OTL logfile created on: 2013-06-06 00:07:22 - Run 3 OTL by OldTimer - Version 3.2.69.0 Folder = F:\ 64bit- Professional (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 1,87 Gb Available Physical Memory | 46,83% Memory free 8,00 Gb Paging File | 5,80 Gb Available in Paging File | 72,59% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 48,73 Gb Total Space | 2,00 Gb Free Space | 4,11% Space Free | Partition Type: NTFS Drive D: | 249,26 Gb Total Space | 0,11 Gb Free Space | 0,04% Space Free | Partition Type: NTFS Drive F: | 3,77 Gb Total Space | 3,75 Gb Free Space | 99,47% Space Free | Partition Type: FAT32 Drive G: | 1397,26 Gb Total Space | 2,10 Gb Free Space | 0,15% Space Free | Partition Type: NTFS Drive I: | 76,32 Gb Total Space | 0,59 Gb Free Space | 0,77% Space Free | Partition Type: NTFS Drive L: | 931,51 Gb Total Space | 139,59 Gb Free Space | 14,99% Space Free | Partition Type: NTFS Computer Name: MATEUSZ_1989 | User Name: Mateusz | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2013-06-05 20:20:08 | 000,602,112 | ---- | M] (OldTimer Tools) -- F:\OTL.exe PRC - [2013-05-10 09:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2013-03-13 18:47:50 | 021,047,208 | ---- | M] (Redefine Sp z o.o.) -- C:\Program Files (x86)\ipla\ipla.exe PRC - [2012-11-29 11:32:16 | 002,086,984 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) -- C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.2.1 Home Edition\bin\EpmNews.exe PRC - [2011-06-01 15:14:56 | 013,349,472 | ---- | M] (GG Network S.A.) -- C:\Program Files (x86)\Gadu-Gadu 10\gg.exe PRC - [2010-10-27 19:17:52 | 000,207,424 | ---- | M] (ArcSoft Inc.) -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe PRC - [2010-07-22 18:07:05 | 000,814,344 | ---- | M] (ABBYY) -- C:\Program Files (x86)\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe PRC - [2010-04-29 22:38:06 | 000,258,048 | ---- | M] (ArcSoft, Inc.) -- G:\TotalMedia 3.5\TMMonitor.exe PRC - [2010-04-01 11:16:20 | 000,357,696 | ---- | M] (DT Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe PRC - [2010-03-18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe PRC - [2009-11-29 01:22:07 | 002,652,440 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe PRC - [2009-11-29 01:22:04 | 000,040,384 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe PRC - [2009-05-21 21:21:18 | 000,890,368 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\HP\Digital Imaging\bin\Hpqdirec.exe PRC - [2008-06-24 16:06:06 | 001,840,424 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe PRC - [2007-05-30 14:14:22 | 000,050,688 | ---- | M] () -- C:\Program Files (x86)\KatMouse\KatMouse.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2013-05-15 04:11:16 | 016,033,160 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll MOD - [2013-03-13 18:47:54 | 000,068,936 | ---- | M] () -- C:\Program Files (x86)\ipla\ziplib.dll MOD - [2013-03-13 18:47:52 | 000,393,032 | ---- | M] () -- C:\Program Files (x86)\ipla\jabberoo.dll MOD - [2013-03-13 18:36:06 | 000,294,400 | ---- | M] () -- C:\Program Files (x86)\ipla\MediaFileScanner.dll MOD - [2011-06-01 15:15:42 | 000,217,696 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\gglog.dll MOD - [2011-06-01 15:15:40 | 000,123,488 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\ggipcradioproxy.dll MOD - [2011-06-01 15:15:38 | 000,017,504 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\ggipc.dll MOD - [2011-06-01 15:15:36 | 000,027,744 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\ggcrypto.dll MOD - [2011-06-01 15:15:32 | 000,356,960 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\ggcommon.dll MOD - [2011-04-16 05:04:30 | 014,749,696 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtWebKit4.dll MOD - [2011-02-17 11:00:28 | 001,781,760 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtScript4.dll MOD - [2011-02-17 11:00:28 | 000,393,216 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtXml4.dll MOD - [2011-02-17 11:00:28 | 000,327,680 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtSvg4.dll MOD - [2011-02-17 11:00:26 | 001,044,480 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtNetwork4.dll MOD - [2011-02-17 11:00:24 | 009,097,216 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtGui4.dll MOD - [2011-02-17 