OTL logfile created on: 2013-06-12 18:55:29 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = D:\dysk H\internet
 Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16614)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 1,31 Gb Available Physical Memory | 65,40% Memory free
2,75 Gb Paging File | 1,69 Gb Available in Paging File | 61,63% Paging File free
Paging file location(s): c:\pagefile.sys 768 1536 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 97,65 Gb Total Space | 80,35 Gb Free Space | 82,28% Space Free | Partition Type: NTFS
Drive D: | 368,10 Gb Total Space | 348,96 Gb Free Space | 94,80% Space Free | Partition Type: NTFS
Drive J: | 3,73 Gb Total Space | 1,60 Gb Free Space | 42,82% Space Free | Partition Type: FAT32
 
Computer Name: TADEUSZ-KOMPUTE | User Name: Grabek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2013-06-12 18:53:35 | 000,602,112 | ---- | M] (OldTimer Tools) -- D:\dysk H\internet\OTL.com
PRC - [2013-05-14 19:37:14 | 000,920,472 | ---- | M] (Mozilla Corporation) -- C:\Program Files\mozilla firefox\firefox.exe
PRC - [2013-03-20 10:07:18 | 000,233,472 | ---- | M] (Teruten) -- C:\Windows\System32\FsUsbExService.Exe
PRC - [2013-01-21 20:45:21 | 000,366,536 | ---- | M] (IncrediMail, Ltd.) -- C:\Program Files\IncrediMail\Bin\IncMail.exe
PRC - [2013-01-21 19:31:41 | 000,264,136 | ---- | M] (IncrediMail, Ltd.) -- C:\Program Files\IncrediMail\Bin\ImApp.exe
PRC - [2012-11-23 04:48:41 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2012-09-13 10:21:38 | 002,769,408 | ---- | M] (Johannes Wallroth) -- C:\Program Files\Sharp World Clock\Sharp World Clock.exe
PRC - [2012-01-12 17:52:31 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009-07-14 03:14:46 | 000,115,200 | ---- | M] () -- \\?\C:\Windows\System32\wbem\WMIADAP.EXE
PRC - [2009-07-14 03:14:29 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PrintIsolationHost.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2013-05-15 16:23:51 | 018,022,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\1f0bb5336d1706c9b8ad2330f3642760\PresentationFramework.ni.dll
MOD - [2013-05-15 16:23:24 | 011,522,560 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\9b2940478ec555990b37af5448b8f509\PresentationCore.ni.dll
MOD - [2013-05-15 16:23:05 | 003,883,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\a1949f57d2ec260e09768e98fecb0559\WindowsBase.ni.dll
MOD - [2013-05-15 16:22:58 | 013,199,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\6ded1c6dbf61d19f839da66c951d8fa9\System.Windows.Forms.ni.dll
MOD - [2013-05-15 16:22:56 | 007,070,208 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\93a17ba6cb6753328f25466bc0bf1cb1\System.Core.ni.dll
MOD - [2013-05-14 19:37:12 | 003,128,728 | ---- | M] () -- C:\Program Files\mozilla firefox\mozjs.dll
MOD - [2013-01-21 19:31:46 | 000,108,408 | ---- | M] () -- C:\Program Files\IncrediMail\Bin\PMC.dll
MOD - [2013-01-21 19:31:46 | 000,071,624 | ---- | M] () -- C:\Program Files\IncrediMail\Bin\wlessfp1.dll
MOD - [2013-01-21 19:31:43 | 000,268,232 | ---- | M] () -- C:\Program Files\IncrediMail\Bin\ImLookExU.dll
MOD - [2013-01-21 19:31:43 | 000,032,648 | ---- | M] () -- C:\Program Files\IncrediMail\Bin\IMHttpComm.dll
MOD - [2013-01-21 19:31:42 | 000,133,064 | ---- | M] () -- C:\Program Files\IncrediMail\Bin\ImComUtlU.dll
MOD - [2013-01-09 21:07:37 | 000,762,880 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\b454f5723ec86048063fe19d4267d9e8\System.Runtime.Remoting.ni.dll
MOD - [2013-01-09 21:04:03 | 001,812,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\40c7a89fe2cbf3c12a2c39e034da54cf\System.Xaml.ni.dll
MOD - [2013-01-09 14:42:32 | 005,617,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\fc476bbac36944e352c2f547352ffa64\System.Xml.ni.dll
MOD - [2013-01-09 14:42:17 | 001,667,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\78ecbee4a7444353dce52afb9d9d795c\System.Drawing.ni.dll
MOD - [2013-01-09 14:41:59 | 000,595,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\60674dde4b56087c189f576f36f6720f\PresentationFramework.Aero.ni.dll
MOD - [2013-01-09 14:41:57 | 009,095,168 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\f93dca0e4baa1dcb37cf75392b7c89da\System.ni.dll
MOD - [2013-01-09 14:41:46 | 014,416,896 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\6a1ccc1e1a79ce267d3d1808af382cd6\mscorlib.ni.dll
