OTL logfile created on: 2011-07-02 13:20:06 - Run 1
OTL by OldTimer - Version 3.2.25.0     Folder = E:\Flash
64bit- Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd
 
4,00 Gb Total Physical Memory | 2,44 Gb Available Physical Memory | 61,00% Memory free
8,00 Gb Paging File | 6,27 Gb Available in Paging File | 78,44% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 48,83 Gb Total Space | 16,54 Gb Free Space | 33,87% Space Free | Partition Type: NTFS
Drive D: | 116,42 Gb Total Space | 47,67 Gb Free Space | 40,94% Space Free | Partition Type: NTFS
Drive E: | 116,45 Gb Total Space | 19,71 Gb Free Space | 16,93% Space Free | Partition Type: NTFS
Drive F: | 416,92 Gb Total Space | 94,37 Gb Free Space | 22,64% Space Free | Partition Type: NTFS
 
Computer Name: SOBI-PC | User Name: Sobi | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: Off | File Age = 60 Days
 
[color=#E56717]========== Processes (All) ==========[/color]
 
PRC - [2011-07-02 13:19:07 | 000,580,096 | ---- | M] (OldTimer Tools) -- E:\Flash\OTL(1).exe
PRC - [2011-06-24 11:29:54 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2011-06-24 11:29:51 | 000,016,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
PRC - [2011-06-06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011-06-01 15:14:56 | 013,349,472 | ---- | M] (GG Network S.A.) -- F:\Program Files (x86)\Gadu-Gadu 10\gg.exe
PRC - [2011-04-19 22:11:56 | 000,049,664 | ---- | M] (Advanced Micro Devices, Inc.) -- F:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MMLoadDrv.exe
PRC - [2011-04-08 12:59:52 | 000,254,696 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
PRC - [2011-03-22 20:37:06 | 000,074,752 | ---- | M] (Nullsoft, Inc.) -- F:\Program Files (x86)\Winamp\winampa.exe
PRC - [2009-07-14 03:14:31 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rundll32.exe
PRC - [2008-11-18 22:15:30 | 000,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
 
 
[color=#E56717]========== Modules (All) ==========[/color]
 
MOD - [2011-07-02 13:19:07 | 000,580,096 | ---- | M] (OldTimer Tools) -- E:\Flash\OTL(1).exe
MOD - [2010-12-18 07:31:23 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll
MOD - [2010-11-11 19:05:19 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll
MOD - [2010-11-11 19:01:57 | 001,413,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll
MOD - [2010-11-11 19:00:47 | 012,867,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll
MOD - [2010-11-11 18:52:55 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll
MOD - [2010-11-11 18:52:55 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll
MOD - [2010-10-27 06:40:22 | 001,293,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll
MOD - [2009-07-14 03:16:19 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll
MOD - [2009-07-14 03:16:17 | 001,123,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll
MOD - [2009-07-14 03:16:17 | 000,627,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll
MOD - [2009-07-14 03:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll
MOD - [2009-07-14 03:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll
MOD - [2009-07-14 03:16:15 | 000,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll
MOD - [2009-07-14 03:16:15 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll
MOD - [2009-07-14 03:16:14 | 001,668,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll
MOD - [2009-07-14 03:16:14 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll
MOD - [2009-07-14 03:16:14 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll
MOD - [2009-07-14 03:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll
MOD - [2009-07-14 03:16:13 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll
MOD - [2009-07-14 03:16:13 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samcli.dll
MOD - [2009-07-14 03:16:12 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll
MOD - [2009-07-14 03:16:12 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll
MOD - [2009-07-14 03:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll
MOD - [2009-07-14 03:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll
MOD - [2009-07-14 03:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll
MOD - [2009-07-14 03:16:03 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netutils.dll
MOD - [2009-07-14 03:15:50 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll
MOD - [2009-07-14 03:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll
MOD - [2009-07-14 03:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dwmapi.dll
MOD - [2009-07-14 03:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll
MOD - [2009-07-14 03:15:07 | 000,486,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll
MOD - [2009-07-14 03:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll
MOD - [2009-07-14 03:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll
MOD - [2009-07-14 03:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll
MOD - [2009-07-14 03:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll
MOD - [2009-07-14 03:14:53 | 000,640,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll
MOD - [2009-07-14 03:14:53 | 000,292,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll
MOD - [2009-07-14 03:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx
MOD - [2009-07-14 03:14:08 | 000,319,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv
MOD - [2009-07-14 03:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll
MOD - [2009-07-14 03:11:24 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll
MOD - [2009-07-14 03:11:23 | 000,836,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll
MOD - [2009-07-14 03:11:23 | 000,662,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll
MOD - [2009-07-14 03:11:23 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll
MOD - [2009-07-14 03:11:23 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll
MOD - [2009-07-14 03:11:21 | 000,310,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll
MOD - [2009-07-14 03:11:21 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2011-05-25 05:03:38 | 000,204,288 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:[b]64bit:[/b] - [2010-11-11 23:36:38 | 000,282,616 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe -- (NisSrv)
SRV:[b]64bit:[/b] - [2010-11-11 23:36:38 | 000,012,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2011-06-14 18:05:00 | 004,661,552 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWow64\GameMon.des -- (npggsvc)
SRV - [2011-06-10 01:22:18 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
SRV - [2011-06-09 09:42:51 | 000,008,192 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\srvany.exe -- (KMService)
SRV - [2011-06-06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011-03-02 03:29:58 | 000,130,976 | ---- | M] (Futuremark Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe -- (Futuremark SystemInfo Service)
SRV - [2010-03-18 22:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010-02-19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009-07-17 02:04:16 | 000,316,664 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2008-11-18 22:15:30 | 000,307,200 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2011-06-09 08:55:52 | 000,254,528 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:[b]64bit:[/b] - [2011-06-09 08:06:41 | 000,868,848 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:[b]64bit:[/b] - [2011-05-25 06:26:56 | 009,359,872 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:[b]64bit:[/b] - [2011-05-25 04:25:42 | 000,309,760 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:[b]64bit:[/b] - [2011-03-30 20:46:44 | 000,114,704 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:[b]64bit:[/b] - [2010-10-25 06:25:38 | 000,072,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:[b]64bit:[/b] - [2010-03-05 03:26:58 | 000,349,416 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvmf6264.sys -- (NVNET)
DRV:[b]64bit:[/b] - [2009-10-16 15:44:56 | 001,309,696 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\P17.sys -- (P17)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-06-10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:[b]64bit:[/b] - [2009-06-10 22:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009-06-10 19:21:58 | 001,422,080 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AVerA706_x64.sys -- (AVerA706_x64)
DRV:[b]64bit:[/b] - [2005-03-29 10:30:38 | 000,008,192 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
 
 
 
 
 
IE - HKU\S-1-5-21-3370169801-2931475050-443466723-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.qooqlle.com/
IE - HKU\S-1-5-21-3370169801-2931475050-443466723-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.selectedEngine: "qooqlle"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.pl/"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {888d99e7-e8b5-46a3-851e-1ec45da1e644}:4.0.0
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2
FF - prefs.js..extensions.enabledItems: cssreloader@kenneth.io:1.0.2
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20100408.6
FF - prefs.js..network.proxy.backup.ftp: "127.0.0.1"
FF - prefs.js..network.proxy.backup.ftp_port: 9666
FF - prefs.js..network.proxy.backup.gopher: "127.0.0.1"
FF - prefs.js..network.proxy.backup.gopher_port: 9666
FF - prefs.js..network.proxy.backup.socks: "127.0.0.1"
FF - prefs.js..network.proxy.backup.socks_port: 9666
FF - prefs.js..network.proxy.backup.ssl: "127.0.0.1"
FF - prefs.js..network.proxy.backup.ssl_port: 9666
FF - prefs.js..network.proxy.ftp: "127.0.0.1"
FF - prefs.js..network.proxy.ftp_port: 9666
FF - prefs.js..network.proxy.gopher: "127.0.0.1"
FF - prefs.js..network.proxy.gopher_port: 9666
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 9666
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.socks: "127.0.0.1"
FF - prefs.js..network.proxy.socks_port: 9666
FF - prefs.js..network.proxy.ssl: "127.0.0.1"
FF - prefs.js..network.proxy.ssl_port: 9666
FF - prefs.js..network.proxy.type: 0
 
