OTL logfile created on: 2011-07-10 10:43:47 - Run 1
OTL by OldTimer - Version 3.2.26.1     Folder = C:\Users\ProLine\Desktop
 Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,50 Gb Total Physical Memory | 1,75 Gb Available Physical Memory | 50,09% Memory free
7,00 Gb Paging File | 5,11 Gb Available in Paging File | 73,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 97,66 Gb Total Space | 6,36 Gb Free Space | 6,52% Space Free | Partition Type: NTFS
Drive D: | 19,53 Gb Total Space | 1,04 Gb Free Space | 5,33% Space Free | Partition Type: NTFS
Drive E: | 368,10 Gb Total Space | 7,04 Gb Free Space | 1,91% Space Free | Partition Type: NTFS
Drive F: | 92,27 Gb Total Space | 4,15 Gb Free Space | 4,50% Space Free | Partition Type: NTFS
 
Computer Name: PROLINECOMPUTER | User Name: ProLine | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-07-10 10:43:36 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Users\ProLine\Desktop\OTL.exe
PRC - [2011-06-14 13:22:52 | 009,030,656 | ---- | M] (Creative Team S.A.) -- C:\Program Files\WapSter\WapSter AQQ\AQQ.exe
PRC - [2011-05-25 17:29:54 | 001,951,112 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2011-05-25 17:29:48 | 001,336,712 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
PRC - [2011-04-14 08:05:12 | 000,941,936 | ---- | M] (Opera Software) -- C:\Program Files\Opera\opera.exe
PRC - [2011-01-07 22:06:12 | 000,803,432 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
PRC - [2011-01-07 20:48:56 | 000,378,984 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2010-11-17 08:23:52 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files\Steam\Steam.exe
PRC - [2010-10-12 15:40:53 | 000,031,856 | ---- | M] (Arainia Solutions) -- C:\Program Files\Gizmo\gservice.exe
PRC - [2010-09-14 12:47:24 | 000,716,024 | ---- | M] (Tunngle.net GmbH) -- C:\Program Files\Tunngle\TnglCtrl.exe
PRC - [2010-08-28 01:32:26 | 000,360,960 | ---- | M] (iZ3D Inc.) -- C:\Program Files\iZ3D Driver\Win32\S3DCService.exe
PRC - [2010-06-13 12:55:34 | 000,113,664 | ---- | M] () -- C:\Program Files\Rainmeter\Rainmeter.exe
PRC - [2010-04-07 21:08:52 | 000,810,120 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
PRC - [2010-04-07 21:08:30 | 002,145,000 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
PRC - [2010-04-01 11:16:20 | 000,357,696 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe
PRC - [2010-03-06 04:04:24 | 000,310,224 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
PRC - [2010-02-24 21:17:04 | 000,385,928 | ---- | M] (Nokia) -- C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe
PRC - [2010-02-03 09:46:52 | 001,531,904 | ---- | M] (Nokia) -- C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
PRC - [2010-01-26 12:41:08 | 000,652,800 | ---- | M] (Nokia) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
PRC - [2009-12-17 18:43:24 | 000,116,056 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
PRC - [2009-12-17 18:42:54 | 000,238,952 | ---- | M] (Teruten) -- C:\Windows\System32\FsUsbExService.Exe
PRC - [2009-12-17 11:23:54 | 000,272,896 | ---- | M] () -- C:\Program Files\Common Files\Nokia\NoA\nokiaaserver.exe
PRC - [2009-11-21 17:23:02 | 003,581,680 | ---- | M] (Stardock) -- C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
PRC - [2009-10-31 07:45:39 | 002,131,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009-10-27 09:15:44 | 000,132,608 | ---- | M] (Nokia) -- C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
PRC - [2009-10-27 09:15:02 | 000,120,832 | ---- | M] (Nokia) -- C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
PRC - [2009-09-29 18:18:41 | 000,809,736 | ---- | M] (ABBYY) -- C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe
PRC - [2009-08-27 17:09:10 | 001,253,376 | ---- | M] (MAGIX AG) -- C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
PRC - [2009-07-17 15:32:00 | 003,576,320 | ---- | M] (Native Instruments GmbH) -- C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
PRC - [2009-07-14 03:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2007-06-11 19:53:14 | 000,455,600 | ---- | M] () -- C:\Program Files\Lexmark 4800 Series\lxdemon.exe
PRC - [2007-06-05 13:20:32 | 000,177,704 | ---- | M] () -- C:\Windows\System32\PSIService.exe
PRC - [2007-06-01 14:06:09 | 000,020,480 | ---- | M] () -- C:\Program Files\Lexmark 4800 Series\lxdeamon.exe
PRC - [2007-05-29 15:07:58 | 000,598,960 | ---- | M] ( ) -- C:\Windows\System32\lxdecoms.exe
PRC - [2002-07-02 11:56:00 | 000,024,576 | ---- | M] (Creative Technology Ltd) -- C:\Windows\System32\CTHELPER.EXE