MOD - [2011-10-30 15:30:28 | 000,079,304 | ---- | M] () -- C:\Program Files\IncrediMail\Bin\ImAppRU.dll
MOD - [2000-08-21 12:39:30 | 000,061,440 | ---- | M] () -- C:\Program Files\E-Book Systems\FlipAlbum 6 Pro\FpLaunch.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - [2013-06-12 11:14:42 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013-03-20 10:07:18 | 000,233,472 | ---- | M] (Teruten) [Auto | Running] -- C:\Windows\System32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2013-02-26 00:22:34 | 001,260,320 | ---- | M] (NVIDIA Corporation) [Disabled | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2013-01-31 11:12:24 | 001,724,192 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2013-01-18 08:14:20 | 000,383,264 | ---- | M] (NVIDIA Corporation) [Disabled | Stopped] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2012-12-25 23:53:13 | 000,181,064 | ---- | M] (Sysinternals) [On_Demand | Stopped] -- C:\Windows\PSEXESVC.EXE -- (PSEXESVC)
SRV - [2012-12-18 21:08:28 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012-12-14 17:49:28 | 000,682,344 | ---- | M] (Malwarebytes Corporation) [Disabled | Stopped] -- D:\dysk D\p.naprawa\czyszczenie\MBam\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012-12-14 17:49:28 | 000,398,184 | ---- | M] (Malwarebytes Corporation) [Disabled | Stopped] -- D:\dysk D\p.naprawa\czyszczenie\MBam\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012-07-17 15:25:28 | 000,580,648 | ---- | M] (WiseCleaner.com) [Disabled | Stopped] -- C:\Program Files\Wise\Wise Care 365\BootTime.exe -- (WiseBootAssistant)
SRV - [2012-01-03 11:21:23 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009-07-14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007-05-31 16:21:24 | 000,379,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007-05-31 16:21:18 | 000,183,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
SRV - [2007-03-06 11:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe -- (Capture Device Service)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2013-04-04 14:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2013-03-20 10:07:16 | 000,037,344 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2013-02-26 00:22:06 | 008,939,296 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2013-02-22 09:16:54 | 000,153,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdm.sys -- (ssadmdm)
DRV - [2013-02-22 09:16:54 | 000,136,904 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadbus.sys -- (ssadbus)
DRV - [2013-02-22 09:16:54 | 000,017,864 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdfl.sys -- (ssadmdfl)
DRV - [2012-11-16 16:51:36 | 000,010,088 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Stopped] -- C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2012-10-24 17:46:15 | 000,014,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2012-10-24 17:46:14 | 000,049,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2012-10-24 17:46:14 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV - [2012-07-03 17:25:17 | 000,149,352 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2010-11-26 18:02:20 | 000,015,672 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\SmartDefragDriver.sys -- (SmartDefragDriver)
DRV - [2010-11-20 23:29:03 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010-07-04 21:51:26 | 000,004,096 | ---- | M] () [Kernel | Unavailable | Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5)
DRV - [2009-12-30 11:21:18 | 000,027,192 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\revoflt.sys -- (Revoflt)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKLM\..\SearchScopes,DefaultScope = 
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://gazeta.pl/
IE - HKCU\..\SearchScopes,DefaultScope = 
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{36BEBBD5-3211-4AF9-871C-E6B61CBB5F25}: "URL" = http://www.google.com/search?hl=pl&q={searchTerms}&rlz=1I7GGNI_plPL465
IE - HKCU\..\SearchScopes\{4DF17155-6D26-44D8-9C54-1D748B21C3C3}: "URL" = http://www.google.com/search?hl=pl&q={searchTerms}&rlz=1I7GGNI_plPL465
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
IE - HKCU\..\SearchScopes\BBA405ADD7B17A75BFCF151CDA60224C: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Bing "
FF - prefs.js..browser.search.order.3: "Bing "