FF - HKLM\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011-06-24 11:29:55 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011-06-26 04:17:07 | 000,000,000 | ---D | M]
 
[2011-06-09 07:18:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sobi\AppData\Roaming\mozilla\Extensions
[2011-06-22 01:58:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sobi\AppData\Roaming\mozilla\Firefox\Profiles\ia77c66s.default\extensions
[2011-06-22 01:58:19 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Sobi\AppData\Roaming\mozilla\Firefox\Profiles\ia77c66s.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011-07-02 13:11:07 | 000,001,860 | ---- | M] () -- C:\Users\Sobi\AppData\Roaming\Mozilla\Firefox\Profiles\ia77c66s.default\searchplugins\search.xml
[2011-06-26 04:17:13 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2011-06-26 04:17:13 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
File not found (No name found) -- 
[2011-06-24 11:29:55 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011-06-26 04:17:00 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2011-03-22 20:38:12 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll
[2011-06-24 11:29:51 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml
[2011-06-24 11:29:51 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml
[2011-06-24 11:29:51 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml
[2011-06-24 11:29:51 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml
[2011-06-24 11:29:51 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml
[2011-06-24 11:29:51 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} -  File not found
O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:[b]64bit:[/b] - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [AdobeCS5.5ServiceManager]  File not found
O4 - HKLM..\Run: [CTSysVol]  File not found
O4 - HKLM..\Run: [P17RunE] C:\Windows\SysWow64\P17RunE.dll (Creative Technology Ltd.)
O4 - HKLM..\Run: [Readar_sl] C:\Users\Sobi\AppData\Roaming\Readar_sl.exe (Created with WinAutomation (http://www.WinAutomation.com))
O4 - HKLM..\Run: [StartCCC] F:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [TunesHelper] C:\ProgramData\TunesHelper.exe ()
O4 - HKLM..\Run: [WinampAgent] F:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3370169801-2931475050-443466723-1000..\Run: [DAEMON Tools Lite] F:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-3370169801-2931475050-443466723-1000..\Run: [Gadu-Gadu 10] F:\Program Files (x86)\Gadu-Gadu 10\gg.exe (GG Network S.A.)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin]  File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin]  File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab (Creative Software AutoUpdate Support Package 2)
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareupdate/ocx/15117/CTPID.cab (Creative Software AutoUpdate Support Package)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008-04-23 18:40:30 | 000,000,000 | ---- | M] () - D:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
NetSvcs:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
 
 
SafeBootMin:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] Base - Driver Group
SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group
SafeBootMin:[b]64bit:[/b] File system - Driver Group
SafeBootMin:[b]64bit:[/b] Filter - Driver Group
SafeBootMin:[b]64bit:[/b] HelpSvc - Service
SafeBootMin:[b]64bit:[/b] MsMpSvc - C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group
SafeBootMin:[b]64bit:[/b] sacsvr - Service
SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootMin:[b]64bit:[/b] vmms - Service
SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
SafeBootNet:[b]64bit:[/b] AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] Base - Driver Group
SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group
SafeBootNet:[b]64bit:[/b] File system - Driver Group
SafeBootNet:[b]64bit:[/b] Filter - Driver Group
SafeBootNet:[b]64bit:[/b] HelpSvc - Service
SafeBootNet:[b]64bit:[/b] Messenger - Service
SafeBootNet:[b]64bit:[/b] MsMpSvc - C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group
SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group
SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group
SafeBootNet:[b]64bit:[/b] Network - Driver Group
SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group
SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group
SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group
SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group
SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group
SafeBootNet:[b]64bit:[/b] rdsessmgr - Service
SafeBootNet:[b]64bit:[/b] sacsvr - Service
SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group
SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group
SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group
SafeBootNet:[b]64bit:[/b] TDI - Driver Group
SafeBootNet:[b]64bit:[/b] vmms - Service
SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver
SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
 
[color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color]
 
