OTL logfile created on: 2013-08-21 15:46:56 - Run 2 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Piotrek\Downloads 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16660) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 15,90 Gb Total Physical Memory | 13,21 Gb Available Physical Memory | 83,05% Memory free 31,81 Gb Paging File | 28,80 Gb Available in Paging File | 90,55% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 117,09 Gb Total Space | 55,01 Gb Free Space | 46,98% Space Free | Partition Type: NTFS Drive D: | 813,24 Gb Total Space | 717,72 Gb Free Space | 88,25% Space Free | Partition Type: NTFS Computer Name: PIOTREK-LAP | User Name: Piotrek | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2013-08-21 15:35:36 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Piotrek\Downloads\OTL.exe PRC - [2013-08-17 11:38:09 | 000,276,376 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2013-06-12 15:35:21 | 001,855,880 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe PRC - [2013-05-09 10:58:30 | 004,858,968 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2013-05-09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2012-06-28 17:41:58 | 002,206,888 | ---- | M] (Nullsoft, Inc.) -- D:\Program Files\Winamp\winamp.exe PRC - [2012-05-21 09:26:28 | 000,291,648 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe PRC - [2011-08-25 20:43:44 | 000,337,776 | ---- | M] ( ) -- C:\Program Files (x86)\LockKey\LockKey.exe PRC - [2011-08-25 15:35:06 | 000,095,640 | ---- | M] (Binary Fortress Software) -- C:\Program Files (x86)\DisplayFusion\AppHookx86.exe PRC - [2011-02-02 14:08:16 | 000,018,656 | ---- | M] () -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2013-08-20 23:19:44 | 000,324,608 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\winamp.lng MOD - [2013-08-20 23:19:44 | 000,161,792 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\vis_milk2.lng MOD - [2013-08-20 23:19:44 | 000,007,680 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\vis_nsfs.lng MOD - [2013-08-20 23:19:44 | 000,003,584 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\winampa.lng MOD - [2013-08-20 23:19:43 | 000,087,552 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\vis_avs.lng MOD - [2013-08-20 23:19:43 | 000,066,560 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\burnlib.lng MOD - [2013-08-20 23:19:43 | 000,054,272 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\ml_local.lng MOD - [2013-08-20 23:19:43 | 000,047,616 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\ml_disc.lng MOD - [2013-08-20 23:19:43 | 000,046,592 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\ml_pmp.lng MOD - [2013-08-20 23:19:43 | 000,045,056 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\pmp_wifi.lng MOD - [2013-08-20 23:19:43 | 000,040,960 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\gen_jumpex.lng MOD - [2013-08-20 23:19:43 | 000,036,864 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\ombrowser.lng MOD - [2013-08-20 23:19:43 | 000,022,528 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\in_mp3.lng MOD - [2013-08-20 23:19:43 | 000,022,016 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\gen_ff.lng MOD - [2013-08-20 23:19:43 | 000,021,504 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\gen_ml.lng MOD - [2013-08-20 23:19:43 | 000,020,992 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\in_midi.lng MOD - [2013-08-20 23:19:43 | 000,018,432 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\in_mod.lng MOD - [2013-08-20 23:19:43 | 000,016,896 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\out_ds.lng MOD - [2013-08-20 23:19:43 | 000,014,336 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\ml_wire.lng MOD - [2013-08-20 23:19:43 | 000,014,336 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\ml_online.lng MOD - [2013-08-20 23:19:43 | 000,013,312 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\ml_playlists.lng MOD - [2013-08-20 23:19:43 | 000,013,312 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\in_cdda.lng MOD - [2013-08-20 23:19:43 | 000,012,800 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\ml_plg.lng MOD - [2013-08-20 23:19:43 | 000,012,800 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\dsp_sps.lng MOD - [2013-08-20 23:19:43 | 000,011,264 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\in_vorbis.lng MOD - [2013-08-20 23:19:43 | 000,011,264 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\in_nsv.lng MOD - [2013-08-20 23:19:43 | 000,011,264 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\gen_hotkeys.lng MOD - [2013-08-20 23:19:43 | 000,011,264 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\auth.lng MOD - [2013-08-20 23:19:43 | 000,010,752 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\pmp_usb.lng MOD - [2013-08-20 23:19:43 | 000,010,752 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\pmp_android.lng MOD - [2013-08-20 23:19:43 | 000,009,216 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\ml_downloads.lng MOD - [2013-08-20 23:19:43 | 000,008,704 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\ml_history.lng MOD - [2013-08-20 23:19:43 | 000,008,192 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\ml_transcode.lng MOD - [2013-08-20 23:19:43 | 000,008,192 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\ml_devices.lng MOD - [2013-08-20 23:19:43 | 000,007,680 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\gen_tray.lng MOD - [2013-08-20 23:19:43 | 000,007,168 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\out_wave.lng MOD - [2013-08-20 23:19:43 | 000,007,168 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\ml_autotag.lng MOD - [2013-08-20 23:19:43 | 000,007,168 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\in_dshow.lng MOD - [2013-08-20 23:19:43 | 000,007,168 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\gen_orgler.lng MOD - [2013-08-20 23:19:43 | 000,007,168 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\gen_crasher.lng