OTL logfile created on: 1/16/2011 12:27:30 AM - Run 3
OTL by OldTimer - Version 3.2.20.2     Folder = C:\Users\Piotrek\Desktop
64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
4.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 38.00% Memory free
4.00 Gb Paging File | 1.00 Gb Available in Paging File | 37.00% Paging File free
Paging file location(s):  [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 180.78 Gb Total Space | 75.77 Gb Free Space | 41.91% Space Free | Partition Type: NTFS
Drive F: | 967.89 Mb Total Space | 647.01 Mb Free Space | 66.85% Space Free | Partition Type: FAT32
 
Computer Name: NEPTUN | User Name: Piotrek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011/01/16 00:26:44 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Piotrek\Desktop\OTL.exe
PRC - [2010/12/30 11:50:06 | 000,944,496 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe
PRC - [2010/12/10 14:29:47 | 000,016,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
PRC - [2010/12/10 14:29:45 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2010/11/15 21:02:24 | 001,289,624 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
PRC - [2010/10/28 13:02:12 | 001,696,080 | ---- | M] () -- C:\Program Files (x86)\Zentimo\Zentimo.exe
PRC - [2010/09/28 11:57:48 | 000,996,424 | ---- | M] (G Data Software AG) -- C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe
PRC - [2010/09/27 09:39:14 | 001,537,096 | ---- | M] (G Data Software AG) -- C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
PRC - [2010/09/27 09:38:52 | 000,410,696 | ---- | M] (G Data Software AG) -- C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe
PRC - [2010/09/27 09:38:50 | 001,098,312 | ---- | M] (G Data Software AG) -- C:\Program Files (x86)\Common Files\G DATA\AVKProxy\AVKProxy.exe
PRC - [2010/09/23 00:39:22 | 000,340,552 | ---- | M] (G Data Software AG) -- C:\Program Files (x86)\Common Files\G DATA\GDScan\GDScan.exe
PRC - [2010/07/08 21:38:38 | 001,512,448 | ---- | M] (Michel Krämer) -- C:\Program Files (x86)\Spamihilator\spamihilator.exe
PRC - [2009/10/13 20:25:54 | 000,186,904 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2009/10/13 20:25:30 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
PRC - [2009/08/18 10:42:08 | 001,157,128 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
PRC - [2009/07/04 03:47:12 | 000,240,160 | ---- | M] (Acer) -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011/01/16 00:26:44 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Piotrek\Desktop\OTL.exe
MOD - [2010/08/21 06:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2010/11/01 20:59:46 | 000,331,296 | ---- | M] (Soluto) [Auto | Stopped] -- C:\Program Files\Soluto\SolutoService.exe -- (SolutoService)
SRV:[b]64bit:[/b] - [2010/08/17 17:24:50 | 000,053,248 | ---- | M] (Drive Headquarter) [On_Demand | Stopped] -- C:\Program Files\DriveHQ\DriveHQ FileManager\DHQFMSvc.exe -- (DriveHQ FileManagerFun)
SRV:[b]64bit:[/b] - [2009/10/29 20:10:02 | 000,844,320 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe -- (ePowerSvc)
SRV:[b]64bit:[/b] - [2009/07/14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009/07/04 03:47:12 | 000,240,160 | ---- | M] (Acer) [Auto | Running] -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe -- (Updater Service)
SRV - [2010/12/07 11:32:02 | 002,228,008 | ---- | M] (TeamViewer GmbH) [On_Demand | Stopped] -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe -- (TeamViewer6)
SRV - [2010/10/28 13:02:14 | 000,524,248 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Zentimo\ZentimoService.exe -- (ZentimoService)
SRV - [2010/10/20 11:22:24 | 000,630,272 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2010/10/08 10:26:10 | 000,119,176 | ---- | M] (SecureW2 B.V.) [Disabled | Stopped] -- C:\Program Files (x86)\SecureW2\sw2_service.exe -- (SW2SVC)
SRV - [2010/09/27 09:38:52 | 000,410,696 | ---- | M] (G Data Software AG) [Auto | Running] -- C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe -- (AVKService)
SRV - [2010/09/27 09:38:50 | 001,098,312 | ---- | M] (G Data Software AG) [Auto | Running] -- C:\Program Files (x86)\Common Files\G DATA\AVKProxy\AVKProxy.exe -- (AVKProxy)
SRV - [2010/09/23 01:16:18 | 001,718,608 | ---- | M] (G Data Software AG) [On_Demand | Running] -- C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe -- (GDFwSvc)
SRV - [2010/09/23 01:05:06 | 001,865,344 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlX64.exe -- (AVKWCtl)
SRV - [2010/09/23 00:39:22 | 000,340,552 | ---- | M] (G Data Software AG) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\G DATA\GDScan\GDScan.exe -- (GDScan)
SRV - [2010/03/18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/12/22 01:08:39 | 000,814,344 | ---- | M] (ABBYY) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Professional.10.0)
SRV - [2009/10/13 20:25:30 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe -- (IAANTMON) Intel(R)
SRV - [2009/08/28 10:38:58 | 001,150,496 | ---- | M] (Acer Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Acer\Registration\GregHSRW.exe -- (Greg_Service)
SRV - [2009/06/10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008/05/28 13:19:10 | 000,094,208 | ---- | M] (SEIKO EPSON CORPORATION) [Disabled | Stopped] -- C:\Program Files (x86)\EPSON Projector\EPSON USB Display V1.4\EMP_UDSA.exe -- (EMP_UDSA)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2011/01/12 20:22:40 | 000,106,224 | ---- | M] (G Data Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\GRD.sys -- (GRD)
DRV:[b]64bit:[/b] - [2011/01/02 15:06:08 | 000,057,288 | ---- | M] (G Data Software AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\PktIcpt.sys -- (GDPkIcpt)
DRV:[b]64bit:[/b] - [2011/01/02 15:05:41 | 000,085,448 | ---- | M] (G Data Software AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\MiniIcpt.sys -- (GDMnIcpt)
DRV:[b]64bit:[/b] - [2011/01/02 15:05:41 | 000,049,096 | ---- | M] (G Data Software AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\HookCentre.sys -- (HookCentre)
DRV:[b]64bit:[/b] - [2011/01/02 15:05:41 | 000,048,584 | ---- | M] (G DATA Software AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\gdwfpcd64.sys -- (gdwfpcd)
DRV:[b]64bit:[/b] - [2011/01/02 15:05:41 | 000,040,392 | ---- | M] (G Data Software AG) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\GDBehave.sys -- (GDBehave)
DRV:[b]64bit:[/b] - [2010/12/22 15:10:56 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:[b]64bit:[/b] - [2010/11/01 20:50:32 | 000,198,088 | R--- | M] (Soluto LTD.) [File_System | Boot | Stopped] -- C:\Windows\SysNative\drivers\PCGenFAM.sys -- (PCGenFAM)
DRV:[b]64bit:[/b] - [2010/09/22 23:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
DRV:[b]64bit:[/b] - [2010/09/20 10:53:11 | 000,230,352 | ---- | M] (TrueCrypt Foundation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\truecrypt.sys -- (truecrypt)
DRV:[b]64bit:[/b] - [2010/09/17 21:41:23 | 000,013,920 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SWDUMon.sys -- (SWDUMon)
DRV:[b]64bit:[/b] - [2010/07/15 08:44:20 | 000,016,776 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\epmntdrv.sys -- (epmntdrv)
DRV:[b]64bit:[/b] - [2010/07/15 08:44:20 | 000,009,096 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\EuGdiDrv.sys -- (EuGdiDrv)
DRV:[b]64bit:[/b] - [2010/02/26 13:33:40 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64j.sys -- (UsbserFilt)
