OTL logfile created on: 2012-11-12 09:26:55 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Program Files (x86)\Opera
64bit- Enterprise Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,91 Gb Total Physical Memory | 2,74 Gb Available Physical Memory | 69,98% Memory free
7,83 Gb Paging File | 6,67 Gb Available in Paging File | 85,24% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 75,04 Gb Total Space | 54,45 Gb Free Space | 72,56% Space Free | Partition Type: NTFS
Drive D: | 195,31 Gb Total Space | 142,58 Gb Free Space | 73,00% Space Free | Partition Type: NTFS
Drive E: | 195,31 Gb Total Space | 90,73 Gb Free Space | 46,46% Space Free | Partition Type: NTFS
 
Computer Name: ZUZIA-KOMPUTER | User Name: Zuzia | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-11-12 09:26:48 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Program Files (x86)\Opera\OTL.exe
PRC - [2012-11-11 13:52:32 | 000,878,480 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012-11-11 14:16:44 | 014,586,808 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_110.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - File not found [On_Demand | Stopped] -- C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe -- (Amsp)
SRV:[b]64bit:[/b] - [2010-11-30 13:19:52 | 000,379,520 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Stopped] -- C:\Windows\SysNative\FBAgent.exe -- (AFBAgent)
SRV:[b]64bit:[/b] - [2010-11-29 15:00:56 | 000,149,504 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
SRV:[b]64bit:[/b] - [2010-09-17 09:32:56 | 000,241,488 | ---- | M] (Trend Micro Inc.) [Auto | Stopped] -- C:\Program Files\Trend Micro\Titanium\TiMiniService.exe -- (TiMiniService)
SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2012-11-12 08:46:10 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-10-11 12:17:59 | 002,312,216 | ---- | M] () [Auto | Stopped] -- C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe -- (Browser Manager)
SRV - [2011-09-13 10:10:04 | 001,313,184 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Ashampoo\Ashampoo Anti-Malware\AAMW_Service.exe -- (AAMWService)
SRV - [2011-03-13 10:59:18 | 000,138,400 | ---- | M] (Atheros) [Auto | Stopped] -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe -- (Atheros Bt&Wlan Coex Agent)
SRV - [2011-03-13 10:58:30 | 000,074,912 | ---- | M] (Atheros Commnucations) [Auto | Stopped] -- C:\Program Files (x86)\Bluetooth Suite\adminservice.exe -- (AtherosSvc)
SRV - [2011-02-08 03:55:14 | 002,009,704 | R--- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2010-10-05 21:04:12 | 002,655,768 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2010-10-05 21:04:08 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2010-03-02 03:32:56 | 000,052,616 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Ashampoo\Ashampoo Anti-Malware\AAMW_WSC_Service_Vista.exe -- (AAMW_WSC_Service_Vista)
SRV - [2009-12-15 10:39:38 | 000,096,896 | ---- | M] (ASUS) [Auto | Stopped] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2009-06-15 17:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Stopped] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService)
SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2011-03-13 10:58:44 | 000,280,224 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter)
DRV:[b]64bit:[/b] - [2011-03-13 10:58:44 | 000,201,376 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_hcrp.sys -- (BTATH_HCRP)
DRV:[b]64bit:[/b] - [2011-03-13 10:58:44 | 000,154,272 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_rcp.sys -- (BTATH_RCP)
DRV:[b]64bit:[/b] - [2011-03-13 10:58:44 | 000,055,456 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_lwflt.sys -- (BTATH_LWFLT)
DRV:[b]64bit:[/b] - [2011-03-13 10:58:42 | 000,298,656 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_a2dp.sys -- (BTATH_A2DP)
DRV:[b]64bit:[/b] - [2011-03-13 10:58:42 | 000,036,000 | ---- | M] (Atheros) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btath_flt.sys -- (AthBTPort)
DRV:[b]64bit:[/b] - [2011-03-13 10:58:42 | 000,028,832 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_bus.sys -- (BTATH_BUS)
DRV:[b]64bit:[/b] - [2011-03-04 04:42:20 | 001,413,168 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:[b]64bit:[/b] - [2011-02-08 03:55:06 | 000,025,960 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
DRV:[b]64bit:[/b] - [2011-01-27 01:57:12 | 012,273,408 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2010-11-29 15:00:04 | 000,016,120 | ---- | M] (Intel(R) Corporation) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB)
DRV:[b]64bit:[/b] - [2010-11-21 04:24:43 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:[b]64bit:[/b] - [2010-11-21 04:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2010-11-21 04:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)
DRV:[b]64bit:[/b] - [2010-11-21 04:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)
DRV:[b]64bit:[/b] - [2010-11-21 04:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:[b]64bit:[/b] - [2010-11-21 04:23:48 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2010-11-05 16:45:48 | 000,438,808 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:[b]64bit:[/b] - [2010-10-14 17:28:16 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:[b]64bit:[/b] - [2010-09-21 09:59:38 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:[b]64bit:[/b] - [2010-09-17 09:52:28 | 000,144,464 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\tmcomm.sys -- (tmcomm)
DRV:[b]64bit:[/b] - [2010-09-17 09:52:28 | 000,105,552 | ---- | M] (Trend Micro Inc.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\tmtdi.sys -- (tmtdi)
DRV:[b]64bit:[/b] - [2010-09-17 09:52:28 | 000,090,704 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\tmactmon.sys -- (tmactmon)
DRV:[b]64bit:[/b] - [2010-09-17 09:52:28 | 000,067,664 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\tmevtmgr.sys -- (tmevtmgr)
DRV:[b]64bit:[/b] - [2010-08-24 10:55:44 | 000,076,912 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)
DRV:[b]64bit:[/b] - [2010-07-08 02:03:48 | 002,228,736 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:[b]64bit:[/b] - [2009-07-20 10:29:40 | 000,015,416 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kbfiltr.sys -- (kbfiltr)
DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2008-05-23 17:27:28 | 000,154,168 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV - [2010-07-26 13:57:20 | 000,017,024 | ---- | M] (ASUS) [Kernel | System | Stopped] -- C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys -- (ATKWMIACPIIO)
DRV - [2010-06-16 03:51:10 | 000,021,528 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\Program Files (x86)\Ashampoo\Ashampoo Anti-Malware\AAMW_IFS64.sys -- (ASW3Scan)
DRV - [2010-01-20 07:24:28 | 000,018,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Ashampoo\Ashampoo Anti-Malware\AAMW_Regfilter64.sys -- (AAMWRegFilter)
DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2009-07-02 17:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Stopped] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://searchfunmoods.com/?f=1&a=iron2&chnl=iron2&cd=2XzuyEtN2Y1L1QzuyByEtB0FyCzzzztCzz0AyDtA0C0BzyzytN0D0Tzu0CtAtCyCtN1L2XzutBtFtBtFtDtFtAyEyE&cr=610527225
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=iron2&chnl=iron2&cd=2XzuyEtN2Y1L1QzuyByEtB0FyCzzzztCzz0AyDtA0C0BzyzytN0D0Tzu0CtAtCyCtN1L2XzutBtFtBtFtDtFtAyEyE&cr=610527225
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://searchfunmoods.com/?f=1&a=iron2&chnl=iron2&cd=2XzuyEtN2Y1L1QzuyByEtB0FyCzzzztCzz0AyDtA0C0BzyzytN0D0Tzu0CtAtCyCtN1L2XzutBtFtBtFtDtFtAyEyE&cr=610527225
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=iron2&chnl=iron2&cd=2XzuyEtN2Y1L1QzuyByEtB0FyCzzzztCzz0AyDtA0C0BzyzytN0D0Tzu0CtAtCyCtN1L2XzutBtFtBtFtDtFtAyEyE&cr=610527225
IE - HKLM\..\SearchScopes\{76D57F73-0F0F-7B7C-834E-612D7FB95B26}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://search.babylon.com/?affID=110824&tt=4612_8&babsrc=HP_ss&mntrId=ec2dcb99000000000000742f68818a53
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://searchfunmoods.com/?f=1&a=iron2&chnl=iron2&cd=2XzuyEtN2Y1L1QzuyByEtB0FyCzzzztCzz0AyDtA0C0BzyzytN0D0Tzu0CtAtCyCtN1L2XzutBtFtBtFtDtFtAyEyE&cr=610527225
IE - HKCU\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=iron2&chnl=iron2&cd=2XzuyEtN2Y1L1QzuyByEtB0FyCzzzztCzz0AyDtA0C0BzyzytN0D0Tzu0CtAtCyCtN1L2XzutBtFtBtFtDtFtAyEyE&cr=610527225
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=110824&tt=4612_8&babsrc=SP_ss&mntrId=ec2dcb99000000000000742f68818a53
IE - HKCU\..\SearchScopes\{76D57F73-0F0F-7B7C-834E-612D7FB95B26}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_110.dll File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_110.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{22C7F6C6-8D67-4534-92B5-529A0EC09405}: C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension\ [2012-11-11 13:52:21 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{b64982b1-d112-42b5-b1e4-d3867c4533f8}: C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension [2012-11-12 08:50:01 | 000,000,000 | ---D | M]
 
[2012-11-12 08:49:57 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - homepage: http://www.google.com/,homepage_is_newtabpage:false,distribution:{skip_first_run_ui:false,import_search_engine:false,import_history:false,create_all_shortcuts:true,do_not_launch_chrome:true,make_chrome_default:true,verbose_logging:false,ping_delay:-60},sync_promo:{show_on_first_run_allowed:false},session:{restore_on_startup:4,urls_to_restore_on_startup:[http://www.google.com/]},first_run_tabs:[http://www.google.com/,http://welcome_page,homepage: http://www.gazeta.pl/0,0.html?p=137
CHR - Extension: No name found = C:\Users\Zuzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh\1.0_0\
CHR - Extension: No name found = C:\Users\Zuzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\5.1_0\
CHR - Extension: No name found = C:\Users\Zuzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.8_0\
CHR - Extension: No name found = C:\Users\Zuzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph\1.0_0\
 
O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)
O2:[b]64bit:[/b] - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\6.5.1234\6.5.1234\TmBpIe64.dll (Trend Micro Inc.)
O2 - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll (Trend Micro Inc.)
O2 - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O2 - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.8.3.8\BabylonToolbarTlbr.dll (Babylon Ltd.)
O3 - HKLM\..\Toolbar: (Funmoods Toolbar) - {A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} - C:\PROGRA~2\Funmoods\1523~1.22\escorTlbr.dll (Funmoods)
O4:[b]64bit:[/b] - HKLM..\Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Alcor Micro Corp.)
O4:[b]64bit:[/b] - HKLM..\Run: [Ashampoo Anti-Malware Guard] C:\Program Files (x86)\Ashampoo\Ashampoo Anti-Malware\AAMW_Guard.exe (Ashampoo Development GmbH & Co. KG)
O4:[b]64bit:[/b] - HKLM..\Run: [AthBtTray] C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Atheros Commnucations)
O4:[b]64bit:[/b] - HKLM..\Run: [AtherosBtStack] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Communications)
O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IntelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" File not found
O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:[b]64bit:[/b] - HKLM..\Run: [SynAsusAcpi] C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe (Synaptics Incorporated)
O4:[b]64bit:[/b] - HKLM..\Run: [Trend Micro Client Framework] C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe (Trend Micro Inc.)
O4:[b]64bit:[/b] - HKLM..\Run: [Trend Micro Titanium] C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe (Trend Micro Inc.)
O4:[b]64bit:[/b] - HKLM..\Run: [VizorHtmlDialog.exe] C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe (Trend Micro Inc.)
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe ()
O4 - HKCU..\Run: [ALLUpdate] C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe (ALLCinema)
O4 - Startup: C:\Users\Zuzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk = C:\ProgramData\lsass.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Zuzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Intel(R) Turbo Boost Technology Monitor 2.0.lnk =  File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DD040073-B0B8-476B-BDD7-7C00D24AFF7B}: DhcpNameServer = 192.168.0.1
O18:[b]64bit:[/b] - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\6.5.1234\6.5.1234\TmBpIe64.dll (Trend Micro Inc.)
O18:[b]64bit:[/b] - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)
O18 - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)
O18 - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll (Trend Micro Inc.)