MOD - [2013-08-20 23:19:43 | 000,006,656 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\pmp_ipod.lng MOD - [2013-08-20 23:19:43 | 000,006,656 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\enc_fhgaac.lng MOD - [2013-08-20 23:19:43 | 000,006,144 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\tagz.lng MOD - [2013-08-20 23:19:43 | 000,006,144 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\out_disk.lng MOD - [2013-08-20 23:19:43 | 000,006,144 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\in_flac.lng MOD - [2013-08-20 23:19:43 | 000,006,144 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\enc_wma.lng MOD - [2013-08-20 23:19:43 | 000,005,632 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\ml_rg.lng MOD - [2013-08-20 23:19:43 | 000,005,632 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\in_wave.lng MOD - [2013-08-20 23:19:43 | 000,005,632 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\enc_lame.lng MOD - [2013-08-20 23:19:43 | 000,005,120 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\ml_impex.lng MOD - [2013-08-20 23:19:43 | 000,005,120 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\ml_bookmarks.lng MOD - [2013-08-20 23:19:43 | 000,005,120 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\in_avi.lng MOD - [2013-08-20 23:19:43 | 000,004,608 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\pmp_activesync.lng MOD - [2013-08-20 23:19:43 | 000,004,608 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\in_mp4.lng MOD - [2013-08-20 23:19:43 | 000,004,608 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\in_mkv.lng MOD - [2013-08-20 23:19:43 | 000,004,096 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\pmp_p4s.lng MOD - [2013-08-20 23:19:43 | 000,004,096 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\ml_orb.lng MOD - [2013-08-20 23:19:43 | 000,004,096 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\enc_wav.lng MOD - [2013-08-20 23:19:43 | 000,004,096 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\enc_flac.lng MOD - [2013-08-20 23:19:43 | 000,003,584 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\pmp_njb.lng MOD - [2013-08-20 23:19:43 | 000,003,584 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\ml_nowplaying.lng MOD - [2013-08-20 23:19:43 | 000,003,584 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\ml_addons.lng MOD - [2013-08-20 23:19:43 | 000,003,584 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\in_swf.lng MOD - [2013-08-20 23:19:43 | 000,003,584 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\in_linein.lng MOD - [2013-08-20 23:19:43 | 000,003,584 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\in_flv.lng MOD - [2013-08-20 23:19:43 | 000,003,072 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\Temp\WLZ3C34.tmp\playlist.lng MOD - [2013-08-17 11:38:08 | 003,551,640 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2013-06-12 15:35:20 | 016,033,160 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll MOD - [2013-05-22 16:15:47 | 000,091,136 | ---- | M] () -- D:\Program Files\Winamp\System\xml.w5s MOD - [2013-05-22 16:15:47 | 000,087,552 | ---- | M] () -- D:\Program Files\Winamp\System\png.w5s MOD - [2013-05-22 16:15:47 | 000,084,480 | ---- | M] () -- D:\Program Files\Winamp\System\playlist.w5s MOD - [2013-05-22 16:15:47 | 000,083,968 | ---- | M] () -- D:\Program Files\Winamp\tataki.dll MOD - [2013-05-22 16:15:47 | 000,064,512 | ---- | M] () -- D:\Program Files\Winamp\zlib.dll MOD - [2013-05-22 16:15:47 | 000,035,328 | ---- | M] () -- D:\Program Files\Winamp\System\timer.w5s MOD - [2013-05-22 16:15:47 | 000,021,504 | ---- | M] () -- D:\Program Files\Winamp\System\tagz.w5s MOD - [2013-05-22 16:15:47 | 000,013,824 | ---- | M] () -- D:\Program Files\Winamp\System\primo.w5s MOD - [2013-05-22 16:15:46 | 000,623,616 | ---- | M] () -- D:\Program Files\Winamp\System\jnetlib.w5s MOD - [2013-05-22 16:15:46 | 000,174,080 | ---- | M] () -- D:\Program Files\Winamp\System\auth.w5s MOD - [2013-05-22 16:15:46 | 000,154,624 | ---- | M] () -- D:\Program Files\Winamp\System\jpeg.w5s MOD - [2013-05-22 16:15:46 | 000,044,544 | ---- | M] () -- D:\Program Files\Winamp\System\devices.w5s MOD - [2013-05-22 16:15:46 | 000,023,552 | ---- | M] () -- D:\Program Files\Winamp\System\albumart.w5s MOD - [2013-05-22 16:15:46 | 000,019,456 | ---- | M] () -- D:\Program Files\Winamp\System\gif.w5s MOD - [2013-05-22 16:15:46 | 000,019,456 | ---- | M] () -- D:\Program Files\Winamp\System\bmp.w5s MOD - [2013-05-22 16:15:46 | 000,016,896 | ---- | M] () -- D:\Program Files\Winamp\System\dlmgr.w5s MOD - [2013-05-22 16:15:46 | 000,016,384 | ---- | M] () -- D:\Program Files\Winamp\System\gracenote.w5s MOD - [2013-05-22 16:15:46 | 000,014,336 | ---- | M] () -- D:\Program Files\Winamp\System\filereader.w5s MOD - [2013-05-22 16:15:44 | 000,313,344 | ---- | M] () -- D:\Program Files\Winamp\Plugins\in_wm.dll MOD - [2013-05-22 16:15:44 | 000,294,912 | ---- | M] () -- D:\Program Files\Winamp\Plugins\ml_local.dll MOD - [2013-05-22 16:15:44 | 000,290,816 | ---- | M] () -- D:\Program Files\Winamp\Plugins\in_mp3.dll MOD - [2013-05-22 16:15:44 | 000,253,440 | ---- | M] () -- D:\Program Files\Winamp\Plugins\in_vorbis.dll MOD - [2013-05-22 16:15:44 | 000,249,856 | ---- | M] () -- D:\Program Files\Winamp\Plugins\ml_devices.dll MOD - [2013-05-22 16:15:44 | 000,240,640 | ---- | M] () -- D:\Program Files\Winamp\Plugins\ml_pmp.dll MOD - [2013-05-22 16:15:44 | 000,201,728 | ---- | M] () -- D:\Program Files\Winamp\Plugins\ml_disc.dll MOD - [2013-05-22 16:15:44 | 000,170,496 | ---- | M] () -- D:\Program Files\Winamp\Plugins\pmp_ipod.dll MOD - [2013-05-22 16:15:44 | 000,124,928 | ---- | M] () -- D:\Program Files\Winamp\Plugins\ml_online.dll MOD - [2013-05-22 16:15:44 | 000,118,272 | ---- | M] () -- D:\Program Files\Winamp\Plugins\pmp_p4s.dll MOD - [2013-05-22 16:15:44 | 000,113,664 | ---- | M] () -- D:\Program Files\Winamp\Plugins\pmp_wifi.dll MOD - [2013-05-22 16:15:44 | 000,084,480 | ---- | M] () -- D:\Program Files\Winamp\Plugins\ml_playlists.dll