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "gazeta.pl"
FF - prefs.js..extensions.enabledAddons: translator%40zoli.bod:2.1.0.3
FF - prefs.js..extensions.enabledAddons: %7Bd91a2be6-3b56-4dfb-97f5-5e48fe3ed473%7D:1.0
FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.15
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0
FF - prefs.js..keyword.URL: "http://www.bing.com/search?FORM=UP22DF&PC=UP22&dt=052513&q="
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.0.282: D:\dysk D\prog.nowe\Realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.0:  File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.0:  File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.0:  File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.0.282: D:\dysk D\prog.nowe\Realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.7: D:\dysk D\prog.nowe\VLC- player\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader:  File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3:  File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9:  File not found
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files\mozilla firefox\components [2013-05-14 19:37:15 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files\mozilla firefox\plugins [2013-05-17 17:42:05 | 000,000,000 | ---D | M]
 
[2012-12-09 14:16:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Grabek\AppData\Roaming\mozilla\Extensions
[2013-05-29 20:06:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Grabek\AppData\Roaming\mozilla\Firefox\Profiles\55dp877d.default-1367761954054\extensions
[2013-05-29 20:06:19 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Grabek\AppData\Roaming\mozilla\Firefox\Profiles\55dp877d.default-1367761954054\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2013-05-05 15:57:55 | 000,000,000 | ---D | M] (CSHelper) -- C:\Users\Grabek\AppData\Roaming\mozilla\Firefox\Profiles\55dp877d.default-1367761954054\extensions\{d91a2be6-3b56-4dfb-97f5-5e48fe3ed473}
[2013-05-05 15:55:43 | 000,060,290 | ---- | M] () (No name found) -- C:\Users\Grabek\AppData\Roaming\mozilla\firefox\profiles\55dp877d.default-1367761954054\extensions\translator@zoli.bod.xpi
[2013-05-05 19:28:09 | 000,001,820 | ---- | M] () -- C:\Users\Grabek\AppData\Roaming\mozilla\firefox\profiles\55dp877d.default-1367761954054\searchplugins\bing.xml
[2013-05-25 13:38:42 | 000,002,402 | ---- | M] () -- C:\Users\Grabek\AppData\Roaming\mozilla\firefox\profiles\55dp877d.default-1367761954054\searchplugins\bingp.xml
[2013-05-08 11:58:45 | 000,001,742 | ---- | M] () -- C:\Users\Grabek\AppData\Roaming\mozilla\firefox\profiles\55dp877d.default-1367761954054\searchplugins\google-language-it.xml
[2013-05-08 12:06:10 | 000,002,398 | ---- | M] () -- C:\Users\Grabek\AppData\Roaming\mozilla\firefox\profiles\55dp877d.default-1367761954054\searchplugins\google-language-ru-.xml
[2013-05-05 19:29:15 | 000,002,101 | ---- | M] () -- C:\Users\Grabek\AppData\Roaming\mozilla\firefox\profiles\55dp877d.default-1367761954054\searchplugins\googlede.xml
[2013-05-05 19:33:46 | 000,007,818 | ---- | M] () -- C:\Users\Grabek\AppData\Roaming\mozilla\firefox\profiles\55dp877d.default-1367761954054\searchplugins\googlefr.xml
[2013-05-05 19:31:14 | 000,008,065 | ---- | M] () -- C:\Users\Grabek\AppData\Roaming\mozilla\firefox\profiles\55dp877d.default-1367761954054\searchplugins\googlefrweb.xml
[2013-05-14 19:37:15 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\browser\extensions
[2013-05-14 19:37:15 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013-01-07 19:49:09 | 000,124,056 | ---- | M] (RealPlayer) -- C:\Program Files\mozilla firefox\plugins\nprpplugin.dll
 
O1 HOSTS File: ([2013-04-29 18:12:31 | 000,001,007 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 www.order.tune-up.com
O1 - Hosts: 127.0.0.1 www.tune-up.com
O1 - Hosts: 127.0.0.1 www.tune-up.com/order
O1 - Hosts: 127.0.0.1 www.registertuneup.com
O1 - Hosts: 127.0.0.1 secure.tune-up.com
O2 - BHO: (FlpLauncher Class) - {4401FDC3-7996-4774-8D2B-C1AE9CD6CC25} - C:\Program Files\E-Book Systems\FlipAlbum 6 Pro\FpLaunch.dll ()
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (no name) - {91397D20-1446-11D4-8AF4-0040CA1127B6} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {91397D20-1446-11D4-8AF4-0040CA1127B6} - No CLSID value found.
