OTL logfile created on: 2011-06-21 09:08:23 - Run 2
OTL by OldTimer - Version 3.2.24.1     Folder = C:\Users\Ja\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18882)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,00 Gb Total Physical Memory | 1,97 Gb Available Physical Memory | 65,77% Memory free
6,19 Gb Paging File | 5,25 Gb Available in Paging File | 84,85% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 149,04 Gb Total Space | 75,03 Gb Free Space | 50,34% Space Free | Partition Type: NTFS
Drive D: | 137,32 Gb Total Space | 132,58 Gb Free Space | 96,55% Space Free | Partition Type: NTFS
Drive G: | 1,95 Gb Total Space | 1,43 Gb Free Space | 73,23% Space Free | Partition Type: FAT
 
Computer Name: JA-PC | User Name: Ja | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-06-21 08:42:36 | 000,579,072 | ---- | M] (OldTimer Tools) -- C:\Users\Ja\Desktop\OTL.exe
PRC - [2011-04-27 12:22:26 | 000,393,112 | ---- | M] (Spigot, Inc.) -- C:\Program Files\Application Updater\ApplicationUpdater.exe
PRC - [2011-02-23 17:04:19 | 000,042,184 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2009-04-11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009-02-06 23:43:48 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\HControl.exe
PRC - [2008-12-27 00:27:08 | 000,154,168 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ASUS CopyProtect\ASPG.exe
PRC - [2008-12-23 02:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\WDC.exe
PRC - [2008-11-27 04:54:00 | 000,211,512 | ---- | M] (ATK) -- C:\Program Files\P4G\BatteryLife.exe
PRC - [2008-08-18 20:27:32 | 000,117,304 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe
PRC - [2008-08-14 06:00:08 | 000,113,208 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\KBFiltr.exe
PRC - [2008-08-14 05:59:52 | 000,100,920 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\AsLdrSrv.exe
PRC - [2008-08-14 01:21:56 | 002,482,176 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe
PRC - [2008-06-18 07:10:34 | 000,424,504 | ---- | M] (ASUS) -- C:\Program Files\ASUS\SmartLogon\smartlogon.exe
PRC - [2008-06-18 07:10:24 | 000,297,528 | ---- | M] (ASUS) -- C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
PRC - [2008-06-04 02:29:08 | 000,851,968 | ---- | M] (ATK) -- C:\Program Files\ASUS\Splendid\ACMON.exe
PRC - [2008-03-31 11:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
PRC - [2007-11-30 20:20:44 | 000,051,768 | ---- | M] () -- C:\Program Files\ASUS\ASUS Live Update\ALU.exe
PRC - [2007-08-08 09:08:40 | 000,094,208 | ---- | M] () -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe
PRC - [2007-07-06 01:53:44 | 001,040,384 | ---- | M] () -- C:\Program Files\Wireless Console 2\wcourier.exe
PRC - [2007-04-13 23:33:32 | 000,132,656 | ---- | M] (Wacom Technology, Corp.) -- C:\Windows\System32\WTablet\TabUserW.exe
PRC - [2007-04-13 23:32:50 | 001,189,424 | ---- | M] (Wacom Technology, Corp.) -- C:\Windows\System32\Tablet.exe
PRC - [2005-07-07 00:43:42 | 000,155,648 | ---- | M] (ASUSTeK) -- C:\Windows\System32\ACEngSvr.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011-06-21 08:42:36 | 000,579,072 | ---- | M] (OldTimer Tools) -- C:\Users\Ja\Desktop\OTL.exe
MOD - [2011-02-23 17:04:17 | 000,197,208 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\snxhk.dll
MOD - [2009-04-11 08:21:38 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2011-04-27 12:22:26 | 000,393,112 | ---- | M] (Spigot, Inc.) [Auto | Running] -- C:\Program Files\Application Updater\ApplicationUpdater.exe -- (Application Updater)
SRV - [2011-02-23 17:04:19 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010-02-19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2008-08-14 05:59:52 | 000,100,920 | ---- | M] () [Auto | Running] -- C:\Program Files\ASUS\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
SRV - [2008-04-07 10:17:30 | 000,430,592 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2008-03-31 11:55:48 | 000,225,280 | ---- | M] (ASUSTek Computer Inc.) [Auto | Running] -- C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe -- (ADSMService)
SRV - [2008-01-21 04:23:24 | 000,365,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2008-01-21 04:23:24 | 000,167,936 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
SRV - [2007-08-08 09:08:40 | 000,094,208 | ---- | M] () [Auto | Running] -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2007-04-13 23:32:50 | 001,189,424 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\Windows\System32\Tablet.exe -- (TabletService)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2011-02-23 16:56:55 | 000,371,544 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2011-02-23 16:56:45 | 000,301,528 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2011-02-23 16:55:49 | 000,049,240 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2011-02-23 16:55:10 | 000,025,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2011-02-23 16:55:03 | 000,053,592 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2011-02-23 16:54:55 | 000,019,544 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2009-09-10 14:55:58 | 000,102,912 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2009-08-08 08:09:57 | 000,030,264 | ---- | M] (ASUSTek Computer Inc) [File_System | Boot | Running] -- C:\Windows\System32\drivers\AsDsm.sys -- (AsDsm)
DRV - [2009-07-24 15:51:38 | 000,101,248 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbdev.sys -- (hwusbdev)
DRV - [2009-07-02 01:59:00 | 009,786,752 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2009-03-31 10:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009-01-14 20:51:50 | 000,230,952 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SRS_PremiumSound_i386.sys -- (SRS_PremiumSound_Service)
DRV - [2008-12-29 23:57:56 | 000,952,832 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2008-12-10 05:20:56 | 001,772,544 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC)
DRV - [2008-06-27 12:00:00 | 000,072,704 | ---- | M] (WIBU-SYSTEMS AG) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\WibuKey.sys -- (WIBUKEY)
DRV - [2008-06-03 08:41:51 | 000,015,928 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr)
DRV - [2008-05-29 18:21:04 | 000,015,416 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [File_System | Boot | Running] -- C:\Windows\system32\DRIVERS\lullaby.sys -- (lullaby)
DRV - [2008-05-02 10:07:53 | 000,048,128 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SiSGB6.sys -- (SiSGbeLH)
DRV - [2007-09-17 16:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2007-07-24 20:09:04 | 000,013,880 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\ATKGFNEX\ASMMAP.sys -- (ASMMAP)
DRV - [2007-02-16 21:12:36 | 000,011,312 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wacommousefilter.sys -- (wacommousefilter)
DRV - [2007-02-16 20:30:12 | 000,012,848 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wacomvhid.sys -- (wacomvhid)
DRV - [2006-12-14 09:11:57 | 000,007,680 | ---- | M] (ATK0100) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ATKACPI.sys -- (MTsensor)
DRV - [2006-11-02 09:41:49 | 001,010,560 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\smserial.sys -- (smserial)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-882988996-2085006529-3586271363-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=ASUS&bmod=ASUS
IE - HKU\S-1-5-21-882988996-2085006529-3586271363-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKU\S-1-5-21-882988996-2085006529-3586271363-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-882988996-2085006529-3586271363-1000\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
IE - HKU\S-1-5-21-882988996-2085006529-3586271363-1000\..\URLSearchHook: {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\4.4\pdfforgeToolbarIE.dll (Spigot, Inc.)
IE - HKU\S-1-5-21-882988996-2085006529-3586271363-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.defaultthis.engineName: "Utubebario Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&invocationType=tb50ffwinampie7&query="
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=827316"
FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.onet.pl/"
FF - prefs.js..extensions.enabledItems: {eaf8a4ef-d221-45ca-9deb-d0934b45fa34}:1.3.0.3
FF - prefs.js..extensions.enabledItems: pdfforge@mybrowserbar.com:4.4
FF - prefs.js..extensions.enabledItems: wtxpcom@mybrowserbar.com:4.4
FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=827316&p="
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-05-01 01:01:22 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-05-01 01:01:22 | 000,000,000 | ---D | M]
 
[2009-09-02 16:38:42 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ja\AppData\Roaming\mozilla\Extensions
[2011-06-19 14:58:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ja\AppData\Roaming\mozilla\Firefox\Profiles\qav2hetx.default\extensions
[2009-09-02 17:46:01 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Users\Ja\AppData\Roaming\mozilla\Firefox\Profiles\qav2hetx.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2010-06-25 14:43:07 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Ja\AppData\Roaming\mozilla\Firefox\Profiles\qav2hetx.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010-10-23 19:50:52 | 000,000,000 | ---D | M] (Utubebario Community Toolbar) -- C:\Users\Ja\AppData\Roaming\mozilla\Firefox\Profiles\qav2hetx.default\extensions\{58beca16-cae6-4b7a-a0e8-153d0cbba63a}
[2010-01-18 17:53:15 | 000,000,000 | ---D | M] (OggX (powered by TIME S.A.)) -- C:\Users\Ja\AppData\Roaming\mozilla\Firefox\Profiles\qav2hetx.default\extensions\{eaf8a4ef-d221-45ca-9deb-d0934b45fa34}
[2010-10-23 11:13:26 | 000,000,923 | ---- | M] () -- C:\Users\Ja\AppData\Roaming\Mozilla\Firefox\Profiles\qav2hetx.default\searchplugins\conduit.xml
[2010-10-23 20:44:26 | 000,001,196 | ---- | M] () -- C:\Users\Ja\AppData\Roaming\Mozilla\Firefox\Profiles\qav2hetx.default\searchplugins\winamp-search.xml
[2011-05-13 11:05:48 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011-05-13 11:05:48 | 000,000,000 | ---D | M] (Widgi Toolbar Platform) -- C:\PROGRAM FILES\COMMON FILES\SPIGOT\WTXPCOM
[2011-05-13 11:05:48 | 000,000,000 | ---D | M] (pdfforge Toolbar) -- C:\PROGRAM FILES\PDFFORGE TOOLBAR\FF
[2009-01-28 21:46:54 | 000,307,200 | ---- | M] (ESKA) -- C:\Program Files\Mozilla Firefox\plugins\npOggX.dll
[2010-07-12 18:33:56 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll
[2011-05-01 01:01:18 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2011-05-01 01:01:18 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2011-05-01 01:01:18 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2011-05-01 01:01:18 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2011-05-01 01:01:18 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2011-05-01 01:01:18 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2006-09-18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.1852\swg.dll (Google Inc.)
O2 - BHO: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\4.4\pdfforgeToolbarIE.dll (Spigot, Inc.)
O3 - HKLM\..\Toolbar: (&Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O3 - HKLM\..\Toolbar: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\4.4\pdfforgeToolbarIE.dll (Spigot, Inc.)
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O3 - HKU\S-1-5-21-882988996-2085006529-3586271363-1000\..\Toolbar\WebBrowser: (&Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O3 - HKU\S-1-5-21-882988996-2085006529-3586271363-1000\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-882988996-2085006529-3586271363-1000..\Run: [3963684983]  File not found
O4 - HKU\S-1-5-21-882988996-2085006529-3586271363-1000..\Run: [AdobeBridge]  File not found
O4 - HKU\S-1-5-21-882988996-2085006529-3586271363-1000..\Run: [ChomikBox] C:\Program Files\ChomikBox\chomikbox.exe ()
O4 - HKU\S-1-5-21-882988996-2085006529-3586271363-1000..\Run: [Komunikator] C:\Program Files\Tlen.pl\tlen.exe (o2.pl Sp. z o.o.)
O4 - HKU\S-1-5-21-882988996-2085006529-3586271363-1000..\Run: [Mobile Partner] C:\Program Files\PLAY ONLINE\PLAY ONLINE.exe ()
O4 - HKU\S-1-5-21-882988996-2085006529-3586271363-1000..\Run: [SRS Premium Sound] C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe (SRS Labs, Inc.)
O4 - HKU\.DEFAULT..\RunOnce: []  File not found
O4 - HKU\S-1-5-18..\RunOnce: []  File not found
O4 - HKU\S-1-5-19..\RunOnce: []  File not found
O4 - HKU\S-1-5-20..\RunOnce: []  File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run:  = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 0
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\S-1-5-21-882988996-2085006529-3586271363-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\S-1-5-21-882988996-2085006529-3586271363-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html ()
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 80.48.254.129 80.50.50.50
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Ja\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\Ja\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{0b67df8b-644d-11df-88b6-00248c555263}\Shell\AutoRun\command - "" = F:\APPInst.exe
O33 - MountPoints2\{0c8a3eba-97c4-11de-9bdb-002618a59002}\Shell\AutoRun\command - "" = F:\i0yva6.exe
O33 - MountPoints2\{0c8a3eba-97c4-11de-9bdb-002618a59002}\Shell\open\Command - "" = F:\i0yva6.exe
O33 - MountPoints2\{0d10f51f-1808-11df-aa95-002243cb3e61}\Shell\AutoRun\command - "" = F:\p3vwxx.exe
O33 - MountPoints2\{0d10f51f-1808-11df-aa95-002243cb3e61}\Shell\open\Command - "" = F:\p3vwxx.exe
O33 - MountPoints2\{3226fcf0-d461-11df-afdb-00248c555263}\Shell - "" = AutoRun
O33 - MountPoints2\{3226fcf0-d461-11df-afdb-00248c555263}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{40d5a2ae-1dfa-11df-9b06-002243cb3e61}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RUNdLl32.ExE  .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{40d5a2b1-1dfa-11df-9b06-002243cb3e61}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RUNdLl32.ExE  .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{40d5a2b2-1dfa-11df-9b06-002243cb3e61}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RUNdLl32.ExE  .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{4d1f7945-1499-11df-83b1-002243cb3e61}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\SeUDU.EXe
O33 - MountPoints2\{5ed88898-4b26-11e0-bc2f-00248c555263}\Shell - "" = AutoRun
O33 - MountPoints2\{5ed88898-4b26-11e0-bc2f-00248c555263}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\{622e99b4-b7fa-11df-9f73-00248c555263}\Shell - "" = AutoRun
O33 - MountPoints2\{622e99b4-b7fa-11df-9f73-00248c555263}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{77160a72-b6de-11df-a214-00248c555263}\Shell - "" = AutoRun
O33 - MountPoints2\{77160a72-b6de-11df-a214-00248c555263}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{77160a92-b6de-11df-a214-00248c555263}\Shell - "" = AutoRun
O33 - MountPoints2\{77160a92-b6de-11df-a214-00248c555263}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{77160a9b-b6de-11df-a214-00248c555263}\Shell - "" = AutoRun
O33 - MountPoints2\{77160a9b-b6de-11df-a214-00248c555263}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{77160aa3-b6de-11df-a214-00248c555263}\Shell - "" = AutoRun
O33 - MountPoints2\{77160aa3-b6de-11df-a214-00248c555263}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{77160aac-b6de-11df-a214-00248c555263}\Shell - "" = AutoRun
O33 - MountPoints2\{77160aac-b6de-11df-a214-00248c555263}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{ab46a6d3-d49d-11df-b365-00248c555263}\Shell - "" = AutoRun
O33 - MountPoints2\{ab46a6d3-d49d-11df-b365-00248c555263}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{b4a8d286-b010-11df-9e3f-00248c555263}\Shell - "" = AutoRun
O33 - MountPoints2\{b4a8d286-b010-11df-9e3f-00248c555263}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a
O33 - MountPoints2\{b8355dd8-d7b9-11de-b777-002243cb3e61}\Shell - "" = AutoRun
O33 - MountPoints2\{b8355dd8-d7b9-11de-b777-002243cb3e61}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O35 - HKU\S-1-5-21-882988996-2085006529-3586271363-1000..exefile [open] -- "C:\Users\Ja\AppData\Local\nku.exe" -a "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKU\S-1-5-21-882988996-2085006529-3586271363-1000\...exe [@ = exefile] -- "C:\Users\Ja\AppData\Local\nku.exe" -a "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-06-21 09:07:05 | 000,000,000 | ---D | C] -- C:\Users\Ja\Desktop\Nowy folder
[2011-06-21 08:43:38 | 000,579,072 | ---- | C] (OldTimer Tools) -- C:\Users\Ja\Desktop\OTL.exe
[2011-06-21 08:05:56 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011-06-21 08:05:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011-06-21 08:05:42 | 007,082,224 | ---- | C] (Malwarebytes Corporation                                    ) -- C:\Users\Ja\Desktop\mbam-rules.exe
[2011-06-20 15:46:28 | 000,000,000 | ---D | C] -- C:\Users\Ja\Desktop\ruda pr
[2011-06-17 20:33:44 | 000,000,000 | ---D | C] -- C:\Users\Ja\Desktop\bzdury
[2011-06-16 19:28:10 | 000,000,000 | ---D | C] -- C:\Users\Ja\Desktop\prokopska egzamin
[2011-06-12 02:39:51 | 000,000,000 | ---D | C] -- C:\Users\Ja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Artlantis Studio 3
[2011-06-12 01:38:24 | 000,000,000 | ---D | C] -- C:\Program Files\Artlantis Studio 3
[2011-06-08 22:00:05 | 000,000,000 | ---D | C] -- C:\Users\Ja\Desktop\egzamin wiocha
[2011-06-01 00:52:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2011-05-26 17:24:18 | 000,000,000 | ---D | C] -- C:\System32
[2008-06-03 08:41:51 | 000,015,928 | ---- | C] ( ) -- C:\Windows\System32\drivers\kbfiltr.sys
[2008-05-22 01:38:59 | 000,176,128 | ---- | C] ( ) -- C:\Windows\System32\csnp2uvc.dll
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-06-21 09:09:31 | 003,145,728 | -HS- | M] () -- C:\Users\Ja\NTUSER.DAT
[2011-06-21 08:55:11 | 000,001,028 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011-06-21 08:51:26 | 000,000,412 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{72BE63AC-2018-4979-8D11-3088F1F8E0E7}.job
[2011-06-21 08:45:07 | 001,468,980 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2011-06-21 08:45:07 | 000,662,056 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2011-06-21 08:45:07 | 000,587,178 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011-06-21 08:45:07 | 000,126,908 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2011-06-21 08:45:07 | 000,101,250 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011-06-21 08:42:36 | 000,579,072 | ---- | M] (OldTimer Tools) -- C:\Users\Ja\Desktop\OTL.exe
[2011-06-21 08:33:46 | 000,001,024 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011-06-21 08:33:39 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2011-06-21 08:33:15 | 000,079,106 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2011-06-21 08:33:14 | 000,079,106 | ---- | M] () -- C:\ProgramData\nvModes.001
[2011-06-21 08:33:04 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011-06-21 08:31:50 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011-06-21 08:31:49 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011-06-21 08:31:36 | 3218,472,960 | -HS- | M] () -- C:\hiberfil.sys
[2011-06-21 08:30:57 | 000,524,288 | -HS- | M] () -- C:\Users\Ja\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000002.regtrans-ms
[2011-06-21 08:30:57 | 000,065,536 | -HS- | M] () -- C:\Users\Ja\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf
[2011-06-21 08:23:02 | 000,011,168 | -HS- | M] () -- C:\Users\Ja\AppData\Local\bsq421iqci48373tri8453q
[2011-06-21 08:23:02 | 000,011,168 | -HS- | M] () -- C:\ProgramData\bsq421iqci48373tri8453q
[2011-06-21 08:20:54 | 003,742,232 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011-06-21 08:04:33 | 000,031,744 | ---- | M] () -- C:\Users\Ja\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-06-21 07:57:28 | 007,082,224 | ---- | M] (Malwarebytes Corporation                                    ) -- C:\Users\Ja\Desktop\mbam-rules.exe
[2011-06-20 15:33:53 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2011-06-18 17:57:26 | 000,045,056 | ---- | M] () -- C:\Windows\System32\acovcnt.exe
[2011-05-24 17:09:19 | 000,016,401 | ---- | M] () -- C:\Windows\vpd.properties
[2011-05-22 21:13:21 | 000,001,031 | ---- | M] () -- C:\Users\Public\Desktop\Uruchom ArchiCADa 14.lnk
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-06-21 08:31:36 | 3218,472,960 | -HS- | C] () -- C:\hiberfil.sys
[2011-06-20 14:25:12 | 000,011,168 | -HS- | C] () -- C:\Users\Ja\AppData\Local\bsq421iqci48373tri8453q
[2011-06-20 14:25:12 | 000,011,168 | -HS- | C] () -- C:\ProgramData\bsq421iqci48373tri8453q
[2011-05-22 21:13:21 | 000,001,031 | ---- | C] () -- C:\Users\Public\Desktop\Uruchom ArchiCADa 14.lnk
[2011-01-20 21:08:46 | 000,116,224 | ---- | C] () -- C:\Windows\System32\pdfcmnnt.dll
[2010-07-12 22:44:41 | 000,169,070 | ---- | C] () -- C:\Windows\hphins26.dat
[2010-05-22 12:20:05 | 000,057,552 | ---- | C] () -- C:\Windows\System32\WkDos.exe
[2010-04-07 14:47:45 | 000,000,680 | ---- | C] () -- C:\Users\Ja\AppData\Local\d3d9caps.dat
[2010-02-08 12:10:17 | 000,003,972 | ---- | C] () -- C:\Windows\System32\drivers\PciBus.sys
[2009-11-07 02:42:27 | 000,110,592 | ---- | C] () -- C:\Windows\System32\FsUsbExDevice.Dll
[2009-11-07 02:42:27 | 000,036,608 | ---- | C] () -- C:\Windows\System32\FsUsbExDisk.Sys
[2009-11-07 02:39:38 | 000,002,528 | ---- | C] () -- C:\Users\Ja\AppData\Roaming\$_hpcst$.hpc
[2009-10-10 13:01:19 | 000,258,048 | ---- | C] () -- C:\Windows\System32\libFLAC.dll
[2009-10-10 12:58:25 | 000,108,032 | ---- | C] () -- C:\Windows\System32\avi.dll
[2009-10-10 12:58:22 | 000,246,784 | ---- | C] () -- C:\Windows\System32\dxr.dll
[2009-10-10 12:58:18 | 000,141,312 | ---- | C] () -- C:\Windows\System32\mp4.dll
[2009-10-10 12:58:15 | 000,148,480 | ---- | C] () -- C:\Windows\System32\mkx.dll
[2009-10-10 12:58:13 | 000,159,744 | ---- | C] () -- C:\Windows\System32\mmfinfo.dll
[2009-10-10 12:58:10 | 000,120,832 | ---- | C] () -- C:\Windows\System32\ogm.dll
[2009-10-10 12:58:04 | 000,163,840 | ---- | C] () -- C:\Windows\System32\ts.dll
[2009-10-10 12:58:01 | 000,079,360 | ---- | C] () -- C:\Windows\System32\mkzlib.dll
[2009-10-10 12:57:59 | 000,023,552 | ---- | C] () -- C:\Windows\System32\mkunicode.dll
[2009-10-10 12:56:35 | 001,410,004 | ---- | C] () -- C:\Windows\System32\ffmpegmt.dll
[2009-10-10 12:56:00 | 000,557,003 | ---- | C] () -- C:\Windows\System32\libmplayer.dll
[2009-10-10 12:55:47 | 000,146,098 | ---- | C] () -- C:\Windows\System32\libmpeg2_ff.dll
[2009-10-10 12:55:44 | 004,455,865 | ---- | C] () -- C:\Windows\System32\libavcodec.dll
[2009-10-10 12:54:25 | 000,098,304 | ---- | C] () -- C:\Windows\System32\ff_wmv9.dll
[2009-10-10 12:54:23 | 000,113,152 | ---- | C] () -- C:\Windows\System32\ff_unrar.dll
[2009-10-10 12:54:20 | 000,183,296 | ---- | C] () -- C:\Windows\System32\ff_samplerate.dll
[2009-10-10 12:54:14 | 000,178,688 | ---- | C] () -- C:\Windows\System32\ff_libmad.dll
[2009-10-10 12:54:11 | 000,484,864 | ---- | C] () -- C:\Windows\System32\ff_libfaad2.dll
[2009-10-10 12:54:00 | 000,257,024 | ---- | C] () -- C:\Windows\System32\ff_libdts.dll
[2009-10-10 12:53:55 | 000,142,848 | ---- | C] () -- C:\Windows\System32\ff_liba52.dll
[2009-10-10 12:53:36 | 002,041,363 | ---- | C] () -- C:\Windows\System32\x264vfw.dll
[2009-10-10 12:52:54 | 000,237,568 | ---- | C] () -- C:\Windows\System32\OggDS.dll
[2009-10-10 12:52:48 | 000,921,600 | ---- | C] () -- C:\Windows\System32\vorbisenc.dll
[2009-10-10 12:52:31 | 000,188,416 | ---- | C] () -- C:\Windows\System32\vorbis.dll
[2009-10-10 12:52:27 | 000,045,056 | ---- | C] () -- C:\Windows\System32\ogg.dll
[2009-10-10 12:51:52 | 000,009,216 | ---- | C] () -- C:\Windows\System32\cpuinf32.dll
[2009-10-10 12:50:52 | 000,795,648 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2009-10-10 12:44:26 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat
[2009-09-24 18:18:59 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2009-09-24 18:18:58 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009-09-24 18:18:36 | 000,368,640 | ---- | C] () -- C:\Windows\System32\msjetoledb40.dll
[2009-09-02 20:23:29 | 000,010,752 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2009-09-02 20:23:29 | 000,000,547 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll.manifest
[2009-08-29 12:31:18 | 000,024,206 | ---- | C] () -- C:\Users\Ja\AppData\Roaming\UserTile.png
[2009-08-29 12:23:03 | 000,000,024 | ---- | C] () -- C:\Windows\ATKPF.ini
[2009-08-29 12:17:55 | 000,031,744 | ---- | C] () -- C:\Users\Ja\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009-08-29 10:47:05 | 000,079,106 | ---- | C] () -- C:\ProgramData\nvModes.001
[2009-08-29 10:47:01 | 000,079,106 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2009-08-27 14:03:29 | 000,104,040 | ---- | C] () -- C:\Users\Ja\AppData\Local\GDIPFONTCACHEV1.DAT
[2009-08-08 08:39:56 | 000,045,056 | ---- | C] () -- C:\Windows\System32\acovcnt.exe
[2009-08-08 08:32:56 | 000,047,672 | ---- | C] () -- C:\Windows\AsScrProlog.exe
[2009-08-08 08:05:58 | 000,230,952 | ---- | C] () -- C:\Windows\System32\drivers\SRS_PremiumSound_i386.sys
[2009-08-08 07:50:55 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2009-08-08 07:26:20 | 000,000,012 | ---- | C] () -- C:\Windows\bthservsdp.dat
[2008-12-23 22:36:14 | 000,106,496 | ---- | C] () -- C:\Program Files\Common Files\CPInstallAction.dll
[2008-12-10 05:20:56 | 001,772,544 | ---- | C] () -- C:\Windows\System32\drivers\snp2uvc.sys
[2008-12-10 05:20:56 | 000,028,160 | ---- | C] () -- C:\Windows\System32\drivers\sncduvc.sys
[2008-12-10 05:20:56 | 000,015,497 | ---- | C] () -- C:\Windows\snp2uvc.ini
[2008-07-30 02:33:22 | 000,057,344 | ---- | C] () -- C:\Windows\System32\BtwNamespaceExt2.dll
[2008-05-22 17:35:54 | 000,051,962 | ---- | C] () -- C:\Program Files\Common Files\banner.jpg
[2008-04-18 02:01:53 | 000,662,056 | ---- | C] () -- C:\Windows\System32\perfh015.dat
[2008-04-18 02:01:53 | 000,332,832 | ---- | C] () -- C:\Windows\System32\perfi015.dat
[2008-04-18 02:01:53 | 000,126,908 | ---- | C] () -- C:\Windows\System32\perfc015.dat
[2008-04-18 02:01:53 | 000,037,468 | ---- | C] () -- C:\Windows\System32\perfd015.dat
[2008-04-18 01:45:31 | 000,000,010 | ---- | C] () -- C:\Windows\System32\ABLKSR.ini
[2008-01-21 04:24:38 | 000,060,124 | ---- | C] () -- C:\Windows\System32\tcpmon.ini
[2008-01-18 18:49:21 | 000,000,787 | ---- | C] () -- C:\Windows\hphmdl26.dat
[2007-10-25 18:26:10 | 000,005,632 | ---- | C] () -- C:\Windows\System32\drivers\StarOpen.sys
[2007-04-16 12:24:16 | 000,023,752 | ---- | C] () -- C:\Windows\System32\providers.bin
[2006-11-02 14:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006-11-02 14:47:37 | 003,742,232 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006-11-02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006-11-02 12:33:01 | 001,468,980 | ---- | C] () -- C:\Windows\System32\PerfStringBackup.INI
[2006-11-02 12:33:01 | 000,587,178 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006-11-02 12:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006-11-02 12:33:01 | 000,101,250 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006-11-02 12:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006-11-02 12:24:31 | 000,001,405 | ---- | C] () -- C:\Windows\msdfmap.ini
[2006-11-02 12:23:31 | 000,000,219 | ---- | C] () -- C:\Windows\win.ini
[2006-11-02 12:23:31 | 000,000,219 | ---- | C] () -- C:\Windows\system.ini
[2006-11-02 12:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006-11-02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006-11-02 10:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006-11-02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006-11-02 09:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2006-11-02 09:10:37 | 000,053,536 | ---- | C] () -- C:\Windows\System32\dosx.exe
[2006-11-02 09:10:02 | 000,000,718 | ---- | C] () -- C:\Windows\System32\mscdexnt.exe
[2006-11-02 09:10:00 | 000,002,842 | ---- | C] () -- C:\Windows\System32\redir.exe
[2006-11-02 09:09:59 | 000,069,886 | ---- | C] () -- C:\Windows\System32\edit.com
[2006-11-02 09:09:59 | 000,019,694 | ---- | C] () -- C:\Windows\System32\GRAPHICS.COM
[2006-11-02 09:09:59 | 000,000,882 | ---- | C] () -- C:\Windows\System32\share.exe
[2006-11-02 09:09:59 | 000,000,882 | ---- | C] () -- C:\Windows\System32\fastopen.exe
[2006-11-02 09:09:57 | 000,014,710 | ---- | C] () -- C:\Windows\System32\KB16.COM
[2006-11-02 09:09:56 | 000,007,052 | ---- | C] () -- C:\Windows\System32\nlsfunc.exe
[2006-11-02 09:09:55 | 000,039,274 | ---- | C] () -- C:\Windows\System32\mem.exe
[2006-11-02 09:09:55 | 000,001,131 | ---- | C] () -- C:\Windows\System32\LOADFIX.COM
[2006-11-02 09:09:53 | 000,011,753 | ---- | C] () -- C:\Windows\System32\setver.exe
[2006-11-02 09:09:52 | 000,020,634 | ---- | C] () -- C:\Windows\System32\debug.exe
[2006-11-02 09:09:51 | 000,008,424 | ---- | C] () -- C:\Windows\System32\exe2bin.exe
[2006-11-02 09:09:50 | 000,012,642 | ---- | C] () -- C:\Windows\System32\edlin.exe
[2006-11-02 09:09:49 | 000,050,648 | ---- | C] () -- C:\Windows\System32\COMMAND.COM
[2006-11-02 09:09:49 | 000,012,498 | ---- | C] () -- C:\Windows\System32\append.exe
[2006-11-02 09:09:45 | 000,027,097 | ---- | C] () -- C:\Windows\System32\country.sys
[2006-11-02 09:09:44 | 000,042,809 | ---- | C] () -- C:\Windows\System32\KEY01.SYS
[2006-11-02 09:09:44 | 000,042,537 | ---- | C] () -- C:\Windows\System32\KEYBOARD.SYS
[2006-11-02 09:09:42 | 000,009,029 | ---- | C] () -- C:\Windows\System32\ANSI.SYS
[2006-11-02 09:09:41 | 000,004,768 | ---- | C] () -- C:\Windows\System32\HIMEM.SYS
[2006-11-02 09:09:40 | 000,029,274 | ---- | C] () -- C:\Windows\System32\NTDOS412.SYS
[2006-11-02 09:09:38 | 000,029,370 | ---- | C] () -- C:\Windows\System32\NTDOS411.SYS
[2006-11-02 09:09:35 | 000,029,146 | ---- | C] () -- C:\Windows\System32\NTDOS404.SYS
[2006-11-02 09:09:31 | 000,029,146 | ---- | C] () -- C:\Windows\System32\NTDOS804.SYS
[2006-11-02 09:09:29 | 000,027,866 | ---- | C] () -- C:\Windows\System32\NTDOS.SYS
[2006-11-02 09:09:26 | 000,035,536 | ---- | C] () -- C:\Windows\System32\NTIO412.SYS
[2006-11-02 09:09:24 | 000,035,776 | ---- | C] () -- C:\Windows\System32\NTIO411.SYS
[2006-11-02 09:09:23 | 000,034,672 | ---- | C] () -- C:\Windows\System32\NTIO404.SYS
[2006-11-02 09:09:22 | 000,034,672 | ---- | C] () -- C:\Windows\System32\NTIO804.SYS
[2006-11-02 09:09:20 | 000,033,952 | ---- | C] () -- C:\Windows\System32\NTIO.SYS
[2006-11-02 08:25:08 | 000,013,312 | ---- | C] () -- C:\Windows\System32\win87em.dll
[2006-03-09 03:57:59 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2001-11-14 22:56:00 | 001,802,240 | ---- | C] () -- C:\Windows\System32\lcppn21.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-10-09 09:42:32 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\Abvent
[2011-05-12 12:31:37 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\Abvent_Artlantis2
[2011-06-12 17:51:30 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\Abvent_Artlantis3
[2009-09-02 20:25:11 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\Ashampoo
[2009-09-29 14:29:28 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\BESTplayer
[2011-01-24 17:35:01 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010-02-06 13:47:45 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\Gadu-Gadu
[2011-05-24 17:10:39 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\Graphisoft
[2009-11-30 18:54:26 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\OpenOffice.org
[2009-11-07 02:51:09 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\PC Suite
[2009-08-29 12:31:18 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\PeerNetworking
[2009-11-07 17:29:35 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\Samsung
[2010-09-06 14:24:56 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2011-06-13 10:43:29 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\Tlen.pl
[2009-12-18 00:14:14 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\VSO
[2011-06-20 15:33:53 | 000,032,546 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2011-06-21 08:51:26 | 000,000,412 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{72BE63AC-2018-4979-8D11-3088F1F8E0E7}.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >