OTL logfile created on: 2013-07-10 17:42:42 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Paulina\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16614)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,98 Gb Total Physical Memory | 2,01 Gb Available Physical Memory | 50,52% Memory free
7,95 Gb Paging File | 5,18 Gb Available in Paging File | 65,21% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 186,30 Gb Total Space | 136,12 Gb Free Space | 73,06% Space Free | Partition Type: NTFS
Drive D: | 254,46 Gb Total Space | 254,36 Gb Free Space | 99,96% Space Free | Partition Type: NTFS
Drive F: | 27,42 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: PAULINA1995 | User Name: Paulina | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2013-07-10 17:39:38 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Paulina\Downloads\OTL.exe
PRC - [2013-06-03 11:57:49 | 003,085,264 | ---- | M] () -- C:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
PRC - [2013-05-28 15:05:16 | 000,163,328 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
PRC - [2013-05-26 18:56:44 | 004,747,280 | ---- | M] (ClickMeIn Limited) -- C:\Program Files (x86)\VuuPC\Connectivity.exe
PRC - [2013-05-26 18:56:06 | 001,982,992 | ---- | M] (ClickMeIn Limited) -- C:\Program Files (x86)\VuuPC\RemoteEngineHelper.exe
PRC - [2013-05-26 18:56:04 | 002,967,568 | ---- | M] (ClickMeIn Limited) -- C:\Program Files (x86)\VuuPC\remoteengine.exe
PRC - [2013-01-25 19:46:30 | 003,057,512 | ---- | M] () -- C:\Windows\SysWOW64\config\systemprofile\AppData\Local\tuto4pc_pl_6\supt4pc_pl_6.exe
PRC - [2012-11-05 12:57:12 | 003,055,976 | ---- | M] () -- C:\Users\Paulina\AppData\Local\tuto4pc_pl_1\supt4pc_pl_1.exe
PRC - [2012-10-04 17:34:36 | 000,115,032 | R--- | M] (SweetIM Technologies Ltd.) -- C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe
PRC - [2012-08-15 20:08:34 | 000,231,768 | ---- | M] (SweetIM Technologies Ltd.) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe
PRC - [2012-06-11 17:22:16 | 000,240,208 | ---- | M] (Microsoft Corporation.) -- C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe
PRC - [2012-02-01 13:34:43 | 003,058,304 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe
PRC - [2011-10-25 15:39:22 | 000,789,464 | ---- | M] (Cyfrowy Polsat) -- C:\Program Files (x86)\Cyfrowy Polsat HSPA\Cyfrowy Polsat B150\CManager.exe
PRC - [2011-10-04 01:17:40 | 000,166,528 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
PRC - [2011-09-13 23:33:14 | 002,317,312 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
PRC - [2011-09-09 00:48:32 | 000,100,992 | ---- | M] (ASUS) -- C:\Program Files (x86)\Common Files\InstantOn\InsOnWMI.exe
PRC - [2011-09-09 00:48:30 | 000,092,800 | ---- | M] (ASUS) -- C:\Program Files (x86)\Common Files\InstantOn\InsOnSrv.exe
PRC - [2011-08-03 00:31:22 | 000,146,592 | ---- | M] (Atheros) -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
PRC - [2011-07-22 01:49:10 | 005,716,608 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
PRC - [2011-05-30 23:48:18 | 000,082,944 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
PRC - [2011-05-30 23:48:16 | 000,155,648 | ---- | M] (ASUSTeK) -- C:\Windows\SysWOW64\ACEngSvr.exe
PRC - [2011-01-17 20:50:30 | 011,322,880 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
PRC - [2011-01-17 20:50:30 | 011,314,688 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
PRC - [2010-12-21 04:24:38 | 002,656,280 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2010-12-21 04:24:36 | 000,325,656 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2010-11-30 18:25:24 | 018,635,264 | ---- | M] (Redefine Sp z o.o.) -- C:\Program Files (x86)\ipla\ipla.exe
PRC - [2010-11-20 14:17:58 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
PRC - [2010-11-20 14:17:38 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\schtasks.exe
PRC - [2010-11-15 20:42:12 | 000,305,792 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
PRC - [2010-10-08 00:05:14 | 000,170,624 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
PRC - [2010-08-20 19:57:06 | 000,107,816 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