O4 - HKCU..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe (IncrediMail, Ltd.)
O4 - Startup: C:\Users\Grabek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WorldClock.lnk = C:\Program Files\Sharp World Clock\Sharp World Clock.exe (Johannes Wallroth)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousMachineGroupPolicy = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousUserGroupPolicy = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab (Java Plug-in 1.7.0_04)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_04-windows-i586.cab (Java Plug-in 10.21.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 79.139.16.1 79.139.16.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3DC20C63-FBCE-4639-89F4-5A562B466DA8}: DhcpNameServer = 79.139.16.1 79.139.16.2
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O27 - HKLM IFEO\dllfixer.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEO\unins000.exe: Debugger - C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe (TuneUp Software)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (MACHINE BootExecut)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2013-06-12 11:13:47 | 000,692,104 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013-06-12 11:13:47 | 000,071,048 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013-06-12 10:47:41 | 002,706,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2013-06-12 10:47:41 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2013-06-12 10:46:50 | 002,877,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2013-06-12 10:46:49 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2013-06-12 10:46:49 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2013-06-12 10:46:48 | 000,493,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2013-06-12 10:46:48 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2013-06-12 10:46:48 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2013-06-12 10:46:48 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2013-06-12 10:46:48 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2013-06-12 10:46:06 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certutil.exe
[2013-06-12 10:46:06 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certenc.dll
[2013-06-12 10:45:59 | 003,968,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2013-06-12 10:45:59 | 003,913,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2013-06-12 10:45:56 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptdlg.dll
[2013-06-12 10:45:53 | 001,505,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2013-06-11 17:30:55 | 000,000,000 | ---D | C] -- C:\Users\Grabek\AppData\Roaming\dll-files.com
[2013-06-11 17:30:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dll-Files Fixer
[2013-06-11 17:30:45 | 000,000,000 | ---D | C] -- C:\Program Files\Dll-Files.com Fixer
[2013-06-11 13:45:40 | 000,009,104 | ---- | C] (ThinPrint GmbH) -- C:\Windows\System32\TPVMMonUIjpn.dll
[2013-06-11 13:32:12 | 000,000,000 | ---D | C] -- C:\Windows\ehome
[2013-06-11 12:15:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Weskysoft
[2013-06-11 12:08:35 | 000,000,000 | ---D | C] -- C:\Program Files\DLLSuite
[2013-06-07 12:43:13 | 000,000,000 | ---D | C] -- C:\Users\Grabek\AppData\Local\HamsterVideoConverter
[2013-06-05 17:46:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2013-06-05 17:46:22 | 000,000,000 | ---D | C] -- C:\Users\Grabek\AppData\Roaming\#airversion
[2013-06-05 17:46:20 | 000,000,000 | ---D | C] -- C:\Users\Grabek\AppData\Local\Adobe
[2013-06-05 10:20:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows 7 Manager
[2013-05-31 13:36:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
[2013-05-31 13:36:39 | 000,027,192 | ---- | C] (VS Revo Group) -- C:\Windows\System32\drivers\revoflt.sys
[2013-05-31 13:33:01 | 000,000,000 | ---D | C] -- C:\Users\Grabek\AppData\Roaming\WinRAR
