OTL logfile created on: 2013-02-16 15:42:11 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Soku\Downloads 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 2,51 Gb Available Physical Memory | 62,82% Memory free 8,00 Gb Paging File | 6,57 Gb Available in Paging File | 82,14% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 122,30 Gb Total Space | 3,91 Gb Free Space | 3,19% Space Free | Partition Type: NTFS Drive D: | 78,13 Gb Total Space | 9,92 Gb Free Space | 12,69% Space Free | Partition Type: NTFS Drive E: | 97,65 Gb Total Space | 23,52 Gb Free Space | 24,09% Space Free | Partition Type: NTFS Computer Name: SOKU-KOMPUTER | User Name: Soku | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2013-02-16 14:42:01 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Soku\Downloads\OTL.exe PRC - [2013-02-07 22:53:16 | 001,808,240 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_149.exe PRC - [2013-02-06 16:20:13 | 000,917,400 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2013-01-25 23:04:32 | 005,639,448 | ---- | M] (Pokki) -- C:\Users\Soku\AppData\Local\Pokki\v0.260.10.204\pokki.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2013-02-07 22:53:16 | 014,586,736 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_149.dll MOD - [2013-02-06 16:20:13 | 003,023,256 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2013-01-25 23:01:40 | 000,061,952 | ---- | M] () -- C:\Users\Soku\AppData\Local\Pokki\v0.260.10.204\chrome.dll MOD - [2012-12-05 23:23:48 | 000,184,846 | ---- | M] () -- C:\Users\Soku\AppData\Local\Pokki\v0.260.10.204\avformat-53.dll MOD - [2012-12-05 23:23:44 | 001,093,646 | ---- | M] () -- C:\Users\Soku\AppData\Local\Pokki\v0.260.10.204\avcodec-53.dll MOD - [2012-12-05 23:23:44 | 000,117,262 | ---- | M] () -- C:\Users\Soku\AppData\Local\Pokki\v0.260.10.204\avutil-51.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2012-12-19 20:56:00 | 000,240,640 | ---- | M] (AMD) [Auto | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2013-02-07 22:53:17 | 000,251,248 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2013-02-06 16:20:13 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2013-01-08 12:55:20 | 000,161,536 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012-12-18 15:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2012-12-14 16:49:28 | 000,682,344 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2012-12-14 16:49:28 | 000,398,184 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler) SRV - [2012-11-14 22:04:15 | 000,036,640 | ---- | M] (Panda Security, S.L.) [Auto | Stopped] -- C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUAService.exe -- (PSUAService) SRV - [2012-11-12 14:45:41 | 000,140,064 | ---- | M] (Panda Security, S.L.) [Auto | Stopped] -- C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSANHost.exe -- (NanoServiceMain) SRV - [2012-10-02 12:13:44 | 003,064,000 | ---- | M] (Skype Technologies S.A.) [Auto | Stopped] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service) SRV - [2012-01-18 13:38:28 | 000,155,320 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion) SRV - [2011-11-25 16:32:36 | 000,687,400 | ---- | M] (Nero AG) [Auto | Stopped] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate) SRV - [2011-08-19 09:26:50 | 000,450,848 | ---- | M] (Logitech Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe -- (UMVPFSrv) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010-02-19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2007-05-31 16:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2007-05-31 16:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2012-12-26 13:34:10 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV:[b]64bit:[/b] - [2012-12-19 21:48:48 | 011,278,336 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2012-12-19 20:32:54 | 000,552,960 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2012-12-14 16:49:28 | 000,024,176 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector) DRV:[b]64bit:[/b] - [2012-11-09 19:01:13 | 000,204,328 | ---- | M] (Panda Security, S.L.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\PSINKNC.sys -- (PSINKNC) DRV:[b]64bit:[/b] - [2012-11-09 19:01:13 | 000,133,160 | ---- | M] (Panda Security, S.L.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\PSINProt.sys -- (PSINProt) DRV:[b]64bit:[/b] - [2012-11-09 19:01:13 | 000,123,944 | ---- | M] (Panda Security, S.L.) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\PSINProc.sys -- (PSINProc) DRV:[b]64bit:[/b] - [2012-11-09 19:01:12 | 000,167,976 | ---- | M] (Panda Security, S.L.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\PSINAflt.sys -- (PSINAflt) DRV:[b]64bit:[/b] - [2012-11-09 19:01:12 | 000,119,848 | ---- | M] (Panda Security, S.L.) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\PSINFile.sys -- (PSINFile) DRV:[b]64bit:[/b] - [2012-11-09 11:24:23 | 000,291,368 | ---- | M] (Panda Security, S.L.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\NNSStrm.sys -- (NNSSTRM) DRV:[b]64bit:[/b] - [2012-11-09 11:24:23 | 000,148,520 | ---- | M] (Panda Security, S.L.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\NNStlsc.sys -- (NNSTLSC) DRV:[b]64bit:[/b] - [2012-11-09 11:24:22 | 000,150,568 | ---- | M] (Panda Security, S.L.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\NNSPrv.sys -- (NNSPRV) DRV:[b]64bit:[/b] - [2012-11-09 11:24:22 | 000,135,208 | ---- | M] (Panda Security, S.L.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\NNSSmtp.sys -- (NNSSMTP) DRV:[b]64bit:[/b] - [2012-11-09 11:24:21 | 000,397,864 | ---- | M] (Panda Security, S.L.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\NNSProt.sys -- (NNSPROT) DRV:[b]64bit:[/b] - [2012-11-09 11:24:20 | 000,139,304 | ---- | M] (Panda Security, S.L.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\NNSPop3.sys -- (NNSPOP3) DRV:[b]64bit:[/b] - [2012-11-09 11:24:20 | 000,083,496 | ---- | M] (Panda Security, S.L.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\NNSPihsw.sys -- (NNSPIHSW) DRV:[b]64bit:[/b] - [2012-11-09 11:24:19 | 000,154,152 | ---- | M] (Panda Security, S.L.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\NNSIds.sys -- (NNSIDS) DRV:[b]64bit:[/b] - [2012-11-09 11:24:19 | 000,134,696 | ---- | M] (Panda Security, S.L.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\NNSpicc.sys -- (NNSPICC) DRV:[b]64bit:[/b] - [2012-11-09 11:24:18 | 000,136,232 | ---- | M] (Panda Security, S.L.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\NNSHttp.sys -- (NNSHTTP) DRV:[b]64bit:[/b] - [2012-11-09 11:24:18 | 000,127,016 | ---- | M] (Panda Security, S.L.) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\NNSAlpc.sys -- (NNSALPC) DRV:[b]64bit:[/b] - [2012-11-07 09:00:05 | 000,058,360 | ---- | M] (Panda Security, S.L.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\PSKMAD.sys -- (PSKMAD) DRV:[b]64bit:[/b] - [2012-11-06 12:11:52 | 000,096,256 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService) DRV:[b]64bit:[/b] - [2012-10-22 12:09:23 | 000,033,320 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NNSNAHSL.sys -- (NNSNAHSL) DRV:[b]64bit:[/b] - [2012-03-01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2011-12-19 13:45:22 | 000,146,736 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp) DRV:[b]64bit:[/b] - [2011-08-19 09:27:30 | 004,869,024 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvuvc64.sys -- (LVUVC64) DRV:[b]64bit:[/b] - [2011-08-19 09:27:30 | 000,351,136 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (LVRS64) DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2010-11-20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-11-20 12:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010-11-20 12:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 02:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (1394hub) DRV:[b]64bit:[/b] - [2009-07-14 01:09:50 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx) DRV:[b]64bit:[/b] - [2009-06-20 03:09:57 | 000,054,272 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1E62x64.sys -- (L1E) DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2005-03-29 01:30:38 | 000,008,192 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor) DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{C70EE4D8-5B33-490A-AAEB-E97512ADED68}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3341388666-984988990-2067630386-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?l=dis&o=101916 IE - HKU\S-1-5-21-3341388666-984988990-2067630386-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) IE - HKU\S-1-5-21-3341388666-984988990-2067630386-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-3341388666-984988990-2067630386-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://startsear.ch/?aff=2&src=sp&cf=64eb828c-2373-11e1-a0f4-0023543c685f&q={searchTerms} IE - HKU\S-1-5-21-3341388666-984988990-2067630386-1000\..