OTL logfile created on: 2014-02-10 14:28:04 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Administrator\Desktop\czyszczenie\czyszczenie
 Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16476)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,92 Gb Total Physical Memory | 0,99 Gb Available Physical Memory | 34,07% Memory free
5,84 Gb Paging File | 2,91 Gb Available in Paging File | 49,83% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 148,95 Gb Total Space | 13,41 Gb Free Space | 9,00% Space Free | Partition Type: NTFS
Drive D: | 149,04 Gb Total Space | 142,78 Gb Free Space | 95,79% Space Free | Partition Type: NTFS
Drive E: | 312,25 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: ADMIN-KOMPUTER | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2014-02-09 21:09:57 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Administrator\Desktop\czyszczenie\czyszczenie\OTL.exe
PRC - [2014-02-06 16:27:58 | 000,036,392 | ---- | M] (Just Develop It) -- C:\Program Files\MyPC Backup\BackupStack.exe
PRC - [2014-02-06 16:27:56 | 002,919,976 | ---- | M] (MyPCBackup.com) -- C:\Program Files\MyPC Backup\MyPC Backup.exe
PRC - [2014-02-06 11:50:12 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2014-02-05 23:56:26 | 001,863,048 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
PRC - [2014-02-05 10:15:52 | 004,369,760 | ---- | M] (TeamViewer GmbH) -- c:\users\admini~1\appdata\local\temp\teamviewer\version9\TeamViewer_Desktop.exe
PRC - [2014-02-05 10:15:51 | 010,234,720 | ---- | M] (TeamViewer GmbH) -- C:\Users\ADMINI~1\AppData\Local\Temp\TeamViewer\Version9\TeamViewer.exe
PRC - [2014-01-20 10:50:06 | 003,153,904 | ---- | M] () -- C:\Users\Administrator\AppData\Local\fst_en_2\upfst_en_2.exe
PRC - [2014-01-15 02:07:04 | 000,045,568 | ---- | M] (Parallel Lines Development, LLC) -- C:\ProgramData\InternetUpdater\InternetUpdaterService.exe
PRC - [2014-01-12 15:46:26 | 004,035,072 | ---- | M] () -- C:\Users\Administrator\AppData\Local\Galileo\galileo.exe
PRC - [2014-01-09 12:22:06 | 003,531,216 | ---- | M] () -- C:\Program Files\fst_en_2\freeSoftToday_widget.exe
PRC - [2014-01-03 01:32:12 | 001,363,616 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
PRC - [2014-01-03 01:32:04 | 001,748,640 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
PRC - [2013-12-30 13:51:53 | 004,047,424 | ---- | M] (GG Network S.A.) -- C:\Users\Administrator\AppData\Local\GG\Application\gghub.exe
PRC - [2013-12-30 13:51:53 | 000,132,672 | ---- | M] (GG Network S.A.) -- C:\Users\Administrator\AppData\Local\GG\Application\ggapp.exe
PRC - [2013-12-18 22:47:36 | 000,486,264 | ---- | M] (Updater) -- C:\ProgramData\Updater\updater.exe
PRC - [2013-12-18 22:47:36 | 000,429,944 | ---- | M] (WatchDog) -- C:\ProgramData\RHelpers\IeHelper\IeHelper.exe
PRC - [2013-12-18 22:47:36 | 000,429,944 | ---- | M] (WatchDog) -- C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe
PRC - [2013-12-18 22:47:36 | 000,429,944 | ---- | M] (WatchDog) -- C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe
PRC - [2013-12-18 18:27:58 | 011,671,024 | ---- | M] () -- C:\Program Files\fst_en_2\fst_en_2.exe
PRC - [2013-09-12 12:06:22 | 001,337,752 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
PRC - [2013-09-12 12:06:06 | 005,110,672 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
PRC - [2013-07-19 08:25:06 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2013-04-25 16:22:36 | 001,648,264 | ---- | M] (Ask) -- C:\Program Files\Ask.com\Updater\Updater.exe
PRC - [2012-03-21 11:23:14 | 000,793,048 | ---- | M] (PC Tools) -- C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe
PRC - [2012-03-21 11:23:12 | 000,103,896 | ---- | M] (PC Tools) -- C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe
PRC - [2011-03-14 16:27:28 | 000,271,712 | ---- | M] () -- C:\ProgramData\DataCardService\HWDeviceService.exe
PRC - [2011-03-14 16:27:28 | 000,236,384 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\ProgramData\DataCardService\DCSHelper.exe
PRC - [2011-02-25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010-11-30 17:25:24 | 018,635,264 | ---- | M] (Redefine Sp z o.o.) -- C:\Program Files\ipla\ipla.exe
PRC - [2010-10-27 10:00:02 | 001,015,808 | ---- | M] (Ares Development Group) -- C:\Program Files\Ares\Ares.exe
PRC - [2010-08-11 21:45:00 | 000,380,928 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
PRC - [2010-08-11 21:44:38 | 000,176,128 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
PRC - [2010-07-02 13:36:26 | 001,597,440 | ---- | M] () -- C:\Program Files\ASUS\Wireless Console 3\wcourier.exe
PRC - [2010-06-24 17:50:50 | 006,806,144 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
PRC - [2010-06-09 09:55:54 | 001,080,448 | ---- | M] (asus) -- C:\Program Files\ASUS\ControlDeck\ControlDeck.exe
PRC - [2010-05-28 10:49:08 | 000,277,120 | ---- | M] (ATK) -- C:\Program Files\P4G\BatteryLife.exe
PRC - [2010-05-03 14:45:50 | 000,182,912 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControl.exe
PRC - [2010-05-03 14:41:46 | 000,170,624 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe
PRC - [2010-04-05 18:33:52 | 001,271,088 | ---- | M] (SRS Labs, Inc.) -- C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel.exe
PRC - [2009-12-15 10:39:38 | 000,096,896 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
PRC - [2009-09-30 19:34:22 | 002,314,240 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2009-09-30 19:33:08 | 000,262,144 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2009-07-14 02:14:24 | 000,157,184 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Windows Defender\MpCmdRun.exe
PRC - [2009-06-19 10:29:42 | 000,105,016 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
PRC - [2009-06-19 10:29:26 | 002,488,888 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
PRC - [2009-06-15 17:30:42 | 000,084,536 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