[2013-05-31 13:17:23 | 000,000,000 | ---D | C] -- C:\Users\Grabek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013-05-31 13:17:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013-05-31 13:17:14 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2013-05-29 17:09:04 | 000,000,000 | ---D | C] -- C:\Users\Grabek\Documents\flpalbm_opf_files
[2013-05-24 11:06:51 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2013-05-24 10:22:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ace Translator
[2013-05-16 18:34:03 | 000,000,000 | ---D | C] -- C:\Users\Grabek\AppData\Roaming\Foxit Software
[2013-05-16 17:53:17 | 000,000,000 | ---D | C] -- C:\Users\Grabek\AppData\Roaming\Foxit
[2013-05-16 17:53:16 | 000,000,000 | ---D | C] -- C:\Program Files\Foxit Software
[2013-05-15 16:13:42 | 001,796,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\authui.dll
[2013-05-15 16:13:42 | 000,101,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\consent.exe
[2013-05-15 16:13:34 | 002,347,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2013-05-15 16:13:34 | 000,218,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgmms1.sys
[2013-05-15 16:13:32 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwanprotdim.dll
[2013-05-14 19:36:54 | 000,000,000 | ---D | C] -- C:\Program Files\mozilla firefox
[2013-04-30 16:14:29 | 000,802,136 | ---- | C] (BitTorrent Inc.) -- C:\Program Files\uTorrent.exe
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2013-06-12 18:56:58 | 000,021,888 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013-06-12 18:56:58 | 000,021,888 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013-06-12 18:56:02 | 000,701,244 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2013-06-12 18:56:02 | 000,618,936 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013-06-12 18:56:02 | 000,136,262 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2013-06-12 18:56:02 | 000,107,256 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013-06-12 18:49:50 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013-06-12 18:10:24 | 000,000,282 | ---- | M] () -- C:\Windows\tasks\DLL-Files.Com Fixer_Updates.job
[2013-06-12 18:10:24 | 000,000,266 | ---- | M] () -- C:\Windows\tasks\DLL-Files.Com Fixer_MONTHLY.job
[2013-06-12 18:10:24 | 000,000,266 | ---- | M] () -- C:\Windows\tasks\DLL-Files Fixer.job
[2013-06-12 12:25:57 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013-06-12 11:14:41 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013-06-12 11:14:41 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013-06-11 17:39:11 | 000,001,660 | ---- | M] () -- C:\Windows\System32\ASOROSet.bin
[2013-06-11 13:45:56 | 000,009,104 | ---- | M] (ThinPrint GmbH) -- C:\Windows\System32\TPVMMonUIjpn.dll
[2013-06-08 13:40:02 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2013-06-08 13:13:19 | 002,706,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2013-06-07 12:43:13 | 000,000,500 | ---- | M] () -- C:\Users\Grabek\AppData\Local\HamsterVideoConverterSettings.cfg
[2013-06-03 09:49:27 | 000,000,067 | ---- | M] () -- C:\Users\Grabek\AppData\Roaming\burnaware.ini
[2013-05-29 17:12:41 | 000,004,717 | ---- | M] () -- C:\Users\Grabek\Documents\flpalbm.opf
[2013-05-27 17:16:18 | 000,000,965 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2013-05-26 15:42:19 | 000,007,605 | ---- | M] () -- C:\Users\Grabek\AppData\Local\resmon.resmoncfg
[2013-05-24 10:22:56 | 000,000,889 | ---- | M] () -- C:\Users\Public\Desktop\Ace Translator.lnk
[2013-05-20 18:57:04 | 000,022,011 | ---- | M] () -- C:\Windows\System32\cleartmp.cmd
[2013-05-17 12:16:23 | 000,000,038 | ---- | M] () -- C:\Windows\System32\vfolx32n.dll
