OTL logfile created on: 2013-04-11 14:49:21 - Run 3
OTL by OldTimer - Version 3.2.69.0     Folder = G:\
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,50 Gb Total Physical Memory | 2,12 Gb Available Physical Memory | 60,57% Memory free
3,84 Gb Paging File | 2,62 Gb Available in Paging File | 68,14% Paging File free
Paging file location(s): C:\pagefile.sys 512 512 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 24,41 Gb Total Space | 1,70 Gb Free Space | 6,95% Space Free | Partition Type: NTFS
Drive D: | 78,13 Gb Total Space | 0,72 Gb Free Space | 0,92% Space Free | Partition Type: NTFS
Drive E: | 46,50 Gb Total Space | 1,23 Gb Free Space | 2,65% Space Free | Partition Type: NTFS
Drive F: | 250,00 Gb Total Space | 0,53 Gb Free Space | 0,21% Space Free | Partition Type: NTFS
Drive G: | 215,76 Gb Total Space | 6,99 Gb Free Space | 3,24% Space Free | Partition Type: NTFS
Drive J: | 3,73 Gb Total Space | 0,41 Gb Free Space | 11,03% Space Free | Partition Type: FAT32
 
Computer Name: NEMESIS-2D67921 | User Name: Nemesis | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2013-04-11 14:30:49 | 000,602,112 | ---- | M] (OldTimer Tools) -- G:\OTL.exe
PRC - [2013-03-31 11:04:16 | 000,923,560 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Nightly\firefox.exe
PRC - [2013-03-31 11:04:10 | 000,017,320 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Nightly\plugin-container.exe
PRC - [2013-03-10 11:05:42 | 000,170,912 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2013-01-02 15:10:28 | 002,448,032 | ---- | M] (Check Point Software Technologies LTD) -- C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe
PRC - [2013-01-02 14:38:50 | 000,073,984 | ---- | M] (Check Point Software Technologies LTD) -- C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe
PRC - [2012-11-22 16:33:18 | 000,497,320 | ---- | M] (Check Point Software Technologies) -- C:\Program Files\CheckPoint\ZAForceField\ISWSVC.exe
PRC - [2012-11-22 16:32:54 | 000,738,984 | ---- | M] (Check Point Software Technologies) -- C:\Program Files\CheckPoint\ZAForceField\ForceField.exe
PRC - [2012-07-26 08:27:58 | 000,483,328 | ---- | M] () -- C:\Program Files\OpenHardwareMonitor\OpenHardwareMonitor.exe
PRC - [2012-07-25 21:19:06 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) -- C:\WINDOWS\system32\NLSSRV32.EXE
PRC - [2012-05-11 06:51:00 | 002,987,784 | ---- | M] (Parallels Holdings, Ltd. and its affiliates.) -- D:\Emulatory\PC\Windows\Parallels Workstation\Application\prl_naptd.exe
PRC - [2012-05-11 06:50:48 | 018,754,824 | ---- | M] (Parallels Holdings, Ltd. and its affiliates.) -- D:\Emulatory\PC\Windows\Parallels Workstation\Application\prl_disp_service.exe
PRC - [2012-04-30 20:42:26 | 000,354,416 | ---- | M] (VMware, Inc.) -- C:\WINDOWS\system32\vmnetdhcp.exe
PRC - [2012-04-30 20:42:14 | 000,433,264 | ---- | M] (VMware, Inc.) -- C:\WINDOWS\system32\vmnat.exe
PRC - [2012-04-30 17:54:52 | 000,079,872 | ---- | M] (VMware, Inc.) -- D:\Emulatory\PC\Windows\VMWare Workstation\vmware-authd.exe
PRC - [2012-04-05 16:01:56 | 000,135,168 | ---- | M] (Nalpeiron Ltd.) -- C:\WINDOWS\system32\nalserv.exe
PRC - [2012-01-03 19:19:24 | 005,875,840 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe
PRC - [2011-11-11 21:48:54 | 000,088,688 | ---- | M] (VIA Technologies, Inc.) -- C:\WINDOWS\system32\KaraokeSer.exe
PRC - [2011-11-02 14:50:06 | 000,696,320 | ---- | M] () -- C:\Program Files\Kilgray\memoQ40\AUClient.exe
PRC - [2011-08-29 23:11:00 | 000,665,200 | ---- | M] (VMware, Inc.) -- C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe
PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-01-01 06:56:00 | 000,852,176 | ---- | M] (C. Ghisler & Co.) -- C:\Program Files\totalcmd\TOTALCMD.EXE
PRC - [2006-05-26 10:14:26 | 000,057,344 | ---- | M] () -- C:\Program Files\Plustek\OpticSlim 2420+\AM32.exe
PRC - [2002-03-19 17:30:00 | 000,045,632 | ---- | M] () -- C:\WINDOWS\system32\TaskSwitch.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2013-03-31 11:04:14 | 003,303,336 | ---- | M] () -- C:\Program Files\Nightly\mozjs.dll
MOD - [2013-03-25 09:55:37 | 014,717,144 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll
MOD - [2012-07-27 16:43:45 | 001,159,168 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Management\6a6f4be744ed5bc5273cbcf0fcf303e3\System.Management.ni.dll
MOD - [2012-07-27 16:38:39 | 000,145,920 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\aea1d325200e1a7b1ee7ec86fba33db4\System.Configuration.Install.ni.dll
MOD - [2012-07-27 16:25:07 | 013,006,336 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\17e020ae92d7fab33bcc1c98b25019d0\System.Windows.Forms.ni.dll
MOD - [2012-07-27 16:25:02 | 005,571,584 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml\e997d0200c25f7db6bd32313d50b729d\System.Xml.ni.dll
