OTL logfile created on: 2014-02-18 19:27:52 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\oem\Desktop Windows Vista Business Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,45 Gb Total Physical Memory | 1,89 Gb Available Physical Memory | 54,89% Memory free 7,09 Gb Paging File | 5,48 Gb Available in Paging File | 77,29% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 78,12 Gb Total Space | 41,28 Gb Free Space | 52,85% Space Free | Partition Type: NTFS Drive E: | 70,68 Gb Total Space | 51,97 Gb Free Space | 73,52% Space Free | Partition Type: NTFS Computer Name: OEM-PC | User Name: oem | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2014-02-18 19:23:17 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\oem\Desktop\OTL.exe PRC - [2014-02-12 20:01:08 | 003,767,096 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2014-02-12 20:01:07 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2014-02-04 20:33:13 | 000,840,072 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\Macromed\Flash\FlashUtil32_12_0_0_44_ActiveX.exe PRC - [2013-12-18 19:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2013-11-15 01:48:30 | 001,861,968 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe PRC - [2013-01-30 11:35:48 | 000,058,288 | ---- | M] (Absolute Software Corp.) -- C:\Windows\System32\rpcnet.exe PRC - [2013-01-25 00:40:00 | 000,160,544 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvservice.exe PRC - [2010-08-05 17:19:10 | 002,062,872 | ---- | M] (Intel Corporation) -- C:\Program Files\Common Files\Intel\Privacy Icon\UNS\UNS.exe PRC - [2010-08-05 17:19:10 | 000,358,424 | ---- | M] (Intel Corporation) -- C:\Program Files\Common Files\Intel\Privacy Icon\PrivacyIconClient.exe PRC - [2010-08-05 17:19:10 | 000,178,712 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\AMT\LMS.exe PRC - [2010-03-23 23:09:28 | 000,812,448 | ---- | M] (Broadcom Corporation) -- C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe PRC - [2010-03-23 23:09:28 | 000,027,040 | ---- | M] (Broadcom Corporation) -- C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe PRC - [2009-04-11 14:19:56 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009-03-25 18:18:38 | 000,791,840 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe PRC - [2009-03-25 18:18:38 | 000,578,848 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe PRC - [2008-04-30 15:26:22 | 000,196,608 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\Apoint.exe PRC - [2008-03-21 19:32:04 | 000,046,376 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\ApMsgFwd.exe PRC - [2008-01-21 03:23:59 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe PRC - [2007-10-25 16:23:36 | 000,049,152 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\ApntEx.exe PRC - [2006-09-08 14:10:22 | 000,040,960 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\DellTPad\hidfind.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2014-02-16 14:02:32 | 000,978,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\d17ceca243fabda73eefb21d9bd072df\System.Configuration.ni.dll MOD - [2014-02-16 13:01:24 | 005,462,016 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\f87e71868aedbc6c4e8fe7160d17c4ab\System.Xml.ni.dll MOD - [2014-02-16 13:01:10 | 012,434,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d2b605fc7deda872727d1ed37710420e\System.Windows.Forms.ni.dll MOD - [2014-02-16 13:01:03 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\8e6265a54260bddfc05951e764f5bc48\System.Drawing.ni.dll MOD - [2014-02-16 13:00:07 | 007,977,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\957628d9dd7b3bf370a56dca7835a997\System.ni.dll MOD - [2014-02-16 13:00:00 | 011,497,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\694a37a84dee2cd2609a1dfab27c0433\mscorlib.ni.dll MOD - [2013-11-19 19:09:04 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll MOD - [2013-11-15 01:49:56 | 000,100,688 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll MOD - [2013-11-15 01:48:30 | 001,861,968 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe MOD - [2009-04-13 08:08:42 | 000,015,360 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Drawing.resources\2.0.0.0_pl_b03f5f7f11d50a3a\System.Drawing.resources.dll MOD - [2009-04-13 08:08:36 | 000,425,984 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_pl_b77a5c561934e089\System.Windows.Forms.resources.dll MOD - [2009-04-13 08:08:35 | 000,208,896 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_pl_b77a5c561934e089\System.resources.dll MOD - [2009-03-25 18:06:26 | 000,126,976 | ---- | M] () -- C:\Program Files\WIDCOMM\Bluetooth Software\BTKeyInd.