[2013-05-17 03:26:04 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2013-05-17 03:25:33 | 000,493,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2013-05-17 03:25:27 | 002,877,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2013-05-17 03:25:27 | 000,039,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2013-05-17 03:25:26 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2013-05-17 03:25:26 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2013-05-17 03:25:26 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2013-05-15 16:27:58 | 000,440,416 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013-05-14 10:40:13 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2013-06-12 11:13:49 | 000,000,930 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013-06-11 17:41:23 | 000,000,266 | ---- | C] () -- C:\Windows\tasks\DLL-Files Fixer.job
[2013-06-11 17:35:23 | 000,001,660 | ---- | C] () -- C:\Windows\System32\ASOROSet.bin
[2013-06-11 17:31:00 | 000,000,282 | ---- | C] () -- C:\Windows\tasks\DLL-Files.Com Fixer_Updates.job
[2013-06-11 17:30:59 | 000,000,266 | ---- | C] () -- C:\Windows\tasks\DLL-Files.Com Fixer_MONTHLY.job
[2013-05-29 17:12:41 | 000,004,717 | ---- | C] () -- C:\Users\Grabek\Documents\flpalbm.opf
[2013-05-24 10:22:56 | 000,000,889 | ---- | C] () -- C:\Users\Public\Desktop\Ace Translator.lnk
[2013-05-17 12:16:23 | 000,000,038 | ---- | C] () -- C:\Windows\System32\vfolx32n.dll
[2013-04-18 17:58:43 | 000,005,632 | ---- | C] () -- C:\Users\Grabek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013-04-13 09:49:58 | 000,110,592 | ---- | C] () -- C:\Windows\System32\FsUsbExDevice.Dll
[2013-04-13 09:49:58 | 000,037,344 | ---- | C] () -- C:\Windows\System32\FsUsbExDisk.Sys
[2013-04-10 19:05:46 | 000,639,488 | ---- | C] () -- C:\Windows\System32\ficvdec_x86.dll
[2013-01-10 22:39:48 | 000,004,416 | ---- | C] () -- C:\Users\Grabek\AppData\Roaming\CamStudio.cfg
[2013-01-10 22:39:48 | 000,000,408 | ---- | C] () -- C:\Users\Grabek\AppData\Roaming\CamShapes.ini
[2013-01-10 22:39:48 | 000,000,408 | ---- | C] () -- C:\Users\Grabek\AppData\Roaming\CamLayout.ini
[2013-01-10 22:39:48 | 000,000,119 | ---- | C] () -- C:\Users\Grabek\AppData\Roaming\Camdata.ini
[2013-01-06 19:09:23 | 000,000,640 | RHS- | C] () -- C:\Users\Grabek\ntuser.pol
[2012-12-27 17:19:58 | 000,059,904 | ---- | C] () -- C:\Windows\System32\zlib.dll
[2012-11-12 16:27:29 | 000,110,080 | ---- | C] () -- C:\Windows\System32\advd.dll
[2012-11-12 16:27:29 | 000,023,040 | ---- | C] () -- C:\Windows\System32\auth.dll
[2012-11-12 16:27:28 | 000,511,488 | ---- | C] () -- C:\Windows\System32\lame_enc.dll
[2012-11-11 15:32:34 | 000,238,528 | ---- | C] () -- C:\Windows\System32\avutil-lav-52.dll
[2012-11-11 15:32:34 | 000,158,096 | ---- | C] () -- C:\Windows\System32\avresample-lav-1.dll
[2012-10-15 15:18:45 | 000,000,286 | ---- | C] () -- C:\Windows\reimage.ini
[2012-10-11 18:32:27 | 000,015,432 | ---- | C] () -- C:\Windows\Launcher.exe
[2012-10-05 17:32:41 | 000,000,500 | ---- | C] () -- C:\Users\Grabek\AppData\Local\HamsterVideoConverterSettings.cfg
[2012-09-15 11:48:36 | 000,027,648 | ---- | C] () -- C:\Windows\System32\UFModDll.dll
[2012-07-30 14:16:20 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2012-06-05 20:09:31 | 000,178,176 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2012-06-01 11:00:14 | 000,038,436 | ---- | C] () -- C:\Users\Grabek\AppData\Roaming\Wartości oddzielone przecinkami (DOS).ADR
[2012-05-25 16:24:17 | 000,000,275 | ---- | C] () -- C:\Users\Grabek\AppData\Local\HamsterAudioConverterSettings.cfg
[2012-05-12 11:30:17 | 000,015,672 | ---- | C] () -- C:\Windows\System32\drivers\SmartDefragDriver.sys
[2012-04-13 18:17:31 | 000,000,112 | ---- | C] () -- C:\ProgramData\{0F3283C1-D6AC-2D1E-9F85-C730-EB3C1C60}.ini
[2012-03-05 15:47:34 | 000,022,016 | ---- | C] () -- C:\Windows\System32\bootdefg32.exe
[2012-02-09 17:25:25 | 000,000,040 | -HS- | C] () -- C:\ProgramData\.zreglib
[2012-02-05 16:52:24 | 000,210,456 | ---- | C] () -- C:\Windows\System32\IVIresizeW7.dll
[2012-02-05 16:52:24 | 000,206,360 | ---- | C] () -- C:\Windows\System32\IVIresizeA6.dll
[2012-02-05 16:52:24 | 000,198,168 | ---- | C] () -- C:\Windows\System32\IVIresizeP6.dll
[2012-02-05 16:52:24 | 000,198,168 | ---- | C] () -- C:\Windows\System32\IVIresizeM6.dll