MOD - [2012-07-27 16:24:59 | 000,973,312 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Configuration\ac18c2dcd06bd2a0589bac94ccae5716\System.Configuration.ni.dll
MOD - [2012-07-27 16:24:56 | 001,651,200 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Drawing\dd57bc19f5807c6dbe8f88d4a23277f6\System.Drawing.ni.dll
MOD - [2012-07-27 16:24:53 | 009,000,960 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\964da027ebca3b263a05cadb8eaa20a3\System.ni.dll
MOD - [2012-07-27 16:24:43 | 014,415,872 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\246f1a5abb686b9dcdf22d3505b08cea\mscorlib.ni.dll
MOD - [2012-07-26 08:27:58 | 000,483,328 | ---- | M] () -- C:\Program Files\OpenHardwareMonitor\OpenHardwareMonitor.exe
MOD - [2012-05-30 20:06:48 | 000,087,912 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2012-05-30 20:06:30 | 001,242,512 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2012-04-30 19:29:20 | 001,222,656 | ---- | M] () -- D:\Emulatory\PC\Windows\VMWare Workstation\libxml2.dll
MOD - [2011-11-02 14:50:06 | 000,696,320 | ---- | M] () -- C:\Program Files\Kilgray\memoQ40\AUClient.exe
MOD - [2009-03-25 16:53:14 | 000,053,248 | ---- | M] () -- C:\Program Files\ASUS\EPU-4 Engine\AsSpindownTimeout.dll
MOD - [2009-01-15 14:55:10 | 000,565,248 | ---- | M] () -- C:\Program Files\ASUS\EPU-4 Engine\pngio.dll
MOD - [2006-06-06 12:04:58 | 000,253,952 | ---- | M] () -- C:\Program Files\Plustek\OpticSlim 2420+\Scndrvu.drv
MOD - [2006-05-26 10:14:26 | 000,057,344 | ---- | M] () -- C:\Program Files\Plustek\OpticSlim 2420+\AM32.exe
MOD - [2004-04-06 18:45:46 | 000,040,960 | ---- | M] () -- C:\Program Files\Plustek\OpticSlim 2420+\DetectSession.dll
MOD - [2002-03-19 17:30:00 | 000,045,632 | ---- | M] () -- C:\WINDOWS\system32\TaskSwitch.exe
MOD - [2002-01-03 18:08:00 | 000,036,864 | ---- | M] () -- C:\Program Files\Plustek\OpticSlim 2420+\Am32Res.dll
MOD - [2001-02-13 15:46:50 | 000,098,304 | ---- | M] () -- C:\Program Files\Plustek\OpticSlim 2420+\plkcom32.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - File not found [Auto | Stopped] -- C:\Program Files\Bonjour\mDNSResponder.exe -- (Bonjour Service)
SRV - [2013-03-31 11:04:15 | 000,115,624 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013-03-25 09:55:38 | 000,253,656 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013-03-10 11:05:42 | 000,170,912 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2013-02-07 15:16:32 | 000,651,720 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2013-01-08 13:55:20 | 000,161,536 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013-01-02 15:10:28 | 002,448,032 | ---- | M] (Check Point Software Technologies LTD) [Auto | Running] -- C:\Program Files\CheckPoint\ZoneAlarm\vsmon.exe -- (vsmon)
SRV - [2012-11-22 16:33:18 | 000,497,320 | ---- | M] (Check Point Software Technologies) [Auto | Running] -- C:\Program Files\CheckPoint\ZAForceField\ISWSVC.exe -- (IswSvc)
SRV - [2012-07-25 21:19:06 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\WINDOWS\system32\NLSSRV32.EXE -- (nlsX86cc)
SRV - [2012-05-11 06:51:00 | 002,987,784 | ---- | M] (Parallels Holdings, Ltd. and its affiliates.) [Auto | Running] -- D:\Emulatory\PC\Windows\Parallels Workstation\Application\prl_naptd.exe -- (Parallels Networking Service)
SRV - [2012-05-11 06:50:54 | 000,730,376 | ---- | M] () [On_Demand | Stopped] -- D:\Emulatory\PC\Windows\Parallels Workstation\Application\prl_mount_svc.exe -- (prl_mount_svc)
SRV - [2012-05-11 06:50:48 | 018,754,824 | ---- | M] (Parallels Holdings, Ltd. and its affiliates.) [Auto | Running] -- D:\Emulatory\PC\Windows\Parallels Workstation\Application\prl_disp_service.exe -- (Parallels Virtualization Service)
SRV - [2012-04-30 20:42:26 | 000,354,416 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\WINDOWS\system32\vmnetdhcp.exe -- (VMnetDHCP)
SRV - [2012-04-30 20:42:14 | 000,433,264 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\WINDOWS\system32\vmnat.exe -- (VMware NAT Service)
SRV - [2012-04-30 19:53:30 | 011,839,488 | ---- | M] () [Auto | Stopped] -- D:\Emulatory\PC\Windows\VMWare Workstation\vmware-hostd.exe -- (VMwareHostd)
SRV - [2012-04-30 17:54:52 | 000,079,872 | ---- | M] (VMware, Inc.) [Auto | Running] -- D:\Emulatory\PC\Windows\VMWare Workstation\vmware-authd.exe -- (VMAuthdService)
SRV - [2012-04-05 16:01:56 | 000,135,168 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\WINDOWS\system32\nalserv.exe -- (NalServ)
SRV - [2011-11-11 21:48:54 | 000,088,688 | ---- | M] (VIA Technologies, Inc.) [Auto | Running] -- C:\WINDOWS\system32\KaraokeSer.exe -- (KaraokeService)
SRV - [2011-11-02 14:50:06 | 000,696,320 | ---- | M] () [Auto | Running] -- C:\Program Files\Kilgray\memoQ40\AUClient.exe -- (Kilgray: memoQ update permissions manager. 979430.)