O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (c:\progra~3\browse~1\23796~1.11\{16cdf~1\browse~1.dll) - c:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll ()
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{39d3d022-2bf6-11e2-b8f2-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{39d3d022-2bf6-11e2-b8f2-806e6f6e6963}\Shell\AutoRun\command - "" = F:\InstAll.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-11-12 09:19:08 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\ProgramData\lsass.exe
[2012-11-12 09:12:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2012-11-12 09:09:00 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Roaming\SumatraPDF
[2012-11-12 09:08:50 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Roaming\PDFReaderPackages
[2012-11-12 09:04:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NapiProjekt
[2012-11-12 09:04:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NapiProjekt
[2012-11-12 09:04:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ALLYouTubeDownloader
[2012-11-12 09:04:48 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Local\ALLMediaServer
[2012-11-12 09:04:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALLMediaServer
[2012-11-12 09:04:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ALLMediaServer
[2012-11-12 09:04:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALLPlayer
[2012-11-12 09:04:35 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Local\ALLPlayer
[2012-11-12 09:04:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ALLPlayer
[2012-11-12 08:50:02 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Extensions
[2012-11-12 08:50:01 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\searchplugins
[2012-11-12 08:50:01 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Manager
[2012-11-12 08:50:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Browser Manager
[2012-11-12 08:49:58 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Roaming\BabylonToolbar
[2012-11-12 08:49:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2012-11-12 08:49:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BabylonToolbar
[2012-11-12 08:49:46 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Roaming\Babylon
[2012-11-12 08:49:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Babylon
[2012-11-12 08:46:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2012-11-12 08:44:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2012-11-12 08:42:50 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Roaming\FLVPlayerPackages
[2012-11-12 08:42:48 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Local\Google
[2012-11-12 08:42:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Funmoods
[2012-11-12 08:38:35 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_43.dll
[2012-11-12 08:38:35 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_43.dll
[2012-11-12 08:38:35 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_43.dll
[2012-11-12 08:38:35 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_43.dll
[2012-11-12 08:38:34 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_43.dll
[2012-11-12 08:37:22 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_42.dll
[2012-11-12 08:36:58 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_42.dll
[2012-11-12 08:36:34 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll
[2012-11-12 08:36:06 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_35.dll
[2012-11-12 08:35:44 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_34.dll
[2012-11-12 08:35:22 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_30.dll
[2012-11-12 08:32:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2012-11-12 08:32:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2012-11-12 08:32:03 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll
[2012-11-12 08:32:03 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2012-11-12 08:32:03 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2012-11-12 08:32:03 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2012-11-12 08:31:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2012-11-12 08:29:12 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\Documents\ASUS
[2012-11-12 08:29:05 | 000,000,000 | ---D | C] -- C:\ProgramData\ASUS
[2012-11-12 08:29:02 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Local\ASUS
[2012-11-12 08:07:29 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Roaming\WinRAR
[2012-11-12 08:07:28 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2012-11-12 08:07:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2012-11-12 08:07:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinRAR
[2012-11-12 08:05:05 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Roaming\Macromedia
[2012-11-12 08:05:05 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Roaming\Adobe
[2012-11-11 14:16:44 | 000,697,272 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012-11-11 14:16:44 | 000,073,656 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012-11-11 14:16:42 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed
[2012-11-11 14:11:06 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Local\Ashampoo
[2012-11-11 14:10:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
[2012-11-11 14:10:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ashampoo
[2012-11-11 14:10:12 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Local\Programs
[2012-11-11 13:53:32 | 001,112,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorets.dll
[2012-11-11 13:53:32 | 001,031,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcore.dll
[2012-11-11 13:53:32 | 000,826,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpcore.dll
[2012-11-11 13:52:46 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Roaming\Opera
[2012-11-11 13:52:46 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Local\Opera
[2012-11-11 13:52:45 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trend Micro Titanium Internet Security
[2012-11-11 13:52:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Opera
[2012-11-11 13:52:27 | 000,105,552 | ---- | C] (Trend Micro Inc.) -- C:\Windows\SysNative\drivers\tmtdi.sys
[2012-11-11 13:52:24 | 000,144,464 | ---- | C] (Trend Micro Inc.) -- C:\Windows\SysNative\drivers\tmcomm.sys
[2012-11-11 13:52:24 | 000,090,704 | ---- | C] (Trend Micro Inc.) -- C:\Windows\SysNative\drivers\tmactmon.sys
[2012-11-11 13:52:24 | 000,067,664 | ---- | C] (Trend Micro Inc.) -- C:\Windows\SysNative\drivers\tmevtmgr.sys
[2012-11-11 13:50:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Trend Micro
[2012-11-11 13:50:34 | 002,622,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
[2012-11-11 13:50:34 | 000,057,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
[2012-11-11 13:50:34 | 000,044,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
[2012-11-11 13:50:29 | 000,701,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
[2012-11-11 13:50:29 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