[2011-07-01 23:43:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow x64
[2011-07-01 23:43:08 | 000,000,000 | ---D | C] -- C:\Program Files\ffdshow
[2011-07-01 23:42:06 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\URUSoft
[2011-07-01 23:42:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\URUSoft
[2011-07-01 23:39:11 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VobSub
[2011-07-01 23:39:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VobSub
[2011-07-01 23:39:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Gabest
[2011-07-01 21:16:02 | 000,000,000 | ---D | C] -- C:\ProgramData\RedGiant
[2011-07-01 21:15:44 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Local\Downloaded Installations
[2011-07-01 20:32:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trapcode Shine
[2011-07-01 20:30:08 | 000,090,112 | ---- | C] (MindVision Software) -- C:\Windows\unvise32.exe
[2011-07-01 20:26:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Boris Fx, Inc
[2011-07-01 20:25:36 | 000,000,000 | ---D | C] -- C:\Windows\Downloaded Installations
[2011-07-01 20:20:52 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2011-07-01 20:17:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
[2011-07-01 20:17:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Story
[2011-07-01 20:16:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2011-07-01 20:15:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR
[2011-06-30 16:53:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Theorica Divx ;-) Codecs
[2011-06-30 16:52:59 | 000,311,296 | RHS- | C] (Created with WinAutomation (http://www.WinAutomation.com)) -- C:\Users\Sobi\AppData\Roaming\Readar_sl.exe
[2011-06-30 00:47:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
[2011-06-30 00:47:50 | 000,839,680 | ---- | C] (http://www.mp3dev.org/) -- C:\Windows\SysWow64\lameACM.acm
[2011-06-30 00:47:50 | 000,237,568 | ---- | C] (www.helixcommunity.org) -- C:\Windows\SysWow64\yv12vfw.dll
[2011-06-30 00:47:50 | 000,151,552 | ---- | C] (fccHandler) -- C:\Windows\SysWow64\ac3acm.acm
[2011-06-30 00:47:50 | 000,121,344 | ---- | C] ( ) -- C:\Windows\SysWow64\lagarith.dll
[2011-06-30 00:47:49 | 000,630,784 | ---- | C] (On2.com) -- C:\Windows\SysWow64\vp7vfw.dll
[2011-06-27 21:42:38 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Local\WinAVI
[2011-06-27 21:42:37 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinAVI Video Converter
[2011-06-27 21:40:29 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\WinAVI
[2011-06-27 21:39:56 | 000,000,000 | ---D | C] -- C:\ProgramData\DVD Shrink
[2011-06-27 21:39:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVD Shrink
[2011-06-27 12:53:28 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat
[2011-06-27 12:53:28 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat
[2011-06-26 04:17:27 | 000,000,000 | ---D | C] -- C:\Windows\Sun
[2011-06-26 04:17:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2011-06-26 04:17:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2011-06-26 04:16:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2011-06-24 14:12:01 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\Day 1 Studios
[2011-06-24 14:11:55 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Local\SKIDROW
[2011-06-24 13:57:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WB Games
[2011-06-22 18:43:47 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
[2011-06-22 18:43:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD APP
[2011-06-22 18:43:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
[2011-06-20 23:36:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImTOO
[2011-06-20 23:34:39 | 000,000,000 | ---D | C] -- C:\ProgramData\ImTOO
[2011-06-20 23:06:20 | 000,000,000 | ---D | C] -- C:\Users\Sobi\dwhelper
[2011-06-18 23:49:04 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1986-12.com.adobe
[2011-06-18 22:00:22 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallJammer Registry
[2011-06-18 22:00:17 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ButtonBeats.com Virtual Piano
[2011-06-17 23:29:08 | 004,661,552 | ---- | C] (INCA Internet Co., Ltd.) -- C:\Windows\SysWow64\GameMon.des
[2011-06-17 23:28:09 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\INCA Shared
[2011-06-17 23:15:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DragonBall Online
[2011-06-17 18:50:08 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\BitCometLite
[2011-06-16 19:36:07 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\ImTOO
[2011-06-16 15:35:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2011-06-16 15:35:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2011-06-14 17:28:09 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\Duke Nukem Forever
[2011-06-12 23:43:44 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Local\ALI213
[2011-06-12 23:39:01 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\directx
[2011-06-12 19:42:36 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Local\Adobe
[2011-06-12 19:41:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2011-06-12 18:18:38 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\vlc
[2011-06-12 18:18:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2011-06-11 01:59:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Steam
[2011-06-11 01:59:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
[2011-06-11 01:51:59 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Local\ElevatedDiagnostics
[2011-06-11 01:50:42 | 018,731,656 | ---- | C] (Ubisoft Entertainment) -- C:\Windows\SysNative\Dunia.dll
[2011-06-11 01:16:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razor 1911
[2011-06-10 21:49:29 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2011-06-10 21:45:56 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartCam
[2011-06-10 21:45:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmartCam
[2011-06-10 07:05:06 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\3DMark 11
[2011-06-10 07:04:57 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Local\IsolatedStorage
[2011-06-10 07:04:55 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Local\Futuremark_Corporation
[2011-06-10 06:56:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2011-06-10 06:56:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight
[2011-06-10 06:53:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Futuremark
[2011-06-10 06:49:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Futuremark
[2011-06-10 06:42:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Ubisoft
[2011-06-10 04:25:54 | 000,000,000 | ---D | C] -- C:\USB
[2011-06-10 03:46:02 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\Media Player Classic
[2011-06-10 02:10:35 | 000,000,000 | ---D | C] -- C:\ProgramData\RDRM
[2011-06-10 02:10:34 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\ipla
[2011-06-10 02:10:34 | 000,000,000 | ---D | C] -- C:\ProgramData\ipla
[2011-06-10 02:10:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ipla
[2011-06-10 02:10:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ipla
[2011-06-10 01:23:06 | 000,000,000 | ---D | C] -- C:\Program Files\Creative
[2011-06-10 01:23:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Creative
[2011-06-10 01:22:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Creative Labs Shared
[2011-06-10 01:14:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2011-06-09 22:16:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ATI Technologies
[2011-06-09 22:14:55 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ATI Technologies
[2011-06-09 22:13:45 | 000,058,880 | ---- | C] (AMD) -- C:\Windows\SysNative\coinst.dll
[2011-06-09 22:12:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies
[2011-06-09 22:12:57 | 000,000,000 | ---D | C] -- C:\Program Files\ATI
[2011-06-09 22:11:33 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2011-06-09 22:09:32 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2011-06-09 11:26:11 | 000,000,000 | -HSD | C] -- C:\ProgramData\DSS
[2011-06-09 11:26:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Codemasters
[2011-06-09 11:23:14 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\xlive
[2011-06-09 11:23:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
[2011-06-09 11:23:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
[2011-06-09 11:18:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blue Ripple Sound
[2011-06-09 11:18:09 | 001,417,216 | ---- | C] (Blue Ripple Sound Limited) -- C:\Windows\SysWow64\rapture3d_oal.dll
[2011-06-09 11:18:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BRS
[2011-06-09 11:18:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenAL
[2011-06-09 11:11:15 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2011-06-09 10:57:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Creative Labs
[2011-06-09 10:56:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\jv16 PowerTools
[2011-06-09 10:55:05 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Driver Cleaner 3
[2011-06-09 10:55:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Cleaner 3
[2011-06-09 10:54:54 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\WinRAR
[2011-06-09 10:34:12 | 002,873,820 | ---- | C] (Creative) -- C:\Windows\SysWow64\Sens_oal.dll
[2011-06-09 10:24:11 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Data
[2011-06-09 10:24:11 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Data
[2011-06-09 10:06:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Creative
[2011-06-09 10:01:44 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2011-06-09 10:01:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2011-06-09 09:40:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
[2011-06-09 09:40:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2011-06-09 09:40:04 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2011-06-09 09:39:33 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Synchronization Services
[2011-06-09 09:39:10 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2011-06-09 09:39:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2011-06-09 09:39:10 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Sync Framework
[2011-06-09 09:39:10 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2011-06-09 09:38:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 8
[2011-06-09 09:37:31 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Analysis Services
[2011-06-09 09:37:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Analysis Services