11:00:24 | 002,560,000 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtCore4.dll MOD - [2010-08-06 21:00:32 | 000,311,296 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qtiff4.dll MOD - [2010-08-06 21:00:32 | 000,274,432 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qmng4.dll MOD - [2010-08-06 21:00:32 | 000,143,360 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qjpeg4.dll MOD - [2010-08-06 21:00:32 | 000,027,648 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qgif4.dll MOD - [2010-08-06 21:00:32 | 000,018,944 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qsvg4.dll MOD - [2010-03-19 09:33:38 | 000,059,904 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\zlib1.dll MOD - [2009-07-14 03:15:45 | 000,364,544 | ---- | M] () -- C:\Windows\SysWOW64\msjetoledb40.dll MOD - [2009-05-21 21:21:18 | 000,140,288 | ---- | M] () -- C:\Program Files (x86)\HP\Digital Imaging\bin\libexpatw.dll MOD - [2008-12-30 18:23:28 | 000,214,528 | ---- | M] () -- C:\Program Files (x86)\KatMouse\KatMouseH.dll MOD - [2007-06-22 16:48:58 | 000,044,032 | ---- | M] () -- C:\Program Files (x86)\KatMouse\KatMouseS.dll MOD - [2007-05-30 14:14:22 | 000,050,688 | ---- | M] () -- C:\Program Files (x86)\KatMouse\KatMouse.exe MOD - [2007-04-19 10:33:00 | 000,035,584 | ---- | M] () -- G:\TotalMedia 3.5\uPiApi.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2010-08-04 03:51:20 | 000,203,264 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2009-11-29 01:22:04 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner) SRV:[b]64bit:[/b] - [2009-11-29 01:22:04 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner) SRV:[b]64bit:[/b] - [2009-11-29 01:22:04 | 000,040,384 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2013-05-15 04:11:17 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2013-05-10 09:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2010-07-22 18:07:05 | 000,814,344 | ---- | M] (ABBYY) [Auto | Running] -- C:\Program Files (x86)\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Professional.10.0) SRV - [2010-03-18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon) SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2008-10-25 11:44:08 | 000,065,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft Office 2007\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2012-12-21 14:53:58 | 000,017,480 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\epmntdrv.sys -- (epmntdrv) DRV:[b]64bit:[/b] - [2012-12-21 14:53:58 | 000,009,800 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\EuGdiDrv.sys -- (EuGdiDrv) DRV:[b]64bit:[/b] - [2012-09-12 22:06:55 | 000,164,736 | ---- | M] (ITE ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IT9135BDA.sys -- (IT9135BDA) DRV:[b]64bit:[/b] - [2012-04-29 12:12:46 | 000,082,816 | ---- | M] (VSO Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\pcouffin.sys -- (pcouffin) DRV:[b]64bit:[/b] - [2010-08-04 04:22:36 | 007,451,648 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:[b]64bit:[/b] - [2010-08-04 04:22:36 | 007,451,648 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2010-08-04 03:15:44 | 000,268,288 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2010-01-05 19:23:18 | 001,847,296 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athurx.sys -- (athur) DRV:[b]64bit:[/b] - [2009-12-14 19:17:36 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2009-11-29 01:11:06 | 000,051,280 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi) DRV:[b]64bit:[/b] - [2009-11-29 01:10:47 | 000,111,184 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP) DRV:[b]64bit:[/b] - [2009-11-29 01:08:11 | 000,028,752 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr.sys -- (aswRdr) DRV:[b]64bit:[/b] - [2009-11-29 01:07:56 | 000,063,568 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt) DRV:[b]64bit:[/b] - [2009-11-29 01:07:33 | 000,022,096 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk) DRV:[b]64bit:[/b] - [2009-09-11 13:49:18 | 000,076,552 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmXlCore.sys -- (WmXlCore) DRV:[b]64bit:[/b] - [2009-09-11 13:49:08 | 000,015,880 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmVirHid.sys -- (WmVirHid) DRV:[b]64bit:[/b] - [2009-09-11 13:48:58 | 000,036,872 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmHidLo.sys -- (WmHidLo) DRV:[b]64bit:[/b] - [2009-09-11 13:48:46 | 000,041,096 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmFilter.sys -- (WmFilter) DRV:[b]64bit:[/b] - [2009-09-11 13:48:36 | 000,026,248 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmBEnum.sys -- (WmBEnum) DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-06-30 09:37:16 | 000,033,800 | ---- | M] (Panda Security, S.L.