\SearchScopes\{BB8FF9C2-EC8D-4123-BD1F-89DADAA21238}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=NRO&o=101913&src=kw&q={searchTerms}&locale=en_US&apn_ptnrs=EW&apn_dtid=YYYYYYYYPL&apn_uid=674BAA0F-DF62-45C2-813E-E1EC2874B464&apn_sauid=740CF9E1-C607-456C-B669-3DEBE6E34AF7 IE - HKU\S-1-5-21-3341388666-984988990-2067630386-1000\..\SearchScopes\{C70EE4D8-5B33-490A-AAEB-E97512ADED68}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-3341388666-984988990-2067630386-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "Ask.com" FF - prefs.js..browser.search.defaultenginename: "Ask.com" FF - prefs.js..browser.search.order.1: "Ask.com" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.startup.homepage: "about:home" FF - prefs.js..extensions.enabledAddons: real%40debrid:2.3a FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:18.0.2 FF - prefs.js..keyword.URL: "http://startsear.ch/?aff=2&src=sp&cf=64eb828c-2373-11e1-a0f4-0023543c685f&q=" FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_149.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_149.dll () FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00: C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.) FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Soku\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Soku\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013-02-06 16:20:13 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013-02-16 10:17:41 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 18.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013-02-06 16:20:13 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 18.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013-02-16 10:17:41 | 000,000,000 | ---D | M] [2011-11-24 18:42:09 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Soku\AppData\Roaming\mozilla\Extensions [2013-02-14 17:10:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Soku\AppData\Roaming\mozilla\Firefox\Profiles\o0c15kn3.default\extensions [2012-03-22 21:51:18 | 000,000,000 | ---D | M] (Real-Debrid - Plugin) -- C:\Users\Soku\AppData\Roaming\mozilla\Firefox\Profiles\o0c15kn3.default\extensions\real@debrid [2012-12-17 23:45:14 | 000,000,000 | ---D | M] (Nero Toolbar) -- C:\Users\Soku\AppData\Roaming\mozilla\Firefox\Profiles\o0c15kn3.default\extensions\toolbar@ask.com [2013-02-14 17:10:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Soku\AppData\Roaming\mozilla\Firefox\Profiles\o0c15kn3.default\extensions\trash [2011-12-21 17:58:11 | 000,010,043 | ---- | M] () (No name found) -- C:\Users\Soku\AppData\Roaming\mozilla\firefox\profiles\o0c15kn3.default\extensions\IplextoALL@ALLPlayer.org.xpi [2013-02-14 17:10:38 | 000,817,280 | ---- | M] () (No name found) -- C:\Users\Soku\AppData\Roaming\mozilla\firefox\profiles\o0c15kn3.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-01-31 21:11:32 | 000,817,973 | ---- | M] () (No name found) -- C:\Users\Soku\AppData\Roaming\mozilla\firefox\profiles\o0c15kn3.default\extensions\trash\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-12-17 23:45:14 | 000,002,325 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\mozilla\firefox\profiles\o0c15kn3.default\searchplugins\askcom.xml [2011-07-11 19:04:02 | 000,000,633 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\mozilla\firefox\profiles\o0c15kn3.default\searchplugins\startsear.xml [2013-02-06 16:20:10 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2013-02-06 16:20:10 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-02-06 16:20:10 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA} [2013-02-06 16:20:13 | 000,262,552 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2011-10-27 14:45:50 | 000,083,456 | ---- | M] (LiveVDO ) -- C:\Program Files (x86)\mozilla firefox\plugins\npvsharetvplg.dll [2012-01-05 23:53:48 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2012-01-05 23:53:48 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2012-01-05 23:53:48 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2012-01-05 23:53:48 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2012-01-05 23:53:48 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-01-05 23:53:48 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - homepage: http://www.google.com/ CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter} CHR - homepage: http://www.google.com/ CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Soku\AppData\Local\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Soku\AppData\Local\Google\Chrome\Application\24.0.1312.57\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Soku\AppData\Local\Google\Chrome\Application\24.0.1312.57\gcswf32.dll CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Soku\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: Java Deployment Toolkit 6.0.310.5 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll CHR - plugin: LiveVDO plug-in (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npvsharetvplg.dll CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\npctrl.dll CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll CHR - plugin: Media Go Detector (Enabled) = C:\Program Files (x86)\Sony\Media Go\npmediago.dll CHR - plugin: PlayStation(R)Network Downloader Check Plug-in (Enabled) = C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll CHR - plugin: Google Update (Enabled) = C:\Users\Soku\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - Extension: YouTube = C:\Users\Soku\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\ CHR - Extension: Szukaj w Google = C:\Users\Soku\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\ CHR - Extension: Skype Click to Call = C:\Users\Soku\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.3.0.11079_0\ CHR - Extension: Gmail = C:\Users\Soku\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\ O1 HOSTS File: ([2013-02-16 11:33:18 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation) O2:[b]64bit:[/b] - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\PROGRA~2\ALLPLA~1\Iplex\IPLEXT~1.DLL (ALLCinema Ltd.) O3 - HKLM\..\Toolbar: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) O4:[b]64bit:[/b] - HKLM..\Run: [Windows Mobile Device Center] C:\Windows\WindowsMobile\wmdc.exe (Microsoft Corporation) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin File not found O4 - HKLM..\Run: [ApnUpdater] C:\Program Files (x86)\Ask.com\Updater\Updater.exe (Ask) O4 - HKLM..\Run: [PSUAMain] C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUAMain.exe (Panda Security, S.L.) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) O4 - HKU\S-1-5-21-3341388666-984988990-2067630386-1000..\Run: [ALLUpdate] C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe () O4 - HKU\S-1-5-21-3341388666-984988990-2067630386-1000..\Run: [F.lux] C:\Users\Soku\Local Settings\Apps\F.lux\flux.exe () O4 - HKU\S-1-5-21-3341388666-984988990-2067630386-1000..\Run: [HydraVisionDesktopManager] C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe (AMD) O4 - HKU\S-1-5-21-3341388666-984988990-2067630386-1000..\Run: [Kookos] C:\Users\Soku\AppData\Local\Kookos\kookos.exe () O4 - HKU\S-1-5-21-3341388666-984988990-2067630386-1000..