PRC - [2010-07-10 08:45:00 | 000,984,400 | ---- | M] (Virage Logic Corporation / Sonic Focus) -- C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
PRC - [2009-12-15 20:39:38 | 000,096,896 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
PRC - [2009-06-19 20:29:42 | 000,105,016 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
PRC - [2009-06-19 20:29:26 | 002,488,888 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
PRC - [2009-06-16 03:30:42 | 000,084,536 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
PRC - [2008-12-23 03:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
PRC - [2008-08-14 07:00:08 | 000,113,208 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2013-06-15 03:28:42 | 000,393,168 | ---- | M] () -- C:\Users\Paulina\AppData\Local\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll
MOD - [2013-06-15 03:28:41 | 013,140,432 | ---- | M] () -- C:\Users\Paulina\AppData\Local\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll
MOD - [2013-06-15 03:28:40 | 004,051,408 | ---- | M] () -- C:\Users\Paulina\AppData\Local\Google\Chrome\Application\27.0.1453.116\pdf.dll
MOD - [2013-06-15 03:27:51 | 000,599,504 | ---- | M] () -- C:\Users\Paulina\AppData\Local\Google\Chrome\Application\27.0.1453.116\libglesv2.dll
MOD - [2013-06-15 03:27:50 | 000,124,368 | ---- | M] () -- C:\Users\Paulina\AppData\Local\Google\Chrome\Application\27.0.1453.116\libegl.dll
MOD - [2013-06-15 03:27:48 | 001,597,392 | ---- | M] () -- C:\Users\Paulina\AppData\Local\Google\Chrome\Application\27.0.1453.116\ffmpegsumo.dll
MOD - [2013-06-03 11:57:49 | 003,085,264 | ---- | M] () -- C:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
MOD - [2013-06-03 11:57:01 | 002,521,552 | ---- | M] () -- C:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll
MOD - [2012-11-11 13:43:26 | 000,985,088 | ---- | M] () -- C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
MOD - [2011-10-25 15:39:26 | 000,017,880 | ---- | M] () -- C:\Program Files (x86)\Cyfrowy Polsat HSPA\Cyfrowy Polsat B150\lang\pl_PL.dll
MOD - [2011-09-13 23:33:14 | 001,163,264 | ---- | M] () -- C:\Program Files (x86)\ASUS\Wireless Console 3\acAuth.dll
MOD - [2011-08-18 01:37:40 | 000,204,800 | ---- | M] () -- C:\Program Files (x86)\asus\VirtualCamera\virtualCamera.ax
MOD - [2011-05-30 23:48:14 | 000,009,216 | ---- | M] () -- C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll
MOD - [2011-03-17 01:11:16 | 004,297,568 | ---- | M] () -- C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf
MOD - [2010-11-30 18:18:38 | 000,267,264 | ---- | M] () -- C:\Program Files (x86)\ipla\MediaFileScanner.dll
MOD - [2010-11-30 18:17:26 | 000,386,560 | ---- | M] () -- C:\Program Files (x86)\ipla\jabberoo.dll
MOD - [2010-11-30 18:16:22 | 000,156,160 | ---- | M] () -- C:\Program Files (x86)\ipla\lua.dll
MOD - [2010-11-30 18:15:38 | 000,060,928 | ---- | M] () -- C:\Program Files (x86)\ipla\ziplib.dll
MOD - [2010-08-20 19:57:06 | 000,619,816 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
MOD - [2010-08-20 19:57:00 | 000,013,096 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - [2013-06-21 09:53:36 | 000,162,408 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013-06-03 11:57:49 | 003,085,264 | ---- | M] () [Auto | Running] -- C:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe -- (BrowserProtect)
SRV - [2013-05-28 15:05:16 | 000,163,328 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013-05-26 18:56:44 | 004,747,280 | ---- | M] (ClickMeIn Limited) [Auto | Running] -- C:\Program Files (x86)\VuuPC\Connectivity.exe -- (VuuPCConnectivity)
SRV - [2013-05-26 18:56:04 | 002,967,568 | ---- | M] (ClickMeIn Limited) [Auto | Running] -- C:\Program Files (x86)\VuuPC\remoteengine.exe -- (RemoteEngineService)
SRV - [2013-01-25 19:46:30 | 003,057,512 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\config\systemprofile\AppData\Local\tuto4pc_pl_6\supt4pc_pl_6.exe -- (supt4pc_pl_6)
SRV - [2012-11-05 12:57:12 | 003,055,976 | ---- | M] () [Auto | Running] -- C:\Users\Paulina\AppData\Local\tuto4pc_pl_1\supt4pc_pl_1.exe -- (supt4pc_pl_1)
SRV - [2012-06-11 17:22:16 | 000,240,208 | ---- | M] (Microsoft Corporation.) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\SeaPort.exe -- (BBUpdate)