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\pavboot64.sys -- (pavboot) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-03-02 00:05:32 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV - [2012-12-21 14:54:00 | 000,014,920 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\epmntdrv.sys -- (epmntdrv) DRV - [2012-12-21 14:53:58 | 000,009,160 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\EuGdiDrv.sys -- (EuGdiDrv) DRV - [2010-06-22 14:43:37 | 000,014,544 | ---- | M] (OpenLibSys.org) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\hmonitor45.sys -- (Hmonitor45) DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) DRV - [2007-04-05 00:00:00 | 000,018,304 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\EVEREST\kerneld.amd64 -- (EverestDriver) DRV - [2002-01-12 16:30:34 | 000,003,567 | ---- | M] (Beyond Logic http://www.beyondlogic.org) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\PortTalk.sys -- (PortTalk) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-1734422175-2524970363-470198181-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKU\S-1-5-21-1734422175-2524970363-470198181-1000\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-1734422175-2524970363-470198181-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-1734422175-2524970363-470198181-1000\..\SearchScopes\{4B2D70F6-6E96-476B-B510-062145FB3691}: "URL" = http://www.google.com/search?hl=pl&q={searchTerms} IE - HKU\S-1-5-21-1734422175-2524970363-470198181-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.useDBForOrder: "false" FF - prefs.js..extensions.enabledAddons: YouTubetoALL%40ALLPlayer.org:0.8.4 FF - prefs.js..extensions.enabledAddons: nosquint%40urandom.ca:2.1.9 FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.15 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9.3 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF - prefs.js..extensions.enabledItems: player@vividas.com:4.1.0 FF - prefs.js..extensions.enabledItems: nosquint@urandom.ca:2.1.2 FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.3 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll File not found FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll File not found FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@pandasecurity.com/activescan: C:\Program Files (x86)\Panda Security\ActiveScan 2.0\npwrapper.dll (Panda Security) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.647: c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.647: c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.652: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll File not found FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.652: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll File not found FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.647: c:\program files (x86)\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.8: C:\Program Files (x86)\VLC\npvlc.dll (the VideoLAN Team) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2009-12-20 15:25:39 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: D:\Mozilla Firefox\components [2013-05-20 22:14:45 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: D:\Mozilla Firefox\plugins [2013-05-22 23:03:23 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-12-28 21:04:32 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013-05-22 23:03:23 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2009-12-20 15:25:39 | 000,000,000 | ---D | M] [2009-11-21 22:21:52 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\Extensions [2013-06-04 23:28:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\Firefox\Profiles\h86a7esu.default\extensions [2012-12-29 01:23:30 | 000,000,000 | ---D | M] (Selenium IDE) -- C:\Users\Mateusz\AppData\Roaming\mozilla\Firefox\Profiles\h86a7esu.default\extensions\{a6fd85ed-e919-4a43-a5af-8da18bda539f} [2013-05-29 12:02:09 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Mateusz\AppData\Roaming\mozilla\Firefox\Profiles\h86a7esu.