PRC - [2009-06-04 19:03:32 | 000,186,904 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2009-06-04 19:03:06 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2008-12-22 17:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Package\ATK Hotkey\WDC.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2014-02-06 16:19:10 | 000,012,288 | ---- | M] () -- C:\Program Files\MyPC Backup\GetText.dll
MOD - [2014-02-06 16:13:48 | 000,904,704 | ---- | M] () -- C:\Program Files\MyPC Backup\x86\System.Data.SQLite.dll
MOD - [2014-02-06 11:50:12 | 003,583,600 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2014-02-05 23:56:26 | 016,287,624 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_12_0_0_44.dll
MOD - [2014-01-20 10:50:06 | 003,153,904 | ---- | M] () -- C:\Users\Administrator\AppData\Local\fst_en_2\upfst_en_2.exe
MOD - [2014-01-12 15:46:26 | 004,035,072 | ---- | M] () -- C:\Users\Administrator\AppData\Local\Galileo\galileo.exe
MOD - [2014-01-09 12:22:06 | 003,531,216 | ---- | M] () -- C:\Program Files\fst_en_2\freeSoftToday_widget.exe
MOD - [2013-12-30 13:51:54 | 003,006,528 | ---- | M] () -- C:\Users\Administrator\AppData\Local\GG\Application\xulrunner\mozjs.dll
MOD - [2013-12-18 18:27:58 | 011,671,024 | ---- | M] () -- C:\Program Files\fst_en_2\fst_en_2.exe
MOD - [2013-10-24 13:09:56 | 014,340,096 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\bcf51dc88597d0835c819a2d5a755b74\PresentationFramework.ni.dll
MOD - [2013-10-24 13:09:17 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ef0a534be135cd8f0d99d938d8b1814a\System.Windows.Forms.ni.dll
MOD - [2013-10-24 13:08:53 | 012,238,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\51478a61dbd40488e320a0061e23c4df\PresentationCore.ni.dll
MOD - [2013-10-24 13:08:17 | 003,348,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\4eef5a3a4d0ed6d6fd882947a70df530\WindowsBase.ni.dll
MOD - [2013-10-24 13:08:04 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\720d4265aeabf53c4a0689189f5059fe\System.Configuration.ni.dll
MOD - [2013-10-04 19:34:24 | 011,914,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\6ebbfafc5521934f7e1c154937a2788b\System.Web.ni.dll
MOD - [2013-10-04 19:34:09 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\d473c19e69818875b9c739cad8f386a5\System.Runtime.Remoting.ni.dll
MOD - [2013-08-16 12:27:14 | 001,051,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\9a1bc983c28c695729b3e46acdc6933e\System.Management.ni.dll
MOD - [2013-08-16 10:16:43 | 000,628,224 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\5970036570c1e44e8ae0f6f94c1039aa\System.EnterpriseServices.ni.dll
MOD - [2013-08-16 10:16:31 | 000,627,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\4ada2213cefea889a5ed6e2fb6839b93\System.Transactions.ni.dll
MOD - [2013-08-16 10:16:14 | 006,611,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\764054efc88f51b54c8d7e44df26b671\System.Data.ni.dll
MOD - [2013-08-16 10:11:54 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5aa44bce7933e4de09d935848f868a4b\System.Drawing.ni.dll
MOD - [2013-08-16 10:10:25 | 005,464,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\09db78d6068543df01862a023aca785a\System.Xml.ni.dll
MOD - [2013-08-16 10:09:53 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5d22a30e587e2cac106b81fb351e7c08\System.ni.dll
MOD - [2013-07-19 18:54:19 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a2920ed81e097f8551231a9350697bbd\PresentationFramework.Aero.ni.dll
MOD - [2013-07-19 09:36:05 | 011,499,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll
MOD - [2012-07-30 09:42:56 | 000,370,176 | ---- | M] () -- C:\Users\Administrator\AppData\Local\Galileo\imageformats\qtiff4.dll
MOD - [2012-07-30 09:42:55 | 000,192,000 | ---- | M] () -- C:\Users\Administrator\AppData\Local\Galileo\imageformats\qjpeg4.dll
MOD - [2012-07-30 09:42:54 | 000,350,720 | ---- | M] () -- C:\Users\Administrator\AppData\Local\Galileo\imageformats\qmng4.dll
MOD - [2012-07-30 09:42:54 | 000,082,944 | ---- | M] () -- C:\Users\Administrator\AppData\Local\Galileo\imageformats\qgif4.dll
MOD - [2010-12-17 18:02:50 | 000,443,904 | ---- | M] () -- C:\Users\Administrator\AppData\Local\Galileo\boost_filesystem-mgw44-mt-1_42.dll
MOD - [2010-12-17 18:02:50 | 000,011,362 | ---- | M] () -- C:\Users\Administrator\AppData\Local\Galileo\mingwm10.dll
MOD - [2010-12-17 18:02:48 | 000,043,008 | ---- | M] () -- C:\Users\Administrator\AppData\Local\Galileo\libgcc_s_dw2-1.dll
MOD - [2010-12-17 18:02:44 | 000,135,680 | ---- | M] () -- C:\Users\Administrator\AppData\Local\Galileo\boost_thread-mgw44-mt-1_42.dll
MOD - [2010-12-17 18:02:42 | 000,093,184 | ---- | M] () -- C:\Users\Administrator\AppData\Local\Galileo\boost_system-mgw44-mt-1_42.dll
MOD - [2010-12-15 15:08:46 | 002,537,472 | ---- | M] () -- C:\Users\Administrator\AppData\Local\Galileo\QtCore4.dll
MOD - [2010-11-30 17:18:38 | 000,267,264 | ---- | M] () -- C:\Program Files\ipla\MediaFileScanner.dll
MOD - [2010-11-30 17:17:26 | 000,386,560 | ---- | M] () -- C:\Program Files\ipla\jabberoo.dll
MOD - [2010-11-30 17:16:22 | 000,156,160 | ---- | M] () -- C:\Program Files\ipla\lua.dll
MOD - [2010-11-30 17:15:38 | 000,060,928 | ---- | M] () -- C:\Program Files\ipla\ziplib.dll
MOD - [2010-11-25 21:41:00 | 000,270,336 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
MOD - [2010-11-17 13:16:56 | 000,067,872 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2010-11-13 02:57:57 | 000,425,984 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_pl_b77a5c561934e089\System.Windows.Forms.resources.dll
MOD - [2010-11-13 02:57:46 | 000,311,296 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll
MOD - [2010-11-05 02:58:05 | 002,927,616 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2010-11-05 02:54:42 | 000,110,592 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationCore.resources\3.0.0.0_pl_31bf3856ad364e35\PresentationCore.resources.dll
MOD - [2010-11-05 02:54:34 | 000,208,896 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_pl_b77a5c561934e089\System.resources.dll
MOD - [2010-09-13 06:08:06 | 017,315,328 | ---- | M] () -- C:\Users\Administrator\AppData\Local\Galileo\QtWebKit4.dll