[2011-06-09 09:37:05 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Local\Microsoft Help
[2011-06-09 09:37:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2011-06-09 09:36:57 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2011-06-09 09:36:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2011-06-09 09:36:44 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2011-06-09 09:20:51 | 000,000,000 | -H-D | C] -- C:\Users\Sobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup (Disabled by Starter)
[2011-06-09 09:01:01 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\XPSViewer
[2011-06-09 09:01:01 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\pl-PL
[2011-06-09 09:00:19 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\pl
[2011-06-09 09:00:16 | 000,000,000 | ---D | C] -- C:\Windows\pl-PL
[2011-06-09 09:00:14 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\pl-PL
[2011-06-09 08:59:56 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\pl
[2011-06-09 08:56:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
[2011-06-09 08:55:52 | 000,254,528 | ---- | C] (DT Soft Ltd) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys
[2011-06-09 08:51:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Security Client
[2011-06-09 08:51:21 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Security Client
[2011-06-09 08:15:00 | 000,003,584 | ---- | C] (SCM Microsystems, Inc.) -- C:\Windows\SysNative\drivers\pl-PL\pscr.sys.mui
[2011-06-09 08:14:42 | 000,010,752 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\pl-PL\BrSerId.sys.mui
[2011-06-09 08:14:42 | 000,010,752 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\pl-PL\BrSerIb.sys.mui
[2011-06-09 08:14:42 | 000,002,560 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\pl-PL\BrParwdm.sys.mui
[2011-06-09 07:59:45 | 000,868,848 | ---- | C] (Duplex Secure Ltd.) -- C:\Windows\SysNative\drivers\sptd.sys
[2011-06-09 07:59:36 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\DAEMON Tools Lite
[2011-06-09 07:59:22 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2011-06-09 07:51:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Gadu-Gadu 10
[2011-06-09 07:51:17 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\Gadu-Gadu 10
[2011-06-09 07:45:48 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2011-06-09 07:36:49 | 001,908,736 | ---- | C] (Creative) -- C:\Windows\SysNative\Sens_oal.dll
[2011-06-09 07:36:49 | 000,466,456 | ---- | C] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2011-06-09 07:36:49 | 000,444,952 | ---- | C] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2011-06-09 07:31:46 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\Macromedia
[2011-06-09 07:31:46 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\Adobe
[2011-06-09 07:31:36 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
[2011-06-09 07:26:28 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Creative
[2011-06-09 07:26:28 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\Creative
[2011-06-09 07:25:30 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\ATI
[2011-06-09 07:25:30 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Local\ATI
[2011-06-09 07:25:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Creative
[2011-06-09 07:18:44 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\Mozilla
[2011-06-09 07:18:44 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Local\Mozilla
[2011-06-09 07:12:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
[2011-06-09 07:12:51 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Detektor Winampa
[2011-06-09 07:12:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PX Storage Engine
[2011-06-09 07:12:45 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\Winamp
[2011-06-09 07:12:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2011-06-09 07:12:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\K-Lite Codec Pack
[2011-06-09 07:09:37 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Creative Installation Information
[2011-06-09 07:08:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
[2011-06-09 07:07:06 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2011-06-09 07:02:30 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2011-06-09 06:55:21 | 000,000,000 | R--D | C] -- C:\Users\Sobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2011-06-09 06:55:21 | 000,000,000 | R--D | C] -- C:\Users\Sobi\Searches
[2011-06-09 06:55:21 | 000,000,000 | R--D | C] -- C:\Users\Sobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2011-06-09 06:55:21 | 000,000,000 | -H-D | C] -- C:\Users\Sobi\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2011-06-09 06:55:11 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\Identities
[2011-06-09 06:55:03 | 000,000,000 | R--D | C] -- C:\Users\Sobi\Contacts
[2011-06-09 06:54:58 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Local\VirtualStore
[2011-06-09 06:54:42 | 000,000,000 | --SD | C] -- C:\Users\Sobi\AppData\Roaming\Microsoft
[2011-06-09 06:54:42 | 000,000,000 | R--D | C] -- C:\Users\Sobi\Videos
[2011-06-09 06:54:42 | 000,000,000 | R--D | C] -- C:\Users\Sobi\Saved Games
[2011-06-09 06:54:42 | 000,000,000 | R--D | C] -- C:\Users\Sobi\Pictures
[2011-06-09 06:54:42 | 000,000,000 | R--D | C] -- C:\Users\Sobi\Music
[2011-06-09 06:54:42 | 000,000,000 | R--D | C] -- C:\Users\Sobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2011-06-09 06:54:42 | 000,000,000 | R--D | C] -- C:\Users\Sobi\Links
[2011-06-09 06:54:42 | 000,000,000 | R--D | C] -- C:\Users\Sobi\Favorites
[2011-06-09 06:54:42 | 000,000,000 | R--D | C] -- C:\Users\Sobi\Downloads
[2011-06-09 06:54:42 | 000,000,000 | R--D | C] -- C:\Users\Sobi\Documents
[2011-06-09 06:54:42 | 000,000,000 | R--D | C] -- C:\Users\Sobi\Desktop
[2011-06-09 06:54:42 | 000,000,000 | R--D | C] -- C:\Users\Sobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2011-06-09 06:54:42 | 000,000,000 | -HSD | C] -- C:\Users\Sobi\AppData\Local\Temporary Internet Files
[2011-06-09 06:54:42 | 000,000,000 | -HSD | C] -- C:\Users\Sobi\Templates
[2011-06-09 06:54:42 | 000,000,000 | -HSD | C] -- C:\Users\Sobi\Start Menu
[2011-06-09 06:54:42 | 000,000,000 | -HSD | C] -- C:\Users\Sobi\SendTo
[2011-06-09 06:54:42 | 000,000,000 | -HSD | C] -- C:\Users\Sobi\Recent
[2011-06-09 06:54:42 | 000,000,000 | -HSD | C] -- C:\Users\Sobi\PrintHood
[2011-06-09 06:54:42 | 000,000,000 | -HSD | C] -- C:\Users\Sobi\NetHood
[2011-06-09 06:54:42 | 000,000,000 | -HSD | C] -- C:\Users\Sobi\Documents\My Videos
[2011-06-09 06:54:42 | 000,000,000 | -HSD | C] -- C:\Users\Sobi\Documents\My Pictures
[2011-06-09 06:54:42 | 000,000,000 | -HSD | C] -- C:\Users\Sobi\Documents\My Music
[2011-06-09 06:54:42 | 000,000,000 | -HSD | C] -- C:\Users\Sobi\My Documents
[2011-06-09 06:54:42 | 000,000,000 | -HSD | C] -- C:\Users\Sobi\Local Settings
[2011-06-09 06:54:42 | 000,000,000 | -HSD | C] -- C:\Users\Sobi\AppData\Local\History
[2011-06-09 06:54:42 | 000,000,000 | -HSD | C] -- C:\Users\Sobi\Cookies
[2011-06-09 06:54:42 | 000,000,000 | -HSD | C] -- C:\Users\Sobi\Application Data
[2011-06-09 06:54:42 | 000,000,000 | -HSD | C] -- C:\Users\Sobi\AppData\Local\Application Data
[2011-06-09 06:54:42 | 000,000,000 | -H-D | C] -- C:\Users\Sobi\AppData
[2011-06-09 06:54:42 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Local\Temp
[2011-06-09 06:54:42 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Local\Microsoft
[2011-06-09 06:54:42 | 000,000,000 | ---D | C] -- C:\Users\Sobi\AppData\Roaming\Media Center Programs
[2011-06-09 06:54:34 | 000,000,000 | -HSD | C] -- C:\Recovery
[2011-06-09 06:49:56 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2011-06-09 06:47:19 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2011-06-09 06:47:19 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2011-06-08 21:12:50 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\Witcher 2
[2011-06-08 21:12:50 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\Ulead VideoStudio
[2011-06-08 21:12:49 | 000,000,000 | --SD | C] -- C:\Users\Sobi\Documents\My Playstation Themes
[2011-06-08 21:12:49 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\Sports Interactive
[2011-06-08 21:12:49 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\Snagit
[2011-06-08 21:12:49 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\Regensoft
[2011-06-08 21:12:49 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\Red Kawa
[2011-06-08 21:12:49 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\My PSP Files
[2011-06-08 21:12:45 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\My Games
[2011-06-08 21:12:43 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\Moje zeskanowane obrazy
[2011-06-08 21:12:43 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\Moje pokazy programu Snapfire
[2011-06-08 21:12:43 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\ImTOO Software Studio
[2011-06-08 21:12:43 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\HanbitOn
[2011-06-08 21:12:43 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\gegl-0.0
[2011-06-08 21:12:43 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\Games for Windows - LIVE Demos
[2011-06-08 21:12:43 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\FIFA 11
[2011-06-08 21:12:43 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\Dragonica
[2011-06-08 21:12:43 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\Darkspore
[2011-06-08 21:12:43 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\Criterion Games
[2011-06-08 21:12:43 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\ConvertXToDVD
[2011-06-08 21:12:42 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\BioWare
[2011-06-08 21:12:41 | 000,000,000 | R--D | C] -- C:\Users\Sobi\Documents\Adlm
[2011-06-08 21:12:41 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\AVerTV
[2011-06-08 21:12:41 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\Adobe
[2011-06-08 21:12:41 | 000,000,000 | ---D | C] -- C:\Users\Sobi\Documents\3dsmax
[2011-05-25 05:04:10 | 000,485,376 | ---- | C] (AMD) -- C:\Windows\SysNative\atieclxx.exe
[2011-05-25 05:03:38 | 000,204,288 | ---- | C] (AMD) -- C:\Windows\SysNative\atiesrxx.exe
[2011-05-25 05:02:30 | 000,120,320 | ---- | C] (AMD) -- C:\Windows\SysNative\atitmm64.dll
[2011-05-25 05:01:54 | 000,016,384 | ---- | C] (AMD) -- C:\Windows\SysNative\atimuixx.dll
[2011-05-05 10:27:58 | 000,051,712 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 60 Days ==========[/color]
 