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-05-28 17:05:51 | 000,000,000 | ---D | M] (Iplex to ALLPlayer) -- C:\Users\Mateusz\AppData\Roaming\mozilla\Firefox\Profiles\h86a7esu.default\extensions\IplextoALL@ALLPlayer.org [2011-03-13 20:11:19 | 000,000,000 | ---D | M] (Vividas player plugin) -- C:\Users\Mateusz\AppData\Roaming\mozilla\Firefox\Profiles\h86a7esu.default\extensions\player@vividas.com [2012-12-29 01:23:31 | 000,007,074 | ---- | M] () (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\firefox\profiles\h86a7esu.default\extensions\csharpformatters@seleniumhq.org.xpi [2011-07-15 17:40:11 | 000,003,751 | ---- | M] () (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\firefox\profiles\h86a7esu.default\extensions\groovyformatters@seleniumhq.org.xpi [2011-08-22 22:54:56 | 000,010,043 | ---- | M] () (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\firefox\profiles\h86a7esu.default\extensions\IplextoALL@ALLPlayer.org.xpi [2012-12-29 01:23:31 | 000,013,021 | ---- | M] () (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\firefox\profiles\h86a7esu.default\extensions\javaformatters@seleniumhq.org.xpi [2013-06-04 23:28:34 | 000,284,329 | ---- | M] () (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\firefox\profiles\h86a7esu.default\extensions\jid0-GaZOxvWNYcafEsmayJDIG3XXVi8@jetpack.xpi [2013-05-03 20:15:29 | 000,114,250 | ---- | M] () (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\firefox\profiles\h86a7esu.default\extensions\nosquint@urandom.ca.xpi [2013-04-07 21:56:04 | 000,014,928 | ---- | M] () (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\firefox\profiles\h86a7esu.default\extensions\p24ext@przelewy24.pl.xpi [2011-07-15 17:40:11 | 000,003,905 | ---- | M] () (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\firefox\profiles\h86a7esu.default\extensions\perlformatters@seleniumhq.org.xpi [2011-07-15 17:40:11 | 000,004,922 | ---- | M] () (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\firefox\profiles\h86a7esu.default\extensions\phpformatters@seleniumhq.org.xpi [2012-12-29 01:23:31 | 000,007,016 | ---- | M] () (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\firefox\profiles\h86a7esu.default\extensions\pythonformatters@seleniumhq.org.xpi [2012-12-29 01:23:23 | 000,012,594 | ---- | M] () (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\firefox\profiles\h86a7esu.default\extensions\rubyformatters@seleniumhq.org.xpi [2013-03-02 23:14:23 | 000,014,676 | ---- | M] () (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\firefox\profiles\h86a7esu.default\extensions\YouTubetoALL@ALLPlayer.org.xpi [2013-05-25 23:28:07 | 000,534,431 | ---- | M] () (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\firefox\profiles\h86a7esu.default\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi [2011-08-11 18:30:16 | 000,001,874 | ---- | M] () (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\firefox\profiles\h86a7esu.default\extensions\{340c2bbc-ce74-4362-90b5-7c26312808ef}.xpi [2013-03-07 13:24:57 | 000,093,464 | ---- | M] () (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\firefox\profiles\h86a7esu.default\extensions\{966762eb-7132-4081-ac70-20d20161ad96}.xpi [2013-05-08 23:23:19 | 000,870,680 | ---- | M] () (No name found) -- C:\Users\Mateusz\AppData\Roaming\mozilla\firefox\profiles\h86a7esu.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-05-26 21:51:46 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions [2010-05-15 12:43:36 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2010-06-14 10:43:50 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010-08-11 16:24:03 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2010-12-03 12:12:31 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011-02-18 23:46:00 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2009-07-31 14:06:48 | 001,654,784 | ---- | M] (LizardTech) -- C:\Program Files (x86)\mozilla firefox\plugins\npdjvu.dll [2011-02-10 16:45:50 | 000,180,896 | ---- | M] ( ) -- C:\Program Files (x86)\mozilla firefox\plugins\npVividasPlayer.dll [2010-02-13 14:17:45 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2010-02-13 