\Run: [Pokki] C:\Users\Soku\AppData\Local\Pokki\v0.260.10.204\pokki.exe (Pokki) O4 - HKU\S-1-5-21-3341388666-984988990-2067630386-1000..\Run: [Sony PC Companion] C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe (Sony) O4 - Startup: C:\Users\Soku\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameRanger.lnk = C:\Users\Soku\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-3341388666-984988990-2067630386-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-3341388666-984988990-2067630386-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found O8:[b]64bit:[/b] - Extra context menu item: Wyślij &do programu OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Wyślij &do programu OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found O9:[b]64bit:[/b] - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_34-windows-i586.cab (Reg Error: Value error.) O16 - DPF: {CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_34-windows-i586.cab (Java Plug-in 1.6.0_34) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_34-windows-i586.cab (Java Plug-in 10.9.2) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B79FA6E9-EF8F-4218-914C-49A05827DC92}: DhcpNameServer = 192.168.1.1 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\SysWOW64\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\SysWOW64\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2011-11-19 15:26:12 | 000,000,000 | ---- | M] () - D:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2013-02-16 13:50:40 | 000,058,360 | ---- | C] (Panda Security, S.L.) -- C:\Windows\SysNative\drivers\PSKMAD.sys [2013-02-16 13:46:05 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN [2013-02-16 13:19:52 | 000,000,000 | ---D | C] -- C:\Users\Soku\AppData\Roaming\Panda Security [2013-02-16 13:19:28 | 000,000,000 | ---D | C] -- C:\Users\Soku\AppData\Roaming\Malwarebytes [2013-02-16 13:18:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2013-02-16 13:18:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2013-02-16 13:17:59 | 000,024,176 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2013-02-16 13:17:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2013-02-16 13:17:10 | 000,000,000 | ---D | C] -- C:\Users\Soku\AppData\Local\Programs [2013-02-16 13:13:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Cloud Antivirus [2013-02-16 13:13:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Panda Security [2013-02-16 13:13:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Panda Security [2013-02-16 11:42:42 | 000,000,000 | ---D | C] -- C:\Windows\temp [2013-02-15 17:58:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2013-02-15 17:58:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype [2013-02-06 16:20:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2013-01-18 09:49:53 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI [2013-01-18 09:49:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD AVT [2013-01-18 09:49:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD APP [2013-01-18 09:49:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2013-02-16 15:38:23 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013-02-16 15:38:19 | 3220,480,000 | -HS- | M] () -- C:\hiberfil.sys [2013-02-16 15:24:35 | 000,001,054 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3341388666-984988990-2067630386-1000UA.job [2013-02-16 15:24:35 | 000,001,002 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3341388666-984988990-2067630386-1000Core.job [2013-02-16 15:24:35 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013-02-16 14:43:15 | 000,000,150 | ---- | M] () -- C:\Users\Soku\defogger_reenable [2013-02-16 13:43:59 | 004,971,272 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2013-02-16 11:33:18 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts [2013-02-16 10:41:10 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\90277.exâ [2013-02-16 10:16:13 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\13812.exâ [2013-02-16 09:49:45 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\65365.exâ [2013-02-16 09:35:39 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\94113.exâ [2013-02-15 17:58:06 | 000,002,517 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk [2013-02-15 13:21:38 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\87136.exâ [2013-02-14 15:57:20 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\74324.exâ [2013-02-14 15:44:13 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\14778.exâ [2013-02-13 23:41:37 | 000,010,128 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013-02-13 23:41:37 | 000,010,128 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013-02-13 15:44:42 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\46023.exâ [2013-02-12 13:21:44 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\92474.exâ [2013-02-11 17:04:28 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\62271.exâ [2013-02-10 09:49:39 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\72309.exâ [2013-02-09 10:16:31 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\83240.exâ [2013-02-08 15:45:51 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\89319.exâ [2013-02-07 22:53:16 | 000,697,712 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2013-02-07 22:53:16 | 000,074,096 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2013-02-07 15:41:20 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\77746.exâ [2013-02-07 07:23:10 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\39013.exâ [2013-02-06 16:04:56 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\26557.exâ [2013-02-05 21:31:47 | 001,579,422 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2013-02-05 21:31:47 | 000,707,652 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2013-02-05 21:31:47 | 000,624,946 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2013-02-05 21:31:47 | 000,140,666 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2013-02-05 21:31:47 | 000,110,584 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2013-02-05 18:56:06 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\95898.exâ [2013-02-05 18:13:22 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\97548.exâ [2013-02-05 15:42:11 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\65562.exâ [2013-02-04 17:16:10 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\43263.exâ [2013-02-03 10:51:14 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\98737.exâ [2013-02-02 09:09:51 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\95685.exâ [2013-02-01 15:56:03 | 000,002,364 | ---- | M] () -- C:\Users\Soku\Desktop\Google Chrome.lnk [2013-02-01 15:47:09 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\89047.exâ [2013-01-31 13:28:36 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\58360.exâ [2013-01-30 15:41:14 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\58474.exâ [2013-01-29 13:22:43 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\71328.exâ [2013-01-29 13:20:07 | 000,002,026 | ---- | M] () -- C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk [2013-01-28 15:46:05 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\36261.exâ [2013-01-27 10:59:31 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\33037.exâ [2013-01-26 09:47:17 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\75147.exâ [2013-01-25 09:48:41 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\58971.exâ [2013-01-24 08:54:25 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\25855.exâ [2013-01-23 13:34:18 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\71405.exâ [2013-01-23 08:20:42 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\73158.exâ [2013-01-22 07:46:43 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\47018.exâ [2013-01-21 12:02:17 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\16998.exâ [2013-01-20 10:16:38 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\23608.exâ [2013-01-19 10:54:54 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\98626.exâ [2013-01-18 09:43:09 | 006,664,704 | ---- | M] () -- C:\Users\Soku\AppData\Roaming\24277.exâ [color=#E56717]========== Files Created - No Company Name ==========[/color] [2013-02-16 14:43:14 | 000,000,150 | ---- | C] () -- C:\Users\Soku\defogger_reenable [2013-02-16 10:41:00 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\90277.exâ [2013-02-16 10:16:13 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\13812.exâ [2013-02-16 09:49:45 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\65365.exâ [2013-02-16 09:35:39 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\94113.exâ [2013-02-15 13:21:38 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\87136.exâ [2013-02-14 15:57:20 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\74324.exâ [2013-02-14 15:44:13 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\14778.exâ [2013-02-13 15:44:42 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\46023.exâ [2013-02-12 13:21:44 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\92474.exâ [2013-02-11 17:04:28 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\62271.exâ [2013-02-10 09:49:39 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\72309.exâ [2013-02-09 10:16:31 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\83240.exâ [2013-02-08 15:45:51 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\89319.exâ [2013-02-07 15:41:20 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\77746.exâ [2013-02-07 07:23:10 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\39013.exâ [2013-02-06 16:04:56 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\26557.exâ [2013-02-05 18:56:06 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\95898.exâ [2013-02-05 18:13:22 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\97548.exâ [2013-02-05 15:42:11 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\65562.exâ [2013-02-04 17:16:10 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\43263.exâ [2013-02-03 10:51:14 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\98737.exâ [2013-02-02 09:09:51 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\95685.exâ [2013-02-01 15:47:09 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\89047.exâ [2013-01-31 13:28:36 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\58360.exâ [2013-01-30 15:41:14 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\58474.exâ [2013-01-29 13:22:43 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\71328.exâ [2013-01-28 15:46:05 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\36261.exâ [2013-01-27 10:59:31 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\33037.exâ [2013-01-26 09:47:17 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\75147.exâ [2013-01-25 09:48:41 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\58971.exâ [2013-01-24 08:54:25 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\25855.exâ [2013-01-23 13:34:18 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\71405.exâ [2013-01-22 07:46:43 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\47018.exâ [2013-01-21 12:02:17 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\16998.exâ [2013-01-20 10:16:38 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\23608.exâ [2013-01-17 11:24:47 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\77648.exâ [2013-01-16 11:23:57 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\34889.exâ [2013-01-15 17:03:27 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\23177.exâ [2013-01-15 08:21:25 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\90791.exâ [2013-01-14 10:37:21 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\16584.exâ [2013-01-13 10:38:09 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\41833.exâ [2013-01-12 11:07:30 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\61123.exâ [2013-01-11 13:22:43 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\16012.exâ [2013-01-10 17:28:08 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\97887.exâ [2013-01-09 13:21:26 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\17025.exâ [2013-01-08 10:43:56 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\96776.exâ [2013-01-07 20:16:33 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\52500.exâ [2013-01-06 10:36:02 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\67014.exâ [2013-01-05 10:49:06 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\90383.exâ [2013-01-04 15:45:06 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\78129.exâ [2013-01-03 17:28:45 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\14014.exâ [2013-01-02 17:58:33 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\95204.exâ [2013-01-01 10:54:40 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\60562.exâ [2012-12-31 11:05:53 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\75079.exâ [2012-12-30 11:20:54 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\44091.exâ [2012-12-29 11:40:59 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\19886.exâ [2012-12-28 14:13:37 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\11263.exâ [2012-12-27 12:08:45 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\69108.exâ [2012-12-26 11:15:57 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\90558.exâ [2012-12-25 12:01:15 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\85932.exâ [2012-12-24 09:59:28 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\93960.exâ [2012-12-23 10:44:01 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\83503.exâ [2012-12-22 08:26:12 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\49304.exâ [2012-12-21 14:16:34 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\38696.exâ [2012-12-20 17:35:45 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\65395.exâ [2012-12-20 08:10:41 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\87478.exâ [2012-12-19 17:52:26 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\43360.exâ [2012-12-18 16:14:24 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\71416.exâ [2012-12-17 17:20:54 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\12428.exâ [2012-12-17 07:20:17 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\99712.exâ [2012-12-16 10:50:18 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\11732.exâ [2012-12-15 11:18:59 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\11210.exâ [2012-12-14 15:43:54 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\69648.exâ [2012-12-13 17:13:06 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\44340.exâ [2012-12-12 16:00:11 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\30042.exâ [2012-12-12 08:17:57 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\30065.exâ [2012-12-11 13:37:04 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\83987.exâ [2012-12-10 17:16:31 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\42646.exâ [2012-12-09 11:04:52 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\84628.exâ [2012-12-08 10:50:44 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\73447.exâ [2012-12-07 16:09:40 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\40216.exâ [2012-12-06 16:19:47 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\93449.exâ [2012-12-05 17:43:28 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\36089.exâ [2012-12-04 13:31:19 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\47293.exâ [2012-12-03 16:17:42 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\82340.exâ [2012-12-02 10:28:00 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\41758.exâ [2012-12-01 10:44:10 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\94563.exâ [2012-11-30 20:03:23 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\77052.exâ [2012-11-29 17:01:42 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\56722.exâ [2012-11-28 16:19:35 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\53733.exâ [2012-11-27 16:14:10 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\21258.exâ [2012-11-26 16:11:45 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\58627.exâ [2012-11-25 09:48:44 