SRV - [2011-08-29 23:11:00 | 000,665,200 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe -- (VMUSBArbService)
SRV - [2011-03-16 10:42:06 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2009-12-28 21:33:02 | 000,096,896 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Stopped] -- C:\Documents and Settings\All Users\Dane aplikacji\ASUS\AsSysCtrlService\2.00.00\AsSysCtrlService.exe -- (AsSysCtrlService)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Running] -- C:\Documents and Settings\Nemesis\Ustawienia lokalne\Temp\tmp1.tmp -- (WinRing0_1_2_0)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\ArcaBit\ArcaVir\ps_drv.sys -- (ps_drv)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2013-03-22 14:24:40 | 000,083,872 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2013-03-22 14:24:40 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2013-01-02 14:38:52 | 000,528,000 | ---- | M] (Check Point Software Technologies LTD) [Kernel | System | Running] -- C:\WINDOWS\system32\vsdatant.sys -- (Vsdatant)
DRV - [2012-11-22 16:33:30 | 000,027,056 | ---- | M] (Check Point Software Technologies) [Kernel | Auto | Running] -- C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys -- (ISWKL)
DRV - [2012-11-15 22:06:12 | 000,584,536 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\klif.sys -- (KLIF)
DRV - [2012-09-13 08:30:56 | 000,187,736 | ---- | M] (Oracle Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\VBoxDrv.sys -- (VBoxDrv)
DRV - [2012-09-13 08:30:22 | 000,104,280 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV - [2012-09-13 08:30:08 | 000,115,544 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VBoxNetFlt.sys -- (VBoxNetFlt)
DRV - [2012-09-13 08:30:08 | 000,094,040 | ---- | M] (Oracle Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\VBoxUSBMon.sys -- (VBoxUSBMon)
DRV - [2012-08-22 12:37:42 | 000,084,312 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\VBoxUSB.sys -- (VBoxUSB)
DRV - [2012-07-03 17:25:19 | 000,124,264 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvhda32.sys -- (NVHDA)
DRV - [2012-05-11 06:52:50 | 000,013,576 | ---- | M] (Parallels Holdings, Ltd. and its affiliates.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\prl_vnic.sys -- (PRLVNIC)
DRV - [2012-05-11 06:52:46 | 000,017,672 | ---- | M] (Parallels Holdings, Ltd. and its affiliates.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\prl_usb_mng32.sys -- (Parallels USB Device Manager)
DRV - [2012-05-11 06:52:28 | 000,028,424 | ---- | M] (Parallels Holdings, Ltd. and its affiliates.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\prl_net.sys -- (prl_net)
DRV - [2012-05-11 06:52:14 | 000,226,056 | ---- | M] (Parallels Holdings, Ltd. and its affiliates.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\prl_hypervisor_32.sys -- (Parallels Virtualization Hypervisor)
DRV - [2012-05-11 06:52:10 | 000,051,976 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- D:\Emulatory\PC\Windows\Parallels Workstation\Drivers\prl_dsk.sys -- (prl_dsk)
DRV - [2012-05-09 15:24:36 | 000,346,176 | ---- | M] (PassMark Software) [Kernel | On_Demand | Stopped] -- D:\Emulatory\PC\Instalki\OSFMount\OSFMount.sys -- (OSFMount)
DRV - [2012-04-30 20:42:34 | 000,055,664 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\vmx86.sys -- (vmx86)
DRV - [2012-04-30 20:42:04 | 000,023,792 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\vmparport.sys -- (VMparport)
DRV - [2012-04-30 20:40:56 | 000,033,776 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\vmnetbridge.sys -- (VMnetBridge)
DRV - [2012-04-30 20:40:46 | 000,025,712 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\vmnetuserif.sys -- (VMnetuserif)
DRV - [2012-04-30 17:22:42 | 000,016,624 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\vmnetadapter.sys -- (VMnetAdapter)
DRV - [2011-12-08 22:09:16 | 000,327,400 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2011-12-02 19:06:44 | 002,820,608 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV - [2011-11-03 11:10:44 | 000,313,832 | ---- | M] (ASMedia Technology Inc) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\asmtxhci.sys -- (asmtxhci)
DRV - [2011-11-03 11:10:42 | 000,102,888 | ---- | M] (ASMedia Technology Inc) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\asmthub3.sys -- (asmthub3)
DRV - [2011-08-29 23:11:00 | 000,032,496 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\hcmon.sys -- (hcmon)
DRV - [2011-08-29 23:01:10 | 000,031,280 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\vmusb.sys -- (vmusb)
DRV - [2011-08-08 14:58:56 | 000,098,928 | ---- | M] (VMware, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\vmci.sys -- (vmci)
DRV - [2011-07-08 15:32:56 | 000,022,768 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\vstor2-mntapi10-shared.sys -- (vstor2-mntapi10-shared)
DRV - [2010-08-24 15:31:08 | 000,011,456 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AsIO.sys -- (AsIO)
DRV - [2010-02-24 12:22:10 | 000,185,472 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\acedrv11.sys -- (acedrv11)
DRV - [2010-02-23 23:55:50 | 000,006,112 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\cdenable.sys -- (cdenable)
DRV - [2008-04-14 00:30:04 | 000,225,664 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tcpip6.sys -- (Tcpip6)
DRV - [2008-04-14 00:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2008-02-12 03:42:38 | 000,232,472 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\VMM.sys -- (vmm)
DRV - [2008-02-05 02:50:44 | 000,059,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VMNetSrv.sys -- (VPCNetS2)
DRV - [2007-06-29 14:47:34 | 000,034,304 | ---- | M] (AMD, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AmdLLD.sys -- (AmdLLD)
DRV - [2007-04-16 16:46:34 | 000,033,792 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdPPM.sys -- (AmdPPM)
DRV - [2004-11-25 18:36:06 | 000,077,248 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\prohlp02.sys -- (prohlp02)
DRV - [2004-11-25 18:32:01 | 000,054,368 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\prodrv06.sys -- (prodrv06)
DRV - [2004-08-13 10:56:20 | 000,005,810 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2003-12-01 17:20:52 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sfhlp01.sys -- (sfhlp01)
DRV - [2003-09-06 14:22:08 | 000,006,944 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\prosync1.sys -- (prosync1)