14:17:45 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2010-02-13 14:17:45 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2010-02-13 14:17:45 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2010-02-13 14:17:45 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2010-02-13 14:17:45 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (YouTube To ALLPlayer) - {61DB16C5-B733-43F4-872E-B20DC9E72740} - C:\Program Files (x86)\ALLPlayer\YouTubeToALLPlayer.dll (ALLPlayer.org) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office 2007\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) O4:[b]64bit:[/b] - HKLM..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Logitech Inc.) O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.) O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (ALWIL Software) O4 - HKLM..\Run: [Bonus.SSR.FR10] D:\ABBYY FineReader 10\Bonus.ScreenshotReader.exe (ABBYY.) O4 - HKLM..\Run: [EaseUS EPM tray] C:\Program Files (x86)\EaseUS\EaseUS Partition Master 9.2.1 Home Edition\bin\EpmNews.exe (CHENGDU YIWO Tech Development Co., Ltd) O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files (x86)\Microsoft Office 2007\Office12\GrooveMonitor.exe (Microsoft Corporation) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-1734422175-2524970363-470198181-1000..\Run: [ALLUpdate] C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe (ALLPlayer Group Ltd.) O4 - HKU\S-1-5-21-1734422175-2524970363-470198181-1000..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKU\S-1-5-21-1734422175-2524970363-470198181-1000..\Run: [Gadu-Gadu 10] C:\Program Files (x86)\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKU\S-1-5-21-1734422175-2524970363-470198181-1000..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe (Nero AG) O4 - HKU\S-1-5-21-1734422175-2524970363-470198181-1000..\Run: [IPLA!] C:\Program Files (x86)\ipla\ipla.exe (Redefine Sp z o.o.) O4 - HKU\S-1-5-21-1734422175-2524970363-470198181-1000..\Run: [Wisdom-soft AutoScreenRecorder 3.1 Free] 0 File not found O4 - Startup: C:\Users\Mateusz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\KatMouse.lnk = C:\Program Files (x86)\KatMouse\KatMouse.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O8:[b]64bit:[/b] - Extra context menu item: Download by GAS - Reg Error: Value error. File not found O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files (x86)\Microsoft Office 2007\Office12\EXCEL.EXE (Microsoft Corporation) O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - Reg Error: Value error. File not found O8:[b]64bit:[/b] - Extra context menu item: Save video on Savevid.com - C:\Program Files (x86)\Savevid\redirect.htm () O8:[b]64bit:[/b] - Extra context menu item: Se&nd to OneNote - res:///105 File not found O8:[b]64bit:[/b] - Extra context menu item: Ściągnij przy poomocy FlashGet3 - C:\Users\Mateusz\AppData\Roaming\FlashGetBHO\GetUrl.htm () O8:[b]64bit:[/b] - Extra context menu item: Ściągnij wszystko przy pomocy FlashGet3 - C:\Users\Mateusz\AppData\Roaming\FlashGetBHO\GetAllUrl.htm () O8:[b]64bit:[/b] - Extra context menu item: 使用快车3下载 - C:\Users\Mateusz\AppData\Roaming\FlashGetBHO\GetUrl.htm () O8:[b]64bit:[/b] - Extra context menu item: 使用快车3下载全部链接 - C:\Users\Mateusz\AppData\Roaming\FlashGetBHO\GetAllUrl.htm () O8 - Extra context menu item: Download by GAS - Reg Error: Value error. File not found O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files (x86)\Microsoft Office 2007\Office12\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: E&xport to Microsoft Excel - Reg Error: Value error. File not found O8 - Extra context menu item: Save video on Savevid.com - C:\Program Files (x86)\Savevid\redirect.htm () O8 - Extra context menu item: Se&nd to OneNote - res:///105 File not found O8 - Extra context menu item: Ściągnij przy poomocy FlashGet3 - C:\Users\Mateusz\AppData\Roaming\FlashGetBHO\GetUrl.htm () O8 - Extra context menu item: Ściągnij wszystko przy pomocy FlashGet3 - C:\Users\Mateusz\AppData\Roaming\FlashGetBHO\GetAllUrl.htm () O8 - Extra context menu item: 使用快车3下载 - C:\Users\Mateusz\AppData\Roaming\FlashGetBHO\GetUrl.htm () O8 - Extra context menu item: 使用快车3下载全部链接 - C:\Users\Mateusz\AppData\Roaming\FlashGetBHO\GetAllUrl.htm () O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office 2007\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office 2007\Office12\ONBttnIE.dll (Microsoft Corporation) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab (QuickTime Object) O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab (Java Plug-in 10.21.2) O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.7.0_21) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{17B66371-C214-406D-A6F7-B774E3427756}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E9AAB575-A772-4C02-80BF-FCE5B97831F3}: DhcpNameServer = 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ms-itss - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office 2007\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office 2007\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2012-11-03 18:23:16 | 000,000,000 | ---D | M] - G:\auto -- [ NTFS ] O32 - AutoRun File - [2012-11-05 00:18:27 | 169,053,038 | ---- | M] () - G:\AutoScreenRecorder_01 Nov. 04 23.18.avi -- [ NTFS ] O32 - AutoRun File - [2012-10-01 22:44:42 | 025,940,244 | ---- | M] () - G:\AutoScreenRecorder_01 Oct. 01 22.44.avi -- [ NTFS ] O32 - AutoRun File - [2012-10-03 22:30:45 | 008,471,076 | ---- | M] () - G:\AutoScreenRecorder_01 Oct. 03 22.30.avi -- [ NTFS ] O32 - AutoRun File - [2012-10-04 21:15:19 | 000,191,476 | ---- | M] () - G:\AutoScreenRecorder_01 Oct. 04 21.15.avi -- [ NTFS ] O32 - AutoRun File - [2012-09-28 10:39:08 | 057,350,220 | ---- | M] () - G:\AutoScreenRecorder_01 Sep. 28 10.39.avi -- [ NTFS ] O32 - AutoRun File - [2012-09-28 19:49:31 | 052,040,554 | ---- | M] () - G:\AutoScreenRecorder_01 Sep. 28 19.49.avi -- [ NTFS ] O32 - AutoRun File - [2012-09-29 21:46:27 | 008,258,212 | ---- | M] () - G:\AutoScreenRecorder_01 Sep. 29 21.46.avi -- [ NTFS ] O32 - AutoRun File - [2012-09-30 17:56:03 | 015,917,968 | ---- | M] () - G:\AutoScreenRecorder_01 Sep. 30 17.56.avi -- [ NTFS ] O32 - AutoRun File - [2012-09-28 14:05:56 | 012,235,728 | ---- | M] () - G:\AutoScreenRecorder_02 Sep. 28 14.05.avi -- [ NTFS ] O32 - AutoRun File - [2012-09-30 21:29:39 | 017,286,876 | ---- | M] () - G:\AutoScreenRecorder_02 Sep. 30 21.29.avi -- [ NTFS ] O32 - AutoRun File - [2013-04-18 15:58:17 | 176,496,774 | ---- | M] () - L:\AutoScreenRecorder_01 Apr. 18 15.58.avi -- [ NTFS ] O32 - Unable to obtain root file information for disk L:\ O33 - MountPoints2\{4cf0caf1-1232-11e2-bbfc-ce900d2b05ae}\Shell - "" = AutoRun O33 - MountPoints2\{4cf0caf1-1232-11e2-bbfc-ce900d2b05ae}\Shell\AutoRun\command - "" = K:\AutoRun.exe O33 - MountPoints2\{4cf0cafc-1232-11e2-bbfc-ce900d2b05ae}\Shell - "" = AutoRun O33 - MountPoints2\{4cf0cafc-1232-11e2-bbfc-ce900d2b05ae}\Shell\AutoRun\command - "" = K:\AutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2013-06-05 23:51:11 | 000,095,648 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2013-05-27 16:59:19 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Documents\test [2013-05-16 13:41:38 | 000,000,000 | ---D | C] -- C:\Users\Mateusz\Documents\pgwf_zmiany_strukturalne_grup_podmiotow_2011 [2012-04-29 12:04:35 | 000,082,816 | ---- | C] (VSO Software) -- C:\Users\Mateusz\AppData\Roaming\pcouffin.sys [4 C:\Users\Mateusz\Documents\*.tmp files -> C:\Users\Mateusz\Documents\*.tmp -> ] [3 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2013-06-06 00:11:14 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013-06-06 00:09:55 | 001,523,412 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2013-06-06 00:09:55 | 000,687,590 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2013-06-06 00:09:55 | 000,606,992 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2013-06-06 00:09:55 | 000,131,176 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2013-06-06 00:09:55 | 000,103,370 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2013-06-06 00:08:35 | 000,013,664 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013-06-06 00:08:35 | 000,013,664 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013-06-06 00:03:07 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013-06-05 23:32:40 | 000,000,004 | ---- | M] () -- C:\Users\Mateusz\AppData\Roaming\skype.ini [2013-06-05 10:12:23 | 000,000,296 | ---- | M] () -- C:\Windows\tasks\DLL-files.com Fixer_UPDATES.job [2013-05-29 23:24:50 | 000,000,616 | ---- | M] () -- C:\Users\Public\Desktop\TotalMedia 3.5.lnk [2013-05-29 23:24:50 | 000,000,611 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TMMonitor.lnk [2013-05-29 15:40:53 | 000,092,384 | ---- | M] () -- C:\Users\Mateusz\Desktop\5752055375.jpeg [2013-05-28 17:06:00 | 000,001,039 | ---- | M] () -- C:\Users\Public\Desktop\ALL Media Server.lnk [2013-05-28 16:21:59 | 000,062,872 | ---- | M] () -- C:\Users\Mateusz\Documents\Potwierdzenie przelewu Magdalena Majka.pdf [2013-05-21 18:46:48 | 000,025,136 | ---- | M] () -- C:\Users\Mateusz\Documents\tadzykistanmap.jpg [2013-05-21 18:40:54 | 000,011,272 | ---- | M] () -- C:\Users\Mateusz\Documents\Flag_of_Tajikistan.svg.png [2013-05-20 11:16:20 | 000,062,949 | ---- | M] () -- C:\Users\Mateusz\Documents\Potwierdzenie Magdalena Majka.pdf [2013-05-16 13:41:31 | 006,452,399 | ---- | M] () -- C:\Users\Mateusz\Documents\pgwf_zmiany_strukturalne_grup_podmiotow_2011.zip [2013-05-15 04:11:17 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2013-05-15 04:11:17 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2013-05-14 20:43:52 | 009,910,042 | ---- | M] () -- C:\Users\Mateusz\Documents\Glos_Wielkopolski_14_05_2013.pdf [2013-05-08 09:08:07 | 000,298,849 | ---- | M] () -- C:\Users\Mateusz\Documents\zameldowanie-na-pobyt-staly-1.pdf [2013-05-08 09:07:59 | 000,298,857 | ---- | M] () -- C:\Users\Mateusz\Documents\zameldowanie-na-pobyt-staly-2.pdf [4 C:\Users\Mateusz\Documents\*.tmp files -> C:\Users\Mateusz\Documents\*.tmp -> ] [3 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2013-06-05 18:38:35 | 000,000,004 | ---- | C] () -- C:\Users\Mateusz\AppData\Roaming\skype.ini [2013-05-29 15:40:51 | 000,092,384 | ---- | C] () -- C:\Users\Mateusz\Desktop\5752055375.jpeg [2013-05-28 16:21:59 | 000,062,872 | ---- | C] () -- C:\Users\Mateusz\Documents\Potwierdzenie przelewu Magdalena Majka.pdf [2013-05-21 18:46:46 | 000,025,136 | ---- | C] () -- C:\Users\Mateusz\Documents\tadzykistanmap.jpg [2013-05-21 18:40:50 | 000,011,272 | ---- | C] () -- C:\Users\Mateusz\Documents\Flag_of_Tajikistan.svg.png [2013-05-20 11:16:20 | 000,062,949 | ---- | C] () -- C:\Users\Mateusz\Documents\Potwierdzenie Magdalena Majka.pdf [2013-05-16 13:41:26 | 006,452,399 | ---- | C] () -- C:\Users\Mateusz\Documents\pgwf_zmiany_strukturalne_grup_podmiotow_2011.zip [2013-05-14 20:43:48 | 009,910,042 | ---- | C] () -- C:\Users\Mateusz\Documents\Glos_Wielkopolski_14_05_2013.pdf [2013-05-08 09:08:06 | 000,298,849 | ---- | C] () -- C:\Users\Mateusz\Documents\zameldowanie-na-pobyt-staly-1.pdf [2013-05-08 09:07:59 | 000,298,857 | ---- | C] () -- C:\Users\Mateusz\Documents\zameldowanie-na-pobyt-staly-2.pdf [2013-04-20 17:52:28 | 000,178,688 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2013-04-01 20:47:36 | 000,003,662 | ---- | C] () -- C:\Users\Mateusz\BlueScreenView_lng.ini [2013-01-15 16:50:02 | 002,468,520 | ---- | C] () -- C:\Windows\SysWow64\BootMan.exe [2013-01-15 16:50:02 | 000,019,840 | ---- | C] () -- C:\Windows\SysWow64\EuEpmGdi.dll [2013-01-15 16:50:01 | 000,087,112 | ---- | C] () -- C:\Windows\SysWow64\setupempdrv03.exe [2013-01-15 16:50:01 | 000,014,920 | ---- | C] () -- C:\Windows\SysWow64\epmntdrv.sys [2013-01-15 16:50:01 | 000,009,160 | ---- | C] () -- C:\Windows\SysWow64\EuGdiDrv.sys [2013-01-09 18:41:14 | 000,000,698 | ---- | C] () -- C:\Users\Mateusz\.jscreenfix.licence [2012-04-29 12:04:35 | 000,099,384 | ---- | C] () -- C:\Users\Mateusz\AppData\Roaming\inst.exe [2012-04-29 12:04:35 | 000,007,859 | ---- | C] () -- C:\Users\Mateusz\AppData\Roaming\pcouffin.cat [2012-04-29 12:04:35 | 000,001,167 | ---- | C] () -- C:\Users\Mateusz\AppData\Roaming\pcouffin.inf [2012-04-29 11:28:11 | 000,001,057 | ---- | C] () -- C:\Users\Mateusz\AppData\Roaming\vso_ts_preview.xml [2011-12-18 21:54:12 | 000,644,608 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2011-12-18 21:54:12 | 000,240,640 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2011-12-14 19:36:05 | 000,000,218 | ---- | C] () -- C:\Users\Mateusz\.recently-used.xbel [2011-12-07 22:23:27 | 000,007,168 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-10-19 17:27:45 | 000,001,025 | ---- | C] () -- C:\Windows\SysWow64\sysprs7.dll [2011-10-19 17:27:45 | 000,000,205 | ---- | C] () -- C:\Windows\SysWow64\lsprst7.dll [2011-08-24 22:28:47 