OTL logfile created on: 2014-10-26 12:36:28 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Marcin K\Desktop\Download\otl 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17358) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 5,90 Gb Total Physical Memory | 3,26 Gb Available Physical Memory | 55,26% Memory free 11,80 Gb Paging File | 8,76 Gb Available in Paging File | 74,20% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 359,33 Gb Total Space | 231,48 Gb Free Space | 64,42% Space Free | Partition Type: NTFS Drive D: | 22,77 Gb Total Space | 2,42 Gb Free Space | 10,62% Space Free | Partition Type: NTFS Drive F: | 98,00 Mb Total Space | 82,45 Mb Free Space | 84,13% Space Free | Partition Type: FAT32 Drive H: | 316,25 Gb Total Space | 54,47 Gb Free Space | 17,22% Space Free | Partition Type: NTFS Computer Name: MARCINK-HP | User Name: Marcin K | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2014-10-26 12:26:03 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Marcin K\Desktop\Download\otl\OTL.exe PRC - [2014-10-10 03:04:06 | 000,854,344 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe PRC - [2014-09-25 14:13:55 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2014-09-13 01:52:04 | 036,414,624 | ---- | M] (Dropbox, Inc.) -- C:\Users\Marcin K\AppData\Roaming\Dropbox\bin\Dropbox.exe PRC - [2014-09-12 10:43:06 | 000,064,704 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2014-09-03 12:16:00 | 000,484,888 | ---- | M] (Sony Corporation) -- C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe PRC - [2014-09-03 12:07:42 | 002,707,992 | ---- | M] (Sony Corporation) -- C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe PRC - [2014-08-08 09:34:04 | 022,734,160 | ---- | M] (Google) -- C:\Program Files (x86)\Google\Drive\googledrivesync.exe PRC - [2014-06-29 20:56:08 | 004,086,432 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2014-06-29 20:56:08 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2014-06-29 20:55:56 | 000,106,488 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\afwServ.exe PRC - [2014-04-14 14:11:32 | 001,107,296 | ---- | M] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) -- C:\Users\Marcin K\AppData\Local\Apps\Evernote\Evernote\EvernoteClipper.exe PRC - [2014-01-16 09:34:08 | 000,495,248 | ---- | M] (Sony Corporation) -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe PRC - [2013-10-27 08:03:44 | 001,364,256 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe PRC - [2013-06-26 18:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe PRC - [2013-06-26 18:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe PRC - [2013-06-07 04:16:54 | 001,641,768 | ---- | M] (HP) -- C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe PRC - [2013-06-07 04:16:42 | 003,695,912 | ---- | M] (AuthenTec Inc.) -- C:\Program Files (x86)\HP SimplePass\TouchControl.exe PRC - [2013-06-07 04:16:28 | 004,073,768 | ---- | M] () -- C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe PRC - [2013-02-23 12:08:12 | 000,993,280 | ---- | M] (Andrey Gruber) -- C:\Program Files (x86)\PNotes\PNotes.exe PRC - [2012-11-05 15:14:34 | 001,343,904 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe PRC - [2012-10-08 16:15:50 | 000,039,808 | ---- | M] (Wacom Technology) -- C:\Program Files\Tablet\Pen\WacomHost.exe PRC - [2012-09-03 21:18:02 | 000,078,352 | ---- | M] (cyberlink) -- C:\Program Files (x86)\CyberLink\Shared files\brs.exe PRC - [2012-07-13 14:50:00 | 000,093,296 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe PRC - [2012-03-27 07:02:04 | 001,104,208 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe PRC - [2012-03-27 07:02:02 | 001,304,912 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe PRC - [2012-03-27 07:01:56 | 001,014,096 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe PRC - [2012-03-27 07:01:56 | 000,936,272 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe PRC - [2012-03-05 12:38:38 | 000,578,944 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe PRC - [2012-03-05 12:38:38 | 000,035,200 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe PRC - [2011-12-16 21:37:00 | 000,363,800 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2011-12-16 21:37:00 | 000,277,784 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2011-12-16 21:37:00 | 000,161,560 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe PRC - [2011-12-16 21:37:00 | 000,128,280 | ---- | M] () -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe PRC - [2011-12-05 11:14:00 | 000,291,096 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe PRC - [2011-11-30 05:04:56 | 000,013,592 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe PRC - [2011-08-19 14:48:44 | 000,379,960 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe PRC - [2011-01-19 16:41:24 | 000,136,488 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe PRC - [2009-06-24 09:57:04 | 000,136,704 | ---- | M] (HP) -- C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe PRC - [2008-07-11 06:05:00 | 000,226,592 | ---- | M] (SafeNet, Inc) -- C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe PRC - [2008-07-11 00:02:10 | 000,328,992 | ---- | M] (SafeNet, Inc.) -- C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2014-10-26 11:32:46 | 000,043,008 | ---- | M] () -- c:\users\marcin~1\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp5cgbtj.dll MOD - [2014-10-26 11:32:11 | 000,027,136 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\_multiprocessing.pyd MOD - [2014-10-26 11:32:11 | 000,007,168 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\hashobjs_ext.pyd MOD - [2014-10-26 11:32:09 | 001,160,704 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\_ssl.pyd MOD - [2014-10-26 11:32:09 | 001,062,400 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\wx._controls_.pyd MOD - [2014-10-26 11:32:09 | 000,811,008 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\wx._windows_.pyd MOD - [2014-10-26 11:32:09 | 000,805,888 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\wx._gdi_.pyd MOD - [2014-10-26 11:32:09 | 000,713,216 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\_hashlib.pyd MOD - [2014-10-26 11:32:09 | 000,686,080 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\unicodedata.pyd MOD - [2014-10-26 11:32:09 | 000,110,080 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\pywintypes27.dll MOD - [2014-10-26 11:32:09 | 000,070,656 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\wx._html2.pyd MOD - [2014-10-26 11:32:09 | 000,025,600 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\win32pdh.pyd MOD - [2014-10-26 11:32:09 | 000,024,064 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\win32pipe.pyd MOD - [2014-10-26 11:32:09 | 000,018,432 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\win32event.pyd MOD - [2014-10-26 11:32:09 | 000,010,240 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\select.pyd MOD - [2014-10-26 11:32:08 | 000,127,488 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\pyexpat.pyd MOD - [2014-10-26 11:32:08 | 000,119,808 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\win32file.pyd MOD - [2014-10-26 11:32:08 | 000,108,544 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\win32security.pyd MOD - [2014-10-26 11:32:08 | 000,038,912 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\win32inet.pyd MOD - [2014-10-26 11:32:08 | 000,017,408 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\win32profile.pyd MOD - [2014-10-26 11:32:07 | 000,525,640 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\windows._lib_cacheinvalidation.pyd MOD - [2014-10-26 11:32:07 | 000,167,936 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\win32gui.pyd MOD - [2014-10-26 11:32:06 | 000,557,056 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\pysqlite2._sqlite.pyd MOD - [2014-10-26 11:32:06 | 000,320,512 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\win32com.shell.shell.pyd MOD - [2014-10-26 11:32:06 | 000,128,512 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\_elementtree.pyd MOD - [2014-10-26 11:32:06 | 000,098,816 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\win32api.pyd MOD - [2014-10-26 11:32:06 | 000,087,552 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\_ctypes.pyd MOD - [2014-10-26 11:32:06 | 000,045,568 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\_socket.pyd MOD - [2014-10-26 11:32:06 | 000,022,528 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\win32ts.pyd MOD - [2014-10-26 11:32:05 | 001,175,040 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\wx._core_.pyd MOD - [2014-10-26 11:32:05 | 000,735,232 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\wx._misc_.pyd MOD - [2014-10-26 11:32:05 | 000,364,544 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\pythoncom27.dll MOD - [2014-10-26 11:32:05 | 000,122,368 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\wx._wizard.pyd MOD - [2014-10-26 11:32:05 | 000,078,336 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\wx._animate.pyd MOD - [2014-10-26 11:32:05 | 000,011,264 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\win32crypt.pyd MOD - [2014-10-26 11:32:04 | 000,035,840 | ---- | M] () -- C:\Users\MARCIN~1\AppData\Local\Temp\_MEI67042\win32process.pyd MOD - [2014-10-16 16:42:34 | 002,297,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\e3641fa3359f37ad12c84183ce765093\System.Core.ni.dll MOD - [2014-10-16 15:33:19 | 012,435,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\1453d9e9a4989833ef3db4b22549ba1a\System.Windows.Forms.ni.dll MOD - [2014-10-16 15:33:14 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\836e10dfd0811b303553216f5cb092ef\System.Drawing.ni.dll MOD - [2014-10-16 15:33:10 | 005,467,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\a3033f6d2adb8b00937ab5d0c1fb2ef8\System.Xml.ni.dll MOD - [2014-10-16 15:32:48 | 007,991,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\908ba9e296e92b4e14bdc2437edac603\System.ni.dll MOD - [2014-10-10 03:04:02 | 008,910,664 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.104\pdf.dll MOD - [2014-10-10 03:03:56 | 001,042,760 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.104\libglesv2.dll MOD - [2014-10-10 03:03:54 | 000,211,272 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.104\libegl.dll MOD - [2014-10-10 03:03:53 | 001,681,224 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\38.0.2125.104\ffmpegsumo.dll MOD - [2014-09-25 14:13:50 | 003,715,184 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll MOD - [2014-09-13 01:20:59 | 003,610,624 | ---- | M] () -- C:\Users\Marcin K\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll MOD - [2014-09-11 17:32:50 | 000,220,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\a2d3a02bcdcde54273082a136c158140\CustomMarshalers.ni.dll MOD - [2014-09-11 09:07:56 | 011,497,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll MOD - [2014-06-29 20:56:09 | 019,329,904 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll MOD - [2014-06-29 20:56:09 | 000,301,152 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\aswProperty.dll MOD - [2014-04-14 13:17:38 | 000,433,664 | ---- | M] () -- C:\Users\Marcin K\AppData\Local\Apps\Evernote\Evernote\libxml2.dll MOD - [2014-04-14 13:17:14 | 000,315,392 | ---- | M] () -- C:\Users\Marcin K\AppData\Local\Apps\Evernote\Evernote\libtidy.dll MOD - [2014-03-20 23:49:17 | 000,069,120 | ---- | M] () -- C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll MOD - [2013-10-27 08:03:58 | 000,013,088 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\coprocmanager\detoured.dll MOD - [2013-08-23 20:01:44 | 025,100,288 | ---- | M] () -- C:\Users\Marcin K\AppData\Roaming\Dropbox\bin\libcef.dll MOD - [2013-06-07 04:16:28 | 004,073,768 | ---- | M] () -- C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe MOD - [2012-12-20 13:09:07 | 000,311,296 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2014-10-19 20:51:55 | 000,321,536 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Program Files\IDT\WDM\stacsv64.exe -- (STacSV) SRV:[b]64bit:[/b] - [2014-09-19 02:25:49 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService) SRV:[b]64bit:[/b] - [2014-06-29 20:56:08 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV:[b]64bit:[/b] - [2014-06-29 20:55:56 | 000,106,488 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\afwServ.exe -- (avast! Firewall) SRV:[b]64bit:[/b] - [2013-11-12 20:28:49 | 001,315,592 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64) SRV:[b]64bit:[/b] - [2013-05-27 06:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2013-01-07 22:31:42 | 000,401,856 | ---- | M] (AuthenTec, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\AuthenTec\TrueService.exe -- (TrueService) SRV:[b]64bit:[/b] - [2012-12-11 13:07:04 | 000,619,904 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\Program Files\Tablet\Pen\WTabletServiceCon.exe -- (WTabletServiceCon) SRV:[b]64bit:[/b] - [2012-09-27 01:30:48 | 000,126,880 | ---- | M] (HP) [Auto | Running] -- C:\Windows\SysNative\HPSIsvc.exe -- (HPSIService) SRV:[b]64bit:[/b] - [2012-09-24 12:40:56 | 000,031,040 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Windows\SysNative\hpservice.exe -- (hpsrv) SRV:[b]64bit:[/b] - [2012-06-25 15:06:30 | 003,325,232 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe -- (ZeroConfigService) SRV:[b]64bit:[/b] - [2012-06-25 15:06:08 | 000,272,688 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS) SRV:[b]64bit:[/b] - [2012-06-25 15:05:54 | 000,628,016 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) SRV:[b]64bit:[/b] - [2012-06-25 15:05:28 | 000,149,296 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) SRV:[b]64bit:[/b] - [2012-04-23 16:23:28 | 000,135,952 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr) SRV:[b]64bit:[/b] - [2012-03-15 06:09:20 | 000,659,976 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3) SRV:[b]64bit:[/b] - [2011-12-08 15:38:24 | 000,607,456 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R) SRV:[b]64bit:[/b] - [2011-12-01 09:04:56 | 000,289,952 | ---- | M] (Sony Corporation) [On_Demand | Running] -- C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe -- (SpfService) SRV:[b]64bit:[/b] - [2010-10-11 02:48:14 | 000,346,168 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe -- (HPClientSvc) SRV:[b]64bit:[/b] - [2010-09-22 18:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc) SRV:[b]64bit:[/b] - [2009-10-15 06:51:14 | 000,087,336 | ---- | M] (Dassault Systèmes SolidWorks Corp.) [On_Demand | Stopped] -- C:\Program Files\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe -- (CoordinatorServiceHost) SRV - [2014-10-18 21:06:04 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2014-09-25 14:13:53 | 000,114,288 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2014-09-12 10:43:06 | 000,064,704 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2014-09-03 12:16:00 | 000,484,888 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe -- (PMBDeviceInfoProvider) SRV - [2014-08-19 19:27:10 | 002,175,264 | ---- | M] (IObit) [Auto | Stopped] -- C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe -- (LiveUpdateSvc) SRV - [2014-03-20 23:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2014-01-16 09:34:08 | 000,495,248 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe -- (SOHDms) SRV - [2013-12-03 09:56:50 | 000,079,000 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe -- (SOHDs) SRV - [2013-11-12 20:32:19 | 000,867,080 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2013-11-12 20:28:49 | 000,079,360 | ---- | M] (SolidWorks) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe -- (SolidWorks Licensing Service) SRV - [2013-10-27 08:03:44 | 001,364,256 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService) SRV - [2013-09-11 21:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2013-06-26 18:21:50 | 000,207,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa) SRV - [2013-06-26 18:21:46 | 000,523,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist) SRV - [2013-06-07 04:16:54 | 001,641,768 | ---- | M] (HP) [Auto | Running] -- C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe -- (FPLService) SRV - [2012-09-27 11:55:16 | 000,086,528 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe -- (HP Support Assistant Service) SRV - [2012-09-03 21:18:00 | 000,245,264 | ---- | M] (CyberLink) [Auto | Stopped] -- C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe -- (CLKMSVC10_38F51D56) SRV - [2012-03-27 07:02:04 | 001,104,208 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe -- (Bluetooth OBEX Service) SRV - [2012-03-27 07:02:02 | 001,304,912 | ---- | M] (Intel Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe -- (Bluetooth Media Service) SRV - [2012-03-27 07:01:56 | 001,014,096 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe -- (Bluetooth Device Monitor) SRV - [2012-03-05 12:38:38 | 000,035,200 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe -- (HPWMISVC) SRV - [2012-01-30 06:03:54 | 000,276,248 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs) SRV - [2011-12-16 21:37:00 | 000,363,800 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) SRV - [2011-12-16 21:37:00 | 000,277,784 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2011-12-16 21:37:00 | 000,161,560 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe -- (jhi_service) SRV - [2011-12-16 21:37:00 | 000,128,280 