OTL logfile created on: 2013-06-25 10:15:27 - Run 3 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\v\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16614) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,87 Gb Total Physical Memory | 1,46 Gb Available Physical Memory | 37,85% Memory free 7,73 Gb Paging File | 4,98 Gb Available in Paging File | 64,46% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 230,11 Gb Total Space | 16,79 Gb Free Space | 7,30% Space Free | Partition Type: NTFS Drive D: | 29,00 Gb Total Space | 27,75 Gb Free Space | 95,71% Space Free | Partition Type: NTFS Drive H: | 136,34 Gb Total Space | 52,59 Gb Free Space | 38,58% Space Free | Partition Type: NTFS Computer Name: TRICK | User Name: v | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2013-06-25 10:11:51 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\v\Downloads\OTL (2).exe PRC - [2013-05-10 09:57:24 | 001,465,920 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe PRC - [2013-02-26 03:28:44 | 000,357,456 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnetdhcp.exe PRC - [2013-02-26 03:28:26 | 000,436,304 | ---- | M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnat.exe PRC - [2011-10-01 09:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe PRC - [2011-01-11 23:32:38 | 000,136,488 | ---- | M] (CyberLink) -- C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe PRC - [2010-07-16 17:23:30 | 006,638,080 | ---- | M] () -- C:\Program Files (x86)\Samsung\SAMSUNG PC Share Manager\WiselinkPro.exe PRC - [2010-06-09 15:15:34 | 000,417,906 | ---- | M] () -- C:\Program Files (x86)\Samsung\SAMSUNG PC Share Manager\http_ss_win_pro.exe PRC - [2010-03-03 22:16:06 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe PRC - [2010-03-03 22:16:04 | 000,284,696 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe PRC - [2009-12-19 04:52:48 | 000,100,256 | ---- | M] () -- C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe PRC - [2009-12-09 10:48:26 | 002,320,920 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2009-12-09 10:48:24 | 000,268,824 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2009-08-11 16:59:38 | 000,013,600 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\Lenovo\Bluetooth Software\BluetoothHeadsetProxy.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2013-06-21 09:46:58 | 000,771,584 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\b6eb138c3c9be780acb767c1bef572c1\System.Runtime.Remoting.ni.dll MOD - [2013-06-15 03:28:42 | 000,393,168 | ---- | M] () -- C:\Users\v\AppData\Local\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll MOD - [2013-06-15 03:28:41 | 013,140,432 | ---- | M] () -- C:\Users\v\AppData\Local\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll MOD - [2013-06-15 03:28:40 | 004,051,408 | ---- | M] () -- C:\Users\v\AppData\Local\Google\Chrome\Application\27.0.1453.116\pdf.dll MOD - [2013-06-15 03:27:51 | 000,599,504 | ---- | M] () -- C:\Users\v\AppData\Local\Google\Chrome\Application\27.0.1453.116\libglesv2.dll MOD - [2013-06-15 03:27:50 | 000,124,368 | ---- | M] () -- C:\Users\v\AppData\Local\Google\Chrome\Application\27.0.1453.116\libegl.dll MOD - [2013-06-15 03:27:48 | 001,597,392 | ---- | M] () -- C:\Users\v\AppData\Local\Google\Chrome\Application\27.0.1453.116\ffmpegsumo.dll MOD - [2013-05-17 10:24:50 | 012,436,480 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\30e3a21202000677d0a9270572251477\System.Windows.Forms.ni.dll MOD - [2013-05-17 10:23:55 | 003,347,968 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\716959df79685a1eae0fc14275a32b0f\WindowsBase.ni.dll MOD - [2013-05-17 10:23:42 | 000,971,264 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\764f15e86c82662e977bd418bd6318c1\System.Configuration.ni.dll MOD - [2013-05-10 09:57:24 | 000,305,728 | ---- | M] () -- C:\Program Files (x86)\Adobe\Reader 10.0\Reader\sqlite.dll MOD - [2013-01-09 19:46:30 | 000,452,608 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\f7cb3ae5de64f8cbde3ccc57c780743a\IAStorUtil.ni.dll MOD - [2013-01-09 18:52:59 | 001,592,832 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\eead6629e384a5b69f9ae35284b7eeed\System.Drawing.ni.dll MOD - [2013-01-09 18:52:40 | 005,453,312 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\f687c43e9fdec031988b33ae722c4613\System.Xml.ni.dll MOD - [2013-01-09 18:52:36 | 007,989,760 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System\369f8bdca364e2b4936d18dea582912c\System.ni.dll MOD - [2013-01-09 18:52:31 | 011,493,376 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7150b9136fad5b79e88f6c7f9d3d2c39\mscorlib.ni.dll MOD - [2010-11-13 04:37:37 | 000,311,296 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll MOD - [2010-09-25 19:55:40 | 000,032,768 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_pl_b77a5c561934e089\System.Runtime.Remoting.resources.dll MOD - [2010-04-14 10:20:44 | 000,655,360 | ---- | M] () -- C:\Windows\SysWOW64\vmprp331.ax MOD - [2009-12-19 04:52:48 | 000,100,256 | ---- | M] () -- C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeySupport.exe MOD - [2009-12-19 04:51:18 | 000,133,024 | ---- | M] () -- C:\Program Files (x86)\Lenovo\Onekey Theater\WindowsApiHookDll32.dll MOD - [2009-12-19 04:50:38 | 000,161,696 | ---- | M] () -- C:\Program Files (x86)\Lenovo\Onekey Theater\ActiveDetect32.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2013-01-27 12:34:32 | 000,379,360 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv) SRV:[b]64bit:[/b] - [2013-01-27 12:34:32 | 000,022,056 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc) SRV:[b]64bit:[/b] - [2012-04-12 19:25:37 | 001,436,424 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64) SRV:[b]64bit:[/b] - [2010-01-23 08:12:18 | 000,673,792 | ---- | M] () [Auto | Running] -- C:\Program Files\Autodesk\Inventor 2011\Moldflow\bin\mitsijm.exe -- (mitsijm2011) SRV:[b]64bit:[/b] - [2009-09-22 20:16:32 | 000,579,400 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe -- (Lenovo ReadyComm ConnSvc) SRV:[b]64bit:[/b] - [2009-08-14 16:22:48 | 000,509,192 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files\Lenovo\ReadyComm\AppSvc.exe -- (Lenovo ReadyComm AppSvc) SRV:[b]64bit:[/b] - [2009-08-11 16:59:38 | 000,864,032 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe -- (btwdins) SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2013-06-03 16:21:54 | 000,162,408 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2013-05-25 15:46:32 | 000,117,144 | ---- | M] (Mozilla Foundation) [Disabled | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2013-05-10 09:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2013-02-26 03:28:44 | 000,357,456 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnetdhcp.exe -- (VMnetDHCP) SRV - [2013-02-26 03:28:26 | 000,436,304 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vmnat.exe -- (VMware NAT Service) SRV - [2013-02-26 02:30:42 | 000,087,120 | ---- | M] (VMware, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe -- (VMAuthdService) SRV - [2012-12-19 09:49:34 | 000,732,648 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2012-10-11 17:15:30 | 000,918,680 | ---- | M] (VMware, Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe -- (VMUSBArbService) SRV - [2011-10-01 09:30:22 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa) SRV - [2011-10-01 09:30:18 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist) SRV - [2010-07-16 17:23:30 | 006,638,080 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Samsung\SAMSUNG PC Share Manager\WiselinkPro.exe -- (AllShare) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010-03-03 22:16:06 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) SRV - [2010-02-19 14:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2009-12-09 10:48:26 | 002,320,920 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) SRV - [2009-12-09 10:48:24 | 000,268,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2009-07-16 05:12:42 | 000,276,296 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files (x86)\Lenovo\ReadyComm\PS_MDP.dll -- (PS_MDP) SRV - [2009-07-14 16:27:26 | 000,038,152 | ---- | M] (Lenovo Group Limited) [On_Demand | Stopped] -- C:\Program Files (x86)\Lenovo\ReadyComm\common\IGRS.exe -- (IGRS) SRV - [2009-07-14 16:27:20 | 000,103,688 | ---- | M] (Lenovo Group Limited) [Auto | Stopped] -- C:\Program Files (x86)\Lenovo\ReadyComm\common\router.dll -- (ReadyComm.DirectRouter) SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2007-05-31 17:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2007-05-31 17:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2013-02-26 03:28:48 | 000,067,664 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmx86.sys -- (vmx86) DRV:[b]64bit:[/b] - [2013-02-26 03:28:14 | 000,030,800 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmnetuserif.sys -- (VMnetuserif) DRV:[b]64bit:[/b] - [2013-02-26 03:27:48 | 000,045,720 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\vmnetbridge.sys -- (VMnetBridge) DRV:[b]64bit:[/b] - [2013-02-26 03:27:48 | 000,020,120 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vmnetadapter.sys -- (VMnetAdapter) DRV:[b]64bit:[/b] - [2013-02-26 03:27:44 | 000,033,360 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VMkbd.sys -- (vmkbd2) DRV:[b]64bit:[/b] - [2013-02-12 06:12:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx) DRV:[b]64bit:[/b] - [2013-01-20 16:59:04 | 000,130,008 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv) DRV:[b]64bit:[/b] - [2012-11-09 15:33:30 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc) DRV:[b]64bit:[/b] - [2012-11-09 15:33:30 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd) DRV:[b]64bit:[/b] - [2012-11-09 15:33:30 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt) DRV:[b]64bit:[/b] - [2012-11-09 15:33:30 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev) DRV:[b]64bit:[/b] - [2012-10-24 15:17:14 | 000,070,296 | ---- | M] (VMware, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vsock.sys -- (vsock) DRV:[b]64bit:[/b] - [2012-10-24 15:17:10 | 000,085,104 | ---- | M] (VMware, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmci.sys -- (vmci) DRV:[b]64bit:[/b] - [2012-10-17 13:53:46 | 000,026,112 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd) DRV:[b]64bit:[/b] - [2012-10-11 17:15:32 | 000,052,376 | ---- | M] (VMware, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\hcmon.sys -- (hcmon) DRV:[b]64bit:[/b] - [2012-10-11 17:15:06 | 000,037,680 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmusb.sys -- (vmusb) DRV:[b]64bit:[/b] - [2012-07-14 07:26:04 | 000,122,688 | ---- | M] (Ray Hinchliffe) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SIVX64.sys -- (SIVDriver) DRV:[b]64bit:[/b] - [2012-06-05 16:03:52 | 000,147,288 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp) DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2011-10-01 09:30:22 | 000,022,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol) DRV:[b]64bit:[/b] - [2011-10-01 09:30:18 | 000,268,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay) DRV:[b]64bit:[/b] - [2011-10-01 09:30:18 | 000,025,960 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir) DRV:[b]64bit:[/b] - [2011-10-01 09:30:10 | 000,764,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs) DRV:[b]64bit:[/b] - [2011-07-29 13:54:56 | 000,016,776 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\epmntdrv.sys -- (epmntdrv) DRV:[b]64bit:[/b] - [2011-07-29 13:54:56 | 000,009,096 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\EuGdiDrv.sys -- (EuGdiDrv) DRV:[b]64bit:[/b] - [2011-07-01 11:46:40 | 000,031,232 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901) DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2011-01-11 23:33:14 | 000,031,088 | ---- | M] (CyberLink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\clwvd.sys -- (clwvd) DRV:[b]64bit:[/b] - [2010-11-20 15:34:04 | 000,194,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpchbus.sys -- (vpcbus) DRV:[b]64bit:[/b] - [2010-11-20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-11-20 13:35:34 | 000,095,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpcusb.sys -- (vpcusb) DRV:[b]64bit:[/b] - [2010-11-20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010-11-20 12:43:57 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser) DRV:[b]64bit:[/b] - [2010-06-24 04:43:58 | 000,167,816 | ---- | M] (ELAN Microelectronics Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD) DRV:[b]64bit:[/b] - [2010-06-18 15:34:58 | 004,170,304 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX) DRV:[b]64bit:[/b] - [2010-04-28 09:57:50 | 000,061,288 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr) DRV:[b]64bit:[/b] - [2010-03-18 12:35:10 | 000,215,168 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vm331avs.sys -- (vm331avs) DRV:[b]64bit:[/b] - [2010-03-12 05:23:16 | 000,242,720 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR) DRV:[b]64bit:[/b] - [2010-03-03 21:51:40 | 000,540,696 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2010-01-28 13:55:04 | 000,086,120 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA) DRV:[b]64bit:[/b] - [2010-01-18 11:45:50 | 000,717,368 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService) DRV:[b]64bit:[/b] - [2009-10-19 02:40:50 | 000,028,176 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AcpiVpc.sys -- (ACPIVPC) DRV:[b]64bit:[/b] - [2009-09-17 06:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) DRV:[b]64bit:[/b] - [2009-08-20 18:05:06 | 000,239,616 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2009-07-21 16:20:06 | 000,121,840 | ---- | M] (CyberLink) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wsvd.sys -- (wsvd) DRV:[b]64bit:[/b] - [2009-07-16 13:55:34 | 000,011,280 | ---- | M] (Lenovo) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WDMirror.sys -- (wdmirror) DRV:[b]64bit:[/b] - [2009-07-16 05:38:20 | 000,079,376 | ---- | M] (Lenovo) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WDBridge.sys -- (Bridge0) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-01 06:46:58 | 000,052,264 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btusbflt.sys -- (btusbflt) DRV:[b]64bit:[/b] - [2009-07-01 06:46:52 | 000,098,344 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio) DRV:[b]64bit:[/b] - [2009-07-01 06:46:48 | 000,132,648 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt) DRV:[b]64bit:[/b] - [2009-07-01 06:46:40 | 000,021,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid) DRV:[b]64bit:[/b] - [2009-06-10 22:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2009-06-10 22:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64) DRV:[b]64bit:[/b] - [2009-06-10 22:34:36 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-04-07 09:33:08 | 000,035,104 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap) DRV:[b]64bit:[/b] - [2009-03-18 17:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi) DRV:[b]64bit:[/b] - [2008-08-06 14:32:16 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr) DRV - [2011-07-29 13:54:56 | 000,014,216 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\epmntdrv.sys -- (epmntdrv) DRV - [2011-07-29 13:54:56 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\EuGdiDrv.sys -- (EuGdiDrv) DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2154583305-863273735-3011277561-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = IE - HKU\S-1-5-21-2154583305-863273735-3011277561-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = IE - HKU\S-1-5-21-2154583305-863273735-3011277561-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-21-2154583305-863273735-3011277561-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-2154583305-863273735-3011277561-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=LENDF8&pc=MALN&src=IE-SearchBox IE - HKU\S-1-5-21-2154583305-863273735-3011277561-1000\..\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}: "URL" = http://www.bigseekpro.com/search/browser/bsprpc/{FCAD9091-2726-437E-B4C7-751085E13CEC}?q={searchTerms} IE - HKU\S-1-5-21-2154583305-863273735-3011277561-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.15 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0 FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\windows\system32\npDeployJava1.dll (Oracle Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\windows\system32\Wat\npWatWeb.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@nokia.com/EnablerPlugin: C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( ) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\v\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\v\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013-05-25 15:46:37 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011-08-02 20:37:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\v\AppData\Roaming\mozilla\Extensions [2013-06-02 20:54:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\v\AppData\Roaming\mozilla\Firefox\Profiles\cntdaks4.default-1363042708605\extensions [2013-06-02 20:54:49 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\v\AppData\Roaming\mozilla\Firefox\Profiles\cntdaks4.default-1363042708605\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-05-25 15:08:59 | 002,168,615 | ---- | M] () (No name found) -- C:\Users\v\AppData\Roaming\mozilla\firefox\profiles\cntdaks4.default-1363042708605\extensions\firebug@software.joehewitt.com.xpi [2013-05-09 15:18:28 | 000,870,680 | ---- | M] () (No name found) -- C:\Users\v\AppData\Roaming\mozilla\firefox\profiles\cntdaks4.default-1363042708605\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-05-25 15:46:37 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2013-05-25 15:45:51 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2013-05-25 15:46:37 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions [2013-05-25 15:46:37 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2011-04-14 14:01:38 | 000,024,376 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\mozilla firefox\components\Scriptff.dll [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}, CHR - homepage: http://www.google.com/ CHR - plugin: Shockwave Flash (Enabled) = C:\Users\v\AppData\Local\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Users\v\AppData\Local\Google\Chrome\Application\27.0.1453.116\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_271.dll CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\v\AppData\Local\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Disabled) = C:\Users\v\AppData\Local\Google\Chrome\Application\27.0.1453.116\pdf.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll CHR - plugin: Java(TM) Platform SE 6 U33 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll CHR - plugin: Java Deployment Toolkit 6.0.330.3 (Enabled) = C:\windows\SysWOW64\npdeployJava1.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll CHR - plugin: Windows Activation Technologies (Enabled) = C:\windows\system32\Wat\npWatWeb.dll CHR - Extension: Dysk Google = C:\Users\v\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: YouTube = C:\Users\v\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\ CHR - Extension: Szukaj w Google = C:\Users\v\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: Gmail offline = C:\Users\v\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk\1.19_0\ CHR - Extension: Planetarium = C:\Users\v\AppData\Local\Google\Chrome\User Data\Default\Extensions\gheikhdfflhlbemfmhcfpeblehemeklp\1.1.2_0\ CHR - Extension: AdBlock = C:\Users\v\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.1_0\ CHR - Extension: Zapisz na Dysku Google = C:\Users\v\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbmikajjgmnabiglmofipeabaddhgne\1.5.10_0\ CHR - Extension: YouTube Video Downloader = C:\Users\v\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpcddcfoblbgmnaklcpkbfajnfikinhn\1.1_0\ CHR - Extension: Slinky Brushed = C:\Users\v\AppData\Local\Google\Chrome\User Data\Default\Extensions\piiokbhpgldooopjdacdondngonfljoc\19.6_0\ CHR - Extension: Gmail = C:\Users\v\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2013-04-01 13:02:51 | 000,001,483 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 activate.adobe.com O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com O1 - Hosts: 127.0.0.1 adobeereg.com O1 - Hosts: 127.0.0.1 practivate.adobe.com O1 - Hosts: 127.0.0.1 ereg.adobe.com O1 - Hosts: 127.0.0.1 www.adobeereg.com O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com O1 - Hosts: 127.0.0.1 wip3.adobe.com O1 - Hosts: 127.0.0.1 3dns-3.adobe.com O1 - Hosts: 127.0.0.1 3dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com O1 - Hosts: 127.0.0.1 activate-sea.adobe.com O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation) O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\PROGRA~2\ALLPLA~1\Iplex\IPLEXT~1.DLL (ALLCinema Ltd.) O4:[b]64bit:[/b] - HKLM..\Run: [cAudioFilterAgent] C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (Conexant Systems, Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [Energy Management] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited) O4:[b]64bit:[/b] - HKLM..\Run: [EnergyUtility] C:\Program Files (x86)\Lenovo\Energy Management\utility.exe (Lenovo(beijing) Limited) O4:[b]64bit:[/b] - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.) O4:[b]64bit:[/b] - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [NvCplDaemon] C:\windows\SysNative\NvCpl.dll (NVIDIA Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [OnekeyStudio] C:\Program Files (x86)\Lenovo\Onekey Theater\OnekeyStudio.exe (Lenovo) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) O4 - HKLM..\Run: [UpdateP2GShortCut] C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [YouCam Mirage] C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (CyberLink) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-2154583305-863273735-3011277561-1000..\Run: [] File not found O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - Startup: C:\Users\v\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SafeBootWin7.reg () O4 - Startup: C:\Users\v\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WTW.lnk = File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\NoDriveTypeAutoRun: NoDriveTypeAutoRun = 177 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKU\S-1-5-21-2154583305-863273735-3011277561-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 177 O8:[b]64bit:[/b] - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm () O8:[b]64bit:[/b] - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm () O8 - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm () O8 - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm () O9:[b]64bit:[/b] - Extra Button: @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm () O9:[b]64bit:[/b] - Extra 'Tools' menuitem : @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm () O9 - Extra Button: Wyślij do interfejsu Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : Wyślij do urządzenia &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm () O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000012 - C:\Windows\SysNative\vsocklib.dll (VMware, Inc.) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000013 - C:\Windows\SysNative\vsocklib.dll (VMware, Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\SysWOW64\vsocklib.dll (VMware, Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\SysWOW64\vsocklib.dll (VMware, Inc.) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O16:[b]64bit:[/b] - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab (Reg Error: Value error.) O16 - DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab (Java Plug-in 1.6.0_33) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab (Java Plug-in 10.17.2) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.192.2 149.156.96.9 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C18D6166-C711-44D0-9FE1-A8161611CC48}: DhcpNameServer = 192.168.192.2 149.156.96.9 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EBA7F1F0-C424-40F7-B92E-28DCF3A321B9}: DhcpNameServer = 10.20.0.2 O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKU\S-1-5-21-2154583305-863273735-3011277561-1000 Winlogon: Shell - (expstart.exe) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 0 O32 - AutoRun File - [2012-04-12 18:40:41 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ] O32 - AutoRun File - [2013-04-06 20:48:09 | 000,161,285 | ---- | M] () - C:\AutoMapaSetupLog.txt -- [ NTFS ] O33 - MountPoints2\{5904436b-c915-11df-a435-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{5904436b-c915-11df-a435-806e6f6e6963}\Shell\AutoRun\command - "" = F:\setup.exe O33 - MountPoints2\{b486263f-234a-11e1-a46e-c0cb38ec5880}\Shell - "" = AutoRun O33 - MountPoints2\{b486263f-234a-11e1-a46e-c0cb38ec5880}\Shell\AutoRun\command - "" = E:\Setup.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color] [2013-06-22 19:15:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DVDVideoSoft [2013-06-22 19:15:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DVDVideoSoft [2013-06-22 15:45:50 | 000,000,000 | ---D | C] -- C:\Users\v\Documents\devcpp [2013-06-21 17:37:32 | 000,000,000 | ---D | C] -- C:\Users\v\Desktop\aa [2013-06-15 02:06:59 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieui.dll [2013-06-15 02:06:57 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieui.dll [2013-06-13 03:29:50 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\iesetup.dll [2013-06-13 03:29:50 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\iesetup.dll [2013-06-13 03:29:50 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ie4uinit.exe [2013-06-13 03:29:50 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\iernonce.dll [2013-06-13 03:29:50 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\iernonce.dll [2013-06-13 03:29:49 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\iesysprep.dll [2013-06-13 03:29:49 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\iesysprep.dll [2013-06-13 03:29:49 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\RegisterIEPKEYs.exe [2013-06-13 03:29:49 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\RegisterIEPKEYs.exe [2013-06-13 03:29:47 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msfeeds.dll [2013-06-13 03:29:46 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript.dll [2013-06-13 03:29:46 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\jscript.dll [2013-06-13 03:29:45 | 003,958,784 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript9.dll [2013-06-12 15:28:46 | 001,424,384 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\WindowsCodecs.dll [2013-06-12 15:28:45 | 001,887,232 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\d3d11.dll [2013-06-12 15:28:45 | 001,505,280 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\d3d11.dll [2013-06-12 15:28:41 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\win32spl.dll [2013-06-12 15:28:40 | 000,492,544 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\win32spl.dll [2013-06-12 15:28:38 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\cryptdlg.dll [2013-06-12 15:28:38 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\cryptdlg.dll [2013-06-12 15:24:02 | 001,192,448 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\certutil.exe [2013-06-12 15:24:01 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\certutil.exe [2013-06-12 15:24:00 | 001,464,320 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\crypt32.dll [2013-06-12 15:24:00 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\cryptnet.dll [2013-06-12 15:23:59 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\certenc.dll [2013-06-12 15:23:59 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\certenc.dll [2013-06-08 01:22:05 | 001,054,720 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\MsSpellCheckingFacility.exe [2013-06-08 01:22:05 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\elshyph.dll [2013-06-08 01:22:05 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\elshyph.dll [2013-06-08 01:22:04 | 000,719,360 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmlmedia.dll [2013-06-08 01:22:04 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\msrating.dll [2013-06-08 01:22:04 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\iexpress.exe [2013-06-08 01:22:04 | 000,138,752 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\wextract.exe [2013-06-08 01:22:04 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieUnatt.exe [2013-06-08 01:22:04 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\inseng.dll [2013-06-08 01:22:04 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmled.dll [2013-06-08 01:22:04 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\pngfilt.dll [2013-06-08 01:22:03 | 000,361,984 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\html.iec [2013-06-08 01:22:03 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\occache.dll [2013-06-08 01:22:03 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\iepeers.dll [2013-06-08 01:22:03 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\IEAdvpack.dll [2013-06-08 01:22:03 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\SetIEInstalledDate.exe [2013-06-08 01:22:03 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\tdc.ocx [2013-06-08 01:22:03 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmler.dll [2013-06-08 01:22:03 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\msfeedssync.exe [2013-06-08 01:22:02 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\inetcpl.cpl [2013-06-08 01:22:02 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieapfltr.dat [2013-06-08 01:22:02 | 000,629,248 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieapfltr.dll [2013-06-08 01:22:02 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\url.dll [2013-06-08 01:22:02 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\icardie.dll [2013-06-08 01:22:02 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\licmgr10.dll [2013-06-08 01:22:01 | 001,400,416 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieapfltr.dat [2013-06-08 01:22:01 | 000,762,368 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieapfltr.dll [2013-06-08 01:22:01 | 000,452,096 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\dxtmsft.dll [2013-06-08 01:22:01 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\html.iec [2013-06-08 01:22:01 | 000,281,600 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\dxtrans.dll [2013-06-08 01:22:01 | 000,216,064 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msls31.dll [2013-06-08 01:22:01 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msrating.dll [2013-06-08 01:22:01 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\icardie.dll [2013-06-08 01:22:00 | 001,509,376 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\inetcpl.cpl [2013-06-08 01:22:00 | 000,905,728 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\mshtmlmedia.dll [2013-06-08 01:22:00 | 000,599,552 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\vbscript.dll [2013-06-08 01:22:00 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\url.dll [2013-06-08 01:22:00 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieUnatt.exe [2013-06-08 01:22:00 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\iexpress.exe [2013-06-08 01:22:00 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wextract.exe [2013-06-08 01:22:00 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\inseng.dll [2013-06-08 01:22:00 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\mshtmled.dll [2013-06-08 01:22:00 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\licmgr10.dll [2013-06-08 01:21:59 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\occache.dll [2013-06-08 01:21:59 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\iepeers.dll [2013-06-08 01:21:59 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\IEAdvpack.dll [2013-06-08 01:21:59 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\SetIEInstalledDate.exe [2013-06-08 01:21:59 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\tdc.ocx [2013-06-08 01:21:59 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\pngfilt.dll [2013-06-08 01:21:59 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\imgutil.dll [2013-06-08 01:21:59 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\mshtmler.dll [2013-06-08 01:21:59 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\mshta.exe [2013-06-08 01:21:59 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msfeedssync.exe [2013-06-01 20:46:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP [2013-06-01 20:46:34 | 000,000,000 | ---D | C] -- C:\ProgramData\HP Product Assistant [2013-06-01 20:46:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\HP [2013-06-01 20:45:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Hewlett-Packard [2013-06-01 20:45:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Hewlett-Packard [2013-06-01 20:26:17 | 000,355,416 | ---- | C] (Hewlett-Packard) -- C:\windows\SysNative\hpzids40.dll [2013-06-01 20:26:13 | 000,134,144 | ---- | C] (Hewlett-Packard Company) -- C:\windows\SysNative\hpzll5ha.dll [2013-06-01 20:26:12 | 000,233,472 | ---- | C] (Hewlett Packard Corporation) -- C:\windows\SysWow64\hpzc35ha.dll [2013-06-01 20:26:10 | 000,671,816 | ---- | C] (HP) -- C:\windows\SysWow64\hpcdmc32.dll [2013-06-01 20:26:04 | 000,861,184 | ---- | C] (Hewlett-Packard) -- C:\windows\SysNative\hpowiax3.dll [2013-06-01 20:26:04 | 000,729,600 | ---- | C] (Hewlett-Packard Co.) -- C:\windows\SysNative\hpotscl3.dll [2013-06-01 20:26:04 | 000,540,672 | ---- | C] (Hewlett-Packard) -- C:\windows\SysNative\hppldcoi.dll [2013-06-01 20:26:04 | 000,497,664 | ---- | C] (Hewlett-Packard Co.) -- C:\windows\SysNative\hpovst10.dll [2013-06-01 20:25:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HP [2013-06-01 20:15:21 | 000,000,000 | ---D | C] -- C:\ProgramData\HP [2013-05-29 15:20:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LTC [2013-05-25 15:45:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2013-05-23 22:25:26 | 000,000,000 | ---D | C] -- C:\pap_projects [2013-05-22 20:10:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2013-05-22 20:09:59 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\windows\SysWow64\javaw.exe [2013-05-22 20:09:59 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\windows\SysWow64\java.exe [2013-05-22 20:09:59 | 000,095,648 | ---- | C] (Oracle Corporation) -- C:\windows\SysWow64\WindowsAccessBridge-32.dll [2013-05-21 14:35:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Rockwell Automation [2013-05-21 14:34:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Rockwell Software [2013-05-19 21:39:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID [2013-05-19 21:39:35 | 000,000,000 | ---D | C] -- C:\Program Files\CPUID [2013-05-16 13:14:33 | 000,265,064 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\drivers\dxgmms1.sys [2013-05-16 13:14:33 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\cdd.dll [2013-05-16 13:14:18 | 001,930,752 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\authui.dll [2013-05-16 13:14:18 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\shdocvw.dll [2013-05-16 13:14:15 | 000,111,448 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\consent.exe [2013-05-16 13:14:14 | 001,796,096 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\authui.dll [2013-05-16 13:13:39 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wwanprotdim.dll [2013-05-13 21:56:47 | 000,000,000 | ---D | C] -- C:\Users\v\Documents\!!! [2013-05-13 21:54:02 | 000,000,000 | ---D | C] -- C:\Users\v\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Convar [2013-05-13 21:54:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Convar [2013-05-07 22:57:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype [2013-05-06 19:22:37 | 000,000,000 | ---D | C] -- C:\Users\v\.eclipse [2013-05-05 22:21:52 | 000,000,000 | ---D | C] -- C:\Users\v\Documents\Minidump [2013-05-04 12:44:37 | 000,000,000 | ---D | C] -- C:\Users\v\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Urządzenia interfejsu Bluetooth [2013-04-27 09:10:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia [2013-04-27 09:08:36 | 000,026,112 | ---- | C] (Nokia) -- C:\windows\SysNative\drivers\pccsmcfdx64.sys [2013-04-27 09:08:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PC Connectivity Solution [4 C:\windows\SysWow64\*.tmp files -> C:\windows\SysWow64\*.tmp -> ] [1 C:\Users\v\Documents\*.tmp files -> C:\Users\v\Documents\*.tmp -> ] [color=#E56717]========== Files - Modified Within 60 Days ==========[/color] [2013-06-25 10:18:34 | 000,013,632 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013-06-25 10:18:34 | 000,013,632 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013-06-25 10:13:52 | 001,673,242 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI [2013-06-25 10:13:52 | 000,741,708 | ---- | M] () -- C:\windows\SysNative\perfh015.dat [2013-06-25 10:13:52 | 000,655,858 | ---- | M] () -- C:\windows\SysNative\perfh009.dat [2013-06-25 10:13:52 | 000,156,648 | ---- | M] () -- C:\windows\SysNative\perfc015.dat [2013-06-25 10:13:52 | 000,123,058 | ---- | M] () -- C:\windows\SysNative\perfc009.dat [2013-06-25 10:13:20 | 000,000,538 | ---- | M] () -- C:\windows\tasks\MATLAB R2012b Startup Accelerator.job [2013-06-25 10:07:54 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat [2013-06-25 10:07:47 | 3113,365,504 | -HS- | M] () -- C:\hiberfil.sys [2013-06-25 09:39:00 | 000,001,042 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2154583305-863273735-3011277561-1000UA.job [2013-06-25 08:38:36 | 000,000,990 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-2154583305-863273735-3011277561-1000Core.job [2013-06-24 11:44:38 | 000,000,292 | ---- | M] () -- C:\Users\v\Desktop\fix.reg [2013-06-23 10:17:50 | 000,000,600 | ---- | M] () -- C:\Users\v\AppData\Roaming\winscp.rnd [2013-06-22 19:15:25 | 000,001,398 | ---- | M] () -- C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk [2013-06-22 14:56:09 | 000,000,822 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk [2013-06-22 00:04:32 | 000,451,695 | ---- | M] () -- C:\Users\v\Documents\11.jpg [2013-06-21 17:30:33 | 000,023,208 | ---- | M] () -- C:\Users\v\Documents\13.jpg [2013-06-21 12:25:43 | 000,274,588 | ---- | M] () -- C:\Users\v\Documents\Modelowanie układów fizyczno (Odzyskany).pdf [2013-06-21 01:26:25 | 001,650,800 | ---- | M] () -- C:\windows\SysWow64\PerfStringBackup.INI [2013-06-20 21:20:27 | 000,273,959 | ---- | M] () -- C:\Users\v\Documents\Modelowanie układów fizyczno.pdf [2013-06-19 18:49:40 | 002,865,356 | ---- | M] () -- C:\Users\v\Desktop\libraries.zip [2013-06-19 11:20:16 | 000,002,306 | ---- | M] () -- C:\Users\v\Desktop\Google Chrome.lnk [2013-06-18 19:46:56 | 000,018,803 | ---- | M] () -- C:\Users\v\Desktop\xD.jpg [2013-06-17 23:43:09 | 000,280,921 | ---- | M] () -- C:\Users\v\Documents\8.jpg [2013-06-17 21:54:01 | 000,290,001 | ---- | M] () -- C:\Users\v\Documents\9.jpg [2013-06-17 21:42:49 | 000,275,420 | ---- | M] () -- C:\Users\v\Documents\7.jpg [2013-06-17 21:29:25 | 000,295,397 | ---- | M] () -- C:\Users\v\Documents\6.jpg [2013-06-17 11:04:59 | 000,111,535 | ---- | M] () -- C:\Users\v\Desktop\majkut.jpg [2013-06-15 18:53:23 | 000,284,248 | ---- | M] () -- C:\Users\v\Documents\5.jpg [2013-06-15 18:51:38 | 000,437,413 | ---- | M] () -- C:\Users\v\Documents\4.jpg [2013-06-14 23:08:46 | 000,466,588 | ---- | M] () -- C:\Users\v\Documents\2.jpg [2013-06-09 01:20:16 | 000,017,064 | ---- | M] () -- C:\Users\v\Desktop\deklaracja_2_rok.pdf [2013-06-08 16:06:58 | 000,526,336 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ieui.dll [2013-06-08 13:40:02 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\ieui.dll [2013-06-08 01:22:05 | 001,054,720 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\MsSpellCheckingFacility.exe [2013-06-08 01:22:05 | 000,226,304 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\elshyph.dll [2013-06-08 01:22:05 | 000,185,344 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\elshyph.dll [2013-06-08 01:22:04 | 000,719,360 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmlmedia.dll [2013-06-08 01:22:04 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\msrating.dll [2013-06-08 01:22:04 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\iexpress.exe [2013-06-08 01:22:04 | 000,138,752 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\wextract.exe [2013-06-08 01:22:04 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\ieUnatt.exe [2013-06-08 01:22:04 | 000,125,440 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\occache.dll [2013-06-08 01:22:04 | 000,082,432 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\inseng.dll [2013-06-08 01:22:04 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmled.dll [2013-06-08 01:22:04 | 000,057,344 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\pngfilt.dll [2013-06-08 01:22:03 | 000,361,984 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\html.iec [2013-06-08 01:22:03 | 000,117,248 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\iepeers.dll [2013-06-08 01:22:03 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\IEAdvpack.dll [2013-06-08 01:22:03 | 000,073,728 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\SetIEInstalledDate.exe [2013-06-08 01:22:03 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\tdc.ocx [2013-06-08 01:22:03 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmler.dll [2013-06-08 01:22:03 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\msfeedssync.exe [2013-06-08 01:22:02 | 001,441,280 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\inetcpl.cpl [2013-06-08 01:22:02 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\ieapfltr.dat [2013-06-08 01:22:02 | 000,629,248 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\ieapfltr.dll [2013-06-08 01:22:02 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\url.dll [2013-06-08 01:22:02 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\icardie.dll [2013-06-08 01:22:02 | 000,025,185 | ---- | M] () -- C:\windows\SysWow64\ieuinit.inf [2013-06-08 01:22:02 | 000,023,040 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\licmgr10.dll [2013-06-08 01:22:01 | 001,400,416 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ieapfltr.dat [2013-06-08 01:22:01 | 000,762,368 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ieapfltr.dll [2013-06-08 01:22:01 | 000,452,096 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\dxtmsft.dll [2013-06-08 01:22:01 | 000,441,856 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\html.iec [2013-06-08 01:22:01 | 000,281,600 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\dxtrans.dll [2013-06-08 01:22:01 | 000,216,064 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\msls31.dll [2013-06-08 01:22:01 | 000,197,120 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\msrating.dll [2013-06-08 01:22:01 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\icardie.dll [2013-06-08 01:22:00 | 001,509,376 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\inetcpl.cpl [2013-06-08 01:22:00 | 000,905,728 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\mshtmlmedia.dll [2013-06-08 01:22:00 | 000,599,552 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\vbscript.dll [2013-06-08 01:22:00 | 000,235,008 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\url.dll [2013-06-08 01:22:00 | 000,173,568 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ieUnatt.exe [2013-06-08 01:22:00 | 000,167,424 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\iexpress.exe [2013-06-08 01:22:00 | 000,144,896 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\wextract.exe [2013-06-08 01:22:00 | 000,102,912 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\inseng.dll [2013-06-08 01:22:00 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\mshtmled.dll [2013-06-08 01:22:00 | 000,027,648 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\licmgr10.dll [2013-06-08 01:22:00 | 000,025,185 | ---- | M] () -- C:\windows\SysNative\ieuinit.inf [2013-06-08 01:21:59 | 000,149,504 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\occache.dll [2013-06-08 01:21:59 | 000,136,192 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\iepeers.dll [2013-06-08 01:21:59 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\IEAdvpack.dll [2013-06-08 01:21:59 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\SetIEInstalledDate.exe [2013-06-08 01:21:59 | 000,077,312 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\tdc.ocx [2013-06-08 01:21:59 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\pngfilt.dll [2013-06-08 01:21:59 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\imgutil.dll [2013-06-08 01:21:59 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\mshtmler.dll [2013-06-08 01:21:59 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\mshta.exe [2013-06-08 01:21:59 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\msfeedssync.exe [2013-06-07 23:46:32 | 000,001,038 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job [2013-06-07 23:46:32 | 000,001,034 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job [2013-06-07 11:26:40 | 000,037,325 | ---- | M] () -- C:\Users\v\Documents\wniosek-o-akademik.pdf [2013-06-06 18:09:52 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerApp.exe [2013-06-06 18:09:52 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerCPLApp.cpl [2013-06-06 01:46:42 | 000,004,650 | ---- | M] () -- C:\Users\v\AppData\Roaming\LTspiceIV.ini [2013-06-03 00:53:38 | 000,515,792 | ---- | M] () -- C:\Users\v\Documents\druga seria - ea4_wykresy2.pdf [2013-06-02 22:01:57 | 000,294,969 | ---- | M] () -- C:\Users\v\Documents\Schemat układu.pdf [2013-06-02 17:27:44 | 000,488,012 | ---- | M] () -- C:\Users\v\Documents\ea3_wykresy.pdf [2013-06-01 20:54:43 | 000,153,478 | ---- | M] () -- C:\windows\hpoins14.dat [2013-06-01 20:47:11 | 000,001,159 | ---- | M] () -- C:\Users\Public\Desktop\Centrum obsługi HP.lnk [2013-05-31 20:39:14 | 000,002,722 | ---- | M] () -- C:\Users\v\Documents\Mój film.wlmp [2013-05-30 22:03:01 | 000,111,845 | ---- | M] () -- C:\Users\v\Desktop\0206.pdf [2013-05-29 15:22:06 | 000,001,171 | ---- | M] () -- C:\Users\v\Desktop\LTspice IV.lnk [2013-05-28 15:14:07 | 000,111,913 | ---- | M] () -- C:\Users\v\Desktop\e-IC Internetowa sprzedaż biletów.pdf [2013-05-26 22:27:15 | 000,214,008 | ---- | M] () -- C:\Users\v\Documents\elektrotechnika_ea1.pdf [2013-05-23 13:34:23 | 004,980,056 | ---- | M] () -- C:\windows\SysNative\FNTCACHE.DAT [2013-05-21 14:35:03 | 000,000,057 | ---- | M] () -- C:\windows\Rocksoft.ini [2013-05-19 21:39:36 | 000,000,930 | ---- | M] () -- C:\Users\Public\Desktop\CPUID HWMonitor.lnk [2013-05-17 03:25:27 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\jscript.dll [2013-05-17 03:25:26 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\iesysprep.dll [2013-05-17 03:25:26 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\iesetup.dll [2013-05-17 03:25:26 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\iernonce.dll [2013-05-17 02:59:12 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\ie4uinit.exe [2013-05-17 02:58:20 | 000,603,136 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\msfeeds.dll [2013-05-17 02:58:10 | 003,958,784 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\jscript9.dll [2013-05-17 02:58:10 | 000,855,552 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\jscript.dll [2013-05-17 02:58:08 | 000,136,704 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\iesysprep.dll [2013-05-17 02:58:08 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\iesetup.dll [2013-05-17 02:58:08 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\iernonce.dll [2013-05-14 14:23:25 | 000,089,600 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\RegisterIEPKEYs.exe [2013-05-14 10:40:13 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\RegisterIEPKEYs.exe [2013-05-14 03:03:17 | 000,001,528 | ---- | M] () -- C:\Users\v\AppData\Local\recently-used.xbel [2013-05-13 21:54:02 | 000,001,322 | ---- | M] () -- C:\Users\v\Desktop\PC Inspector File Recovery.lnk [2013-05-13 18:22:13 | 000,001,398 | ---- | M] () -- C:\Users\v\Desktop\Free YouTube to MP3 Converter.lnk [2013-05-13 07:51:00 | 001,464,320 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\crypt32.dll [2013-05-13 07:51:00 | 000,139,776 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\cryptnet.dll [2013-05-13 07:50:40 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\certenc.dll [2013-05-13 05:43:55 | 001,192,448 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\certutil.exe [2013-05-13 05:08:10 | 000,903,168 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\certutil.exe [2013-05-13 05:08:06 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\certenc.dll [2013-05-10 07:49:27 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\windows\SysNative\cryptdlg.dll [2013-05-10 05:20:54 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\cryptdlg.dll [2013-05-07 18:55:14 | 000,699,559 | ---- | M] () -- C:\Users\v\Documents\Minidump (3).zip [2013-05-06 22:41:45 | 000,000,600 | ---- | M] () -- C:\Users\v\AppData\Local\PUTTY.RND [2013-05-06 19:13:11 | 000,409,274 | ---- | M] () -- C:\Users\v\Documents\Minidump (2).zip [2013-05-05 22:20:53 | 000,355,947 | ---- | M] () -- C:\Users\v\Documents\Minidump.zip [2013-05-04 23:00:48 | 016,654,878 | ---- | M] () -- C:\Users\v\Documents\MOV_0413.mp4 [2013-04-29 17:11:40 | 000,005,860 | ---- | M] () -- C:\Users\v\Desktop\zdjecie_katalog.png [2013-04-27 09:10:52 | 000,002,089 | ---- | M] () -- C:\Users\Public\Desktop\Nokia Suite.lnk [4 C:\windows\SysWow64\*.tmp files -> C:\windows\SysWow64\*.tmp -> ] [1 C:\Users\v\Documents\*.tmp files -> C:\Users\v\Documents\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2013-06-24 11:44:38 | 000,000,292 | ---- | C] () -- C:\Users\v\Desktop\fix.reg [2013-06-24 11:06:34 | 000,018,423 | ---- | C] () -- C:\Users\v\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SafeBootWin7.reg [2013-06-22 19:15:25 | 000,001,398 | ---- | C] () -- C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk [2013-06-21 17:29:26 | 000,023,208 | ---- | C] () -- C:\Users\v\Documents\13.jpg [2013-06-21 11:58:42 | 000,274,588 | ---- | C] () -- C:\Users\v\Documents\Modelowanie układów fizyczno (Odzyskany).pdf [2013-06-20 21:20:25 | 000,273,959 | ---- | C] () -- C:\Users\v\Documents\Modelowanie układów fizyczno.pdf [2013-06-20 17:14:24 | 000,451,695 | ---- | C] () -- C:\Users\v\Documents\11.jpg [2013-06-19 18:49:09 | 002,865,356 | ---- | C] () -- C:\Users\v\Desktop\libraries.zip [2013-06-18 19:46:56 | 000,018,803 | ---- | C] () -- C:\Users\v\Desktop\xD.jpg [2013-06-17 21:51:21 | 000,280,921 | ---- | C] () -- C:\Users\v\Documents\8.jpg [2013-06-17 21:50:49 | 000,290,001 | ---- | C] () -- C:\Users\v\Documents\9.jpg [2013-06-17 21:40:01 | 000,275,420 | ---- | C] () -- C:\Users\v\Documents\7.jpg [2013-06-17 21:28:25 | 000,295,397 | ---- | C] () -- C:\Users\v\Documents\6.jpg [2013-06-17 11:04:59 | 000,111,535 | ---- | C] () -- C:\Users\v\Desktop\majkut.jpg [2013-06-15 18:53:20 | 000,284,248 | ---- | C] () -- C:\Users\v\Documents\5.jpg [2013-06-15 18:51:36 | 000,437,413 | ---- | C] () -- C:\Users\v\Documents\4.jpg [2013-06-14 23:08:25 | 000,466,588 | ---- | C] () -- C:\Users\v\Documents\2.jpg [2013-06-09 01:20:16 | 000,017,064 | ---- | C] () -- C:\Users\v\Desktop\deklaracja_2_rok.pdf [2013-06-08 01:22:02 | 000,025,185 | ---- | C] () -- C:\windows\SysWow64\ieuinit.inf [2013-06-08 01:22:00 | 000,025,185 | ---- | C] () -- C:\windows\SysNative\ieuinit.inf [2013-06-07 11:26:38 | 000,037,325 | ---- | C] () -- C:\Users\v\Documents\wniosek-o-akademik.pdf [2013-06-03 00:53:37 | 000,515,792 | ---- | C] () -- C:\Users\v\Documents\druga seria - ea4_wykresy2.pdf [2013-06-02 22:01:55 | 000,294,969 | ---- | C] () -- C:\Users\v\Documents\Schemat układu.pdf [2013-06-02 17:27:42 | 000,488,012 | ---- | C] () -- C:\Users\v\Documents\ea3_wykresy.pdf [2013-06-01 20:47:11 | 000,001,159 | ---- | C] () -- C:\Users\Public\Desktop\Centrum obsługi HP.lnk [2013-06-01 20:22:38 | 000,153,478 | ---- | C] () -- C:\windows\hpoins14.dat [2013-05-31 20:39:13 | 000,002,722 | ---- | C] () -- C:\Users\v\Documents\Mój film.wlmp [2013-05-30 22:03:00 | 000,111,845 | ---- | C] () -- C:\Users\v\Desktop\0206.pdf [2013-05-30 20:47:36 | 000,004,650 | ---- | C] () -- C:\Users\v\AppData\Roaming\LTspiceIV.ini [2013-05-29 15:22:06 | 000,001,171 | ---- | C] () -- C:\Users\v\Desktop\LTspice IV.lnk [2013-05-28 15:14:06 | 000,111,913 | ---- | C] () -- C:\Users\v\Desktop\e-IC Internetowa sprzedaż biletów.pdf [2013-05-26 22:27:13 | 000,214,008 | ---- | C] () -- C:\Users\v\Documents\elektrotechnika_ea1.pdf [2013-05-21 14:35:03 | 000,000,057 | ---- | C] () -- C:\windows\Rocksoft.ini [2013-05-19 21:39:36 | 000,000,930 | ---- | C] () -- C:\Users\Public\Desktop\CPUID HWMonitor.lnk [2013-05-14 03:03:17 | 000,001,528 | ---- | C] () -- C:\Users\v\AppData\Local\recently-used.xbel [2013-05-13 21:54:02 | 000,001,322 | ---- | C] () -- C:\Users\v\Desktop\PC Inspector File Recovery.lnk [2013-05-07 18:55:11 | 000,699,559 | ---- | C] () -- C:\Users\v\Documents\Minidump (3).zip [2013-05-06 19:13:06 | 000,409,274 | ---- | C] () -- C:\Users\v\Documents\Minidump (2).zip [2013-05-05 22:20:50 | 000,355,947 | ---- | C] () -- C:\Users\v\Documents\Minidump.zip [2013-05-04 22:56:16 | 016,654,878 | ---- | C] () -- C:\Users\v\Documents\MOV_0413.mp4 [2013-04-29 17:11:21 | 000,005,860 | ---- | C] () -- C:\Users\v\Desktop\zdjecie_katalog.png [2013-04-27 09:10:52 | 000,002,089 | ---- | C] () -- C:\Users\Public\Desktop\Nokia Suite.lnk [2013-04-25 09:12:00 | 000,000,017 | ---- | C] () -- C:\windows\SysWow64\shortcut_ex.dat [2013-02-09 17:40:05 | 000,466,944 | ---- | C] () -- C:\windows\SysWow64\libtiff-5.dll [2013-02-09 17:40:05 | 000,222,208 | ---- | C] () -- C:\windows\SysWow64\libwebp-2.dll [2013-02-09 17:40:05 | 000,211,456 | ---- | C] () -- C:\windows\SysWow64\libpng15-15.dll [2013-02-09 17:40:05 | 000,200,192 | ---- | C] () -- C:\windows\SysWow64\libjpeg-8.dll [2013-02-09 17:40:05 | 000,090,624 | ---- | C] () -- C:\windows\SysWow64\zlib1.dll [2013-02-09 17:40:05 | 000,053,248 | ---- | C] () -- C:\windows\SysWow64\SDL_image.dll [2013-02-08 20:44:01 | 000,231,424 | ---- | C] () -- C:\windows\SysWow64\freeglut.dll [2012-10-12 02:50:40 | 000,049,738 | ---- | C] () -- C:\Program Files (x86)\AutoMapa EU.md5 [2012-08-28 21:21:55 | 000,000,262 | ---- | C] () -- C:\windows\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}_WiseFW.ini [2012-05-14 14:51:29 | 002,469,760 | ---- | C] () -- C:\windows\SysWow64\BootMan.exe [2012-05-14 14:51:29 | 000,086,408 | ---- | C] () -- C:\windows\SysWow64\setupempdrv03.exe [2012-05-14 14:51:29 | 000,019,840 | ---- | C] () -- C:\windows\SysWow64\EuEpmGdi.dll [2012-05-14 14:51:29 | 000,014,216 | ---- | C] () -- C:\windows\SysWow64\epmntdrv.sys [2012-05-14 14:51:29 | 000,008,456 | ---- | C] () -- C:\windows\SysWow64\EuGdiDrv.sys [2012-01-31 10:00:50 | 000,000,000 | ---- | C] () -- C:\Users\v\AppData\Local\{FA9A2447-A6C2-4559-9400-A3A9689E9DF9} [2012-01-31 09:52:51 | 000,000,000 | ---- | C] () -- C:\Users\v\AppData\Local\{8DFE0236-D944-4324-9EA1-5E5947FB6E9F} [2012-01-29 15:53:51 | 000,000,000 | ---- | C] () -- C:\Users\v\AppData\Local\{28071E78-677A-4993-BBFA-ABD300A810AF} [2012-01-25 19:40:49 | 000,000,000 | ---- | C] () -- C:\Users\v\AppData\Local\{0BC2226D-E0DC-43CC-A522-3C2735705976} [2012-01-25 19:36:12 | 000,000,000 | ---- | C] () -- C:\Users\v\AppData\Local\{A31DC3FB-9830-404C-B5F2-04B7F3F16CDA} [2012-01-18 13:14:44 | 000,000,000 | ---- | C] () -- C:\Users\v\AppData\Local\{41EA7A17-6E5C-425A-AFF9-4D9C571286F7} [2012-01-11 22:22:52 | 000,008,619 | ---- | C] () -- C:\Users\v\AppData\Roaming\gnuplot_history [2012-01-07 13:58:09 | 000,000,000 | ---- | C] () -- C:\Users\v\AppData\Local\{8BF68C6C-7C3A-4FEB-9BFB-5562D16452AE} [2012-01-07 12:39:23 | 000,000,000 | ---- | C] () -- C:\Users\v\AppData\Local\{5B95DF9B-4EA4-4B8A-9A27-D92229F59DDC} [2012-01-04 11:11:04 | 000,002,045 | -H-- | C] () -- C:\ProgramData\whlprd32a.dll [2011-12-30 17:31:33 | 000,324,096 | ---- | C] () -- C:\windows\SysWow64\SDL.dll [2011-12-30 16:40:54 | 000,321,536 | ---- | C] () -- C:\windows\SysWow64\SDL1.dll [2011-12-15 19:18:37 | 000,517,120 | ---- | C] () -- C:\windows\SysWow64\CLWCP.exe [2011-11-06 16:57:09 | 000,013,824 | ---- | C] () -- C:\Users\v\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-11-05 13:00:48 | 000,000,600 | ---- | C] () -- C:\Users\v\AppData\Roaming\winscp.rnd [2011-10-27 12:00:45 | 000,000,600 | ---- | C] () -- C:\Users\v\AppData\Local\PUTTY.RND [2011-10-18 21:40:52 | 000,178,688 | ---- | C] () -- C:\windows\SysWow64\unrar.dll [2011-10-08 01:22:03 | 000,823,296 | ---- | C] () -- C:\windows\SysWow64\libeay32.dll [2011-10-08 01:22:03 | 000,155,648 | ---- | C] () -- C:\windows\SysWow64\ssleay32.dll [2011-10-08 01:22:03 | 000,155,648 | ---- | C] () -- C:\windows\SysWow64\libssl32.dll [2011-10-05 16:03:55 | 000,000,174 | ---- | C] () -- C:\Users\v\.jupload.properties [2011-09-27 17:16:04 | 000,644,608 | ---- | C] () -- C:\windows\SysWow64\xvidcore.dll [2011-09-27 17:16:04 | 000,258,048 | ---- | C] () -- C:\windows\SysWow64\libFLAC.dll [2011-09-21 17:05:39 | 000,001,012 | ---- | C] () -- C:\windows\eReg.dat [2011-08-25 19:25:50 | 000,008,192 | ---- | C] () -- C:\Users\v\AppData\Roaming\records_db [2011-08-17 21:36:53 | 000,000,350 | ---- | C] () -- C:\ProgramData\profile.xml [2011-08-05 22:12:26 | 001,650,800 | ---- | C] () -- C:\windows\SysWow64\PerfStringBackup.INI [2011-08-03 22:07:41 | 000,007,598 | ---- | C] () -- C:\Users\v\AppData\Local\Resmon.ResmonCfg [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2013-02-27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2013-02-27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2012-01-07 21:04:15 | 000,000,000 | ---D | M] -- C:\Users\Gość\AppData\Roaming\SoftGrid Client [2013-03-09 17:55:37 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\.wtw [2013-04-27 08:32:02 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\AnvSoft [2011-08-13 17:15:39 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\ArcSyncConfig [2013-03-09 17:55:40 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\Autodesk [2011-10-18 21:41:02 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\BESTplayer [2012-06-07 18:22:41 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\Clicky Gone [2013-04-13 17:11:26 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\DAEMON Tools Lite [2013-06-24 11:08:04 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\DC++ [2013-06-22 19:15:08 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\DVDVideoSoft [2013-02-13 13:03:49 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\FlvtoConverter [2013-06-22 21:54:48 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\foobar2000 [2013-03-09 17:55:41 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\Gadu-Gadu 10 [2013-03-09 17:59:14 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\GHISLER [2013-03-09 17:59:14 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\gtk-2.0 [2013-03-09 17:59:14 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\HateML [2013-03-09 17:59:14 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\IrfanView [2011-08-17 21:38:59 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\Lenovo [2013-03-09 17:59:14 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\Mael [2013-03-09 17:55:41 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\Mathsoft [2013-03-09 17:59:17 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\NapiProjekt [2013-03-09 17:55:47 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\Nokia [2013-03-09 17:55:47 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\Nokia Ovi Suite [2013-04-22 21:15:18 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\Nokia Suite [2013-03-09 17:55:48 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\Notepad++ [2011-09-21 14:51:40 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\PC Suite [2012-11-06 20:24:20 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\PTC [2013-02-19 23:32:51 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\QTTabBar [2013-03-09 17:55:48 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\Red Alert 3 [2012-09-17 20:22:20 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\Remere's Map Editor [2013-06-24 11:08:26 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\SoftGrid Client [2013-03-15 18:28:11 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\Subversion [2013-03-09 17:59:19 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\Teeworlds [2013-03-09 17:59:19 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\Tibia [2011-08-05 22:13:09 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\TP [2013-03-09 17:59:19 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\TS3Client [2013-06-01 22:41:13 | 000,000,000 | ---D | M] -- C:\Users\v\AppData\Roaming\uTorrent [color=#E56717]========== Purity Check ==========[/color] < End of report >