DRV - [2002-07-17 08:53:02 | 000,016,877 | ---- | M] (Adaptec) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\Aspi32.sys -- (Aspi32)
DRV - [2001-08-17 22:19:34 | 000,040,704 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\es1371mp.sys -- (es1371)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1957994488-1417001333-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKU\S-1-5-21-1957994488-1417001333-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-1957994488-1417001333-839522115-1003\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1957994488-1417001333-839522115-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKU\S-1-5-21-1957994488-1417001333-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1957994488-1417001333-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "v9"
FF - prefs.js..browser.search.order.1: "v9"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "www.google.pl"
FF - prefs.js..extensions.enabledAddons: pl%40dictionaries.addons.mozilla.org:1.0.20110621
FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.14
FF - prefs.js..extensions.enabledAddons: %7B6d96bb5e-1175-4ebf-8ab5-5f56f1c79f65%7D:0.9.6
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:22.0a1
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: pl@dictionaries.addons.mozilla.org:1.0.20110621
FF - prefs.js..network.proxy.backup.ftp: " 23.22.162.254"
FF - prefs.js..network.proxy.backup.ftp_port: 80
FF - prefs.js..network.proxy.backup.socks: " 23.22.162.254"
FF - prefs.js..network.proxy.backup.socks_port: 80
FF - prefs.js..network.proxy.backup.ssl: " 23.22.162.254"
FF - prefs.js..network.proxy.backup.ssl_port: 80
FF - prefs.js..network.proxy.ftp: " 177.70.8.162"
FF - prefs.js..network.proxy.ftp_port: 80
FF - prefs.js..network.proxy.http: " 177.70.8.162"
FF - prefs.js..network.proxy.http_port: 80
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.socks: " 177.70.8.162"
FF - prefs.js..network.proxy.socks_port: 80
FF - prefs.js..network.proxy.ssl: " 177.70.8.162"
FF - prefs.js..network.proxy.ssl_port: 80
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@checkpoint.com/FFApi: C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\TrustChecker [2013-01-21 15:24:11 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: c:\Program Files\Mozilla Firefox 3.6.28\components [2012-10-14 10:45:14 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: c:\Program Files\Mozilla Firefox 3.6.28\plugins [2012-11-30 13:48:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-07-04 16:06:37 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.5\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2013-04-03 14:33:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.5\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2013-04-03 14:33:14 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Nightly 22.0a1\extensions\\Components: C:\Program Files\Nightly\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Nightly 22.0a1\extensions\\Plugins: C:\Program Files\Nightly\plugins
 
[2012-06-01 16:21:49 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Nemesis\Dane aplikacji\Mozilla\Extensions
[2012-05-06 19:42:45 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Nemesis\Dane aplikacji\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2012-05-06 19:42:45 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Nemesis\Dane aplikacji\Mozilla\Extensions\{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a}
[2012-05-06 19:42:45 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Nemesis\Dane aplikacji\Mozilla\Extensions\{ee53ece0-255c-4cc6-8a7e-81a8b6e5ba2c}
[2013-04-01 11:16:47 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Nemesis\Dane aplikacji\Mozilla\Firefox\Profiles\19y35yu2.default\extensions
[2012-07-19 19:57:22 | 000,000,000 | ---D | M] (WOT) -- C:\Documents and Settings\Nemesis\Dane aplikacji\Mozilla\Firefox\Profiles\19y35yu2.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2013-03-13 12:57:22 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Nemesis\Dane aplikacji\Mozilla\Firefox\Profiles\19y35yu2.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2012-06-04 22:02:48 | 000,000,000 | ---D | M] (Polski slownik poprawnej pisowni) -- C:\Documents and Settings\Nemesis\Dane aplikacji\Mozilla\Firefox\Profiles\19y35yu2.default\extensions\pl@dictionaries.addons.mozilla.org
[2012-06-01 00:42:05 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Nemesis\Dane aplikacji\Mozilla\SeaMonkey\Profiles\cb9x87n3.default\extensions
[2012-05-06 19:42:46 | 000,000,000 | ---D | M] (UnMHT) -- C:\Documents and Settings\Nemesis\Dane aplikacji\Mozilla\SeaMonkey\Profiles\cb9x87n3.default\extensions\{f759ca51-3a91-4dd1-ae78-9db5eee9ebf0}
[2012-06-01 00:42:05 | 000,000,000 | ---D | M] (DOM Inspector) -- C:\Documents and Settings\Nemesis\Dane aplikacji\Mozilla\SeaMonkey\Profiles\cb9x87n3.default\extensions\inspector@mozilla.org
[2012-10-14 10:46:27 | 000,010,966 | ---- | M] () (No name found) -- C:\Documents and Settings\Nemesis\Dane aplikacji\Mozilla\Firefox\Profiles\19y35yu2.default\extensions\noverflow@sdrocking.com.xpi
[2013-04-01 11:16:47 | 000,081,156 | ---- | M] () (No name found) -- C:\Documents and Settings\Nemesis\Dane aplikacji\Mozilla\Firefox\Profiles\19y35yu2.default\extensions\{6d96bb5e-1175-4ebf-8ab5-5f56f1c79f65}.xpi
[2012-10-14 10:52:45 | 000,529,404 | ---- | M] () (No name found) -- C:\Documents and Settings\Nemesis\Dane aplikacji\Mozilla\Firefox\Profiles\19y35yu2.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
[2012-10-14 10:51:57 | 000,741,958 | ---- | M] () (No name found) -- C:\Documents and Settings\Nemesis\Dane aplikacji\Mozilla\Firefox\Profiles\19y35yu2.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2012-06-12 11:27:42 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012-06-12 11:27:42 | 000,000,000 | ---D | M] (ArcaBit Ext.) -- C:\Program Files\Mozilla Firefox\extensions\arcabit@www.arcabit.pl