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe -- (Intel(R) SRV - [2011-11-30 05:04:56 | 000,013,592 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) SRV - [2009-06-24 09:57:04 | 000,136,704 | ---- | M] (HP) [Auto | Running] -- C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe -- (HP LaserJet Service) SRV - [2008-07-11 06:05:00 | 000,226,592 | ---- | M] (SafeNet, Inc) [Auto | Running] -- C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe -- (SentinelProtectionServer) SRV - [2008-07-11 00:02:10 | 000,328,992 | ---- | M] (SafeNet, Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe -- (SentinelKeysServer) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys -- (esgiguard) DRV:[b]64bit:[/b] - [2014-10-19 20:51:59 | 000,540,160 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA) DRV:[b]64bit:[/b] - [2014-09-07 22:23:30 | 000,061,080 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{5eeb83d0-96ea-4249-942c-beead6847053}Gw64.sys -- ({5eeb83d0-96ea-4249-942c-beead6847053}Gw64) DRV:[b]64bit:[/b] - [2014-07-04 22:58:43 | 000,427,360 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswsp.sys -- (aswSP) DRV:[b]64bit:[/b] - [2014-06-29 20:56:11 | 001,041,168 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswsnx.sys -- (aswSnx) DRV:[b]64bit:[/b] - [2014-06-29 20:56:11 | 000,224,896 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm) DRV:[b]64bit:[/b] - [2014-06-29 20:56:11 | 000,093,568 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr) DRV:[b]64bit:[/b] - [2014-06-29 20:56:11 | 000,092,008 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswstm.sys -- (aswStm) DRV:[b]64bit:[/b] - [2014-06-29 20:56:11 | 000,079,184 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt) DRV:[b]64bit:[/b] - [2014-06-29 20:56:11 | 000,065,776 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt) DRV:[b]64bit:[/b] - [2014-06-29 20:56:11 | 000,029,208 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswHwid.sys -- (aswHwid) DRV:[b]64bit:[/b] - [2014-06-29 20:56:02 | 000,028,184 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswKbd.sys -- (aswKbd) DRV:[b]64bit:[/b] - [2014-06-29 20:55:56 | 000,448,400 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswNdisFlt.sys -- (aswNdisFlt) DRV:[b]64bit:[/b] - [2013-12-19 14:11:27 | 000,064,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi) DRV:[b]64bit:[/b] - [2013-12-14 10:11:48 | 008,873,688 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtsuvc.sys -- (rtsuvc) DRV:[b]64bit:[/b] - [2013-12-14 10:10:54 | 000,290,520 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsP2Stor.sys -- (RSP2STOR) DRV:[b]64bit:[/b] - [2013-12-14 10:09:36 | 000,884,952 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2013-10-27 08:04:04 | 000,032,544 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt) DRV:[b]64bit:[/b] - [2013-10-02 03:22:20 | 000,056,832 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2013-06-26 18:21:50 | 000,023,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftvollh.sys -- (Sftvol) DRV:[b]64bit:[/b] - [2013-06-26 18:21:48 | 000,028,840 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftredirlh.sys -- (Sftredir) DRV:[b]64bit:[/b] - [2013-06-26 18:21:46 | 000,273,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftplaylh.sys -- (Sftplay) DRV:[b]64bit:[/b] - [2013-06-26 18:21:44 | 000,767,144 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Sftfslh.sys -- (Sftfs) DRV:[b]64bit:[/b] - [2013-02-12 05:12:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx) DRV:[b]64bit:[/b] - [2012-12-03 16:36:34 | 000,081,824 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wachidrouter.sys -- (WacHidRouter) DRV:[b]64bit:[/b] - [2012-12-03 16:36:34 | 000,013,728 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidkmdf.sys -- (hidkmdf) DRV:[b]64bit:[/b] - [2012-11-15 09:41:06 | 000,015,776 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wacomrouterfilter.sys -- (wacomrouterfilter) DRV:[b]64bit:[/b] - [2012-09-26 06:45:35 | 000,020,480 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mvusbews.sys -- (mvusbews) DRV:[b]64bit:[/b] - [2012-09-24 12:40:56 | 000,043,840 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelerometer.sys -- (Accelerometer) DRV:[b]64bit:[/b] - [2012-09-24 12:40:56 | 000,031,040 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hpdskflt.sys -- (hpdskflt) DRV:[b]64bit:[/b] - [2012-08-23 15:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2012-08-23 15:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2012-07-17 17:12:08 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) DRV:[b]64bit:[/b] - [2012-06-03 07:33:44 | 011,499,008 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Netwsw00.sys -- (NETwNs64) DRV:[b]64bit:[/b] - [2012-03-21 10:13:14 | 000,060,928 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iBtFltCoex.sys -- (ibtfltcoex) DRV:[b]64bit:[/b] - [2012-03-15 05:02:46 | 000,198,144 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP) DRV:[b]64bit:[/b] - [2012-03-15 05:02:46 | 000,198,144 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL) DRV:[b]64bit:[/b] - [2012-03-01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2012-02-27 02:52:03 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2012-02-27 02:52:03 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2012-02-13 08:10:40 | 000,747,008 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmhsf.sys -- (btmhsf) DRV:[b]64bit:[/b] - [2012-02-13 07:53:54 | 000,095,232 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmaux.sys -- (btmaux) DRV:[b]64bit:[/b] - [2012-01-19 03:24:12 | 014,658,688 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2011-12-20 16:38:36 | 000,034,200 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible) DRV:[b]64bit:[/b] - [2011-12-20 16:38:36 | 000,025,496 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus) DRV:[b]64bit:[/b] - [2011-12-07 15:05:00 | 000,108,288 | ---- | M] (Ozmo Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hswpan.sys -- (hswpan) DRV:[b]64bit:[/b] - [2011-12-06 12:23:08 | 000,331,264 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) DRV:[b]64bit:[/b] - [2011-12-05 11:13:00 | 000,785,688 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc) DRV:[b]64bit:[/b] - [2011-12-05 11:13:00 | 000,355,096 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub) DRV:[b]64bit:[/b] - [2011-12-05 11:13:00 | 000,016,152 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs) DRV:[b]64bit:[/b] - [2011-11-30 04:40:32 | 000,568,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2011-10-14 05:37:44 | 000,396,848 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:[b]64bit:[/b] - [2011-10-14 05:37:42 | 000,020,016 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Smb_driver.sys -- (SmbDrv) DRV:[b]64bit:[/b] - [2011-02-11 22:23:34 | 000,035,344 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\npf.sys -- (npf) DRV:[b]64bit:[/b] - [2011-01-19 16:41:28 | 000,031,088 | ---- | M] (CyberLink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\clwvd.sys -- (clwvd) DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-06-18 23:36:04 | 000,017,920 | ---- | M] (Siliten) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\InputFilter_FlexDef2b.sys -- (InputFilter_Hid_FlexDef2b) DRV:[b]64bit:[/b] - [2010-03-09 04:08:36 | 000,121,800 | ---- | M] (QUALCOMM Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HtcVComV64.sys -- (HtcVCom32) DRV:[b]64bit:[/b] - [2009-11-02 18:16:50 | 000,033,736 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ANDROIDUSB.sys -- (HTCAND64) DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 01:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice) DRV:[b]64bit:[/b] - [2009-06-10 22:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92) DRV:[b]64bit:[/b] - [2009-06-10 22:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac) DRV:[b]64bit:[/b] - [2009-06-10 22:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA) DRV:[b]64bit:[/b] - [2009-06-10 21:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD) DRV:[b]64bit:[/b] - [2009-06-10 21:34:38 | 001,311,232 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX) DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2008-07-11 06:05:00 | 000,145,448 | ---- | M] (SafeNet, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\sentinel64.sys -- (Sentinel64) DRV - [2014-08-19 12:30:02 | 000,010,368 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\pfc.sys -- (pfc) DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) DRV - [2003-06-13 11:04:10 | 000,025,244 | ---- | M] (Adaptec) [Kernel | System | Stopped] -- C:\Windows\SysWow64\drivers\ASPI32.SYS -- (ASPI32) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{680B22A2-2794-46B7-9033-EC222D87FD12}: "URL" = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{680B22A2-2794-46B7-9033-EC222D87FD12}: "URL" = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\.DEFAULT\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-18\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-409979089-3304901049-3457671310-1000\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-409979089-3304901049-3457671310-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank IE - HKU\S-1-5-21-409979089-3304901049-3457671310-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKU\S-1-5-21-409979089-3304901049-3457671310-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-409979089-3304901049-3457671310-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox IE - HKU\S-1-5-21-409979089-3304901049-3457671310-1001\..