SRV - [2012-06-11 17:22:16 | 000,193,616 | ---- | M] (Microsoft Corporation.) [Auto | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BBSvc.exe -- (BBSvc)
SRV - [2011-10-25 15:39:32 | 000,128,472 | ---- | M] (Cyfrowy Polsat) [Auto | Running] -- C:\Program Files (x86)\Cyfrowy Polsat HSPA\Cyfrowy Polsat B150\BRService.exe -- (BR_Launcher)
SRV - [2011-09-09 00:48:30 | 000,092,800 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\Common Files\InstantOn\InsOnSrv.exe -- (ASUS InstantOn)
SRV - [2011-08-03 00:31:22 | 000,146,592 | ---- | M] (Atheros) [Auto | Running] -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe -- (Atheros Bt&Wlan Coex Agent)
SRV - [2011-08-03 00:13:24 | 000,103,584 | ---- | M] (Atheros Commnucations) [Auto | Running] -- C:\Program Files (x86)\Bluetooth Suite\adminservice.exe -- (AtherosSvc)
SRV - [2010-12-21 04:24:38 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2010-12-21 04:24:36 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2010-03-18 22:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009-12-15 20:39:38 | 000,096,896 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2009-06-16 03:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService)
SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2011-09-07 19:55:04 | 000,017,536 | ---- | M] (ASUS) [Kernel | System | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys -- (ATKWMIACPIIO)
DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2009-07-03 03:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10002&barid={F58BBE4A-EF9E-46E6-9047-CDE4339D3192}
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-3323180369-1003203076-760426500-1000\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www2.delta-search.com/?affID=119357&tt=gc_&babsrc=HP_ss&mntrId=008EE4D53D58345C
IE - HKU\S-1-5-21-3323180369-1003203076-760426500-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_medium=pbr&from=pbr&uid=132775_34605056_230351775_3219913727_008EDBB0&ts=1352633884
IE - HKU\S-1-5-21-3323180369-1003203076-760426500-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://msn.gazeta.pl/msn/0,0.html?pc=UP97&ocid=UP97DHP&dt=070913
IE - HKU\S-1-5-21-3323180369-1003203076-760426500-1000\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-3323180369-1003203076-760426500-1000\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKU\S-1-5-21-3323180369-1003203076-760426500-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=119357&tt=gc_&babsrc=SP_ss_gin2g&mntrId=008EE4D53D58345C
IE - HKU\S-1-5-21-3323180369-1003203076-760426500-1000\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.v9.com/web/?q={searchTerms}
IE - HKU\S-1-5-21-3323180369-1003203076-760426500-1000\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://www.bing.com/search?FORM=UP97DF&PC=UP97&dt=070913&q={searchTerms}&src=IE-SearchBox
IE - HKU\S-1-5-21-3323180369-1003203076-760426500-1000\..\SearchScopes\3FEEC9D5784F487098056401021B20BE: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10002&barid={F58BBE4A-EF9E-46E6-9047-CDE4339D3192}
IE - HKU\S-1-5-21-3323180369-1003203076-760426500-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\ZEON/PDF,version=2.0: C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Paulina\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Paulina\AppData\Local\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Paulina\AppData\Local\Google\Update\1.3.21.149\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{22C7F6C6-8D67-4534-92B5-529A0EC09405}: C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension\ [2011-10-20 01:10:22 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\lyrmix@lyrmix.net: C:\Program Files (x86)\Lyrmix\FF\ [2013-05-11 13:08:45 | 000,000,000 | ---D | M]
 
[2012-08-30 08:31:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Paulina\AppData\Roaming\mozilla\Extensions
[2012-11-09 17:58:40 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider:  ()
CHR - default_search_provider: search_url = 
CHR - default_search_provider: suggest_url = 
CHR - homepage: http://www2.delta-search.com/?affID=119357&tt=gc_&babsrc=HP_ss&mntrId=008EE4D53D58345C