DRV:[b]64bit:[/b] - [2010/02/26 13:33:24 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
DRV:[b]64bit:[/b] - [2010/02/26 13:33:22 | 000,025,088 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdcx64)
DRV:[b]64bit:[/b] - [2010/02/26 13:33:22 | 000,019,456 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcdx64)
DRV:[b]64bit:[/b] - [2010/02/26 13:21:22 | 000,173,056 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdnsux64.sys -- (nmwcdnsux64)
DRV:[b]64bit:[/b] - [2010/02/26 13:21:20 | 000,012,288 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdnsucx64.sys -- (nmwcdnsucx64)
DRV:[b]64bit:[/b] - [2009/12/07 08:49:18 | 000,018,176 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EnumProcessesDriver.sys -- (EnumProcessesDriver)
DRV:[b]64bit:[/b] - [2009/10/13 20:16:40 | 000,409,624 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:[b]64bit:[/b] - [2009/10/05 15:34:00 | 001,542,656 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:[b]64bit:[/b] - [2009/09/02 04:54:20 | 007,369,728 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2009/09/02 02:58:08 | 000,225,280 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV:[b]64bit:[/b] - [2009/08/21 10:18:16 | 002,978,296 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX)
DRV:[b]64bit:[/b] - [2009/08/13 07:38:24 | 000,029,184 | ---- | M] (CSR, plc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcp.sys -- (BthAvrcp)
DRV:[b]64bit:[/b] - [2009/07/27 08:04:36 | 000,058,880 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C) NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20)
DRV:[b]64bit:[/b] - [2009/07/14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2009/07/14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2009/07/14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009/07/14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009/07/14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2009/07/14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009/07/14 01:06:32 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:[b]64bit:[/b] - [2009/06/15 11:03:40 | 000,245,296 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService)
DRV:[b]64bit:[/b] - [2009/06/10 21:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:[b]64bit:[/b] - [2009/06/10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009/06/10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009/06/10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009/06/10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009/06/02 12:15:30 | 000,060,464 | ---- | M] (Egis Technology Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDVDisk.sys -- (mwlPSDVDisk)
DRV:[b]64bit:[/b] - [2009/06/02 12:15:30 | 000,022,576 | ---- | M] (Egis Technology Inc.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDFilter.sys -- (mwlPSDFilter)
DRV:[b]64bit:[/b] - [2009/06/02 12:15:30 | 000,020,016 | ---- | M] (Egis Technology Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDNserv.sys -- (mwlPSDNServ)
DRV:[b]64bit:[/b] - [2009/05/05 09:46:08 | 000,018,432 | ---- | M] (NewTech Infosystems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NTIDrvr.sys -- (NTIDrvr)
DRV:[b]64bit:[/b] - [2009/05/05 09:46:08 | 000,016,896 | ---- | M] (NewTech Infosystems Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UBHelper.sys -- (UBHelper)
DRV:[b]64bit:[/b] - [2008/08/28 12:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
DRV:[b]64bit:[/b] - [2008/02/22 17:54:00 | 000,019,496 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GearAspiWDM)
DRV:[b]64bit:[/b] - [2007/01/04 12:47:10 | 000,071,832 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\e4ldrx64.sys -- (E4LOADER) General Purpose USB Driver (e4ldrx64.sys)
DRV:[b]64bit:[/b] - [2007/01/04 12:46:30 | 000,146,968 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\e4usbawx64.sys -- (e4usbaw)
DRV:[b]64bit:[/b] - [2000/01/01 01:00:00 | 000,021,504 | ---- | M] ((Standard mouse types)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Amps2x64.sys -- (Amps2prt)
DRV:[b]64bit:[/b] - [2000/01/01 01:00:00 | 000,017,920 | ---- | M] (A4Tech Co.,Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Amusbx64.sys -- (Amusbprt)
DRV:[b]64bit:[/b] - [2000/01/01 01:00:00 | 000,012,288 | ---- | M] ((Standard mouse types)) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\Amfltx64.sys -- (Amfilter)
DRV - [2010/07/15 08:44:20 | 000,014,216 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\epmntdrv.sys -- (epmntdrv)
DRV - [2010/07/15 08:44:20 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\EuGdiDrv.sys -- (EuGdiDrv)
DRV - [2010/04/15 08:06:36 | 000,270,720 | ---- | M] (Prayaya Electronics Co.,Ltd. ) [Kernel | Disabled | Stopped] -- C:\Windows\SysWOW64\drivers\v3core.sys -- (v3core)
DRV - [2009/09/02 02:58:08 | 000,225,280 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV - [2009/03/26 04:16:08 | 000,025,608 | ---- | M] (Dritek System Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\Drivers\DKbFltr.sys -- (DKbFltr) Dritek Keyboard Filter Driver (64-bit)
DRV - [2008/07/26 23:30:36 | 000,014,544 | ---- | M] (OpenLibSys.org) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\BatteryCare\WinRing0x64.sys -- (WinRing0_1_2_0)
DRV - [2007/01/04 12:47:10 | 000,071,832 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- C:\Windows\SysWOW64\drivers\e4ldrx64.sys -- (E4LOADER) General Purpose USB Driver (e4ldrx64.sys)
DRV - [2007/01/04 12:46:30 | 000,146,968 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\e4usbawx64.sys -- (e4usbaw)
DRV - [2004/06/03 13:28:00 | 000,022,131 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\eEye Digital Security\Retina Wireless Scanner\PCANDIS5_WIFISCAN.SYS -- (PCANDIS5_WIFISCAN.SYS)
DRV - [2002/07/17 15:20:32 | 000,084,832 | ---- | M] (Adaptec) [Kernel | Disabled | Stopped] -- C:\Windows\SysWOW64\drivers\ASPI32.SYS -- (Aspi32)
DRV - [2002/07/17 15:20:32 | 000,084,832 | ---- | M] (Adaptec) [Kernel | Disabled | Stopped] -- C:\Windows\SysWOW64\drivers\ASPI32.SYS -- (ASPI)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&m=aspire_5732z&r=27360710f655l0484z165t44l2d960
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&m=aspire_5732z&r=27360710f655l0484z165t44l2d960
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&m=aspire_5732z&r=27360710f655l0484z165t44l2d960
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.myheritage.com
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1905363675-3766184139-1272908759-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&m=aspire_5732z&r=27360710f655l0484z165t44l2d960
IE - HKU\S-1-5-21-1905363675-3766184139-1272908759-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKU\S-1-5-21-1905363675-3766184139-1272908759-1000\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} -  File not found
IE - HKU\S-1-5-21-1905363675-3766184139-1272908759-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.openintab: true
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.pl|http://www.pajacyk.pl/zlicz.php|http://www.giveawayoftheday.com"
FF - prefs.js..extensions.enabledItems: elemhidehelper@adblockplus.org:1.1
FF - prefs.js..extensions.enabledItems: en-GB@dictionaries.addons.mozilla.org:1.19.1
FF - prefs.js..extensions.enabledItems: firegestures@xuldev.org:1.6.1
FF - prefs.js..extensions.enabledItems: ietab@ip.cn:1.95.20100933
FF - prefs.js..extensions.enabledItems: imagetab@next.gen.nz:1.1
FF - prefs.js..extensions.enabledItems: ivanaffic@gmail.com:0.1
FF - prefs.js..extensions.enabledItems: locationbar2@design-noir.de:1.0.5
FF - prefs.js..extensions.enabledItems: longurlplease@darragh.curran:0.4.3
FF - prefs.js..extensions.enabledItems: moja@nk.oyama:1.2.1
FF - prefs.js..extensions.enabledItems: noia2_option@kk.noia:3.76
FF - prefs.js..extensions.enabledItems: pl@dictionaries.addons.mozilla.org:1.0.20100911
FF - prefs.js..extensions.enabledItems: SkipScreen@SkipScreen:0.5.14amo
FF - prefs.js..extensions.enabledItems: VacuumPlacesImproved@lultimouomo-gmail.com:1.2
FF - prefs.js..extensions.enabledItems: {0538E3E3-7E9B-4d49-8831-A227C80A7AD3}:2.0.2
FF - prefs.js..extensions.enabledItems: {47624dda-b77e-4feb-820a-e4f077d5d4ca}:11.0.0
FF - prefs.js..extensions.enabledItems: {561A5FBE-9761-4eb3-9182-892D82532414}:1.0
FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20100908
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.2
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: {dc572301-7619-498c-a57d-39143191b318}:0.3.8.4
FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:2.0
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20100408.6
FF - prefs.js..extensions.enabledItems: {ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}:1.4.1
FF - prefs.js..extensions.enabledItems: {9AA46F4F-4DC7-4c06-97AF-5035170633FE}:20.1.0.4
FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.6.1
FF - prefs.js..extensions.enabledItems: vtzilla@virustotal.com:1.0
FF - prefs.js..extensions.enabledItems: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}:7.3.3.42
FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:2.0.9.3
FF - prefs.js..extensions.enabledItems: {e001c731-5e37-4538-a5cb-8168736a2360}:0.9.9.63
FF - prefs.js..extensions.enabledItems: adblockpopups@jessehakanen.net:0.2.1
FF - prefs.js..extensions.enabledItems: {0b457cAA-602d-484a-8fe7-c1d894a011ba}:0.88
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: jsobrier@zscaler.com:1.5
FF - prefs.js..extensions.enabledItems: {9f08cb5a-76b1-4bcf-aff9-90e1a5d60b1e}:3.76
FF - prefs.js..network.proxy.backup.ftp: "142.150.238.13"
FF - prefs.js..network.proxy.backup.ftp_port: 3127
FF - prefs.js..network.proxy.backup.gopher: "142.150.238.13"
FF - prefs.js..network.proxy.backup.gopher_port: 3127
FF - prefs.js..network.proxy.backup.socks: "142.150.238.13"
FF - prefs.js..network.proxy.backup.socks_port: 3127
FF - prefs.js..network.proxy.backup.ssl: "142.150.238.13"
FF - prefs.js..network.proxy.backup.ssl_port: 3127
FF - prefs.js..network.proxy.ftp: "94.75.214.129"
FF - prefs.js..network.proxy.ftp_port: 3128
FF - prefs.js..network.proxy.gopher: "94.75.214.129"
FF - prefs.js..network.proxy.gopher_port: 3128
FF - prefs.js..network.proxy.http: "94.75.214.129"
FF - prefs.js..network.proxy.http_port: 3128
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.socks: "94.75.214.129"
FF - prefs.js..network.proxy.socks_port: 3128
FF - prefs.js..network.proxy.ssl: "94.75.214.129"
FF - prefs.js..network.proxy.ssl_port: 3128
 
FF - HKLM\software\mozilla\Firefox\Extensions\\{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}: C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ [2010/09/24 13:07:53 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010/12/10 14:29:50 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/01/09 10:34:03 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}: C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [2010/09/24 13:07:53 | 000,000,000 | ---D | M]
 
[2010/07/08 16:46:01 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Extensions
[2011/01/16 00:24:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions
[2010/09/24 07:27:05 | 000,000,000 | ---D | M] (Forecastfox Weather) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
[2011/01/04 19:41:26 | 000,000,000 | ---D | M] (FireShot) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}
[2010/07/08 16:47:23 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/07/08 16:47:23 | 000,000,000 | ---D | M] (Tab Mix Lite CE) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\{46922ad2-67f8-4dd7-9e1c-f72faa285925}
[2010/10/26 18:48:17 | 000,000,000 | ---D | M] (Boost for Facebook) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\{47624dda-b77e-4feb-820a-e4f077d5d4ca}
[2010/07/08 16:47:23 | 000,000,000 | ---D | M] (A-VSMART WebScanner) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\{561A5FBE-9761-4eb3-9182-892D82532414}
[2011/01/05 19:54:26 | 000,000,000 | ---D | M] (NoScript) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2010/11/15 16:47:04 | 000,000,000 | ---D | M] (ReloadEvery) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}
[2010/07/08 16:47:24 | 000,000,000 | ---D | M] (Noia 2.0 (eXtreme)) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\{9f08cb5a-76b1-4bcf-aff9-90e1a5d60b1e}
[2010/09/11 20:36:51 | 000,000,000 | ---D | M] (WOT) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2011/01/11 00:23:11 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2010/12/24 17:26:23 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010/07/08 16:47:25 | 000,000,000 | ---D | M] ("Tab Mix Plus") -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\{dc572301-7619-498c-a57d-39143191b318}
[2011/01/12 21:46:22 | 000,000,000 | ---D | M] (DownThemAll!) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2010/12/19 10:05:42 | 000,000,000 | ---D | M] ("BitDefender QuickScan") -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
[2010/07/08 16:47:25 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2010/11/18 09:27:41 | 000,000,000 | ---D | M] (FoxTab) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}
[2011/01/11 00:23:11 | 000,000,000 | ---D | M] (Adblock Plus Pop-up Addon) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\adblockpopups@jessehakanen.net
[2010/11/03 23:50:03 | 000,000,000 | ---D | M] (Element Hiding Helper for Adblock Plus) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\elemhidehelper@adblockplus.org
[2010/12/10 14:31:18 | 000,000,000 | ---D | M] (British English Dictionary) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\en-GB@dictionaries.addons.mozilla.org
[2011/01/02 18:37:03 | 000,000,000 | ---D | M] (FireGestures) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\firegestures@xuldev.org
[2010/08/19 22:27:02 | 000,000,000 | ---D | M] (FireTorrent) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\firetorrent@radicalsoft.com
[2010/11/25 06:06:34 | 000,000,000 | ---D | M] (IE Tab Plus) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\ietab@ip.cn
[2010/07/08 16:47:21 | 000,000,000 | ---D | M] (Open Image In New Tab) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\imagetab@next.gen.nz
[2010/07/08 16:47:21 | 000,000,000 | ---D | M] (silverlighter) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\ivanaffic@gmail.com
[2010/12/18 15:13:25 | 000,000,000 | ---D | M] ("BlackSheep") -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\jsobrier@zscaler.com
[2010/07/08 16:47:22 | 000,000,000 | ---D | M] (Locationbar²) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\locationbar2@design-noir.de
[2010/07/08 16:47:22 | 000,000,000 | ---D | M] (Long URL Please) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\longurlplease@darragh.curran
[2010/07/08 16:47:22 | 000,000,000 | ---D | M] (Moja NK!) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\moja@nk.oyama
[2010/07/08 16:47:22 | 000,000,000 | ---D | M] (Next Tab) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\nexttab@prodizy.livejournal.com
[2010/07/08 16:47:22 | 000,000,000 | ---D | M] (Noia 2.0 eXtreme OPT) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\noia2_option@kk.noia
[2010/09/11 20:36:51 | 000,000,000 | ---D | M] (Personas) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\personas@christopher.beard
[2010/09/11 20:36:51 | 000,000,000 | ---D | M] (Polski slownik poprawnej pisowni) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\pl@dictionaries.addons.mozilla.org
[2010/11/12 14:01:31 | 000,000,000 | ---D | M] (SkipScreen) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\SkipScreen@SkipScreen
[2011/01/14 08:40:28 | 000,000,000 | ---D | M] (Vacuum Places Improved) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\VacuumPlacesImproved@lultimouomo-gmail.com
[2010/08/11 06:08:33 | 000,000,000 | ---D | M] (VTzilla) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\lyer26k3.default\extensions\vtzilla@virustotal.com
[2009/07/02 22:58:50 | 000,005,022 | ---- | M] () -- C:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\lyer26k3.default\searchplugins\all-the-internet.xml
[2011/01/12 20:25:23 | 000,001,146 | ---- | M] () -- C:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\lyer26k3.default\searchplugins\facebook.xml
[2009/08/15 18:43:52 | 000,001,786 | ---- | M] () -- C:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\lyer26k3.default\searchplugins\fakty-rmf-fm.xml
[2009/07/02 22:53:20 | 000,006,222 | ---- | M] () -- C:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\lyer26k3.default\searchplugins\filmwebpl---filmy.xml
[2011/01/09 19:45:55 | 000,002,446 | ---- | M] () -- C:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\lyer26k3.default\searchplugins\google-polska.xml
[2009/08/12 23:13:28 | 000,005,607 | ---- | M] () -- C:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\lyer26k3.default\searchplugins\harry-potter-wiki-en.xml
[2009/08/07 16:12:06 | 000,005,620 | ---- | M] () -- C:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\lyer26k3.default\searchplugins\harry-potter-wiki-pl.xml
[2009/07/02 22:58:36 | 000,001,512 | ---- | M] () -- C:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\lyer26k3.default\searchplugins\imdb.xml
[2009/09/27 16:36:14 | 000,001,340 | ---- | M] () -- C:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\lyer26k3.default\searchplugins\wikipedia-en.xml
[2009/08/06 12:26:32 | 000,000,970 | ---- | M] () -- C:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\lyer26k3.default\searchplugins\wyszukiwanie-filmw-wideo-w-youtube.xml
[2009/08/11 13:17:18 | 000,001,714 | ---- | M] () -- C:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\lyer26k3.default\searchplugins\wyszukiwarka-prac---sciagapl.xml
[2011/01/15 22:27:25 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2010/07/19 11:00:24 | 000,000,000 | ---D | M] (G Data WebFilter) -- C:\Program Files (x86)\mozilla firefox\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170633FE}
[2010/07/28 08:25:40 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010/12/08 14:47:48 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2010/09/24 13:07:53 | 000,000,000 | ---D | M] (Firefox Synchronisation Extension) -- C:\PROGRAM FILES (X86)\NOKIA\NOKIA OVI SUITE\CONNECTORS\BOOKMARKS CONNECTOR\FIREFOXEXTENSION
[2010/12/08 14:47:08 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2009/08/03 14:07:42 | 000,373,104 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\npOGAPlugin.dll
[2010/09/14 22:29:36 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml
[2010/09/14 22:29:36 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml
[2010/09/14 22:29:36 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml
[2010/09/19 20:18:04 | 000,003,803 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\MyHeritage.xml
[2010/09/14 22:29:36 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml
[2010/09/14 22:29:36 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml
[2010/09/14 22:29:36 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2009/06/10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (G Data WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G Data\InternetSecurity\Webfilter\AVKWebIEx64.dll (G Data Software AG)
O2:[b]64bit:[/b] - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No CLSID value found.
O2 - BHO: (IE7Pro BHO) - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files (x86)\IEPro\iepro.dll (IE7Pro.com)
O2 - BHO: (G Data WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G Data\InternetSecurity\WebFilter\AvkWebIE.dll (G Data Software AG)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (no name) - AutorunsDisabled - No CLSID value found.
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (G Data WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G Data\InternetSecurity\Webfilter\AVKWebIEx64.dll (G Data Software AG)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (G Data WebFilter) - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G Data\InternetSecurity\WebFilter\AvkWebIE.dll (G Data Software AG)
O3 - HKLM\..\Toolbar: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files (x86)\IEPro\IEProRecorder.dll ()
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-1905363675-3766184139-1272908759-1000\..\Toolbar\WebBrowser: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files (x86)\IEPro\IEProRecorder.dll ()
O4:[b]64bit:[/b] - HKLM..\Run: [Acer ePower Management] C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Acer Incorporated)
O4:[b]64bit:[/b] - HKLM..\Run: [Eraser] C:\Program Files\Eraser\Eraser.exe (The Eraser Project)
O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [ProcessGovernor] C:\Program Files\Process Lasso\processgovernor.exe (Bitsum Technologies)
O4:[b]64bit:[/b] - HKLM..\Run: [ProcessLassoManagementConsole] C:\Program Files\Process Lasso\processlasso.exe (Bitsum Technologies)
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [G Data AntiVirus Tray Application] C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe (G Data Software AG)
O4 - HKLM..\Run: [GDFirewallTray] C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe (G Data Software AG)
O4 - HKLM..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1905363675-3766184139-1272908759-1000..\Run: []  File not found
O4 - HKU\S-1-5-21-1905363675-3766184139-1272908759-1000..\Run: [Zentimo xStorage Manager] C:\Program Files (x86)\Zentimo\Zentimo.exe ()
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin]  File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin]  File not found
O4 - Startup: C:\Users\Ala\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Spamihilator.lnk = C:\Program Files (x86)\Spamihilator\spamihilator.exe (Michel Krämer)
O4 - Startup: C:\Users\Piotrek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Spamihilator.lnk = C:\Program Files (x86)\Spamihilator\spamihilator.exe (Michel Krämer)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\S-1-5-21-1905363675-3766184139-1272908759-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1905363675-3766184139-1272908759-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKU\S-1-5-21-1905363675-3766184139-1272908759-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O9 - Extra Button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files (x86)\IEPro\iepro.dll (IE7Pro.com)
O9 - Extra 'Tools' menuitem : IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files (x86)\IEPro\iepro.dll (IE7Pro.com)
O9 - Extra Button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files (x86)\IEPro\iepro.dll (IE7Pro.com)
O9 - Extra 'Tools' menuitem : IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files (x86)\IEPro\iepro.dll (IE7Pro.com)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} http://cdn.scan.onecare.live.com/resource/download/scanner/pl-pl/wlscctrl2.cab (Windows Live OneCare safety scanner control)
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} http://download.microsoft.com/download/C/B/F/CBF23A2C-3E55-4664-BC5C-762780D79BA0/OGAControl.cab (Office Genuine Advantage Validation Tool)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} http://cdn.scan.onecare.live.com/resource/download/scanner/pl-pl/wlscctrl2.cab (Windows Live OneCare safety scanner control)
O16 - DPF: {45830FF9-D9E6-4F41-86ED-B266933D8E90} http://95.48.169.107:8101/RtspVaPgDec.cab (RtspVaPgCtrlNew Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Program Files\Soluto\soluto.exe /userinit) - C:\Program Files\Soluto\soluto.exe (Soluto)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O22:[b]64bit:[/b] - SharedTaskScheduler: {E31004D1-A431-41B8-826F-E902F9D95C81} - Windows DreamScene - C:\Windows\SysNative\DreamScene.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 0
O32 - AutoRun File - [2010/07/16 21:58:00 | 000,000,016 | -H-- | M] () - F:\AUTORUN.INF -- [ FAT32 ]
O32 - AutoRun File - [2010/10/21 23:31:34 | 000,000,000 | ---D | M] - F:\Autoruns -- [ FAT32 ]
O33 - MountPoints2\{422add55-a15d-11df-b6d3-705ab6253056}\Shell - "" = AutoRun
O33 - MountPoints2\{422add55-a15d-11df-b6d3-705ab6253056}\Shell\AutoRun\command - "" = E:\LaunchU3.exe -a
O33 - MountPoints2\{85d0063e-f31d-11df-a451-80086d7a0b7f}\Shell - "" = AutoRun
O33 - MountPoints2\{85d0063e-f31d-11df-a451-80086d7a0b7f}\Shell\AutoRun\command - "" = E:\EMP_UDSe.exe /autorun
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011/01/16 00:26:40 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Piotrek\Desktop\OTL.exe
[2011/01/14 18:58:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SIW
[2011/01/14 18:58:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SIW
[2011/01/14 11:27:04 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011/01/13 14:15:23 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\Process Lasso
[2011/01/13 14:14:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Lasso
[2011/01/13 14:11:59 | 000,000,000 | ---D | C] -- C:\ProgramData\ProcessLasso
[2011/01/13 14:11:21 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\ProcessLasso
[2011/01/13 14:11:20 | 000,000,000 | ---D | C] -- C:\Program Files\Process Lasso
[2011/01/13 08:58:11 | 000,000,000 | -H-D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled
[2011/01/13 07:59:27 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2011/01/12 20:39:35 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\ABBYY
[2011/01/12 20:27:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 10
[2011/01/12 20:27:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ABBYY
[2011/01/12 20:27:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ABBYY FineReader 10
[2011/01/12 20:27:15 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Local\ABBYY
[2011/01/12 20:27:15 | 000,000,000 | ---D | C] -- C:\ProgramData\ABBYY
[2011/01/12 20:24:44 | 000,000,000 | ---D | C] -- C:\Temp
[2011/01/12 20:22:28 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\crack
[2011/01/12 20:22:10 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\ABBFR100102109
[2011/01/12 11:47:00 | 001,837,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
[2011/01/12 11:47:00 | 001,170,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10warp.dll
[2011/01/12 11:47:00 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2011/01/12 11:47:00 | 000,739,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d2d1.dll
[2011/01/12 11:46:59 | 001,863,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ExplorerFrame.dll
[2011/01/12 11:46:59 | 001,544,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2011/01/12 11:46:59 | 001,495,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ExplorerFrame.dll
[2011/01/12 11:46:59 | 001,076,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DWrite.dll
[2011/01/12 11:46:59 | 000,662,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
[2011/01/12 11:46:59 | 000,470,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
[2011/01/12 11:46:59 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
[2011/01/12 11:46:59 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll
[2011/01/12 11:46:59 | 000,283,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
[2011/01/12 11:46:59 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10_1core.dll
[2011/01/12 11:46:58 | 000,258,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys
[2011/01/12 11:46:58 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsRasterService.dll
[2011/01/12 11:46:58 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll
[2011/01/12 11:46:58 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10_1.dll
[2011/01/12 11:46:58 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll
[2011/01/12 11:46:58 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsRasterService.dll
[2011/01/12 11:46:42 | 000,720,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbc32.dll
[2011/01/12 11:46:42 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbc32.dll
[2011/01/10 19:06:25 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra WebStart
[2011/01/09 19:11:33 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MetaGeek
[2011/01/09 19:11:33 | 000,000,000 | ---D | C] -- C:\Program Files\MetaGeek
[2011/01/09 18:44:16 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\eEye Digital Security
[2011/01/09 18:44:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\eEye Digital Security
[2011/01/09 18:44:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\eEye Digital Security
[2011/01/09 10:41:23 | 000,000,000 | ---D | C] -- C:\Record
[2011/01/09 10:33:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2011/01/09 10:33:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2011/01/09 10:33:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple
[2011/01/09 10:33:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update
[2011/01/08 22:56:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AoA Audio Extractor
[2011/01/08 22:55:58 | 000,086,683 | ---- | C] (Open Source Software community project) -- C:\Windows\SysWow64\pthreadGC2.dll
[2011/01/08 22:55:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AoA Audio Extractor
[2011/01/06 17:41:21 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\inkscape
[2011/01/06 17:31:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Inkscape
[2011/01/06 15:21:40 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\Desktop\Sensacje XX wieku
[2011/01/02 15:06:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G Data InternetSecurity 2011
[2011/01/02 15:05:41 | 000,049,096 | ---- | C] (G Data Software AG) -- C:\Windows\SysNative\drivers\HookCentre.sys
[2011/01/01 21:19:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Net Profiles
[2011/01/01 21:19:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Net Profiles
[2010/12/30 12:34:50 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Local\Weather forecast
[2010/12/30 12:34:44 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Local\Stay Secure
[2010/12/30 12:34:37 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Local\Google Translator
[2010/12/30 11:50:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Opera
[2010/12/28 00:06:45 | 000,198,088 | R--- | C] (Soluto LTD.) -- C:\Windows\SysNative\drivers\PCGenFAM.sys
[2010/12/28 00:06:41 | 000,000,000 | ---D | C] -- C:\Program Files\Soluto
[2010/12/28 00:06:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Soluto
[2010/12/28 00:05:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Soluto
[2010/12/27 11:05:24 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\YoWindow
[2010/12/27 11:05:24 | 000,000,000 | ---D | C] -- C:\ProgramData\YoWindow
[2010/12/27 11:05:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YoWindow
[2010/12/27 11:05:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\YoWindow
[2010/12/25 12:53:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TeamViewer
[2010/12/23 07:41:40 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\Documents\Dylematy
[2010/12/22 23:37:45 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Picasaweb Album Downloader
[2010/12/22 23:22:04 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\PicasaDownloader
[2010/12/22 23:15:47 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\PicasaDownloader
[2010/12/22 15:08:48 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\DAEMON Tools Lite
[2010/12/22 15:08:45 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2010/12/22 14:49:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AsfTools 3.1
[2010/12/22 14:49:05 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AsfTools
[2010/12/22 14:49:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AsfTools
[2010/12/22 14:33:01 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Local\Secunia PSI
[2010/12/22 14:32:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Secunia
[2010/12/21 21:55:35 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\SmartKite Software
[2010/12/21 21:54:03 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartKite Software
[2010/12/21 21:54:01 | 000,000,000 | ---D | C] -- C:\Program Files\SmartKite Software
[2010/12/21 18:59:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\What's my computer doing
[2010/12/21 18:59:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\What's my computer doing
[2010/12/19 21:38:00 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Screamer Radio
[2010/07/27 22:32:20 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\Piotrek\AppData\Roaming\pcouffin.sys
[2009/11/03 05:04:33 | 000,036,136 | ---- | C] (Oberon Media) -- C:\ProgramData\FullRemove.exe
[1 C:\Users\Piotrek\Documents\*.tmp files -> C:\Users\Piotrek\Documents\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-01-16 00:26:44 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Piotrek\Desktop\OTL.exe
[2011-01-16 00:24:41 | 000,025,469 | ---- | M] () -- C:\Users\Piotrek\Desktop\harmonogram.JPG
[2011-01-16 00:06:46 | 000,064,330 | ---- | M] () -- C:\Users\Piotrek\Desktop\Installed_Codec.htm
[2011-01-15 23:54:12 | 000,015,792 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011-01-15 23:54:12 | 000,015,792 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011-01-15 23:53:59 | 001,637,023 | ---- | M] () -- C:\Users\Piotrek\Desktop\SIW_FREEWARE_NEPTUN_20110115_234859.html
[2011-01-15 23:48:08 | 000,221,313 | ---- | M] () -- C:\Users\Piotrek\Desktop\ShellExView.html
[2011-01-15 20:53:52 | 000,000,000 | -H-- | M] () -- C:\Users\Piotrek\Documents\Default.rdp
[2011-01-15 18:37:50 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011-01-14 18:58:29 | 000,000,943 | ---- | M] () -- C:\Users\Piotrek\Desktop\SIW.lnk
[2011-01-14 10:32:10 | 000,000,284 | ---- | M] () -- C:\Windows\tasks\Process Lasso Core Engine Only.job
[2011-01-14 10:32:06 | 000,000,278 | ---- | M] () -- C:\Windows\tasks\Process Lasso Management Console (GUI).job
[2011-01-13 01:49:16 | 000,019,528 | ---- | M] () -- C:\Windows\SysNative\drivers\hitmanpro35.sys
[2011-01-12 23:05:15 | 001,582,494 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011-01-12 23:05:15 | 000,709,586 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2011-01-12 23:05:15 | 000,627,238 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011-01-12 23:05:15 | 000,139,636 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2011-01-12 23:05:15 | 000,110,622 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011-01-12 20:22:40 | 000,106,224 | ---- | M] (G Data Software) -- C:\Windows\SysNative\drivers\GRD.sys
[2011-01-09 15:37:04 | 000,194,247 | ---- | M] () -- C:\Users\Piotrek\Documents\HSM kolos 2.pdf
[2011-01-08 22:10:53 | 001,031,329 | ---- | M] () -- C:\Users\Piotrek\Desktop\Bauman Zygmunt - Socjologia.pdf
[2011-01-08 22:09:14 | 000,032,256 | ---- | M] () -- C:\Users\Piotrek\Desktop\KULTURA.doc
[2011-01-08 22:09:05 | 000,044,032 | ---- | M] () -- C:\Users\Piotrek\Desktop\świadomość społeczna.doc
[2011-01-08 22:08:55 | 000,043,008 | ---- | M] () -- C:\Users\Piotrek\Desktop\więź.doc
[2011-01-08 22:07:42 | 000,166,400 | ---- | M] () -- C:\Users\Piotrek\Desktop\Socjologia- cw.doc
[2011-01-08 22:07:39 | 000,058,880 | ---- | M] () -- C:\Users\Piotrek\Desktop\Socjologia_-_material_na_zaliczenie_cwiczen.doc
[2011-01-08 22:07:16 | 000,036,864 | ---- | M] () -- C:\Users\Piotrek\Desktop\socjo 1 temat.doc
[2011-01-08 22:07:14 | 003,908,837 | ---- | M] () -- C:\Users\Piotrek\Desktop\Sztompka_skrypt_2.pdf
[2011-01-08 22:07:04 | 000,070,877 | ---- | M] () -- C:\Users\Piotrek\Desktop\syllabus2.pdf
[2011-01-08 22:07:00 | 004,512,251 | ---- | M] () -- C:\Users\Piotrek\Desktop\Sztompka_skrypt_1.pdf
[2011-01-08 20:20:57 | 000,109,451 | ---- | M] () -- C:\Users\Piotrek\Desktop\Egzamin - zagadnienia.docx
[2011-01-06 17:47:25 | 000,002,393 | ---- | M] () -- C:\Users\Piotrek\.recently-used.xbel
[2011-01-06 13:43:01 | 000,007,644 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Resmon.ResmonCfg
[2011-01-04 16:17:46 | 000,000,352 | ---- | M] () -- C:\Windows\tasks\BatteryCareAuto.job
[2011-01-03 20:40:40 | 000,001,955 | ---- | M] () -- C:\Users\Piotrek\Desktop\Picasaweb Album Downloader.lnk
[2011-01-02 15:06:08 | 000,057,288 | ---- | M] (G Data Software AG) -- C:\Windows\SysNative\drivers\PktIcpt.sys
[2011-01-02 15:05:41 | 000,085,448 | ---- | M] (G Data Software AG) -- C:\Windows\SysNative\drivers\MiniIcpt.sys
[2011-01-02 15:05:41 | 000,049,096 | ---- | M] (G Data Software AG) -- C:\Windows\SysNative\drivers\HookCentre.sys
[2011-01-02 15:05:41 | 000,048,584 | ---- | M] (G DATA Software AG) -- C:\Windows\SysNative\drivers\gdwfpcd64.sys
[2011-01-02 15:05:41 | 000,040,392 | ---- | M] (G Data Software AG) -- C:\Windows\SysNative\drivers\GDBehave.sys
[2011/01/15 18:37:34 | 3166,134,272 | -HS- | M] () -- C:\hiberfil.sys
[2010-12-30 00:43:28 | 000,062,464 | ---- | M] () -- C:\Users\Piotrek\Desktop\goodman.doc
[2010-12-30 00:43:21 | 000,535,192 | ---- | M] () -- C:\Users\Piotrek\Desktop\tajneprzezpoufne_.zip
[2010-12-28 00:08:36 | 000,000,098 | ---- | M] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