\SearchScopes\{680B22A2-2794-46B7-9033-EC222D87FD12}: "URL" = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} IE - HKU\S-1-5-21-409979089-3304901049-3457671310-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "Google" FF - prefs.js..browser.search.order.1: "Google" FF - prefs.js..browser.search.useDBForOrder: "false" FF - prefs.js..extensions.enabledAddons: wrc%40avast.com:9.0.2021.112 FF - prefs.js..extensions.enabledAddons: ALone-live%40ya.ru:1.4.7 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:32.0.3 FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@wacom.com/wtPlugin,version=2.1.0.2: C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@authentec.com/ffwloplugin: C:\Program Files (x86)\HP SimplePass\npffwloplugin.dll ( HP) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.67.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.67.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@wacom.com/wtPlugin,version=2.1.0.2: C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\wacom.com/WacomTabletPlugin: C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-06-29 20:56:13 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 32.0.3\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 32.0.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.6.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 24.6.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2013-10-10 20:36:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marcin K\AppData\Roaming\mozilla\Extensions [2014-09-19 06:08:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marcin K\AppData\Roaming\mozilla\Firefox\Profiles\pjuu1i3x.default\extensions [2013-12-13 13:02:09 | 000,000,000 | ---D | M] (Ads Removal) -- C:\Users\Marcin K\AppData\Roaming\mozilla\Firefox\Profiles\pjuu1i3x.default\extensions\adsremoval@adsremoval.net [2014-09-19 06:08:31 | 000,042,410 | ---- | M] () (No name found) -- C:\Users\Marcin K\AppData\Roaming\mozilla\firefox\profiles\pjuu1i3x.default\extensions\ALone-live@ya.ru.xpi [2013-11-03 21:14:37 | 000,010,043 | ---- | M] () (No name found) -- C:\Users\Marcin K\AppData\Roaming\mozilla\firefox\profiles\pjuu1i3x.default\extensions\IplextoALL@ALLPlayer.org.xpi [2014-09-25 14:13:44 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions [2014-09-25 14:13:56 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2014-06-29 20:56:13 | 000,000,000 | ---D | M] (avast! Online Security) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: (Enabled) CHR - default_search_provider: search_url = CHR - default_search_provider: suggest_url = CHR - plugin: Error reading preferences file CHR - Extension: No name found = C:\Users\Marcin K\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\ CHR - Extension: No name found = C:\Users\Marcin K\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: No name found = C:\Users\Marcin K\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\ CHR - Extension: No name found = C:\Users\Marcin K\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: No name found = C:\Users\Marcin K\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck\10.0.2204.148_0\ CHR - Extension: No name found = C:\Users\Marcin K\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.0.2204.148_0\ CHR - Extension: No name found = C:\Users\Marcin K\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki\2.0.14435.1102_0\ CHR - Extension: No name found = C:\Users\Marcin K\AppData\Local\Google\Chrome\User Data\Default\Extensions\jccocffecajimkdjgfpjhlpiimcnadhb\2.1_0\ CHR - Extension: No name found = C:\Users\Marcin K\AppData\Local\Google\Chrome\User Data\Default\Extensions\kanflfepiobnpjbljmngfgegijhdpljm\6.0.100_0\ CHR - Extension: No name found = C:\Users\Marcin K\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdadialhpiikehpdeejjeiikopddkjem\1.0.3.12_0\ CHR - Extension: No name found = C:\Users\Marcin K\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\ CHR - Extension: No name found = C:\Users\Marcin K\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\ O1 HOSTS File: ([2013-12-08 14:16:18 | 000,000,854 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 acdid.acdsystems.com O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No CLSID value found. O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No CLSID value found. O3 - HKU\S-1-5-21-409979089-3304901049-3457671310-1001\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found. O4:[b]64bit:[/b] - HKLM..\Run: [BLEServicesCtrl] C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [BTMTrayAgent] C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [RtsCM] C:\Windows\RtsCM64.exe (Realtek Semiconductor Corp.) O4:[b]64bit:[/b] - HKLM..\Run: [SetDefault] C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe (Hewlett-Packard Development Company, L.P.) O4:[b]64bit:[/b] - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software) O4 - HKLM..\Run: [BDRegion] C:\Program Files (x86)\CyberLink\Shared files\brs.exe (cyberlink) O4 - HKLM..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe (EasyBits Software AS) O4 - HKLM..\Run: [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe (Hewlett-Packard Development Company, L.P.) O4 - HKLM..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) O4 - HKLM..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe (Hewlett-Packard Development Company, L.P.) O4 - HKLM..\Run: [HPUsageTrackingLEDM] C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe (Hewlett-Packard Company) O4 - HKLM..\Run: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe (Sony Corporation) O4 - HKLM..\Run: [RemoteControl10] C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.) O4 - HKLM..\Run: [tuto4pc_pl_21] File not found O4 - HKLM..\Run: [USB3MON] C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation) O4 - HKLM..\Run: [YouCam Mirage] C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe (CyberLink) O4 - HKLM..\Run: [YouCam Tray] C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe (CyberLink Corp.) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-409979089-3304901049-3457671310-1000..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-409979089-3304901049-3457671310-1001..\Run: [ALLUpdate] "C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe" "sleep" File not found O4 - HKU\S-1-5-21-409979089-3304901049-3457671310-1001..\Run: [GoogleChromeAutoLaunch_2A60CBAE843B3FFAC32DDFB42A29DA04] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) O4 - HKU\S-1-5-21-409979089-3304901049-3457671310-1001..\Run: [GoogleDriveSync] C:\Program Files (x86)\Google\Drive\googledrivesync.exe (Google) O4:[b]64bit:[/b] - HKLM..\RunOnce: [NCPluginUpdater] C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe (Hewlett-Packard) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-21-409979089-3304901049-3457671310-1000..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - Startup: C:\Users\Marcin K\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Marcin K\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) O4 - Startup: C:\Users\Marcin K\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk = C:\Users\Marcin K\AppData\Local\Apps\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) O4 - Startup: C:\Users\Marcin K\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PNotes.lnk = C:\Program Files (x86)\PNotes\PNotes.exe (Andrey Gruber) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: EnableShellExecuteHooks = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1 O7 - HKU\S-1-5-21-409979089-3304901049-3457671310-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-409979089-3304901049-3457671310-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0 O7 - HKU\S-1-5-21-409979089-3304901049-3457671310-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0 O7 - HKU\S-1-5-21-409979089-3304901049-3457671310-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2 O7 - HKU\S-1-5-21-409979089-3304901049-3457671310-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1 O8:[b]64bit:[/b] - Extra context menu item: Clip Image - C:\Users\Marcin K\AppData\Local\Apps\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=4 File not found O8:[b]64bit:[/b] - Extra context menu item: Clip selection - C:\Users\Marcin K\AppData\Local\Apps\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3 File not found O8:[b]64bit:[/b] - Extra context menu item: Clip this page - C:\Users\Marcin K\AppData\Local\Apps\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1 File not found O8:[b]64bit:[/b] - Extra context menu item: Clip URL - C:\Users\Marcin K\AppData\Local\Apps\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0 File not found O8:[b]64bit:[/b] - Extra context menu item: New Note - C:\Users\Marcin K\AppData\Local\Apps\Evernote\Evernote\\EvernoteIERes\NewNote.html () O8 - Extra context menu item: Clip Image - C:\Users\Marcin K\AppData\Local\Apps\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=4 File not found O8 - Extra context menu item: Clip selection - C:\Users\Marcin K\AppData\Local\Apps\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3 File not found O8 - Extra context menu item: Clip this page - C:\Users\Marcin K\AppData\Local\Apps\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1 File not found O8 - Extra context menu item: Clip URL - C:\Users\Marcin K\AppData\Local\Apps\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0 File not found O8 - Extra context menu item: New Note - C:\Users\Marcin K\AppData\Local\Apps\Evernote\Evernote\\EvernoteIERes\NewNote.html () O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E1AE7CDB-DB7C-4BFC-AC75-66E4E322D1C2}: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FED1ED4F-D956-494F-B396-8758C2D87C19}: DhcpNameServer = 192.168.0.1 O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation) O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll (EasyBits Software Corp.) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2014-05-05 19:57:42 | 000,000,000 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{41151516-bfc0-11e3-915a-84a6c8179f75}\Shell - "" = AutoRun O33 - MountPoints2\{41151516-bfc0-11e3-915a-84a6c8179f75}\Shell\AutoRun\command - "" = H:\Autorun.exe O33 - MountPoints2\{74de7af8-6c19-11e3-98d2-84a6c8179f75}\Shell - "" = AutoRun O33 - MountPoints2\{74de7af8-6c19-11e3-98d2-84a6c8179f75}\Shell\AutoRun\command - "" = H:\Startme.exe O33 - MountPoints2\{79815ed9-c237-11e3-b153-84a6c8179f75}\Shell - "" = AutoRun O33 - MountPoints2\{79815ed9-c237-11e3-b153-84a6c8179f75}\Shell\AutoRun\command - "" = J:\SISetup.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2014-10-26 12:02:13 | 000,000,000 | ---D | C] -- C:\FRST [2014-10-23 11:09:23 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2014-10-19 22:42:41 | 000,000,000 | ---D | C] -- C:\Users\Marcin K\AppData\Local\Mathsoft [2014-10-19 22:24:55 | 000,000,000 | ---D | C] -- C:\Users\Marcin K\AppData\Roaming\Mathsoft [2014-10-19 22:24:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mathcad [2014-10-19 22:22:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mathcad [2014-10-19 21:48:23 | 000,000,000 | ---D | C] -- C:\Packages [2014-10-19 21:30:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HP SimplePass [2014-10-19 21:28:09 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\AuthenTec [2014-10-19 21:28:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AuthenTec [2014-10-19 21:27:51 | 000,000,000 | ---D | C] -- C:\ProgramData\HP SimplePass 2011 [2014-10-19 21:01:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cisco [2014-10-19 20:53:58 | 001,988,096 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\stapo64.dll [2014-10-19 20:53:58 | 000,540,160 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\drivers\stwrt64.sys [2014-10-19 20:53:58 | 000,450,048 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\stcplx64.dll [2014-10-19 20:53:57 | 000,656,896 | ---- | C] (IDT, Inc.) -- C:\Windows\SysNative\stapi64.dll [2014-10-19 20:52:51 | 000,000,000 | ---D | C] -- C:\Program Files\IDT [2014-10-19 20:48:48 | 003,381,008 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\Netwrw00.dll [2014-10-19 20:48:40 | 000,885,520 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\Netwcw00.dll [2014-10-18 21:52:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maxima-5.31.2 [2014-10-18 21:52:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Maxima-5.31.2 [2014-10-16 20:56:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office [2014-10-16 20:55:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Works [2014-10-16 20:54:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio [2014-10-16 20:51:55 | 000,000,000 | ---D | C] -- C:\Windows\SHELLNEW [2014-10-16 20:50:03 | 000,000,000 | RH-D | C] -- C:\MSOCache [2014-10-16 14:59:00 | 000,000,000 | ---D | C] -- C:\Users\Marcin K\AppData\Roaming\SolidWorks 2010 [2014-10-15 18:20:35 | 001,943,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll [2014-10-15 18:20:35 | 001,131,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll [2014-10-15 18:20:35 | 000,156,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscorier.dll [2014-10-15 18:20:35 | 000,156,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mscorier.dll [2014-10-15 18:20:34 | 000,081,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscories.dll [2014-10-15 18:20:34 | 000,073,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mscories.dll [2014-10-15 18:20:18 | 001,202,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drmv2clt.dll [2014-10-15 18:20:18 | 000,842,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\blackbox.dll [2014-10-15 18:20:18 | 000,744,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\blackbox.dll [2014-10-15 18:20:17 | 000,988,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drmv2clt.dll [2014-10-15 18:20:12 | 014,632,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll [2014-10-15 18:20:10 | 004,120,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf.dll [2014-10-15 18:20:10 | 000,782,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmsdk.dll [2014-10-15 18:20:10 | 000,617,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmsdk.dll [2014-10-15 18:20:08 | 000,500,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AUDIOKSE.dll [2014-10-15 18:20:05 | 011,411,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll [2014-10-15 18:20:02 | 000,497,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drmmgrtn.dll [2014-10-15 18:20:01 | 003,208,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mf.dll [2014-10-15 18:20:01 | 000,406,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drmmgrtn.dll [2014-10-15 18:20:00 | 000,457,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ci.dll [2014-10-15 18:20:00 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AUDIOKSE.dll [2014-10-15 18:19:59 | 000,616,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi [2014-10-15 18:19:58 | 001,574,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll [2014-10-15 18:19:58 | 000,693,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi [2014-10-15 18:19:58 | 000,619,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.exe [2014-10-15 18:19:58 | 000,440,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioEng.dll [2014-10-15 18:19:57 | 000,532,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.exe [2014-10-15 18:19:57 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll [2014-10-15 18:19:56 | 005,551,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2014-10-15 18:19:56 | 003,970,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2014-10-15 18:19:56 | 001,480,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll [2014-10-15 18:19:56 | 000,631,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\evr.dll [2014-10-15 18:19:56 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioSes.dll [2014-10-15 18:19:56 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EncDump.dll [2014-10-15 18:19:55 | 003,914,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2014-10-15 18:19:55 | 001,329,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll [2014-10-15 18:19:55 | 001,069,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptui.dll [2014-10-15 18:19:55 | 000,489,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\evr.dll [2014-10-15 18:19:55 | 000,432,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfplat.dll [2014-10-15 18:19:54 | 001,005,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptui.dll [2014-10-15 18:19:54 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll [2014-10-15 18:19:54 | 000,354,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfplat.dll [2014-10-15 18:19:53 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptsp.dll [2014-10-15 18:19:52 | 000,641,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msscp.dll [2014-10-15 18:19:51 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msscp.dll [2014-10-15 18:19:51 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msnetobj.dll [2014-10-15 18:19:51 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe [2014-10-15 18:19:50 | 000,265,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msnetobj.dll [2014-10-15 18:19:50 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\audiodg.exe [2014-10-15 18:19:50 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidapi.dll [2014-10-15 18:19:50 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rrinstaller.exe [2014-10-15 18:19:49 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rrinstaller.exe [2014-10-15 18:19:43 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfps.dll [2014-10-15 18:19:43 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfps.dll [2014-10-15 18:19:39 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\appidapi.dll [2014-10-15 18:19:37 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidpolicyconverter.exe [2014-10-15 18:19:34 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfpmp.exe [2014-10-15 18:19:33 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setbcdlocale.dll [2014-10-15 18:19:33 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srclient.dll [2014-10-15 18:19:33 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfpmp.exe [2014-10-15 18:19:30 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appidcertstorecheck.exe [2014-10-15 18:19:25 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwmp.dll [2014-10-15 18:19:25 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwmp.dll [2014-10-15 18:19:25 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdxm.ocx [2014-10-15 18:19:25 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxmasf.dll [2014-10-15 18:19:25 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxmasf.dll [2014-10-15 18:19:24 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL [2014-10-15 18:19:24 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdxm.ocx [2014-10-15 18:19:24 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mferror.dll [2014-10-15 18:19:24 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mferror.dll [2014-10-15 18:19:23 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL [2014-10-15 18:19:12 | 000,507,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll [2014-10-15 18:19:12 | 000,276,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\generaltel.dll [2014-10-15 18:18:59 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll [2014-10-15 18:18:54 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll [2014-10-15 18:18:54 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll [2014-10-15 18:18:53 | 000,710,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe [2014-10-15 18:18:53 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll [2014-10-15 18:18:53 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2014-10-15 18:18:53 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll [2014-10-15 18:18:51 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\JavaScriptCollectionAgent.dll [2014-10-15 18:18:51 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll [2014-10-15 18:18:51 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwproxystub.dll [2014-10-15 18:18:49 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2014-10-15 18:18:48 | 002,017,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2014-10-15 18:18:47 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollectorres.dll [2014-10-15 18:18:45 | 000,731,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2014-10-15 18:18:45 | 000,446,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtmsft.dll [2014-10-15 18:18:45 | 000,440,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2014-10-15 18:18:45 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieetwcollector.exe [2014-10-15 18:18:43 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll [2014-10-15 18:18:41 | 002,108,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2014-10-15 18:18:39 | 001,068,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll [2014-10-15 18:18:39 | 000,678,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll [2014-10-15 18:18:39 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2014-10-15 18:18:38 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll [2014-10-15 18:18:38 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll [2014-10-15 18:18:37 | 000,595,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2014-10-15 18:18:37 | 000,289,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxtrans.dll [2014-10-15 18:18:36 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2014-10-15 18:18:35 | 005,829,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2014-10-15 18:18:35 | 001,249,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmlmedia.dll [2014-10-15 18:18:35 | 000,775,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieapfltr.dll [2014-10-15 18:18:35 | 000,758,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9diag.dll [2014-10-15 18:18:35 | 000,547,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2014-10-15 18:18:35 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2014-10-15 18:18:33 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msrating.dll [2014-10-15 18:18:33 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MshtmlDac.dll [2014-10-15 18:18:30 | 000,940,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsSpellCheckingFacility.exe [2014-10-15 18:17:46 | 003,241,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll [2014-10-15 18:17:29 | 003,179,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorets.dll [2014-10-15 18:17:22 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rastls.dll [2014-10-15 18:17:21 | 000,372,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rastls.dll [2014-10-15 18:16:46 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsta.dll [2014-10-15 18:16:45 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe [2014-10-15 18:16:45 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorekmts.dll [2014-10-15 18:16:27 | 006,584,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll [2014-10-15 18:16:23 | 005,703,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll [2014-10-15 18:16:12 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\packager.dll [2014-10-15 18:16:12 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\packager.dll [2014-10-14 08:17:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2014-10-14 08:17:17 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype [2014-10-14 08:17:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype [2014-10-13 21:12:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DibaNext [2014-10-13 21:12:00 | 000,000,000 | ---D | C] -- C:\Users\Marcin K\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\3DbyRoca [2014-10-13 21:06:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Canon [2014-10-12 14:38:16 | 000,000,000 | ---D | C] -- C:\MTS [2014-10-12 14:10:55 | 000,000,000 | ---D | C] -- C:\Users\Marcin K\Desktop\Konwersja [2014-10-10 09:55:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VirtualDub [2014-10-10 09:51:24 | 000,000,000 | ---D | C] -- C:\Users\Marcin K\AppData\Roaming\DVDVideoSoft [2014-10-09 11:59:16 | 000,000,000 | ---D | C] -- C:\Users\Marcin K\AppData\Roaming\J River [2014-10-09 11:07:14 | 000,000,000 | ---D | C] -- C:\TEMP [2014-10-09 10:56:19 | 000,000,000 | ---D | C] -- C:\Users\Marcin K\AppData\Roaming\IrfanView [2014-10-09 10:56:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView [2014-10-09 10:56:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IrfanView [2014-10-09 10:51:39 | 000,000,000 | ---D | C] -- C:\Users\Marcin K\AppData\Roaming\ATViewer [2014-10-09 10:45:01 | 000,585,728 | ---- | C] (Audible Inc.) -- C:\Windows\SysWow64\AReadyLB.dll [2014-10-09 10:45:01 | 000,585,728 | ---- | C] (Audible Inc.) -- C:\Windows\SysNative\AReadyLB.dll [2014-10-09 10:45:01 | 000,229,376 | ---- | C] (Audible Inc.) -- C:\Windows\SysWow64\AudDevicePlugin.dll [2014-10-09 10:45:01 | 000,229,376 | ---- | C] (Audible Inc.) -- C:\Windows\SysNative\AudDevicePlugin.dll [2014-10-09 10:45:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\J River [2014-10-07 11:24:43 | 000,000,000 | -H-D | C] -- C:\ProgramData\{8310805D-2CA6-464F-BE24-BDEF5A5275CD} [2014-10-07 11:24:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EasternGraphics [2014-10-07 11:22:03 | 000,000,000 | ---D | C] -- C:\Users\Marcin K\AppData\Local\III [2014-10-06 10:53:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SketchUp 2014 [2014-10-06 10:53:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SketchUp [2014-10-06 10:12:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Caphyon [2014-10-06 10:12:10 | 000,000,000 | ---D | C] -- C:\Users\Marcin K\AppData\Roaming\SketchUp [2014-10-06 10:09:54 | 000,000,000 | ---D | C] -- C:\ProgramData\SketchUp [2014-10-06 10:08:44 | 000,000,000 | ---D | C] -- C:\Users\Marcin K\AppData\Roaming\Trimble Navigation Limited [2014-10-03 21:16:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Solid Esential [2014-10-03 18:47:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PRO100 Demo [2014-10-03 18:42:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PRO100 Demo [2014-10-01 12:57:01 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll [2014-10-01 12:57:01 | 000,371,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll [2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2014-10-26 12:39:00 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2014-10-26 12:19:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2014-10-26 11:58:00 | 000,000,300 | ---- | M] () -- C:\Windows\tasks\FoxTab.job [2014-10-26 11:34:01 | 000,031,472 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2014-10-26 11:34:01 | 000,031,472 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2014-10-26 11:31:52 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2014-10-26 11:31:52 | 000,000,364 | ---- | M] () -- C:\Windows\tasks\DriverToolkit Autorun.job [2014-10-26 11:29:43 | 004,731,128 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2014-10-26 11:29:43 | 002,090,888 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2014-10-26 11:29:43 | 001,549,910 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2014-10-26 11:29:43 | 001,469,232 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2014-10-26 11:29:43 | 000,006,752 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2014-10-26 11:22:16 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2014-10-26 11:21:53 | 457,682,943 | -HS- | M] () -- C:\hiberfil.sys [2014-10-26 11:07:35 | 000,000,124 | ---- | M] () -- C:\Users\Marcin K\Documents\ax_files.xml [2014-10-26 09:53:31 | 000,000,190 | ---- | M] () -- C:\Users\Marcin K\AppData\Roaming\WB.CFG [2014-10-26 09:52:36 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForMarcin K.job [2014-10-24 15:58:54 | 000,001,420 | ---- | M] () -- C:\Users\Marcin K\Desktop\DOM — skrót.lnk [2014-10-24 11:57:01 | 000,000,336 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForOleńka.job [2014-10-20 18:36:30 | 000,478,464 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2014-10-19 21:44:40 | 000,000,640 | RHS- | M] () -- C:\Users\Marcin K\ntuser.pol [2014-10-19 20:51:59 | 000,540,160 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\drivers\stwrt64.sys [2014-10-19 20:51:57 | 001,425,408 | ---- | M] (IDT, Inc.) -- C:\Windows\sttray64.exe [2014-10-19 20:51:56 | 006,085,632 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\stlang64.dll [2014-10-19 20:51:56 | 001,988,096 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\stapo64.dll [2014-10-19 20:51:56 | 000,450,048 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\stcplx64.dll [2014-10-19 20:51:55 | 000,656,896 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\stapi64.dll [2014-10-19 20:51:54 | 000,255,488 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\staco64.dll [2014-10-19 20:51:53 | 002,211,840 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\IDTNX.dll [2014-10-19 20:51:53 | 000,464,384 | ---- | M] (SRS Labs, Inc.) -- C:\Windows\SysNative\slapoi64.dll [2014-10-19 20:51:53 | 000,252,928 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\IDTNJ.exe [2014-10-19 20:51:52 | 007,986,176 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\IDTNGUI.exe [2014-10-19 20:51:52 | 007,683,584 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\IDTNHP.dll [2014-10-19 20:51:52 | 001,821,184 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\IDTNC64.cpl [2014-10-19 20:51:51 | 000,224,256 | ---- | M] (IDT, Inc.) -- C:\Windows\SysNative\HPToneCtrls64.dll [2014-10-19 20:51:51 | 000,042,482 | ---- | M] () -- C:\Windows\SysNative\Balen&Yeats_dv7.xml [2014-10-19 20:48:32 | 003,381,008 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\Netwrw00.dll [2014-10-19 20:48:30 | 000,885,520 | ---- | M] (Intel Corporation) -- C:\Windows\SysNative\Netwcw00.dll [2014-10-18 21:52:12 | 000,001,147 | ---- | M] () -- C:\Users\Marcin K\Desktop\wxMaxima.lnk [2014-10-18 21:06:04 | 000,701,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2014-10-18 21:06:04 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2014-10-15 19:32:43 | 000,000,519 | ---- | M] () -- C:\Users\Marcin K\Desktop\calculator.exe — skrót.lnk [2014-10-15 18:58:05 | 000,010,671 | ---- | M] () -- C:\Users\Marcin K\Documents\Zawartość szafek.ods [2014-10-15 18:55:21 | 000,002,270 | ---- | M] () -- C:\Users\Public\Documents\Test.odb [2014-10-14 08:17:18 | 000,002,517 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk [2014-10-13 21:24:38 | 000,010,240 | ---- | M] () -- C:\Users\Marcin K\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2014-10-12 10:35:42 | 000,000,192 | ---- | M] () -- C:\Windows\winamp.ini [2014-10-10 03:05:59 | 000,276,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\generaltel.dll [2014-10-10 03:05:42 | 000,507,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll [2014-10-10 03:00:38 | 000,424,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll [2014-10-09 11:58:38 | 000,001,694 | ---- | M] () -- C:\Users\Marcin K\Desktop\IObitUninstaler.exe — skrót.lnk [2014-10-09 10:56:19 | 000,001,862 | ---- | M] () -- C:\Users\Public\Desktop\IrfanView Thumbnails.lnk [2014-10-09 10:56:19 | 000,000,970 | ---- | M] () -- C:\Users\Public\Desktop\IrfanView.lnk [2014-10-09 10:45:01 | 000,000,076 | ---- | M] () -- C:\Windows\SysWow64\w3url.dll [2014-10-07 11:24:26 | 000,001,258 | ---- | M] () -- C:\Users\Public\Desktop\pCon.planner 6.lnk [2014-10-06 10:53:49 | 000,002,160 | ---- | M] () -- C:\Users\Public\Desktop\Style Builder 2014.lnk [2014-10-06 10:53:48 | 000,002,074 | ---- | M] () -- C:\Users\Public\Desktop\LayOut 2014.lnk [2014-10-06 10:53:48 | 000,001,989 | ---- | M] () -- C:\Users\Public\Desktop\SketchUp 2014.lnk [2014-10-06 10:14:43 | 000,003,120 | ---- | M] () -- C:\Windows\SysWow64\ALLFSAF14a.ocx [2014-10-03 18:47:09 | 000,000,976 | ---- | M] () -- C:\Users\Marcin K\Desktop\PRO100 Demo.lnk [2014-09-29 22:07:41 | 000,011,055 | ---- | M] () -- C:\Users\Marcin K\Documents\Nowa Baza Danych.odb [2014-09-29 09:11:20 | 000,023,116 | ---- | M] () -- C:\Users\Marcin K\Documents\Base.odt [2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2014-10-24 15:58:54 | 000,001,420 | ---- | C] () -- C:\Users\Marcin K\Desktop\DOM — skrót.lnk [2014-10-19 20:55:40 | 000,042,482 | ---- | C] () -- C:\Windows\SysNative\Balen&Yeats_dv7.xml [2014-10-18 21:52:12 | 000,001,147 | ---- | C] () -- C:\Users\Marcin K\Desktop\wxMaxima.lnk [2014-10-15 19:32:43 | 000,000,519 | ---- | C] () -- C:\Users\Marcin K\Desktop\calculator.exe — skrót.lnk [2014-10-15 18:58:03 | 000,010,671 | ---- | C] () -- C:\Users\Marcin K\Documents\Zawartość szafek.ods [2014-10-15 18:53:51 | 000,002,270 | ---- | C] () -- C:\Users\Public\Documents\Test.odb [2014-10-14 08:17:18 | 000,002,517 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk [2014-10-09 11:58:38 | 000,001,694 | ---- | C] () -- C:\Users\Marcin K\Desktop\IObitUninstaler.exe — skrót.lnk [2014-10-09 10:56:19 | 000,001,862 | ---- | C] () -- C:\Users\Public\Desktop\IrfanView Thumbnails.lnk [2014-10-09 10:56:19 | 000,000,970 | ---- | C] () -- C:\Users\Public\Desktop\IrfanView.lnk [2014-10-09 10:45:01 | 000,183,129 | ---- | C] () -- C:\Windows\SysWow64\AM Install1.INF [2014-10-09 10:45:01 | 000,183,129 | ---- | C] () -- C:\Windows\SysNative\AM Install1.INF [2014-10-09 10:45:01 | 000,000,076 | ---- | C] () -- C:\Windows\SysWow64\w3url.dll [2014-10-07 11:24:26 | 000,001,258 | ---- | C] () -- C:\Users\Public\Desktop\pCon.planner 6.lnk [2014-10-06 10:53:49 | 000,002,160 | ---- | C] () -- C:\Users\Public\Desktop\Style Builder 2014.lnk [2014-10-06 10:53:48 | 000,002,074 | ---- | C] () -- C:\Users\Public\Desktop\LayOut 2014.lnk [2014-10-06 10:53:48 | 000,001,989 | ---- | C] () -- C:\Users\Public\Desktop\SketchUp 2014.lnk [2014-10-06 10:14:43 | 000,003,120 | ---- | C] () -- C:\Windows\SysWow64\ALLFSAF14a.ocx [2014-10-03 18:47:09 | 000,000,976 | ---- | C] () -- C:\Users\Marcin K\Desktop\PRO100 Demo.lnk [2014-09-29 21:42:47 | 000,011,055 | ---- | C] () -- C:\Users\Marcin K\Documents\Nowa Baza Danych.odb [2014-09-29 09:11:16 | 000,023,116 | ---- | C] () -- C:\Users\Marcin K\Documents\Base.odt [2014-05-26 15:38:54 | 000,644,608 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2014-05-26 15:38:54 | 000,258,048 | ---- | C] () -- C:\Windows\SysWow64\libFLAC.dll [2014-04-10 07:25:01 | 000,001,021 | ---- | C] () -- C:\Windows\disney.ini [2014-04-10 07:24:57 | 000,000,194 | ---- | C] () -- C:\Windows\disneysy.ini [2014-04-10 07:21:02 | 000,028,203 | ---- | C] () -- C:\Windows\SysWow64\w3wt1.dll [2014-02-27 22:05:49 | 000,000,000 | ---- | C] () -- C:\Users\Marcin K\AppData\Local\Temptable.xml [2013-12-28 19:48:12 | 000,007,636 | ---- | C] () -- C:\Users\Marcin K\AppData\Local\Resmon.ResmonCfg [2013-12-25 09:42:57 | 000,000,028 | ---- | C] () -- C:\Windows\ODBC.INI [2013-12-19 20:14:20 | 000,000,190 | ---- | C] () -- C:\Users\Marcin K\AppData\Roaming\WB.CFG [2013-12-15 19:04:28 | 000,010,125 | ---- | C] () -- C:\Users\Marcin K\kosa miniature.jpg [2013-12-15 18:06:03 | 000,024,247 | ---- | C] () -- C:\Users\Marcin K\AppData\Roaming\UserTile.png [2013-12-14 10:11:47 | 003,907,288 | ---- | C] () -- C:\Windows\SysWow64\RsDecode.dll [2013-11-26 20:34:59 | 000,010,240 | ---- | C] () -- C:\Users\Marcin K\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2013-11-12 20:31:17 | 000,000,000 | ---- | C] () -- C:\Windows\eDrawingOfficeAutomator.INI [2013-11-01 21:06:23 | 000,218,200 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2013-10-14 15:57:02 | 000,000,640 | RHS- | C] () -- C:\Users\Marcin K\ntuser.pol [2013-10-11 12:02:21 | 000,001,229 | ---- | C] () -- C:\Windows\WINCMD.INI [2013-10-11 11:48:59 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\pxhpinst.exe [2013-10-11 11:48:58 | 000,000,192 | ---- | C] () -- C:\Windows\winamp.ini [2013-10-11 09:21:45 | 000,006,682 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2013-10-10 15:50:22 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2014-06-25 03:05:42 | 014,175,744 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2014-06-25 02:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2013-12-13 10:44:19 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\IObit [2014-10-19 21:45:20 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\ProductData [2013-12-13 10:44:19 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\IObit [2014-10-19 21:45:20 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\ProductData [2013-10-11 13:43:53 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\ACD Systems [2014-07-11 15:57:45 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\Ace [2014-01-08 20:46:12 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\Ashampoo [2014-10-09 10:54:45 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\ATViewer [2013-12-22 09:53:37 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\AVAST Software [2014-08-21 14:39:57 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\Behaviour Interactive [2013-10-11 13:56:02 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\BESTplayer [2014-10-26 11:20:38 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\BitTorrent [2014-10-26 11:14:22 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\DAEMON Tools Lite [2013-12-15 17:51:38 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\DigitalVolcano [2014-09-10 14:51:03 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\doublecmd [2013-10-21 15:43:23 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\DP Technology [2014-10-26 11:33:03 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\Dropbox [2014-10-13 21:14:01 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\DVDVideoSoft [2013-10-22 10:40:52 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\DWGEditor [2014-04-18 09:11:17 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\e-Deklaracje [2014-04-18 09:11:16 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1 [2014-02-09 11:44:52 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\EasternGraphics [2013-11-03 21:12:35 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\FoxTab [2013-10-19 15:22:27 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\fxCalc [2014-04-01 20:48:45 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\GHISLER [2013-10-22 10:57:37 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\GoforFiles [2013-10-30 19:34:10 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\IDT [2014-08-19 19:27:10 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\IObit [2014-10-09 10:56:19 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\IrfanView [2014-10-09 11:59:16 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\J River [2013-12-15 19:01:37 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\Luxology [2014-10-19 22:24:55 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\Mathsoft [2014-05-25 16:46:44 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\MyPhoneExplorer [2013-11-08 19:11:15 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\NapiProjekt [2014-02-21 21:42:16 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\newnext.me [2013-10-23 11:51:27 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\OpenOffice [2014-08-19 15:20:58 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\Opera Software [2014-08-19 19:28:24 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\ProductData [2013-11-12 18:39:13 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\Rovio [2014-10-06 10:12:10 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\SketchUp [2013-10-22 10:46:38 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\SoftGrid Client [2013-12-26 13:46:29 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\Sony [2013-12-01 09:05:41 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\stickies [2013-10-10 17:53:46 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\Synaptics [2014-08-19 18:53:57 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\systweak [2013-12-24 23:07:25 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\Teleca [2013-10-10 20:41:01 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\Thunderbird [2013-10-11 09:22:21 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\TP [2014-10-06 10:08:44 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\Trimble Navigation Limited [2014-04-11 08:35:48 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\Unigraphics Solutions [2013-10-12 21:57:33 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\WebApp [2013-12-01 09:08:14 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\WildTangent [2013-11-11 19:16:34 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\XBMC [2013-10-11 18:51:40 | 000,000,000 | ---D | M] -- C:\Users\Marcin K\AppData\Roaming\_MDLogs [2014-05-05 13:10:37 | 000,000,000 | ---D | M] -- C:\Users\Oleńka\AppData\Roaming\.minecraft [2014-09-07 16:49:27 | 000,000,000 | ---D | M] -- C:\Users\Oleńka\AppData\Roaming\Ace [2014-03-13 18:09:41 | 000,000,000 | ---D | M] -- C:\Users\Oleńka\AppData\Roaming\Ashampoo [2013-12-23 06:05:33 | 000,000,000 | ---D | M] -- C:\Users\Oleńka\AppData\Roaming\AVAST Software [2014-06-01 19:48:09 | 000,000,000 | ---D | M] -- C:\Users\Oleńka\AppData\Roaming\Behaviour Interactive [2014-06-04 05:50:45 | 000,000,000 | ---D | M] -- C:\Users\Oleńka\AppData\Roaming\DAEMON Tools Lite [2013-11-30 22:31:36 | 000,000,000 | ---D | M] -- C:\Users\Oleńka\AppData\Roaming\GHISLER [2014-04-14 10:47:29 | 000,000,000 | ---D | M] -- C:\Users\Oleńka\AppData\Roaming\HTC [2013-11-30 14:20:23 | 000,000,000 | ---D | M] -- C:\Users\Oleńka\AppData\Roaming\IDT [2013-12-11 20:12:21 | 000,000,000 | ---D | M] -- C:\Users\Oleńka\AppData\Roaming\IObit [2013-12-14 23:22:37 | 000,000,000 | ---D | M] -- C:\Users\Oleńka\AppData\Roaming\Luxology [2013-11-30 20:51:41 | 000,000,000 | ---D | M] -- C:\Users\Oleńka\AppData\Roaming\OpenOffice [2014-08-27 07:56:08 | 000,000,000 | ---D | M] -- C:\Users\Oleńka\AppData\Roaming\Opera Software [2014-09-11 09:04:46 | 000,000,000 | ---D | M] -- C:\Users\Oleńka\AppData\Roaming\ProductData [2013-11-15 17:15:38 | 000,000,000 | ---D | M] -- C:\Users\Oleńka\AppData\Roaming\Rovio [2013-12-28 18:26:27 | 000,000,000 | ---D | M] -- C:\Users\Oleńka\AppData\Roaming\SoftGrid Client [2014-03-13 18:07:25 | 000,000,000 | ---D | M] -- C:\Users\Oleńka\AppData\Roaming\Sony [2013-11-30 14:25:02 | 000,000,000 | ---D | M] -- C:\Users\Oleńka\AppData\Roaming\stickies [2013-10-14 16:04:47 | 000,000,000 | ---D | M] -- C:\Users\Oleńka\AppData\Roaming\Synaptics [2013-12-27 20:01:07 | 000,000,000 | ---D | M] -- C:\Users\Oleńka\AppData\Roaming\WB Games [2013-12-28 10:20:20 | 000,000,000 | ---D | M] -- C:\Users\Oleńka\AppData\Roaming\WebApp [color=#E56717]========== Purity Check ==========[/color] < End of report >