OTL logfile created on: 2011-07-01 13:33:52 - Run 3 OTL by OldTimer - Version 3.2.25.0 Folder = C:\Users\August\Desktop 64bit- Enterprise Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 2,29 Gb Available Physical Memory | 57,23% Memory free 7,99 Gb Paging File | 6,01 Gb Available in Paging File | 75,14% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 102,44 Gb Total Space | 52,87 Gb Free Space | 51,61% Space Free | Partition Type: NTFS Drive D: | 828,97 Gb Total Space | 316,88 Gb Free Space | 38,23% Space Free | Partition Type: NTFS Computer Name: AUGUST-KOMPUTER | User Name: August | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-07-01 12:31:20 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\August\Desktop\OTL.exe PRC - [2011-06-16 06:51:12 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 12\firefox.exe PRC - [2011-06-06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2011-05-12 15:40:24 | 002,656,128 | ---- | M] (Ashampoo Development GmbH & Co. KG) -- C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 8\LiveTuner.exe PRC - [2011-05-12 15:40:20 | 000,884,608 | ---- | M] () -- C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerService.exe PRC - [2011-04-17 02:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe PRC - [2011-04-15 11:43:20 | 002,280,312 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe PRC - [2011-04-10 17:29:14 | 001,646,936 | ---- | M] (IObit) -- C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe PRC - [2010-11-17 09:53:16 | 000,113,288 | ---- | M] (Renesas Electronics Corporation) -- C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe PRC - [2010-10-01 17:50:42 | 001,564,672 | ---- | M] (CMedia) -- C:\Program Files\ASUS Xonar DX Audio\Customapp\AsusAudioCenter.exe PRC - [2010-07-02 12:32:08 | 005,655,680 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files\ASUS\TurboV\TurboV.exe PRC - [2010-06-03 15:16:08 | 000,611,968 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\AI Suite\QFan3\QFanHelp.exe PRC - [2009-12-28 21:20:14 | 001,177,216 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\AI Suite\CPU Level UpEx\CpuLevelUp.exe PRC - [2009-12-28 15:33:01 | 000,096,896 | R--- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe PRC - [2009-12-23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe PRC - [2009-11-17 21:42:26 | 005,821,952 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe PRC - [2009-10-27 18:31:28 | 001,871,360 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files\ASUS\Turbo Key\TurboKey.exe PRC - [2009-10-26 14:16:00 | 000,223,464 | ---- | M] (DeviceVM, Inc.) -- C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe PRC - [2009-10-26 14:15:56 | 000,375,000 | ---- | M] (DeviceVM, Inc.) -- C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe PRC - [2009-10-05 13:06:46 | 000,036,864 | ---- | M] () -- C:\Program Files\MagicTune Premium\GammaTray.exe PRC - [2009-07-17 15:25:02 | 000,319,488 | -H-- | M] (DeviceVM, Inc.) -- C:\ASUS.SYS\config\DVMExportService.exe PRC - [2008-07-11 15:04:22 | 000,200,704 | ---- | M] () -- C:\Windows\SysWOW64\HsMgr.exe [color=#E56717]========== Modules (SafeList) ==========[/color] MOD - [2011-07-01 12:31:20 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\August\Desktop\OTL.exe MOD - [2010-08-21 07:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2011-05-25 05:03:38 | 000,204,288 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2011-03-29 21:45:04 | 001,038,088 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64) SRV:[b]64bit:[/b] - [2011-02-18 05:51:10 | 000,027,760 | ---- | M] (VIA Technologies, Inc.) [Auto | Running] -- C:\Windows\SysNative\ViakaraokeSrv.exe -- (VIAKaraokeService) SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2011-06-06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011-05-12 15:40:20 | 000,884,608 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerService.exe -- (WO_LiveService) SRV - [2011-04-17 02:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) [Unknown | Running] -- C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe -- (NIS) SRV - [2011-04-15 11:43:20 | 002,280,312 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe -- (TeamViewer6) SRV - [2011-03-29 21:45:00 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2011-03-28 12:43:41 | 000,403,240 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2010-05-04 12:07:22 | 000,503,080 | ---- | M] (Nero AG) [On_Demand | Stopped] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate) SRV - [2009-12-28 15:33:01 | 000,096,896 | R--- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe -- (AsSysCtrlService) SRV - [2009-12-23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2009-10-26 14:16:00 | 000,223,464 | ---- | M] (DeviceVM, Inc.) [Auto | Running] -- C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe -- (BCUService) SRV - [2009-08-24 22:16:12 | 000,544,768 | ---- | M] (mst software GmbH, Germany) [Auto | Running] -- C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 8\DfsdkS64.exe -- (DfSdkS) SRV - [2009-07-20 12:51:52 | 000,935,208 | ---- | M] (Nero AG) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0) SRV - [2009-07-17 15:25:02 | 000,319,488 | -H-- | M] (DeviceVM, Inc.) [Auto | Running] -- C:\ASUS.SYS\config\DVMExportService.exe -- (DvmMDES) SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2011-06-28 22:57:27 | 000,174,200 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent) DRV:[b]64bit:[/b] - [2011-05-25 06:26:56 | 009,359,872 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2011-05-25 04:25:42 | 000,309,760 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2011-04-22 08:17:04 | 000,471,144 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2011-03-31 05:00:09 | 000,744,568 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\srtsp64.sys -- (SRTSP) DRV:[b]64bit:[/b] - [2011-03-31 05:00:09 | 000,040,568 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\srtspx64.sys -- (SRTSPX) Symantec Real Time Storage Protection (PEL) DRV:[b]64bit:[/b] - [2011-03-30 20:46:44 | 000,114,704 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService) DRV:[b]64bit:[/b] - [2011-03-22 19:26:28 | 000,503,352 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2011-03-22 02:39:49 | 000,382,584 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\symnets.sys -- (SymNetS) DRV:[b]64bit:[/b] - [2011-03-15 04:31:23 | 000,912,504 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\symefa64.sys -- (SymEFA) DRV:[b]64bit:[/b] - [2011-02-23 16:50:14 | 000,018,232 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\SmartDefragDriver.sys -- (SmartDefragDriver) DRV:[b]64bit:[/b] - [2011-02-18 05:51:06 | 002,153,072 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService) DRV:[b]64bit:[/b] - [2011-02-10 14:52:34 | 000,181,760 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc) DRV:[b]64bit:[/b] - [2011-02-10 14:52:34 | 000,082,432 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub) DRV:[b]64bit:[/b] - [2011-01-27 08:47:10 | 000,450,680 | ---- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\symds64.sys -- (SymDS) DRV:[b]64bit:[/b] - [2011-01-27 07:07:06 | 000,171,128 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\ironx64.sys -- (SymIRON) DRV:[b]64bit:[/b] - [2011-01-07 17:03:08 | 000,051,584 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dc3d.sys -- (dc3d) DRV:[b]64bit:[/b] - [2011-01-07 17:03:08 | 000,045,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\point64.sys -- (Point64) DRV:[b]64bit:[/b] - [2010-11-09 15:35:24 | 000,021,992 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz135_x64.sys -- (cpuz135) DRV:[b]64bit:[/b] - [2010-10-29 18:13:18 | 000,121,432 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\jraid.sys -- (JRAID) DRV:[b]64bit:[/b] - [2010-09-16 11:41:12 | 001,266,688 | ---- | M] (C-Media Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\cmudaxp.sys -- (cmudaxp) DRV:[b]64bit:[/b] - [2010-08-16 16:31:18 | 000,019,936 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\pwdrvio.sys -- (pwdrvio) DRV:[b]64bit:[/b] - [2010-08-16 16:31:16 | 000,013,280 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\pwdspio.sys -- (pwdspio) DRV:[b]64bit:[/b] - [2010-08-06 10:53:14 | 000,293,416 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mv91xx.sys -- (mv91xx) DRV:[b]64bit:[/b] - [2009-07-16 05:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor) DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-06-10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-04-08 14:28:46 | 000,068,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21) DRV:[b]64bit:[/b] - [2009-03-18 17:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi) DRV:[b]64bit:[/b] - [2007-08-08 18:54:12 | 000,035,624 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ATITool64.sys -- (ATITool) DRV - [2011-06-28 22:57:13 | 002,011,768 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20110630.038\EX64.SYS -- (NAVEX15) DRV - [2011-06-28 22:57:13 | 000,481,912 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl) DRV - [2011-06-28 22:57:13 | 000,136,824 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv) DRV - [2011-06-28 22:57:13 | 000,117,880 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20110630.038\ENG64.SYS -- (NAVENG) DRV - [2011-06-16 01:56:18 | 001,143,416 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20110616.003\BHDrvx64.sys -- (BHDrvx64) DRV - [2011-06-10 23:52:50 | 000,488,056 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20110630.050\IDSviA64.sys -- (IDSVia64) DRV - [2011-03-08 06:01:06 | 000,012,824 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerProcessMonitor64.sys -- (LiveTunerPM) DRV - [2008-08-14 07:57:42 | 000,074,720 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysWow64\drivers\adfs.sys -- (adfs) DRV - [2006-08-28 17:12:04 | 000,013,312 | ---- | M] () [Kernel | System | Stopped] -- C:\Windows\system32\drivers\MTictwl.sys -- (NCPro) DRV - [2006-08-28 17:12:04 | 000,013,312 | ---- | M] () [Kernel | System | Stopped] -- C:\Windows\system32\drivers\MTiCtwl.sys -- (MagicTune) DRV - [2006-08-28 17:12:04 | 000,013,312 | ---- | M] () [Kernel | System | Running] -- C:\Windows\system32\Drivers\MtiCtwl.sys -- (Magic Tune) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage IE - HKU\S-1-5-21-2772203385-4160803813-1650552103-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.com/spbasic.htm IE - HKU\S-1-5-21-2772203385-4160803813-1650552103-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage IE - HKU\S-1-5-21-2772203385-4160803813-1650552103-1001\..