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - [2014-02-12 20:01:07 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV - [2014-02-04 21:33:10 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2013-12-18 19:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2013-02-04 17:43:22 | 000,155,824 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion) SRV - [2013-01-30 11:35:48 | 000,058,288 | ---- | M] (Absolute Software Corp.) [Auto | Running] -- C:\Windows\System32\rpcnet.exe -- (rpcnet) SRV - [2013-01-25 00:40:00 | 000,160,544 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Windows\System32\nvservice.exe -- (nvservice) SRV - [2010-12-28 09:00:34 | 001,296,728 | ---- | M] (www.BitComet.com) [On_Demand | Stopped] -- C:\Program Files\BitComet\tools\BitCometService.exe -- (BITCOMET_HELPER_SERVICE) SRV - [2010-08-05 17:19:10 | 002,062,872 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\Privacy Icon\UNS\UNS.exe -- (UNS) SRV - [2010-08-05 17:19:10 | 000,178,712 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\AMT\LMS.exe -- (LMS) SRV - [2010-03-23 23:09:28 | 000,812,448 | ---- | M] (Broadcom Corporation) [Auto | Running] -- C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe -- (Credential Vault Host Control Service) SRV - [2010-03-23 23:09:28 | 000,027,040 | ---- | M] (Broadcom Corporation) [Auto | Running] -- C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe -- (Credential Vault Host Storage) SRV - [2009-08-24 20:16:36 | 000,406,016 | ---- | M] (mst software GmbH, Germany) [On_Demand | Stopped] -- C:\Program Files\Ashampoo\Ashampoo UnInstaller 5\DfSdkS.exe -- (DfSdkS) SRV - [2009-03-25 18:18:38 | 000,578,848 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins) SRV - [2008-01-21 03:23:59 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2007-05-31 15:21:24 | 000,379,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2007-05-31 15:21:18 | 000,183,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp) DRV - [2014-02-12 20:01:13 | 000,775,952 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx) DRV - [2014-02-12 20:01:13 | 000,057,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2014-02-12 20:01:12 | 000,410,784 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP) DRV - [2014-02-12 20:01:12 | 000,067,824 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt) DRV - [2014-02-12 20:01:12 | 000,054,832 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (AswRdr) DRV - [2013-12-29 18:33:35 | 000,180,248 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswVmm.sys -- (aswVmm) DRV - [2013-12-29 17:50:38 | 000,232,136 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\e1y6032.sys -- (e1yexpress) DRV - [2013-11-19 19:09:05 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswRvrt.sys -- (aswRvrt) DRV - [2013-05-12 12:51:28 | 000,203,680 | ---- | M] (Jungo Connectivity) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\windrvr6.sys -- (WinDriver6) DRV - [2013-04-18 16:58:20 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV - [2013-02-13 11:12:06 | 000,073,576 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ftser2k.sys -- (FTSER2K) DRV - [2013-02-13 11:12:06 | 000,063,464 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ftdibus.sys -- (FTDIBUS) DRV - [2012-11-15 11:47:34 | 000,033,192 | ---- | M] () [File_System | Auto | Running] -- C:\Program Files\Ashampoo\Ashampoo UnInstaller 5\IFS32.sys -- (UI5IFS) DRV - [2010-05-02 16:29:55 | 000,108,640 | ---- | M] (Your Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Mach3.sys -- (Mach3) DRV - [2010-03-15 07:44:46 | 000,127,488 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IntcHdmi.sys -- (IntcHdmiAddService) DRV - [2009-11-03 16:40:42 | 000,033,832 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\cvusbdrv.sys -- (cvusbdrv) DRV - [2009-11-03 16:40:42 | 000,012,840 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ccidflt.sys -- (CCIDFILTER) DRV - [2009-07-14 00:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (winusb) DRV - [2009-06-23 13:49:58 | 000,040,832 