MOD - [2013-05-22 16:15:44 | 000,083,456 | ---- | M] () -- D:\Program Files\Winamp\Plugins\ml_plg.dll MOD - [2013-05-22 16:15:44 | 000,075,264 | ---- | M] () -- D:\Program Files\Winamp\Plugins\in_nsv.dll MOD - [2013-05-22 16:15:44 | 000,060,928 | ---- | M] () -- D:\Program Files\Winamp\Plugins\pmp_android.dll MOD - [2013-05-22 16:15:44 | 000,057,344 | ---- | M] () -- D:\Program Files\Winamp\Plugins\ml_impex.dll MOD - [2013-05-22 16:15:44 | 000,053,760 | ---- | M] () -- D:\Program Files\Winamp\Plugins\pmp_usb.dll MOD - [2013-05-22 16:15:44 | 000,052,736 | ---- | M] () -- D:\Program Files\Winamp\Plugins\in_mp4.dll MOD - [2013-05-22 16:15:44 | 000,052,224 | ---- | M] () -- D:\Program Files\Winamp\Plugins\out_ds.dll MOD - [2013-05-22 16:15:44 | 000,052,224 | ---- | M] () -- D:\Program Files\Winamp\Plugins\ml_history.dll MOD - [2013-05-22 16:15:44 | 000,033,792 | ---- | M] () -- D:\Program Files\Winamp\Plugins\ml_rg.dll MOD - [2013-05-22 16:15:44 | 000,032,256 | ---- | M] () -- D:\Program Files\Winamp\Plugins\ml_transcode.dll MOD - [2013-05-22 16:15:44 | 000,029,184 | ---- | M] () -- D:\Program Files\Winamp\Plugins\pmp_activesync.dll MOD - [2013-05-22 16:15:44 | 000,028,672 | ---- | M] () -- D:\Program Files\Winamp\Plugins\ml_bookmarks.dll MOD - [2013-05-22 16:15:44 | 000,028,672 | ---- | M] () -- D:\Program Files\Winamp\Plugins\ml_autotag.dll MOD - [2013-05-22 16:15:44 | 000,023,552 | ---- | M] () -- D:\Program Files\Winamp\Plugins\in_swf.dll MOD - [2013-05-22 16:15:44 | 000,022,528 | ---- | M] () -- D:\Program Files\Winamp\Plugins\out_disk.dll MOD - [2013-05-22 16:15:44 | 000,020,480 | ---- | M] () -- D:\Program Files\Winamp\Plugins\pmp_njb.dll MOD - [2013-05-22 16:15:44 | 000,018,432 | ---- | M] () -- D:\Program Files\Winamp\Plugins\out_wave.dll MOD - [2013-05-22 16:15:44 | 000,016,896 | ---- | M] () -- D:\Program Files\Winamp\Plugins\in_wave.dll MOD - [2013-05-22 16:15:43 | 001,737,728 | ---- | M] () -- D:\Program Files\Winamp\Plugins\gen_ff.dll MOD - [2013-05-22 16:15:43 | 000,417,280 | ---- | M] () -- D:\Program Files\Winamp\nsutil.dll MOD - [2013-05-22 16:15:43 | 000,340,992 | ---- | M] () -- D:\Program Files\Winamp\Plugins\freeform\wacs\freetype\freetype.wac MOD - [2013-05-22 16:15:43 | 000,318,976 | ---- | M] () -- D:\Program Files\Winamp\Plugins\gen_ml.dll MOD - [2013-05-22 16:15:43 | 000,253,440 | ---- | M] () -- D:\Program Files\Winamp\libsndfile.dll MOD - [2013-05-22 16:15:43 | 000,185,344 | ---- | M] () -- D:\Program Files\Winamp\Plugins\gen_jumpex.dll MOD - [2013-05-22 16:15:43 | 000,164,864 | ---- | M] () -- D:\Program Files\Winamp\Plugins\in_mod.dll MOD - [2013-05-22 16:15:43 | 000,109,568 | ---- | M] () -- D:\Program Files\Winamp\Plugins\in_midi.dll MOD - [2013-05-22 16:15:43 | 000,102,400 | ---- | M] () -- D:\Program Files\Winamp\Plugins\in_cdda.dll MOD - [2013-05-22 16:15:43 | 000,078,848 | ---- | M] () -- D:\Program Files\Winamp\nde.dll MOD - [2013-05-22 16:15:43 | 000,072,192 | ---- | M] () -- D:\Program Files\Winamp\Plugins\in_dshow.dll MOD - [2013-05-22 16:15:43 | 000,068,608 | ---- | M] () -- D:\Program Files\Winamp\Plugins\in_avi.dll MOD - [2013-05-22 16:15:43 | 000,061,440 | ---- | M] () -- D:\Program Files\Winamp\Plugins\in_flac.dll MOD - [2013-05-22 16:15:43 | 000,057,344 | ---- | M] () -- D:\Program Files\Winamp\Plugins\gen_orgler.dll MOD - [2013-05-22 16:15:43 | 000,049,152 | ---- | M] () -- D:\Program Files\Winamp\Plugins\in_mkv.dll MOD - [2013-05-22 16:15:43 | 000,043,008 | ---- | M] () -- D:\Program Files\Winamp\Plugins\in_flv.dll MOD - [2013-05-22 16:15:43 | 000,028,160 | ---- | M] () -- D:\Program Files\Winamp\Plugins\gen_hotkeys.dll MOD - [2013-05-22 16:15:43 | 000,025,600 | ---- | M] () -- D:\Program Files\Winamp\Plugins\gen_tray.dll MOD - [2013-05-22 16:15:43 | 000,007,168 | ---- | M] () -- D:\Program Files\Winamp\Plugins\in_linein.dll MOD - [2012-11-06 09:04:26 | 000,004,096 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2013-05-27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2013-05-23 17:52:17 | 001,431,888 | ---- | M] (Flexera Software, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64) SRV:[b]64bit:[/b] - [2013-05-09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV:[b]64bit:[/b] - [2012-07-02 18:21:52 | 001,005,944 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe -- (btwdins) SRV:[b]64bit:[/b] - [2012-05-30 13:11:34 | 000,149,544 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost) SRV:[b]64bit:[/b] - [2012-02-02 22:29:52 | 000,628,448 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R) SRV:[b]64bit:[/b] - [2011-12-08 10:44:04 | 000,594,704 | ---- | M] (Intel® Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe -- (ZeroConfigService) SRV:[b]64bit:[/b] - [2011-12-08 10:43:56 | 000,273,168 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS) SRV:[b]64bit:[/b] - [2011-12-08 10:43:48 | 000,618,256 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) SRV:[b]64bit:[/b] - [2011-12-08 10:43:44 | 000,148,752 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) SRV:[b]64bit:[/b] - [2011-12-05 09:30:50 | 000,659,968 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3) SRV:[b]64bit:[/b] - [2011-12-05 08:55:36 | 000,135,952 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr) SRV:[b]64bit:[/b] - [2011-11-30 16:18:02 | 000,514,048 | ---- | M] (Red Bend Ltd.) [Disabled | Stopped] -- C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe -- (DMAgent) SRV:[b]64bit:[/b] - [2011-11-30 16:12:00 | 000,979,456 | ---- | M] (Intel(R) Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe -- (WiMAXAppSrv) SRV:[b]64bit:[/b] - [2010-11-21 05:24:51 | 000,049,664 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\snmp.exe -- (SNMP) SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2013-08-17 11:38:08 | 000,117,656 | ---- | M] (Mozilla Foundation) [Disabled | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2013-06-12 15:35:23 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2013-05-11 12:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2012-11-06 09:04:26 | 001,258,856 | R--- | M] (NVIDIA Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService) SRV - [2012-04-28 10:20:06 | 000,163,456 | ---- | M] (Atheros) [Disabled | Stopped] -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe -- (ZAtheros Bt&Wlan Coex Agent) SRV - [2012-04-28 09:57:54 | 000,119,424 | ---- | M] (Atheros Commnucations) [Disabled | Stopped] -- C:\Program Files (x86)\Bluetooth Suite\adminservice.exe -- (AtherosSvc) SRV - [2012-03-02 23:48:56 | 000,276,248 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs) SRV - [2012-02-29 03:20:04 | 000,363,800 | R--- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) SRV - [2012-02-29 03:19:58 | 000,277,784 | R--- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2012-02-29 03:19:48 | 000,161,560 | R--- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service) SRV - [2011-11-29 20:04:56 | 000,013,592 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) SRV - [2011-02-02 14:08:16 | 000,018,656 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe -- (Autodesk Content Service) SRV - [2010-11-21 05:25:10 | 000,047,616 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\snmp.exe -- (SNMP) SRV - [2010-11-21 05:24:51 | 000,397,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (WAS) SRV - [2010-11-21 05:24:51 | 000,397,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (W3SVC) SRV - [2010-11-21 05:24:51 | 000,061,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\apphostsvc.dll -- (AppHostSvc) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2007-05-31 17:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2007-05-31 17:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2013-08-07 14:45:10 | 000,165,504 | ---- | M] (ITE ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IT9135BDA.sys -- (IT9135BDA) DRV:[b]64bit:[/b] - [2013-06-28 01:20:53 | 001,030,952 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx) DRV:[b]64bit:[/b] - [2013-06-28 01:20:53 | 000,378,944 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP) DRV:[b]64bit:[/b] - [2013-06-28 01:20:53 | 000,189,936 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm) DRV:[b]64bit:[/b] - [2013-05-22 13:42:37 | 000,030,816 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AcpiVpc.sys -- (ACPIVPC) DRV:[b]64bit:[/b] - [2013-05-22 13:42:36 | 000,039,008 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\LhdX64.sys -- (LHDmgr) DRV:[b]64bit:[/b] - [2013-05-09 10:59:07 | 000,072,016 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr) DRV:[b]64bit:[/b] - [2013-05-09 10:59:07 | 000,065,336 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt) DRV:[b]64bit:[/b] - [2013-05-09 10:59:07 | 000,064,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi) DRV:[b]64bit:[/b] - [2013-05-09 10:59:06 | 000,080,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt) DRV:[b]64bit:[/b] - [2013-05-09 10:59:06 | 000,033,400 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk) DRV:[b]64bit:[/b] - [2012-11-06 09:04:26 | 000,030,056 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt) DRV:[b]64bit:[/b] - [2012-08-07 13:40:48 | 000,311,632 | ---- | M] (ELAN Microelectronics Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD) DRV:[b]64bit:[/b] - [2012-05-30 13:10:50 | 000,016,168 | ---- | M] (Intel(R) Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB) DRV:[b]64bit:[/b] - [2012-05-21 09:25:32 | 000,789,824 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc) DRV:[b]64bit:[/b] - [2012-05-21 09:25:32 | 000,357,184 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub) DRV:[b]64bit:[/b] - [2012-05-21 09:25:32 | 000,019,264 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs) DRV:[b]64bit:[/b] - [2012-04-28 10:08:30 | 000,281,472 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_rcp.sys -- (BTATH_RCP) DRV:[b]64bit:[/b] - [2012-04-28 10:08:12 | 000,068,736 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_lwflt.sys -- (BTATH_LWFLT) DRV:[b]64bit:[/b] - [2012-04-28 10:07:36 | 000,168,064 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_hcrp.sys -- (BTATH_HCRP) DRV:[b]64bit:[/b] - [2012-04-28 10:07:18 | 000,036,480 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_flt.sys -- (AthBTPort) DRV:[b]64bit:[/b] - [2012-04-28 10:07:00 | 000,030,848 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_bus.sys -- (BTATH_BUS) DRV:[b]64bit:[/b] - [2012-04-28 10:06:42 | 000,111,232 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_avdt.sys -- (btath_avdt) DRV:[b]64bit:[/b] - [2012-04-28 10:06:18 | 000,341,120 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_a2dp.sys -- (BTATH_A2DP) DRV:[b]64bit:[/b] - [2012-04-01 22:27:32 | 000,163,368 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\bcbtums.sys -- (bcbtums) DRV:[b]64bit:[/b] - [2012-03-02 12:49:20 | 000,104,048 | ---- | M] (Qualcomm Atheros Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C) DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2012-02-17 19:28:56 | 014,692,896 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2012-01-31 07:17:44 | 001,601,152 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService) DRV:[b]64bit:[/b] - [2011-12-06 13:23:10 | 000,331,264 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) DRV:[b]64bit:[/b] - [2011-12-06 09:31:40 | 000,952,832 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vm331avs.sys -- (vm331avs) DRV:[b]64bit:[/b] - [2011-12-05 09:22:58 | 000,195,584 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP) DRV:[b]64bit:[/b] - [2011-12-05 09:22:58 | 000,195,584 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL) DRV:[b]64bit:[/b] - [2011-11-30 15:57:28 | 000,084,480 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\bpenum.sys -- (bpenum) DRV:[b]64bit:[/b] - [2011-11-29 19:40:32 | 000,568,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2011-11-15 12:24:20 | 000,313,960 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rtsuvstor.sys -- (RSUSBVSTOR) DRV:[b]64bit:[/b] - [2011-11-10 11:04:14 | 000,060,184 