MOD - [2010-09-13 03:16:14 | 002,173,952 | ---- | M] () -- C:\Users\Administrator\AppData\Local\Galileo\QtScript4.dll
MOD - [2010-09-13 03:01:46 | 000,344,064 | ---- | M] () -- C:\Users\Administrator\AppData\Local\Galileo\phonon4.dll
MOD - [2010-09-13 02:30:18 | 009,814,016 | ---- | M] () -- C:\Users\Administrator\AppData\Local\Galileo\QtGui4.dll
MOD - [2010-09-13 01:55:26 | 001,140,224 | ---- | M] () -- C:\Users\Administrator\AppData\Local\Galileo\QtNetwork4.dll
MOD - [2010-09-13 01:51:28 | 000,399,360 | ---- | M] () -- C:\Users\Administrator\AppData\Local\Galileo\QtXml4.dll
MOD - [2010-07-02 13:36:26 | 001,597,440 | ---- | M] () -- C:\Program Files\ASUS\Wireless Console 3\wcourier.exe
MOD - [2010-05-05 18:22:30 | 000,098,304 | ---- | M] () -- C:\Program Files\P4G\OvrClk.dll
MOD - [2010-02-23 15:14:22 | 000,071,680 | ---- | M] () -- C:\Program Files\ASUS\ControlDeck\Brightness.dll
MOD - [2010-02-23 15:14:18 | 000,041,472 | ---- | M] () -- C:\Program Files\ASUS\ControlDeck\HelpFunc.dll
MOD - [2010-02-23 15:14:10 | 000,050,688 | ---- | M] () -- C:\Program Files\ASUS\ControlDeck\P4GControl.dll
MOD - [2010-02-23 15:12:22 | 000,186,880 | ---- | M] () -- C:\Program Files\ASUS\ControlDeck\Resolution.dll
MOD - [2010-02-23 15:11:46 | 000,076,288 | ---- | M] () -- C:\Program Files\ASUS\ControlDeck\Volume.dll
MOD - [2010-01-11 10:27:36 | 000,012,800 | ---- | M] () -- C:\Program Files\P4G\DevMng.dll
MOD - [2009-06-10 22:23:19 | 000,261,632 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - File not found [Auto | Stopped] -- C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwssvc.exe -- (MyWebSearchService)
SRV - [2014-02-06 16:27:58 | 000,036,392 | ---- | M] (Just Develop It) [Auto | Running] -- C:\Program Files\MyPC Backup\BackupStack.exe -- (BackupStack)
SRV - [2014-02-06 11:50:12 | 000,118,896 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014-02-05 23:56:27 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014-01-15 02:07:04 | 000,045,568 | ---- | M] (Parallel Lines Development, LLC) [Auto | Running] -- C:\ProgramData\InternetUpdater\InternetUpdaterService.exe -- (InternetUpdater)
SRV - [2014-01-03 01:32:12 | 001,363,616 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
SRV - [2014-01-03 01:32:04 | 001,748,640 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
SRV - [2013-11-26 09:29:52 | 000,108,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV - [2013-09-12 12:06:22 | 001,337,752 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
SRV - [2013-06-03 15:21:54 | 000,162,408 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013-05-27 05:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2012-03-21 11:23:14 | 000,793,048 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe -- (PCToolsSSDMonitorSvc)
SRV - [2011-03-14 16:27:28 | 000,271,712 | ---- | M] () [Auto | Running] -- C:\ProgramData\DataCardService\HWDeviceService.exe -- (HWDeviceService.exe)
SRV - [2010-12-23 00:25:19 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2010-08-11 21:44:38 | 000,176,128 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2009-12-15 10:39:38 | 000,096,896 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2009-09-30 19:34:22 | 002,314,240 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2009-09-30 19:33:08 | 000,262,144 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2009-07-14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009-07-14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009-06-15 17:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
SRV - [2009-06-04 19:03:06 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON)
SRV - [2008-04-18 12:22:43 | 000,415,112 | ---- | M] (Cenega Poland Sp. z o.o.) [Auto | Stopped] -- C:\Windows\System32\pr2arkab.exe -- (pr2arkab)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Unknown] -- C:\Users\ADMINI~1\AppData\Local\Temp\uwddakob.sys -- (uwddakob)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\synth3dvsc.sys -- (Synth3dVsc)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ewusbdev.sys -- (hwusbdev)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ewusbnet.sys -- (ewusbnet)
DRV - [2014-01-13 20:06:47 | 000,194,816 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2014-01-13 20:06:47 | 000,181,760 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_juwwanecm.sys -- (huawei_wwanecm)
DRV - [2014-01-13 20:06:47 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - [2014-01-13 20:06:47 | 000,090,368 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_jucdcacm.sys -- (huawei_cdcacm)
DRV - [2014-01-13 20:06:47 | 000,073,216 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ew_jubusenum.sys -- (huawei_enumerator)
DRV - [2014-01-13 20:06:47 | 000,026,624 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_juextctrl.sys -- (huawei_ext_ctrl)
DRV - [2014-01-13 20:06:47 | 000,024,192 | ---- | M] (Bytemobile, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\tcpipBM.sys -- (tcpipBM)
DRV - [2014-01-13 20:06:47 | 000,013,184 | ---- | M] (Bytemobile, Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\BMLoad.sys -- (BMLoad)
DRV - [2014-01-13 20:06:47 | 000,011,136 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_usbenumfilter.sys -- (ew_usbenumfilter)
DRV - [2013-09-17 15:17:38 | 000,188,808 | ---- | M] (ESET) [File_System | System | Running] -- C:\Windows\System32\drivers\eamonm.sys -- (eamonm)
DRV - [2013-09-17 15:17:38 | 000,134,248 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\System32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2013-09-17 15:17:38 | 000,122,376 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\epfwwfpr.sys -- (epfwwfpr)
DRV - [2011-07-14 21:18:35 | 000,002,368 | ---- | M] (AntiCracking) [Kernel | Auto | Running] -- C:\Windows\System32\SVKP.sys -- (SVKP)
DRV - [2010-11-20 13:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010-11-20 13:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010-11-20 13:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010-11-20 11:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010-11-20 11:21:14 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2010-11-20 10:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010-11-20 10:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010-11-20 10:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010-08-11 22:14:50 | 006,379,008 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
DRV - [2010-08-11 21:10:50 | 000,221,696 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
DRV - [2010-03-02 09:43:20 | 001,263,104 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2010-02-25 04:27:00 | 000,098,928 | ---- | M] (JMicron Technology Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\JME.sys -- (JME)
DRV - [2010-01-31 10:56:58 | 002,351,944 | ---- | M] (Digital Camera) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SPUVCBv.sys -- (SPUVCbv)
DRV - [2009-12-18 10:58:52 | 000,011,336 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\SystemRequirementsLab\cpudrv.sys -- (cpudrv)
DRV - [2009-10-30 03:48:50 | 000,502,272 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CHDRT32.sys -- (CnxtHdAudService)
DRV - [2009-09-30 02:33:58 | 000,104,976 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV - [2009-09-17 12:54:14 | 000,041,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HECI.sys -- (HECI)
DRV - [2009-08-18 09:23:28 | 000,119,408 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\jmcr.sys -- (JMCR)
DRV - [2009-07-20 10:29:40 | 000,013,880 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr)
DRV - [2009-07-14 00:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp)
DRV - [2009-07-02 17:36:10 | 000,013,880 | ---- | M] (ASUS) [Kernel | Auto | Running] -- C:\Program Files\ASUS\ATK Package\ATKGFNEX\ASMMAP.sys -- (ASMMAP)
DRV - [2009-05-13 09:06:48 | 000,014,392 | ---- | M] (ASUS) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ATKACPI.sys -- (MTsensor)
DRV - [2008-04-18 12:22:10 | 000,069,256 | ---- | M] (Cenega Poland Sp. z o.o.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\pe3arkab.sys -- (pe3arkab)
DRV - [2008-04-18 12:21:27 | 000,068,752 | ---- | M] (Cenega Poland Sp. z o.o.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\ps7arkab.sys -- (ps7arkab)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No CLSID value found
IE - HKLM\..\SearchScopes,DefaultScope = {56256A51-B582-467e-B8D4-7786EDA79AE0}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}: "URL" = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=ZCman000&ptnrS=ZCman000&ptb=sNGFWIBJo19dqgiJoTF_6A&ind=2012012816&n=77ece110&psa=&st=sb&searchfor={searchTerms}
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2786678
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1469707236-2288353759-1584227296-500\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = 
IE - HKU\S-1-5-21-1469707236-2288353759-1584227296-500\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com/?ctid=CT3319611&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SPE6D1C798-7843-4AD0-8273-E7A6468FDD31&SSPV=
IE - HKU\S-1-5-21-1469707236-2288353759-1584227296-500\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}\InprocServer32 File not found
IE - HKU\S-1-5-21-1469707236-2288353759-1584227296-500\..\URLSearchHook: {00A6FAF6-072E-44cf-8957-5838F569A31D} - SOFTWARE\Classes\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}\InprocServer32 File not found
IE - HKU\S-1-5-21-1469707236-2288353759-1584227296-500\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No CLSID value found
IE - HKU\S-1-5-21-1469707236-2288353759-1584227296-500\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-1469707236-2288353759-1584227296-500\..\SearchScopes,DefaultScope = {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
IE - HKU\S-1-5-21-1469707236-2288353759-1584227296-500\..\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}: "URL" = http://search.conduit.com/Results.aspx?ctid=CT3319611&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SPE6D1C798-7843-4AD0-8273-E7A6468FDD31&q={searchTerms}&SSPV=
IE - HKU\S-1-5-21-1469707236-2288353759-1584227296-500\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
IE - HKU\S-1-5-21-1469707236-2288353759-1584227296-500\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=C0A3BCAEC50B3D3B&affID=119357&tt=180713_9129&tsp=4947
IE - HKU\S-1-5-21-1469707236-2288353759-1584227296-500\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=MGX&o=15355&src=kw&q={searchTerms}&locale=en_US&apn_ptnrs=JP&apn_dtid=YYYYYYYYPL&apn_uid=799279F7-71F7-4384-A06F-93FF1306093C&apn_sauid=59E5D565-D4A2-46D1-B973-AFE7DCA40A9A
IE - HKU\S-1-5-21-1469707236-2288353759-1584227296-500\..\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}: "URL" = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=ZCman000&ptnrS=ZCman000&ptb=sNGFWIBJo19dqgiJoTF_6A&ind=2012012816&n=77ece110&psa=&st=sb&searchfor={searchTerms}
IE - HKU\S-1-5-21-1469707236-2288353759-1584227296-500\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2786678
IE - HKU\S-1-5-21-1469707236-2288353759-1584227296-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1469707236-2288353759-1584227296-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "uTorrentBar Customized Web Search"
FF - prefs.js..browser.search.defaultthis.engineName: "uTorrentBar Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "ă†ĺ0sú\nÁf°ę×H٧W›ČI‰LD=řr­­"
FF - prefs.js..browser.search.selectedEngine: "uTorrentBar Customized Web Search"
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://search.conduit.com/?ctid=CT2786678&SearchSource=13"
FF - prefs.js..extensions.enabledAddons: %7Bbf7380fa-e3b4-4db2-af3e-9d8783a45bfc%7D:3.19.0.3
FF - prefs.js..extensions.enabledAddons: support%40websteroidsapp.com:2.6.5367102
FF - prefs.js..extensions.enabledAddons: toolbar%40ask.com:3.15.25.100013
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:27.0
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&SearchSource=2&CUI=SB_CUI&UM=UM_ID&q="
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1165635.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@mywebsearch.com/Plugin: C:\Program Files\MyWebSearch\bar\2.bin\NPMyWebS.dll File not found
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Administrator\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\m3ffxtbr@mywebsearch.com: C:\Program Files\MyWebSearch\bar\2.bin [2014-02-08 13:56:22 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\ff-bmboc@bytemobile.com: C:\Program Files\T-Mobile\InternetManager_H\OCx32\addon
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2014-02-06 11:50:07 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2014-02-06 11:50:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Users\Administrator\Documents\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Users\Administrator\Documents\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2014-02-08 12:31:14 | 000,000,000 | ---D | M]
 
[2010-12-23 01:08:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Administrator\AppData\Roaming\mozilla\Extensions
[2014-02-08 00:28:02 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Administrator\AppData\Roaming\mozilla\Firefox\Profiles\zq5263z3.default\extensions
[2014-02-03 11:46:58 | 000,000,000 | ---D | M] (Blue Fox) -- C:\Users\Administrator\AppData\Roaming\mozilla\Firefox\Profiles\zq5263z3.default\extensions\{241aae70-0022-11de-87af-0800200c9a66}
[2013-07-18 18:30:55 | 000,000,000 | ---D | M] (uTorrentBar Community Toolbar) -- C:\Users\Administrator\AppData\Roaming\mozilla\Firefox\Profiles\zq5263z3.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
[2013-07-18 20:33:18 | 000,000,000 | ---D | M] (Delta Toolbar) -- C:\Users\Administrator\AppData\Roaming\mozilla\Firefox\Profiles\zq5263z3.default\extensions\ffxtlbr@delta.com
[2012-01-28 22:25:53 | 000,000,000 | ---D | M] (My Web Search) -- C:\Users\Administrator\AppData\Roaming\mozilla\Firefox\Profiles\zq5263z3.default\extensions\m3ffxtbr@mywebsearch.com
[2014-02-08 00:38:42 | 000,000,000 | ---D | M] (Websteroids) -- C:\Users\Administrator\AppData\Roaming\mozilla\Firefox\Profiles\zq5263z3.default\extensions\support@websteroidsapp.com
[2014-01-27 06:10:25 | 000,000,000 | ---D | M] ("MAGIX Toolbar") -- C:\Users\Administrator\AppData\Roaming\mozilla\Firefox\Profiles\zq5263z3.default\extensions\toolbar@ask.com
[2012-08-19 11:21:47 | 002,966,066 | ---- | M] () (No name found) -- C:\Users\Administrator\AppData\Roaming\mozilla\firefox\profiles\zq5263z3.default\extensions\{c7b3cf78-9cbc-47b9-ba47-bb84a56069dd}.xpi
[2012-06-15 12:19:53 | 001,496,221 | ---- | M] () (No name found) -- C:\Users\Administrator\AppData\Roaming\mozilla\firefox\profiles\zq5263z3.default\extensions\{ce951a80-a291-11df-981c-0800200c9a66}.xpi
[2014-02-09 14:26:26 | 000,002,572 | ---- | M] () -- C:\Users\Administrator\AppData\Roaming\mozilla\firefox\profiles\zq5263z3.default\searchplugins\askcom.xml
[2011-12-21 05:46:39 | 000,002,364 | ---- | M] () -- C:\Users\Administrator\AppData\Roaming\mozilla\firefox\profiles\zq5263z3.default\searchplugins\BitGuard.xml
[2013-07-15 16:48:14 | 000,000,925 | ---- | M] () -- C:\Users\Administrator\AppData\Roaming\mozilla\firefox\profiles\zq5263z3.default\searchplugins\conduit.xml
[2013-07-18 20:33:19 | 000,001,294 | ---- | M] () -- C:\Users\Administrator\AppData\Roaming\mozilla\firefox\profiles\zq5263z3.default\searchplugins\delta.xml
[2013-07-18 20:33:02 | 000,001,582 | ---- | M] () -- C:\Users\Administrator\AppData\Roaming\mozilla\firefox\profiles\zq5263z3.default\searchplugins\_delta.xml
[2014-02-06 11:50:07 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2014-02-06 11:50:12 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - homepage: http://www.google.pl/
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: http://www.google.pl/
CHR - Extension: Websteroids = C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb\2.6.53_0\
 
O1 HOSTS File: ([2009-06-10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O3 - HKLM\..\Toolbar: (My Web Search) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\2.bin\MWSBAR.DLL File not found
O3 - HKLM\..\Toolbar: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\S-1-5-21-1469707236-2288353759-1584227296-500\..\Toolbar\WebBrowser: (My Web Search) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\2.bin\MWSBAR.DLL File not found
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask)
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [freeSoftToday_widget] C:\Program Files\fst_en_2\freeSoftToday_widget.exe ()
O4 - HKLM..\Run: [fst_en_2] C:\Program Files\fst_en_2\fst_en_2.exe ()
O4 - HKLM..\Run: [HControlUser] C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4 - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SAIICpl.exe ()
O4 - HKLM..\Run: [SSDMonitor] C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe (PC Tools)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [Updater] C:\ProgramData\Updater\updater.exe (Updater)
O4 - HKLM..\Run: [Wireless Console 3] C:\Program Files\ASUS\Wireless Console 3\wcourier.exe ()
O4 - HKU\S-1-5-21-1469707236-2288353759-1584227296-500..\Run: [ares] C:\Program Files\Ares\Ares.exe (Ares Development Group)
O4 - HKU\S-1-5-21-1469707236-2288353759-1584227296-500..\Run: [ChomikBox] C:\Program Files\ChomikBox\chomikbox.exe File not found
O4 - HKU\S-1-5-21-1469707236-2288353759-1584227296-500..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent File not found
O4 - HKU\S-1-5-21-1469707236-2288353759-1584227296-500..\Run: [Facebook Update] C:\Users\Administrator\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKU\S-1-5-21-1469707236-2288353759-1584227296-500..\Run: [Galileo] C:\Users\Administrator\AppData\Local\Galileo\galileo.exe ()
O4 - HKU\S-1-5-21-1469707236-2288353759-1584227296-500..\Run: [GG] C:\Users\Administrator\AppData\Local\GG\Application\gghub.exe (GG Network S.A.)
O4 - HKU\S-1-5-21-1469707236-2288353759-1584227296-500..\Run: [IPLA!] C:\Program Files\ipla\ipla.exe (Redefine Sp z o.o.)
O4 - HKU\S-1-5-21-1469707236-2288353759-1584227296-500..\Run: [Updater] C:\ProgramData\Updater\updater.exe (Updater)
O4 - HKLM..\RunOnce: [upfst_en_2.exe] C:\Users\Administrator\AppData\Local\fst_en_2\upfst_en_2.exe ()
O4 - HKU\.DEFAULT..\RunOnce: [SPReview] C:\Windows\System32\SPReview\SPReview.exe (Microsoft Corporation)
O4 - HKU\S-1-5-18..\RunOnce: [SPReview] C:\Windows\System32\SPReview\SPReview.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk = C:\Program Files\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\S-1-5-21-1469707236-2288353759-1584227296-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = FF 00 00 00  [binary data]
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5EF89676-AE97-451B-A917-54B06F8AB786}: DhcpNameServer = 194.204.159.1 194.204.152.34
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{63E59D7A-8300-4866-9784-2A42CB844C0C}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll File not found
O20 - AppInit_DLLs: (C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll) -  File not found
O20 - AppInit_DLLs: (c:\progra~2\bitguard\271832~1.68\{c16c1~1\bitguard.dll) -  File not found
O20 - AppInit_DLLs: (c:\progra~1\optimi~1\optpro~1.dll) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2007-06-12 16:34:56 | 000,000,047 | R--- | M] () - E:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{17207864-2d23-11e3-a1ef-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{17207864-2d23-11e3-a1ef-806e6f6e6963}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{2b386464-0e1c-11e0-90f4-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{2b386464-0e1c-11e0-90f4-806e6f6e6963}\Shell\AutoRun\command - "" = E:\Install.exe -- [2007-04-26 16:43:44 | 003,112,960 | R--- | M] ()
O33 - MountPoints2\{2ea0ac91-2d20-11e3-803b-bcaec50b3d3b}\Shell - "" = AutoRun
O33 - MountPoints2\{2ea0ac91-2d20-11e3-803b-bcaec50b3d3b}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{50b6344f-3b0b-11e3-800c-4e5d6071cced}\Shell - "" = AutoRun
O33 - MountPoints2\{50b6344f-3b0b-11e3-800c-4e5d6071cced}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{601e8c05-7c85-11e3-8c7e-4e5d6071cced}\Shell - "" = AutoRun
O33 - MountPoints2\{601e8c05-7c85-11e3-8c7e-4e5d6071cced}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{601e8c1d-7c85-11e3-8c7e-4e5d6071cced}\Shell - "" = AutoRun
O33 - MountPoints2\{601e8c1d-7c85-11e3-8c7e-4e5d6071cced}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{809f2547-2d25-11e3-937f-bcaec50b3d3b}\Shell - "" = AutoRun
O33 - MountPoints2\{809f2547-2d25-11e3-937f-bcaec50b3d3b}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{d8e466f7-57ae-11e0-b1f9-bcaec50b3d3b}\Shell - "" = AutoRun
O33 - MountPoints2\{d8e466f7-57ae-11e0-b1f9-bcaec50b3d3b}\Shell\AutoRun\command - "" = H:\autorun.exe
O33 - MountPoints2\{d8e466f7-57ae-11e0-b1f9-bcaec50b3d3b}\Shell\readme\command - "" = notepad readme.txt
O33 - MountPoints2\{d8e466f7-57ae-11e0-b1f9-bcaec50b3d3b}\Shell\Setup\command - "" = H:\install.exe
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2014-02-10 11:18:22 | 004,393,112 | ---- | C] (TeamViewer) -- C:\Users\Administrator\Desktop\TeamViewerQS_pl(2).exe
[2014-02-10 10:54:16 | 004,393,112 | ---- | C] (TeamViewer) -- C:\Users\Administrator\Desktop\TeamViewerQS_pl(1).exe
[2014-02-10 09:39:32 | 000,104,960 | ---- | C] (GMER) -- C:\uwddakob.sys
[2014-02-10 09:38:52 | 000,000,000 | ---D | C] -- C:\Users\Administrator\Desktop\czyszczenie
[2014-02-10 09:32:58 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Roaming\TeamViewer
[2014-02-10 09:32:21 | 004,393,112 | ---- | C] (TeamViewer) -- C:\Users\Administrator\Desktop\TeamViewerQS_pl.exe
[2014-02-08 12:25:00 | 044,126,208 | -H-- | C] (MetaGeek, LLC) -- C:\Users\Administrator\hqnwnkie.exe
[2014-02-08 12:24:41 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\ESET
[2014-02-08 12:22:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
[2014-02-08 12:22:01 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET
[2014-02-08 12:22:01 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2014-02-08 00:38:32 | 000,000,000 | ---D | C] -- C:\ProgramData\InternetUpdater
[2014-02-08 00:35:02 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
[2014-02-08 00:35:01 | 000,000,000 | ---D | C] -- C:\Program Files\MyPC Backup
[2014-02-08 00:34:35 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Roaming\Systweak
[2014-02-08 00:34:33 | 000,018,776 | ---- | C] (Systweak Inc., (www.systweak.com)) -- C:\Windows\System32\roboot.exe
[2014-02-08 00:34:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro
[2014-02-08 00:34:30 | 000,000,000 | ---D | C] -- C:\Program Files\RegClean Pro
[2014-02-08 00:33:47 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\freeSOFTtoday
[2014-02-08 00:33:43 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\fst_en_2
[2014-02-08 00:33:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FREESOFTTODAY
[2014-02-08 00:33:42 | 000,000,000 | ---D | C] -- C:\Program Files\fst_en_2
[2014-02-08 00:28:28 | 000,000,000 | ---D | C] -- C:\Users\Administrator\Documents\Optimizer Pro
[2014-02-08 00:28:28 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Roaming\Optimizer Pro
[2014-02-08 00:28:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2
[2014-02-08 00:28:06 | 000,000,000 | ---D | C] -- C:\Program Files\Optimizer Pro
[2014-02-08 00:28:05 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\SearchProtect
[2014-02-08 00:28:05 | 000,000,000 | ---D | C] -- C:\Program Files\SearchProtect
[2014-02-08 00:28:04 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\Programs
[2014-02-08 00:28:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Updater
[2014-02-08 00:28:03 | 000,000,000 | ---D | C] -- C:\ProgramData\RHelpers
[2014-02-08 00:28:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Websteroids
[2014-02-08 00:27:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Begin Converter
[2014-02-08 00:27:36 | 000,000,000 | ---D | C] -- C:\Program Files\Begin Converter
[2014-02-06 11:50:06 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2014-02-01 13:31:29 | 000,000,000 | ---D | C] -- C:\Users\Administrator\Documents\angielski
[2014-01-31 14:51:35 | 000,000,000 | -HSD | C] -- C:\Windows\ftpcache
[2014-01-29 23:07:10 | 001,069,920 | ---- | C] (Solid State Networks) -- C:\Users\Administrator\Desktop\install_reader11_pl_mssa_aaa_aih.exe
[2014-01-29 12:22:45 | 000,000,000 | ---D | C] -- C:\Users\Administrator\Desktop\australia
[2014-01-17 20:11:08 | 002,349,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2014-01-17 20:05:57 | 000,240,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys
[2014-01-17 20:00:40 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbport.sys
[2014-01-17 20:00:40 | 000,006,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbd.sys
[2014-01-13 20:13:06 | 000,000,000 | ---D | C] -- C:\Users\Administrator\Desktop\My Shared Folder
[2014-01-13 20:07:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Internet Manager
[2014-01-13 20:07:40 | 000,000,000 | ---D | C] -- C:\ProgramData\DataCardService
[2014-01-13 20:07:31 | 001,112,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WdfCoInstaller01007.dll
[2014-01-13 20:07:31 | 001,112,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\WdfCoInstaller01007.dll
[2014-01-13 20:07:31 | 000,861,696 | ---- | C] (DiBcom SA) -- C:\Windows\System32\drivers\mod7700.sys
[2014-01-13 20:07:31 | 000,349,184 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ewusbwwan.sys
[2014-01-13 20:07:31 | 000,194,816 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ewusbmdm.sys
[2014-01-13 20:07:31 | 000,181,760 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_juwwanecm.sys
[2014-01-13 20:07:31 | 000,102,784 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_hwusbdev.sys
[2014-01-13 20:07:31 | 000,090,368 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_jucdcacm.sys
[2014-01-13 20:07:31 | 000,073,216 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_jubusenum.sys
[2014-01-13 20:07:31 | 000,064,384 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_jucdcecm.sys
[2014-01-13 20:07:31 | 000,026,624 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_juextctrl.sys
[2014-01-13 20:07:31 | 000,025,856 | ---- | C] (Huawei Tech. Co., Ltd.) -- C:\Windows\System32\drivers\ewdcsc.sys
[2014-01-13 20:07:31 | 000,019,200 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_hwupgrade.sys
[2014-01-13 20:07:31 | 000,011,136 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_usbenumfilter.sys
[2014-01-13 20:06:56 | 000,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Roaming\Administrator
[2014-01-13 20:06:54 | 000,724,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bmutil.dll
[2014-01-13 20:06:54 | 000,480,384 | ---- | C] (Bytemobile, Inc.) -- C:\Windows\System32\bmnet.dll
[2014-01-13 20:06:54 | 000,308,352 | ---- | C] (Bytemobile, Inc.) -- C:\Windows\System32\bminstall.dll
[2014-01-13 20:06:54 | 000,132,224 | ---- | C] (Bytemobile, Inc.) -- C:\Windows\System32\bmdumpd.bin
[2014-01-13 20:06:54 | 000,024,192 | ---- | C] (Bytemobile, Inc.) -- C:\Windows\System32\drivers\tcpipBM.sys
[2014-01-13 20:06:54 | 000,013,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sporder.dll
[2014-01-13 20:06:54 | 000,013,184 | ---- | C] (Bytemobile, Inc.) -- C:\Windows\System32\drivers\BMLoad.sys
[2014-01-13 20:06:48 | 000,419,168 | ---- | C] (Microsoft Corporation) -- C:\Users\Administrator\Desktop\msvcp60.dll
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2014-02-10 13:56:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014-02-10 12:49:03 | 000,000,960 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1469707236-2288353759-1584227296-500UA.job
[2014-02-10 11:18:52 | 004,393,112 | ---- | M] (TeamViewer) -- C:\Users\Administrator\Desktop\TeamViewerQS_pl(2).exe
[2014-02-10 11:16:37 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014-02-10 10:55:18 | 000,010,240 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014-02-10 10:55:18 | 000,010,240 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014-02-10 10:54:32 | 004,393,112 | ---- | M] (TeamViewer) -- C:\Users\Administrator\Desktop\TeamViewerQS_pl(1).exe
[2014-02-10 10:47:33 | 000,000,288 | ---- | M] () -- C:\Windows\tasks\RMAutoUpdate.job
[2014-02-10 10:47:16 | 2350,284,800 | -HS- | M] () -- C:\hiberfil.sys
[2014-02-10 09:39:32 | 000,104,960 | ---- | M] (GMER) -- C:\uwddakob.sys
[2014-02-10 09:38:41 | 002,629,049 | ---- | M] () -- C:\Users\Administrator\Desktop\czyszczenie.zip
[2014-02-10 09:32:34 | 004,393,112 | ---- | M] (TeamViewer) -- C:\Users\Administrator\Desktop\TeamViewerQS_pl.exe
[2014-02-09 15:02:12 | 000,000,280 | ---- | M] () -- C:\Windows\tasks\RegClean Pro_DEFAULT.job
[2014-02-08 12:25:01 | 044,126,208 | -H-- | M] (MetaGeek, LLC) -- C:\Users\Administrator\hqnwnkie.exe
[2014-02-08 12:18:06 | 025,018,368 | ---- | M] () -- C:\Users\Administrator\Desktop\logmein.msi
[2014-02-08 12:16:30 | 065,544,192 | ---- | M] () -- C:\Users\Administrator\Desktop\eav_nt32_plk.msi
[2014-02-08 10:59:49 | 000,779,479 | ---- | M] () -- C:\Users\Administrator\Desktop\zdjęcie pulpitu.png
[2014-02-08 01:07:57 | 000,000,288 | ---- | M] () -- C:\Windows\tasks\RegClean Pro_UPDATES.job
[2014-02-08 00:35:03 | 000,001,055 | ---- | M] () -- C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
[2014-02-05 23:56:26 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2014-02-05 23:56:26 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2014-02-05 10:53:11 | 000,741,366 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2014-02-05 10:53:11 | 000,655,090 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2014-02-05 10:53:11 | 000,155,930 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2014-02-05 10:53:11 | 000,121,962 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2014-01-30 12:43:21 | 000,234,275 | ---- | M] () -- C:\Users\Administrator\Desktop\1798328_200427016832197_409864731_o.jpg
[2014-01-30 12:42:54 | 000,289,679 | ---- | M] () -- C:\Users\Administrator\Desktop\1426194_200427033498862_245874255_o.jpg
[2014-01-30 12:41:09 | 000,024,370 | ---- | M] () -- C:\Users\Administrator\Desktop\1616582_200426966832202_1159568905_n.jpg
[2014-01-30 12:28:22 | 000,194,505 | ---- | M] () -- C:\Users\Administrator\Desktop\1624067_655528447842855_935274060_o.jpg
[2014-01-29 23:07:11 | 001,069,920 | ---- | M] (Solid State Networks) -- C:\Users\Administrator\Desktop\install_reader11_pl_mssa_aaa_aih.exe
[2014-01-29 15:37:00 | 000,000,494 | -H-- | M] () -- C:\Windows\tasks\Norton Security Scan for Administrator.job
[2014-01-27 06:04:49 | 000,000,290 | ---- | M] () -- C:\Windows\tasks\RMSchedule.job
[2014-01-24 21:49:04 | 000,000,938 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1469707236-2288353759-1584227296-500Core.job
[2014-01-24 20:42:29 | 000,420,752 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2014-01-13 20:09:16 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_ew_juextctrl_01007.Wdf
[2014-01-13 20:09:00 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf
[2014-01-13 20:07:40 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
[2014-01-13 20:06:47 | 001,112,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WdfCoInstaller01007.dll
[2014-01-13 20:06:47 | 001,112,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\WdfCoInstaller01007.dll
[2014-01-13 20:06:47 | 000,861,696 | ---- | M] (DiBcom SA) -- C:\Windows\System32\drivers\mod7700.sys
[2014-01-13 20:06:47 | 000,349,184 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ewusbwwan.sys