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\87753.exâ [2012-11-24 13:14:13 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\25684.exâ [2012-11-24 12:03:21 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\20227.exâ [2012-11-24 11:10:51 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\81226.exâ [2012-11-23 16:10:16 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\48481.exâ [2012-11-22 16:10:11 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\77043.exâ [2012-11-21 16:26:57 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\21805.exâ [2012-11-20 16:11:10 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\40324.exâ [2012-11-19 17:07:13 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\27518.exâ [2012-11-18 11:23:04 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\41383.exâ [2012-11-17 10:50:58 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\74333.exâ [2012-11-16 16:13:05 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\71327.exâ [2012-11-15 16:25:50 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\59027.exâ [2012-11-14 16:23:28 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\76263.exâ [2012-11-13 17:04:14 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\56286.exâ [2012-11-12 17:24:44 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\67606.exâ [2012-11-11 12:31:40 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\15058.exâ [2012-11-10 12:11:59 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\92668.exâ [2012-11-09 16:28:56 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\48042.exâ [2012-11-08 16:11:49 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\11643.exâ [2012-11-07 16:10:19 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\82745.exâ [2012-11-06 16:13:08 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\64362.exâ [2012-11-05 15:44:52 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\49439.exâ [2012-11-05 13:32:32 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\92772.exâ [2012-11-04 10:31:02 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\51234.exâ [2012-11-03 13:11:41 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\82531.exâ [2012-11-02 19:25:14 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\78932.exâ [2012-11-02 18:19:39 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\13918.exâ [2012-11-01 09:16:48 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\92585.exâ [2012-10-31 22:42:07 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\25288.exâ [2012-10-30 16:36:21 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\72777.exâ [2012-10-29 09:06:51 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\69819.exâ [2012-10-28 08:58:38 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\16762.exâ [2012-10-27 09:34:09 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\96915.exâ [2012-10-26 15:16:37 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\41019.exâ [2012-10-25 15:14:35 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\63226.exâ [2012-10-24 15:23:51 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\44846.exâ [2012-10-23 12:29:01 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\68325.exâ [2012-10-22 16:03:08 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\93055.exâ [2012-10-19 15:19:31 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\83470.exâ [2012-10-18 15:09:52 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\71200.exâ [2012-10-17 15:09:53 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\73158.exâ [2012-10-16 12:46:41 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\34458.exâ [2012-10-15 16:21:05 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\24544.exâ [2012-10-14 08:43:41 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\69517.exâ [2012-10-13 08:44:44 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\74819.exâ [2012-10-12 14:32:21 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\69911.exâ [2012-10-10 15:21:42 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\86584.exâ [2012-10-09 16:04:11 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\19150.exâ [2012-10-08 16:06:04 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\80112.exâ [2012-10-07 08:41:25 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\74138.exâ [2012-10-06 07:03:53 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\79960.exâ [2012-10-05 14:31:52 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\97085.exâ [2012-10-04 06:45:10 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\25677.exâ [2012-10-03 16:55:49 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\90672.exâ [2012-10-02 15:20:14 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\66784.exâ [2012-10-01 16:24:26 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\75921.exâ [2012-09-30 07:38:36 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\93399.exâ [2012-09-28 14:40:36 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\30329.exâ [2012-09-27 14:25:09 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\55802.exâ [2012-09-26 12:40:04 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\42460.exâ [2012-09-25 12:37:21 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\75260.exâ [2012-09-24 16:07:46 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\61574.exâ [2012-09-23 12:59:39 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\49795.exâ [2012-09-22 14:04:04 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\48998.exâ [2012-09-22 08:11:39 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\13734.exâ [2012-09-21 14:40:28 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\41432.exâ [2012-09-20 16:04:31 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\87642.exâ [2012-09-19 16:05:55 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\33048.exâ [2012-09-18 12:40:10 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\81015.exâ [2012-09-17 16:02:47 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\39952.exâ [2012-09-16 07:52:26 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\73738.exâ [2012-09-15 13:14:13 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\76013.exâ [2012-09-14 19:27:19 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\58782.exâ [2012-09-13 16:30:30 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\71505.exâ [2012-09-12 16:52:05 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\80957.exâ [2012-09-11 14:33:03 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\55455.exâ [2012-09-10 16:12:52 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\99398.exâ [2012-09-09 10:23:22 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\14109.exâ [2012-09-08 08:12:17 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\79752.exâ [2012-09-07 19:23:29 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\33786.exâ [2012-09-06 16:02:22 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\81259.exâ [2012-09-05 21:37:51 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\49637.exâ [2012-09-05 16:05:49 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\63493.exâ [2012-09-04 14:24:06 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\73675.exâ [2012-09-03 17:32:27 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\73947.exâ [2012-09-02 10:53:24 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\17375.exâ [2012-09-01 08:15:12 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\81059.exâ [2012-08-31 07:54:27 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\14415.exâ [2012-08-30 07:41:35 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\10544.exâ [2012-08-29 16:06:58 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\60027.exâ [2012-08-28 08:46:45 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\61776.exâ [2012-08-27 08:04:55 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\91110.exâ [2012-08-26 16:41:08 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\28471.exâ [2012-08-25 09:11:08 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\31109.exâ [2012-08-24 