[2011-07-02 13:22:08 | 001,835,008 | -HS- | M] () -- C:\Users\Sobi\NTUSER.DAT
[2011-07-02 13:17:40 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011-07-02 13:17:40 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011-07-02 13:10:45 | 004,975,120 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011-07-02 13:10:24 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2011-07-02 13:09:48 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011-07-02 13:09:39 | 3220,086,784 | -HS- | M] () -- C:\hiberfil.sys
[2011-07-02 00:48:08 | 003,252,717 | -H-- | M] () -- C:\Users\Sobi\AppData\Local\IconCache.db
[2011-07-01 23:42:06 | 000,001,039 | ---- | M] () -- C:\Users\Sobi\Desktop\Subtitle Workshop.lnk
[2011-07-01 23:42:06 | 000,001,039 | ---- | M] () -- C:\Users\Sobi\Application Data\Microsoft\Internet Explorer\Quick Launch\Subtitle Workshop.lnk
[2011-07-01 23:33:18 | 001,655,764 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011-07-01 23:33:18 | 000,735,424 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2011-07-01 23:33:18 | 000,650,000 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011-07-01 23:33:18 | 000,152,996 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2011-07-01 23:33:18 | 000,120,030 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011-07-01 20:33:17 | 000,108,824 | ---- | M] () -- C:\Users\Sobi\AppData\Local\GDIPFONTCACHEV1.DAT
[2011-07-01 20:33:10 | 000,000,988 | ---- | M] () -- C:\Users\Sobi\Desktop\Adobe After Effects CS5.5.lnk
[2011-07-01 15:05:50 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2011-06-30 16:52:59 | 008,180,224 | RHS- | M] () -- C:\ProgramData\TunesHelper.exe
[2011-06-30 16:52:57 | 000,311,296 | RHS- | M] (Created with WinAutomation (http://www.WinAutomation.com)) -- C:\Users\Sobi\AppData\Roaming\Readar_sl.exe
[2011-06-27 21:42:37 | 000,000,739 | ---- | M] () -- C:\Users\Sobi\Desktop\WinAVI Video Converter.lnk
[2011-06-27 21:39:50 | 000,000,681 | ---- | M] () -- C:\Users\Sobi\Application Data\Microsoft\Internet Explorer\Quick Launch\DVD Shrink 3.2 PL.lnk
[2011-06-27 00:28:55 | 001,630,254 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011-06-26 04:11:12 | 000,857,332 | ---- | M] () -- C:\Users\Sobi\Zdjęcie0055.jpg
[2011-06-24 13:57:53 | 000,000,955 | ---- | M] () -- C:\Users\Public\Desktop\F.E.A.R. 3.lnk
[2011-06-24 12:50:56 | 000,086,016 | ---- | M] () -- C:\Windows\SysNative\ff_vfw.dll
[2011-06-24 12:49:16 | 000,053,760 | ---- | M] () -- C:\Windows\SysNative\ff_acm.acm
[2011-06-20 23:42:41 | 000,001,034 | ---- | M] () -- C:\Users\Sobi\Application Data\Microsoft\Internet Explorer\Quick Launch\ImTOO Video Converter Ultimate 6.lnk
[2011-06-20 23:42:41 | 000,001,034 | ---- | M] () -- C:\Users\Public\Desktop\ImTOO Video Converter Ultimate 6.lnk
[2011-06-18 22:00:22 | 000,000,808 | ---- | M] () -- C:\Users\Sobi\Desktop\ButtonBeats.com Virtual Piano.lnk
[2011-06-17 23:15:15 | 000,000,517 | ---- | M] () -- C:\Users\Public\Desktop\¤CŔsŻ]Online.lnk
[2011-06-15 20:52:59 | 000,000,832 | ---- | M] () -- C:\Users\Sobi\Desktop\DukeForever.lnk
[2011-06-14 18:05:00 | 004,661,552 | ---- | M] (INCA Internet Co., Ltd.) -- C:\Windows\SysWow64\GameMon.des
[2011-06-12 23:50:41 | 000,001,261 | ---- | M] () -- C:\Users\Sobi\Desktop\Red Faction Armageddon.lnk
[2011-06-12 23:31:12 | 000,000,587 | ---- | M] () -- C:\Windows\win.ini
[2011-06-11 02:27:43 | 000,072,748 | ---- | M] (Jordan Russell) -- C:\Windows\unins000.exe
[2011-06-11 02:27:43 | 000,000,655 | ---- | M] () -- C:\Windows\unins000.dat
[2011-06-10 06:49:02 | 000,000,893 | ---- | M] () -- C:\Users\Public\Desktop\3DMark 11.lnk
[2011-06-10 04:14:26 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2011-06-10 01:33:02 | 000,000,712 | ---- | M] () -- C:\Users\Public\Desktop\Gadu-Gadu 10.lnk
[2011-06-10 01:17:32 | 000,000,159 | RH-- | M] () -- C:\Windows\ctfile.rfc
[2011-06-09 11:18:07 | 000,466,456 | ---- | M] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2011-06-09 11:18:06 | 000,444,952 | ---- | M] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2011-06-09 11:01:43 | 000,000,588 | ---- | M] () -- C:\Windows\SysNative\settingsbkup.sfm
[2011-06-09 11:01:43 | 000,000,588 | ---- | M] () -- C:\Windows\SysNative\settings.sfm
[2011-06-09 10:56:00 | 000,000,690 | ---- | M] () -- C:\Users\Sobi\Desktop\jv16 PowerTools.lnk
[2011-06-09 10:55:05 | 000,000,844 | ---- | M] () -- C:\Users\Sobi\Application Data\Microsoft\Internet Explorer\Quick Launch\Driver Cleaner 3.lnk
[2011-06-09 09:42:51 | 000,008,192 | ---- | M] () -- C:\Windows\SysWow64\srvany.exe
[2011-06-09 08:55:52 | 000,254,528 | ---- | M] (DT Soft Ltd) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys
[2011-06-09 08:55:47 | 000,000,853 | ---- | M] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2011-06-09 08:52:27 | 000,002,154 | ---- | M] () -- C:\Windows\epplauncher.mif
[2011-06-09 08:17:36 | 000,337,158 | ---- | M] () -- C:\Windows\SysNative\perfi015.dat
[2011-06-09 08:17:36 | 000,038,710 | ---- | M] () -- C:\Windows\SysNative\perfd015.dat
[2011-06-09 08:06:41 | 000,868,848 | ---- | M] (Duplex Secure Ltd.) -- C:\Windows\SysNative\drivers\sptd.sys
[2011-06-09 07:24:48 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
[2011-06-09 07:23:13 | 000,524,288 | -HS- | M] () -- C:\Users\Sobi\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2011-06-09 07:23:13 | 000,524,288 | -HS- | M] () -- C:\Users\Sobi\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2011-06-09 07:23:13 | 000,065,536 | -HS- | M] () -- C:\Users\Sobi\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2011-06-09 07:12:56 | 000,000,692 | ---- | M] () -- C:\Users\Sobi\Application Data\Microsoft\Internet Explorer\Quick Launch\Winamp.lnk
[2011-06-09 07:12:21 | 000,001,134 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011-06-09 07:12:06 | 000,001,437 | ---- | M] () -- C:\Users\Sobi\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011-06-09 06:54:42 | 000,000,020 | -HS- | M] () -- C:\Users\Sobi\ntuser.ini
[2011-06-09 06:50:45 | 000,042,045 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2011-06-09 06:50:45 | 000,042,045 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2011-06-08 14:34:58 | 000,000,725 | ---- | M] () -- C:\Users\Sobi\Desktop\EVEREST Ultimate Edition.lnk
[2011-05-25 05:08:34 | 000,166,624 | ---- | M] () -- C:\Windows\SysNative\atiapfxx.blb
[2011-05-25 05:04:10 | 000,485,376 | ---- | M] (AMD) -- C:\Windows\SysNative\atieclxx.exe
[2011-05-25 05:03:38 | 000,204,288 | ---- | M] (AMD) -- C:\Windows\SysNative\atiesrxx.exe
[2011-05-25 05:02:30 | 000,120,320 | ---- | M] (AMD) -- C:\Windows\SysNative\atitmm64.dll
[2011-05-25 05:01:54 | 000,016,384 | ---- | M] (AMD) -- C:\Windows\SysNative\atimuixx.dll
[2011-05-25 04:55:20 | 001,127,552 | ---- | M] () -- C:\Windows\SysNative\atiumd6a.cap
[2011-05-25 04:49:54 | 001,127,552 | ---- | M] () -- C:\Windows\SysWow64\atiumdva.cap
[2011-05-25 04:19:00 | 000,058,880 | ---- | M] (AMD) -- C:\Windows\SysNative\coinst.dll
[2011-05-24 23:44:30 | 000,061,952 | ---- | M] () -- C:\Windows\SysNative\OVDecode64.dll
[2011-05-24 23:44:26 | 000,059,904 | ---- | M] () -- C:\Windows\SysWow64\OVDecode.dll
[2011-05-22 12:25:42 | 000,000,834 | ---- | M] () -- C:\Users\Sobi\Desktop\Szybkie Czyszczenie Dysku.lnk
[2011-05-22 12:25:42 | 000,000,734 | ---- | M] () -- C:\Users\Sobi\Desktop\Odkurzacz.lnk
[2011-05-19 10:13:40 | 000,032,635 | ---- | M] () -- C:\Windows\atiogl.xml
[2011-05-08 23:03:52 | 000,000,845 | ---- | M] () -- C:\Users\Sobi\Desktop\Portal 2.lnk
[2011-05-05 10:27:58 | 000,051,712 | ---- | M] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2011-05-04 13:35:30 | 000,002,002 | ---- | M] () -- C:\Users\Sobi\Documents\.recently-used.xbel
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-07-01 23:43:09 | 000,086,016 | ---- | C] () -- C:\Windows\SysNative\ff_vfw.dll
[2011-07-01 23:43:09 | 000,053,760 | ---- | C] () -- C:\Windows\SysNative\ff_acm.acm
[2011-07-01 23:42:06 | 000,001,039 | ---- | C] () -- C:\Users\Sobi\Application Data\Microsoft\Internet Explorer\Quick Launch\Subtitle Workshop.lnk
[2011-07-01 20:33:10 | 000,000,988 | ---- | C] () -- C:\Users\Sobi\Desktop\Adobe After Effects CS5.5.lnk
[2011-07-01 20:20:58 | 000,000,932 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe After Effects CS5.5.lnk
[2011-07-01 20:20:20 | 000,000,993 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mocha for After Effects CS5.5.lnk
[2011-07-01 20:19:57 | 000,000,756 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS5.1.lnk
[2011-07-01 20:19:41 | 000,000,832 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder CS5.5.lnk
[2011-07-01 20:18:13 | 000,000,819 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS5.5.lnk
