OTL logfile created on: 2013-08-27 02:13:08 - Run 2
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Michał 2\Desktop
64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16635)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 0,65 Gb Available Physical Memory | 32,57% Memory free
4,00 Gb Paging File | 2,35 Gb Available in Paging File | 58,85% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 40,09 Gb Total Space | 2,58 Gb Free Space | 6,43% Space Free | Partition Type: NTFS
Drive D: | 48,83 Gb Total Space | 1,09 Gb Free Space | 2,23% Space Free | Partition Type: NTFS
Drive E: | 39,07 Gb Total Space | 6,40 Gb Free Space | 16,39% Space Free | Partition Type: NTFS
Drive F: | 337,76 Gb Total Space | 43,76 Gb Free Space | 12,96% Space Free | Partition Type: NTFS
 
Computer Name: MICHAŁ-KOMPUTER | User Name: Michał 2 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2013-08-23 11:31:28 | 000,424,104 | ---- | M] (Taiwan Shui Mu Chih Ching Technology Limited.) -- C:\Program Files (x86)\WinZipper\winzipersvc.exe
PRC - [2013-08-22 06:03:49 | 000,303,680 | ---- | M] (Wsys Co., Ltd.) -- C:\ProgramData\eSafe\eGdpSvc.exe
PRC - [2013-08-20 22:37:11 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Michał 2\Desktop\OTL.exe
PRC - [2013-08-15 01:06:32 | 000,051,992 | ---- | M] (cake bake) -- C:\Program Files (x86)\Tepfel\WebCakeDesktop.Updater.exe
PRC - [2013-08-13 16:41:17 | 002,838,480 | ---- | M] () -- C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
PRC - [2013-06-05 14:56:22 | 001,626,816 | ---- | M] (Razer USA Ltd) -- F:\Program Files (x86)\Razer\Razer Game Booster\gbtray.exe
PRC - [2013-05-12 23:30:56 | 001,044,560 | ---- | M] (BitTorrent Inc.) -- C:\Users\Michał 2\AppData\Roaming\uTorrent\uTorrent.exe
PRC - [2013-04-08 18:44:12 | 001,320,496 | ---- | M] (pdfforge GmbH) -- C:\Program Files (x86)\PDF Architect\HelperService.exe
PRC - [2013-04-08 18:43:36 | 000,799,280 | ---- | M] (pdfforge GmbH) -- C:\Program Files (x86)\PDF Architect\ConversionService.exe
PRC - [2013-02-28 18:45:16 | 000,161,384 | R--- | M] (Skype Technologies) -- F:\Program Files (x86)\Skype\Updater\Updater.exe
PRC - [2013-01-18 08:14:20 | 000,383,264 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2012-09-23 20:43:34 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012-07-04 12:16:00 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2010-11-20 14:17:36 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\schtasks.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2013-08-22 12:02:09 | 000,187,888 | ---- | M] () -- C:\Users\Michał 2\AppData\Roaming\BabSolution\Shared\enhancedNT.dll
MOD - [2013-08-13 16:41:17 | 002,838,480 | ---- | M] () -- C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
MOD - [2013-08-13 16:40:06 | 002,699,216 | ---- | M] () -- c:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.dll
MOD - [2013-06-04 16:07:40 | 000,535,480 | ---- | M] () -- F:\Program Files (x86)\Razer\Razer Game Booster\K_FPS.dll
MOD - [2013-06-04 16:07:40 | 000,133,280 | ---- | M] () -- F:\Program Files (x86)\Razer\Razer Game Booster\Mpeg2Video.dll
MOD - [2013-06-04 16:07:26 | 000,272,360 | ---- | M] () -- F:\Program Files (x86)\Razer\Razer Game Booster\D3DX8Wrapper.dll
MOD - [2013-01-30 17:48:04 | 007,477,262 | ---- | M] () -- F:\Program Files (x86)\Razer\Razer Game Booster\avcodec-54.dll
MOD - [2013-01-30 17:48:04 | 001,191,950 | ---- | M] () -- F:\Program Files (x86)\Razer\Razer Game Booster\avformat-54.dll
MOD - [2013-01-30 17:48:04 | 000,333,326 | ---- | M] () -- F:\Program Files (x86)\Razer\Razer Game Booster\swscale-2.dll
MOD - [2013-01-30 17:48:04 | 000,156,174 | ---- | M] () -- F:\Program Files (x86)\Razer\Razer Game Booster\keutil-51.dll
MOD - [2013-01-24 13:25:02 | 001,044,480 | ---- | M] () -- c:\progra~2\websearch\sprotector.dll
MOD - [2013-01-24 13:16:54 | 001,050,112 | ---- | M] () -- c:\progra~2\saveshare\sprotector.dll
MOD - [2012-08-01 15:44:10 | 000,519,600 | ---- | M] () -- F:\Program Files (x86)\Razer\Razer Game Booster\sqlite3.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2013-05-27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2011-12-13 17:26:24 | 000,551,896 | ---- | M] (Protection Technology) [Disabled | Stopped] -- C:\Windows\SysNative\appdrvrem01.exe -- (appdrvrem01)
SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2013-08-23 11:31:28 | 000,424,104 | ---- | M] (Taiwan Shui Mu Chih Ching Technology Limited.) [Auto | Running] -- C:\Program Files (x86)\WinZipper\winzipersvc.exe -- (winzipersvc)
SRV - [2013-08-22 06:03:49 | 000,303,680 | ---- | M] (Wsys Co., Ltd.) [Auto | Running] -- C:\ProgramData\eSafe\eGdpSvc.exe -- (WsysSvc)
SRV - [2013-08-15 01:06:32 | 000,051,992 | ---- | M] (cake bake) [Auto | Running] -- C:\Program Files (x86)\Tepfel\WebCakeDesktop.Updater.exe -- (WebCakeUpdater)
SRV - [2013-08-13 16:41:17 | 002,838,480 | ---- | M] () [Auto | Running] -- C:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe -- (BrowserDefendert)
SRV - [2013-07-27 00:46:24 | 000,563,624 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013-06-28 14:02:04 | 002,470,736 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2013-06-27 06:48:55 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013-04-08 18:44:12 | 001,320,496 | ---- | M] (pdfforge GmbH) [Auto | Running] -- C:\Program Files (x86)\PDF Architect\HelperService.exe -- (PDF Architect Helper Service)
SRV - [2013-04-08 18:43:36 | 000,799,280 | ---- | M] (pdfforge GmbH) [Auto | Running] -- C:\Program Files (x86)\PDF Architect\ConversionService.exe -- (PDF Architect Service)
SRV - [2013-03-23 13:51:47 | 000,115,608 | ---- | M] (Mozilla Foundation) [Disabled | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013-02-28 18:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Running] -- F:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013-02-26 00:32:22 | 001,260,320 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2013-01-18 08:14:20 | 000,383,264 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2012-09-23 20:43:34 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012-07-04 12:16:00 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2011-12-21 17:27:14 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010-03-18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2005-03-09 20:50:18 | 000,018,944 | ---- | M] (http://libusb-win32.sourceforge.net) [Auto | Stopped] -- C:\Windows\SysWOW64\libusbd-nt.exe -- (libusbd)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2013-06-07 15:45:40 | 000,564,824 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:[b]64bit:[/b] - [2013-01-17 21:15:12 | 000,066,800 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGSHidFilt.Sys -- (LGSHidFilt)
DRV:[b]64bit:[/b] - [2012-03-25 10:26:34 | 000,115,272 | ---- | M] (MotioninJoy) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MijXfilt.sys -- (MotioninJoyXFilter)
DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2011-12-13 17:26:27 | 003,852,976 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\appdrv01.sys -- (appdrv01)
DRV:[b]64bit:[/b] - [2011-12-07 19:42:28 | 000,074,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21)
DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2010-11-20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2010-11-20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2010-02-20 06:40:30 | 000,039,992 | ---- | M] (Deon van der Westhuysen) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\PPortJoy64.sys -- (PPortJoystick)
DRV:[b]64bit:[/b] - [2010-02-20 06:40:30 | 000,020,024 | ---- | M] (Deon van der Westhuysen) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\PPJoyBus64.sys -- (PPJoyBus)
DRV:[b]64bit:[/b] - [2010-01-05 04:23:20 | 001,847,296 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athurx.sys -- (athur)
DRV:[b]64bit:[/b] - [2009-11-24 02:38:00 | 000,016,008 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGVirHid.sys -- (LGVirHid)
DRV:[b]64bit:[/b] - [2009-11-24 02:37:50 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum)
DRV:[b]64bit:[/b] - [2009-10-20 18:20:36 | 000,114,608 | ---- | M] (Philips Applied Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\phaudlwr.sys -- (phaudlwr)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-06-10 22:35:42 | 000,187,392 | ---- | M] (Realtek Corporation                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009-04-29 16:28:30 | 000,030,208 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\KMWDFILTER.sys -- (KMWDFILTER)
DRV:[b]64bit:[/b] - [2009-03-18 16:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:[b]64bit:[/b] - [2008-06-11 17:37:04 | 003,251,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\spc1030.sys -- (SPC1030)
DRV - [2012-08-01 15:44:04 | 000,014,544 | ---- | M] (OpenLibSys.org) [File_System | On_Demand | Stopped] -- F:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys -- (WinRing0_1_2_0)
DRV - [2012-07-13 16:02:52 | 000,019,760 | ---- | M] (Paragon Software GmbH) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Paragon_Software\Partition_Manager_12_Professional_Demo\program\BioNTDrv.SYS -- (BioNTDrv)
DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2005-03-09 20:50:16 | 000,033,792 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\libusb0.sys -- (libusb0)
DRV - [2003-09-06 15:37:22 | 000,062,656 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\SysWOW64\drivers\prohlp02.sys -- (prohlp02)
DRV - [2003-09-06 14:27:06 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\SysWOW64\drivers\sfhlp01.sys -- (sfhlp01)
DRV - [2003-09-06 14:25:52 | 000,051,744 | ---- | M] (Protection Technology) [Kernel | System | Stopped] -- C:\Windows\SysWOW64\drivers\prodrv06.sys -- (prodrv06)
DRV - [2003-09-06 14:22:08 | 000,006,944 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\SysWOW64\drivers\prosync1.sys -- (prosync1)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=SAMSUNGXHD502HI_S1VZJ90SA71429&ts=1377082787
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=SAMSUNGXHD502HI_S1VZJ90SA71429&ts=1377082787
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.qvo6.com/web/?utm_source=b&utm_medium=cor&from=cor&uid=SAMSUNGXHD502HI_S1VZJ90SA71429&ts=1377082787
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=SAMSUNGXHD502HI_S1VZJ90SA71429&ts=1377082787
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=SAMSUNGXHD502HI_S1VZJ90SA71429&ts=1377082787
IE - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.qvo6.com/web/?utm_source=b&utm_medium=cor&from=cor&uid=SAMSUNGXHD502HI_S1VZJ90SA71429&ts=1377082787
IE - HKLM\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.simplesearches.info/?l=1&q={searchTerms}&pid=512&r=2013/08/21&hid=1590935762&lg=EN&cc=PL&unqvl=31
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1751451117-4207112011-2180288902-1003\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www1.delta-search.com/?babsrc=HP_ss&mntrId=44BC000074040A00&affID=124001&tsp=4977
IE - HKU\S-1-5-21-1751451117-4207112011-2180288902-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=SAMSUNGXHD502HI_S1VZJ90SA71429&ts=1377082787
IE - HKU\S-1-5-21-1751451117-4207112011-2180288902-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=SAMSUNGXHD502HI_S1VZJ90SA71429&ts=1377082787
IE - HKU\S-1-5-21-1751451117-4207112011-2180288902-1003\..\URLSearchHook: {539F76FD-084E-4858-86D5-62F02F54AE86} - C:\Program Files (x86)\Minibar\Minibar.dll (KangoExtensions)
IE - HKU\S-1-5-21-1751451117-4207112011-2180288902-1003\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-1751451117-4207112011-2180288902-1003\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKU\S-1-5-21-1751451117-4207112011-2180288902-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
IE - HKU\S-1-5-21-1751451117-4207112011-2180288902-1003\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=44BC000074040A00&affID=124001&tsp=4977
IE - HKU\S-1-5-21-1751451117-4207112011-2180288902-1003\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.qvo6.com/web/?utm_source=b&utm_medium=cor&from=cor&uid=SAMSUNGXHD502HI_S1VZJ90SA71429&ts=1377082787
IE - HKU\S-1-5-21-1751451117-4207112011-2180288902-1003\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.simplesearches.info/?l=1&q={searchTerms}&pid=512&r=2013/08/21&hid=1590935762&lg=EN&cc=PL&unqvl=31
IE - HKU\S-1-5-21-1751451117-4207112011-2180288902-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:18.0.2
FF - prefs.js..browser.startup.homepage: "http://websearch.simplesearches.info/?pid=512&r=2013/08/21&hid=1590935762&lg=EN&cc=PL&unqvl=31"
FF - prefs.js..browser.search.order.1: "WebSearch"
FF - prefs.js..browser.search.defaultenginename: "WebSearch"
FF - prefs.js..browser.search.selectedEngine: "WebSearch"
FF - prefs.js..browser.search.defaulturl: "http://websearch.simplesearches.info/?pid=512&r=2013/08/21&hid=1590935762&lg=EN&cc=PL&unqvl=31&l=1&q="
FF - prefs.js..browser.search.order.1,S: S", "WebSearch"
FF - prefs.js..browser.search.defaultenginename,S: S", "WebSearch"
FF - prefs.js..browser.search.selectedEngine,S: S", "WebSearch"
FF - prefs.js..keyword.URL: "http://websearch.simplesearches.info/?pid=512&r=2013/08/21&hid=1590935762&lg=EN&cc=PL&unqvl=31&l=1&q="
 
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\Microsoft Office\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@raidcall.en/RCplugin: C:\Users\Michał 2\AppData\Roaming\raidcall\plugins\nprcplugin.dll (Raidcall)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
 
[2012-10-27 22:17:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Michał 2\AppData\Roaming\mozilla\Extensions
[2013-08-18 00:46:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Michał 2\AppData\Roaming\mozilla\Firefox\Profiles\wbkzynph.default-1371048184001\extensions
[2013-08-18 00:39:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Michał 2\AppData\Roaming\mozilla\Firefox\Profiles\wbkzynph.default-1371048184001\extensions\ffxtlbr@babylon.com
[2013-08-18 00:39:44 | 000,000,000 | ---D | M] (Delta Toolbar) -- C:\Users\Michał 2\AppData\Roaming\mozilla\Firefox\Profiles\wbkzynph.default-1371048184001\extensions\ffxtlbr@delta.com
[2013-08-18 00:46:28 | 000,000,000 | ---D | M] (WebCake) -- C:\Users\Michał 2\AppData\Roaming\mozilla\Firefox\Profiles\wbkzynph.default-1371048184001\extensions\plugin@getwebcake.com
[2013-08-21 12:54:27 | 000,000,646 | ---- | M] () -- C:\Users\Michał 2\AppData\Roaming\mozilla\firefox\profiles\wbkzynph.default-1371048184001\searchplugins\WebSearch.xml
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - homepage: http://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=SAMSUNGXHD502HI_S1VZJ90SA71429&ts=1377082787
 
O1 HOSTS File: ([2012-09-02 13:19:37 | 000,000,925 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 genuine.microsoft.com
O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com
O1 - Hosts: 127.0.0.1 sls.microsoft.com
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (WebCake) - {2A5A2A90-3B30-4E6E-A955-2F232C6EF517} - C:\Program Files (x86)\Tepfel\WebCakeIEClient.dll File not found
O2 - BHO: (SearchNewTab) - {5872CF53-C86C-0585-F112-A934CF022590} - C:\ProgramData\SearchNewTab\7ikC3z.dll ()
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (MinibarBHO) - {AA74D58F-ACD0-450D-A85E-6C04B171C044} - C:\Program Files (x86)\Minibar\Minibar.dll (KangoExtensions)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (delta Helper Object) - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.24.5\bh\delta.dll (Delta-search.com)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Delta Toolbar) - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.24.5\deltaTlbr.dll (Delta-search.com)
O4:[b]64bit:[/b] - HKLM..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.)
O4 - HKU\S-1-5-21-1751451117-4207112011-2180288902-1003..\Run: [NTRedirect] C:\Users\Michał 2\AppData\Roaming\BabSolution\Shared\enhancedNT.dll ()
O4 - HKU\S-1-5-21-1751451117-4207112011-2180288902-1003..\Run: [uTorrent] C:\Users\Michał 2\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O9 - Extra Button: Visit AppsHat.com - {AAA38851-3CFF-475F-B5E0-720D3645E4A5} - C:\Program Files (x86)\Minibar\Minibar.dll (KangoExtensions)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab (Reg Error: Key error.)
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 10.5.1)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 10.5.1)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 190.160.20.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5D8C3E02-37BB-49E5-98CC-57BEA79B2C91}: DhcpNameServer = 190.160.20.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{862E9C9D-8C5D-4789-B054-A0895B2706EE}: DhcpNameServer = 192.168.1.1 194.204.152.34
O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll (Skype Technologies)
O20 - AppInit_DLLs: (c:\progra~3\browserdefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\browserdefender.dll) - c:\ProgramData\BrowserDefender\2.6.1562.220\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.dll ()
O20 - AppInit_DLLs: (c:\progra~2\saveshare\sprotector.dll) - c:\progra~2\saveshare\sprotector.dll ()
O20 - AppInit_DLLs: (c:\progra~2\websearch\sprotector.dll) - c:\progra~2\websearch\sprotector.dll ()
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013-08-27 02:11:24 | 000,006,838 | ---- | M] () - C:\autoupdate.log -- [ NTFS ]
O33 - MountPoints2\{c29781a1-acef-11e2-946d-000074040a00}\Shell - "" = AutoRun
O33 - MountPoints2\{c29781a1-acef-11e2-946d-000074040a00}\Shell\AutoRun\command - "" = G:\_AUTORUN\AUTORUN.EXE
O33 - MountPoints2\{d79dbbc0-cf78-11e2-8a2c-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{d79dbbc0-cf78-11e2-8a2c-806e6f6e6963}\Shell\AutoRun\command - "" = G:\setup.exe
O33 - MountPoints2\{fb2ca3e5-9378-11e1-b863-002522063b9c}\Shell - "" = AutoRun
O33 - MountPoints2\{fb2ca3e5-9378-11e1-b863-002522063b9c}\Shell\AutoRun\command - "" = H:\Setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2013-08-26 21:52:11 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Roaming\Wayforward Technologies
[2013-08-26 21:52:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Steam
[2013-08-26 21:50:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DuckTales Remastered
[2013-08-26 18:18:35 | 019,273,460 | ---- | C] (Opera Software ASA) -- C:\Users\Michał 2\Desktop\Opera_Next_16.0.1196.55_Setup.exe
[2013-08-23 23:57:08 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Extensions
[2013-08-23 23:56:44 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\searchplugins
[2013-08-23 11:31:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZipper
[2013-08-23 11:31:28 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Roaming\WinZipper
[2013-08-23 11:31:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinZipper
[2013-08-22 03:27:31 | 000,519,012 | ---- | C] (SkaWit - Witold Skałka                                      ) -- C:\Users\Michał 2\Desktop\aws-setup.exe
[2013-08-21 14:02:33 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\Desktop\WinSetup_1_0_beta8
[2013-08-21 13:02:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraISO
[2013-08-21 13:01:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\EZB Systems
[2013-08-21 13:01:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\UltraISO
[2013-08-21 13:01:58 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\Documents\My ISO Files
[2013-08-21 13:00:14 | 000,000,000 | ---D | C] -- C:\ProgramData\eSafe
[2013-08-21 12:54:42 | 000,000,000 | ---D | C] -- C:\ProgramData\SearchNewTab
[2013-08-21 12:54:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WebSearch
[2013-08-21 12:53:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Optimizer Pro
[2013-08-21 12:53:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SaveShare
[2013-08-21 12:53:21 | 000,000,000 | ---D | C] -- C:\ProgramData\saVeNsHaare
[2013-08-21 12:52:46 | 000,000,000 | ---D | C] -- C:\ProgramData\InstallMate
[2013-08-21 12:52:10 | 000,320,952 | ---- | C] (StarApp) -- C:\Users\Michał 2\Desktop\usbm10.rar.exe
[2013-08-21 01:53:10 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\.gstreamer-0.10
[2013-08-21 01:52:51 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Local\ChomikBox
[2013-08-21 01:51:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Chomikuj.pl
[2013-08-21 01:51:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ChomikBox
[2013-08-21 01:44:02 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\Desktop\cast[bractwocienia.com]
[2013-08-20 22:37:11 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Michał 2\Desktop\OTL.exe
[2013-08-19 12:40:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
[2013-08-18 16:21:27 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\Documents\PDF Architect Files
[2013-08-18 16:21:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect
[2013-08-18 16:21:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PDF Architect
[2013-08-18 16:20:33 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Roaming\pdfforge
[2013-08-18 16:20:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
[2013-08-18 16:20:30 | 000,137,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSMAPI32.OCX
[2013-08-18 16:20:30 | 000,110,264 | ---- | C] (pdfforge GmbH) -- C:\Windows\SysNative\pdfcmon.dll
[2013-08-18 16:20:25 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSMPIDE.DLL
[2013-08-18 16:20:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PDFCreator
[2013-08-18 10:47:41 | 000,000,000 | -HSD | C] -- C:\found.000
[2013-08-18 02:37:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PDF Architect
[2013-08-18 02:29:33 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Roaming\PDF Architect
[2013-08-18 01:10:04 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Roaming\PDFEditorSDK
[2013-08-18 01:08:48 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Local\JAWS PDF Editor SDK
[2013-08-18 01:08:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Jaws PDF Editor 4
[2013-08-18 01:08:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Global Graphics
[2013-08-18 00:47:11 | 000,000,000 | ---D | C] -- C:\Output
[2013-08-18 00:46:27 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Roaming\Tepfel
[2013-08-18 00:46:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Tepfel
[2013-08-18 00:46:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Tarma Installer
[2013-08-18 00:44:35 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Visage
[2013-08-18 00:44:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Visagesoft
[2013-08-18 00:44:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
[2013-08-18 00:39:53 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Local\avgchrome
[2013-08-18 00:39:45 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
[2013-08-18 00:39:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Delta
[2013-08-18 00:39:40 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Roaming\Delta
[2013-08-18 00:39:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Minibar
[2013-08-18 00:39:33 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Local\Minibar
[2013-08-18 00:39:32 | 000,000,000 | ---D | C] -- C:\ProgramData\BrowserDefender
[2013-08-18 00:39:20 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Roaming\BabSolution
[2013-08-18 00:39:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Babylon
[2013-08-18 00:39:00 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Roaming\Babylon
[2013-08-15 01:08:29 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Local\Blizzard Entertainment
[2013-08-15 01:08:20 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Roaming\Battle.net
[2013-08-15 01:08:20 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Local\Battle.net
[2013-08-15 01:08:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
[2013-08-14 23:35:17 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dargon
[2013-08-14 23:34:35 | 000,000,000 | ---D | C] -- C:\Dargon
[2013-08-14 23:33:43 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\Documents\DargonMods
[2013-08-11 21:06:40 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Roaming\ps3psarc
[2013-08-03 19:35:21 | 000,000,000 | ---D | C] -- C:\ProgramData\GarenaPlus
[2013-07-31 17:37:01 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\Documents\Razer
[2013-07-31 16:56:06 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Local\Razer
[2013-07-31 16:55:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
[2013-07-31 16:54:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Razer
[2013-07-31 16:31:03 | 000,000,000 | ---D | C] -- C:\ProgramData\LogiShrd
[2013-07-31 16:30:38 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Local\Logitech
[2013-07-31 16:30:28 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Roaming\Leadertech
[2013-07-31 16:29:08 | 000,018,960 | ---- | C] (Logitech, Inc.) -- C:\Windows\SysNative\drivers\LNonPnP.sys
[2013-07-31 16:28:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
[2013-07-31 16:28:23 | 000,000,000 | ---D | C] -- C:\Program Files\Logitech Gaming Software
[2013-07-31 16:27:23 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Roaming\Logitech
[2013-07-31 16:27:23 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Roaming\Logishrd
[2013-07-29 12:53:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garena
[2013-07-29 12:53:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Garena Plus
[2013-07-29 12:49:38 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Roaming\GarenaPlus
[2013-07-29 11:21:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2013-07-29 11:21:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi
[2013-07-28 15:45:32 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Local\LogMeIn Hamachi
[2013-07-28 12:06:40 | 000,000,000 | ---D | C] -- C:\Users\Michał 2\AppData\Roaming\GameRanger
[3 C:\Users\Michał 2\Desktop\*.tmp files -> C:\Users\Michał 2\Desktop\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2013-08-27 02:12:45 | 000,007,605 | ---- | M] () -- C:\Users\Michał 2\AppData\Local\Resmon.ResmonCfg
[2013-08-27 02:11:02 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013-08-27 02:10:52 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013-08-27 02:10:38 | 1610,063,872 | -HS- | M] () -- C:\hiberfil.sys
[2013-08-27 02:02:01 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013-08-27 01:19:02 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013-08-26 21:51:22 | 000,001,018 | ---- | M] () -- C:\Users\Public\Desktop\DuckTales Remastered.lnk
[2013-08-26 21:46:42 | 000,886,594 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2013-08-26 21:46:42 | 000,703,050 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013-08-26 21:46:42 | 000,204,930 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2013-08-26 21:46:42 | 000,169,678 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013-08-26 21:46:42 | 000,006,252 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013-08-26 18:19:14 | 019,273,460 | ---- | M] (Opera Software ASA) -- C:\Users\Michał 2\Desktop\Opera_Next_16.0.1196.55_Setup.exe
[2013-08-26 17:25:23 | 000,393,458 | ---- | M] () -- C:\Users\Michał 2\Desktop\Bez naaaaazwy.xcf
[2013-08-26 17:25:23 | 000,005,307 | ---- | M] () -- C:\Users\Michał 2\AppData\Local\recently-used.xbel
[2013-08-26 16:20:50 | 000,144,103 | ---- | M] () -- C:\Users\Michał 2\Desktop\Bez naaaaazwy.png
[2013-08-26 13:10:45 | 000,014,592 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013-08-26 13:10:45 | 000,014,592 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013-08-25 23:47:38 | 001,146,942 | ---- | M] () -- C:\Users\Michał 2\Desktop\jax.png
[2013-08-25 21:17:34 | 000,160,205 | ---- | M] () -- C:\Users\Michał 2\Desktop\Dungeon Mapa.png
[2013-08-25 17:47:52 | 000,003,041 | ---- | M] () -- C:\Users\Michał 2\Desktop\80k.jpg
[2013-08-22 03:43:04 | 000,000,226 | ---- | M] () -- C:\Windows\AWS.ini
[2013-08-22 03:27:53 | 000,001,010 | ---- | M] () -- C:\Users\Michał 2\Desktop\Automatyczny Wyłącznik Systemu.lnk
[2013-08-22 03:27:37 | 000,519,012 | ---- | M] (SkaWit - Witold Skałka                                      ) -- C:\Users\Michał 2\Desktop\aws-setup.exe
[2013-08-21 20:51:31 | 000,950,940 | ---- | M] () -- C:\Users\Michał 2\Desktop\bobo.png
[2013-08-21 13:02:02 | 000,001,011 | ---- | M] () -- C:\Users\Public\Desktop\UltraISO.lnk
[2013-08-21 12:58:25 | 000,659,824 | ---- | M] () -- C:\Users\Michał 2\Desktop\uiso9_pe_Installer.exe
[2013-08-21 12:52:11 | 000,320,952 | ---- | M] (StarApp) -- C:\Users\Michał 2\Desktop\usbm10.rar.exe
[2013-08-21 01:52:08 | 000,000,662 | ---- | M] () -- C:\Users\Public\Desktop\ChomikBox.lnk
[2013-08-21 01:49:51 | 028,002,816 | ---- | M] () -- C:\Users\Michał 2\Desktop\ChomikBox.msi
[2013-08-21 01:41:36 | 000,026,322 | ---- | M] () -- C:\Users\Michał 2\Desktop\cast[bractwocienia.com].zip
[2013-08-21 00:35:05 | 000,000,563 | ---- | M] () -- C:\Users\Michał 2\Desktop\Mineshafter-proxy — skrót.lnk
[2013-08-20 22:37:11 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Michał 2\Desktop\OTL.exe
[2013-08-18 01:41:21 | 000,000,111 | -H-- | M] () -- C:\Users\Public\Documents\sys62945.bin
[2013-08-18 01:08:48 | 000,000,000 | ---- | M] () -- C:\Users\Michał 2\AppData\Local\C
[2013-08-15 01:08:15 | 000,000,835 | ---- | M] () -- C:\Users\Public\Desktop\Battle.net.lnk
[2013-08-06 20:40:22 | 000,506,948 | ---- | M] () -- C:\Users\Michał 2\Desktop\Dungeon Mapa.xcf
[2013-07-31 16:29:08 | 000,018,960 | ---- | M] (Logitech, Inc.) -- C:\Windows\SysNative\drivers\LNonPnP.sys
[2013-07-30 06:44:41 | 000,000,219 | ---- | M] () -- C:\Users\Michał 2\Desktop\Dota 2.url
[3 C:\Users\Michał 2\Desktop\*.tmp files -> C:\Users\Michał 2\Desktop\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2013-08-27 02:12:45 | 000,007,605 | ---- | C] () -- C:\Users\Michał 2\AppData\Local\Resmon.ResmonCfg
[2013-08-26 21:51:22 | 000,001,030 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DuckTales Remastered.lnk
[2013-08-26 21:51:22 | 000,001,018 | ---- | C] () -- C:\Users\Public\Desktop\DuckTales Remastered.lnk
[2013-08-26 17:25:23 | 000,393,458 | ---- | C] () -- C:\Users\Michał 2\Desktop\Bez naaaaazwy.xcf
[2013-08-26 17:25:23 | 000,005,307 | ---- | C] () -- C:\Users\Michał 2\AppData\Local\recently-used.xbel
[2013-08-26 16:20:49 | 000,144,103 | ---- | C] () -- C:\Users\Michał 2\Desktop\Bez naaaaazwy.png
[2013-08-25 23:47:36 | 001,146,942 | ---- | C] () -- C:\Users\Michał 2\Desktop\jax.png
[2013-08-25 21:17:34 | 000,160,205 | ---- | C] () -- C:\Users\Michał 2\Desktop\Dungeon Mapa.png
[2013-08-25 17:47:49 | 000,003,041 | ---- | C] () -- C:\Users\Michał 2\Desktop\80k.jpg
[2013-08-22 03:27:53 | 000,001,010 | ---- | C] () -- C:\Users\Michał 2\Desktop\Automatyczny Wyłącznik Systemu.lnk
[2013-08-21 20:40:40 | 000,950,940 | ---- | C] () -- C:\Users\Michał 2\Desktop\bobo.png
[2013-08-21 13:02:02 | 000,001,011 | ---- | C] () -- C:\Users\Public\Desktop\UltraISO.lnk
[2013-08-21 12:58:25 | 000,659,824 | ---- | C] () -- C:\Users\Michał 2\Desktop\uiso9_pe_Installer.exe
[2013-08-21 01:52:08 | 000,000,662 | ---- | C] () -- C:\Users\Public\Desktop\ChomikBox.lnk
[2013-08-21 01:48:33 | 028,002,816 | ---- | C] () -- C:\Users\Michał 2\Desktop\ChomikBox.msi
[2013-08-21 01:41:29 | 000,026,322 | ---- | C] () -- C:\Users\Michał 2\Desktop\cast[bractwocienia.com].zip
[2013-08-21 00:35:05 | 000,000,563 | ---- | C] () -- C:\Users\Michał 2\Desktop\Mineshafter-proxy — skrót.lnk
[2013-08-18 01:41:21 | 000,000,111 | -H-- | C] () -- C:\Users\Public\Documents\sys62945.bin
[2013-08-18 01:33:25 | 000,002,471 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
[2013-08-18 01:08:48 | 000,000,000 | ---- | C] () -- C:\Users\Michał 2\AppData\Local\C
[2013-08-15 01:08:15 | 000,000,835 | ---- | C] () -- C:\Users\Public\Desktop\Battle.net.lnk
[2013-07-30 06:44:41 | 000,000,219 | ---- | C] () -- C:\Users\Michał 2\Desktop\Dota 2.url
[2013-07-28 12:06:57 | 000,001,072 | ---- | C] () -- C:\Users\Michał 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameRanger.lnk
[2013-07-27 16:56:22 | 000,033,792 | ---- | C] () -- C:\Windows\SysWow64\drivers\libusb0.sys
[2013-06-21 12:25:09 | 000,005,120 | ---- | C] () -- C:\Users\Michał 2\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013-06-07 16:09:17 | 000,018,991 | ---- | C] () -- C:\Windows\War3Unin.dat
[2013-03-16 03:06:29 | 000,000,226 | ---- | C] () -- C:\Windows\AWS.ini
[2012-12-22 20:41:47 | 000,000,069 | ---- | C] () -- C:\Users\Michał 2\.gtk-bookmarks
[2012-09-21 12:35:36 | 000,014,976 | ---- | C] () -- C:\Windows\SysWow64\drivers\SBKUPNT.SYS
[2012-09-21 12:35:36 | 000,013,312 | ---- | C] () -- C:\Windows\SysWow64\DEVLOAD.EXE
[2012-08-14 01:29:36 | 000,001,477 | ---- | C] () -- C:\Windows\SysWow64\secushr.dat
[2012-08-14 01:09:53 | 000,000,025 | ---- | C] () -- C:\Windows\libem.INI
[2012-06-11 18:56:46 | 000,021,840 | ---- | C] () -- C:\Windows\SysWow64\SIntfNT.dll
[2012-06-11 18:56:46 | 000,017,212 | ---- | C] () -- C:\Windows\SysWow64\SIntf32.dll
[2012-06-11 18:56:46 | 000,012,067 | ---- | C] () -- C:\Windows\SysWow64\SIntf16.dll
[2012-04-13 15:43:47 | 000,000,030 | ---- | C] () -- C:\Windows\TextSpy.ini
[2012-04-08 21:44:12 | 000,172,024 | ---- | C] () -- C:\Windows\hpoins27.dat
[2012-04-08 21:44:12 | 000,000,442 | ---- | C] () -- C:\Windows\hpomdl27.dat
[2012-04-08 17:13:36 | 000,172,022 | ---- | C] () -- C:\Windows\hpoins27.dat.temp
[2012-04-08 17:13:36 | 000,000,442 | ---- | C] () -- C:\Windows\hpomdl27.dat.temp
[2012-03-04 00:33:07 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat
[2012-02-14 11:08:36 | 000,122,884 | ---- | C] () -- C:\Windows\UnGins.exe
[2012-01-15 00:07:18 | 001,638,114 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011-12-18 17:08:59 | 000,111,928 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011-12-18 17:08:56 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
"ThreadingModel" = Both
"" = C:\$Recycle.Bin\S-1-5-21-1751451117-4207112011-2180288902-1003\$efcb0b5f72f3c652314cc0e694d184fc\n. -- File not found
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013-02-27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013-02-27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2013-04-08 00:57:26 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\.minecraftsl
[2013-08-18 00:39:21 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\BabSolution
[2013-08-18 00:39:00 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\Babylon
[2013-08-15 01:09:56 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\Battle.net
[2013-03-17 15:28:35 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\BESTplayer
[2013-04-07 01:17:41 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\BITS
[2013-06-07 15:52:50 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\DAEMON Tools Lite
[2013-04-24 17:36:39 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\DAEMON Tools Pro
[2013-08-18 00:39:40 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\Delta
[2012-11-21 07:46:29 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\FileZilla
[2012-11-28 21:49:11 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\fofix
[2013-07-28 12:06:56 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\GameRanger
[2013-07-29 12:49:49 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\GarenaPlus
[2012-11-12 16:36:27 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\GHISLER
[2013-07-31 16:30:28 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\Leadertech
[2012-10-27 19:42:49 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\LolClient
[2013-07-27 16:39:09 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\MotioninJoy
[2013-01-30 19:39:39 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\Mount&Blade With Fire and Sword
[2013-03-29 10:57:55 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\OfficeRecovery
[2012-10-27 19:42:12 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\Opera
[2013-08-18 02:29:44 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\PDF Architect
[2013-08-18 01:10:04 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\PDFEditorSDK
[2013-08-18 16:20:33 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\pdfforge
[2013-08-11 21:06:40 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\ps3psarc
[2013-04-12 21:28:06 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\raidcall
[2013-03-29 10:53:32 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\Systweak
[2013-08-18 00:48:56 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\Tepfel
[2013-05-30 23:50:54 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\TeraCopy
[2013-01-26 19:08:37 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\Tibia
[2013-01-26 03:46:31 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\TP
[2013-08-26 02:08:23 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\TS3Client
[2013-01-26 17:26:28 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\Unity
[2013-08-27 02:22:41 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\uTorrent
[2012-11-08 01:03:02 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\wargaming.net
[2013-08-26 21:52:11 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\Wayforward Technologies
[2013-08-26 21:43:53 | 000,000,000 | ---D | M] -- C:\Users\Michał 2\AppData\Roaming\WinZipper
[2013-03-24 03:29:24 | 000,000,000 | -HSD | M] -- C:\Users\Michał 2\AppData\Roaming\wyUpdate AU
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Files - Unicode (All) ==========[/color]
[2013-08-01 05:31:56 | 000,000,000 | ---D | M](C:\Users\Micha? 2\AppData\Roaming\GameRanger) -- C:\Users\Micha� 2\AppData\Roaming\GameRanger
[2012-04-08 15:21:33 | 000,000,000 | ---D | M](C:\Users\MichaA?\AppData\Roaming\SecondLife) -- C:\Users\Michał\AppData\Roaming\SecondLife
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 145 bytes -> C:\ProgramData\TEMP:373E1720
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:D1B5B4F1

< End of report >