OTL logfile created on: 2011-06-09 09:36:05 - Run 3 OTL by OldTimer - Version 3.2.23.0 Folder = C:\Users\Paweł\Downloads Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,67 Gb Total Physical Memory | 1,64 Gb Available Physical Memory | 61,62% Memory free 5,34 Gb Paging File | 4,09 Gb Available in Paging File | 76,63% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 29,30 Gb Total Space | 14,19 Gb Free Space | 48,43% Space Free | Partition Type: NTFS Drive D: | 387,63 Gb Total Space | 360,52 Gb Free Space | 93,01% Space Free | Partition Type: NTFS Drive E: | 48,73 Gb Total Space | 18,42 Gb Free Space | 37,81% Space Free | Partition Type: NTFS Computer Name: PAWEŁ-KOMPUTER | User Name: Paweł | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-06-01 19:40:59 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\Paweł\Downloads\OTL.exe PRC - [2011-05-24 20:33:36 | 004,771,184 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\BitTorrent\BitTorrent.exe PRC - [2011-04-17 21:57:50 | 003,510,160 | ---- | M] (Xfire Inc.) -- C:\Program Files\Xfire\Xfire.exe PRC - [2011-04-08 07:14:00 | 002,218,600 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe PRC - [2011-04-07 22:43:20 | 000,373,864 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe PRC - [2011-04-07 22:43:04 | 000,841,832 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe PRC - [2011-01-20 11:20:12 | 001,305,408 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe PRC - [2011-01-20 11:20:04 | 000,313,152 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe PRC - [2010-07-02 13:36:26 | 001,597,440 | ---- | M] () -- C:\Program Files\ASUS\Wireless Console 3\wcourier.exe PRC - [2010-06-24 17:50:50 | 006,806,144 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe PRC - [2010-06-09 09:55:54 | 001,080,448 | ---- | M] (asus) -- C:\Program Files\ASUS\ControlDeck\ControlDeck.exe PRC - [2010-05-28 10:49:08 | 000,277,120 | ---- | M] (ATK) -- C:\Program Files\P4G\BatteryLife.exe PRC - [2010-05-03 17:07:54 | 001,271,088 | ---- | M] (SRS Labs, Inc.) -- C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel.exe PRC - [2010-05-03 14:45:50 | 000,182,912 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControl.exe PRC - [2010-05-03 14:41:46 | 000,170,624 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe PRC - [2010-04-13 09:32:42 | 000,548,744 | ---- | M] (ELAN Microelectronic Corp.) -- C:\Program Files\Elantech\ETDCtrl.exe PRC - [2010-04-07 07:16:54 | 001,599,880 | ---- | M] (ELAN Microelectronic Corp.) -- C:\Program Files\Elantech\ETDCtrlHelper.exe PRC - [2009-12-15 10:39:38 | 000,096,896 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe PRC - [2009-09-30 19:34:22 | 002,314,240 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2009-09-30 19:33:08 | 000,262,144 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2009-09-23 10:11:54 | 001,160,320 | ---- | M] (ASUS) -- C:\Program Files\ASUS\Net4Switch\Net4Switch.exe PRC - [2009-07-31 10:38:24 | 000,305,720 | ---- | M] (ASUS) -- C:\Program Files\ASUS\SmartLogon\sensorsrv.exe PRC - [2009-07-23 10:30:06 | 000,544,768 | ---- | M] (ATK) -- C:\Program Files\ASUS\Splendid\ACMON.exe PRC - [2009-07-14 03:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe PRC - [2009-07-14 03:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009-06-29 10:39:50 | 000,157,752 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ASUS CopyProtect\ASPG.exe PRC - [2009-06-19 10:29:42 | 000,105,016 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControlUser.exe PRC - [2009-06-19 10:29:26 | 002,488,888 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe PRC - [2009-06-15 17:30:42 | 000,084,536 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe PRC - [2008-12-22 17:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Package\ATK Hotkey\WDC.exe PRC - [2007-11-30 11:20:44 | 000,051,768 | ---- | M] () -- C:\Program Files\ASUS\ASUS Live Update\ALU.exe PRC - [2005-07-06 15:43:42 | 000,155,648 | ---- | M] (ASUSTeK) -- C:\Windows\System32\ACEngSvr.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-06-01 19:40:59 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\Paweł\Downloads\OTL.exe MOD - [2011-04-17 21:57:58 | 000,974,736 | ---- | M] (Xfire Inc.) -- C:\Program Files\Xfire\xfire_toucan_44225.dll MOD - [2011-04-08 07:14:00 | 000,197,736 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvinit.dll MOD - [2009-07-14 03:16:20 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsock32.dll MOD - [2009-07-14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll MOD - [2003-02-21 20:42:22 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\msvcr71.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2011-04-08 07:14:00 | 002,218,600 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService) SRV - [2010-06-22 11:05:38 | 000,303,744 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Stopped] -- C:\Windows\System32\FBAgent.exe -- (AFBAgent) SRV - [2009-12-15 10:39:38 | 000,096,896 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv) SRV - [2009-09-30 19:34:22 | 002,314,240 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R) SRV - [2009-09-30 19:33:08 | 000,262,144 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R) SRV - [2009-08-06 14:17:40 | 000,094,096 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost) SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009-07-14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) SRV - [2009-07-14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2009-06-15 17:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService) SRV - [2008-03-31 02:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) [On_Demand | Stopped] -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe -- (ADSMService) SRV - [2007-08-03 12:24:54 | 000,125,496 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe -- (spmgr) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011-05-24 23:09:59 | 000,218,688 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV - [2011-05-05 21:49:19 | 000,030,264 | ---- | M] (ASUSTek Computer Inc) [File_System | Boot | Running] -- C:\Windows\System32\drivers\AsDsm.sys -- (AsDsm) DRV - [2011-04-08 07:14:00 | 010,690,024 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2011-04-08 07:14:00 | 000,020,328 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\nvpciflt.sys -- (nvpciflt) DRV - [2010-03-02 10:43:20 | 001,263,104 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr) DRV - [2010-02-26 10:31:22 | 000,132,480 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Impcd.sys -- (Impcd) DRV - [2010-02-25 05:27:00 | 000,098,928 | ---- | M] (JMicron Technology Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\JME.sys -- (JME) DRV - [2010-02-03 00:36:34 | 000,232,960 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IntcDAud.sys -- (IntcDAud) Intel(R) DRV - [2010-01-18 11:45:00 | 000,514,104 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CHDRT32.sys -- (CnxtHdAudService) DRV - [2009-09-17 12:54:14 | 000,041,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HECI.sys -- (HECI) Intel(R) DRV - [2009-08-18 10:23:28 | 000,119,408 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\jmcr.sys -- (JMCR) DRV - [2009-08-06 14:16:18 | 000,014,808 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\TurboB.sys -- (TurboB) DRV - [2009-07-20 11:29:40 | 000,013,880 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr) DRV - [2009-07-14 03:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vmbus.sys -- (vmbus) DRV - [2009-07-14 03:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\vmstorfl.sys -- (storflt) DRV - [2009-07-14 03:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\storvsc.sys -- (storvsc) DRV - [2009-07-14 01:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vms3cap.sys -- (s3cap) DRV - [2009-07-14 01:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\VMBusHID.sys -- (VMBusHID) DRV - [2009-07-02 17:36:10 | 000,013,880 | ---- | M] (ASUS) [Kernel | Auto | Running] -- C:\Program Files\ASUS\ATK Package\ATKGFNEX\ASMMAP.sys -- (ASMMAP) DRV - [2009-06-18 12:18:00 | 000,015,416 | ---- | M] (Windows (R) Win 7 DDK provider) [File_System | Boot | Running] -- C:\Windows\system32\DRIVERS\lullaby.sys -- (lullaby) DRV - [2009-06-05 12:14:42 | 001,766,592 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC) DRV - [2009-05-13 09:06:48 | 000,014,392 | ---- | M] (ASUS) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ATKACPI.sys -- (MTsensor) DRV - [2008-05-23 17:25:42 | 000,131,000 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\WimFltr.sys -- (WimFltr) DRV - [2007-08-03 06:26:22 | 000,020,936 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys -- (ghaio) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\tbBitT.dll (Conduit Ltd.) IE - HKU\S-1-5-21-997420645-2848946446-265609624-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.qooqlle.com/ IE - HKU\S-1-5-21-997420645-2848946446-265609624-1000\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\tbBitT.dll (Conduit Ltd.) IE - HKU\S-1-5-21-997420645-2848946446-265609624-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 O1 HOSTS File: ([2009-06-10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O2 - BHO: (BitTorrentBar Toolbar) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\tbBitT.dll (Conduit Ltd.) O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKLM\..\Toolbar: (BitTorrentBar Toolbar) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\tbBitT.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-997420645-2848946446-265609624-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKU\S-1-5-21-997420645-2848946446-265609624-1000\..\Toolbar\WebBrowser: (BitTorrentBar Toolbar) - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - C:\Program Files\BitTorrentBar\tbBitT.dll (Conduit Ltd.) O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) O4 - HKLM..\Run: [ATKOSD2] C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) O4 - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.) O4 - HKLM..\Run: [HControlUser] C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS) O4 - HKLM..\Run: [Readar_sl] C:\Users\Paweł\AppData\Roaming\Readar_sl.exe (Created with WinAutomation (http://www.WinAutomation.com)) O4 - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SAIICpl.exe () O4 - HKLM..\Run: [TunesHelper] C:\ProgramData\TunesHelper.exe () O4 - HKLM..\Run: [Wireless Console 3] C:\Program Files\ASUS\Wireless Console 3\wcourier.exe () O4 - HKU\S-1-5-21-997420645-2848946446-265609624-1000..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe () O4 - HKU\S-1-5-21-997420645-2848946446-265609624-1000..\Run: [BitTorrent] C:\Program Files\BitTorrent\BitTorrent.exe (BitTorrent, Inc.) O4 - HKU\S-1-5-21-997420645-2848946446-265609624-1000..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-997420645-2848946446-265609624-1001..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation) O4 - Startup: C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk = C:\Program Files\Xfire\Xfire.exe (Xfire Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 83.175.144.9 83.175.144.14 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - AppInit_DLLs: (C:\Windows\system32\nvinit.dll) - C:\Windows\System32\nvinit.dll (NVIDIA Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{76aa9606-7743-11e0-a0a5-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{76aa9606-7743-11e0-a0a5-806e6f6e6963}\Shell\AutoRun\command - "" = F:\InstAll.exe O33 - MountPoints2\{f6b96fcf-8623-11e0-aaf6-20cf3069f721}\Shell - "" = AutoRun O33 - MountPoints2\{f6b96fcf-8623-11e0-aaf6-20cf3069f721}\Shell\AutoRun\command - "" = G:\Setup.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-06-01 20:27:34 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\Nowy folder (2) [2011-05-31 22:52:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALLPlayer [2011-05-31 22:52:52 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Local\ALLPlayer [2011-05-30 01:56:16 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome [2011-05-29 10:27:41 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Local\searchplugins [2011-05-28 21:26:31 | 000,311,296 | RHS- | C] (Created with WinAutomation (http://www.WinAutomation.com)) -- C:\Users\Paweł\AppData\Roaming\Readar_sl.exe [2011-05-28 21:24:02 | 000,000,000 | ---D | C] -- C:\Program Files\NAPI-PROJEKT [2011-05-28 21:24:00 | 000,000,000 | ---D | C] -- C:\Program Files\ALLPlayer [2011-05-24 23:12:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MC2 [2011-05-24 23:09:59 | 000,218,688 | ---- | C] (DT Soft Ltd) -- C:\Windows\System32\drivers\dtsoftbus01.sys [2011-05-24 23:09:50 | 000,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Toolbar [2011-05-24 23:09:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite [2011-05-24 23:09:44 | 000,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Lite [2011-05-24 23:09:32 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Roaming\DAEMON Tools Lite [2011-05-24 23:09:32 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite [2011-05-24 20:33:43 | 000,000,000 | ---D | C] -- C:\Program Files\Conduit [2011-05-24 20:33:42 | 000,000,000 | ---D | C] -- C:\Program Files\ConduitEngine [2011-05-24 20:33:41 | 000,000,000 | ---D | C] -- C:\Program Files\BitTorrentBar [2011-05-24 20:33:39 | 000,000,000 | ---D | C] -- C:\extensions [2011-05-24 20:33:36 | 000,000,000 | ---D | C] -- C:\Program Files\BitTorrent [2011-05-24 20:33:12 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Roaming\BitTorrent [2011-05-24 00:18:15 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\przechuj fota z bornego ;D 2_files [2011-05-24 00:17:48 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\przechuj fota z bornego ;D_files [2011-05-16 20:32:45 | 000,000,000 | ---D | C] -- C:\Program Files\ESET [2011-05-15 23:11:52 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Documents\Battlefield Play4Free [2011-05-14 12:20:22 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Local\ElevatedDiagnostics [2011-05-05 21:41:04 | 000,013,880 | ---- | C] ( ) -- C:\Windows\System32\drivers\kbfiltr.sys [2011-05-05 21:31:28 | 000,004,096 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll [2008-08-11 21:45:20 | 000,155,648 | ---- | C] (ASUS) -- C:\Program Files\Common Files\MSIactionall.dll [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-06-09 09:36:43 | 002,621,440 | -HS- | M] () -- C:\Users\Paweł\NTUSER.DAT [2011-06-09 09:33:10 | 000,010,208 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011-06-09 09:33:10 | 000,010,208 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011-06-09 09:26:03 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2011-06-09 09:26:01 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011-06-09 09:25:56 | 2148,909,056 | -HS- | M] () -- C:\hiberfil.sys [2011-06-09 02:54:13 | 002,211,797 | -H-- | M] () -- C:\Users\Paweł\AppData\Local\IconCache.db [2011-06-09 02:20:24 | 000,138,264 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2011-06-09 02:20:14 | 000,234,768 | ---- | M] () -- C:\Windows\System32\PnkBstrB.xtr [2011-06-09 02:20:00 | 000,001,058 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-997420645-2848946446-265609624-1000UA.job [2011-06-07 19:20:00 | 000,001,006 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-997420645-2848946446-265609624-1000Core.job [2011-06-06 19:20:19 | 000,002,403 | ---- | M] () -- C:\Users\Paweł\Desktop\Google Chrome.lnk [2011-05-31 22:52:54 | 000,001,007 | ---- | M] () -- C:\Users\Paweł\Desktop\Napi-projekt.lnk [2011-05-31 22:52:54 | 000,000,977 | ---- | M] () -- C:\Users\Paweł\Desktop\ALLPlayer V4.6.lnk [2011-05-29 10:27:38 | 000,001,588 | ---- | M] () -- C:\Windows\System32\AutoRunFilter.ini [2011-05-28 22:47:15 | 000,094,608 | ---- | M] () -- C:\Users\Paweł\Desktop\przechuj fota ;].jpg [2011-05-28 21:26:30 | 008,180,224 | RHS- | M] () -- C:\ProgramData\TunesHelper.exe [2011-05-28 21:26:30 | 000,311,296 | RHS- | M] (Created with WinAutomation (http://www.WinAutomation.com)) -- C:\Users\Paweł\AppData\Roaming\Readar_sl.exe [2011-05-26 21:21:16 | 000,588,998 | ---- | M] () -- C:\Users\Paweł\Desktop\108341-tyeczki.JPG [2011-05-24 23:13:15 | 001,661,232 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI [2011-05-24 23:13:15 | 000,737,480 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2011-05-24 23:13:15 | 000,651,648 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2011-05-24 23:13:15 | 000,154,136 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2011-05-24 23:13:15 | 000,120,580 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2011-05-24 23:09:59 | 000,218,688 | ---- | M] (DT Soft Ltd) -- C:\Windows\System32\drivers\dtsoftbus01.sys [2011-05-24 23:09:45 | 000,001,896 | ---- | M] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk [2011-05-24 20:33:36 | 000,000,933 | ---- | M] () -- C:\Users\Public\Desktop\BitTorrent.lnk [2011-05-24 00:18:15 | 000,006,176 | ---- | M] () -- C:\Users\Paweł\Desktop\przechuj fota z bornego ;D 2.htm [2011-05-24 00:17:48 | 000,006,126 | ---- | M] () -- C:\Users\Paweł\Desktop\przechuj fota z bornego ;D.htm [2011-05-15 23:11:24 | 000,138,056 | ---- | M] () -- C:\Users\Paweł\AppData\Roaming\PnkBstrK.sys [2011-05-10 19:40:09 | 000,001,000 | ---- | M] () -- C:\Users\Paweł\Desktop\gg — skrót.lnk [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-05-31 22:52:54 | 000,001,007 | ---- | C] () -- C:\Users\Paweł\Desktop\Napi-projekt.lnk [2011-05-31 22:52:54 | 000,000,977 | ---- | C] () -- C:\Users\Paweł\Desktop\ALLPlayer V4.6.lnk [2011-05-31 22:52:52 | 000,810,496 | ---- | C] () -- C:\Windows\System32\xvidcore.dll [2011-05-31 22:52:52 | 000,258,048 | ---- | C] () -- C:\Windows\System32\libFLAC.dll [2011-05-31 22:52:51 | 000,797,184 | ---- | C] () -- C:\Windows\System32\ac3filter.ax [2011-05-30 01:56:18 | 000,002,403 | ---- | C] () -- C:\Users\Paweł\Desktop\Google Chrome.lnk [2011-05-28 22:47:15 | 000,094,608 | ---- | C] () -- C:\Users\Paweł\Desktop\przechuj fota ;].jpg [2011-05-28 21:28:54 | 000,175,616 | ---- | C] () -- C:\Windows\System32\unrar.dll [2011-05-28 21:26:31 | 008,180,224 | RHS- | C] () -- C:\ProgramData\TunesHelper.exe [2011-05-26 21:21:20 | 000,588,998 | ---- | C] () -- C:\Users\Paweł\Desktop\108341-tyeczki.JPG [2011-05-24 23:09:45 | 000,001,896 | ---- | C] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk [2011-05-24 20:33:36 | 000,000,933 | ---- | C] () -- C:\Users\Public\Desktop\BitTorrent.lnk [2011-05-24 00:18:15 | 000,006,176 | ---- | C] () -- C:\Users\Paweł\Desktop\przechuj fota z bornego ;D 2.htm [2011-05-24 00:17:47 | 000,006,126 | ---- | C] () -- C:\Users\Paweł\Desktop\przechuj fota z bornego ;D.htm [2011-05-10 19:40:09 | 000,001,000 | ---- | C] () -- C:\Users\Paweł\Desktop\gg — skrót.lnk [2011-05-09 10:09:48 | 000,007,642 | ---- | C] () -- C:\Users\Paweł\AppData\Local\Resmon.ResmonCfg [2011-05-07 16:59:50 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat [2011-05-06 23:21:13 | 000,138,264 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2011-05-06 23:21:13 | 000,138,056 | ---- | C] () -- C:\Users\Paweł\AppData\Roaming\PnkBstrK.sys [2011-05-06 23:20:28 | 000,234,768 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe [2011-05-06 23:20:26 | 000,794,408 | ---- | C] () -- C:\Windows\System32\pbsvc.exe [2011-05-06 23:20:26 | 000,075,136 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe [2011-05-05 21:53:44 | 001,661,232 | ---- | C] () -- C:\Windows\System32\PerfStringBackup.INI [2011-05-05 21:45:22 | 000,001,588 | ---- | C] () -- C:\Windows\System32\AutoRunFilter.ini [2011-05-05 21:45:22 | 000,001,056 | ---- | C] () -- C:\Windows\System32\ServiceFilter.ini [2011-05-05 21:45:22 | 000,000,105 | ---- | C] () -- C:\Windows\System32\FastBoot.ini [2011-05-05 21:45:22 | 000,000,080 | ---- | C] () -- C:\Windows\System32\Defrag.ini [2011-05-05 21:45:22 | 000,000,052 | ---- | C] () -- C:\Windows\System32\RemoveFont.ini [2011-05-05 21:45:22 | 000,000,015 | ---- | C] () -- C:\Windows\System32\BootTime.ini [2011-05-05 21:40:56 | 001,766,592 | ---- | C] () -- C:\Windows\System32\drivers\snp2uvc.sys [2011-05-05 21:40:56 | 000,035,264 | ---- | C] () -- C:\Windows\System32\drivers\sncduvc.sys [2011-05-05 21:39:49 | 000,057,560 | ---- | C] () -- C:\Users\Paweł\AppData\Local\GDIPFONTCACHEV1.DAT [2011-05-05 21:31:28 | 000,870,560 | ---- | C] () -- C:\Windows\System32\igkrng575.bin [2011-05-05 21:31:28 | 000,208,896 | ---- | C] () -- C:\Windows\System32\iglhsip32.dll [2011-05-05 21:31:28 | 000,104,636 | ---- | C] () -- C:\Windows\System32\igfcg575m.bin [2011-05-05 21:31:27 | 000,143,360 | ---- | C] () -- C:\Windows\System32\iglhcp32.dll [2011-05-05 21:31:27 | 000,127,868 | ---- | C] () -- C:\Windows\System32\igcompkrng575.bin [2011-05-05 21:31:27 | 000,000,151 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config [2011-05-05 20:21:17 | 002,211,797 | -H-- | C] () -- C:\Users\Paweł\AppData\Local\IconCache.db [2011-04-17 21:57:54 | 000,041,872 | ---- | C] () -- C:\Windows\System32\xfcodec.dll [2011-04-07 22:42:58 | 000,849,092 | ---- | C] () -- C:\Windows\System32\nvcoproc.bin [2009-08-06 14:16:18 | 000,014,808 | ---- | C] () -- C:\Windows\System32\drivers\TurboB.sys [2009-07-14 10:07:57 | 000,737,480 | ---- | C] () -- C:\Windows\System32\perfh015.dat [2009-07-14 10:07:57 | 000,337,158 | ---- | C] () -- C:\Windows\System32\perfi015.dat [2009-07-14 10:07:57 | 000,154,136 | ---- | C] () -- C:\Windows\System32\perfc015.dat [2009-07-14 10:07:57 | 000,038,710 | ---- | C] () -- C:\Windows\System32\perfd015.dat [2009-07-14 06:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009-07-14 06:33:53 | 000,265,896 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2009-07-14 04:05:48 | 000,651,648 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2009-07-14 04:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2009-07-14 04:05:48 | 000,120,580 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2009-07-14 04:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2009-07-14 04:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2009-07-14 04:04:57 | 000,001,405 | ---- | C] () -- C:\Windows\msdfmap.ini [2009-07-14 04:04:23 | 000,000,403 | ---- | C] () -- C:\Windows\win.ini [2009-07-14 04:04:23 | 000,000,219 | ---- | C] () -- C:\Windows\system.ini [2009-07-14 04:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2009-07-14 02:19:49 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe [2009-07-14 01:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009-07-14 01:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll [2009-07-14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll [2009-07-13 23:41:56 | 000,053,552 | ---- | C] () -- C:\Windows\System32\dosx.exe [2009-07-13 23:41:05 | 000,000,718 | ---- | C] () -- C:\Windows\System32\mscdexnt.exe [2009-07-13 23:41:04 | 000,002,842 | ---- | C] () -- C:\Windows\System32\redir.exe [2009-07-13 23:41:02 | 000,000,882 | ---- | C] () -- C:\Windows\System32\share.exe [2009-07-13 23:41:02 | 000,000,882 | ---- | C] () -- C:\Windows\System32\fastopen.exe [2009-07-13 23:41:01 | 000,019,694 | ---- | C] () -- C:\Windows\System32\GRAPHICS.COM [2009-07-13 23:40:59 | 000,014,710 | ---- | C] () -- C:\Windows\System32\KB16.COM [2009-07-13 23:40:57 | 000,007,052 | ---- | C] () -- C:\Windows\System32\nlsfunc.exe [2009-07-13 23:40:57 | 000,001,131 | ---- | C] () -- C:\Windows\System32\LOADFIX.COM [2009-07-13 23:40:56 | 000,039,274 | ---- | C] () -- C:\Windows\System32\mem.exe [2009-07-13 23:40:54 | 000,011,753 | ---- | C] () -- C:\Windows\System32\setver.exe [2009-07-13 23:40:52 | 000,020,634 | ---- | C] () -- C:\Windows\System32\debug.exe [2009-07-13 23:40:51 | 000,008,424 | ---- | C] () -- C:\Windows\System32\exe2bin.exe [2009-07-13 23:40:50 | 000,012,642 | ---- | C] () -- C:\Windows\System32\edlin.exe [2009-07-13 23:40:49 | 000,012,498 | ---- | C] () -- C:\Windows\System32\append.exe [2009-07-13 23:40:48 | 000,050,648 | ---- | C] () -- C:\Windows\System32\COMMAND.COM [2009-07-13 23:40:44 | 000,027,097 | ---- | C] () -- C:\Windows\System32\country.sys [2009-07-13 23:40:43 | 000,042,809 | ---- | C] () -- C:\Windows\System32\KEY01.SYS [2009-07-13 23:40:43 | 000,042,537 | ---- | C] () -- C:\Windows\System32\KEYBOARD.SYS [2009-07-13 23:40:41 | 000,009,029 | ---- | C] () -- C:\Windows\System32\ANSI.SYS [2009-07-13 23:40:40 | 000,004,768 | ---- | C] () -- C:\Windows\System32\HIMEM.SYS [2009-07-13 23:40:39 | 000,029,274 | ---- | C] () -- C:\Windows\System32\NTDOS412.SYS [2009-07-13 23:40:35 | 000,029,370 | ---- | C] () -- C:\Windows\System32\NTDOS411.SYS [2009-07-13 23:40:31 | 000,029,146 | ---- | C] () -- C:\Windows\System32\NTDOS404.SYS [2009-07-13 23:40:27 | 000,029,146 | ---- | C] () -- C:\Windows\System32\NTDOS804.SYS [2009-07-13 23:40:23 | 000,027,866 | ---- | C] () -- C:\Windows\System32\NTDOS.SYS [2009-07-13 23:40:19 | 000,035,536 | ---- | C] () -- C:\Windows\System32\NTIO412.SYS [2009-07-13 23:40:17 | 000,035,776 | ---- | C] () -- C:\Windows\System32\NTIO411.SYS [2009-07-13 23:40:15 | 000,034,672 | ---- | C] () -- C:\Windows\System32\NTIO404.SYS [2009-07-13 23:40:13 | 000,034,672 | ---- | C] () -- C:\Windows\System32\NTIO804.SYS [2009-07-13 23:40:11 | 000,033,952 | ---- | C] () -- C:\Windows\System32\NTIO.SYS [2009-07-13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\System32\msjetoledb40.dll [2009-07-13 22:29:46 | 000,013,312 | ---- | C] () -- C:\Windows\System32\win87em.dll [2009-06-10 23:42:32 | 000,069,886 | ---- | C] () -- C:\Windows\System32\edit.com [2009-06-10 23:39:59 | 000,060,124 | ---- | C] () -- C:\Windows\System32\tcpmon.ini [2009-06-10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat [2009-04-08 10:31:56 | 000,106,496 | ---- | C] () -- C:\Program Files\Common Files\CPInstallAction.dll [2008-05-22 08:35:54 | 000,051,962 | ---- | C] () -- C:\Program Files\Common Files\banner.jpg [2002-10-06 21:42:58 | 000,237,568 | ---- | C] () -- C:\Windows\System32\OggDS.dll [2002-10-05 02:04:26 | 000,921,600 | ---- | C] () -- C:\Windows\System32\vorbisenc.dll [2002-10-05 02:04:26 | 000,188,416 | ---- | C] () -- C:\Windows\System32\VORBIS.DLL [2002-10-05 02:04:18 | 000,045,056 | ---- | C] () -- C:\Windows\System32\OGG.DLL [color=#E56717]========== LOP Check ==========[/color] [2011-06-09 09:37:43 | 000,000,000 | ---D | M] -- C:\Users\Paweł\AppData\Roaming\BitTorrent [2011-05-24 23:10:49 | 000,000,000 | ---D | M] -- C:\Users\Paweł\AppData\Roaming\DAEMON Tools Lite [2011-05-17 19:53:04 | 000,000,000 | ---D | M] -- C:\Users\Paweł\AppData\Roaming\Gadu-Gadu 10 [2011-05-09 19:46:48 | 000,000,000 | ---D | M] -- C:\Users\Paweł\AppData\Roaming\Mumble(PR Edition) [2009-07-14 06:53:46 | 000,024,668 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] < End of report >