[2011-07-01 20:17:59 | 000,001,537 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Pixel Bender Toolkit 2.6.lnk
[2011-07-01 20:16:06 | 000,000,882 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS5.5.lnk
[2011-07-01 20:16:01 | 000,001,551 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS5.5.lnk
[2011-07-01 20:15:23 | 000,000,997 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
[2011-07-01 15:05:50 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2011-06-30 16:52:59 | 008,180,224 | RHS- | C] () -- C:\ProgramData\TunesHelper.exe
[2011-06-30 00:47:54 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2011-06-30 00:47:50 | 000,000,414 | ---- | C] () -- C:\Windows\SysWow64\lame_acm.xml
[2011-06-27 21:39:50 | 000,000,681 | ---- | C] () -- C:\Users\Sobi\Application Data\Microsoft\Internet Explorer\Quick Launch\DVD Shrink 3.2 PL.lnk
[2011-06-26 06:12:28 | 000,857,332 | ---- | C] () -- C:\Users\Sobi\Zdjęcie0055.jpg
[2011-06-24 13:57:53 | 000,000,955 | ---- | C] () -- C:\Users\Public\Desktop\F.E.A.R. 3.lnk
[2011-06-20 23:36:21 | 000,001,034 | ---- | C] () -- C:\Users\Sobi\Application Data\Microsoft\Internet Explorer\Quick Launch\ImTOO Video Converter Ultimate 6.lnk
[2011-06-20 23:36:21 | 000,001,034 | ---- | C] () -- C:\Users\Public\Desktop\ImTOO Video Converter Ultimate 6.lnk
[2011-06-18 22:00:22 | 000,000,808 | ---- | C] () -- C:\Users\Sobi\Desktop\ButtonBeats.com Virtual Piano.lnk
[2011-06-17 23:15:15 | 000,000,517 | ---- | C] () -- C:\Users\Public\Desktop\¤CŔsŻ]Online.lnk
[2011-06-16 15:35:27 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2011-06-15 20:52:59 | 000,000,832 | ---- | C] () -- C:\Users\Sobi\Desktop\DukeForever.lnk
[2011-06-12 23:50:41 | 000,001,261 | ---- | C] () -- C:\Users\Sobi\Desktop\Red Faction Armageddon.lnk
[2011-06-11 02:27:43 | 000,000,655 | ---- | C] () -- C:\Windows\unins000.dat
[2011-06-10 06:49:02 | 000,000,893 | ---- | C] () -- C:\Users\Public\Desktop\3DMark 11.lnk
[2011-06-10 04:14:26 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2011-06-10 01:33:02 | 000,000,712 | ---- | C] () -- C:\Users\Public\Desktop\Gadu-Gadu 10.lnk
[2011-06-10 01:32:33 | 000,000,708 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gadu-Gadu 10.lnk
[2011-06-10 01:17:32 | 000,214,528 | ---- | C] () -- C:\Windows\SysNative\APOMgr64.DLL
[2011-06-10 01:17:32 | 000,166,912 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL
[2011-06-10 01:17:32 | 000,089,088 | ---- | C] () -- C:\Windows\SysNative\CmdRtr64.DLL
[2011-06-10 01:17:32 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL
[2011-06-10 01:17:32 | 000,000,159 | RH-- | C] () -- C:\Windows\ctfile.rfc
[2011-06-09 22:57:14 | 002,167,684 | ---- | C] () -- C:\Windows\SysWow64\CT2MGM.SF2
[2011-06-09 22:46:14 | 000,008,897 | ---- | C] () -- C:\Windows\SysWow64\CTAPO64.cat
[2011-06-09 22:25:03 | 003,252,717 | -H-- | C] () -- C:\Users\Sobi\AppData\Local\IconCache.db
[2011-06-09 22:09:33 | 000,010,084 | ---- | C] () -- C:\Windows\SysNative\drivers\nvphy.bin
[2011-06-09 21:50:38 | 000,029,142 | ---- | C] () -- C:\Windows\SysWow64\ctapo64.cab
[2011-06-09 11:22:54 | 000,001,338 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk
[2011-06-09 11:01:43 | 000,000,588 | ---- | C] () -- C:\Windows\SysNative\settingsbkup.sfm
[2011-06-09 11:01:43 | 000,000,588 | ---- | C] () -- C:\Windows\SysNative\settings.sfm
[2011-06-09 10:56:00 | 000,000,690 | ---- | C] () -- C:\Users\Sobi\Desktop\jv16 PowerTools.lnk
[2011-06-09 10:55:05 | 000,000,844 | ---- | C] () -- C:\Users\Sobi\Application Data\Microsoft\Internet Explorer\Quick Launch\Driver Cleaner 3.lnk
[2011-06-09 10:24:11 | 000,003,348 | ---- | C] () -- C:\Windows\SysWow64\ludap17.ini
[2011-06-09 09:43:10 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\srvany.exe
[2011-06-09 09:04:45 | 000,735,424 | ---- | C] () -- C:\Windows\SysNative\perfh015.dat
[2011-06-09 09:04:45 | 000,337,158 | ---- | C] () -- C:\Windows\SysNative\perfi015.dat
[2011-06-09 09:04:45 | 000,152,996 | ---- | C] () -- C:\Windows\SysNative\perfc015.dat
[2011-06-09 09:04:45 | 000,038,710 | ---- | C] () -- C:\Windows\SysNative\perfd015.dat
[2011-06-09 08:55:47 | 000,000,853 | ---- | C] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2011-06-09 08:52:27 | 000,002,154 | ---- | C] () -- C:\Windows\epplauncher.mif
[2011-06-09 08:51:35 | 001,630,254 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011-06-09 08:51:23 | 000,001,897 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
[2011-06-09 07:50:44 | 000,001,129 | ---- | C] () -- C:\Users\Sobi\Desktop\Corel Paint Shop Pro Photo XI.lnk
[2011-06-09 07:50:44 | 000,001,039 | ---- | C] () -- C:\Users\Sobi\Desktop\Subtitle Workshop.lnk
[2011-06-09 07:50:44 | 000,000,993 | ---- | C] () -- C:\Users\Sobi\Desktop\PS3 Video 9.lnk
[2011-06-09 07:50:44 | 000,000,991 | ---- | C] () -- C:\Users\Sobi\Desktop\Ulead VideoStudio 11.lnk
[2011-06-09 07:50:44 | 000,000,978 | ---- | C] () -- C:\Users\Sobi\Desktop\ImTOO Video Converter Ultimate 6.lnk
[2011-06-09 07:50:44 | 000,000,913 | ---- | C] () -- C:\Users\Sobi\Desktop\Assassins Creed Brotherhood.lnk
[2011-06-09 07:50:44 | 000,000,891 | ---- | C] () -- C:\Users\Sobi\Desktop\ZoomBrowser EX.lnk
[2011-06-09 07:50:44 | 000,000,868 | ---- | C] () -- C:\Users\Sobi\Desktop\A73 Piano Station.lnk
[2011-06-09 07:50:44 | 000,000,851 | ---- | C] () -- C:\Users\Sobi\Desktop\ConvertXtoDVD 4.lnk
[2011-06-09 07:50:44 | 000,000,845 | ---- | C] () -- C:\Users\Sobi\Desktop\Portal 2.lnk
[2011-06-09 07:50:44 | 000,000,838 | ---- | C] () -- C:\Users\Sobi\Desktop\Fifa 11.lnk
[2011-06-09 07:50:44 | 000,000,834 | ---- | C] () -- C:\Users\Sobi\Desktop\Szybkie Czyszczenie Dysku.lnk
[2011-06-09 07:50:44 | 000,000,815 | ---- | C] () -- C:\Users\Sobi\Desktop\ImTOO 3GP Video Converter 3.lnk
[2011-06-09 07:50:44 | 000,000,798 | ---- | C] () -- C:\Users\Sobi\Desktop\AfterFX — skrót.lnk
[2011-06-09 07:50:44 | 000,000,781 | ---- | C] () -- C:\Users\Sobi\Desktop\Nero.lnk
[2011-06-09 07:50:44 | 000,000,774 | ---- | C] () -- C:\Users\Sobi\Desktop\Ashampoo Burning Studio 2010.lnk
[2011-06-09 07:50:44 | 000,000,739 | ---- | C] () -- C:\Users\Sobi\Desktop\WinAVI Video Converter.lnk
[2011-06-09 07:50:44 | 000,000,734 | ---- | C] () -- C:\Users\Sobi\Desktop\Odkurzacz.lnk
[2011-06-09 07:50:44 | 000,000,725 | ---- | C] () -- C:\Users\Sobi\Desktop\EVEREST Ultimate Edition.lnk
[2011-06-09 07:50:44 | 000,000,723 | ---- | C] () -- C:\Users\Sobi\Desktop\FileZilla.lnk
[2011-06-09 07:50:44 | 000,000,718 | ---- | C] () -- C:\Users\Sobi\Desktop\Photoshop CS5.lnk
[2011-06-09 07:50:44 | 000,000,702 | ---- | C] () -- C:\Users\Sobi\Desktop\Advanced Super Balls.lnk
[2011-06-09 07:50:44 | 000,000,692 | ---- | C] () -- C:\Users\Sobi\Desktop\ImgBurn.lnk
[2011-06-09 07:50:44 | 000,000,686 | ---- | C] () -- C:\Users\Sobi\Desktop\Total Commander.lnk
[2011-06-09 07:50:44 | 000,000,679 | ---- | C] () -- C:\Users\Sobi\Desktop\PS3 Media Server.lnk
[2011-06-09 07:50:44 | 000,000,669 | ---- | C] () -- C:\Users\Sobi\Desktop\MP3GainGUI — skrót.lnk
[2011-06-09 07:50:44 | 000,000,660 | ---- | C] () -- C:\Users\Sobi\Desktop\PowerISO.lnk
[2011-06-09 07:50:44 | 000,000,640 | ---- | C] () -- C:\Users\Sobi\Desktop\Winamp.lnk
[2011-06-09 07:50:44 | 000,000,626 | ---- | C] () -- C:\Users\Sobi\Desktop\BitLord.lnk
[2011-06-09 07:50:44 | 000,000,499 | ---- | C] () -- C:\Users\Sobi\Desktop\Core Temp.lnk
[2011-06-09 07:50:44 | 000,000,480 | ---- | C] () -- C:\Users\Sobi\Desktop\SYMFONIA® Finanse i Księgowość premium.lnk
[2011-06-09 07:50:44 | 000,000,480 | ---- | C] () -- C:\Users\Sobi\Desktop\Symfonia Faktura.lnk
[2011-06-09 07:37:16 | 004,174,814 | ---- | C] () -- C:\Windows\SysWow64\CT4MGM.SF2
[2011-06-09 07:37:16 | 004,174,814 | ---- | C] () -- C:\Windows\SysNative\CT4MGM.SF2
[2011-06-09 07:37:16 | 002,167,684 | ---- | C] () -- C:\Windows\SysNative\CT2MGM.SF2
[2011-06-09 07:25:47 | 000,108,824 | ---- | C] () -- C:\Users\Sobi\AppData\Local\GDIPFONTCACHEV1.DAT
[2011-06-09 07:24:48 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2011-06-09 07:12:56 | 000,000,692 | ---- | C] () -- C:\Users\Sobi\Application Data\Microsoft\Internet Explorer\Quick Launch\Winamp.lnk
[2011-06-09 07:12:21 | 000,001,146 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2011-06-09 07:12:21 | 000,001,134 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011-06-09 07:12:06 | 000,001,437 | ---- | C] () -- C:\Users\Sobi\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011-06-09 07:11:13 | 000,007,062 | ---- | C] () -- C:\Windows\SysWow64\audiopid.vxd
[2011-06-09 06:55:26 | 000,001,409 | ---- | C] () -- C:\Users\Sobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2011-06-09 06:55:23 | 000,001,443 | ---- | C] () -- C:\Users\Sobi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2011-06-09 06:54:42 | 001,835,008 | -HS- | C] () -- C:\Users\Sobi\NTUSER.DAT
[2011-06-09 06:54:42 | 000,524,288 | -HS- | C] () -- C:\Users\Sobi\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2011-06-09 06:54:42 | 000,524,288 | -HS- | C] () -- C:\Users\Sobi\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2011-06-09 06:54:42 | 000,065,536 | -HS- | C] () -- C:\Users\Sobi\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2011-06-09 06:54:42 | 000,000,290 | ---- | C] () -- C:\Users\Sobi\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2011-06-09 06:54:42 | 000,000,272 | ---- | C] () -- C:\Users\Sobi\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2011-06-09 06:54:42 | 000,000,020 | -HS- | C] () -- C:\Users\Sobi\ntuser.ini
[2011-06-09 06:50:22 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2011-06-09 06:50:14 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2011-06-09 06:47:19 | 3220,086,784 | -HS- | C] () -- C:\hiberfil.sys
[2011-06-08 21:14:52 | 001,113,500 | ---- | C] () -- C:\Users\Sobi\Documents\Zdjęcie.pdf
[2011-06-08 21:14:52 | 000,118,536 | ---- | C] () -- C:\Users\Sobi\Documents\ikona.pspimage
[2011-06-08 21:14:52 | 000,077,554 | ---- | C] () -- C:\Users\Sobi\Documents\ikona.bmp
[2011-06-08 21:14:52 | 000,075,102 | ---- | C] () -- C:\Users\Sobi\Documents\Obrazek3.bmp
[2011-06-08 21:14:52 | 000,029,226 | ---- | C] () -- C:\Users\Sobi\Documents\fotka.jpg
[2011-06-08 21:14:52 | 000,020,096 | ---- | C] () -- C:\Users\Sobi\Documents\Ramirez.png
[2011-06-08 21:14:52 | 000,002,002 | ---- | C] () -- C:\Users\Sobi\Documents\.recently-used.xbel
[2011-06-08 21:14:52 | 000,000,141 | ---- | C] () -- C:\Users\Sobi\Documents\.jupload.properties
[2011-06-08 21:13:38 | 014,145,172 | ---- | C] () -- C:\Users\Sobi\Documents\zaproszenie.pdf
[2011-06-08 21:13:38 | 014,038,405 | ---- | C] () -- C:\Users\Sobi\Documents\zaprojekt4.pdf
[2011-06-08 21:13:38 | 009,494,155 | ---- | C] () -- C:\Users\Sobi\Documents\zaprojekt2.pdf
[2011-06-08 21:13:38 | 000,000,000 | ---- | C] () -- C:\Users\Sobi\Documents\zaprojekt2(1).pdf
[2011-06-08 21:13:37 | 016,880,681 | ---- | C] () -- C:\Users\Sobi\Documents\Podział wpływów.jpg
[2011-06-08 21:13:37 | 005,275,148 | ---- | C] () -- C:\Users\Sobi\Documents\Stroneczka prawda.rar
[2011-06-08 21:13:37 | 004,823,086 | ---- | C] () -- C:\Users\Sobi\Documents\Pol.rar
[2011-06-08 21:13:37 | 002,002,403 | ---- | C] () -- C:\Users\Sobi\Documents\sobi3.jpg
[2011-06-08 21:13:37 | 001,898,710 | ---- | C] () -- C:\Users\Sobi\Documents\sobi1.jpg
[2011-06-08 21:13:37 | 001,857,069 | ---- | C] () -- C:\Users\Sobi\Documents\sobi2.jpg
[2011-06-08 21:13:37 | 001,814,971 | ---- | C] () -- C:\Users\Sobi\Documents\sobi4.jpg
[2011-06-08 21:13:37 | 001,805,429 | ---- | C] () -- C:\Users\Sobi\Documents\teraz3.jpg
[2011-06-08 21:13:37 | 001,795,201 | ---- | C] () -- C:\Users\Sobi\Documents\teraz1.jpg
[2011-06-08 21:13:37 | 001,475,513 | ---- | C] () -- C:\Users\Sobi\Documents\teraz2.jpg
[2011-06-08 21:13:37 | 001,275,958 | ---- | C] () -- C:\Users\Sobi\Documents\Podpis.bmp
[2011-06-08 21:13:37 | 000,499,385 | ---- | C] () -- C:\Users\Sobi\Documents\streetpower03-1280x1024.jpg
[2011-06-08 21:13:37 | 000,318,160 | ---- | C] () -- C:\Users\Sobi\Documents\nnn.cbs
[2011-06-08 21:13:37 | 000,001,649 | ---- | C] () -- C:\Users\Sobi\Documents\Nowy folder.rar
[2011-06-08 21:13:37 | 000,001,553 | ---- | C] () -- C:\Users\Sobi\Documents\skrypty.rar
[2011-06-08 21:13:37 | 000,000,860 | ---- | C] () -- C:\Users\Sobi\Documents\quiz.html
[2011-06-08 21:13:37 | 000,000,000 | ---- | C] () -- C:\Users\Sobi\Documents\Pulpit.rar
[2011-06-08 21:13:36 | 018,114,936 | ---- | C] () -- C:\Users\Sobi\Documents\File0015.PDF
[2011-06-08 21:13:36 | 005,969,138 | ---- | C] () -- C:\Users\Sobi\Documents\Documents.rar
[2011-06-08 21:13:36 | 003,454,770 | ---- | C] () -- C:\Users\Sobi\Documents\matma z projektu.pdf
[2011-06-08 21:13:36 | 002,254,810 | ---- | C] () -- C:\Users\Sobi\Documents\img038.jpg
[2011-06-08 21:13:36 | 002,211,075 | ---- | C] () -- C:\Users\Sobi\Documents\img039.jpg
[2011-06-08 21:13:36 | 002,114,977 | ---- | C] () -- C:\Users\Sobi\Documents\DSC04594.JPG
[2011-06-08 21:13:36 | 001,999,401 | ---- | C] () -- C:\Users\Sobi\Documents\DSC04595.JPG
[2011-06-08 21:13:36 | 001,862,782 | ---- | C] () -- C:\Users\Sobi\Documents\DSC04596.JPG
[2011-06-08 21:13:36 | 001,516,215 | ---- | C] () -- C:\Users\Sobi\Documents\matma.pdf
[2011-06-08 21:13:36 | 000,046,224 | ---- | C] () -- C:\Users\Sobi\Documents\JukeBox1.nrj
[2011-06-08 21:13:36 | 000,027,648 | ---- | C] () -- C:\Users\Sobi\Documents\IMGP9821.jpg
[2011-06-08 21:13:36 | 000,013,312 | ---- | C] () -- C:\Users\Sobi\Documents\IMGP9825.jpg
[2011-06-08 21:13:36 | 000,002,928 | ---- | C] () -- C:\Users\Sobi\Documents\ggg.m3u
[2011-06-08 21:13:36 | 000,001,072 | ---- | C] () -- C:\Users\Sobi\Documents\IMGP9823.jpg
[2011-06-08 21:13:36 | 000,000,916 | ---- | C] () -- C:\Users\Sobi\Documents\kwadraty.html
[2011-06-08 21:13:36 | 000,000,777 | ---- | C] () -- C:\Users\Sobi\Documents\liczenie.html
[2011-06-08 21:13:36 | 000,000,747 | ---- | C] () -- C:\Users\Sobi\Documents\dzialania.html
[2011-06-08 21:13:36 | 000,000,000 | ---- | C] () -- C:\Users\Sobi\Documents\IMGP9825(1).jpg
[2011-06-08 21:13:35 | 001,002,467 | ---- | C] () -- C:\Users\Sobi\Documents\17022011623.jpg
[2011-06-08 21:13:35 | 000,296,772 | ---- | C] () -- C:\Users\Sobi\Documents\Bez tytułu.jpg
[2011-06-08 21:13:35 | 000,258,048 | ---- | C] () -- C:\Users\Sobi\Documents\db2.mdb
[2011-06-08 21:13:35 | 000,236,015 | ---- | C] () -- C:\Users\Sobi\Documents\0401164348Telewizor analogowyComedy Central.jpg
[2011-06-08 21:13:35 | 000,184,320 | ---- | C] () -- C:\Users\Sobi\Documents\db1.mdb
[2011-06-08 21:13:35 | 000,000,554 | ---- | C] () -- C:\Users\Sobi\Documents\data.html
[2011-05-25 05:08:34 | 000,166,624 | ---- | C] () -- C:\Windows\SysNative\atiapfxx.blb
[2011-05-25 04:55:20 | 001,127,552 | ---- | C] () -- C:\Windows\SysNative\atiumd6a.cap
[2011-05-25 04:49:54 | 001,127,552 | ---- | C] () -- C:\Windows\SysWow64\atiumdva.cap
[2011-05-24 23:44:30 | 000,061,952 | ---- | C] () -- C:\Windows\SysNative\OVDecode64.dll
[2011-05-24 23:44:26 | 000,059,904 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll
[2011-05-19 10:13:40 | 000,032,635 | ---- | C] () -- C:\Windows\atiogl.xml
[2011-04-10 03:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2011-03-17 19:51:44 | 000,003,929 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2009-07-14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009-07-14 04:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009-07-14 04:35:42 | 000,001,405 | ---- | C] () -- C:\Windows\msdfmap.ini
[2009-07-14 04:34:57 | 000,000,587 | ---- | C] () -- C:\Windows\win.ini
[2009-07-14 04:34:57 | 000,000,219 | ---- | C] () -- C:\Windows\system.ini
[2009-07-14 04:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009-07-14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009-07-14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009-07-13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009-06-10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2009-04-29 10:14:02 | 000,000,000 | ---- | C] () -- C:\Windows\BorisFX FEC XML.ini
[2008-11-13 15:07:24 | 000,002,177 | ---- | C] () -- C:\Windows\P17EP.ini
[2008-10-23 13:58:22 | 000,000,000 | ---- | C] () -- C:\Windows\BorisFX FEC6.ini
[2008-09-05 15:46:54 | 000,000,000 | ---- | C] () -- C:\Windows\BorisFEC6.ini
[2007-12-04 22:20:30 | 000,001,489 | ---- | C] () -- C:\Windows\P17EP51.ini
[2007-06-27 17:13:51 | 000,516,096 | ---- | C] () -- C:\Windows\SysWow64\RegisterDialog.dll
[2007-06-07 22:25:42 | 000,001,578 | ---- | C] () -- C:\Windows\P17EPLS.ini
[2006-10-11 05:33:58 | 000,010,288 | ---- | C] () -- C:\Windows\SysWow64\drivers\ASUSHWIO.SYS
[2002-10-16 00:54:04 | 000,153,088 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2011-06-17 19:00:21 | 000,000,000 | ---D | M] -- C:\Users\Sobi\AppData\Roaming\BitCometLite
[2011-06-20 20:43:49 | 000,000,000 | ---D | M] -- C:\Users\Sobi\AppData\Roaming\DAEMON Tools Lite
[2011-06-24 14:12:01 | 000,000,000 | ---D | M] -- C:\Users\Sobi\AppData\Roaming\Day 1 Studios
[2011-06-26 08:12:44 | 000,000,000 | ---D | M] -- C:\Users\Sobi\AppData\Roaming\Gadu-Gadu 10
[2011-06-16 19:36:07 | 000,000,000 | ---D | M] -- C:\Users\Sobi\AppData\Roaming\ImTOO
[2011-06-11 01:30:06 | 000,000,000 | ---D | M] -- C:\Users\Sobi\AppData\Roaming\ipla
[2011-06-27 21:40:29 | 000,000,000 | ---D | M] -- C:\Users\Sobi\AppData\Roaming\WinAVI
[2009-07-14 07:08:49 | 000,018,598 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Custom Scans ==========[/color]
 