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\HECI.sys -- (HECI) DRV - [2009-06-16 13:59:00 | 009,768,640 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2009-04-11 14:19:27 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\usbccid.sys -- (USBCCID) DRV - [2009-04-06 10:25:34 | 000,049,192 | ---- | M] (Dell) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\d553scard.sys -- (d553scard) DRV - [2009-01-08 09:30:28 | 000,077,352 | ---- | M] (Dell) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\d553gps.sys -- (d553gps) DRV - [2008-12-19 12:41:46 | 000,409,216 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\d553mdm2.sys -- (d553mdm2) DRV - [2008-12-19 12:41:46 | 000,375,424 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\d553unic.sys -- (d553unic) DRV - [2008-12-19 12:41:46 | 000,365,312 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\d553mdm.sys -- (d553mdm) DRV - [2008-12-19 12:41:46 | 000,356,352 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\d553card.sys -- (d553card) DRV - [2008-12-19 12:41:46 | 000,281,216 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\d553bus.sys -- (d553bus) DRV - [2008-12-19 12:41:46 | 000,025,984 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\d553nd5.sys -- (d553nd5) DRV - [2008-12-19 12:41:46 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\d553mdfl2.sys -- (d553mdfl2) DRV - [2008-12-19 12:41:46 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\d553mdfl.sys -- (d553mdfl) DRV - [2008-11-05 22:20:24 | 000,048,128 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk) DRV - [2008-10-09 14:42:42 | 000,017,408 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\KMWDFILTER.sys -- (KMWDFILTER) DRV - [2008-06-26 05:30:50 | 003,662,848 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NETw5v32.sys -- (NETw5v32) DRV - [2008-06-04 13:14:00 | 000,026,608 | ---- | M] (Dell Inc) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\PBADRV.sys -- (PBADRV) DRV - [2008-04-18 21:43:40 | 000,170,032 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2018924771-1406736082-2722136750-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = www.bing.com IE - HKU\S-1-5-21-2018924771-1406736082-2722136750-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR IE - HKU\S-1-5-21-2018924771-1406736082-2722136750-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKU\S-1-5-21-2018924771-1406736082-2722136750-1000\..\SearchScopes,DefaultScope = {289831E0-023E-42FF-8BA4-D68E78CD123E} IE - HKU\S-1-5-21-2018924771-1406736082-2722136750-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\S-1-5-21-2018924771-1406736082-2722136750-1000\..\SearchScopes\{289831E0-023E-42FF-8BA4-D68E78CD123E}: "URL" = http://www.google.com/search?hl=pl&q={searchTerms}&rlz= IE - HKU\S-1-5-21-2018924771-1406736082-2722136750-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_44.dll () FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Web Player Plug-In,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) [2013-04-18 17:36:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\oem\AppData\Roaming\mozilla\Extensions [2013-04-18 16:59:17 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}, CHR - Extension: Google Wallet = C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0\ CHR - Extension: Google Wallet = C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\ CHR - Extension: DivX Plus Web Player HTML5 \u003Cvideo\u003E = C:\Users\oem\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.172_0\ O1 HOSTS File: ([2006-09-18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O3 - HKLM\..\Toolbar: (avast! Online Security) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O4 - HKLM..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.) O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software) O4 - HKLM..\Run: [DivXMediaServer] C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe (DivX, LLC) O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe () O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NVHotkey] C:\Windows\System32\nvHotkey.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\Windows\System32\nwiz.exe () O4 - HKLM..\Run: [picon] C:\Program Files\Common Files\Intel\Privacy Icon\PIconStartup.exe () O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-21-2018924771-1406736082-2722136750-1000..