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini [2011-06-13 22:33:31 | 000,004,096 | -H-- | C] () -- C:\Users\Mateusz\AppData\Local\keyfile3.drm [2011-04-04 20:27:01 | 000,001,024 | ---- | C] () -- C:\Users\Mateusz\.rnd [2011-02-12 20:39:19 | 000,000,041 | -HS- | C] () -- C:\ProgramData\.zreglib [2010-05-14 17:52:25 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2009-12-11 23:56:01 | 000,007,615 | ---- | C] () -- C:\Users\Mateusz\AppData\Local\resmon.resmoncfg [2006-11-01 22:22:25 | 000,001,875 | ---- | C] () -- C:\Users\Mateusz\AppData\Roaming\WWB7_32.DAT [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2010-07-27 16:59:11 | 014,162,944 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2010-07-27 16:03:24 | 012,867,584 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2009-07-14 03:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2013-04-08 17:59:22 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\SPSSInc [2013-04-08 17:59:22 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\SPSSInc [2013-06-03 16:53:32 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\avidemux [2010-11-22 23:38:34 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\BITS [2010-10-17 16:02:05 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\BlackBean [2011-05-22 19:38:21 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Canneverbe Limited [2011-09-04 16:32:41 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Capcom [2012-02-21 18:48:34 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\com.prezi.PreziDesktop [2013-04-04 21:18:38 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\DAEMON Tools Lite [2013-04-05 10:12:42 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\dll-files.com [2010-04-18 22:12:27 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\eMule [2010-09-11 17:56:31 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\eXPert PDF Editor [2010-11-22 22:43:23 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\FlashGet [2010-11-22 22:43:20 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\FlashGetBHO [2012-08-26 16:01:59 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\FreeHDConverter [2011-01-25 17:46:50 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Gadu-Gadu 10 [2010-04-03 17:16:39 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\GetRightToGo [2011-12-18 19:10:00 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\gretl [2011-12-14 18:12:31 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\gtk-2.0 [2013-06-06 00:04:03 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\ipla [2009-12-13 18:56:10 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\IrfanView [2011-05-23 15:32:33 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Location [2011-04-25 23:35:37 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\MC-TVConverter [2013-03-11 21:45:42 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\MetaQuotes [2011-09-05 08:29:57 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Mirillis [2010-11-14 20:13:09 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\MP3Rocket [2012-02-01 12:06:31 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\NapiProjekt [2010-01-11 11:33:33 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\NVD [2009-11-22 16:36:46 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\OpenFM [2010-11-22 23:44:16 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Orbit [2010-11-22 23:41:57 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\ProgSense [2010-11-24 17:49:12 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\RDRM [2010-12-13 20:12:12 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\RedDotGames [2013-04-20 14:44:02 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Shark007 [2010-01-11 19:41:05 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\SoftGrid Client [2010-10-04 16:54:25 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\SolidDocuments [2011-02-12 23:14:23 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\StarBurn [2006-11-01 22:21:52 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\StatSoft [2010-10-03 16:53:26 | 000,000,000 | ---D | M] -- C:\Users\Mateusz\AppData\Roaming\Sytexis Software [color=#E56717]========== Purity Check ==========[/color] < End of report >