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) DRV:[b]64bit:[/b] - [2011-10-27 12:44:48 | 004,746,304 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX) DRV:[b]64bit:[/b] - [2011-05-11 18:23:10 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011-05-11 18:23:10 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2010-11-21 05:24:43 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2010-11-21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub) DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc) DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc) DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt) DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-04-29 16:28:30 | 000,030,208 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\KMWDFILTER.sys -- (KMWDFILTER) DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (All) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation) IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation) IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-1628744876-1458440481-959284136-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com IE - HKU\S-1-5-21-1628744876-1458440481-959284136-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm IE - HKU\S-1-5-21-1628744876-1458440481-959284136-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKU\S-1-5-21-1628744876-1458440481-959284136-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www1.delta-search.com/?babsrc=HP_ss&mntrId=F65A689423FF019E&affID=123884&tsp=4967 IE - HKU\S-1-5-21-1628744876-1458440481-959284136-1000\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation) IE - HKU\S-1-5-21-1628744876-1458440481-959284136-1000\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-1628744876-1458440481-959284136-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR IE - HKU\S-1-5-21-1628744876-1458440481-959284136-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=F65A689423FF019E&affID=123884&tsp=4967 IE - HKU\S-1-5-21-1628744876-1458440481-959284136-1000\..\SearchScopes\{7597E9C4-30E9-4BA5-A443-0FB8BF3C4B98}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=888596&p={searchTerms} IE - HKU\S-1-5-21-1628744876-1458440481-959284136-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&ilc=12&type=888596" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..extensions.enabledAddons: wrc%40avast.com:8.0.1489 FF - prefs.js..extensions.enabledAddons: youtube2mp3%40mondayx.de:1.2.3 FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.17 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:23.0.1 FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\facebook.com/fbDesktopPlugin: C:\Users\Piotrek\AppData\Local\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-05-22 16:01:29 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 23.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013-08-17 11:38:06 | 000,000,000 | ---D | M] [2013-05-22 15:36:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Extensions [2013-08-07 15:44:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\4zaq3ve4.default\extensions [2013-07-19 13:48:17 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\4zaq3ve4.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-06-08 13:55:11 | 000,011,510 | ---- | M] () (No name found) -- C:\Users\Piotrek\AppData\Roaming\mozilla\firefox\profiles\4zaq3ve4.default\extensions\youtube2mp3@mondayx.de.xpi [2013-08-07 15:41:36 | 000,006,507 | ---- | M] () -- C:\Users\Piotrek\AppData\Roaming\mozilla\firefox\profiles\4zaq3ve4.default\searchplugins\babylon.xml [2013-08-17 11:38:05 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\Extensions [2013-08-17 11:38:04 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions [2013-08-17 11:38:09 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2013-05-22 16:01:29 | 000,000,000 | ---D | M] (avast! Online Security) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF [2006-10-26 20:12:16 | 000,016,192 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL [2013-07-23 22:03:25 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2013-07-23 22:03:26 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2013-07-23 22:03:26 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2013-07-23 22:03:26 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2013-07-23 22:03:27 | 000,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2013-05-23 00:43:05 | 000,000,888 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo.xml O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) O2:[b]64bit:[/b] - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (Pomocnik logowania za pomocą konta Microsoft) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files (x86)\ALLPLA~1\Iplex\IPLEXT~1.DLL (ALLCinema Ltd.) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O4:[b]64bit:[/b] - HKLM..\Run: [Energy Management] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited) O4:[b]64bit:[/b] - HKLM..\Run: [EnergyUtility] C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe (Lenovo(beijing) Limited) O4:[b]64bit:[/b] - HKLM..\Run: [ETDCtrl] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.) O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [IntelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" File not found O4:[b]64bit:[/b] - HKLM..\Run: [IntelWirelessWiMAX] C:\Program Files\Intel\WiMAX\Bin\WiMAXCU.exe (Intel® Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Windows Mobile Device Center] C:\Windows\WindowsMobile\wmdc.exe (Microsoft Corporation) O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [Dolby Advanced Audio v2] C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe (Dolby Laboratories Inc.) O4 - HKLM..\Run: [LockKey] C:\Program Files (x86)\LockKey\LockKey.exe ( ) O4 - HKLM..\Run: [USB3MON] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-1628744876-1458440481-959284136-1000..\Run: [DisplayFusion] C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe (Binary Fortress Software) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceActiveDesktopOn = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17 O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\Program Files (x86)\MICROS~2\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\Program Files (x86)\MICROS~2\Office12\EXCEL.EXE/3000 File not found O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\MICROS~2\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\MICROS~2\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files (x86)\MICROS~2\Office12\REFIEBAR.DLL (Microsoft Corporation) O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000001 [] - C:\Windows\SysNative\nlaapi.dll (Microsoft Corporation) O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000002 [] - C:\Windows\SysNative\NapiNSP.dll (Microsoft Corporation) O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000003 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation) O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000004 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation) O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Windows\SysNative\winrnr.dll (Microsoft Corporation) O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Windows\SysNative\wshbth.dll (Microsoft Corporation) O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000009 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000010 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000011 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\SysWOW64\nlaapi.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\SysWOW64\NapiNSP.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\SysWOW64\winrnr.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Windows\SysWOW64\wshbth.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{234DDC5F-2D2E-4FAB-8360-911133C498F7}: DhcpNameServer = 157.158.3.1 157.158.0.4 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B8F91753-B5B5-4032-8833-71DBDB363D64}: DhcpNameServer = 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysNative\inetcomm.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation) O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysWOW64\inetcomm.dll (Microsoft Corporation) O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation) O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysNative\mscoree.dll (Microsoft Corporation) O18:[b]64bit:[/b] - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation) O20 - AppInit_DLLs: (c:\windows\syswow64\nvinit.dll) - c:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (c:\windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) O29:[b]64bit:[/b] - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation) O30:[b]64bit:[/b] - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation) O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation) O30:[b]64bit:[/b] - LSA: Security Packages - (kerberos) - C:\Windows\SysNative\kerberos.dll (Microsoft Corporation) O30:[b]64bit:[/b] - LSA: Security Packages - (msv1_0) - C:\Windows\SysNative\msv1_0.dll (Microsoft Corporation) O30:[b]64bit:[/b] - LSA: Security Packages - (schannel) - C:\Windows\SysNative\schannel.dll (Microsoft Corporation) O30:[b]64bit:[/b] - LSA: Security Packages - (wdigest) - C:\Windows\SysNative\wdigest.dll (Microsoft Corporation) O30:[b]64bit:[/b] - LSA: Security Packages - (tspkg) - C:\Windows\SysNative\tspkg.dll (Microsoft Corporation) O30:[b]64bit:[/b] - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation) O30:[b]64bit:[/b] - LSA: Security Packages - (livessp) - C:\Windows\SysNative\livessp.dll (Microsoft Corp.) O30 - LSA: Security Packages - (kerberos) - C:\Windows\SysWow64\kerberos.dll (Microsoft Corporation) O30 - LSA: Security Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (schannel) - C:\Windows\SysWow64\schannel.dll (Microsoft Corporation) O30 - LSA: Security Packages - (wdigest) - C:\Windows\SysWow64\wdigest.dll (Microsoft Corporation) O30 - LSA: Security Packages - (tspkg) - C:\Windows\SysWow64\tspkg.dll (Microsoft Corporation) O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation) O30 - LSA: Security Packages - (livessp) - C:\Windows\SysWow64\livessp.dll (Microsoft Corp.) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2013-08-13 15:41:03 | 000,064,810 | ---- | M] () - C:\AutoMapaSetupLog.txt -- [ NTFS ] O33 - MountPoints2\{44b47b35-fc3c-11e2-aa4b-689423ff019e}\Shell - "" = AutoRun O33 - MountPoints2\{44b47b35-fc3c-11e2-aa4b-689423ff019e}\Shell\AutoRun\command - "" = F:\LGAutoRun.exe O33 - MountPoints2\{4554b2f0-c304-11e2-b07e-689423ff019e}\Shell - "" = AutoRun O33 - MountPoints2\{4554b2f0-c304-11e2-b07e-689423ff019e}\Shell\AutoRun\command - "" = F:\setup.exe /autorun O33 - MountPoints2\{6496de9b-cb4f-11e2-a3d5-689423ff019e}\Shell - "" = AutoRun O33 - MountPoints2\{6496de9b-cb4f-11e2-a3d5-689423ff019e}\Shell\AutoRun\command - "" = F:\SETUP.EXE O33 - MountPoints2\{6496de9b-cb4f-11e2-a3d5-689423ff019e}\Shell\configure\command - "" = F:\SETUP.EXE O33 - MountPoints2\{6496de9b-cb4f-11e2-a3d5-689423ff019e}\Shell\install\command - "" = F:\SETUP.EXE O33 - MountPoints2\F\Shell - "" = AutoRun O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\setup.exe /autorun O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2013-08-19 16:36:44 | 003,913,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2013-08-19 16:36:43 | 005,550,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2013-08-19 16:36:43 | 003,968,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2013-08-19 16:36:42 | 001,732,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll [2013-08-19 16:36:42 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll [2013-08-19 16:36:42 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll [2013-08-19 16:36:41 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe [2013-08-19 16:36:41 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe [2013-08-19 16:36:41 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll [2013-08-19 16:36:41 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe [2013-08-17 11:38:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2013-08-17 09:22:50 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2013-08-17 09:22:50 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2013-08-17 09:22:49 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll [2013-08-17 09:22:49 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2013-08-17 09:22:49 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll [2013-08-17 09:22:49 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll [2013-08-17 09:22:48 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll [2013-08-17 09:22:48 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll [2013-08-17 09:22:48 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe [2013-08-17 09:22:48 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe [2013-08-17 09:22:48 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2013-08-17 09:22:46 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2013-08-17 09:22:46 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2013-08-17 09:22:45 | 003,958,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2013-08-17 09:22:45 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2013-08-16 15:47:42 | 001,472,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll [2013-08-16 15:47:41 | 000,224,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll [2013-08-16 15:47:41 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll [2013-08-16 15:47:31 | 001,888,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL [2013-08-16 15:47:31 | 001,620,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL [2013-08-16 15:47:30 | 001,217,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll [2013-08-16 15:47:28 | 001,111,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorets.dll [2013-08-13 14:54:47 | 000,000,000 | ---D | C] -- C:\Windows\WindowsMobile [2013-08-07 15:45:42 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\Local Settings [2013-08-07 15:43:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Optimizer Pro [2013-08-07 15:41:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Babylon [2013-08-07 15:40:22 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Local\Lollipop [2013-08-07 14:45:10 | 000,165,504 | ---- | C] (ITE ) -- C:\Windows\SysNative\drivers\IT9135BDA.sys [2013-08-03 14:58:17 | 000,000,000 | ---D | C] -- C:\Windows\Minidump [2013-08-02 15:37:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ProgDVB [2013-08-02 15:37:20 | 000,000,000 | ---D | C] -- C:\ProgramData\ProgDVB [2013-08-02 15:17:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlazeVideo HDTV Player 6.6 Pro [2013-08-02 15:17:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BlazeVideo [2013-08-02 14:15:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Plugins [2013-08-02 13:55:24 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\Documents\BlazeVideo [2013-08-02 13:54:53 | 000,000,000 | ---D | C] -- C:\ProgramData\BlazeVideo [2013-08-02 13:54:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlazeHDTV 6.0 [2013-08-02 12:25:04 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\Web Cake [2013-08-02 12:25:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Web Cake [2013-08-02 12:25:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Screentime [2013-07-26 15:06:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony [2013-07-26 15:05:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sony [2013-07-24 23:04:53 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\Sony Creative Software Inc [2013-07-24 11:19:09 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\Apple Computer [2013-07-24 01:20:53 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\dwhelper [2013-07-23 22:03:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime [2013-07-23 22:03:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer [2013-07-23 22:02:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple [2013-07-23 22:02:10 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Local\Apple [2013-07-23 22:02:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2013-07-23 21:51:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid [2013-07-23 19:57:27 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\Publish Providers [2013-07-23 19:51:46 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Local\Sony [2013-07-23 19:50:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony [2013-07-23 19:49:19 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\Sony [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2013-08-21 15:35:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013-08-21 15:26:52 | 001,744,428 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2013-08-21 15:26:52 | 000,770,930 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2013-08-21 15:26:52 | 000,680,906 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2013-08-21 15:26:52 | 000,165,578 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2013-08-21 15:26:52 | 000,129,038 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2013-08-21 15:25:31 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013-08-21 13:53:01 | 000,000,936 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1628744876-1458440481-959284136-1000UA.job [2013-08-20 20:04:48 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1628744876-1458440481-959284136-1000Core.job [2013-08-19 19:03:18 | 000,021,472 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013-08-19 19:03:18 | 000,021,472 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013-08-19 18:54:52 | 000,494,392 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2013-08-19 18:54:33 | 4218,175,486 | -HS- | M] () -- C:\hiberfil.sys [2013-08-13 14:55:37 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdRapi2_01_00_00.Wdf [2013-08-07 14:45:10 | 000,165,504 | ---- | M] (ITE ) -- C:\Windows\SysNative\drivers\IT9135BDA.sys [2013-08-07 14:45:10 | 000,000,147 | ---- | M] () -- C:\Windows\SysNative\AF15IRTBL.bin [2013-08-02 15:17:49 | 000,000,014 | ---- | M] () -- C:\Windows\SysWow64\SysInfo_6_6_p.dll [2013-08-02 14:14:07 | 000,000,014 | ---- | M] () -- C:\Windows\SysWow64\SysInfo_6.dll [2013-08-02 14:12:50 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt [2013-07-26 21:26:56 | 000,008,704 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2013-07-26 07:13:58 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2013-07-26 07:12:27 | 000,603,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2013-07-26 07:12:08 | 003,958,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2013-07-26 07:12:08 | 000,855,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2013-07-26 07:12:04 | 000,526,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2013-07-26 07:12:04 | 000,136,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll [2013-07-26 07:12:03 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll [2013-07-26 07:12:03 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll [2013-07-26 05:12:04 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2013-07-26 05:12:00 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2013-07-26 05:12:00 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll [2013-07-26 05:12:00 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2013-07-26 05:11:59 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll [2013-07-26 04:39:38 | 000,089,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe [2013-07-26 03:59:38 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe [2013-07-25 11:25:54 | 001,888,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL [2013-07-25 10:57:27 | 001,620,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL [2013-07-24 21:56:24 | 000,146,976 | ---- | M] () -- C:\Users\Piotrek\Documents\bonus.png [2013-07-24 01:16:08 | 000,048,502 | ---- | M] () -- C:\Users\Piotrek\Documents\912467_3212751934713_1251976841_n.jpg [2013-07-24 00:17:20 | 000,048,065 | ---- | M] () -- C:\Users\Piotrek\Documents\1078261_3212630731683_956446780_n.jpg [color=#E56717]========== Files Created - No Company Name ==========[/color] [2013-08-13 14:55:37 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdRapi2_01_00_00.Wdf [2013-08-13 14:54:55 | 000,002,419 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Mobile Device Center.lnk [2013-08-02 15:17:49 | 000,000,014 | ---- | C] () -- C:\Windows\SysWow64\SysInfo_6_6_p.dll [2013-08-02 14:14:07 | 000,000,014 | ---- | C] () -- C:\Windows\SysWow64\SysInfo_6.dll [2013-08-02 14:12:02 | 000,000,147 | ---- | C] () -- C:\Windows\SysNative\AF15IRTBL.bin [2013-07-24 21:44:53 | 000,146,976 | ---- | C] () -- C:\Users\Piotrek\Documents\bonus.png [2013-07-24 01:16:08 | 000,048,502 | ---- | C] () -- C:\Users\Piotrek\Documents\912467_3212751934713_1251976841_n.jpg [2013-07-24 00:12:51 | 000,048,065 | ---- | C] () -- C:\Users\Piotrek\Documents\1078261_3212630731683_956446780_n.jpg [2013-07-23 22:02:07 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk [2013-07-23 21:51:28 | 000,696,832 | ---- | C] () -- C:\Windows\SysNative\xvidcore.dll [2013-07-23 21:51:28 | 000,255,488 | ---- | C] () -- C:\Windows\SysNative\xvidvfw.dll [2013-07-23 21:51:28 | 000,173,568 | ---- | C] () -- C:\Windows\SysNative\xvid.ax [2013-07-23 21:51:28 | 000,153,088 | ---- | C] () -- C:\Windows\SysWow64\xvid.ax [2013-07-23 21:51:27 | 000,645,632 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2013-07-23 21:51:27 | 000,240,640 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2013-07-10 21:31:07 | 000,000,193 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc [2013-06-30 23:30:14 | 000,008,704 | ---- | C] () -- C:\Users\Piotrek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2013-06-08 13:04:35 | 000,007,602 | ---- | C] () -- C:\Users\Piotrek\AppData\Local\Resmon.ResmonCfg [2013-05-23 17:52:22 | 000,000,153 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc [2013-05-23 00:35:38 | 000,178,688 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2013-05-23 00:22:59 | 000,258,048 | ---- | C] () -- C:\Windows\SysWow64\libFLAC.dll [2013-05-22 17:10:05 | 001,720,566 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2013-05-22 15:39:56 | 000,354,304 | ---- | C] () -- C:\Windows\SysWow64\pythoncom27.dll [2013-05-22 15:39:56 | 000,110,080 | ---- | C] () -- C:\Windows\SysWow64\pywintypes27.dll [2013-05-22 15:39:56 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\pythoncomloader27.dll [2013-05-22 13:33:52 | 000,001,822 | ---- | C] () -- C:\Windows\vm331Rmv.ini [2013-05-22 13:33:52 | 000,001,822 | ---- | C] () -- C:\Windows\SysWow64\vm331Rmv.ini [2013-05-22 13:17:33 | 013,020,160 | ---- | C] () -- C:\Windows\SysWow64\ig7icd32.dll [2013-05-22 13:17:33 | 000,735,796 | ---- | C] () -- C:\Windows\SysWow64\igkrng700.bin [2013-05-22 13:17:33 | 000,561,508 | ---- | C] () -- C:\Windows\SysWow64\igfcg700m.bin [2013-05-22 13:17:33 | 000,058,880 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll [2012-02-02 22:08:26 | 000,001,536 | ---- | C] () -- C:\Windows\SysWow64\IusEventLog.dll [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2013-02-27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2013-02-27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2013-05-31 18:41:16 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\2K Sports [2013-07-19 17:38:03 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Autodesk [2013-05-23 00:43:10 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\DAEMON Tools Ultra [2013-08-21 15:49:47 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\DisplayFusion [2013-08-03 00:05:36 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\IrfanView [2013-07-23 19:57:27 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Publish Providers [2013-08-10 19:42:33 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Sony [2013-07-24 23:04:53 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Sony Creative Software Inc [2013-08-03 00:05:34 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Web Cake [color=#E56717]========== Purity Check ==========[/color] < End of report >