[2014-01-13 20:06:47 | 000,194,816 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ewusbmdm.sys
[2014-01-13 20:06:47 | 000,181,760 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_juwwanecm.sys
[2014-01-13 20:06:47 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_hwusbdev.sys
[2014-01-13 20:06:47 | 000,090,368 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_jucdcacm.sys
[2014-01-13 20:06:47 | 000,073,216 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_jubusenum.sys
[2014-01-13 20:06:47 | 000,064,384 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_jucdcecm.sys
[2014-01-13 20:06:47 | 000,026,624 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_juextctrl.sys
[2014-01-13 20:06:47 | 000,025,856 | ---- | M] (Huawei Tech. Co., Ltd.) -- C:\Windows\System32\drivers\ewdcsc.sys
[2014-01-13 20:06:47 | 000,024,192 | ---- | M] (Bytemobile, Inc.) -- C:\Windows\System32\drivers\tcpipBM.sys
[2014-01-13 20:06:47 | 000,019,200 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_hwupgrade.sys
[2014-01-13 20:06:47 | 000,013,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sporder.dll
[2014-01-13 20:06:47 | 000,013,184 | ---- | M] (Bytemobile, Inc.) -- C:\Windows\System32\drivers\BMLoad.sys
[2014-01-13 20:06:47 | 000,011,136 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\System32\drivers\ew_usbenumfilter.sys
[2014-01-13 20:06:44 | 000,419,168 | ---- | M] (Microsoft Corporation) -- C:\Users\Administrator\Desktop\msvcp60.dll
[2014-01-13 20:06:42 | 000,724,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bmutil.dll
[2014-01-13 20:06:42 | 000,480,384 | ---- | M] (Bytemobile, Inc.) -- C:\Windows\System32\bmnet.dll
[2014-01-13 20:06:41 | 000,308,352 | ---- | M] (Bytemobile, Inc.) -- C:\Windows\System32\bminstall.dll
[2014-01-13 20:06:41 | 000,295,776 | ---- | M] (Microsoft Corporation) -- C:\Users\Administrator\Desktop\subinacl.exe
[2014-01-13 20:06:39 | 000,132,224 | ---- | M] (Bytemobile, Inc.) -- C:\Windows\System32\bmdumpd.bin
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2014-02-10 09:38:23 | 002,629,049 | ---- | C] () -- C:\Users\Administrator\Desktop\czyszczenie.zip
[2014-02-08 12:12:38 | 025,018,368 | ---- | C] () -- C:\Users\Administrator\Desktop\logmein.msi
[2014-02-08 12:05:34 | 065,544,192 | ---- | C] () -- C:\Users\Administrator\Desktop\eav_nt32_plk.msi
[2014-02-08 10:59:49 | 000,779,479 | ---- | C] () -- C:\Users\Administrator\Desktop\zdjęcie pulpitu.png
[2014-02-08 00:35:03 | 000,001,055 | ---- | C] () -- C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
[2014-02-08 00:34:47 | 000,000,288 | ---- | C] () -- C:\Windows\tasks\RegClean Pro_UPDATES.job
[2014-02-08 00:34:47 | 000,000,280 | ---- | C] () -- C:\Windows\tasks\RegClean Pro_DEFAULT.job
[2014-01-30 12:43:20 | 000,234,275 | ---- | C] () -- C:\Users\Administrator\Desktop\1798328_200427016832197_409864731_o.jpg
[2014-01-30 12:42:53 | 000,289,679 | ---- | C] () -- C:\Users\Administrator\Desktop\1426194_200427033498862_245874255_o.jpg
[2014-01-30 12:41:07 | 000,024,370 | ---- | C] () -- C:\Users\Administrator\Desktop\1616582_200426966832202_1159568905_n.jpg
[2014-01-30 12:28:21 | 000,194,505 | ---- | C] () -- C:\Users\Administrator\Desktop\1624067_655528447842855_935274060_o.jpg
[2014-01-13 20:09:16 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_ew_juextctrl_01007.Wdf
[2014-01-13 20:09:00 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf
[2014-01-13 20:07:40 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
[2013-07-19 08:28:13 | 000,000,105 | ---- | C] () -- C:\Windows\KA.ini
[2012-07-17 12:24:44 | 000,037,336 | ---- | C] () -- C:\Windows\System32\CleanMFT32.exe
[2011-04-04 09:27:34 | 000,008,095 | ---- | C] () -- C:\Users\Administrator\.recently-used.xbel
[2011-03-26 10:20:25 | 000,003,584 | ---- | C] () -- C:\Users\Administrator\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-02-20 17:40:08 | 000,000,066 | ---- | C] () -- C:\Users\Administrator\AppData\Local\Images.fl
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009-07-14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013-07-26 02:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009-07-14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012-09-14 14:28:05 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\.minecraft
[2014-01-13 20:06:56 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\Administrator
[2013-07-18 20:33:22 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\BabSolution
[2013-07-18 20:32:50 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\Babylon
[2011-03-26 14:52:58 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\DAEMON Tools Lite
[2013-07-18 20:33:17 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\Delta
[2011-01-30 12:25:46 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\Disney Interactive Studios
[2013-02-10 09:55:35 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\Gadu-Gadu 10
[2014-02-10 14:34:08 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\GG
[2011-04-04 09:27:34 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\gtk-2.0
[2014-02-10 14:34:23 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\ipla
[2013-11-04 19:42:23 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\iPlus
[2011-08-23 15:18:01 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\MAGIX
[2011-01-02 13:07:21 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\OpenFM
[2010-12-23 02:21:54 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\Opera
[2014-02-08 00:28:28 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\Optimizer Pro
[2011-12-31 16:25:40 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\PhotoFiltre
[2011-04-02 10:41:12 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\PhotoFiltre Studio X
[2011-07-24 18:51:15 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\PhotoScape
[2011-07-26 14:28:29 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\RDRM
[2012-07-21 18:01:09 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\Registry Mechanic
[2014-02-08 00:34:35 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\Systweak
[2014-02-10 09:32:58 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\TeamViewer
[2011-07-30 21:28:39 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\Unity
[2013-02-16 20:49:24 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\uTorrent
[2011-08-22 08:14:42 | 000,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\VSO
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 98 bytes -> C:\ProgramData\TEMP:D1B5B4F1
@Alternate Data Stream - 1563784 bytes -> C:\Windows\Temp:temp
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:0DFE2AE1
@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:373E1720
@Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:6BD304B9

< End of report >