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd) O4 - HKU\S-1-5-21-2018924771-1406736082-2722136750-1000..\Run: [DellSystemDetect] C:\Users\oem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dell\Dell System Detect.appref-ms File not found O8 - Extra context menu item: &P&obierz &za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O13 - gopher Prefix: missing O15 - HKU\S-1-5-21-2018924771-1406736082-2722136750-1000\..Trusted Domains: dell.com ([]* in Zaufane witryny) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{20077F7C-C46F-4047-BDD6-BFE150BFD25B}: DhcpNameServer = 62.233.233.233 87.204.204.204 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{741F9C5B-9908-4E1E-8720-1EC244F1303C}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7579A017-1D8D-4CC8-A74C-53E5D5CC515E}: DhcpNameServer = 62.233.233.233 87.204.204.204 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C31E79FE-4B50-4A38-8CC8-2956DCF73668}: DhcpNameServer = 62.233.233.233 87.204.204.204 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EC04EFDD-D9CE-4C0D-9AE2-8D02046C6252}: DhcpNameServer = 62.233.233.233 87.204.204.204 O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img24.jpg O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img24.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-09-18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{56910d64-5aac-11e3-91ca-002170d343c3}\Shell - "" = AutoRun O33 - MountPoints2\{56910d64-5aac-11e3-91ca-002170d343c3}\Shell\AutoRun\command - "" = G:\Startme.exe O33 - MountPoints2\{682d1ccc-d45a-11e2-92be-002170d343c3}\Shell - "" = AutoRun O33 - MountPoints2\{682d1ccc-d45a-11e2-92be-002170d343c3}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a O33 - MountPoints2\G\Shell - "" = AutoRun O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2014-02-18 19:23:17 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\oem\Desktop\OTL.exe [2014-02-17 19:57:36 | 001,095,461 | ---- | C] (pendrivelinux.com) -- C:\Users\oem\Desktop\Universal-USB-Installer-1.9.5.2.exe [2014-02-15 23:07:08 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2014-02-15 23:07:07 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2014-02-15 23:07:07 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2014-02-15 23:07:06 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2014-02-15 23:07:06 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2014-02-15 23:07:05 | 001,806,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2014-02-15 23:07:05 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2014-02-15 23:07:03 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2014-02-12 20:51:26 | 000,000,000 | ---D | C] -- C:\Users\oem\AppData\Roaming\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1 [2014-02-12 20:51:26 | 000,000,000 | ---D | C] -- C:\Users\oem\AppData\Roaming\e-Deklaracje [2014-02-12 20:51:14 | 000,000,000 | ---D | C] -- C:\Program Files\e-Deklaracje [2014-02-12 20:51:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe AIR [2014-02-07 19:18:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip [2014-02-07 19:18:37 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip [2014-02-06 20:19:34 | 000,000,000 | ---D | C] -- C:\Users\oem\AppData\Local\GHISLER [2014-02-02 19:18:07 | 000,000,000 | ---D | C] -- C:\Users\oem\Desktop\WINAPI [2014-02-02 17:59:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX [2014-01-28 20:04:03 | 000,000,000 | ---D | C] -- C:\Users\oem\AppData\Roaming\Dev-Cpp [2014-01-28 20:03:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bloodshed Dev-C++ [2014-01-28 20:03:06 | 000,000,000 | ---D | C] -- C:\Program Files\Dev-Cpp [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2014-02-18 19:26:04 | 000,001,030 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2014-02-18 19:23:17 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\oem\Desktop\OTL.exe [2014-02-18 19:07:10 | 000,017,920 | ---- | M] () -- C:\Windows\System32\rpcnetp.exe [2014-02-18 19:07:08 | 000,058,288 | ---- | M] (Absolute Software Corp.) -- C:\Windows\System32\rpcnet.dll [2014-02-18 19:06:51 | 000,001,026 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2014-02-18 19:06:45 | 000,009,728 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2014-02-18 19:06:45 | 000,009,728 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2014-02-18 19:06:39 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2014-02-18 19:05:37 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat [2014-02-17 21:33:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2014-02-17 20:51:43 | 000,000,049 | RHS- | M] () -- C:\ProgramData\3012.xml [2014-02-17 20:51:38 | 000,000,257 | RHS- | M] () -- C:\ProgramData\3003.xml [2014-02-17 20:51:29 | 000,000,099 | RHS- | M] () -- C:\ProgramData\3002.xml [2014-02-17 19:57:37 | 001,095,461 | ---- | M] (pendrivelinux.com) -- C:\Users\oem\Desktop\Universal-USB-Installer-1.9.5.2.exe [2014-02-17 18:48:33 | 000,017,920 | ---- | M] () -- C:\Windows\System32\rpcnetp.dll [2014-02-16 20:45:11 | 000,712,224 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2014-02-16 20:45:11 | 000,632,152 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2014-02-16 20:45:11 | 000,150,178 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2014-02-16 20:45:11 | 000,118,778 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2014-02-12 20:51:15 | 000,000,792 | ---- | M] () -- C:\Users\Public\Desktop\e-Deklaracje.lnk [2014-02-12 20:41:41 | 000,011,761 | ---- | M] () -- C:\Users\oem\AppData\Local\unins000.msg [2014-02-12 20:41:41 | 000,005,891 | ---- | M] () -- C:\Users\oem\AppData\Local\unins000.dat [2014-02-12 20:41:35 | 000,707,504 | ---- | M] () -- C:\Users\oem\AppData\Local\unins000.exe [2014-02-12 20:01:34 | 000,001,873 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk [2014-02-12 20:01:13 | 000,775,952 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys [2014-02-12 20:01:13 | 000,057,672 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys [2014-02-12 20:01:12 | 000,410,784 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys [2014-02-12 20:01:12 | 000,067,824 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys [2014-02-12 20:01:12 | 000,054,832 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr.sys [2014-02-12 20:01:11 | 000,270,240 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe [2014-02-12 20:01:11 | 000,043,152 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr [2014-02-05 09:56:17 | 001,806,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2014-02-05 09:49:56 | 001,427,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2014-02-05 09:49:14 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2014-02-05 09:48:56 | 000,065,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2014-02-05 09:48:40 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2014-02-05 09:47:57 | 000,607,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2014-02-05 09:47:16 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2014-02-05 09:46:50 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2014-02-04 21:33:10 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe [2014-02-04 21:33:10 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [2014-02-04 20:29:22 | 000,001,977 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2014-02-02 17:57:19 | 000,000,000 | ---- | M] () -- C:\END [2014-01-30 21:20:45 | 000,049,854 | ---- | M] () -- C:\Users\oem\Desktop\lwcl.rar [2014-01-30 17:17:55 | 000,366,691 | ---- | M] () -- C:\Users\oem\Desktop\main.pdf [2014-01-28 20:03:40 | 000,000,793 | ---- | M] () -- C:\Users\oem\Desktop\Dev-C++.lnk [2014-01-28 17:46:21 | 000,425,887 | ---- | M] () -- C:\Users\oem\Desktop\rtos.zip [2014-01-28 15:30:33 | 004,216,205 | ---- | M] () -- C:\Users\oem\Desktop\EmWi Tutorial - Basics.pdf [2014-01-25 21:59:32 | 004,782,829 | ---- | M] () -- C:\Users\oem\Desktop\Agregat.pdf [2014-01-25 21:59:29 | 002,359,824 | ---- | M] () -- C:\Users\oem\Desktop\Instrukcja-pab-2-1-230.pdf [color=#E56717]========== Files Created - No Company Name ==========[/color] [2014-02-12 20:51:15 | 000,000,804 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\e-Deklaracje.lnk [2014-02-12 20:51:15 | 000,000,792 | ---- | C] () -- C:\Users\Public\Desktop\e-Deklaracje.lnk [2014-02-12 20:41:41 | 000,707,504 | ---- | C] () -- C:\Users\oem\AppData\Local\unins000.exe [2014-02-12 20:39:59 | 000,011,761 | ---- | C] () -- C:\Users\oem\AppData\Local\unins000.msg [2014-02-12 20:39:58 | 000,005,891 | ---- | C] () -- C:\Users\oem\AppData\Local\unins000.dat [2014-02-02 17:57:19 | 000,000,000 | ---- | C] () -- C:\END [2014-01-30 21:21:11 | 000,009,720 | ---- | C] () -- C:\Users\oem\Desktop\main.cpp [2014-01-30 