 
[color=#A23BEC]< %systemdrive%\*.* >[/color]
[2011-07-02 13:09:39 | 3220,086,784 | -HS- | M] () -- C:\hiberfil.sys
[2011-07-02 13:09:38 | 4293,451,776 | -HS- | M] () -- C:\pagefile.sys
 
 
[color=#A23BEC]< MD5 for: AGP440.SYS  >[/color]
[2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys
[2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys
[2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys
 
[color=#A23BEC]< MD5 for: ATAPI.SYS  >[/color]
[2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys
[2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
 
[color=#A23BEC]< MD5 for: BEEP.SYS  >[/color]
[2009-07-14 02:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\SysNative\drivers\beep.sys
[2009-07-14 02:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\winsxs\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_201592fa214e4f02\beep.sys
 
[color=#A23BEC]< MD5 for: CDROM.SYS  >[/color]
[2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\SysNative\drivers\cdrom.sys
[2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_8363d00ecae4322d\cdrom.sys
[2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys
[2010-11-20 11:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys
 
[color=#A23BEC]< MD5 for: NDIS.SYS  >[/color]
[2010-11-20 15:33:45 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_05ed313632ae9759\ndis.sys
[2009-07-14 03:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\SysNative\drivers\ndis.sys
[2009-07-14 03:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys
 
[color=#A23BEC]< MD5 for: WINLOGON.EXE  >[/color]
[2010-11-20 15:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009-07-14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2010-11-11 18:48:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2010-11-11 18:48:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\SysNative\winlogon.exe
[2010-11-11 18:48:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:9D1B94FD

< End of report >