[2012-07-04 16:06:36 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012-06-02 08:09:46 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-06-02 08:09:46 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012-06-02 08:09:46 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012-06-02 08:09:46 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012-06-02 08:09:46 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-06-02 08:09:46 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2001-10-26 19:45:16 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (ZoneAlarm Security Engine Registrar) - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O2 - BHO: (Free Download Manager) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O3 - HKU\S-1-5-21-1957994488-1417001333-839522115-1003\..\Toolbar\WebBrowser: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O4 - HKLM..\Run: [ABREGMON] C:\Program Files\ArcaBit\ArcaVir\ABregmon.exe File not found
O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [CoolSwitch] C:\WINDOWS\system32\TaskSwitch.exe ()
O4 - HKLM..\Run: [Cpu Level Up help] C:\Program Files\ASUS\AI Suite\CpuLevelUpHelp.exe ()
O4 - HKLM..\Run: [ISW] C:\Program Files\CheckPoint\ZAForceField\ForceField.exe (Check Point Software Technologies)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe ()
O4 - HKLM..\Run: [Six Engine] C:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [ZoneAlarm] C:\Program Files\CheckPoint\ZoneAlarm\zatray.exe (Check Point Software Technologies LTD)
O4 - HKU\S-1-5-21-1957994488-1417001333-839522115-1003..\Run: [OpenHardwareMonitor] c:\Program Files\OpenHardwareMonitor\OpenHardwareMonitor.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Plustek OpticSlim 2420+.lnk = C:\Program Files\Plustek\OpticSlim 2420+\AM32.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRemoteRecursiveEvents = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClassicShell = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1957994488-1417001333-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1957994488-1417001333-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0
O7 - HKU\S-1-5-21-1957994488-1417001333-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMConfigurePrograms = 1
O7 - HKU\S-1-5-21-1957994488-1417001333-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-21-1957994488-1417001333-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSharedDocuments = 1
O7 - HKU\S-1-5-21-1957994488-1417001333-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeKeyboardNavigationIndicators = 0
O7 - HKU\S-1-5-21-1957994488-1417001333-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClassicShell = 0
O7 - HKU\S-1-5-21-1957994488-1417001333-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoVisualStyleChoice = 0
O7 - HKU\S-1-5-21-1957994488-1417001333-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoColorChoice = 0
O7 - HKU\S-1-5-21-1957994488-1417001333-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoSizeChoice = 0
O8 - Extra context menu item: Pobierz plik wideo w FDM - C:\Program Files\Free Download Manager\dlfvideo.htm ()
O8 - Extra context menu item: Pobierz w FDM - C:\Program Files\Free Download Manager\dllink.htm ()
O8 - Extra context menu item: Pobierz wszystkie pliki w FDM - C:\Program Files\Free Download Manager\dlall.htm ()
O8 - Extra context menu item: Pobierz zaznaczone pliki w FDM - C:\Program Files\Free Download Manager\dlselected.htm ()
O9 - Extra Button: ArcaVir >> - {40525A66-DB98-480D-BCF9-7AF88C1AF438} - C:\Program Files\ArcaBit\WebExtensions\ie\ArcaIEExt.dll File not found
O9 - Extra 'Tools' menuitem : ArcaVir >> - {40525A66-DB98-480D-BCF9-7AF88C1AF438} - C:\Program Files\ArcaBit\WebExtensions\ie\ArcaIEExt.dll File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\system32\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\system32\vsocklib.dll (VMware, Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.7.0_09)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C7EAC0CC-6347-4C7E-A1E1-9A7921FDF4C6}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Nemesis\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Nemesis\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {4F07DA45-8170-4859-9B5F-037EF2970034} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012-05-06 16:49:44 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009-12-10 18:13:48 | 000,202,808 | ---- | M] () - D:\AUTO.pat -- [ NTFS ]
O32 - AutoRun File - [2009-12-10 18:13:48 | 000,108,824 | ---- | M] () - D:\AUTO.pst -- [ NTFS ]
O32 - AutoRun File - [2010-04-16 09:10:29 | 000,000,000 | ---D | M] - D:\Autodesk -- [ NTFS ]
O32 - AutoRun File - [2008-04-10 11:38:33 | 000,000,000 | ---D | M] - D:\Automap -- [ NTFS ]
O32 - AutoRun File - [2011-08-03 15:42:22 | 000,094,031 | ---- | M] () - E:\autosave.win -- [ NTFS ]
O32 - AutoRun File - [2011-08-03 15:42:22 | 000,094,025 | ---- | M] () - E:\autosave.win.bak -- [ NTFS ]
O32 - AutoRun File - [2012-03-29 10:58:20 | 000,000,000 | ---D | M] - F:\AutoPatcher -- [ NTFS ]
O32 - AutoRun File - [2013-02-07 15:32:29 | 000,000,000 | ---D | M] - G:\AutoCAD 2010 -- [ NTFS ]
O32 - AutoRun File - [2011-08-06 15:20:40 | 000,000,000 | ---D | M] - J:\autorun.inf -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2013-04-11 08:33:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Shank
[2013-04-03 14:33:09 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Thunderbird
[2013-03-31 11:03:55 | 000,000,000 | ---D | C] -- C:\Program Files\Nightly
[2013-03-25 11:48:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nemesis\Ustawienia lokalne\Dane aplikacji\Master
[2013-03-25 11:37:26 | 000,000,000 | ---D | C] -- C:\Program Files\Master
[2013-03-22 14:24:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Tages
[2013-03-22 14:24:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Atari
[2013-03-18 14:14:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Egosoft
[2013-03-15 10:48:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nemesis\Ustawienia lokalne\Dane aplikacji\My Games
[2013-03-13 14:15:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dokumenty\Passolo Essential 2011
[2013-03-13 13:02:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Nemesis\dwhelper
[9 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\System32\drivers\*.tmp files -> C:\WINDOWS\System32\drivers\*.tmp -> ]
[1 C:\Documents and Settings\Nemesis\Moje dokumenty\*.tmp files -> C:\Documents and Settings\Nemesis\Moje dokumenty\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2013-04-11 14:31:58 | 000,009,835 | ---- | M] () -- C:\WINDOWS\WINCMD.INI