09:01:01 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\43990.exâ [2012-08-23 08:01:04 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\99506.exâ [2012-08-22 09:35:24 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\79460.exâ [2012-08-21 22:21:26 | 000,273,582 | ---- | C] () -- C:\Users\Soku\Video call snapshot 145.png [2012-08-21 22:21:26 | 000,268,901 | ---- | C] () -- C:\Users\Soku\Video call snapshot 144.png [2012-08-21 08:47:59 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\50509.exâ [2012-08-20 08:33:20 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\11723.exâ [2012-08-19 09:49:28 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\74402.exâ [2012-08-18 08:52:18 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\10485.exâ [2012-08-17 09:02:40 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\19789.exâ [2012-08-16 20:07:30 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\73444.exâ [2012-08-16 08:58:13 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\24452.exâ [2012-08-15 09:15:49 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\20497.exâ [2012-08-14 08:34:59 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\20864.exâ [2012-08-13 12:35:14 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\22716.exâ [2012-08-07 10:58:40 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\88911.exâ [2012-07-30 18:11:26 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\71167.exâ [2012-07-29 16:07:37 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\85320.exâ [2012-07-29 14:24:08 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\23275.exâ [2012-07-29 08:59:31 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\94668.exâ [2012-07-29 04:41:34 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\62218.exâ [2012-07-28 13:50:08 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\42274.exâ [2012-07-28 02:39:50 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat [2012-07-28 02:39:50 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat [2012-07-27 08:12:40 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\83511.exâ [2012-07-26 08:42:51 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\56824.exâ [2012-07-25 09:20:18 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\70881.exâ [2012-07-24 08:54:01 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\12865.exâ [2012-07-23 08:42:45 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\61957.exâ [2012-07-22 09:44:49 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\56155.exâ [2012-07-21 09:12:11 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\54239.exâ [2012-07-20 19:50:07 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\29384.exâ [2012-07-20 09:09:59 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\77713.exâ [2012-07-19 08:20:53 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\56780.exâ [2012-07-18 19:42:37 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\37397.exâ [2012-07-18 08:19:26 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\99681.exâ [2012-07-17 10:30:20 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\16817.exâ [2012-07-17 08:58:09 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\94896.exâ [2012-07-16 09:31:10 | 000,000,017 | ---- | C] () -- C:\Users\Soku\AppData\Local\resmon.resmoncfg [2012-07-16 08:03:46 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\40239.exâ [2012-07-15 13:32:38 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\11171.exâ [2012-07-15 11:25:12 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\26580.exâ [2012-07-15 09:34:04 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\86234.exâ [2012-07-14 18:03:19 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\46557.exâ [2012-07-14 16:48:58 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\26899.exâ [2012-07-14 08:49:27 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\58827.exâ [2012-07-13 15:23:39 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\71402.exâ [2012-07-13 08:09:58 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\94621.exâ [2012-07-12 08:48:11 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\97240.exâ [2012-07-11 14:09:14 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\60577.exâ [2012-07-11 10:08:37 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\37777.exâ [2012-07-10 09:06:04 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\24785.exâ [2012-07-09 18:16:02 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\41438.exâ [2012-07-09 07:42:54 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\30673.exâ [2012-07-08 07:53:32 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\51031.exâ [2012-07-07 08:19:57 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\18939.exâ [2012-07-06 08:18:35 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\53017.exâ [2012-07-05 08:24:36 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\95024.exâ [2012-07-04 11:17:53 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\50231.exâ [2012-07-03 14:25:22 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\64001.exâ [2012-07-02 07:53:45 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\38816.exâ [2012-07-01 09:01:35 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\92571.exâ [2012-06-30 12:52:31 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\72308.exâ [2012-06-29 12:43:56 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\38727.exâ [2012-06-28 12:34:25 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\60341.exâ [2012-06-27 08:40:11 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\50120.exâ [2012-06-26 08:39:21 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\20016.exâ [2012-06-25 08:21:53 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\35495.exâ [2012-06-24 07:28:46 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\22758.exâ [2012-06-23 20:15:24 | 000,000,092 | ---- | C] () -- C:\Users\Soku\AppData\Local\fusioncache.dat [2012-06-23 20:14:11 | 001,603,400 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2012-06-23 09:24:14 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\52653.exâ [2012-06-22 17:12:27 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\98990.exâ [2012-06-22 09:42:41 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\76515.exâ [2012-06-21 07:41:55 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\58888.exâ [2012-06-20 12:32:48 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\86406.exâ [2012-06-19 16:51:19 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\80301.exâ [2012-06-18 15:06:54 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\34734.exâ [2012-06-17 07:40:34 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\47107.exâ [2012-06-16 08:48:06 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\57585.exâ [2012-06-15 18:53:18 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\17572.exâ [2012-06-14 15:20:33 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\78504.exâ [2012-06-13 15:07:52 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\21725.exâ [2012-06-12 15:14:46 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\24366.exâ [2012-06-11 08:18:10 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\31918.exâ [2012-06-10 08:07:28 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\86331.exâ [2012-06-09 16:41:03 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\12215.exâ [2012-06-08 08:48:15 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\53028.exâ [2012-06-07 09:47:13 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\11804.exâ [2012-06-06 21:18:45 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\17201.exâ [2012-06-05 18:13:18 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\37422.exâ [2012-06-04 15:20:44 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\72102.exâ [2012-06-03 10:29:26 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\70108.exâ [2012-06-02 10:12:49 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\20930.exâ [2012-06-01 15:31:26 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\99995.exâ [2012-05-31 15:18:43 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\78885.exâ [2012-05-30 15:07:28 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\30076.exâ [2012-05-29 15:13:18 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\32523.exâ [2012-05-28 16:17:59 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\28631.exâ [2012-05-27 07:45:00 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\96029.exâ [2012-05-26 09:07:14 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\92891.exâ [2012-05-25 15:20:48 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\61982.exâ [2012-05-24 15:12:59 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\87886.exâ [2012-05-23 15:58:31 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\69031.exâ [2012-05-22 16:51:19 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\68348.exâ [2012-05-21 15:59:15 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\62460.exâ [2012-05-20 18:45:52 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\14418.exâ [2012-05-19 07:49:53 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\83317.exâ [2012-05-18 15:07:22 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\97293.exâ [2012-05-17 15:56:29 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\25644.exâ [2012-05-16 15:03:26 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\66620.exâ [2012-05-15 17:02:35 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\82312.exâ [2012-05-14 15:59:39 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\40113.exâ [2012-05-13 19:08:14 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\22208.exâ [2012-05-12 09:08:38 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\55516.exâ [2012-05-11 20:38:47 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\44124.exâ [2012-05-10 12:30:00 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\56955.exâ [2012-05-09 15:18:54 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\24852.exâ [2012-05-08 19:11:58 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\88508.exâ [2012-05-08 08:53:39 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\75302.exâ [2012-05-07 16:15:07 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\86555.exâ [2012-05-06 09:36:11 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\79190.exâ [2012-05-05 12:41:52 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\62010.exâ [2012-05-05 12:22:55 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe [2012-05-05 12:22:55 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe [2012-05-05 12:22:55 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe [2012-05-05 12:22:55 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe [2012-05-05 12:22:55 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe [2012-05-05 08:18:25 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\90494.exâ [2012-05-04 07:37:35 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\95624.exâ [2012-05-03 08:46:36 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\42476.exâ [2012-05-02 13:58:10 | 000,029,184 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll [2012-05-02 10:06:51 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2012-05-02 10:06:50 | 000,175,616 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2012-05-02 10:06:49 | 000,079,360 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll [2012-05-02 07:56:54 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\67809.exâ [2012-05-01 09:32:49 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\18042.exâ [2012-04-30 20:44:35 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\82096.exâ [2012-04-30 07:15:18 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\11898.exâ [2012-04-29 10:31:53 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\56063.exâ [2012-04-28 08:22:07 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\57002.exâ [2012-04-27 19:26:06 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\84506.exâ [2012-04-27 15:27:22 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\74708.exâ [2012-04-26 16:44:09 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\98626.exâ [2012-04-25 12:40:05 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\81554.exâ [2012-04-24 15:51:20 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\37671.exâ [2012-04-23 16:26:53 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\58579.exâ [2012-04-22 09:00:58 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\94240.exâ [2012-04-21 08:06:49 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\15770.exâ [2012-04-20 15:07:04 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\25557.exâ [2012-04-19 16:04:59 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\75611.exâ [2012-04-18 20:56:32 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\79343.exâ [2012-04-17 16:48:55 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\75990.exâ [2012-04-16 16:10:36 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\27007.exâ [2012-04-15 11:59:13 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\28679.exâ [2012-04-14 07:43:46 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\72925.exâ [2012-04-13 19:14:27 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\81709.exâ [2012-04-12 16:47:37 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\87050.exâ [2012-04-11 18:21:12 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\45385.exâ [2012-04-10 12:49:11 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\22355.exâ [2012-04-09 15:36:36 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\64596.exâ [2012-04-08 08:14:52 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\31376.exâ [2012-04-07 07:40:45 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\29143.exâ [2012-04-06 19:08:25 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\70206.exâ [2012-04-05 08:15:33 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\19214.exâ [2012-04-04 08:28:52 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\62987.exâ [2012-04-03 21:10:29 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\71450.exâ [2012-04-02 12:31:40 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\23141.exâ [2012-04-01 08:56:34 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\98229.exâ [2012-03-31 10:12:16 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\98548.exâ [2012-03-30 21:09:13 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\92332.exâ [2012-03-29 16:43:06 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\85692.exâ [2012-03-28 19:21:46 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\28818.exâ [2012-03-27 16:04:49 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\15167.exâ [2012-03-26 16:11:03 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\94218.exâ [2012-03-25 09:50:32 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\91833.exâ [2012-03-24 21:56:01 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\77671.exâ [2012-03-23 08:54:34 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\73511.exâ [2012-03-22 09:01:47 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\74821.exâ [2012-03-21 08:32:45 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\46071.exâ [2012-03-20 08:51:29 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\91639.exâ [2012-03-19 17:14:40 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\85012.exâ [2012-03-19 07:17:02 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\58047.exâ [2012-03-18 11:12:33 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\85086.exâ [2012-03-17 17:42:28 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\70506.exâ [2012-03-16 16:31:54 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\55602.exâ [2012-03-15 16:09:51 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\39180.exâ [2012-03-14 20:16:13 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\13606.exâ [2012-03-13 16:10:34 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\43335.exâ [2012-03-12 17:15:22 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\58299.exâ [2012-03-11 10:42:37 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\31501.exâ [2012-03-10 09:33:27 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\25985.exâ [2012-03-09 20:15:18 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\90846.exâ [2012-03-08 18:11:38 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\17192.exâ [2012-03-07 22:01:07 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\84717.exâ [2012-03-06 17:07:58 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\59544.exâ [2012-03-05 09:20:03 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\86070.exâ [2012-03-04 09:22:44 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\25410.exâ [2012-03-03 22:05:42 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\42041.exâ [2012-03-03 08:56:20 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\31754.exâ [2012-03-01 18:26:55 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\33451.exâ [2012-02-29 16:58:26 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\12690.exâ [2012-02-28 13:45:38 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\72433.exâ [2012-02-27 20:39:32 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\36711.exâ [2012-02-26 09:15:45 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\45645.exâ [2012-02-25 09:46:45 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\89788.exâ [2012-02-24 20:09:49 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\13909.exâ [2012-02-23 16:06:14 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\31784.exâ [2012-02-22 09:49:22 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\91394.exâ [2012-02-21 09:39:13 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\97615.exâ [2012-02-20 20:10:36 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\93057.exâ [2012-02-19 10:58:17 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\84956.exâ [2012-02-18 17:44:10 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\29504.exâ [2012-02-18 10:00:59 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\45126.exâ [2012-02-17 10:18:49 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\58705.exâ [2012-02-16 20:19:24 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\53558.exâ [2012-02-15 15:39:31 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\85903.exâ [2012-02-15 08:16:46 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\60568.exâ [2012-02-14 13:29:07 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\98507.exâ [2012-02-14 08:27:01 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\92085.exâ [2012-02-13 08:55:58 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\87411.exâ [2012-02-12 20:26:58 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\95881.exâ [2012-02-12 09:17:53 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\61932.exâ [2012-02-11 09:39:10 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\24277.exâ [2012-02-10 19:07:35 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\78982.exâ [2012-02-09 16:35:29 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\20591.exâ [2012-02-08 17:05:11 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\18053.exâ [2012-02-07 17:51:51 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\45937.exâ [2012-02-06 20:53:14 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\54592.exâ [2012-02-05 09:55:31 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\90913.exâ [2012-02-04 09:25:22 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\84617.exâ [2012-02-03 16:17:24 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\28315.exâ [2012-02-02 21:53:22 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\71608.exâ [2012-02-02 19:32:48 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\20089.exâ [2012-02-02 08:11:41 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\15893.exâ [2012-02-01 16:11:26 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\33151.exâ [2012-01-31 16:58:54 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\43516.exâ [2012-01-30 20:13:57 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\61562.exâ [2012-01-29 09:47:55 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\75116.exâ [2012-01-28 17:55:06 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\30284.exâ [2012-01-28 09:20:00 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\21844.exâ [2012-01-27 16:12:42 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\19564.exâ [2012-01-26 17:11:34 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\56122.exâ [2012-01-26 17:01:18 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\61829.exâ [2012-01-25 16:24:47 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\74127.exâ [2012-01-24 16:39:45 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\83870.exâ [2012-01-23 17:03:49 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\14784.exâ [2012-01-22 11:55:18 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\30818.exâ [2012-01-21 09:55:38 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\54314.exâ [2012-01-20 16:11:59 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\94507.exâ [2012-01-19 16:21:06 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\84272.exâ [2012-01-18 17:27:15 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\50773.exâ [2012-01-18 16:02:48 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\13979.exâ [2012-01-17 20:18:30 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\90230.exâ [2012-01-15 10:14:21 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\23774.exâ [2012-01-14 13:09:33 | 006,664,704 | ---- | C] () -- C:\Users\Soku\AppData\Roaming\41517.exâ [2011-12-20 19:37:13 | 000,650,752 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2011-12-20 19:37:13 | 000,258,048 | ---- | C] () -- C:\Windows\SysWow64\libFLAC.dll [2011-11-24 18:39:04 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2011-09-12 23:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat [2011-08-19 09:26:20 | 010,898,456 | ---- | C] () -- C:\Windows\SysWow64\LogiDPP.dll [2011-08-19 09:26:20 | 000,336,408 | ---- | C] () -- C:\Windows\SysWow64\DevManagerCore.dll [2011-08-19 09:26:20 | 000,104,472 | ---- | C] () -- C:\Windows\SysWow64\LogiDPPApp.exe [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2012-06-09 06:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012-06-09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2012-04-28 15:41:47 | 000,000,000 | ---D | M] -- C:\Users\Soku\AppData\Roaming\BESTplayer [2012-02-03 16:48:09 | 000,000,000 | ---D | M] -- C:\Users\Soku\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant [2012-12-26 13:34:56 | 000,000,000 | ---D | M] -- C:\Users\Soku\AppData\Roaming\DAEMON Tools Lite [2011-11-27 21:11:47 | 000,000,000 | ---D | M] -- C:\Users\Soku\AppData\Roaming\Dev-Cpp [2011-11-24 19:43:11 | 000,000,000 | ---D | M] -- C:\Users\Soku\AppData\Roaming\Gadu-Gadu 10 [2012-04-24 19:14:11 | 000,000,000 | ---D | M] -- C:\Users\Soku\AppData\Roaming\GameRanger [2011-11-28 12:56:32 | 000,000,000 | ---D | M] -- C:\Users\Soku\AppData\Roaming\LolClient [2012-05-24 15:36:47 | 000,000,000 | ---D | M] -- C:\Users\Soku\AppData\Roaming\LolClient2 [2012-03-31 21:23:46 | 000,000,000 | ---D | M] -- C:\Users\Soku\AppData\Roaming\Mumble [2011-12-20 19:24:16 | 000,000,000 | ---D | M] -- C:\Users\Soku\AppData\Roaming\NapiProjekt [2012-11-07 22:44:50 | 000,000,000 | ---D | M] -- C:\Users\Soku\AppData\Roaming\Notepad++ [2012-02-09 16:40:56 | 000,000,000 | ---D | M] -- C:\Users\Soku\AppData\Roaming\Opera [2013-02-16 13:19:52 | 000,000,000 | ---D | M] -- C:\Users\Soku\AppData\Roaming\Panda Security [2012-04-18 22:20:44 | 000,000,000 | ---D | M] -- C:\Users\Soku\AppData\Roaming\Softland [2012-04-16 23:05:59 | 000,000,000 | ---D | M] -- C:\Users\Soku\AppData\Roaming\Sony [2013-02-15 23:36:17 | 000,000,000 | ---D | M] -- C:\Users\Soku\AppData\Roaming\TS3Client [2013-02-14 21:37:56 | 000,000,000 | ---D | M] -- C:\Users\Soku\AppData\Roaming\uTorrent [color=#E56717]========== Purity Check ==========[/color] < End of report >