[2012-02-05 16:52:24 | 000,194,072 | ---- | C] () -- C:\Windows\System32\IVIresizePX.dll
[2012-02-05 16:52:24 | 000,026,136 | ---- | C] () -- C:\Windows\System32\IVIresize.dll
[2012-02-05 14:03:46 | 000,056,832 | ---- | C] () -- C:\Windows\System32\Iyvu9_32.dll
[2012-02-04 23:41:52 | 000,000,196 | ---- | C] () -- C:\Windows\ulead32.ini
[2012-01-28 21:11:10 | 006,414,616 | ---- | C] () -- C:\Windows\System32\avcodec-lav-53.dll
[2012-01-28 21:11:10 | 001,009,392 | ---- | C] () -- C:\Windows\System32\avformat-lav-53.dll
[2012-01-13 12:22:36 | 000,000,067 | ---- | C] () -- C:\Users\Grabek\AppData\Roaming\burnaware.ini
[2012-01-10 10:47:18 | 000,140,288 | ---- | C] () -- C:\Windows\System32\igfxtvcx.dll
[2012-01-10 10:45:42 | 000,073,728 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2012-01-10 10:45:02 | 000,148,480 | ---- | C] () -- C:\Windows\System32\APOMngr.DLL
[2012-01-10 10:45:02 | 000,073,728 | ---- | C] () -- C:\Windows\System32\CmdRtr.DLL
[2012-01-10 00:16:17 | 000,007,605 | ---- | C] () -- C:\Users\Grabek\AppData\Local\resmon.resmoncfg
[2011-12-07 21:32:24 | 000,216,064 | ---- | C] ( ) -- C:\Windows\System32\Lagarith.dll
[2011-06-24 05:58:32 | 000,242,259 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009-07-14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013-02-27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 23:29:20 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009-07-14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2013-06-05 17:46:22 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\#airversion
[2013-06-08 11:44:42 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\Auslogics
[2013-05-04 17:39:19 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\BESTplayer
[2012-11-06 18:54:31 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2012-11-12 19:37:48 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\concept design
[2013-06-11 17:30:55 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\dll-files.com
[2012-01-24 16:41:23 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\DVDVideoSoft
[2012-09-18 16:06:11 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\Easeware
[2013-05-29 17:56:51 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\EBookSys
[2013-05-16 17:53:17 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\Foxit
[2013-05-17 18:13:36 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\Foxit Software
[2012-02-04 23:55:36 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\GetRightToGo
[2012-05-07 10:32:58 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\GHISLER
[2012-05-25 16:24:04 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\HamsterSoft
[2012-12-17 21:45:06 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\IBKPRO
[2012-03-20 20:48:06 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\KC Softwares
[2013-05-06 12:43:53 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\Mirillis
[2012-12-28 19:05:48 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\Samsung
[2012-06-26 17:22:50 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\Temp
[2013-01-25 13:37:10 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\TuneUp Software
[2012-02-05 17:05:10 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\Ulead Systems
[2013-06-12 09:26:46 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\uTorrent
[2013-05-30 13:15:25 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\WeatherWatcherLive
[2013-06-12 11:23:48 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\Wise Care 365
[2013-06-05 17:45:29 | 000,000,000 | ---D | M] -- C:\Users\Grabek\AppData\Roaming\XnView
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 174 bytes -> C:\ProgramData\TEMP:905844AA
@Alternate Data Stream - 152 bytes -> C:\ProgramData\TEMP:07BF512B
@Alternate Data Stream - 139 bytes -> C:\ProgramData\TEMP:0B4227B4
@Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:C43ED645

< End of report >