\URLSearchHook: {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll (DeviceVM, Inc.) IE - HKU\S-1-5-21-2772203385-4160803813-1650552103-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "www.google.pl" FF - prefs.js..keyword.URL: "http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=ZNxpt731YYPL&ptb=s91D7hdNDU4325G.ZFbDtg&ind=2011051605&ptnrS=ZNxpt731YYPL&si=44106&n=77de3655&psa=&st=kwd&searchfor=" FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\IPSFFPlgn\ [2011-06-29 16:57:30 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\coFFPlgn\ [2011-06-28 22:57:18 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 12\components [2011-07-01 12:07:24 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 12\plugins [2011-03-22 19:16:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\August\AppData\Roaming\mozilla\Extensions [2011-06-29 17:07:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\August\AppData\Roaming\mozilla\Firefox\Profiles\1idlnkmy.default\extensions [2011-06-23 23:49:03 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\August\AppData\Roaming\mozilla\Firefox\Profiles\1idlnkmy.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2011-05-16 19:05:36 | 000,009,966 | ---- | M] () -- C:\Users\August\AppData\Roaming\Mozilla\Firefox\Profiles\1idlnkmy.default\searchplugins\mywebsearch.xml File not found (No name found) -- [2011-03-22 19:32:49 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES (X86)\MOZILLA FIREFOX 4.0 BETA 12\EXTENSIONS\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2011-03-23 11:09:58 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES (X86)\MOZILLA FIREFOX 4.0 BETA 12\EXTENSIONS\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011-06-15 20:47:25 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES (X86)\MOZILLA FIREFOX 4.0 BETA 12\EXTENSIONS\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} [2011-06-28 22:57:18 | 000,000,000 | ---D | M] (Norton Toolbar) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\COFFPLGN [2011-06-29 16:57:30 | 000,000,000 | ---D | M] (Symantec IPS) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\IPSFFPLGN () (No name found) -- C:\USERS\AUGUST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1IDLNKMY.DEFAULT\EXTENSIONS\{19503E42-CA3C-4C27-B1E2-9CDB2170EE34}.XPI () (No name found) -- C:\USERS\AUGUST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1IDLNKMY.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI () (No name found) -- C:\USERS\AUGUST\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\1IDLNKMY.DEFAULT\EXTENSIONS\TESTPILOT@LABS.MOZILLA.COM.XPI O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\coIEPlg.dll (Symantec Corporation) O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\IPS\IPSBHO.DLL (Symantec Corporation) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL (Microsoft Corporation) O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\coIEPlg.dll (Symantec Corporation) O3 - HKU\S-1-5-21-2772203385-4160803813-1650552103-1001\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\coIEPlg.dll (Symantec Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Ashampoo WinOptimizer Live-Tuner] C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 8\LiveTuner.exe (Ashampoo Development GmbH & Co. KG) O4:[b]64bit:[/b] - HKLM..\Run: [Cmaudio8788] C:\Windows\Syswow64\cmicnfgp.dll (C-Media Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Cmaudio8788GX] C:\Windows\syswow64\HsMgr.exe () O4:[b]64bit:[/b] - HKLM..\Run: [Cmaudio8788GX64] C:\Windows\system\HsMgr64.exe () O4:[b]64bit:[/b] - HKLM..\Run: [IntelliPoint] C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [MagicTuneEngine] C:\Program Files\MagicTune Premium\MagicTuneLauncher.exe () O4 - HKLM..\Run: [BCU] C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe (DeviceVM, Inc.) O4 - HKLM..\Run: [Cpu Level Up] C:\Program Files (x86)\ASUS\AI Suite\CPU Level UPEx\CpuLevelUp.exe (ASUSTeK Computer Inc.) O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA) O4 - HKLM..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe () O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation) O4 - HKLM..\Run: [QFan Help] C:\Program Files (x86)\ASUS\AI Suite\QFan3\QFanHelp.exe (ASUSTeK Computer Inc.) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [Turbo Key] C:\Program Files\ASUS\Turbo Key\TurboKey.exe (ASUSTeK Computer Inc.) O4 - HKLM..\Run: [TurboV] C:\Program Files\ASUS\TurboV\TurboV.exe (ASUSTeK Computer Inc.) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-2772203385-4160803813-1650552103-1001..\Run: [AlcoholAutomount] C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe (Alcohol Soft Development Team) O4 - HKU\S-1-5-21-2772203385-4160803813-1650552103-1001..\Run: [fsm] File not found O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKU\S-1-5-21-2772203385-4160803813-1650552103-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149 O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25) O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 0.0.0.0 O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{a5900440-54a9-11e0-82b3-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{a5900440-54a9-11e0-82b3-806e6f6e6963}\Shell\AutoRun\command - "" = G:\setup.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-07-01 12:47:59 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner [2011-07-01 12:33:21 | 000,000,000 | ---D | C] -- C:\_OTL [2011-07-01 12:31:18 | 000,580,096 | ---- | C] (OldTimer Tools) -- C:\Users\August\Desktop\OTL.exe [2011-07-01 11:58:08 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2011-07-01 11:58:08 | 000,599,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll [2011-07-01 11:58:08 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll [2011-07-01 11:58:08 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2011-07-01 11:58:08 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll [2011-07-01 11:58:08 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2011-07-01 11:58:08 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2011-07-01 11:58:08 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2011-07-01 11:58:08 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll [2011-07-01 11:58:08 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll [2011-07-01 11:58:07 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec [2011-07-01 11:58:07 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec [2011-07-01 11:58:07 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe [2011-07-01 11:58:07 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe [2011-07-01 11:57:55 | 005,509,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2011-07-01 11:57:55 | 003,957,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2011-07-01 11:57:55 | 003,901,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2011-07-01 11:57:54 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drvinst.exe [2011-07-01 11:57:54 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\devrtl.dll [2011-07-01 11:56:35 | 000,861,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll [2011-06-30 17:51:10 | 000,000,000 | ---D | C] -- C:\Users\August\Documents\Disney Interactive Studios [2011-06-30 17:47:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cars 2 [2011-06-30 17:36:10 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Aspyr [2011-06-30 17:34:35 | 000,000,000 | ---D | C] -- C:\Users\August\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aspyr [2011-06-29 17:25:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RarmaRadio [2011-06-29 17:09:56 | 000,000,000 | R--D | C] -- C:\Users\August\Desktop\Dokumenty [2011-06-29 17:01:03 | 000,000,000 | ---D | C] -- C:\Users\August\Documents\The KMPlayer [2011-06-29 16:59:12 | 000,000,000 | ---D | C] -- C:\Users\August\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer [2011-06-29 16:59:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\The KMPlayer [2011-06-28 22:57:27 | 000,912,504 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\symefa64.sys [2011-06-28 22:57:27 | 000,450,680 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\symds64.sys [2011-06-28 22:57:27 | 000,382,584 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\symnets.sys [2011-06-28 22:57:27 | 000,040,568 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\srtspx64.sys [2011-06-28 22:57:26 | 000,744,568 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\srtsp64.sys [2011-06-28 22:57:26 | 000,171,128 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\ironx64.sys [2011-06-28 22:57:18 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NISx64\1206000.01D [2011-06-28 22:50:50 | 000,000,000 | ---D | C] -- C:\Users\August\Documents\Symantec [2011-06-28 20:20:25 | 000,174,200 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS [2011-06-28 20:20:25 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared [2011-06-28 20:20:25 | 000,000,000 | ---D | C] -- C:\Program Files\Symantec [2011-06-28 20:19:48 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NISx64 [2011-06-28 20:19:45 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security [2011-06-28 20:19:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Norton Internet Security [2011-06-28 20:19:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NortonInstaller [2011-06-28 12:32:20 | 000,000,000 | ---D | C] -- C:\Users\August\AppData\Roaming\Koala [2011-06-28 12:17:54 | 000,000,000 | ---D | C] -- C:\Users\August\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dream Aquarium [2011-06-28 12:17:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dream Aquarium [2011-06-28 12:17:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Dream Aquarium [2011-06-26 22:22:37 | 000,000,000 | ---D | C] -- C:\Users\August\AppData\Roaming\Day 1 Studios [2011-06-26 22:20:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WB Games [2011-06-25 15:15:33 | 000,000,000 | ---D | C] -- C:\Users\August\Documents\Virtua Tennis 4 [2011-06-20 19:31:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aerosoft [2011-06-19 17:52:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA Games [2011-06-18 23:10:53 | 000,000,000 | ---D | C] -- C:\Users\August\AppData\Roaming\Download Manager [2011-06-16 22:47:42 | 000,000,000 | ---D | C] -- C:\Users\August\AppData\Local\bitComposer [2011-06-16 19:57:35 | 000,000,000 | ---D | C] -- C:\AMD [2011-06-16 19:57:12 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI [2011-06-16 19:57:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD APP [2011-06-16 19:56:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center [2011-06-16 19:55:31 | 023,336,960 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\atio6axx.dll [2011-06-16 19:55:31 | 017,940,992 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysWow64\atioglxx.dll [2011-06-16 19:55:31 | 009,359,872 | ---- | C] (ATI Technologies Inc.) -- C:\Windows\SysNative\drivers\atikmdag.sys [2011-06-16 19:55:31 | 008,489,472 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\aticaldd64.dll [2011-06-16 19:55:31 | 006,847,488 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysWow64\aticaldd.dll [2011-06-16 19:55:31 | 005,486,592 | ---- | C] (ATI Technologies Inc. ) -- C:\Windows\SysNative\atiumd64.dll [2011-06-16 19:55:31 | 004,330,496 | ---- | C] (ATI Technologies Inc. ) -- C:\Windows\SysWow64\atiumdag.dll [2011-06-16 19:55:31 | 004,017,152 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atiumdva.dll [2011-06-16 19:55:31 | 003,810,816 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiumd6a.dll [2011-06-16 19:55:31 | 001,828,864 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atiumdmv.dll [2011-06-16 19:55:31 | 001,113,088 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiumd6v.dll [2011-06-16 19:55:31 | 000,485,376 | ---- | C] (AMD) -- C:\Windows\SysNative\atieclxx.exe [2011-06-16 19:55:31 | 000,462,848 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\ATIDEMGX.dll [2011-06-16 19:55:31 | 000,423,424 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\SysNative\atipdl64.dll [2011-06-16 19:55:31 | 000,356,352 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\SysWow64\atipdlxx.dll [2011-06-16 19:55:31 | 000,309,760 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\drivers\atikmpag.sys [2011-06-16 19:55:31 | 000,278,528 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\SysWow64\Oemdspif.dll [2011-06-16 19:55:31 | 000,262,144 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysWow64\atiadlxy.dll [2011-06-16 19:55:31 | 000,204,288 | ---- | C] (AMD) -- C:\Windows\SysNative\atiesrxx.exe [2011-06-16 19:55:31 | 000,151,552 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\atiapfxx.exe [2011-06-16 19:55:31 | 000,120,320 | ---- | C] (AMD) -- C:\Windows\SysNative\atitmm64.dll [2011-06-16 19:55:31 | 000,114,704 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\AtihdW76.sys [2011-06-16 19:55:31 | 000,059,392 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\SysNative\atiedu64.dll [2011-06-16 19:55:31 | 000,053,760 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atimpc64.dll [2011-06-16 19:55:31 | 000,053,760 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\amdpcom64.dll [2011-06-16 19:55:31 | 000,053,248 | ---- | C] (ATI Technologies Inc.) -- C:\Windows\SysNative\drivers\ati2erec.dll [2011-06-16 19:55:31 | 000,052,736 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atimpc32.dll [2011-06-16 19:55:31 | 000,052,736 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\amdpcom32.dll [2011-06-16 19:55:31 | 000,051,200 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\aticalrt64.dll [2011-06-16 19:55:31 | 000,046,080 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysWow64\aticalrt.dll [2011-06-16 19:55:31 | 000,044,544 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\aticalcl64.dll [2011-06-16 19:55:31 | 000,044,032 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysWow64\aticalcl.dll [2011-06-16 19:55:31 | 000,043,520 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\SysWow64\ati2edxx.dll [2011-06-16 19:55:31 | 000,039,936 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atig6txx.dll [2011-06-16 19:55:31 | 000,038,912 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiu9p64.dll [2011-06-16 19:55:31 | 000,032,768 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atigktxx.dll [2011-06-16 19:55:31 | 000,029,184 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atiu9pag.dll [2011-06-16 19:55:31 | 000,016,384 | ---- | C] (AMD) -- C:\Windows\SysNative\atimuixx.dll [2011-06-16 19:55:31 | 000,014,848 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atig6pxx.dll [2011-06-16 19:55:31 | 000,012,800 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atiglpxx.dll [2011-06-16 19:55:31 | 000,012,800 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiglpxx.dll [2011-06-15 20:47:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2011-06-15 20:47:24 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2011-06-15 20:47:24 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2011-06-15 20:47:24 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2011-06-14 23:10:10 | 000,000,000 | ---D | C] -- C:\Users\August\Documents\Pliki programu Flight Simulator X Demo [2011-06-14 15:23:51 | 000,000,000 | RH-D | C] -- C:\Users\August\AppData\Roaming\SecuROM [2011-06-14 15:22:47 | 000,000,000 | ---D | C] -- C:\Users\August\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games [2011-06-13 00:31:00 | 000,000,000 | ---D | C] -- C:\Users\August\Documents\Flight Simulator X Files [2011-06-13 00:26:52 | 000,000,000 | ---D | C] -- C:\Users\August\AppData\Local\Microsoft Game Studios [2011-06-13 00:15:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Microsoft Games [2011-06-11 22:07:01 | 000,000,000 | ---D | C] -- C:\Users\August\Documents\Duke Nukem Forever [2011-06-10 13:17:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rovio [2011-06-08 23:02:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Data Doctor Recovery - SIM Card [2011-06-07 22:35:00 | 000,000,000 | ---D | C] -- C:\Users\August\Documents\LucasArts [2011-06-07 22:34:59 | 000,000,000 | ---D | C] -- C:\Users\August\AppData\Local\LucasArts [2011-06-06 12:15:36 | 000,000,000 | ---D | C] -- C:\Users\August\Documents\Eidos [2011-06-03 00:46:07 | 000,000,000 | ---D | C] -- C:\Users\August\AppData\Local\dxhr [2011-06-03 00:45:31 | 000,000,000 | ---D | C] -- C:\Users\August\AppData\Local\28070 [2011-05-10 19:11:35 | 000,347,136 | RHS- | C] (NirSoft) -- C:\ProgramData\nircmd.exe [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-07-01 13:32:36 | 000,000,338 | -H-- | M] () -- C:\dvmexp.idx [2011-07-01 12:52:48 | 000,000,290 | -H-- | M] () -- C:\Windows\tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job [2011-07-01 12:52:34 | 000,000,314 | -HS- | M] () -- C:\Windows\tasks\Hfumw.job [2011-07-01 12:52:30 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011-07-01 12:48:01 | 000,000,824 | ---- | M] () -- C:\Users\August\Desktop\CCleaner.lnk [2011-07-01 12:31:20 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\August\Desktop\OTL.exe [2011-07-01 12:07:29 | 000,001,226 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2011-07-01 12:02:27 | 003,022,576 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2011-07-01 11:59:40 | 001,311,468 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\Cat.DB [2011-06-30 17:33:09 | 000,977,572 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011-06-30 17:33:09 | 000,832,638 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011-06-30 17:33:09 | 000,699,482 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2011-06-30 17:33:09 | 000,450,598 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011-06-30 17:33:09 | 000,137,040 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2011-06-29 00:54:14 | 000,021,376 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011-06-29 00:54:13 | 000,021,376 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011-06-28 23:00:09 | 000,002,505 | ---- | M] () -- C:\Users\Public\Desktop\Norton Internet Security.lnk [2011-06-28 22:57:27 | 000,174,200 | ---- | M] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS [2011-06-28 22:57:27 | 000,007,488 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT [2011-06-28 22:57:27 | 000,000,855 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF [2011-06-28 22:37:30 | 000,680,647 | ---- | M] () -- C:\Users\August\AppData\Roaming\data.dat [2011-06-28 20:24:07 | 000,188,928 | RHS- | M] () -- C:\Windows\SysWow64\typelib9.dll [2011-06-28 12:37:19 | 000,002,240 | ---- | M] () -- C:\Users\Public\Desktop\1-Click-Optimizer (WO8).lnk [2011-06-28 12:37:19 | 000,001,230 | ---- | M] () -- C:\Users\Public\Desktop\Ashampoo WinOptimizer 8.lnk [2011-06-18 23:12:02 | 000,121,078 | ---- | M] () -- C:\Windows\Cmicnfgp.ini.cfl [2011-06-18 23:12:01 | 000,000,935 | ---- | M] () -- C:\Windows\Cmicnfgp.ini.imi [2011-06-18 23:12:01 | 000,000,874 | ---- | M] () -- C:\Windows\System\Cmicnfgp.ini [2011-06-18 23:12:01 | 000,000,140 | ---- | M] () -- C:\Windows\System\Dlap.pfx [2011-06-16 19:40:37 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2011-06-14 00:18:37 | 000,002,312 | ---- | M] () -- C:\{7D005388-DB74-4CE2-85F2-FCD6C86B6A48} [2011-06-13 23:33:25 | 000,002,600 | ---- | M] () -- C:\{968A5B7F-188A-43E1-8A40-8C508DDF0C6D} [2011-06-13 00:29:27 | 000,000,373 | ---- | M] () -- C:\Users\August\Documents\ax_files.xml [2011-06-03 19:12:20 | 000,008,192 | ---- | M] () -- C:\Users\August\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-07-01 12:48:00 | 000,000,824 | ---- | C] () -- C:\Users\August\Desktop\CCleaner.lnk [2011-07-01 12:07:25 | 000,001,238 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk [2011-06-28 22:59:20 | 001,311,468 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\Cat.DB [2011-06-28 22:57:27 | 000,007,460 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\symefa64.cat [2011-06-28 22:57:27 | 000,007,458 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\symnet64.cat [2011-06-28 22:57:27 | 000,003,373 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\symefa.inf [2011-06-28 22:57:27 | 000,002,792 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\symds.inf [2011-06-28 22:57:27 | 000,001,446 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\symnet.inf [2011-06-28 22:57:27 | 000,001,422 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\srtspx64.inf [2011-06-28 22:57:26 | 000,007,492 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\iron.cat [2011-06-28 22:57:26 | 000,007,462 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\srtspx64.cat [2011-06-28 22:57:26 | 000,007,458 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\srtsp64.cat [2011-06-28 22:57:26 | 000,001,438 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\srtsp64.inf [2011-06-28 22:57:26 | 000,000,772 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\iron.inf [2011-06-28 22:57:19 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\symds64.cat [2011-06-28 22:57:18 | 000,000,172 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1206000.01D\isolate.ini [2011-06-28 20:24:12 | 000,000,290 | -H-- | C] () -- C:\Windows\tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job [2011-06-28 20:24:07 | 000,188,928 | RHS- | C] () -- C:\Windows\SysWow64\typelib9.dll [2011-06-28 20:24:07 | 000,000,314 | -HS- | C] () -- C:\Windows\tasks\Hfumw.job [2011-06-28 20:20:25 | 000,007,488 | ---- | C] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT [2011-06-28 20:20:25 | 000,000,855 | ---- | C] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF [2011-06-28 20:20:17 | 000,002,505 | ---- | C] () -- C:\Users\Public\Desktop\Norton Internet Security.lnk [2011-06-28 12:37:19 | 000,002,240 | ---- | C] () -- C:\Users\Public\Desktop\1-Click-Optimizer (WO8).lnk [2011-06-28 12:37:19 | 000,001,230 | ---- | C] () -- C:\Users\Public\Desktop\Ashampoo WinOptimizer 8.lnk [2011-06-18 23:11:50 | 000,000,935 | ---- | C] () -- C:\Windows\Cmicnfgp.ini.imi [2011-06-18 23:11:47 | 000,004,969 | ---- | C] () -- C:\Windows\Cmicnfgp.ini.cfg [2011-06-16 19:55:31 | 001,127,552 | ---- | C] () -- C:\Windows\SysWow64\atiumdva.cap [2011-06-16 19:55:31 | 001,127,552 | ---- | C] () -- C:\Windows\SysNative\atiumd6a.cap [2011-06-16 19:55:31 | 000,233,765 | ---- | C] () -- C:\Windows\SysNative\atiicdxx.dat [2011-06-16 19:55:31 | 000,166,624 | ---- | C] () -- C:\Windows\SysNative\atiapfxx.blb [2011-06-16 19:55:31 | 000,032,635 | ---- | C] () -- C:\Windows\atiogl.xml [2011-06-15 13:37:02 | 000,002,471 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk [2011-06-14 00:18:20 | 000,002,312 | ---- | C] () -- C:\{7D005388-DB74-4CE2-85F2-FCD6C86B6A48} [2011-06-13 23:33:23 | 000,002,600 | ---- | C] () -- C:\{968A5B7F-188A-43E1-8A40-8C508DDF0C6D} [2011-05-25 12:42:34 | 000,109,255 | ---- | C] () -- C:\Users\August\AppData\Roaming\MSWINSCK.OCX [2011-05-24 23:44:26 | 000,059,904 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll [2011-05-17 23:23:42 | 001,468,784 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011-05-16 22:05:54 | 000,075,107 | ---- | C] () -- C:\Windows\SysWow64\Uninstal Diag Tool.exe [2011-05-11 17:50:37 | 000,003,929 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat [2011-05-10 19:12:14 | 000,000,002 | ---- | C] () -- C:\ProgramData\timerxfile [2011-05-10 19:12:14 | 000,000,002 | ---- | C] () -- C:\ProgramData\datesavefile [2011-05-10 19:12:14 | 000,000,001 | ---- | C] () -- C:\ProgramData\varsavefile [2011-05-10 19:11:35 | 000,004,768 | ---- | C] () -- C:\ProgramData\operaprefs.ini [2011-05-07 21:30:21 | 000,680,647 | ---- | C] () -- C:\Users\August\AppData\Roaming\data.dat [2011-05-07 21:29:50 | 000,006,144 | -H-- | C] () -- C:\Users\August\AppData\Roaming\AutoRun.exe [2011-04-30 21:05:35 | 000,008,192 | ---- | C] () -- C:\Users\August\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-04-09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2011-04-08 20:56:04 | 000,000,140 | ---- | C] () -- C:\Users\August\AppData\Roaming\default.rss [2011-03-31 22:54:46 | 000,200,704 | ---- | C] () -- C:\Windows\SysWow64\HsMgr.exe [2011-03-31 22:54:46 | 000,000,048 | ---- | C] () -- C:\Windows\SysWow64\cmasiop.ini [2011-03-31 21:56:02 | 000,013,312 | ---- | C] () -- C:\Windows\SysWow64\drivers\MTictwl.sys [2011-03-22 21:01:12 | 002,434,856 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_bc2.exe [2011-03-22 19:15:57 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat [2011-03-22 18:25:04 | 000,143,360 | ---- | C] () -- C:\Windows\SysWow64\VmixP8.dll [2011-03-22 18:24:50 | 000,121,078 | ---- | C] () -- C:\Windows\Cmicnfgp.ini.cfl [2011-03-22 18:20:17 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2011-03-22 18:01:11 | 000,024,576 | R--- | C] () -- C:\Windows\SysWow64\AsIO.dll [2011-03-22 18:01:11 | 000,013,440 | R--- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys [2011-03-22 18:01:08 | 000,011,832 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp64.sys [2011-03-22 18:01:08 | 000,010,216 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp32.sys [2011-03-22 17:57:21 | 000,046,464 | ---- | C] () -- C:\Windows\Ascd_log.ini [2011-03-22 17:56:33 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini [2011-03-22 17:56:29 | 000,030,157 | ---- | C] () -- C:\Windows\Ascd_tmp.ini [2011-01-29 18:00:24 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe [2011-01-29 18:00:22 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll [2011-01-29 18:00:22 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll [2011-01-29 18:00:22 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll [2011-01-29 18:00:22 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll [2011-01-13 21:05:38 | 002,014,958 | ---- | C] () -- C:\ProgramData\CleanupFiles.exe [2010-05-28 02:04:46 | 000,041,872 | ---- | C] () -- C:\Windows\SysWow64\xfcodec.dll [2009-07-14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009-07-14 04:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2009-07-14 04:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2009-07-14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009-07-14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009-07-06 04:48:34 | 000,013,368 | R--- | C] () -- C:\Windows\SysWow64\drivers\AsUpIO.sys [2009-06-10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [2009-04-02 14:30:14 | 000,010,296 | ---- | C] () -- C:\Windows\SysWow64\drivers\ASUSHWIO.SYS [2008-12-01 18:32:32 | 000,362,029 | ---- | C] () -- C:\Windows\SysWow64\sqlite3.dll [2007-12-19 12:51:40 | 000,000,560 | ---- | C] () -- C:\Windows\cmudaxp.ini [color=#E56717]========== LOP Check ==========[/color] [2011-05-08 12:41:38 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\2K Sports [2011-03-22 18:25:30 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\ASUS [2011-04-28 17:35:14 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\Babylon [2011-05-12 17:24:04 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\BlackBean [2011-05-31 19:48:16 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\COWON [2011-06-26 22:22:37 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\Day 1 Studios [2011-05-31 12:05:10 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\DisneyInteractiveStudios [2011-05-17 17:04:01 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\Gadu-Gadu 10 [2011-05-01 12:31:34 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\IObit [2011-04-18 13:01:27 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\IrfanView [2011-06-28 12:32:55 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\Koala [2011-03-22 20:30:55 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\Leadertech [2011-05-18 19:22:17 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\LucasArts [2011-03-23 15:59:02 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\Mount&Blade Warband [2011-05-05 18:25:36 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\Mount&Blade With Fire and Sword [2011-03-24 22:43:55 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\PunkBuster [2011-06-10 13:14:45 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\Rovio [2011-03-23 15:38:00 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\Samsung [2011-06-16 19:49:10 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\Software Informer [2011-04-02 17:48:10 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\Sports Interactive [2011-06-22 15:13:52 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\The Creative Assembly [2011-04-28 12:40:31 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\TS3Client [2011-04-28 17:01:21 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\wargaming.net [2011-06-29 12:46:54 | 000,000,000 | ---D | M] -- C:\Users\August\AppData\Roaming\WinDefender [2011-07-01 12:52:34 | 000,000,314 | -HS- | M] () -- C:\Windows\Tasks\Hfumw.job [2011-06-24 18:54:46 | 000,032,604 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [2011-07-01 12:52:48 | 000,000,290 | -H-- | M] () -- C:\Windows\Tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job [color=#E56717]========== Purity Check ==========[/color] < End of report >