[2010-12-25 12:53:06 | 000,001,170 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 6.lnk
[2010-12-25 12:49:02 | 003,514,656 | ---- | M] () -- C:\Users\Piotrek\Desktop\TeamViewer_Setup.exe
[2010-12-23 20:41:03 | 010,733,684 | ---- | M] () -- C:\Users\Piotrek\Desktop\Jan Narveson - Pacyfizm.pdf
[2010-12-23 07:39:54 | 002,824,871 | ---- | M] () -- C:\Users\Piotrek\Desktop\Cyberatak i cyberobrona - nowe oblicza cyberwojny.docx
[2010-12-22 15:10:56 | 000,834,544 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys
[2010-12-20 15:33:04 | 000,049,630 | ---- | M] () -- C:\Users\Piotrek\Desktop\Etyka absolutna.docx
[2010-12-19 21:37:41 | 000,000,118 | ---- | M] () -- C:\Windows\wininit.ini
[2010-12-19 19:15:23 | 000,013,452 | ---- | M] () -- C:\Users\Piotrek\Desktop\Kant - Uzasadnienie metafizyki moralności - opracowanie tekstu.rtf
[2010-12-19 11:22:33 | 000,076,288 | ---- | M] () -- C:\Users\Piotrek\Desktop\Str_'Uzasadnienia'_Kanta.doc
[2010-12-19 10:47:12 | 000,707,491 | ---- | M] () -- C:\Users\Piotrek\Desktop\Flash.pdf
[2010-12-18 16:22:21 | 000,634,999 | ---- | M] () -- C:\Users\Piotrek\Desktop\Immanuel Kant - Uzasadnienie metafizyki moralności.pdf
[2010-12-18 01:01:58 | 002,784,020 | ---- | M] () -- C:\Users\Piotrek\Desktop\Mińsk bez.pdf
[2010/12/21 22:08:14 | 000,050,737 | ---- | M] () -- C:\energy-report.html
[1 C:\Users\Piotrek\Documents\*.tmp files -> C:\Users\Piotrek\Documents\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011/01/16 00:24:41 | 000,025,469 | ---- | C] () -- C:\Users\Piotrek\Desktop\harmonogram.JPG
[2011/01/16 00:06:46 | 000,064,330 | ---- | C] () -- C:\Users\Piotrek\Desktop\Installed_Codec.htm
[2011/01/15 23:49:16 | 001,637,023 | ---- | C] () -- C:\Users\Piotrek\Desktop\SIW_FREEWARE_NEPTUN_20110115_234859.html
[2011/01/15 23:48:07 | 000,221,313 | ---- | C] () -- C:\Users\Piotrek\Desktop\ShellExView.html
[2011/01/15 20:53:52 | 000,000,000 | -H-- | C] () -- C:\Users\Piotrek\Documents\Default.rdp
[2011/01/14 18:58:29 | 000,000,943 | ---- | C] () -- C:\Users\Piotrek\Desktop\SIW.lnk
[2011/01/13 14:13:47 | 000,000,278 | ---- | C] () -- C:\Windows\tasks\Process Lasso Management Console (GUI).job
[2011/01/13 14:12:12 | 000,000,284 | ---- | C] () -- C:\Windows\tasks\Process Lasso Core Engine Only.job
[2011/01/09 15:37:01 | 000,194,247 | ---- | C] () -- C:\Users\Piotrek\Documents\HSM kolos 2.pdf
[2011/01/08 22:10:47 | 001,031,329 | ---- | C] () -- C:\Users\Piotrek\Desktop\Bauman Zygmunt - Socjologia.pdf
[2011/01/08 22:09:14 | 000,032,256 | ---- | C] () -- C:\Users\Piotrek\Desktop\KULTURA.doc
[2011/01/08 22:09:05 | 000,044,032 | ---- | C] () -- C:\Users\Piotrek\Desktop\świadomość społeczna.doc
[2011/01/08 22:08:55 | 000,043,008 | ---- | C] () -- C:\Users\Piotrek\Desktop\więź.doc
[2011/01/08 22:07:42 | 000,166,400 | ---- | C] () -- C:\Users\Piotrek\Desktop\Socjologia- cw.doc
[2011/01/08 22:07:39 | 000,058,880 | ---- | C] () -- C:\Users\Piotrek\Desktop\Socjologia_-_material_na_zaliczenie_cwiczen.doc
[2011/01/08 22:07:16 | 000,036,864 | ---- | C] () -- C:\Users\Piotrek\Desktop\socjo 1 temat.doc
[2011/01/08 22:07:04 | 000,070,877 | ---- | C] () -- C:\Users\Piotrek\Desktop\syllabus2.pdf
[2011/01/08 22:06:19 | 003,908,837 | ---- | C] () -- C:\Users\Piotrek\Desktop\Sztompka_skrypt_2.pdf
[2011/01/08 22:06:08 | 004,512,251 | ---- | C] () -- C:\Users\Piotrek\Desktop\Sztompka_skrypt_1.pdf
[2011/01/06 23:59:41 | 000,109,451 | ---- | C] () -- C:\Users\Piotrek\Desktop\Egzamin - zagadnienia.docx
[2011/01/06 17:47:25 | 000,002,393 | ---- | C] () -- C:\Users\Piotrek\.recently-used.xbel
[2011/01/04 16:16:56 | 000,000,352 | ---- | C] () -- C:\Windows\tasks\BatteryCareAuto.job
[2011/01/03 20:40:40 | 000,001,955 | ---- | C] () -- C:\Users\Piotrek\Desktop\Picasaweb Album Downloader.lnk
[2011/01/02 11:33:44 | 000,000,063 | ---- | C] () -- C:\Users\Piotrek\Hasło_domnet.txt
[2010/12/30 00:43:29 | 000,062,464 | ---- | C] () -- C:\Users\Piotrek\Desktop\goodman.doc
[2010/12/30 00:43:23 | 000,535,192 | ---- | C] () -- C:\Users\Piotrek\Desktop\tajneprzezpoufne_.zip
[2010/12/28 00:08:36 | 000,000,098 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
[2010/12/25 12:53:06 | 000,001,170 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer 6.lnk
[2010/12/23 20:41:05 | 010,733,684 | ---- | C] () -- C:\Users\Piotrek\Desktop\Jan Narveson - Pacyfizm.pdf
[2010/12/23 07:38:46 | 002,824,871 | ---- | C] () -- C:\Users\Piotrek\Desktop\Cyberatak i cyberobrona - nowe oblicza cyberwojny.docx
[2010/12/22 23:28:27 | 000,000,824 | ---- | C] () -- C:\Users\Piotrek\Desktop\picasawebalbumdownloader.jnlp
[2010/12/22 15:10:56 | 000,834,544 | ---- | C] () -- C:\Windows\SysNative\drivers\sptd.sys
[2010/12/21 22:08:14 | 000,050,737 | ---- | C] () -- C:\energy-report.html
[2010/12/20 15:33:03 | 000,049,630 | ---- | C] () -- C:\Users\Piotrek\Desktop\Etyka absolutna.docx
[2010/12/19 21:37:41 | 000,000,118 | ---- | C] () -- C:\Windows\wininit.ini
[2010/12/19 19:15:24 | 000,013,452 | ---- | C] () -- C:\Users\Piotrek\Desktop\Kant - Uzasadnienie metafizyki moralności - opracowanie tekstu.rtf
[2010/12/19 11:22:32 | 000,076,288 | ---- | C] () -- C:\Users\Piotrek\Desktop\Str_'Uzasadnienia'_Kanta.doc
[2010/12/19 10:47:07 | 000,707,491 | ---- | C] () -- C:\Users\Piotrek\Desktop\Flash.pdf
[2010/12/18 16:22:21 | 000,634,999 | ---- | C] () -- C:\Users\Piotrek\Desktop\Immanuel Kant - Uzasadnienie metafizyki moralności.pdf
[2010/12/18 01:01:43 | 002,784,020 | ---- | C] () -- C:\Users\Piotrek\Desktop\Mińsk bez.pdf
[2010/12/09 15:51:00 | 000,354,304 | ---- | C] () -- C:\Windows\SysWow64\pythoncom27.dll
[2010/12/09 15:51:00 | 000,110,592 | ---- | C] () -- C:\Windows\SysWow64\pywintypes27.dll
[2010/12/09 15:17:07 | 000,000,078 | ---- | C] () -- C:\Windows\winDecrypt.INI
[2010/12/08 12:56:12 | 000,014,848 | ---- | C] () -- C:\Windows\SysWow64\EuEpmGdi.dll
[2010/12/08 12:56:11 | 000,014,216 | ---- | C] () -- C:\Windows\SysWow64\epmntdrv.sys
[2010/12/08 12:56:11 | 000,008,456 | ---- | C] () -- C:\Windows\SysWow64\EuGdiDrv.sys
[2010/11/22 17:13:52 | 000,031,567 | ---- | C] () -- C:\Windows\maxlink.ini
[2010/11/09 23:37:45 | 000,000,540 | ---- | C] () -- C:\Users\Piotrek\AppData\Roaming\AutoGK.ini
[2010/11/09 11:42:53 | 000,000,437 | ---- | C] () -- C:\ProgramData\xsupplicant.conf
[2010/10/13 12:06:40 | 000,000,404 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2010/10/13 12:06:40 | 000,000,027 | ---- | C] () -- C:\Windows\BRPP2KA.INI
[2010/10/02 14:12:42 | 000,000,752 | ---- | C] () -- C:\Windows\adiras.ini
[2010/10/02 14:12:42 | 000,000,169 | ---- | C] () -- C:\Windows\adidsl.ini
[2010/10/02 14:12:42 | 000,000,021 | ---- | C] () -- C:\Windows\Fast800.ini
[2010/09/28 13:50:32 | 000,000,032 | ---- | C] () -- C:\Windows\CD_Start.INI
[2010/09/17 21:44:45 | 000,032,768 | ---- | C] () -- C:\Windows\SysWow64\Amhooker.dll
[2010/08/31 06:22:01 | 000,000,917 | ---- | C] () -- C:\Windows\GTA-SA_Trn_Settings.ini
[2010/08/28 17:35:36 | 000,003,584 | ---- | C] () -- C:\Users\Piotrek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/08/18 22:13:09 | 000,350,720 | ---- | C] () -- C:\Program Files (x86)\hjsplit.exe
[2010/08/03 10:16:20 | 001,970,176 | ---- | C] () -- C:\Windows\SysWow64\d3dx9.dll
[2010/07/27 22:37:22 | 000,001,189 | ---- | C] () -- C:\Users\Piotrek\AppData\Roaming\vso_ts_preview.xml
[2010/07/27 22:32:46 | 000,000,074 | ---- | C] () -- C:\Users\Piotrek\AppData\Roaming\pcouffin.log
[2010/07/27 22:32:20 | 000,099,384 | ---- | C] () -- C:\Users\Piotrek\AppData\Roaming\inst.exe
[2010/07/27 22:32:20 | 000,007,859 | ---- | C] () -- C:\Users\Piotrek\AppData\Roaming\pcouffin.cat
[2010/07/27 22:32:20 | 000,001,167 | ---- | C] () -- C:\Users\Piotrek\AppData\Roaming\pcouffin.inf
[2010/07/16 14:30:17 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010/07/14 09:35:26 | 000,009,093 | ---- | C] () -- C:\Users\Piotrek\AppData\Local\MyWinLockerInstaller.txt-20100714.log
[2010/07/14 07:45:28 | 000,000,266 | ---- | C] () -- C:\Windows\iepreview.ini
[2010/07/11 19:58:40 | 000,023,350 | ---- | C] () -- C:\Users\Piotrek\AppData\Local\MyWinLockerInstaller.txt-20100711.log
[2010/07/11 18:14:07 | 001,584,426 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010/07/09 17:09:57 | 000,007,644 | ---- | C] () -- C:\Users\Piotrek\AppData\Local\Resmon.ResmonCfg
[2010/07/08 22:08:03 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2010/07/08 22:07:58 | 002,995,200 | ---- | C] () -- C:\Windows\SysWow64\x264vfw.dll
[2010/07/08 22:07:57 | 000,761,856 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2010/07/08 22:07:57 | 000,159,744 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2010/07/08 22:07:54 | 000,108,032 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2010/01/31 07:43:11 | 000,626,688 | ---- | C] () -- C:\Windows\Image.dll
[2010/01/31 07:43:11 | 000,000,323 | ---- | C] () -- C:\Windows\PidList.ini
[2009/11/03 05:32:49 | 000,008,415 | ---- | C] () -- C:\ProgramData\ArcadeDeluxe3.log
[2009/11/03 05:04:12 | 000,192,484 | ---- | C] () -- C:\Program Files (x86)\Common Files\Acer GameZone online.ico
[2009/08/03 14:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\SysWow64\OGACheckControl.DLL
[2009/07/14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2005/02/05 20:46:00 | 000,004,608 | ---- | C] () -- C:\Windows\fgexec.dll
[2002/10/15 23:54:04 | 000,153,088 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-08-08 14:32:27 | 000,000,000 | ---D | M] -- C:\Users\Ala\AppData\Roaming\Spamihilator
[2010-07-08 11:54:54 | 000,000,000 | -HSD | M] -- C:\Users\Piotrek\AppData\Roaming\.#
[2010-07-09 04:51:25 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\.wtw
[2010-08-02 21:15:21 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\ArcaVirMicroScan
[2010-11-20 23:43:08 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Ashampoo
[2010-11-14 12:08:17 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Aston2
[2010-12-27 11:39:18 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Audacity
[2010-12-14 00:45:31 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\BatteryCare
[2010-09-11 19:25:12 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\BESTplayer
[2010-07-11 19:31:35 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Canneverbe Limited
[2010-08-28 14:08:25 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\ChomikBox
[2010-12-23 19:53:28 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\DAEMON Tools Lite
[2010-07-26 05:25:38 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Digiarty
[2010-11-24 22:58:34 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\DriveHQ
[2010-09-09 09:16:09 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\e-Kiosk Reader
[2010-12-09 16:07:44 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\FileOpen
[2010-07-12 21:22:10 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\FireShot
[2010-07-08 11:44:06 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\GameConsole
[2010-07-08 14:00:01 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\GrabPro
[2010-09-03 17:22:30 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Gua35ghj.eecdl.pl.A306CB2FB6ED14691B8E8B10E0C78A76AC2BF0A9.1
[2010-12-04 21:05:39 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\ImgBurn
[2011-01-06 17:41:22 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\inkscape
[2010-08-13 20:46:34 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\LogoManager
[2010-07-08 21:37:17 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Maxthon2
[2010-12-04 10:17:02 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\mediAvatar
[2010-07-08 14:08:18 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\MiniDm
[2010-12-08 12:49:58 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\MOBILedit
[2010-07-08 21:37:32 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\MxBoost
[2010-10-17 23:23:20 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Nokia
[2010-10-17 23:23:23 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Nokia Ovi Suite
[2010-12-30 12:39:27 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Opera
[2010-09-24 13:32:02 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\PC Suite
[2010-11-28 17:48:13 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\PDFCreator
[2010-10-14 19:24:52 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\PhotoScape
[2010-12-22 23:22:05 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\PicasaDownloader
[2010-09-18 20:00:27 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\pl-soft
[2011-01-13 14:12:13 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\ProcessLasso
[2010-12-19 10:38:41 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\QuickScan
[2010-11-22 17:18:54 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\ScanSoft
[2010-12-21 21:55:35 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\SmartKite Software
[2011-01-16 00:47:12 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Spamihilator
[2010-08-02 09:22:49 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\SumatraPDF
[2010-12-25 14:34:41 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\TeamViewer
[2010-08-13 21:01:10 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Thinstall
[2011-01-08 15:26:02 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\TransEngPol4
[2011-01-11 14:37:46 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\TrueCrypt
[2010-12-19 21:42:14 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\uTorrent
[2010-12-04 20:55:33 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Vso
[2010-12-27 11:09:44 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\YoWindow
[2010-12-04 10:49:44 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\yWorks
[2010-11-03 10:31:49 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Zentimo
[2011-01-04 16:17:46 | 000,000,352 | ---- | M] () -- C:\Windows\Tasks\BatteryCareAuto.job
[2011-01-14 10:32:10 | 000,000,284 | ---- | M] () -- C:\Windows\Tasks\Process Lasso Core Engine Only.job
[2011-01-14 10:32:06 | 000,000,278 | ---- | M] () -- C:\Windows\Tasks\Process Lasso Management Console (GUI).job
[2011-01-16 00:24:25 | 000,032,530 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2010-11-09 12:14:23 | 000,000,222 | ---- | M] () -- C:\Windows\Tasks\SecureW2 Task.job
[2010-11-29 17:22:49 | 000,000,198 | ---- | M] () -- C:\Windows\Tasks\{2E8093F7-9A9A-4FF0-9A67-DBCD7182F2D3}.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 164 bytes -> C:\Users\Piotrek\Desktop\ECDL.jpeg:3or4kl4x13tuuug3Byamue2s4b
@Alternate Data Stream - 164 bytes -> C:\Users\Piotrek\Desktop\Domofon.jpeg:3or4kl4x13tuuug3Byamue2s4b
@Alternate Data Stream - 146 bytes -> C:\ProgramData\Temp:AB689DEA
@Alternate Data Stream - 123 bytes -> C:\ProgramData\Temp:8CE646EE
@Alternate Data Stream - 121 bytes -> C:\ProgramData\Temp:0B9176C0

< End of report >