CHR - Extension: No name found = C:\Users\Paulina\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.3_0\
CHR - Extension: No name found = C:\Users\Paulina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.2.0.0_0\
CHR - Extension: No name found = C:\Users\Paulina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jofdlbdmefjogcipddjnblinigmpagoj\1.114_0\
CHR - Extension: No name found = C:\Users\Paulina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchpfiddbhbdnagofhkjlaiaejmkdcla\2.0_0\
CHR - Extension: No name found = C:\Users\Paulina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.3.0.2_0\
CHR - Extension: No name found = C:\Users\Paulina\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.3_0\
CHR - Extension: No name found = C:\Users\Paulina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.2.0.0_0\
CHR - Extension: No name found = C:\Users\Paulina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jofdlbdmefjogcipddjnblinigmpagoj\1.114_0\
CHR - Extension: No name found = C:\Users\Paulina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchpfiddbhbdnagofhkjlaiaejmkdcla\2.0_0\
CHR - Extension: No name found = C:\Users\Paulina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.3.0.2_0\
 
O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Claro LTD Helper Object) - {000F18F2-09EB-4A59-82B2-5AE4184C39C3} - C:\Program Files (x86)\Claro LTD\claro\1.8.3.10\bh\claro.dll (Montera Technologeis LTD)
O2 - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll (Trend Micro Inc.)
O2 - BHO: (DealPly Shopping) - {4B6ACEA2-308A-4876-AD36-57CEC5B4FCC7} - C:\Program Files (x86)\DealPly\DealPlyIE.dll (DealPly)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O2 - BHO: (Lyrmix) - {A8E06666-F1AE-4436-80C1-A1A1A865F236} - C:\Program Files (x86)\Lyrmix\lyrmix.dll (Lyrix Engineering)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)
O2 - BHO: (delta Helper Object) - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.16.16\bh\delta.dll (Delta-search.com)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (SweetPacks Browser Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKLM\..\Toolbar: (Delta Toolbar) - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.16.16\deltaTlbr.dll (Delta-search.com)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.391.0\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Claro LTD Toolbar) - {9E131A93-EED7-4BEB-B015-A0ADB30B5646} - C:\Program Files (x86)\Claro LTD\claro\1.8.3.10\claroTlbr.dll (Montera Technologeis LTD)
O3 - HKLM\..\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: [ASUSPRP] C:\Program Files (x86)\ASUS\APRP\APRP.EXE (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe (ecareme)
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [Nuance PDF Reader-reminder] C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [SonicMasterTray] C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe (Virage Logic Corporation / Sonic Focus)
O4 - HKLM..\Run: [SweetIM] C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [Sweetpacks Communicator] C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (ASUS)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3323180369-1003203076-760426500-1000..\Run: [Facebook Update] C:\Users\Paulina\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKU\S-1-5-21-3323180369-1003203076-760426500-1000..\Run: [IPLA!] C:\Program Files (x86)\ipla\ipla.exe (Redefine Sp z o.o.)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\Paulina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Wyślij &do programu OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found
O9 - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O13 - gopher Prefix: missing
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.6.2.cab (DLM Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.2.96.51 212.2.96.52
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B4B98760-14F5-4736-957E-2C10FF6693D9}: DhcpNameServer = 212.2.96.51 212.2.96.52
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)
O18 - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll (Trend Micro Inc.)
O20 - AppInit_DLLs: (c:\progra~3\browse~1\261339~1.144\{c16c1~1\browse~1.dll) - c:\ProgramData\BrowserProtect\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011-01-11 03:27:41 | 000,000,079 | R--- | M] () - F:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{4273f926-db1c-11e2-8585-e4d53d58345c}\Shell - "" = AutoRun
O33 - MountPoints2\{4273f926-db1c-11e2-8585-e4d53d58345c}\Shell\AutoRun\command - "" = F:\CyfrowyPolsat_AutoRun.exe -- [2011-10-25 09:39:31 | 000,408,536 | R--- | M] (BandRich Inc.)
O33 - MountPoints2\{4273f9c1-db1c-11e2-8585-e4d53d58345c}\Shell - "" = AutoRun
O33 - MountPoints2\{4273f9c1-db1c-11e2-8585-e4d53d58345c}\Shell\AutoRun\command - "" = F:\CyfrowyPolsat_AutoRun.exe -- [2011-10-25 09:39:31 | 000,408,536 | R--- | M] (BandRich Inc.)
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2013-07-10 05:59:44 | 000,000,000 | ---D | C] -- C:\Users\Paulina\AppData\Roaming\ATI
[2013-07-10 05:59:44 | 000,000,000 | ---D | C] -- C:\Users\Paulina\AppData\Local\ATI
[2013-07-09 14:45:26 | 000,000,000 | ---D | C] -- C:\Users\Paulina\Desktop\Joanna Nagięć_files
[2013-07-09 13:05:31 | 000,000,000 | ---D | C] -- C:\Users\Paulina\AppData\Roaming\Skype
[2013-07-09 13:05:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2013-07-09 13:05:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2013-07-09 13:05:12 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2013-07-09 13:04:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2013-06-22 15:34:44 | 000,000,000 | ---D | C] -- C:\Users\Paulina\AppData\Roaming\RDRM
[2013-06-22 15:34:42 | 000,000,000 | ---D | C] -- C:\Users\Paulina\AppData\Roaming\ipla
[2013-06-22 15:34:42 | 000,000,000 | ---D | C] -- C:\ProgramData\ipla
[2013-06-22 15:34:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ipla
[2013-06-22 15:34:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ipla
[2013-06-22 15:34:12 | 000,000,000 | ---D | C] -- C:\ProgramData\BandRich
[2013-06-22 15:34:09 | 001,700,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gdiplus.dll
[2013-06-22 15:34:09 | 001,060,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc71.dll
[2013-06-22 15:33:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cyfrowy Polsat HSPA
[2013-06-22 15:33:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cyfrowy Polsat HSPA
[2013-06-16 09:23:47 | 000,163,328 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerUpdateService.exe
[2013-06-16 09:23:33 | 000,000,000 | ---D | C] -- C:\Users\Paulina\AppData\Roaming\File Scout
[2013-06-15 23:09:36 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2013-06-12 22:30:43 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2013-06-12 22:30:43 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2013-06-12 22:30:43 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2013-06-12 22:30:43 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2013-06-12 22:30:39 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013-06-12 21:49:33 | 000,000,000 | ---D | C] -- C:\Users\Paulina\Desktop\Originals
[2013-06-12 15:33:41 | 000,492,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll
[2013-06-12 15:33:36 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptdlg.dll
[2013-06-12 15:33:22 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certutil.exe
[2013-06-12 15:33:21 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certenc.dll
[2013-06-12 15:33:12 | 001,505,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2013-07-10 17:45:00 | 000,001,066 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3323180369-1003203076-760426500-1000UA.job
[2013-07-10 16:59:08 | 000,000,936 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3323180369-1003203076-760426500-1000UA.job
[2013-07-10 16:59:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3323180369-1003203076-760426500-1000Core.job
[2013-07-10 16:58:17 | 000,000,288 | ---- | M] () -- C:\Windows\tasks\PC Performer_UPDATES.job
[2013-07-10 16:33:23 | 000,001,014 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3323180369-1003203076-760426500-1000Core.job
[2013-07-10 15:20:21 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013-07-10 15:18:45 | 000,000,280 | ---- | M] () -- C:\Windows\tasks\PC Performer_DEFAULT.job
[2013-07-10 05:05:44 | 000,000,384 | ---- | M] () -- C:\Windows\tasks\Lyrmix Update.job
[2013-07-10 05:02:56 | 000,045,056 | ---- | M] () -- C:\Windows\SysWow64\acovcnt.exe
[2013-07-10 05:01:26 | 3202,449,408 | -HS- | M] () -- C:\hiberfil.sys
[2013-07-09 23:38:05 | 000,000,824 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2013-07-09 14:46:32 | 000,611,023 | ---- | M] () -- C:\Users\Paulina\Desktop\Joanna Nagięć.htm
[2013-07-09 13:05:13 | 000,002,517 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2013-07-04 21:47:50 | 001,247,014 | ---- | M] () -- C:\Users\Paulina\Desktop\armii krajowej.bmp
[2013-07-04 15:44:38 | 001,138,230 | ---- | M] () -- C:\Users\Paulina\Desktop\kurdwanow.bmp
[2013-06-25 14:44:19 | 085,418,016 | ---- | M] () -- C:\Users\Paulina\Desktop\WP_20130623_134552Z.mp4
[2013-06-25 14:43:19 | 041,952,945 | ---- | M] () -- C:\Users\Paulina\Desktop\WP_20130623_125143Z.mp4
[2013-06-25 14:42:49 | 018,440,804 | ---- | M] () -- C:\Users\Paulina\Desktop\WP_20130623_130004Z.mp4
[2013-06-25 14:42:19 | 034,430,315 | ---- | M] () -- C:\Users\Paulina\Desktop\WP_20130623_130705Z.mp4
[2013-06-25 14:41:49 | 094,553,891 | ---- | M] () -- C:\Users\Paulina\Desktop\WP_20130623_133446Z.mp4
[2013-06-22 15:34:37 | 000,000,953 | ---- | M] () -- C:\Users\Public\Desktop\ipla.lnk
[2013-06-22 15:34:09 | 001,700,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\gdiplus.dll
[2013-06-22 15:34:09 | 001,060,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc71.dll
[2013-06-22 15:33:21 | 000,002,291 | ---- | M] () -- C:\Users\Public\Desktop\Cyfrowy Polsat B150.lnk
[2013-06-21 14:30:34 | 001,251,789 | ---- | M] () -- C:\Users\Paulina\Desktop\WP_002097.jpg
[2013-06-21 14:29:16 | 001,226,033 | ---- | M] () -- C:\Users\Paulina\Desktop\WP_002094.jpg
[2013-06-21 06:52:39 | 000,002,381 | ---- | M] () -- C:\Users\Paulina\Desktop\Google Chrome.lnk
[2013-06-19 14:15:59 | 005,223,756 | ---- | M] () -- C:\Users\Paulina\Desktop\zdjecia.zip
[2013-06-18 10:17:54 | 001,669,658 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013-06-17 17:16:55 | 000,000,923 | ---- | M] () -- C:\Users\Paulina\Desktop\stroje.rtf
[2013-06-12 21:49:59 | 000,067,584 | -H-- | M] () -- C:\Users\Paulina\Desktop\photothumb.db
[2013-06-12 21:49:33 | 000,115,649 | ---- | M] () -- C:\Users\Paulina\Desktop\page.jpg
[2013-06-12 21:36:46 | 001,041,990 | ---- | M] () -- C:\Users\Paulina\Desktop\Nowy obraz.bmp
[2013-06-12 21:29:21 | 000,102,117 | ---- | M] () -- C:\Users\Paulina\Desktop\972148_627699177259764_296833821_n.jpg
[2013-06-12 21:25:39 | 000,166,696 | ---- | M] () -- C:\Users\Paulina\Desktop\1002805_627695627260119_1286654004_n.jpg
[2013-06-12 21:20:11 | 000,087,058 | ---- | M] () -- C:\Users\Paulina\Desktop\421644_627696150593400_960886988_n.jpg
[2013-06-12 21:18:21 | 000,090,104 | ---- | M] () -- C:\Users\Paulina\Desktop\k.jpg
[2013-06-12 21:15:58 | 000,112,823 | ---- | M] () -- C:\Users\Paulina\Desktop\1011746_627694527260229_1029814836_n.jpg
[2013-06-12 21:11:54 | 000,071,823 | ---- | M] () -- C:\Users\Paulina\Desktop\970230_627693497260332_1007130923_n.jpg
[2013-06-12 21:08:02 | 000,104,271 | ---- | M] () -- C:\Users\Paulina\Desktop\179732_627692153927133_82466605_n.jpg
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2013-07-09 23:38:05 | 000,000,824 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2013-07-09 14:46:32 | 000,611,023 | ---- | C] () -- C:\Users\Paulina\Desktop\Joanna Nagięć.htm
[2013-07-09 13:05:13 | 000,002,517 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2013-07-04 15:55:14 | 001,247,014 | ---- | C] () -- C:\Users\Paulina\Desktop\armii krajowej.bmp
[2013-07-04 15:44:38 | 001,138,230 | ---- | C] () -- C:\Users\Paulina\Desktop\kurdwanow.bmp
[2013-06-25 15:54:13 | 085,418,016 | ---- | C] () -- C:\Users\Paulina\Desktop\WP_20130623_134552Z.mp4
[2013-06-25 15:54:09 | 094,553,891 | ---- | C] () -- C:\Users\Paulina\Desktop\WP_20130623_133446Z.mp4
[2013-06-25 15:54:07 | 034,430,315 | ---- | C] () -- C:\Users\Paulina\Desktop\WP_20130623_130705Z.mp4
[2013-06-25 15:54:07 | 018,440,804 | ---- | C] () -- C:\Users\Paulina\Desktop\WP_20130623_130004Z.mp4
[2013-06-25 15:54:05 | 041,952,945 | ---- | C] () -- C:\Users\Paulina\Desktop\WP_20130623_125143Z.mp4
[2013-06-22 15:34:37 | 000,000,953 | ---- | C] () -- C:\Users\Public\Desktop\ipla.lnk
[2013-06-22 15:33:21 | 000,002,291 | ---- | C] () -- C:\Users\Public\Desktop\Cyfrowy Polsat B150.lnk
[2013-06-21 14:32:48 | 001,251,789 | ---- | C] () -- C:\Users\Paulina\Desktop\WP_002097.jpg
[2013-06-21 14:32:48 | 001,226,033 | ---- | C] () -- C:\Users\Paulina\Desktop\WP_002094.jpg
[2013-06-19 14:21:32 | 003,080,195 | ---- | C] () -- C:\Users\Paulina\Desktop\DSCF8463.JPG
[2013-06-17 17:16:55 | 000,000,923 | ---- | C] () -- C:\Users\Paulina\Desktop\stroje.rtf
[2013-06-12 21:36:46 | 001,041,990 | ---- | C] () -- C:\Users\Paulina\Desktop\Nowy obraz.bmp
[2013-06-12 21:29:20 | 000,102,117 | ---- | C] () -- C:\Users\Paulina\Desktop\972148_627699177259764_296833821_n.jpg
[2013-06-12 21:20:10 | 000,087,058 | ---- | C] () -- C:\Users\Paulina\Desktop\421644_627696150593400_960886988_n.jpg
[2013-06-12 21:18:21 | 000,166,696 | ---- | C] () -- C:\Users\Paulina\Desktop\1002805_627695627260119_1286654004_n.jpg
[2013-06-12 21:18:21 | 000,090,104 | ---- | C] () -- C:\Users\Paulina\Desktop\k.jpg
[2013-06-12 21:15:58 | 000,112,823 | ---- | C] () -- C:\Users\Paulina\Desktop\1011746_627694527260229_1029814836_n.jpg
[2013-06-12 21:11:54 | 000,071,823 | ---- | C] () -- C:\Users\Paulina\Desktop\970230_627693497260332_1007130923_n.jpg
[2013-06-12 21:08:01 | 000,104,271 | ---- | C] () -- C:\Users\Paulina\Desktop\179732_627692153927133_82466605_n.jpg
[2013-06-11 22:19:33 | 000,115,649 | ---- | C] () -- C:\Users\Paulina\Desktop\page.jpg
[2013-06-11 22:06:38 | 005,223,756 | ---- | C] () -- C:\Users\Paulina\Desktop\zdjecia.zip
[2012-08-29 13:14:17 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\acovcnt.exe
[2012-02-01 13:26:45 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012-02-01 13:24:15 | 000,003,929 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2011-10-20 01:00:15 | 000,131,984 | ---- | C] () -- C:\ProgramData\FullRemove.exe
[2011-10-20 00:42:45 | 001,669,658 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011-09-28 08:15:06 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\OpenVideo.dll
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013-02-27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013-02-27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 14:19:04 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-08-29 13:20:12 | 000,000,000 | ---D | M] -- C:\Users\Paulina\AppData\Roaming\ASUS WebStorage
[2013-05-11 13:07:58 | 000,000,000 | ---D | M] -- C:\Users\Paulina\AppData\Roaming\BabSolution
[2012-11-09 17:58:10 | 000,000,000 | ---D | M] -- C:\Users\Paulina\AppData\Roaming\Babylon
[2012-11-09 17:58:49 | 000,000,000 | ---D | M] -- C:\Users\Paulina\AppData\Roaming\Claro
[2013-05-11 13:09:06 | 000,000,000 | ---D | M] -- C:\Users\Paulina\AppData\Roaming\DealPly
[2013-05-11 13:07:42 | 000,000,000 | ---D | M] -- C:\Users\Paulina\AppData\Roaming\Delta
[2013-03-03 17:57:45 | 000,000,000 | ---D | M] -- C:\Users\Paulina\AppData\Roaming\Dev-Cpp
[2013-06-16 09:23:38 | 000,000,000 | ---D | M] -- C:\Users\Paulina\AppData\Roaming\File Scout
[2013-06-10 12:23:45 | 000,000,000 | ---D | M] -- C:\Users\Paulina\AppData\Roaming\GG
[2013-07-10 05:03:19 | 000,000,000 | ---D | M] -- C:\Users\Paulina\AppData\Roaming\ipla
[2012-08-29 13:22:53 | 000,000,000 | ---D | M] -- C:\Users\Paulina\AppData\Roaming\Nuance
[2012-11-11 13:43:40 | 000,000,000 | ---D | M] -- C:\Users\Paulina\AppData\Roaming\OpenOffice.org
[2012-11-09 17:58:25 | 000,000,000 | ---D | M] -- C:\Users\Paulina\AppData\Roaming\PerformerSoft
[2013-02-18 19:22:48 | 000,000,000 | ---D | M] -- C:\Users\Paulina\AppData\Roaming\PhotoScape
[2013-06-22 15:34:50 | 000,000,000 | ---D | M] -- C:\Users\Paulina\AppData\Roaming\RDRM
[2013-06-10 13:02:22 | 000,000,000 | ---D | M] -- C:\Users\Paulina\AppData\Roaming\SoftGrid Client
[2012-09-09 16:16:45 | 000,000,000 | ---D | M] -- C:\Users\Paulina\AppData\Roaming\TP
[2012-08-29 13:22:51 | 000,000,000 | ---D | M] -- C:\Users\Paulina\AppData\Roaming\Zeon
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >