OTL logfile created on: 2015-01-31 19:54:42 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Łukasz\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,00 Gb Total Physical Memory | 2,01 Gb Available Physical Memory | 67,02% Memory free
6,19 Gb Paging File | 5,39 Gb Available in Paging File | 87,09% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 116,44 Gb Total Space | 29,70 Gb Free Space | 25,51% Space Free | Partition Type: NTFS
Drive D: | 108,63 Gb Total Space | 21,18 Gb Free Space | 19,50% Space Free | Partition Type: NTFS
 
Computer Name: LUKASZ-PC | User Name: Łukasz | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2015-01-31 17:38:59 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Łukasz\Downloads\OTL.exe
PRC - [2009-04-11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2015-01-25 07:08:41 | 009,170,760 | ---- | M] () -- C:\Users\Łukasz\AppData\Local\Google\Chrome\Application\40.0.2214.93\pdf.dll
MOD - [2013-09-05 00:14:10 | 004,300,456 | ---- | M] () -- C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2011-09-19 08:07:38 | 000,058,368 | ---- | M] () -- C:\Windows\System32\bdmpega.acm
MOD - [2007-06-15 18:28:36 | 000,147,456 | ---- | M] () -- C:\Program Files\ASUS\ASUS Data Security Manager\OverlayIconShlExt.dll
MOD - [2007-06-02 01:08:18 | 000,143,360 | ---- | M] () -- C:\Program Files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - [2015-01-31 16:40:45 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2015-01-27 19:59:22 | 000,834,752 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2015-01-26 09:39:31 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014-12-09 23:22:33 | 000,186,048 | ---- | M] () [Auto | Stopped] -- C:\Program Files\Razer\Razer Services\GSS\GameScannerService.exe -- (Razer Game Scanner Service)
SRV - [2013-12-19 00:41:02 | 030,814,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2013-03-20 09:07:18 | 000,233,472 | ---- | M] (Teruten) [Auto | Stopped] -- C:\Windows\System32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2012-12-29 11:26:54 | 001,260,472 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012-12-29 01:53:20 | 000,383,416 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2011-05-12 16:57:33 | 000,008,192 | ---- | M] () [Auto | Stopped] -- C:\Windows\System32\srvany.exe -- (KMService)
SRV - [2010-02-19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Stopped] -- D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2009-12-18 01:32:00 | 003,662,800 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\System32\GameMon.des -- (npggsvc)
SRV - [2008-01-18 22:38:26 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008-01-18 22:36:50 | 000,365,568 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2008-01-18 22:36:16 | 000,167,936 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
SRV - [2007-08-08 08:08:40 | 000,094,208 | ---- | M] () [Auto | Stopped] -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2007-08-03 20:24:54 | 000,125,496 | ---- | M] () [Auto | Stopped] -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe -- (spmgr)
SRV - [2007-05-18 10:31:16 | 000,073,728 | ---- | M] () [Auto | Stopped] -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe -- (ADSMService)
SRV - [2007-02-06 02:13:14 | 000,094,208 | ---- | M] () [Auto | Stopped] -- C:\Program Files\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService)
SRV - [2006-06-05 12:59:18 | 000,174,080 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe -- (ServiceLayer)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [File_System | On_Demand | Stopped] -- D:\Program Files\Razer\Razer Game Booster\Driver\WinRing0.sys -- (WinRing0_1_2_0)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\TKPcFtCb.sys -- (TKPcFt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\TkIdsVt.sys -- (TkIdsVt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\TKFWVT.sys -- (TKFWVT)
DRV - File not found [Kernel | System | Stopped] -- system32\TKFWFV.sys -- (TKFWFV)
DRV - File not found [File_System | On_Demand | Stopped] -- system32\TKFsFt.sys -- (TkFsFtM)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\TKFsAv.sys -- (TKFsAvM)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\TKCtrl2k.sys -- (TKCtrl)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\ASUS\ASUS Live Update\SYS\lvupdtio.sys -- (lvupdtio)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleNT.sys -- (EagleNT)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)
DRV - [2015-01-31 16:41:40 | 000,073,480 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\Windows\System32\drivers\aswmonflt.sys -- (aswMonFlt)
DRV - [2015-01-31 16:41:39 | 000,787,800 | ---- | M] (AVAST Software) [File_System | System | Stopped] -- C:\Windows\System32\drivers\aswsnx.sys -- (aswSnx)
DRV - [2015-01-31 16:41:35 | 000,423,784 | ---- | M] (AVAST Software) [File_System | System | Stopped] -- C:\Windows\System32\drivers\aswsp.sys -- (aswSP)
DRV - [2015-01-31 16:40:55 | 000,206,248 | ---- | M] () [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2015-01-31 16:40:55 | 000,057,928 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2015-01-31 16:40:55 | 000,049,944 | ---- | M] () [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2015-01-31 16:40:54 | 000,055,240 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2015-01-31 16:40:54 | 000,024,184 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\aswHwid.sys -- (aswHwid)
DRV - [2014-12-30 10:35:46 | 000,029,224 | ---- | M] (Razer Inc) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\rzvkeyboard.sys -- (rzvkeyboard)
DRV - [2014-12-30 10:35:44 | 000,011,304 | ---- | M] (Razer Inc) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\rzkbdhid.sys -- (rzkbdhid)
DRV - [2014-12-30 10:35:38 | 000,151,336 | ---- | M] (Razer Inc) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\rzudd.sys -- (rzudd)
DRV - [2014-12-09 23:21:53 | 000,020,416 | ---- | M] (Razer, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\rzpmgrk.sys -- (rzpmgrk)
DRV - [2014-10-23 21:06:00 | 000,097,088 | ---- | M] (Razer, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\rzpnk.sys -- (rzpnk)
DRV - [2014-09-05 04:27:46 | 000,030,120 | ---- | M] (Razer Inc) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\rzdaendpt.sys -- (rzdaendpt)
DRV - [2014-04-11 09:39:22 | 000,184,192 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudmdm.sys -- (ssudmdm)
DRV - [2014-04-11 09:39:22 | 000,089,856 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudbus.sys -- (dg_ssudbus)
DRV - [2013-03-29 16:20:54 | 000,013,232 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\apf003.sys -- (apf003)
DRV - [2013-03-20 09:07:16 | 000,037,344 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2012-12-29 11:26:54 | 008,904,632 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2012-08-02 10:21:18 | 000,026,248 | ---- | M] (EldoS Corporation) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\ElRawDsk.sys -- (ElRawDisk)
DRV - [2011-11-23 21:45:42 | 000,032,768 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\taphss.sys -- (taphss)
DRV - [2010-06-29 15:58:45 | 000,691,696 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2010-03-04 15:24:38 | 000,281,760 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt)
DRV - [2010-03-04 15:24:37 | 000,025,888 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2009-04-11 05:42:52 | 000,031,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (winusb)
DRV - [2009-03-18 17:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2009-03-13 13:50:18 | 001,095,808 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\smserial.sys -- (smserial)
DRV - [2007-09-26 13:12:22 | 002,251,776 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw4v32.sys -- (NETw4v32)
DRV - [2007-08-29 17:38:59 | 000,046,080 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\l160x86.sys -- (AtcL001)
DRV - [2007-08-11 04:19:26 | 000,029,752 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [File_System | Boot | Running] -- C:\Windows\System32\drivers\AsDsm.sys -- (AsDsm)
DRV - [2007-08-03 05:26:21 | 000,020,936 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys -- (ghaio)
DRV - [2007-07-24 19:09:04 | 000,013,880 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Program Files\ATKGFNEX\ASMMAP.sys -- (ASMMAP)
DRV - [2007-05-25 03:15:15 | 001,743,232 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\snp2uvc.sys -- (SNP2UVC)
DRV - [2007-03-21 15:02:03 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2007-02-24 07:42:21 | 000,039,936 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2007-01-24 11:08:39 | 000,005,632 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr)
DRV - [2007-01-23 09:40:19 | 000,042,496 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2006-12-14 08:11:57 | 000,007,680 | ---- | M] (ATK0100) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ATKACPI.sys -- (MTsensor)
DRV - [2006-11-02 10:50:17 | 000,041,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tpm.sys -- (TPM)
DRV - [2006-11-02 08:30:56 | 000,044,544 | ---- | M] (Realtek Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2006-11-02 08:30:54 | 001,781,760 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NETw3v32.sys -- (NETw3v32)
DRV - [2006-05-29 07:26:38 | 000,127,488 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nmwcd.sys -- (Nokia USB Phone Parent)
DRV - [2006-05-29 07:26:36 | 000,013,312 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nmwcdcj.sys -- (Nokia USB Port)
DRV - [2006-05-29 07:26:36 | 000,013,312 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nmwcdcm.sys -- (Nokia USB Modem)
DRV - [2006-05-29 07:26:36 | 000,008,704 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nmwcdc.sys -- (Nokia USB Generic)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Local Page = http://www.Google.com/
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Local Page Restore = 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{A0B271A9-D8AA-8E74-7392-2164D6A1C03C}: "URL" = http://www.iesearch.com/s/?q={searchTerms}
 
 
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-21-704376898-2786838306-483735257-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
IE - HKU\S-1-5-21-704376898-2786838306-483735257-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-21-704376898-2786838306-483735257-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://securityresponse.symantec.com/avcenter/fix_homepage/
IE - HKU\S-1-5-21-704376898-2786838306-483735257-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-704376898-2786838306-483735257-1000\..\SearchScopes,DefaultScope = {A0B271A9-D8AA-8E74-7392-2164D6A1C03C}
IE - HKU\S-1-5-21-704376898-2786838306-483735257-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-704376898-2786838306-483735257-1000\..\SearchScopes\{A0B271A9-D8AA-8E74-7392-2164D6A1C03C}: "URL" = http://www.iesearch.com/s/?q={searchTerms}
IE - HKU\S-1-5-21-704376898-2786838306-483735257-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-704376898-2786838306-483735257-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;127.0.0.1:9421;<local>
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_296.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: D:\Program Files\DivX\DivX Web Player\npdivx32.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: D:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF - HKLM\Software\MozillaPlugins\@garmin.com/GpsControl: C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpWinExt,version=5.0: C:\Program Files\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.2: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.3: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.5: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKCU\Software\MozillaPlugins\@onlive.com/OnLiveGameClientDetector,version=1.0.0: C:\Program Files\OnLive\Plugin\npolgdet.dll File not found
FF - HKCU\Software\MozillaPlugins\@soe.sony.com/installer,version=1.0.3: C:\Users\Łukasz\AppData\LocalLow\Sony Online Entertainment\npsoe.dll File not found
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Łukasz\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\Łukasz\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Łukasz\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=8: C:\Users\Łukasz\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Łukasz\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Łukasz\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\msntoolbar@msn.com: C:\Program Files\MSN Toolbar\Platform\5.0.1449.0\Firefox [2010-11-24 16:36:28 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2010-11-27 09:04:05 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-01-31 19:03:46 | 000,000,000 | ---D | M]
 
[2014-03-20 22:09:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Łukasz\AppData\Roaming\mozilla\Extensions
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider:  (Enabled)
CHR - default_search_provider: search_url = 
CHR - default_search_provider: suggest_url = 
CHR - plugin: Error reading preferences file
CHR - Extension: No name found = C:\Users\Łukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\
CHR - Extension: No name found = C:\Users\Łukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1\
CHR - Extension: No name found = C:\Users\Łukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.17_0\
CHR - Extension: No name found = C:\Users\Łukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkclphmapdcppbmekmbkcjfanpmoidpg\3_0\
CHR - Extension: No name found = C:\Users\Łukasz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_1\
 
O1 HOSTS File: ([2006-09-18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - No CLSID value found.
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
O3 - HKU\S-1-5-21-704376898-2786838306-483735257-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKU\S-1-5-21-704376898-2786838306-483735257-1000\..\Toolbar\WebBrowser: (no name) - {37B85A29-692B-4205-9CAD-2626E4993404} - No CLSID value found.
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ASUS Camera ScreenSaver] C:\Windows\ASScrProlog.exe ()
O4 - HKLM..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe ()
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMedia.exe (ASUSTeK Computer INC.)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [Razer Synapse] C:\Program Files\Razer\Synapse\RzSynapse.exe (Razer Inc.)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [run32d] C:\Windows\system\run32dll.exe ()
O4 - HKLM..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe (Motorola Inc.)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-704376898-2786838306-483735257-1000..\Run: [AdobeBridge]  File not found
O4 - HKU\S-1-5-21-704376898-2786838306-483735257-1000..\Run: [Akamai NetSession Interface] C:\Users\Łukasz\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
O4 - HKU\S-1-5-21-704376898-2786838306-483735257-1000..\Run: [fsm]  File not found
O4 - HKU\S-1-5-21-704376898-2786838306-483735257-1000..\Run: [OfficeSyncProcess] C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE (Microsoft Corporation)
O4 - HKU\S-1-5-21-704376898-2786838306-483735257-1000..\Run: [Software Informer] D:\Program Files\Software Informer\softinfo.exe (Informer Technologies, Inc.)
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Rootkit (cleanup)] C:\ProgramData\Malwarebytes' Anti-Malware (portable)\mbamdor.exe (Malwarebytes Corporation)
O4 - Startup: C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\plik.bat ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O7 - HKU\S-1-5-21-704376898-2786838306-483735257-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Wyślij &do programu OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-704376898-2786838306-483735257-1000\..Trusted Domains: aeriagames.com ([]http in Trusted sites)
O15 - HKU\S-1-5-21-704376898-2786838306-483735257-1000\..Trusted Domains: aeriagames.com ([]https in Trusted sites)
O15 - HKU\S-1-5-21-704376898-2786838306-483735257-1000\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-704376898-2786838306-483735257-1000\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-704376898-2786838306-483735257-1000\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-704376898-2786838306-483735257-1000\..Trusted Domains: sony.com ([]* in Trusted sites)
O16 - DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.1.62.0.cab (Reg Error: Key error.)
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} http://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab (NVIDIA Smart Scan)
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} https://www.battlefieldheroes.com/static/updater/BFHUpdater_4.0.53.0.cab (Battlefield Heroes Updater)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.5.1.0.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.204.152.34 194.204.159.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{29A33D10-4955-41E7-9B7F-D1FBFEE91A99}: DhcpNameServer = 194.204.152.34 194.204.159.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{89CCC2D2-596E-4FF1-98F5-CF23B5F9219A}: DhcpNameServer = 194.204.152.34 194.204.159.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 0
O32 - AutoRun File - [2006-09-18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{b749a519-c535-11dd-a32f-001fc6127eee}\Shell\AutoRun\command - "" = F:\ceb6eu98.bat
O33 - MountPoints2\{b749a519-c535-11dd-a32f-001fc6127eee}\Shell\explore\Command - "" = F:\ceb6eu98.bat
O33 - MountPoints2\{b749a519-c535-11dd-a32f-001fc6127eee}\Shell\open\Command - "" = F:\ceb6eu98.bat
O33 - MountPoints2\{da488f5e-cd15-11dd-bba0-001fc6127eee}\Shell - "" = AutoRun
O33 - MountPoints2\{da488f5e-cd15-11dd-bba0-001fc6127eee}\Shell\AutoRun\command - "" = F:\PrawoJazdyGP.exe
O33 - MountPoints2\{e4589ab3-89d4-11df-9ed0-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{e4589ab3-89d4-11df-9ed0-806e6f6e6963}\Shell\AutoRun\command - "" = E:\WAG200G.exe
O33 - MountPoints2\{ef7fd13c-8d16-11df-882c-001e8c9667f8}\Shell - "" = AutoRun
O33 - MountPoints2\{ef7fd13c-8d16-11df-882c-001e8c9667f8}\Shell\AutoRun\command - "" = G:\iStudio.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2015-01-31 17:16:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2015-01-31 17:12:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes' Anti-Malware (portable)
[2015-01-31 17:12:07 | 000,119,512 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys
[2015-01-31 17:10:19 | 000,082,648 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys
[2015-01-31 16:49:15 | 000,000,000 | ---D | C] -- C:\Users\Łukasz\AppData\Roaming\AVAST Software
[2015-01-31 16:41:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
[2015-01-31 16:41:04 | 000,787,800 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswsnx.sys
[2015-01-31 16:41:04 | 000,423,784 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswsp.sys
[2015-01-31 16:41:04 | 000,073,480 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswmonflt.sys
[2015-01-31 16:41:04 | 000,057,928 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys
[2015-01-31 16:41:04 | 000,055,240 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr.sys
[2015-01-31 16:40:58 | 000,291,352 | ---- | C] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2015-01-31 16:40:53 | 000,043,152 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2015-01-31 16:36:49 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2015-01-31 16:18:55 | 000,772,544 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll
[2015-01-31 16:18:55 | 000,687,544 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\deployJava1.dll
[2015-01-30 23:38:27 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java(7)
[2015-01-18 16:16:47 | 000,099,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\infocardapi.dll
[2015-01-18 16:16:46 | 000,619,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icardagt.exe
[2015-01-18 16:16:46 | 000,008,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\icardres.dll
[2015-01-18 16:16:16 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsWpfWrp.exe
[2015-01-18 16:12:49 | 000,156,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscorier.dll
[2015-01-18 16:12:49 | 000,081,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscories.dll
[2015-01-18 16:07:20 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msaudite.dll
[2015-01-18 16:07:15 | 000,619,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adtschema.dll
[2015-01-18 16:03:00 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2015-01-18 15:32:08 | 000,000,000 | ---D | C] -- C:\Windows\System32\MRT
[2015-01-18 15:25:47 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml3r.dll
[2015-01-18 15:06:40 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\packager.dll
[2015-01-18 14:18:41 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2015-01-18 14:14:09 | 000,729,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IMJP10K.DLL
[2015-01-18 13:36:21 | 000,396,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AudioEng.dll
[2015-01-18 13:36:20 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AUDIOKSE.dll
[2015-01-18 13:36:20 | 000,170,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDump.dll
[2015-01-18 13:32:27 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncsi.dll
[2015-01-18 13:03:20 | 002,054,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2015-01-18 12:52:35 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cscript.exe
[2015-01-18 12:52:35 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshcon.dll
[2015-01-18 12:52:32 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2015-01-18 12:52:31 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2015-01-18 12:52:31 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2015-01-18 12:52:30 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2015-01-18 12:52:30 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2015-01-18 12:52:29 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2015-01-18 12:52:28 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2015-01-18 12:52:20 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2015-01-18 12:52:20 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2015-01-18 12:52:20 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2015-01-18 12:52:19 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2015-01-18 12:52:18 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2015-01-18 12:52:15 | 001,810,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2015-01-18 12:51:58 | 001,069,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2015-01-18 12:51:57 | 001,172,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2015-01-18 12:51:57 | 000,683,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2015-01-18 12:51:57 | 000,486,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2015-01-18 12:51:57 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2015-01-18 12:51:57 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
[2015-01-18 12:51:56 | 001,029,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
[2015-01-18 12:51:56 | 000,160,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2015-01-18 12:49:11 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
[2015-01-18 12:48:51 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
[2015-01-18 12:48:49 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbport.sys
[2015-01-18 12:48:49 | 000,006,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbd.sys
[2015-01-18 12:48:42 | 001,993,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\authui.dll
[2015-01-18 12:48:42 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\consent.exe
[2015-01-18 12:48:41 | 000,332,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msihnd.dll
[2015-01-18 12:48:32 | 000,506,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qedit.dll
[2015-01-18 12:47:43 | 003,551,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2015-01-18 12:47:42 | 003,603,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2015-01-18 12:47:24 | 000,596,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FWPUCLNT.DLL
[2015-01-18 12:47:14 | 001,548,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVDECOD.DLL
[2015-01-18 12:47:06 | 000,293,376 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2015-01-18 12:47:06 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2015-01-18 12:47:03 | 000,025,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidparse.sys
[2015-01-18 12:46:55 | 000,335,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SysFxUI.dll
[2015-01-18 12:46:55 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\portcls.sys
[2015-01-18 12:46:55 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\drmk.sys
[2015-01-18 12:46:49 | 000,876,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wer.dll
[2015-01-10 11:18:49 | 000,000,000 | ---D | C] -- C:\Users\Łukasz\Desktop\Berserk Tom 2
[2015-01-09 22:45:36 | 000,000,000 | ---D | C] -- C:\Users\Łukasz\Desktop\Berserk Tom 1
[2015-01-02 16:14:41 | 000,000,000 | ---D | C] -- C:\Users\Łukasz\AppData\Local\Introversion
[2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[15 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2015-01-31 19:13:07 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2015-01-31 19:11:39 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2015-01-31 19:10:12 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2015-01-31 19:10:12 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2015-01-31 19:10:04 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2015-01-31 19:10:01 | 000,000,428 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{7ABECA1B-F569-45EA-974B-6D780BC56002}.job
[2015-01-31 19:08:00 | 000,001,062 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-704376898-2786838306-483735257-1000UA.job
[2015-01-31 18:13:10 | 000,001,356 | ---- | M] () -- C:\Users\Łukasz\AppData\Local\d3d9caps.dat
[2015-01-31 17:12:07 | 000,119,512 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys
[2015-01-31 17:10:19 | 000,082,648 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys
[2015-01-31 16:41:58 | 000,001,838 | ---- | M] () -- C:\Users\Public\Desktop\Avast Free Antivirus.lnk
[2015-01-31 16:41:40 | 000,073,480 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswmonflt.sys
[2015-01-31 16:41:39 | 000,787,800 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswsnx.sys
[2015-01-31 16:41:35 | 000,423,784 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswsp.sys
[2015-01-31 16:41:26 | 000,000,350 | -H-- | M] () -- C:\Windows\tasks\avast! Emergency Update.job
[2015-01-31 16:40:55 | 000,206,248 | ---- | M] () -- C:\Windows\System32\drivers\aswVmm.sys
[2015-01-31 16:40:55 | 000,057,928 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys
[2015-01-31 16:40:55 | 000,049,944 | ---- | M] () -- C:\Windows\System32\drivers\aswRvrt.sys
[2015-01-31 16:40:54 | 000,055,240 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr.sys
[2015-01-31 16:40:54 | 000,024,184 | ---- | M] () -- C:\Windows\System32\drivers\aswHwid.sys
[2015-01-31 16:40:53 | 000,291,352 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2015-01-31 16:40:53 | 000,043,152 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2015-01-31 16:22:07 | 000,045,056 | ---- | M] () -- C:\Windows\System32\acovcnt.exe
[2015-01-31 16:12:00 | 000,001,036 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2015-01-31 15:39:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2015-01-31 14:27:09 | 000,000,018 | ---- | M] () -- C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\plik.bat
[2015-01-30 17:33:43 | 000,069,246 | ---- | M] () -- C:\Users\Łukasz\Desktop\10632601_763376883731458_1238117145697089184_n.jpg
[2015-01-29 17:08:06 | 000,001,010 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-704376898-2786838306-483735257-1000Core.job
[2015-01-27 11:12:00 | 000,002,060 | ---- | M] () -- C:\Users\Łukasz\Desktop\Google Chrome.lnk
[2015-01-26 09:39:30 | 000,701,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2015-01-26 09:39:30 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2015-01-19 17:49:18 | 000,000,213 | ---- | M] () -- C:\Users\Łukasz\Desktop\Dota 2.url
[2015-01-19 13:18:17 | 003,748,792 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2015-01-18 17:08:34 | 000,740,482 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2015-01-18 17:08:34 | 000,657,614 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2015-01-18 17:08:34 | 000,165,164 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2015-01-18 17:08:34 | 000,129,672 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2015-01-18 10:08:19 | 372,895,442 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2015-01-12 17:39:47 | 000,031,755 | ---- | M] () -- C:\Users\Łukasz\Desktop\10930931_761225877279892_4036014461702494829_n.jpg
[2015-01-08 21:22:22 | 000,152,857 | ---- | M] () -- C:\Users\Łukasz\Desktop\10912377_988083301219042_1618363922_o.jpg
[2015-01-08 09:55:52 | 000,249,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2015-01-02 16:06:22 | 000,000,216 | ---- | M] () -- C:\Users\Łukasz\Desktop\Prison Architect.url
[2 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[15 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2015-01-31 16:41:58 | 000,001,838 | ---- | C] () -- C:\Users\Public\Desktop\Avast Free Antivirus.lnk
[2015-01-31 16:41:26 | 000,000,350 | -H-- | C] () -- C:\Windows\tasks\avast! Emergency Update.job
[2015-01-31 16:41:04 | 000,206,248 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys
[2015-01-31 16:41:04 | 000,049,944 | ---- | C] () -- C:\Windows\System32\drivers\aswRvrt.sys
[2015-01-31 16:41:04 | 000,024,184 | ---- | C] () -- C:\Windows\System32\drivers\aswHwid.sys
[2015-01-31 14:27:09 | 000,000,018 | ---- | C] () -- C:\Users\Łukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\plik.bat
[2015-01-30 16:24:33 | 000,069,246 | ---- | C] () -- C:\Users\Łukasz\Desktop\10632601_763376883731458_1238117145697089184_n.jpg
[2015-01-19 17:49:18 | 000,000,213 | ---- | C] () -- C:\Users\Łukasz\Desktop\Dota 2.url
[2015-01-18 12:47:25 | 000,218,228 | ---- | C] () -- C:\Windows\System32\WFP.TMF
[2015-01-12 17:39:36 | 000,031,755 | ---- | C] () -- C:\Users\Łukasz\Desktop\10930931_761225877279892_4036014461702494829_n.jpg
[2015-01-08 21:22:19 | 000,152,857 | ---- | C] () -- C:\Users\Łukasz\Desktop\10912377_988083301219042_1618363922_o.jpg
[2015-01-02 16:06:22 | 000,000,216 | ---- | C] () -- C:\Users\Łukasz\Desktop\Prison Architect.url
[2014-11-30 09:58:41 | 003,748,792 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2014-08-14 16:25:17 | 003,130,440 | ---- | C] () -- C:\Windows\System32\pbsvc_blr.exe
[2014-04-30 18:47:48 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2013-04-02 10:33:58 | 000,110,592 | ---- | C] () -- C:\Windows\System32\FsUsbExDevice.Dll
[2013-04-02 10:33:58 | 000,037,344 | ---- | C] () -- C:\Windows\System32\FsUsbExDisk.Sys
[2013-03-29 16:20:54 | 000,016,304 | ---- | C] () -- C:\Windows\System32\apl003.sys
[2013-03-29 16:20:54 | 000,013,232 | ---- | C] () -- C:\Windows\System32\apf003.sys
[2013-03-10 17:07:36 | 000,639,488 | ---- | C] () -- C:\Windows\System32\ficvdec_x86.dll
[2012-10-06 17:44:41 | 000,000,132 | ---- | C] () -- C:\Users\Łukasz\AppData\Roaming\Preferencje Adobe CS5 dla formatu PNG
[2012-09-26 17:57:29 | 000,004,030 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\recently-used.xbel
[2012-08-25 10:46:38 | 000,828,671 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Tempmusic.ogg
[2011-09-02 18:50:25 | 000,000,032 | R--- | C] () -- C:\Users\Łukasz\hash.dat
[2011-05-09 14:42:54 | 000,010,736 | ---- | C] () -- C:\Users\Łukasz\AppData\Roaming\TheHunterSettings_live.bin
[2011-05-09 14:36:30 | 000,000,041 | ---- | C] () -- C:\Users\Łukasz\AppData\Roaming\TheHunterSettings_live.cfg
[2011-01-11 20:06:59 | 000,093,674 | ---- | C] () -- C:\Users\Łukasz\AppData\Roaming\Uninstal.exe
[2010-07-01 16:03:41 | 000,000,085 | -HS- | C] () -- C:\ProgramData\.zreglib
[2010-06-18 16:37:12 | 000,000,640 | ---- | C] () -- C:\Users\Łukasz\AppData\Roaming\rcx.dat
[2010-06-18 16:37:12 | 000,000,084 | ---- | C] () -- C:\Users\Łukasz\AppData\Roaming\rcx.ini
[2010-05-27 18:42:53 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempNI4256.html
[2010-05-27 18:42:53 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempoI4256.html
[2010-04-02 13:24:43 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempLJ7732.html
[2010-04-02 13:24:43 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempOd7732.html
[2010-04-01 17:05:56 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempDN6064.html
[2010-04-01 17:05:56 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempOy6064.html
[2010-04-01 15:11:21 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempDq2564.html
[2010-04-01 15:11:21 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempzM2564.html
[2010-03-31 18:50:43 | 000,000,000 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempNT4860.html
[2010-03-31 18:50:43 | 000,000,000 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempEA4860.html
[2010-03-31 18:18:34 | 000,002,432 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\Temprn6900.html
[2010-03-31 18:18:34 | 000,002,089 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\TempCD6900.html
[2009-11-23 09:50:05 | 000,001,400 | ---- | C] () -- C:\Users\Łukasz\AppData\Roaming\default.cfg
[2009-10-22 15:11:55 | 000,000,552 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\d3d8caps.dat
[2009-08-11 14:44:36 | 000,080,798 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2009-08-11 14:44:36 | 000,080,798 | ---- | C] () -- C:\ProgramData\nvModes.001
[2009-01-17 15:12:14 | 000,006,107 | ---- | C] () -- C:\Users\Łukasz\ims_radios.xml
[2008-07-27 20:19:56 | 000,001,356 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\d3d9caps.dat
[2008-06-22 21:43:24 | 000,218,112 | ---- | C] () -- C:\Users\Łukasz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008-06-22 19:39:33 | 000,138,056 | ---- | C] () -- C:\Users\Łukasz\AppData\Roaming\PnkBstrK.sys
[2008-06-22 15:01:46 | 000,041,478 | ---- | C] () -- C:\Users\Łukasz\AppData\Roaming\nvModes.001
[2008-06-22 14:44:23 | 000,041,478 | ---- | C] () -- C:\Users\Łukasz\AppData\Roaming\nvModes.dat
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2006-11-02 13:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014-03-25 14:26:04 | 011,587,584 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009-04-11 07:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009-04-11 07:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2011-03-20 12:17:08 | 000,000,000 | ---D | M] -- C:\Users\Gość\AppData\Roaming\PC Suite
[2014-11-16 11:57:39 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\.minecraft
[2013-06-28 16:30:09 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\.mono
[2008-10-20 20:45:53 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\.wyzo
[2009-01-12 19:28:18 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\3DFA
[2013-03-29 14:21:14 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Aeria Games & Entertainment
[2015-01-13 22:10:53 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\AIMP3
[2010-01-31 15:15:58 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Any Video Converter
[2013-09-06 17:01:14 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Arrowhead
[2012-08-04 18:57:15 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Audacity
[2015-01-31 16:49:15 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\AVAST Software
[2014-08-06 08:27:19 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Awesomium
[2012-01-28 16:19:18 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\BANDISOFT
[2014-10-26 15:10:57 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Battle.net
[2011-07-07 19:08:24 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Beat Hazard
[2014-04-18 09:38:47 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\BigHugeEngine
[2014-08-16 15:30:36 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Bioshock
[2010-05-08 19:35:39 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Bump Technologies, Inc
[2012-11-19 19:31:05 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Carbon
[2008-07-06 15:35:44 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\City Interactive
[2012-07-21 16:21:43 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2009-07-31 18:23:29 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\CometNetwork
[2008-12-18 16:04:52 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\DAEMON Tools
[2010-10-22 10:53:45 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Dark Sector
[2014-07-20 16:29:10 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\DarknessII
[2008-07-12 16:21:05 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\DataLayer
[2014-01-15 20:17:29 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Dev-Cpp
[2012-11-30 16:18:04 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Downloaded Installations
[2014-07-03 15:51:19 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\FearlessFantasy
[2008-09-06 18:27:26 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\FileZilla
[2008-09-06 19:33:05 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\FlashFXP
[2013-08-03 15:45:01 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\FlvtoConverter
[2012-06-26 12:38:53 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\FOG Downloader
[2010-03-05 16:36:06 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\FUJIFILM
[2008-08-03 17:29:59 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Gadu-Gadu
[2010-03-31 18:17:20 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Gadu-Gadu 10
[2010-09-19 10:06:36 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\GARMIN
[2014-03-20 22:22:29 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\GG
[2010-07-11 14:21:18 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\GHISLER
[2012-09-23 08:44:22 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\gtk-2.0
[2012-10-10 08:38:51 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\GZero
[2011-06-18 09:02:37 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Hi-Rez Studios
[2012-09-23 14:16:04 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\iolo
[2010-02-27 22:12:00 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\ipla
[2009-03-23 18:36:36 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Jasc
[2009-06-12 13:51:40 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Leadertech
[2010-11-30 18:58:57 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\LolClient
[2012-05-24 17:08:10 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\LolClient2
[2013-03-10 17:07:43 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Mirillis
[2009-10-18 10:19:20 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Moje pliki zapisu Bitwy o Śródziemie
[2009-07-17 18:01:59 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Mount&Blade
[2012-08-22 11:04:20 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Mount&Blade Warband
[2012-08-22 10:47:45 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Mount&Blade With Fire and Sword
[2014-09-19 18:52:57 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Mp3tag
[2010-09-18 13:32:27 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Need for Speed World
[2011-09-04 14:46:11 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\nHancer
[2008-09-14 09:21:10 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Nokia
[2008-12-28 18:37:19 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Nowe Gadu-Gadu
[2011-02-07 17:00:43 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\OnLive App
[2009-08-28 19:08:09 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\OpenFM
[2009-04-14 17:48:48 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Opera
[2014-05-13 15:07:23 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Oracle
[2013-08-16 16:20:10 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Origin
[2013-08-05 07:53:26 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Otaku Helper
[2008-07-12 16:19:06 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\PC Suite
[2009-01-02 15:47:39 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Petroglyph
[2009-05-19 20:22:39 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Publish Providers
[2013-07-22 14:04:53 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Rainmeter
[2015-01-18 17:37:20 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\RenPy
[2013-10-27 18:25:23 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\RIFT
[2012-02-24 19:46:40 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\RotMG.Production
[2011-01-02 19:30:44 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\runic games
[2013-04-02 10:26:54 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Samsung
[2008-06-26 20:54:10 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Sierra Entertainment
[2015-01-30 10:28:25 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Software Informer
[2010-02-02 11:44:47 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Sony
[2012-02-12 15:03:29 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Sony Creative Software
[2009-07-19 16:48:14 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\SpieleEntwicklungsKombinat
[2012-04-15 19:34:34 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\SplitMediaLabs
[2011-07-19 10:09:26 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Splitscreen Studios
[2008-09-25 16:22:41 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\SPORE
[2015-01-30 23:00:43 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Spotify
[2012-10-06 17:19:10 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2012-07-25 12:22:33 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\SYSTEMAX Software Development
[2013-07-24 12:43:02 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\The Creative Assembly
[2010-07-11 20:39:18 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\The Hobbit
[2014-01-25 15:53:47 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\To the Moon - Freebird Games
[2008-06-22 14:35:04 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Touchstone
[2013-06-02 11:30:51 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Trine2
[2015-01-31 16:44:13 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\TS3Client
[2010-03-25 13:18:30 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\TuneUp Software
[2013-08-30 17:13:10 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Tunngle
[2013-04-15 19:38:21 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Ubisoft
[2012-04-29 11:17:55 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Unity
[2014-11-29 14:55:02 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\uTorrent
[2015-01-25 12:10:52 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\ViberPC
[2012-02-04 18:24:49 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\wargaming.net
[2009-09-08 16:27:58 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\Windows Live Writer
[2014-01-30 18:40:53 | 000,000,000 | ---D | M] -- C:\Users\Łukasz\AppData\Roaming\WizardWars
[2013-04-29 19:57:57 | 000,000,000 | -HSD | M] -- C:\Users\Łukasz\AppData\Roaming\wyUpdate AU
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 526 bytes -> C:\ProgramData\TEMP:05EE1EEF

< End of report >