[2013-04-11 14:21:24 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013-04-11 14:18:15 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013-04-11 08:33:12 | 000,000,442 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Shank.lnk
[2013-04-10 21:11:50 | 000,000,114 | ---- | M] () -- C:\WINDOWS\YdpDict.INI
[2013-04-09 09:23:59 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013-04-07 21:57:52 | 000,006,729 | -H-- | M] () -- C:\WINDOWS\System32\BTImages.dat
[2013-04-03 23:48:23 | 000,001,061 | ---- | M] () -- C:\WINDOWS\wcx_ftp.ini
[2013-04-01 11:14:30 | 000,251,880 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013-03-25 09:55:38 | 000,693,976 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013-03-25 09:55:38 | 000,073,432 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013-03-22 18:16:42 | 000,000,147 | ---- | M] () -- C:\Documents and Settings\Nemesis\Pulpit\Magicka.url
[2013-03-22 18:16:20 | 000,000,177 | ---- | M] () -- C:\Documents and Settings\Nemesis\Pulpit\Might and Magic Clash of Heroes.url
[2013-03-22 18:15:54 | 000,000,198 | ---- | M] () -- C:\Documents and Settings\Nemesis\Pulpit\The Incredible Adventures of Van Helsing - Preview.url
[2013-03-22 14:24:40 | 000,083,872 | ---- | M] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2013-03-22 14:24:40 | 000,025,888 | ---- | M] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2013-03-22 14:24:38 | 000,000,669 | ---- | M] () -- C:\Documents and Settings\Nemesis\Pulpit\Codename Panzers Cold War.lnk
[2013-03-19 16:49:25 | 001,074,672 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2013-03-19 16:49:25 | 000,000,001 | ---- | M] () -- C:\WINDOWS\System32\nvdrssel.bin
[2013-03-19 16:48:05 | 001,074,672 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2013-03-19 03:11:40 | 000,008,197 | ---- | M] () -- C:\Documents and Settings\Nemesis\Moje dokumenty\ax_files.xml
[2013-03-18 10:56:22 | 000,563,624 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2013-03-18 10:56:22 | 000,499,212 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2013-03-18 10:56:22 | 000,109,098 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2013-03-18 10:56:22 | 000,087,350 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2013-03-15 11:16:28 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2013-03-15 10:39:58 | 000,000,596 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Far Cry® 2.lnk
[2013-03-14 02:34:13 | 000,000,924 | ---- | M] () -- C:\WINDOWS\WinGuide.INI
[2013-03-13 14:36:11 | 000,001,851 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\SDL MultiTerm 2011 Desktop.lnk
[2013-03-13 14:32:01 | 000,001,874 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\SDL Trados Studio 2011.lnk
[2013-03-13 14:15:33 | 000,000,891 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\SDL Passolo Essential 2011 SP6.lnk
[9 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\System32\drivers\*.tmp files -> C:\WINDOWS\System32\drivers\*.tmp -> ]
[1 C:\Documents and Settings\Nemesis\Moje dokumenty\*.tmp files -> C:\Documents and Settings\Nemesis\Moje dokumenty\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2013-04-11 08:33:12 | 000,000,442 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Shank.lnk
[2013-03-25 09:55:39 | 000,000,930 | ---- | C] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013-03-22 14:24:38 | 000,000,669 | ---- | C] () -- C:\Documents and Settings\Nemesis\Pulpit\Codename Panzers Cold War.lnk
[2013-03-15 10:46:20 | 000,000,147 | ---- | C] () -- C:\Documents and Settings\Nemesis\Pulpit\Magicka.url
[2013-03-15 10:39:58 | 000,000,596 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Far Cry® 2.lnk
[2013-03-13 14:32:01 | 000,001,874 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\SDL Trados Studio 2011.lnk
[2013-03-13 14:15:33 | 000,000,891 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\SDL Passolo Essential 2011 SP6.lnk
[2013-01-23 17:49:42 | 000,006,729 | -H-- | C] () -- C:\WINDOWS\System32\BTImages.dat
[2013-01-21 16:57:26 | 001,074,672 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2013-01-21 16:57:25 | 001,074,672 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2013-01-21 16:57:25 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2013-01-21 16:56:43 | 002,284,064 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data
[2013-01-11 17:24:37 | 002,170,880 | ---- | C] () -- C:\WINDOWS\System32\drffmpeg.dll
[2012-09-02 19:10:43 | 000,067,584 | ---- | C] () -- C:\Documents and Settings\Nemesis\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-08-26 23:09:15 | 000,001,213 | ---- | C] () -- C:\WINDOWS\disney.ini
[2012-08-14 18:49:27 | 000,216,064 | ---- | C] ( ) -- C:\WINDOWS\System32\lagarith.dll
[2012-08-14 18:49:26 | 000,650,752 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2012-08-14 18:49:26 | 000,243,200 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2012-08-14 18:49:23 | 000,112,640 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2012-08-02 02:09:31 | 000,310,529 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-1957994488-1417001333-839522115-1003-0.dat
[2012-08-02 02:09:31 | 000,181,402 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat
[2012-08-01 20:52:04 | 000,000,342 | ---- | C] () -- C:\WINDOWS\pdf2word.INI
[2012-08-01 20:25:07 | 000,000,069 | ---- | C] () -- C:\WINDOWS\c.INI
[2012-08-01 16:30:46 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\pdfpg.dat
[2012-07-30 10:47:04 | 000,001,024 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\sowdp88.dat
[2012-07-30 10:46:59 | 000,000,048 | ---- | C] () -- C:\WINDOWS\System32\pdfutil.ini
[2012-07-27 19:02:45 | 000,016,201 | ---- | C] () -- C:\WINDOWS\W2BNEUnin.dat
[2012-07-27 17:52:39 | 000,086,528 | ---- | C] () -- C:\WINDOWS\bnetunin.exe
[2012-07-27 17:52:39 | 000,061,440 | ---- | C] () -- C:\WINDOWS\diabunin.exe
[2012-07-27 17:37:16 | 000,000,757 | ---- | C] () -- C:\Documents and Settings\Nemesis\Dane aplikacji\MPQEditor.ini
[2012-07-27 14:49:25 | 000,003,592 | ---- | C] () -- C:\WINDOWS\smacker.ini
[2012-07-26 19:00:11 | 000,068,972 | ---- | C] () -- C:\WINDOWS\System32\nglide_uninst.exe
[2012-07-18 12:20:05 | 000,000,113 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft.SqlServer.Compact.351.32.bc
[2012-06-01 00:56:23 | 000,027,188 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2012-05-31 13:12:41 | 000,083,872 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2012-05-31 13:12:41 | 000,025,888 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2012-05-14 13:23:24 | 000,049,152 | R--- | C] () -- C:\WINDOWS\AutoSet.dll
[2012-05-14 13:23:16 | 000,065,024 | ---- | C] () -- C:\WINDOWS\System32\DECODER.DLL
[2012-05-09 03:53:14 | 001,294,336 | ---- | C] () -- C:\WINDOWS\System32\glide3x.dll
[2012-05-07 20:44:05 | 000,006,112 | ---- | C] () -- C:\WINDOWS\System32\drivers\cdenable.sys
[2012-05-07 20:43:40 | 000,006,112 | ---- | C] () -- C:\WINDOWS\System32\cdenable.sys
[2012-05-07 19:58:30 | 000,001,285 | ---- | C] () -- C:\WINDOWS\HFVExplorer.INI
[2012-05-07 19:58:30 | 000,001,061 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2012-05-07 19:58:30 | 000,000,924 | ---- | C] () -- C:\WINDOWS\WinGuide.INI
[2012-05-07 19:58:30 | 000,000,575 | ---- | C] () -- C:\WINDOWS\pkplugin.ini
[2012-05-07 19:58:30 | 000,000,426 | ---- | C] () -- C:\WINDOWS\X-ED.ini
[2012-05-07 19:58:30 | 000,000,269 | ---- | C] () -- C:\WINDOWS\QTW.INI
[2012-05-07 19:58:30 | 000,000,268 | ---- | C] () -- C:\WINDOWS\BasiliskII.ini
[2012-05-07 19:58:30 | 000,000,260 | ---- | C] () -- C:\WINDOWS\SIERRA.INI
[2012-05-07 19:58:30 | 000,000,255 | ---- | C] () -- C:\WINDOWS\Clony2.ini
[2012-05-07 19:58:30 | 000,000,132 | ---- | C] () -- C:\WINDOWS\winamp.ini
[2012-05-07 19:58:30 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2012-05-07 19:58:30 | 000,000,049 | ---- | C] () -- C:\WINDOWS\entpack.ini
[2012-05-07 19:58:30 | 000,000,029 | ---- | C] () -- C:\WINDOWS\DEBUGSM.INI
[2012-05-07 19:58:30 | 000,000,024 | ---- | C] () -- C:\WINDOWS\MARIS.INI
[2012-05-07 19:58:30 | 000,000,023 | ---- | C] () -- C:\WINDOWS\BlendSettings.ini
[2012-05-07 19:58:30 | 000,000,010 | ---- | C] () -- C:\WINDOWS\WININIT.INI
[2012-05-07 19:58:30 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2012-05-07 19:58:30 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Darkstone.INI
[2012-05-07 19:58:29 | 000,004,500 | ---- | C] () -- C:\WINDOWS\FRED2.INI
[2012-05-07 19:58:29 | 000,004,467 | ---- | C] () -- C:\WINDOWS\FRED.INI
[2012-05-07 19:58:29 | 000,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat
[2012-05-07 19:58:22 | 000,216,064 | ---- | C] () -- C:\WINDOWS\UninstallW.exe
[2012-05-07 19:58:21 | 000,284,160 | ---- | C] () -- C:\WINDOWS\unin0407.exe
[2012-05-07 19:58:20 | 000,472,576 | ---- | C] () -- C:\WINDOWS\Radeon Omega Drivers v4.8.442 Uninstall.exe
[2012-05-07 19:58:20 | 000,472,576 | ---- | C] () -- C:\WINDOWS\Nvidia Omega Drivers v2.169.21 Uninstall.exe
[2012-05-07 19:58:19 | 000,578,611 | ---- | C] () -- C:\WINDOWS\adb.exe
[2012-05-07 19:21:44 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012-05-07 14:46:33 | 000,001,870 | ---- | C] () -- C:\WINDOWS\If42le.ini
[2012-05-07 14:46:33 | 000,000,314 | ---- | C] () -- C:\WINDOWS\Pexplore.ini
[2012-05-07 14:45:18 | 000,011,776 | ---- | C] () -- C:\WINDOWS\System32\pmsbfn32.dll
[2012-05-07 14:45:18 | 000,000,410 | ---- | C] () -- C:\WINDOWS\umxaddin.ini
[2012-05-07 14:44:29 | 000,000,126 | ---- | C] () -- C:\WINDOWS\SCNDRVU.INI
[2012-05-07 12:34:18 | 000,000,448 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol
[2012-05-07 12:20:15 | 000,000,114 | ---- | C] () -- C:\WINDOWS\YdpDict.INI
[2012-05-07 10:04:36 | 000,000,427 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2012-05-07 10:04:35 | 000,000,063 | ---- | C] () -- C:\WINDOWS\mdm.ini
[2012-05-07 10:04:30 | 000,000,000 | ---- | C] () -- C:\WINDOWS\NSREX.INI
[2012-05-07 09:38:44 | 000,000,132 | ---- | C] () -- C:\Documents and Settings\Nemesis\Ustawienia lokalne\Dane aplikacji\fusioncache.dat
[2012-05-07 09:37:47 | 001,474,832 | ---- | C] () -- C:\WINDOWS\System32\drivers\sfi.dat
[2012-05-06 21:38:38 | 000,000,208 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2012-05-06 21:38:14 | 000,176,128 | ---- | C] () -- C:\WINDOWS\System32\Bliss.exe
[2012-05-06 21:07:43 | 000,178,688 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2012-05-06 19:46:30 | 000,432,184 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2012-05-06 18:48:57 | 000,036,352 | ---- | C] () -- C:\WINDOWS\System32\SX32W.DLL
[2012-05-06 18:40:20 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2012-05-06 18:39:23 | 000,251,880 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012-05-06 18:39:12 | 000,254,000 | ---- | C] ( ) -- C:\WINDOWS\System32\Audio3D.dll
[2012-05-06 18:39:12 | 000,254,000 | ---- | C] ( ) -- C:\WINDOWS\System32\A3D.dll
[2012-05-06 18:12:22 | 000,011,456 | ---- | C] () -- C:\WINDOWS\System32\drivers\AsIO.sys
[2012-05-06 18:12:21 | 000,011,832 | ---- | C] () -- C:\WINDOWS\System32\drivers\AsInsHelp64.sys
[2012-05-06 18:12:21 | 000,010,216 | ---- | C] () -- C:\WINDOWS\System32\drivers\AsInsHelp32.sys
[2012-05-06 18:12:09 | 000,005,810 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys
[2012-05-06 18:00:34 | 000,001,769 | ---- | C] () -- C:\WINDOWS\Language_trs.ini
[2012-05-06 17:36:55 | 000,009,835 | ---- | C] () -- C:\WINDOWS\WINCMD.INI
[2012-05-06 16:51:15 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012-05-06 16:47:31 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2012-04-27 15:56:18 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\nglide_config.exe
[2011-09-28 17:44:14 | 000,179,271 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2012-05-06 18:26:42 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008-04-14 22:50:48 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2008-04-14 22:50:32 | 000,472,064 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008-04-14 22:50:58 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-05-06 18:12:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ASUS
[2012-05-06 18:38:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ASUS OC Profiles
[2013-02-07 15:12:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Autodesk
[2012-07-17 20:47:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software
[2013-01-21 15:15:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVG January 2013 Campaign
[2013-02-05 14:33:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Battle.net
[2013-01-21 14:35:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\CheckPoint
[2012-07-17 18:24:36 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Common Files
[2012-05-07 22:18:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\CPA_VA
[2012-09-27 21:09:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Divinity 2 Demo
[2012-05-22 22:00:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Downloaded Installations
[2013-01-12 12:16:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Free Download Manager
[2013-01-07 15:04:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\FreeDownloadManager.ORG
[2012-08-29 23:45:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MemoQ
[2013-01-21 16:10:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MFAData
[2012-05-07 14:46:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Newsoft
[2013-04-11 14:22:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Parallels
[2012-05-06 18:49:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Passolo 2007
[2012-06-11 00:55:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Passolo Translator
[2012-11-14 14:32:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PDF Writer
[2012-11-27 18:06:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SDL
[2012-05-07 11:00:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SDL International
[2013-03-22 14:24:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Tages
[2013-03-01 18:03:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2012-08-21 16:35:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Test Drive Unlimited
[2012-09-29 15:43:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Tlen.pl
[2012-08-06 12:01:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ubisoft
[2012-08-19 15:57:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2012-06-01 15:52:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\.kde
[2013-02-22 22:46:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\.minecraft
[2012-05-14 01:07:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\Aladdin Systems
[2012-08-19 16:40:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\AnvSoft
[2013-04-01 13:20:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\Audacity
[2013-02-07 15:32:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\Autodesk
[2012-08-31 20:01:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\CCS64
[2013-01-21 15:24:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\CheckPoint
[2012-11-07 23:31:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\Dev-Cpp
[2012-08-01 17:44:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\Downloaded Installations
[2012-06-04 13:46:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\Emulators
[2012-05-06 17:59:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\ESET
[2013-02-04 02:36:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\EurekaLog
[2013-01-05 20:23:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\FLV Extract
[2013-03-31 01:23:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\Free Download Manager
[2013-02-04 12:55:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\HexChat
[2012-07-26 01:17:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\ImgBurn
[2012-06-01 12:26:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\K-Meleon
[2012-11-03 00:32:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\Kamerzysta
[2012-06-01 12:53:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\KDE
[2012-05-10 11:42:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\LibreOffice
[2012-08-29 23:53:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\MemoQ
[2012-09-10 01:10:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\metamorphose2
[2012-08-16 21:44:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\NewSoft
[2012-09-03 16:22:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\Nitro PDF
[2012-06-01 17:21:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\Notepad++
[2012-08-19 16:40:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\OpenCandy
[2012-05-25 17:29:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\Opera
[2012-05-22 22:46:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\Parallels
[2012-05-06 18:49:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\Passolo 2007
[2012-06-11 00:36:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\Passolo 2009
[2012-06-11 00:55:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\Passolo Translator
[2012-11-14 14:32:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\PDF Writer
[2012-08-05 19:48:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\pdfforge
[2012-07-02 13:35:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\ProtectDISC
[2012-11-17 13:15:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\runic games
[2012-11-27 18:07:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\SDL
[2012-05-06 20:35:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\SDL International
[2012-08-01 20:09:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\Smart PDF Converter Pro
[2012-05-06 19:04:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\TaboretSoft
[2012-05-06 19:47:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\Thunderbird
[2012-09-29 15:56:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\Tlen.pl
[2012-05-07 11:12:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\Trados
[2012-08-06 12:01:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\Ubisoft
[2013-04-11 00:50:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\uTorrent
[2012-09-15 22:22:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\wargaming.net
[2013-01-30 12:20:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Nemesis\Dane aplikacji\XnView
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 5120 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\desktop.ini:gs5sys
@Alternate Data Stream - 1536 bytes -> C:\Documents and Settings\Nemesis\Szablony:gs5sys
@Alternate Data Stream - 1536 bytes -> C:\Documents and Settings\Nemesis\Pulpit:gs5sys
@Alternate Data Stream - 1536 bytes -> C:\Documents and Settings\Nemesis\Moje dokumenty:gs5sys
@Alternate Data Stream - 1536 bytes -> C:\Documents and Settings\Nemesis\Dane aplikacji\desktop.ini:gs5sys
@Alternate Data Stream - 1536 bytes -> C:\Documents and Settings\Nemesis\Cookies:gs5sys
@Alternate Data Stream - 1536 bytes -> C:\Documents and Settings\All Users\Szablony:gs5sys
@Alternate Data Stream - 1536 bytes -> C:\Documents and Settings\All Users\Dokumenty\desktop.ini:gs5sys
@Alternate Data Stream - 129 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:05EE1EEF

< End of report >