[2012-11-11 13:50:29 | 000,038,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
[2012-11-11 13:50:24 | 000,186,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
[2012-11-11 13:50:24 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
[2012-11-11 13:44:55 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2012-11-11 13:43:49 | 000,000,000 | ---D | C] -- C:\eSupport
[2012-11-11 13:43:29 | 000,080,512 | ---- | C] (ASUS) -- C:\Windows\AsusScr_K3 Series_ENG_Basic Uninstaller.exe
[2012-11-11 13:43:16 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
[2012-11-11 13:43:15 | 003,058,304 | ---- | C] (ASUS) -- C:\Windows\AsScrPro.exe
[2012-11-11 13:41:12 | 000,000,000 | -H-D | C] -- C:\ASUS.DAT
[2012-11-11 13:40:44 | 000,183,296 | ---- | C] (ASUSTeK) -- C:\Windows\SysWow64\ACEngSvr.exe
[2012-11-11 13:40:30 | 000,379,520 | ---- | C] (ASUSTeK Computer Inc.) -- C:\Windows\SysNative\FBAgent.exe
[2012-11-11 13:40:29 | 000,000,000 | ---D | C] -- C:\Program Files\ASUS
[2012-11-11 13:40:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS Utility
[2012-11-11 13:40:04 | 000,000,000 | ---D | C] -- C:\ProgramData\P4G
[2012-11-11 13:40:04 | 000,000,000 | ---D | C] -- C:\Program Files\P4G
[2012-11-11 13:39:34 | 000,000,000 | ---D | C] -- C:\Program Files\Intel
[2012-11-11 13:39:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ASUS
[2012-11-11 13:38:46 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Local\BMExplorer
[2012-11-11 13:36:20 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\Documents\Bluetooth Folder
[2012-11-11 13:36:01 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BT Program
[2012-11-11 13:36:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Atheros
[2012-11-11 13:35:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bluetooth Suite
[2012-11-11 13:31:33 | 002,228,736 | ---- | C] (Atheros Communications, Inc.) -- C:\Windows\SysNative\drivers\athrx.sys
[2012-11-11 13:31:33 | 002,228,736 | ---- | C] (Atheros Communications, Inc.) -- C:\Windows\SysNative\athrx.sys
[2012-11-11 13:31:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Atheros
[2012-11-11 13:28:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Atheros
[2012-11-11 13:28:38 | 000,000,000 | ---D | C] -- C:\Program Files\Synaptics
[2012-11-11 13:28:34 | 001,413,168 | ---- | C] (Synaptics Incorporated) -- C:\Windows\SysNative\drivers\SynTP.sys
[2012-11-11 13:28:34 | 000,276,264 | ---- | C] (Synaptics Incorporated) -- C:\Windows\SysNative\SynCtrl.dll
[2012-11-11 13:28:34 | 000,225,576 | ---- | C] (Synaptics Incorporated) -- C:\Windows\SysNative\SynTPAPI.dll
[2012-11-11 13:28:34 | 000,222,504 | ---- | C] (Synaptics Incorporated) -- C:\Windows\SysWow64\SynCtrl.dll
[2012-11-11 13:28:34 | 000,173,352 | ---- | C] (Synaptics Incorporated) -- C:\Windows\SysWow64\SynCOM.dll
[2012-11-11 13:28:34 | 000,148,264 | ---- | C] (Synaptics Incorporated) -- C:\Windows\SysNative\SynTPCo9.dll
[2012-11-11 13:28:34 | 000,107,816 | ---- | C] (Synaptics Incorporated) -- C:\Windows\SysWow64\SynTPCOM.dll
[2012-11-11 13:28:02 | 000,000,000 | ---D | C] -- C:\ProgramData\AmUStor
[2012-11-11 13:28:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AmIcoSingLun
[2012-11-11 13:27:28 | 000,076,912 | ---- | C] (Atheros Communications, Inc.) -- C:\Windows\SysNative\drivers\L1C62x64.sys
[2012-11-11 13:27:06 | 000,000,000 | ---D | C] -- C:\ProgramData\SonicFocus
[2012-11-11 13:27:03 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM
[2012-11-11 13:27:03 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2012-11-11 13:26:49 | 002,578,576 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll
[2012-11-11 13:26:49 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
[2012-11-11 13:26:49 | 000,220,496 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFNHK64.dll
[2012-11-11 13:26:49 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
[2012-11-11 13:26:49 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
[2012-11-11 13:26:49 | 000,180,048 | ---- | C] (Sonic Focus, Inc.) -- C:\Windows\SysNative\SFProc64.dll
[2012-11-11 13:26:49 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
[2012-11-11 13:26:49 | 000,086,352 | ---- | C] (Sonic Focus, Inc.) -- C:\Windows\SysNative\SFComm64.dll
[2012-11-11 13:26:49 | 000,083,792 | ---- | C] (Sonic Focus, Inc.) -- C:\Windows\SysNative\SFSAPO64.dll
[2012-11-11 13:26:49 | 000,082,768 | ---- | C] (Sonic Focus, Inc.) -- C:\Windows\SysNative\SFHAPO64.dll
[2012-11-11 13:26:49 | 000,082,768 | ---- | C] (Sonic Focus, Inc.) -- C:\Windows\SysNative\SFDAPO64.dll
[2012-11-11 13:26:49 | 000,081,232 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFCOM64.dll
[2012-11-11 13:26:49 | 000,078,160 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFAPO64.dll
[2012-11-11 13:26:49 | 000,074,064 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysWow64\SFCOM.dll
[2012-11-11 13:26:48 | 000,332,392 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll
[2012-11-11 13:26:47 | 002,839,656 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll
[2012-11-11 13:26:47 | 000,648,296 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll
[2012-11-11 13:26:47 | 000,149,608 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll
[2012-11-11 13:26:46 | 002,369,640 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll
[2012-11-11 13:26:46 | 001,242,216 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll
[2012-11-11 13:26:46 | 001,146,984 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl
[2012-11-11 13:26:45 | 000,829,440 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoRes64.dat
[2012-11-11 13:26:45 | 000,375,128 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
[2012-11-11 13:26:45 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
[2012-11-11 13:26:45 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
[2012-11-11 13:26:45 | 000,204,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
[2012-11-11 13:26:45 | 000,101,208 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
[2012-11-11 13:26:45 | 000,084,072 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInst64.dll
[2012-11-11 13:26:45 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
[2012-11-11 13:26:42 | 002,197,264 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll
[2012-11-11 13:26:42 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
[2012-11-11 13:26:38 | 002,075,712 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
[2012-11-11 13:26:37 | 001,327,208 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll
[2012-11-11 13:26:37 | 001,179,752 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll
[2012-11-11 13:26:37 | 001,111,656 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll
[2012-11-11 13:26:37 | 000,504,936 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll
[2012-11-11 13:26:37 | 000,475,752 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll
[2012-11-11 13:26:37 | 000,317,032 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll
[2012-11-11 13:26:37 | 000,269,928 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll
[2012-11-11 13:26:37 | 000,266,856 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll
[2012-11-11 13:26:37 | 000,126,056 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll
[2012-11-11 13:26:37 | 000,125,544 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll
[2012-11-11 13:26:36 | 000,200,800 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll
[2012-11-11 13:26:36 | 000,108,960 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll
[2012-11-11 13:26:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2012-11-11 13:26:27 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
[2012-11-11 13:26:25 | 001,284,712 | R--- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll
[2012-11-11 13:26:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2012-11-11 13:26:06 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\NV
[2012-11-11 13:26:06 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\NV
[2012-11-11 13:24:45 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2012-11-11 13:22:53 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2012-11-11 13:22:15 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2012-11-11 13:22:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
[2012-11-11 13:22:04 | 001,614,440 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco642090.dll
[2012-11-11 13:22:04 | 001,359,976 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvgenco642040.dll
[2012-11-11 13:20:07 | 002,204,776 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll
[2012-11-11 13:19:58 | 000,025,960 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvpciflt.sys
[2012-11-11 13:19:57 | 000,067,176 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2012-11-11 13:19:57 | 000,057,960 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2012-11-11 13:19:57 | 000,011,240 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvBridge.kmd
[2012-11-11 13:19:56 | 007,715,944 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll
[2012-11-11 13:19:56 | 005,639,784 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
[2012-11-11 13:19:56 | 000,760,936 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvumdshimx.dll
[2012-11-11 13:19:56 | 000,644,712 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvumdshim.dll
[2012-11-11 13:19:55 | 000,446,056 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoptimusmft.dll
[2012-11-11 13:19:55 | 000,380,520 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoptimusmft.dll
[2012-11-11 13:19:54 | 020,456,040 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll
[2012-11-11 13:19:53 | 015,039,080 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
[2012-11-11 13:19:53 | 000,391,784 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdecodemft.dll
[2012-11-11 13:19:53 | 000,320,104 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvdecodemft.dll
[2012-11-11 13:19:53 | 000,226,920 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvinitx.dll
[2012-11-11 13:19:53 | 000,192,616 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvinit.dll
[2012-11-11 13:19:52 | 012,840,040 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll
[2012-11-11 13:19:51 | 010,058,856 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll
[2012-11-11 13:19:51 | 003,182,184 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll
[2012-11-11 13:19:50 | 002,954,856 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
[2012-11-11 13:19:50 | 002,579,560 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll
[2012-11-11 13:19:49 | 002,871,400 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll
[2012-11-11 13:19:48 | 006,598,248 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll
[2012-11-11 13:19:47 | 004,936,808 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll
[2012-11-11 13:19:44 | 018,580,072 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll
[2012-11-11 13:19:42 | 013,011,560 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
[2012-11-11 13:19:42 | 001,968,744 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll
[2012-11-11 13:18:18 | 000,000,000 | ---D | C] -- C:\NvidiaLogs
[2012-11-11 13:17:56 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2012-11-11 13:17:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Intel
[2012-11-11 13:16:32 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Intel
[2012-11-11 13:16:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Intel
[2012-11-11 13:16:20 | 000,317,440 | ---- | C] (Intel(R) Corporation) -- C:\Windows\SysNative\drivers\IntcDAud.sys
[2012-11-11 13:16:20 | 000,014,848 | ---- | C] (Intel(R) Corporation) -- C:\Windows\SysNative\IntcDAuC.dll
[2012-11-11 13:16:00 | 019,591,680 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\ig4icd64.dll
[2012-11-11 13:16:00 | 014,292,992 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\ig4icd32.dll
[2012-11-11 13:16:00 | 012,273,408 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\igdkmd64.sys
[2012-11-11 13:16:00 | 009,014,784 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxress.dll
[2012-11-11 13:16:00 | 007,470,080 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igdumd64.dll
[2012-11-11 13:16:00 | 007,386,112 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igd10umd64.dll
[2012-11-11 13:16:00 | 006,068,224 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igd10umd32.dll
[2012-11-11 13:16:00 | 005,689,344 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igdumd32.dll
[2012-11-11 13:16:00 | 004,368,920 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\GfxUI.exe
[2012-11-11 13:16:00 | 000,575,488 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igdumdx32.dll
[2012-11-11 13:16:00 | 000,509,976 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxsrvc.exe
[2012-11-11 13:16:00 | 000,418,328 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxpers.exe
[2012-11-11 13:16:00 | 000,391,704 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\hkcmd.exe
[2012-11-11 13:16:00 | 000,385,024 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxdev.dll
[2012-11-11 13:16:00 | 000,380,928 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxTMM.dll
[2012-11-11 13:16:00 | 000,368,640 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\iglhsip32.dll
[2012-11-11 13:16:00 | 000,364,032 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\iglhsip64.dll
[2012-11-11 13:16:00 | 000,335,872 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxpph.dll
[2012-11-11 13:16:00 | 000,288,768 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igfxdv32.dll
[2012-11-11 13:16:00 | 000,287,232 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrfra.lrc
[2012-11-11 13:16:00 | 000,287,232 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxresn.lrc
[2012-11-11 13:16:00 | 000,287,232 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrell.lrc
[2012-11-11 13:16:00 | 000,286,720 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrsky.lrc
[2012-11-11 13:16:00 | 000,286,720 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrrus.lrc
[2012-11-11 13:16:00 | 000,286,720 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrrom.lrc
[2012-11-11 13:16:00 | 000,286,720 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrptg.lrc
[2012-11-11 13:16:00 | 000,286,720 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrplk.lrc
[2012-11-11 13:16:00 | 000,286,720 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrnld.lrc
[2012-11-11 13:16:00 | 000,286,720 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrita.lrc
[2012-11-11 13:16:00 | 000,286,720 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrhrv.lrc
[2012-11-11 13:16:00 | 000,286,720 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrdeu.lrc
[2012-11-11 13:16:00 | 000,286,720 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrcsy.lrc
[2012-11-11 13:16:00 | 000,286,208 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrtrk.lrc
[2012-11-11 13:16:00 | 000,286,208 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrsve.lrc
[2012-11-11 13:16:00 | 000,286,208 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrslv.lrc
[2012-11-11 13:16:00 | 000,286,208 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrptb.lrc
[2012-11-11 13:16:00 | 000,286,208 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrnor.lrc
[2012-11-11 13:16:00 | 000,286,208 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrhun.lrc
[2012-11-11 13:16:00 | 000,286,208 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrfin.lrc
[2012-11-11 13:16:00 | 000,285,696 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrtha.lrc
[2012-11-11 13:16:00 | 000,285,696 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrenu.lrc
[2012-11-11 13:16:00 | 000,285,696 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrdan.lrc
[2012-11-11 13:16:00 | 000,285,184 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrheb.lrc
[2012-11-11 13:16:00 | 000,285,184 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrara.lrc
[2012-11-11 13:16:00 | 000,283,648 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrjpn.lrc
[2012-11-11 13:16:00 | 000,283,136 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrkor.lrc
[2012-11-11 13:16:00 | 000,282,624 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrcht.lrc
[2012-11-11 13:16:00 | 000,282,624 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxrchs.lrc
[2012-11-11 13:16:00 | 000,239,128 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxext.exe
[2012-11-11 13:16:00 | 000,167,960 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxtray.exe
[2012-11-11 13:16:00 | 000,144,896 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\gfxSrvc.dll
[2012-11-11 13:16:00 | 000,142,848 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igfxcmrt32.dll
[2012-11-11 13:16:00 | 000,142,336 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxdo.dll
[2012-11-11 13:16:00 | 000,126,976 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxcpl.cpl
[2012-11-11 13:16:00 | 000,122,368 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxcmrt64.dll
[2012-11-11 13:16:00 | 000,109,056 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\hccutils.dll
[2012-11-11 13:16:00 | 000,095,744 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\iglhcp64.dll
[2012-11-11 13:16:00 | 000,092,672 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxCoIn_v2291.dll
[2012-11-11 13:16:00 | 000,086,528 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\iglhcp32.dll
[2012-11-11 13:16:00 | 000,062,464 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxsrvc.dll
[2012-11-11 13:16:00 | 000,028,672 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\igfxexps.dll
[2012-11-11 13:16:00 | 000,024,576 | ---- | C] (Intel Corporation) -- C:\Windows\SysWow64\igfxexps32.dll
[2012-11-11 13:13:36 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
[2012-11-11 13:13:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\postureAgent
[2012-11-11 13:13:24 | 000,056,344 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\HECIx64.sys
[2012-11-11 13:13:15 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2012-11-11 13:13:12 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Roaming\InstallShield
[2012-11-11 13:09:19 | 000,053,248 | R--- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\SysWow64\CSVer.dll
[2012-11-11 13:09:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel
[2012-11-11 13:08:59 | 000,000,000 | ---D | C] -- C:\Intel
[2012-11-11 12:58:13 | 000,000,000 | R--D | C] -- C:\Users\Zuzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2012-11-11 12:58:13 | 000,000,000 | R--D | C] -- C:\Users\Zuzia\Searches
[2012-11-11 12:58:13 | 000,000,000 | R--D | C] -- C:\Users\Zuzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2012-11-11 12:58:04 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Roaming\Identities
[2012-11-11 12:58:01 | 000,000,000 | R--D | C] -- C:\Users\Zuzia\Contacts
[2012-11-11 12:57:58 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Local\VirtualStore
[2012-11-11 12:57:46 | 000,000,000 | -HSD | C] -- C:\Users\Zuzia\Ustawienia lokalne
[2012-11-11 12:57:46 | 000,000,000 | -HSD | C] -- C:\Users\Zuzia\AppData\Local\Temporary Internet Files
[2012-11-11 12:57:46 | 000,000,000 | -HSD | C] -- C:\Users\Zuzia\Szablony
[2012-11-11 12:57:46 | 000,000,000 | -HSD | C] -- C:\Users\Zuzia\SendTo
[2012-11-11 12:57:46 | 000,000,000 | -HSD | C] -- C:\Users\Zuzia\Recent
[2012-11-11 12:57:46 | 000,000,000 | -HSD | C] -- C:\Users\Zuzia\PrintHood
[2012-11-11 12:57:46 | 000,000,000 | -HSD | C] -- C:\Users\Zuzia\NetHood
[2012-11-11 12:57:46 | 000,000,000 | -HSD | C] -- C:\Users\Zuzia\Documents\Moje wideo
[2012-11-11 12:57:46 | 000,000,000 | -HSD | C] -- C:\Users\Zuzia\Documents\Moje obrazy
[2012-11-11 12:57:46 | 000,000,000 | -HSD | C] -- C:\Users\Zuzia\Moje dokumenty
[2012-11-11 12:57:46 | 000,000,000 | -HSD | C] -- C:\Users\Zuzia\Documents\Moja muzyka
[2012-11-11 12:57:46 | 000,000,000 | -HSD | C] -- C:\Users\Zuzia\Menu Start
[2012-11-11 12:57:46 | 000,000,000 | -HSD | C] -- C:\Users\Zuzia\AppData\Local\Historia
[2012-11-11 12:57:46 | 000,000,000 | -HSD | C] -- C:\Users\Zuzia\Dane aplikacji
[2012-11-11 12:57:46 | 000,000,000 | -HSD | C] -- C:\Users\Zuzia\AppData\Local\Dane aplikacji
[2012-11-11 12:57:46 | 000,000,000 | -HSD | C] -- C:\Users\Zuzia\Cookies
[2012-11-11 12:57:45 | 000,000,000 | --SD | C] -- C:\Users\Zuzia\AppData\Roaming\Microsoft
[2012-11-11 12:57:45 | 000,000,000 | R--D | C] -- C:\Users\Zuzia\Videos
[2012-11-11 12:57:45 | 000,000,000 | R--D | C] -- C:\Users\Zuzia\Saved Games
[2012-11-11 12:57:45 | 000,000,000 | R--D | C] -- C:\Users\Zuzia\Pictures
[2012-11-11 12:57:45 | 000,000,000 | R--D | C] -- C:\Users\Zuzia\Music
[2012-11-11 12:57:45 | 000,000,000 | R--D | C] -- C:\Users\Zuzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2012-11-11 12:57:45 | 000,000,000 | R--D | C] -- C:\Users\Zuzia\Links
[2012-11-11 12:57:45 | 000,000,000 | R--D | C] -- C:\Users\Zuzia\Favorites
[2012-11-11 12:57:45 | 000,000,000 | R--D | C] -- C:\Users\Zuzia\Downloads
[2012-11-11 12:57:45 | 000,000,000 | R--D | C] -- C:\Users\Zuzia\Documents
[2012-11-11 12:57:45 | 000,000,000 | R--D | C] -- C:\Users\Zuzia\Desktop
[2012-11-11 12:57:45 | 000,000,000 | R--D | C] -- C:\Users\Zuzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2012-11-11 12:57:45 | 000,000,000 | -H-D | C] -- C:\Users\Zuzia\AppData
[2012-11-11 12:57:45 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Local\Temp
[2012-11-11 12:57:45 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Local\Microsoft
[2012-11-11 12:57:45 | 000,000,000 | ---D | C] -- C:\Users\Zuzia\AppData\Roaming\Media Center Programs
[2012-11-11 12:57:35 | 000,000,000 | -HSD | C] -- C:\ProgramData\Ulubione
[2012-11-11 12:57:35 | 000,000,000 | -HSD | C] -- C:\ProgramData\Szablony
[2012-11-11 12:57:35 | 000,000,000 | -HSD | C] -- C:\Recovery
[2012-11-11 12:57:35 | 000,000,000 | -HSD | C] -- C:\ProgramData\Pulpit
[2012-11-11 12:57:35 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje wideo
[2012-11-11 12:57:35 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje obrazy
[2012-11-11 12:57:35 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moja muzyka
[2012-11-11 12:57:35 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Start
[2012-11-11 12:57:35 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty
[2012-11-11 12:57:35 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dane aplikacji
[2012-11-11 12:55:20 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2012-11-11 12:53:10 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2012-11-11 12:52:19 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2012-11-11 12:51:48 | 000,000,000 | ---D | C] -- C:\Windows\Panther
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-11-12 09:28:43 | 001,554,376 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012-11-12 09:28:43 | 000,699,002 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2012-11-12 09:28:43 | 000,618,404 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012-11-12 09:28:43 | 000,134,928 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2012-11-12 09:28:43 | 000,107,122 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012-11-12 09:24:22 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-11-12 09:24:15 | 3152,130,048 | -HS- | M] () -- C:\hiberfil.sys
[2012-11-12 09:22:46 | 083,023,306 | ---- | M] () -- C:\ProgramData\dsgsdgdsgdsgw.pad
[2012-11-12 09:22:13 | 000,001,042 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012-11-12 09:22:09 | 000,001,046 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012-11-12 09:19:11 | 000,000,820 | ---- | M] () -- C:\Users\Zuzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
[2012-11-12 09:19:08 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\ProgramData\lsass.exe
[2012-11-12 09:17:18 | 000,016,848 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012-11-12 09:17:18 | 000,016,848 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012-11-12 09:15:09 | 000,001,782 | ---- | M] () -- C:\Windows\SysNative\AutoRunFilter.ini
[2012-11-12 09:15:06 | 000,045,056 | ---- | M] () -- C:\Windows\SysNative\acovcnt.exe
[2012-11-12 09:15:03 | 000,001,241 | ---- | M] () -- C:\Windows\SysNative\ServiceFilter.ini
[2012-11-12 09:12:35 | 000,002,285 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2012-11-12 09:08:47 | 000,290,500 | ---- | M] () -- C:\Users\Zuzia\AppData\Local\funmoods-speeddial_sf.crx
[2012-11-12 09:08:47 | 000,031,465 | ---- | M] () -- C:\Users\Zuzia\AppData\Local\funmoods.crx
[2012-11-12 09:04:53 | 000,000,966 | ---- | M] () -- C:\Users\Zuzia\Desktop\NapiProjekt.lnk
[2012-11-12 09:04:42 | 000,001,015 | ---- | M] () -- C:\Users\Zuzia\Desktop\ALLPlayer.lnk
[2012-11-12 08:52:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012-11-12 08:46:09 | 000,697,272 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012-11-12 08:46:09 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012-11-12 08:31:33 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll
[2012-11-12 08:31:33 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2012-11-12 08:31:33 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2012-11-12 08:31:33 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2012-11-12 08:00:19 | 000,000,080 | ---- | M] () -- C:\Windows\SysNative\Defrag.ini
[2012-11-11 14:10:53 | 000,001,230 | ---- | M] () -- C:\Users\Public\Desktop\Ashampoo Anti-Malware.lnk
[2012-11-11 13:52:33 | 000,001,825 | ---- | M] () -- C:\Users\Public\Desktop\Opera.lnk
[2012-11-11 13:52:29 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\drivers\1043_ASUSTeK_K73SV.alu
[2012-11-11 13:43:29 | 000,080,512 | ---- | M] (ASUS) -- C:\Windows\AsusScr_K3 Series_ENG_Basic Uninstaller.exe
[2012-11-11 13:43:15 | 003,058,304 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe
[2012-11-11 13:41:12 | 000,002,617 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk
[2012-11-11 13:40:16 | 000,001,088 | ---- | M] () -- C:\Users\Public\Desktop\LifeFrame.lnk
[2012-11-11 13:39:35 | 000,001,063 | ---- | M] () -- C:\Users\Zuzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Intel(R) Turbo Boost Technology Monitor 2.0.lnk
[2012-11-11 13:37:26 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_btath_hcrp_01009.Wdf
[2012-11-11 13:36:23 | 000,246,804 | ---- | M] () -- C:\Windows\SysNative\drivers\AtherosBt.bin
[2012-11-11 13:28:40 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2012-11-11 13:17:53 | 000,015,444 | ---- | M] () -- C:\Windows\SysNative\results.xml
[2012-11-11 12:55:55 | 000,000,803 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2012-11-11 12:55:55 | 000,000,803 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2012-11-11 12:52:53 | 000,274,840 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-11-12 09:19:11 | 000,000,820 | ---- | C] () -- C:\Users\Zuzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
[2012-11-12 09:19:08 | 083,023,306 | ---- | C] () -- C:\ProgramData\dsgsdgdsgdsgw.pad
[2012-11-12 09:12:35 | 000,002,285 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2012-11-12 09:12:26 | 000,001,046 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012-11-12 09:12:25 | 000,001,042 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012-11-12 09:04:53 | 000,000,966 | ---- | C] () -- C:\Users\Zuzia\Desktop\NapiProjekt.lnk
[2012-11-12 09:04:42 | 000,001,015 | ---- | C] () -- C:\Users\Zuzia\Desktop\ALLPlayer.lnk
[2012-11-12 09:04:37 | 000,797,184 | ---- | C] () -- C:\Windows\SysWow64\ac3filter.ax
[2012-11-12 09:04:37 | 000,644,608 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2012-11-12 09:04:37 | 000,258,048 | ---- | C] () -- C:\Windows\SysWow64\libFLAC.dll
[2012-11-12 08:42:49 | 000,290,500 | ---- | C] () -- C:\Users\Zuzia\AppData\Local\funmoods-speeddial_sf.crx
[2012-11-12 08:42:48 | 000,031,465 | ---- | C] () -- C:\Users\Zuzia\AppData\Local\funmoods.crx
[2012-11-11 14:16:44 | 000,000,930 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012-11-11 14:10:53 | 000,001,230 | ---- | C] () -- C:\Users\Public\Desktop\Ashampoo Anti-Malware.lnk
[2012-11-11 13:52:33 | 000,001,837 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
[2012-11-11 13:52:33 | 000,001,825 | ---- | C] () -- C:\Users\Public\Desktop\Opera.lnk
[2012-11-11 13:52:29 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\drivers\1043_ASUSTeK_K73SV.alu
[2012-11-11 13:43:10 | 000,003,116 | ---- | C] () -- C:\Windows\SysNative\wimfltr.inf
[2012-11-11 13:42:13 | 000,045,056 | ---- | C] () -- C:\Windows\SysNative\acovcnt.exe
[2012-11-11 13:41:12 | 000,002,617 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk
[2012-11-11 13:40:30 | 000,001,782 | ---- | C] () -- C:\Windows\SysNative\AutoRunFilter.ini
[2012-11-11 13:40:30 | 000,001,241 | ---- | C] () -- C:\Windows\SysNative\ServiceFilter.ini
[2012-11-11 13:40:30 | 000,000,105 | ---- | C] () -- C:\Windows\SysNative\FastBoot.ini
[2012-11-11 13:40:30 | 000,000,080 | ---- | C] () -- C:\Windows\SysNative\Defrag.ini
[2012-11-11 13:40:30 | 000,000,052 | ---- | C] () -- C:\Windows\SysNative\RemoveFont.ini
[2012-11-11 13:40:30 | 000,000,015 | ---- | C] () -- C:\Windows\SysNative\BootTime.ini
[2012-11-11 13:40:16 | 000,001,088 | ---- | C] () -- C:\Users\Public\Desktop\LifeFrame.lnk
[2012-11-11 13:39:36 | 000,001,063 | ---- | C] () -- C:\Users\Zuzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Intel(R) Turbo Boost Technology Monitor 2.0.lnk
[2012-11-11 13:38:49 | 000,015,416 | ---- | C] ( ) -- C:\Windows\SysNative\drivers\kbfiltr.sys
[2012-11-11 13:37:26 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_btath_hcrp_01009.Wdf
[2012-11-11 13:31:33 | 000,355,542 | ---- | C] () -- C:\Windows\SysNative\netathrx.inf
[2012-11-11 13:31:33 | 000,056,092 | ---- | C] () -- C:\Windows\SysNative\athrextx.cat
[2012-11-11 13:28:40 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2012-11-11 13:28:34 | 000,066,856 | ---- | C] () -- C:\Windows\SysWow64\SynTPEnhPS.dll
[2012-11-11 13:26:52 | 000,000,520 | R--- | C] () -- C:\Windows\SysNative\drivers\SamSfPa.dat
[2012-11-11 13:22:04 | 000,007,621 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb
[2012-11-11 13:17:53 | 000,015,444 | ---- | C] () -- C:\Windows\SysNative\results.xml
[2012-11-11 13:16:00 | 001,991,936 | ---- | C] () -- C:\Windows\SysNative\iglhxa64.cpa
[2012-11-11 13:16:00 | 000,960,940 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin
[2012-11-11 13:16:00 | 000,960,940 | ---- | C] () -- C:\Windows\SysNative\igkrng600.bin
[2012-11-11 13:16:00 | 000,213,332 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin
[2012-11-11 13:16:00 | 000,213,332 | ---- | C] () -- C:\Windows\SysNative\igfcg600m.bin
[2012-11-11 13:16:00 | 000,208,335 | ---- | C] () -- C:\Windows\SysNative\Gfxres.th-TH.resources
[2012-11-11 13:16:00 | 000,195,681 | ---- | C] () -- C:\Windows\SysNative\Gfxres.el-GR.resources
[2012-11-11 13:16:00 | 000,180,246 | ---- | C] () -- C:\Windows\SysNative\Gfxres.ru-RU.resources
[2012-11-11 13:16:00 | 000,179,736 | ---- | C] () -- C:\Windows\SysNative\difx64.exe
[2012-11-11 13:16:00 | 000,154,366 | ---- | C] () -- C:\Windows\SysNative\Gfxres.ar-SA.resources
[2012-11-11 13:16:00 | 000,151,350 | ---- | C] () -- C:\Windows\SysNative\Gfxres.ja-JP.resources
[2012-11-11 13:16:00 | 000,147,392 | ---- | C] () -- C:\Windows\SysNative\Gfxres.he-IL.resources
[2012-11-11 13:16:00 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin
[2012-11-11 13:16:00 | 000,145,804 | ---- | C] () -- C:\Windows\SysNative\igcompkrng600.bin
[2012-11-11 13:16:00 | 000,138,635 | ---- | C] () -- C:\Windows\SysNative\Gfxres.it-IT.resources
[2012-11-11 13:16:00 | 000,137,000 | ---- | C] () -- C:\Windows\SysNative\Gfxres.ko-KR.resources
[2012-11-11 13:16:00 | 000,136,226 | ---- | C] () -- C:\Windows\SysNative\Gfxres.de-DE.resources
[2012-11-11 13:16:00 | 000,136,172 | ---- | C] () -- C:\Windows\SysNative\Gfxres.es-ES.resources
[2012-11-11 13:16:00 | 000,135,119 | ---- | C] () -- C:\Windows\SysNative\Gfxres.ro-RO.resources
[2012-11-11 13:16:00 | 000,134,081 | ---- | C] () -- C:\Windows\SysNative\Gfxres.fr-FR.resources
[2012-11-11 13:16:00 | 000,133,868 | ---- | C] () -- C:\Windows\SysNative\Gfxres.tr-TR.resources
[2012-11-11 13:16:00 | 000,133,321 | ---- | C] () -- C:\Windows\SysNative\Gfxres.pt-BR.resources
[2012-11-11 13:16:00 | 000,132,876 | ---- | C] () -- C:\Windows\SysNative\Gfxres.nl-NL.resources
[2012-11-11 13:16:00 | 000,132,861 | ---- | C] () -- C:\Windows\SysNative\Gfxres.hu-HU.resources
[2012-11-11 13:16:00 | 000,132,422 | ---- | C] () -- C:\Windows\SysNative\Gfxres.sv-SE.resources
[2012-11-11 13:16:00 | 000,132,299 | ---- | C] () -- C:\Windows\SysNative\Gfxres.pt-PT.resources
[2012-11-11 13:16:00 | 000,131,897 | ---- | C] () -- C:\Windows\SysNative\Gfxres.cs-CZ.resources
[2012-11-11 13:16:00 | 000,131,711 | ---- | C] () -- C:\Windows\SysNative\Gfxres.pl-PL.resources
[2012-11-11 13:16:00 | 000,131,456 | ---- | C] () -- C:\Windows\SysNative\Gfxres.fi-FI.resources
[2012-11-11 13:16:00 | 000,131,290 | ---- | C] () -- C:\Windows\SysNative\Gfxres.sk-SK.resources
[2012-11-11 13:16:00 | 000,130,414 | ---- | C] () -- C:\Windows\SysNative\Gfxres.hr-HR.resources
[2012-11-11 13:16:00 | 000,127,599 | ---- | C] () -- C:\Windows\SysNative\Gfxres.sl-SI.resources
[2012-11-11 13:16:00 | 000,127,367 | ---- | C] () -- C:\Windows\SysNative\Gfxres.nb-NO.resources
[2012-11-11 13:16:00 | 000,127,109 | ---- | C] () -- C:\Windows\SysNative\Gfxres.da-DK.resources
[2012-11-11 13:16:00 | 000,122,646 | ---- | C] () -- C:\Windows\SysNative\Gfxres.en-US.resources
[2012-11-11 13:16:00 | 000,116,413 | ---- | C] () -- C:\Windows\SysNative\Gfxres.zh-TW.resources
[2012-11-11 13:16:00 | 000,115,195 | ---- | C] () -- C:\Windows\SysNative\Gfxres.zh-CN.resources
[2012-11-11 13:16:00 | 000,094,208 | ---- | C] () -- C:\Windows\SysNative\IccLibDll_x64.dll
[2012-11-11 13:16:00 | 000,060,254 | ---- | C] () -- C:\Windows\SysNative\iglhxg64.vp
[2012-11-11 13:16:00 | 000,060,226 | ---- | C] () -- C:\Windows\SysNative\iglhxc64.vp
[2012-11-11 13:16:00 | 000,060,015 | ---- | C] () -- C:\Windows\SysNative\iglhxo64.vp
[2012-11-11 13:16:00 | 000,013,476 | ---- | C] () -- C:\Windows\SysNative\iglhxs64.vp
[2012-11-11 13:16:00 | 000,004,096 | ---- | C] ( ) -- C:\Windows\SysNative\IGFXDEVLib.dll
[2012-11-11 13:16:00 | 000,000,151 | ---- | C] () -- C:\Windows\SysNative\GfxUI.exe.config
[2012-11-11 13:13:35 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\drivers\IntelMEFWVer.dll
[2012-11-11 13:13:35 | 000,008,192 | ---- | C] () -- C:\Windows\SysNative\drivers\IntelMEFWVer.dll
[2012-11-11 12:58:18 | 000,001,413 | ---- | C] () -- C:\Users\Zuzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2012-11-11 12:58:15 | 000,001,447 | ---- | C] () -- C:\Users\Zuzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2012-11-11 12:55:48 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2012-11-11 12:55:35 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2012-11-11 12:52:19 | 3152,130,048 | -HS- | C] () -- C:\hiberfil.sys
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009-07-14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2010-11-21 04:23:55 | 014,174,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2010-11-21 04:24:02 | 012,872,192 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

< End of report >