:53:45 | 000,000,000 | ---D | C] -- C:\Config.Msi [2012-08-21 03:33:58 | 000,000,000 | -H-D | C] -- D:\Dokumenty\[Originals] [2012-08-21 03:33:58 | 000,000,000 | -H-D | C] -- D:\Dokumenty\[Developed] [2012-08-19 23:55:52 | 000,000,000 | ---D | C] -- C:\Users\KRISS\AppData\Roaming\EurekaLog [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-09-16 10:06:13 | 000,023,680 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012-09-16 10:06:13 | 000,023,680 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012-09-16 10:03:28 | 000,001,660 | ---- | M] () -- C:\Users\KRISS\Desktop\WTW.lnk [2012-09-16 09:59:07 | 000,000,431 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.ics [2012-09-16 09:58:34 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-09-16 09:58:29 | 3210,403,840 | -HS- | M] () -- C:\hiberfil.sys [2012-09-16 09:57:08 | 000,307,452 | RHS- | M] () -- C:\BEHFT [2012-09-15 19:30:15 | 000,217,666 | ---- | M] () -- D:\Dokumenty\RevelationV2(dobreprogramy.pl).zip [2012-09-15 16:07:40 | 000,000,748 | ---- | M] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk [2012-09-10 08:46:53 | 000,044,712 | ---- | M] () -- C:\Users\KRISS\Desktop\CA_transfer_zus_new_120910_084622.pdf [2012-09-09 17:22:40 | 002,093,022 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2012-09-09 17:22:40 | 001,167,354 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012-09-09 17:22:40 | 000,624,866 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2012-09-09 17:22:40 | 000,564,832 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2012-09-09 17:22:40 | 000,006,452 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012-09-06 12:12:17 | 001,766,500 | ---- | M] () -- C:\Users\KRISS\Desktop\DSC_0576.jpg [2012-09-05 12:33:59 | 000,001,071 | ---- | M] () -- C:\Users\KRISS\Desktop\Connectify Hotspot.lnk [2012-09-05 02:51:41 | 000,093,715 | ---- | M] () -- D:\Dokumenty\2582830610_6.jpg [2012-09-05 02:51:36 | 000,054,379 | ---- | M] () -- D:\Dokumenty\2582830610_5.jpg [2012-09-05 02:51:30 | 000,085,237 | ---- | M] () -- D:\Dokumenty\2582830610_4.jpg [2012-09-05 02:51:25 | 000,099,355 | ---- | M] () -- D:\Dokumenty\2582830610_3.jpg [2012-09-05 02:51:18 | 000,096,699 | ---- | M] () -- D:\Dokumenty\2582830610_2.jpg [2012-09-05 02:51:13 | 000,083,833 | ---- | M] () -- D:\Dokumenty\2582830610_1.jpg [2012-09-05 02:51:05 | 000,094,635 | ---- | M] () -- D:\Dokumenty\2582830610.jpg [2012-09-02 10:41:21 | 000,000,097 | ---- | M] () -- C:\Windows\SysWow64\Userdata.ini [2012-08-30 15:02:19 | 000,696,520 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2012-08-30 15:02:18 | 000,073,416 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2012-08-29 12:40:13 | 000,014,848 | ---- | M] () -- C:\Users\KRISS\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-08-25 15:01:45 | 001,031,155 | ---- | M] () -- C:\Users\KRISS\Desktop\20120822171230.png [2012-08-25 12:09:29 | 000,000,872 | ---- | M] () -- C:\Users\KRISS\Desktop\Your Unin-staller!.lnk [2012-08-24 12:41:54 | 000,353,296 | ---- | M] (Kaspersky Lab) -- C:\Windows\SysNative\drivers\klif.sys [2012-08-24 12:41:51 | 000,153,053 | ---- | M] () -- C:\Windows\SysNative\drivers\klin.dat [2012-08-24 12:41:51 | 000,107,384 | ---- | M] () -- C:\Windows\SysNative\drivers\klick.dat [2012-08-24 12:19:43 | 157,454,784 | ---- | M] () -- C:\Windows\MEMORY.DMP [2012-08-24 04:15:13 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2012-08-24 03:16:17 | 000,090,372 | ---- | M] () -- D:\Dokumenty\cc_20120824_031558.reg [2012-08-24 03:12:32 | 000,000,782 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk [2012-08-24 02:59:11 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts [2012-08-23 13:03:27 | 000,556,632 | ---- | M] () -- C:\Windows\SysNative\drivers\2155035drv.sys [2012-08-23 12:43:18 | 000,001,231 | ---- | M] () -- C:\Users\Public\Desktop\Wise Registry Cleaner.lnk [2012-08-22 03:01:05 | 000,007,608 | ---- | M] () -- C:\Users\KRISS\AppData\Local\Resmon.ResmonCfg [2012-08-21 03:33:58 | 000,879,647 | ---- | M] () -- D:\Dokumenty\DSC02092.JPG [2012-08-21 03:20:21 | 004,297,195 | ---- | M] () -- D:\Dokumenty\DSC018771.jpg [2012-08-21 03:01:58 | 007,323,118 | ---- | M] () -- D:\Dokumenty\DSC020181.jpg [2012-08-21 02:52:09 | 002,359,839 | ---- | M] () -- D:\Dokumenty\DSC02018.JPG [2012-08-20 00:19:21 | 000,002,026 | ---- | M] () -- C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-09-16 10:03:28 | 000,001,660 | ---- | C] () -- C:\Users\KRISS\Desktop\WTW.lnk [2012-09-16 09:57:08 | 000,307,452 | RHS- | C] () -- C:\BEHFT [2012-09-15 19:30:13 | 000,217,666 | ---- | C] () -- D:\Dokumenty\RevelationV2(dobreprogramy.pl).zip [2012-09-15 16:07:40 | 000,000,748 | ---- | C] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk [2012-09-10 08:46:53 | 000,044,712 | ---- | C] () -- C:\Users\KRISS\Desktop\CA_transfer_zus_new_120910_084622.pdf [2012-09-06 12:55:03 | 001,766,500 | ---- | C] () -- C:\Users\KRISS\Desktop\DSC_0576.jpg [2012-09-05 12:33:59 | 000,001,071 | ---- | C] () -- C:\Users\KRISS\Desktop\Connectify Hotspot.lnk [2012-09-05 02:51:40 | 000,093,715 | ---- | C] () -- D:\Dokumenty\2582830610_6.jpg [2012-09-05 02:51:34 | 000,054,379 | ---- | C] () -- D:\Dokumenty\2582830610_5.jpg [2012-09-05 02:51:29 | 000,085,237 | ---- | C] () -- D:\Dokumenty\2582830610_4.jpg [2012-09-05 02:51:24 | 000,099,355 | ---- | C] () -- D:\Dokumenty\2582830610_3.jpg [2012-09-05 02:51:17 | 000,096,699 | ---- | C] () -- D:\Dokumenty\2582830610_2.jpg [2012-09-05 02:51:11 | 000,083,833 | ---- | C] () -- D:\Dokumenty\2582830610_1.jpg [2012-09-05 02:51:02 | 000,094,635 | ---- | C] () -- D:\Dokumenty\2582830610.jpg [2012-09-02 10:41:21 | 000,000,097 | ---- | C] () -- C:\Windows\SysWow64\Userdata.ini [2012-08-25 15:01:42 | 001,031,155 | ---- | C] () -- C:\Users\KRISS\Desktop\20120822171230.png [2012-08-24 12:25:58 | 000,153,053 | ---- | C] () -- C:\Windows\SysNative\drivers\klin.dat [2012-08-24 12:25:58 | 000,107,384 | ---- | C] () -- C:\Windows\SysNative\drivers\klick.dat [2012-08-24 04:15:13 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2012-08-24 03:53:37 | 000,556,632 | ---- | C] () -- C:\Windows\SysNative\drivers\2155035drv.sys [2012-08-24 03:16:01 | 000,090,372 | ---- | C] () -- D:\Dokumenty\cc_20120824_031558.reg [2012-08-24 03:12:32 | 000,000,782 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk [2012-08-24 02:40:58 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe [2012-08-24 02:40:58 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe [2012-08-24 02:40:58 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe [2012-08-24 02:40:58 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe [2012-08-24 02:40:58 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe [2012-08-23 12:43:18 | 000,001,231 | ---- | C] () -- C:\Users\Public\Desktop\Wise Registry Cleaner.lnk [2012-08-23 12:13:15 | 157,454,784 | ---- | C] () -- C:\Windows\MEMORY.DMP [2012-08-22 03:01:05 | 000,007,608 | ---- | C] () -- C:\Users\KRISS\AppData\Local\Resmon.ResmonCfg [2012-08-21 03:31:28 | 000,879,647 | ---- | C] () -- D:\Dokumenty\DSC02092.JPG [2012-08-21 03:20:20 | 004,297,195 | ---- | C] () -- D:\Dokumenty\DSC018771.jpg [2012-08-21 03:01:57 | 007,323,118 | ---- | C] () -- D:\Dokumenty\DSC020181.jpg [2012-08-21 02:52:09 | 002,359,839 | ---- | C] () -- D:\Dokumenty\DSC02018.JPG [2012-08-20 00:19:21 | 000,002,026 | ---- | C] () -- C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk [2012-07-30 18:08:13 | 000,000,000 | ---- | C] () -- C:\Windows\Viewer.INI [2012-06-29 12:25:54 | 000,189,248 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2012-06-29 12:25:51 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2012-06-21 10:37:14 | 003,166,792 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe [2012-06-07 14:01:04 | 000,004,092 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2012-03-27 18:12:07 | 000,000,022 | ---- | C] () -- C:\Windows\clofghls.dll [2012-03-27 16:40:05 | 000,000,052 | ---- | C] () -- C:\Windows\mafosav.INI [2012-03-09 06:31:26 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat [2012-03-09 06:31:26 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat [2012-03-08 13:45:36 | 000,000,072 | ---- | C] () -- C:\Program Files\path2.ini [2012-03-08 13:43:39 | 000,000,080 | ---- | C] () -- C:\Program Files (x86)\path6.ini [2012-03-08 13:41:37 | 000,000,072 | ---- | C] () -- C:\Program Files\path3.ini [2012-01-31 07:00:24 | 000,016,896 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll [2011-12-27 06:18:11 | 000,014,848 | ---- | C] () -- C:\Users\KRISS\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-11-22 16:03:51 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2011-11-22 13:06:38 | 000,049,152 | ---- | C] () -- C:\Windows\Domino.exe [2011-11-22 13:05:55 | 000,122,880 | ---- | C] () -- C:\Windows\rm303b.exe [2011-11-19 16:26:09 | 000,074,752 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll [2011-11-19 14:49:39 | 000,006,434 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011-10-25 22:21:34 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\OVDecoder.dll [2011-09-28 18:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2011-09-13 01:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat [2002-07-01 16:13:30 | 000,000,243 | -HS- | C] () -- C:\ProgramData\system16driver.dat [color=#E56717]========== LOP Check ==========[/color] [2012-09-16 10:03:35 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\.wtw [2011-11-19 13:11:00 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\ACD Systems [2011-11-19 13:10:59 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\Ace [2012-05-15 14:06:57 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\avidemux [2012-05-24 22:26:14 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\calibre [2012-01-26 21:24:20 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\DAEMON Tools Lite [2011-11-19 13:11:20 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\Day 1 Studios [2011-11-19 12:49:42 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\DC++ [2012-08-19 23:55:52 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\EurekaLog [2012-03-09 03:22:37 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\Fabrykagier [2012-03-08 14:19:51 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\FabrykaGierNew [2011-12-28 15:27:03 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\Gadu-Gadu 10 [2011-12-30 14:35:28 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\Gadu-Gadu 10justa [2012-01-07 20:34:53 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\Leadertech [2012-01-06 13:58:33 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\MyPhoneExplorer [2012-08-24 15:57:29 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\NapiProjekt [2011-12-10 08:54:20 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\ooVoo Details [2011-11-19 13:14:31 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\Origin [2011-11-19 13:14:36 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\Outlook [2012-05-15 12:32:30 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\Publish Providers [2012-03-25 10:34:12 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\Rovio [2012-05-17 02:43:37 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\Sony [2012-08-24 15:57:29 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\streamripper [2012-02-04 19:18:40 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\TeamViewer [2011-11-19 02:58:35 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\Tlen.pl [2011-11-20 05:21:56 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\TP-LINK [2012-09-15 16:37:46 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\Tryst [2011-11-27 16:04:58 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\TuneUp Software [2012-06-29 12:17:49 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\Ubisoft [2011-11-30 04:09:42 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\Unity [2011-11-19 13:31:20 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\URSoft [2012-09-16 12:49:17 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\uTorrent [2011-11-19 13:15:30 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\vghd [2011-12-28 21:07:32 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\VisualShape [2012-03-19 00:13:13 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\wargaming.net [2012-08-24 15:57:29 | 000,000,000 | ---D | M] -- C:\Users\KRISS\AppData\Roaming\Wise Registry Cleaner [2012-08-23 11:37:06 | 000,032,604 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 169 bytes -> C:\ProgramData\TEMP:1CE11B51 @Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:BC359956 @Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:007D45CF < End of report >