21:20:45 | 000,049,854 | ---- | C] () -- C:\Users\oem\Desktop\lwcl.rar [2014-01-30 17:17:55 | 000,366,691 | ---- | C] () -- C:\Users\oem\Desktop\main.pdf [2014-01-28 20:03:40 | 000,000,793 | ---- | C] () -- C:\Users\oem\Desktop\Dev-C++.lnk [2014-01-28 17:46:21 | 000,425,887 | ---- | C] () -- C:\Users\oem\Desktop\rtos.zip [2014-01-28 15:30:32 | 004,216,205 | ---- | C] () -- C:\Users\oem\Desktop\EmWi Tutorial - Basics.pdf [2014-01-25 21:59:32 | 004,782,829 | ---- | C] () -- C:\Users\oem\Desktop\Agregat.pdf [2014-01-25 21:59:29 | 002,359,824 | ---- | C] () -- C:\Users\oem\Desktop\Instrukcja-pab-2-1-230.pdf [2013-12-29 17:51:16 | 000,004,096 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll [2013-12-29 17:51:15 | 000,000,259 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config [2013-05-28 18:03:19 | 000,000,000 | -H-- | C] () -- C:\Windows\msds.dat [2013-05-12 15:30:49 | 000,000,016 | -H-- | C] () -- C:\Windows\System32\pnjq4pn.dll [2013-05-12 15:30:49 | 000,000,016 | -H-- | C] () -- C:\Windows\System32\esfvwsd.dll [2013-05-12 15:30:48 | 000,000,016 | -H-- | C] () -- C:\Windows\System32\zbu5p7w.dll [2013-05-12 15:30:48 | 000,000,016 | -H-- | C] () -- C:\Windows\System32\xx7ndyi.dll [2013-05-12 15:30:48 | 000,000,016 | -H-- | C] () -- C:\Windows\System32\pm7pexw.dll [2013-05-12 15:30:48 | 000,000,016 | -H-- | C] () -- C:\Windows\System32\mtjvcwk.dll [2013-05-12 15:30:48 | 000,000,016 | -H-- | C] () -- C:\Windows\System32\i932lq2.dll [2013-05-12 15:30:48 | 000,000,016 | -H-- | C] () -- C:\Windows\System32\haoo9kt.dll [2013-05-12 15:30:47 | 000,000,016 | -H-- | C] () -- C:\Windows\System32\vl8etol.dll [2013-05-12 15:30:47 | 000,000,016 | -H-- | C] () -- C:\Windows\System32\p8hsaao.dll [2013-05-12 15:30:47 | 000,000,016 | -H-- | C] () -- C:\Windows\System32\eip5aom.dll [2013-05-12 15:30:45 | 000,001,024 | ---- | C] () -- C:\Windows\System32\nf6oo2y.dll [2013-05-12 15:30:45 | 000,000,204 | ---- | C] () -- C:\Windows\System32\puk6h6k.dll [2013-05-12 15:30:45 | 000,000,016 | -H-- | C] () -- C:\Windows\System32\v074atw.dll [2013-05-12 15:30:44 | 000,001,024 | ---- | C] () -- C:\Windows\System32\grcauth2.dll [2013-05-12 15:30:44 | 000,001,024 | ---- | C] () -- C:\Windows\System32\grcauth1.dll [2013-05-12 15:30:44 | 000,000,100 | ---- | C] () -- C:\Windows\System32\prsgrc.dll [2013-05-12 15:30:43 | 000,000,016 | -H-- | C] () -- C:\Windows\System32\vnrdyab.dll [2013-05-12 15:30:40 | 000,000,000 | ---- | C] () -- C:\Windows\System32\ssprs.dll [2013-05-12 15:30:40 | 000,000,000 | ---- | C] () -- C:\Windows\System32\serauth2.dll [2013-05-12 15:30:40 | 000,000,000 | ---- | C] () -- C:\Windows\System32\serauth1.dll [2013-05-12 15:30:40 | 000,000,000 | ---- | C] () -- C:\Windows\System32\nsprs.dll [2013-05-12 15:30:40 | 000,000,000 | ---- | C] () -- C:\Windows\System32\clauth2.dll [2013-05-12 15:30:40 | 000,000,000 | ---- | C] () -- C:\Windows\System32\clauth1.dll [2013-05-12 14:55:32 | 000,645,632 | ---- | C] () -- C:\Windows\System32\xvidcore.dll [2013-05-12 14:55:32 | 000,240,640 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll [2013-05-12 14:55:14 | 000,715,038 | ---- | C] () -- C:\Windows\unins000.exe [2013-05-12 14:55:14 | 000,216,064 | ---- | C] ( ) -- C:\Windows\System32\lagarith.dll [2013-05-12 14:55:13 | 000,001,780 | ---- | C] () -- C:\Windows\unins000.dat [2013-05-07 17:31:09 | 000,000,024 | -HS- | C] () -- C:\Users\oem\AppData\Roaming\Win4665 Config DB.dlx [2013-05-07 17:31:09 | 000,000,024 | -HS- | C] () -- C:\Users\oem\AppData\Roaming\System3192SettingsDB.dat [2013-04-18 18:07:00 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe [2013-04-18 18:06:46 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll [2013-04-18 18:06:46 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll [2013-04-18 18:06:46 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll [2013-04-18 18:06:46 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll [2013-04-18 17:58:28 | 000,178,688 | ---- | C] () -- C:\Windows\System32\unrar.dll [2013-04-18 17:49:47 | 000,007,680 | ---- | C] () -- C:\Users\oem\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2013-04-18 16:42:57 | 000,180,248 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys [2013-04-18 16:42:56 | 000,049,944 | ---- | C] () -- C:\Windows\System32\drivers\aswRvrt.sys [2013-04-17 16:10:02 | 000,000,049 | RHS- | C] () -- C:\ProgramData\3012.xml [2013-04-17 16:10:01 | 000,003,104 | RHS- | C] () -- C:\ProgramData\3012.abs [2013-04-17 16:09:51 | 000,000,257 | RHS- | C] () -- C:\ProgramData\3003.xml [2013-04-17 16:09:48 | 000,048,560 | RHS- | C] () -- C:\ProgramData\3003.abs [2013-01-30 11:38:02 | 000,000,099 | RHS- | C] () -- C:\ProgramData\3002.xml [2013-01-30 11:38:00 | 000,019,472 | RHS- | C] () -- C:\ProgramData\3002.abs [2013-01-29 06:57:05 | 000,017,920 | ---- | C] () -- C:\Windows\System32\rpcnetp.dll [2013-01-29 06:56:39 | 000,017,920 | ---- | C] () -- C:\Windows\System32\rpcnetp.exe [2013-01-15 12:00:42 | 000,982,240 | ---- | C] () -- C:\Windows\System32\igkrng500.bin [2013-01-15 12:00:42 | 000,092,356 | ---- | C] () -- C:\Windows\System32\igfcg500m.bin [2013-01-15 12:00:42 | 000,005,120 | ---- | C] () -- C:\Windows\System32\HdmiCoin.dll [2013-01-15 12:00:41 | 000,439,308 | ---- | C] () -- C:\Windows\System32\igcompkrng500.bin [2012-10-04 13:13:01 | 000,000,012 | ---- | C] () -- C:\Windows\bthservsdp.dat [2012-10-03 18:39:42 | 000,206,216 | ---- | C] () -- C:\Windows\System32\bipbsp.dll [2012-10-03 18:39:40 | 000,308,624 | ---- | C] () -- C:\Windows\System32\brcmbsp.dll [2012-10-03 16:52:25 | 000,064,097 | ---- | C] () -- C:\ProgramData\nvModes.001 [2012-10-03 16:51:57 | 000,064,097 | ---- | C] () -- C:\ProgramData\nvModes.dat [2012-10-03 16:51:07 | 001,724,416 | ---- | C] () -- C:\Windows\System32\nvwdmcpl.dll [2012-10-03 16:51:07 | 001,657,376 | ---- | C] () -- C:\Windows\System32\nwiz.exe [2012-10-03 16:51:07 | 001,507,328 | ---- | C] () -- C:\Windows\System32\nView.dll [2012-10-03 16:51:07 | 001,101,824 | ---- | C] () -- C:\Windows\System32\nvwimg.dll [2012-10-03 16:51:07 | 000,466,944 | ---- | C] () -- C:\Windows\System32\nvShell.dll [2012-10-03 16:51:07 | 000,449,056 | ---- | C] () -- C:\Windows\System32\nvAppBar.exe [2012-10-03 16:51:07 | 000,267,296 | ---- | C] () -- C:\Windows\System32\nvTaskbar.exe [2012-10-03 16:50:37 | 000,080,368 | ---- | C] () -- C:\Windows\System32\pbadrvdll.dll [2012-10-03 14:53:14 | 000,001,356 | ---- | C] () -- C:\Users\oem\AppData\Local\d3d9caps.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2006-11-02 13:54:18 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012-06-08 18:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2009-04-11 14:19:56 | 000,614,912 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009-04-11 14:19:45 | 000,347,648 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2013-04-29 11:01:28 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\Ashampoo [2013-11-21 21:48:00 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\Atmel [2013-11-19 19:11:57 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\AVAST Software [2014-01-06 19:06:02 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\BitComet [2013-09-06 17:12:19 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\CadSoft [2013-05-12 14:55:22 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\CDXReader [2014-02-16 13:52:56 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\DAEMON Tools Lite [2014-01-28 20:05:28 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\Dev-Cpp [2014-02-12 20:51:26 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\e-Deklaracje [2014-02-12 20:51:26 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1 [2012-10-19 15:37:24 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\Ericsson [2014-02-17 19:46:26 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\GG [2013-04-29 10:03:47 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\GHISLER [2013-05-12 15:32:03 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\IAR Embedded Workbench [2013-12-29 17:48:03 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\IObit [2013-05-12 14:55:23 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\LavFilters [2013-06-25 18:27:41 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\pdfforge [2013-10-29 21:32:31 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\Samsung [2014-02-18 18:54:55 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\The Bat! Pwd [2013-11-23 21:43:54 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\VisualAssistAtmel [2012-10-19 15:21:14 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\WirelessManager [color=#E56717]========== Purity Check ==========[/color] < End of report >