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011-07-10 10:43:36 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Users\ProLine\Desktop\OTL.exe
MOD - [2009-07-14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll
MOD - [2007-04-24 16:22:12 | 000,112,400 | ---- | M] () -- C:\Program Files\Stardock\ObjectDock\DockShellHook.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Auto | Stopped] --  -- (.EsetTrialReset)
SRV - [2011-05-25 17:29:48 | 001,336,712 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2011-01-07 20:48:56 | 000,378,984 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2010-10-12 15:40:53 | 000,031,856 | ---- | M] (Arainia Solutions) [Auto | Running] -- C:\Program Files\Gizmo\gservice.exe -- (Gizmo Central)
SRV - [2010-09-14 12:47:24 | 000,716,024 | ---- | M] (Tunngle.net GmbH) [Auto | Running] -- C:\Program Files\Tunngle\TnglCtrl.exe -- (TunngleService)
SRV - [2010-08-28 01:32:26 | 000,360,960 | ---- | M] (iZ3D Inc.) [Auto | Running] -- C:\Program Files\iZ3D Driver\Win32\S3DCService.exe -- (S3D Service (Win32)) S3D Service (Win32)
SRV - [2010-04-07 21:13:20 | 000,033,560 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv)
SRV - [2010-04-07 21:08:52 | 000,810,120 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
SRV - [2010-01-26 12:41:08 | 000,652,800 | ---- | M] (Nokia) [On_Demand | Running] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2009-12-17 18:42:54 | 000,238,952 | ---- | M] (Teruten) [Auto | Running] -- C:\Windows\System32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2009-10-26 18:49:49 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2009-09-29 18:18:41 | 000,809,736 | ---- | M] (ABBYY) [Auto | Running] -- C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Professional.10.0)
SRV - [2009-08-27 17:09:10 | 001,253,376 | ---- | M] (MAGIX AG) [Unknown | Running] -- C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe -- (Fabs)
SRV - [2009-08-18 11:38:00 | 003,299,448 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\System32\GameMon.des -- (npggsvc)
SRV - [2009-07-17 15:32:00 | 003,576,320 | ---- | M] (Native Instruments GmbH) [Auto | Running] -- C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe -- (NIHardwareService)
SRV - [2009-07-16 17:04:16 | 000,316,664 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009-07-14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009-07-14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008-08-07 11:10:02 | 003,276,800 | ---- | M] (MAGIX®) [On_Demand | Stopped] -- C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
SRV - [2007-06-05 13:20:32 | 000,177,704 | ---- | M] () [Auto | Running] -- C:\Windows\System32\PSIService.exe -- (ProtexisLicensing)
SRV - [2007-05-29 15:07:58 | 000,598,960 | ---- | M] ( ) [Auto | Running] -- C:\Windows\System32\lxdecoms.exe -- (lxde_device)
SRV - [2007-05-29 15:06:43 | 000,099,248 | ---- | M] () [Auto | Stopped] -- C:\Windows\System32\spool\DRIVERS\W32X86\3\\lxdeserv.exe -- (lxdeCATSCustConnectService)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2011-04-05 07:26:12 | 000,020,992 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\Temporary\cpu.sys -- (cpudriver)
DRV - [2011-03-11 23:18:07 | 000,002,368 | ---- | M] (AntiCracking) [Kernel | Auto | Running] -- C:\Windows\System32\SVKP.sys -- (SVKP)
DRV - [2011-01-08 05:27:00 | 010,467,656 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2010-12-02 12:13:30 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2010-12-02 12:13:28 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2010-12-02 12:13:26 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2010-12-02 12:13:22 | 000,018,304 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2010-10-12 22:05:43 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd)
DRV - [2010-10-12 15:40:58 | 000,023,624 | ---- | M] (Arainia Solutions LLC) [Kernel | System | Running] -- C:\Windows\System32\drivers\gizmodrv.sys -- (GizmoDrv)
DRV - [2010-07-27 15:19:58 | 000,034,968 | ---- | M] () [Kernel | System | Running] -- C:\Program Files\iZ3D Driver\Win32\S3DInjectionDriver.sys -- (iZ3DInjectionDriver)
DRV - [2010-04-07 21:09:52 | 000,096,896 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\epfwwfpr.sys -- (epfwwfpr)
DRV - [2010-04-07 21:08:36 | 000,114,984 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\System32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2010-04-07 21:05:14 | 000,134,024 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\Windows\System32\drivers\eamonm.sys -- (eamonm)
DRV - [2010-01-22 17:29:57 | 000,025,512 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ggsemc.sys -- (ggsemc)
DRV - [2010-01-22 17:29:57 | 000,013,224 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ggflt.sys -- (ggflt)
DRV - [2010-01-02 20:31:18 | 000,371,349 | ---- | M] (Illusion & Hope.) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\BT848.sys -- (BT848)
DRV - [2009-12-30 11:25:12 | 000,137,344 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nmwcdnsu.sys -- (nmwcdnsu)
DRV - [2009-12-30 11:25:12 | 000,008,320 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nmwcdnsuc.sys -- (nmwcdnsuc)
DRV - [2009-12-14 09:21:44 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009-09-21 10:55:36 | 000,121,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bmdm.sys -- (ss_bmdm)
DRV - [2009-09-21 10:55:36 | 000,090,112 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM)
DRV - [2009-09-21 10:55:36 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bmdfl.sys -- (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter)
DRV - [2009-09-16 08:02:40 | 000,027,136 | ---- | M] (Tunngle.net) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tap0901t.sys -- (tap0901t) TAP-Win32 Adapter V9 (Tunngle)
DRV - [2009-09-12 10:09:44 | 000,016,376 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\gdrv.sys -- (gdrv)
DRV - [2009-07-14 03:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vmbus.sys -- (vmbus)
DRV - [2009-07-14 03:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\vmstorfl.sys -- (storflt)
DRV - [2009-07-14 03:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\storvsc.sys -- (storvsc)
DRV - [2009-07-14 01:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009-07-14 01:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vms3cap.sys -- (s3cap)
DRV - [2009-07-14 01:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\VMBusHID.sys -- (VMBusHID)
DRV - [2009-07-14 00:02:53 | 000,311,808 | ---- | M] (Realtek) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\RTL85n86.sys -- (RTL85n86)
DRV - [2009-06-30 11:37:16 | 000,028,552 | ---- | M] (Panda Security, S.L.) [File_System | Boot | Running] -- C:\Windows\system32\drivers\pavboot.sys -- (pavboot)
DRV - [2009-03-18 17:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2008-08-26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2006-12-14 00:39:28 | 000,040,832 | ---- | M] (Motorola Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\motodrv.sys -- (MotDev)
DRV - [2006-12-13 17:52:50 | 000,020,992 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\motmodem.sys -- (motmodem)
DRV - [2005-01-03 08:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\npptNT2.sys -- (NPPTNT2)
DRV - [2004-09-12 09:45:28 | 000,008,320 | ---- | M] (Ruling Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Dyncal.sys -- (DynCal)
DRV - [2002-07-24 07:52:26 | 000,998,004 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\HA10KX2K.SYS -- (ha10kx2k)
DRV - [2002-07-19 04:48:32 | 000,156,604 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\EMUPIA2K.SYS -- (emupia)
DRV - [2002-07-19 04:48:22 | 000,213,860 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTSFM2K.SYS -- (ctsfm2k)
DRV - [2002-07-19 04:48:08 | 000,011,068 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTPRXY2K.SYS -- (ctprxy2k)
DRV - [2002-07-19 04:48:04 | 000,195,432 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTOSS2K.SYS -- (ossrv)
DRV - [2002-07-19 04:47:52 | 000,837,548 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTAUD2K.SYS -- (ctaud2k) Creative Audio Driver (WDM)
DRV - [2002-07-19 04:46:28 | 000,127,948 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTAC32K.SYS -- (ctac32k)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.atcomet.com/b/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = socks=
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.selectedEngine: "qooqlle"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://google.atcomet.com/b/"
FF - prefs.js..extensions.enabledItems: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}:7.3.2.26
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..network.proxy.backup.ftp: "127.0.0.1"
FF - prefs.js..network.proxy.backup.ftp_port: 9666
FF - prefs.js..network.proxy.backup.gopher: "127.0.0.1"
FF - prefs.js..network.proxy.backup.gopher_port: 9666
FF - prefs.js..network.proxy.backup.socks: "127.0.0.1"
FF - prefs.js..network.proxy.backup.socks_port: 9666
FF - prefs.js..network.proxy.backup.ssl: "127.0.0.1"
FF - prefs.js..network.proxy.backup.ssl_port: 9666
FF - prefs.js..network.proxy.ftp: "127.0.0.1"
FF - prefs.js..network.proxy.ftp_port: 9666
FF - prefs.js..network.proxy.gopher: "127.0.0.1"
FF - prefs.js..network.proxy.gopher_port: 9666
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 9666
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.socks: "127.0.0.1"
FF - prefs.js..network.proxy.socks_port: 9666
FF - prefs.js..network.proxy.ssl: "127.0.0.1"
FF - prefs.js..network.proxy.ssl_port: 9666
FF - prefs.js..network.proxy.type: 0
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.50917.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandasecurity.com/activescan: C:\Program Files\Panda Security\ActiveScan 2.0\npwrapper.dll (Panda Security, S.L.)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1: C:\Program Files\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}: C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ [2010-05-09 14:24:11 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.18\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-06-23 19:33:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.18\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-06-23 19:33:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2010-05-04 21:42:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}: C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [2010-05-09 14:24:11 | 000,000,000 | ---D | M]
 
[2010-08-14 23:19:00 | 000,000,000 | ---D | M] (No name found) -- C:\Users\ProLine\AppData\Roaming\mozilla\Extensions
[2011-05-16 18:58:42 | 000,000,000 | ---D | M] (No name found) -- C:\Users\ProLine\AppData\Roaming\mozilla\Firefox\Profiles\07hioq31.default\extensions
[2010-10-12 22:06:20 | 000,002,059 | ---- | M] () -- C:\Users\ProLine\AppData\Roaming\Mozilla\Firefox\Profiles\07hioq31.default\searchplugins\daemon-search.xml
[2011-03-07 17:12:50 | 000,001,860 | ---- | M] () -- C:\Users\ProLine\AppData\Roaming\Mozilla\Firefox\Profiles\07hioq31.default\searchplugins\search.xml
[2011-07-09 20:29:00 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011-02-02 17:34:02 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2010-05-09 14:24:11 | 000,000,000 | ---D | M] (Firefox Synchronisation Extension) -- C:\PROGRAM FILES\NOKIA\NOKIA OVI SUITE\CONNECTORS\BOOKMARKS CONNECTOR\FIREFOXEXTENSION
[2010-08-24 11:31:30 | 000,773,120 | ---- | M] (BitComet) -- C:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll
[2010-11-12 19:53:06 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011-05-21 21:30:56 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2011-05-21 21:30:56 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2011-05-21 21:30:56 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2011-05-21 21:30:56 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2011-05-21 21:30:56 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2011-05-21 21:30:56 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
Hosts file not found
O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.4.12.6.dll (BitComet)
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Bonus.SSR.FR10] C:\Program Files\ABBYY FineReader 10\Bonus.ScreenshotReader.exe (ABBYY.)
O4 - HKLM..\Run: [DevconDefaultDB] C:\Windows\READREG.exe (Creative Technology Limited)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [FaxCenterServer] C:\Program Files\Lexmark Fax Solutions\fm3032.exe ()
O4 - HKLM..\Run: [kX Mixer] C:\Program Files\kX Audio Driver\3550\kxmixer.exe (Eugene Gavrilov)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [lxdeamon] C:\Program Files\Lexmark 4800 Series\lxdeamon.exe ()
O4 - HKLM..\Run: [lxdemon.exe] C:\Program Files\Lexmark 4800 Series\lxdemon.exe ()
O4 - HKLM..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe (Nokia)
O4 - HKLM..\Run: [NokiaMusic FastStart] C:\Program Files\Nokia\Ovi Player\NokiaOviPlayer.exe (Nokia)
O4 - HKLM..\Run: [NPSStartup]  File not found
O4 - HKLM..\Run: [PCSpeedUp]  File not found
O4 - HKLM..\Run: [PowerS]  File not found
O4 - HKLM..\Run: [WINDVDPatch] C:\Windows\System32\CTHELPER.EXE (Creative Technology Ltd)
O4 - HKCU..\Run: []  File not found
O4 - HKCU..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater\AdobeUpdater.exe (Adobe Systems Incorporated)
O4 - HKCU..\Run: [ALLUpdate]  File not found
O4 - HKCU..\Run: [AQQ] C:\Program Files\WapSter\WapSter AQQ\AQQ.exe (Creative Team S.A.)
O4 - HKCU..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKCU..\Run: [Cracked Steam Service]  File not found
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [EA Core]  File not found
O4 - HKCU..\Run: [Expressivo]  File not found
O4 - HKCU..\Run: [GizmoDriveDelegate] C:\Program Files\Gizmo\gdrive.dll ()
O4 - HKCU..\Run: [IVONA ControlCenter] C:\Program Files\IVONA\IVONA ControlCenter\IVONA ControlCenter.exe (IVO Software Sp. z o.o.)
O4 - HKCU..\Run: [jushed] C:\ProgramData\jushed.exe (                                                                               )
O4 - HKCU..\Run: [MX Skype Recorder]  File not found
O4 - HKCU..\Run: [NokiaOviSuite2] C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe (Nokia)
O4 - HKCU..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe ()
O4 - HKCU..\Run: [RGSC]  File not found
O4 - HKCU..\Run: [Steam] C:\Program Files\Steam\Steam.exe (Valve Corporation)
O4 - HKCU..\Run: [SteamUp]  File not found
O4 - Startup: C:\Users\ProLine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe (Stardock)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8 - Extra context menu item: &P&obierz &za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com)
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.4.12.6.dll (BitComet)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: line6.net ([]* in Trusted sites)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab (ActiveScan 2.0 Installer Class)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O22 - SharedTaskScheduler: {E31004D1-A431-41B8-826F-E902F9D95C81} - Windows DreamScene - C:\Windows\System32\DreamScene.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{0d58d156-9c76-11de-9e11-001d7dc397bd}\Shell\AutoRun\command - "" = K:\starter.exe
O33 - MountPoints2\{40e1bcf3-a1bd-11de-a77b-001d7dc397bd}\Shell\AutoRun\command - "" = L:\Setup.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-07-10 10:43:35 | 000,579,584 | ---- | C] (OldTimer Tools) -- C:\Users\ProLine\Desktop\OTL.exe
[2011-07-09 18:40:25 | 000,000,000 | ---D | C] -- C:\Users\ProLine\AppData\Roaming\Day 1 Studios
[2011-07-09 18:40:21 | 000,000,000 | ---D | C] -- C:\Users\ProLine\AppData\Local\ALI213
[2011-07-09 18:29:16 | 000,000,000 | ---D | C] -- C:\Users\ProLine\Desktop\Nowy folder (2)
[2011-07-09 18:15:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WB Games
[2011-07-09 11:40:52 | 000,000,000 | ---D | C] -- C:\Users\ProLine\Desktop\Nowy folder
[2011-07-04 22:09:00 | 000,000,000 | ---D | C] -- C:\Users\ProLine\Desktop\Eier
[2011-07-03 16:03:27 | 000,000,000 | ---D | C] -- C:\Users\ProLine\Documents\Pinnacle VideoSpin
[2011-07-03 15:59:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pinnacle VideoSpin
[2011-07-03 15:58:55 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Yahoo!
[2011-07-03 15:58:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Pinnacle VideoSpin
[2011-07-03 15:58:55 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Pinnacle
[2011-07-03 15:58:55 | 000,000,000 | ---D | C] -- C:\Program Files\Pinnacle
[2011-07-03 15:58:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Pinnacle
[2011-06-30 21:17:43 | 000,000,000 | ---D | C] -- C:\Users\ProLine\Desktop\Koszulka
[2011-06-26 19:06:14 | 000,000,000 | ---D | C] -- C:\Users\ProLine\AppData\Roaming\dvdcss
[2011-06-23 09:16:11 | 000,000,000 | ---D | C] -- C:\Users\ProLine\Desktop\Calka
[2011-06-17 21:43:54 | 000,000,000 | ---D | C] -- C:\Users\ProLine\AppData\Local\LogMeIn Hamachi
[2011-06-17 21:43:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2011-06-17 21:43:45 | 000,000,000 | ---D | C] -- C:\Program Files\LogMeIn Hamachi
[2011-06-10 21:38:57 | 000,000,000 | ---D | C] -- C:\Users\ProLine\Desktop\Nowy folder (5)
[2011-05-16 22:36:21 | 007,987,953 | ---- | C] (CCCP Project                                                ) -- C:\Users\ProLine\AppData\Local\Codecs.exe
[2011-05-16 22:36:21 | 000,566,784 | ---- | C] (                                                                               ) -- C:\Users\ProLine\AppData\Local\jushed.exe
[2011-05-16 22:36:21 | 000,347,136 | ---- | C] (NirSoft) -- C:\Users\ProLine\AppData\Local\nircmd.exe
[2011-05-16 17:54:37 | 000,566,784 | RHS- | C] (                                                                               ) -- C:\ProgramData\jushed.exe
[2011-05-16 17:54:37 | 000,347,136 | RHS- | C] (NirSoft) -- C:\ProgramData\nircmd.exe
[2011-03-06 16:41:32 | 000,311,296 | RHS- | C] (Created with WinAutomation (http://www.WinAutomation.com)) -- C:\Users\ProLine\AppData\Roaming\Readar_sl.exe
[2011-01-15 13:05:30 | 000,065,536 | ---- | C] ( ) -- C:\Windows\System32\A3D.DLL
[2009-09-10 15:37:09 | 001,200,128 | ---- | C] ( ) -- C:\Windows\System32\lxdeserv.dll
[2009-09-10 15:37:09 | 000,950,272 | ---- | C] ( ) -- C:\Windows\System32\lxdeusb1.dll
[2009-09-10 15:37:09 | 000,434,176 | ---- | C] ( ) -- C:\Windows\System32\lxdehcp.dll
[2009-09-10 15:37:09 | 000,356,352 | ---- | C] ( ) -- C:\Windows\System32\lxdeinpa.dll
[2009-09-10 15:37:09 | 000,339,968 | ---- | C] ( ) -- C:\Windows\System32\lxdeiesc.dll
[2009-09-10 15:37:08 | 000,647,168 | ---- | C] ( ) -- C:\Windows\System32\lxdepmui.dll
[2009-09-10 15:37:08 | 000,565,248 | ---- | C] ( ) -- C:\Windows\System32\lxdelmpm.dll
[2009-09-10 15:37:08 | 000,320,432 | ---- | C] ( ) -- C:\Windows\System32\lxdeih.exe
[2009-09-10 15:37:08 | 000,053,248 | ---- | C] ( ) -- C:\Windows\System32\lxdeprox.dll
[2009-09-10 15:37:07 | 000,663,552 | ---- | C] ( ) -- C:\Windows\System32\lxdehbn3.dll
[2009-09-10 15:37:06 | 000,860,160 | ---- | C] ( ) -- C:\Windows\System32\lxdecomc.dll
[2009-09-10 15:37:06 | 000,598,960 | ---- | C] ( ) -- C:\Windows\System32\lxdecoms.exe
[2009-09-10 15:37:06 | 000,365,488 | ---- | C] ( ) -- C:\Windows\System32\lxdecfg.exe
[2009-09-10 15:37:06 | 000,364,544 | ---- | C] ( ) -- C:\Windows\System32\lxdecomm.dll
[5 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[5 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-07-10 10:43:36 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Users\ProLine\Desktop\OTL.exe
[2011-07-10 08:54:28 | 000,027,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011-07-10 08:54:28 | 000,027,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011-07-10 08:50:17 | 000,000,002 | ---- | M] () -- C:\ProgramData\timerxfile
[2011-07-10 08:50:17 | 000,000,002 | ---- | M] () -- C:\ProgramData\datesavefile
[2011-07-10 08:50:17 | 000,000,001 | ---- | M] () -- C:\ProgramData\varsavefile
[2011-07-10 08:49:07 | 2817,384,448 | -HS- | M] () -- C:\hiberfil.sys
[2011-07-09 23:50:16 | 000,000,000 | ---- | M] () -- C:\Windows\System32\Access.dat
[2011-07-09 23:50:05 | 000,028,351 | ---- | M] () -- C:\Users\ProLine\Desktop\ter.odt
[2011-07-09 18:49:24 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini
[2011-07-09 18:49:20 | 000,000,788 | ---- | M] () -- C:\Users\Public\Desktop\F.E.A.R. 3.lnk
[2011-07-09 18:43:54 | 000,000,907 | ---- | M] () -- C:\Users\Public\Desktop\Çŕďóńňčňü F.E.A.R. 3.lnk
[2011-07-09 12:54:45 | 000,000,028 | ---- | M] () -- C:\Users\ProLine\Desktop\pro.avi.sfl
[2011-07-09 12:54:44 | 046,648,320 | ---- | M] () -- C:\Users\ProLine\Desktop\pro.avi
[2011-07-09 12:50:09 | 441,453,056 | ---- | M] () -- C:\Users\ProLine\Desktop\Tribute.avi
[2011-07-09 12:50:09 | 000,000,032 | ---- | M] () -- C:\Users\ProLine\Desktop\Tribute.avi.sfl
[2011-07-09 12:47:27 | 000,033,944 | ---- | M] () -- C:\Users\ProLine\Desktop\pro.veg
[2011-07-09 12:23:41 | 000,020,240 | ---- | M] () -- C:\Users\ProLine\Desktop\pro.veg.bak
[2011-07-09 11:45:47 | 000,063,280 | ---- | M] () -- C:\Users\ProLine\Desktop\New.MP3.sfk
[2011-07-09 11:42:13 | 000,748,916 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2011-07-09 11:42:13 | 000,662,680 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011-07-09 11:42:13 | 000,158,576 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2011-07-09 11:42:13 | 000,124,616 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011-07-09 11:15:36 | 000,733,936 | ---- | M] () -- C:\Users\ProLine\Desktop\New.MP3
[2011-07-09 10:51:58 | 001,437,823 | ---- | M] () -- C:\Users\ProLine\Desktop\goodbye to romance.mp3
[2011-07-09 10:39:16 | 005,378,330 | ---- | M] () -- C:\Users\ProLine\Desktop\Ozzy - Goodbye to Romance.mp3
[2011-07-08 19:05:30 | 000,088,276 | ---- | M] () -- C:\Users\ProLine\Desktop\tren.jpg
[2011-07-08 18:31:01 | 000,100,453 | ---- | M] () -- C:\Users\ProLine\Desktop\casting.jpg
[2011-07-08 12:47:28 | 000,000,028 | ---- | M] () -- C:\Windows\Robota.INI
[2011-07-04 22:08:53 | 046,634,045 | ---- | M] () -- C:\Users\ProLine\Desktop\Eier.rar
[2011-07-04 21:14:56 | 000,031,041 | ---- | M] () -- C:\Users\ProLine\Desktop\ozzy_osbourne_goodbye_to_romance.gp3
[2011-07-04 09:19:06 | 002,806,904 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011-07-03 18:09:36 | 000,021,337 | ---- | M] () -- C:\ProgramData\lxde
[2011-07-03 16:11:14 | 000,000,349 | ---- | M] () -- C:\Users\Public\Documents\PCLECHAL.INI
[2011-07-03 15:59:09 | 000,001,089 | ---- | M] () -- C:\Users\Public\Desktop\Pinnacle VideoSpin.lnk
[2011-07-02 16:10:51 | 000,000,510 | ---- | M] () -- C:\Users\ProLine\AppData\Roaming\photophant.ini
[2011-07-01 20:11:17 | 000,036,864 | ---- | M] () -- C:\Users\ProLine\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-06-30 21:20:38 | 000,000,132 | ---- | M] () -- C:\Users\ProLine\AppData\Roaming\Preferencje Adobe CS5 dla formatu PNG
[2011-06-30 14:46:24 | 000,001,766 | ---- | M] () -- C:\Users\ProLine\Desktop\sta.gp5
[2011-06-29 18:06:45 | 000,062,735 | ---- | M] () -- C:\Users\ProLine\Desktop\mecz.jpg
[2011-06-29 17:47:27 | 000,096,594 | ---- | M] () -- C:\Users\ProLine\Desktop\strze.jpg
[2011-06-28 22:11:05 | 000,210,547 | ---- | M] () -- C:\Users\ProLine\Desktop\ko.jpg
[2011-06-28 18:59:03 | 000,048,901 | ---- | M] () -- C:\dance80.mp3
[2011-06-25 22:47:29 | 000,001,818 | ---- | M] () -- C:\Users\ProLine\Desktop\str.gp5
[2011-06-25 09:58:05 | 000,124,254 | ---- | M] () -- C:\Users\ProLine\Desktop\zakon.jpg
[2011-06-23 18:12:44 | 000,022,328 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2011-06-23 11:03:50 | 000,130,910 | -H-- | M] () -- C:\treeinfo.wc
[2011-06-17 21:43:36 | 003,768,320 | ---- | M] () -- C:\Users\ProLine\Desktop\hamachi.msi
[2011-06-17 14:39:10 | 000,000,066 | ---- | M] () -- C:\Users\ProLine\Desktop\index.php
[2011-06-15 22:52:50 | 000,248,367 | ---- | M] () -- C:\Users\ProLine\Desktop\Plakat_Zaglebiak.jpg
[2011-06-14 21:53:49 | 000,184,528 | ---- | M] () -- C:\Users\ProLine\Desktop\wyg.jpg
[2011-06-14 20:32:17 | 000,015,138 | ---- | M] () -- C:\Users\ProLine\Desktop\zagłęb.odt
[2011-06-12 20:00:36 | 000,000,043 | ---- | M] () -- C:\Windows\Muma60.INI
[2011-06-12 11:15:45 | 000,017,923 | ---- | M] () -- C:\Users\ProLine\Desktop\logo.png
[2011-06-11 00:26:32 | 000,022,328 | ---- | M] () -- C:\Users\ProLine\AppData\Roaming\PnkBstrK.sys
[2011-06-11 00:25:57 | 000,000,319 | ---- | M] () -- C:\Windows\game.ini
[2011-06-10 16:06:17 | 000,105,033 | ---- | M] () -- C:\Users\ProLine\Desktop\zapsla.jpg
[2011-06-10 16:02:31 | 000,013,701 | ---- | M] () -- C:\Users\ProLine\Desktop\slavia.png
[5 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[5 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-07-09 23:50:04 | 000,028,351 | ---- | C] () -- C:\Users\ProLine\Desktop\ter.odt
[2011-07-09 18:40:48 | 000,000,907 | ---- | C] () -- C:\Users\Public\Desktop\Çŕďóńňčňü F.E.A.R. 3.lnk
[2011-07-09 18:15:19 | 000,000,788 | ---- | C] () -- C:\Users\Public\Desktop\F.E.A.R. 3.lnk
[2011-07-09 12:54:45 | 000,000,028 | ---- | C] () -- C:\Users\ProLine\Desktop\pro.avi.sfl
[2011-07-09 12:51:57 | 046,648,320 | ---- | C] () -- C:\Users\ProLine\Desktop\pro.avi
[2011-07-09 12:50:09 | 000,000,032 | ---- | C] () -- C:\Users\ProLine\Desktop\Tribute.avi.sfl
[2011-07-09 12:49:09 | 441,453,056 | ---- | C] () -- C:\Users\ProLine\Desktop\Tribute.avi
[2011-07-09 12:23:41 | 000,033,944 | ---- | C] () -- C:\Users\ProLine\Desktop\pro.veg
[2011-07-09 12:23:41 | 000,020,240 | ---- | C] () -- C:\Users\ProLine\Desktop\pro.veg.bak
[2011-07-09 11:45:36 | 000,063,280 | ---- | C] () -- C:\Users\ProLine\Desktop\New.MP3.sfk
[2011-07-09 11:15:35 | 000,733,936 | ---- | C] () -- C:\Users\ProLine\Desktop\New.MP3
[2011-07-09 10:51:58 | 001,437,823 | ---- | C] () -- C:\Users\ProLine\Desktop\goodbye to romance.mp3
[2011-07-09 10:38:57 | 005,378,330 | ---- | C] () -- C:\Users\ProLine\Desktop\Ozzy - Goodbye to Romance.mp3
[2011-07-08 19:05:29 | 000,088,276 | ---- | C] () -- C:\Users\ProLine\Desktop\tren.jpg
[2011-07-08 18:31:00 | 000,100,453 | ---- | C] () -- C:\Users\ProLine\Desktop\casting.jpg
[2011-07-04 22:08:06 | 046,634,045 | ---- | C] () -- C:\Users\ProLine\Desktop\Eier.rar
[2011-07-04 21:14:56 | 000,031,041 | ---- | C] () -- C:\Users\ProLine\Desktop\ozzy_osbourne_goodbye_to_romance.gp3
[2011-07-03 15:59:09 | 000,001,089 | ---- | C] () -- C:\Users\Public\Desktop\Pinnacle VideoSpin.lnk
[2011-07-03 15:58:17 | 000,000,349 | ---- | C] () -- C:\Users\Public\Documents\PCLECHAL.INI
[2011-06-30 14:46:24 | 000,001,766 | ---- | C] () -- C:\Users\ProLine\Desktop\sta.gp5
[2011-06-29 18:06:44 | 000,062,735 | ---- | C] () -- C:\Users\ProLine\Desktop\mecz.jpg
[2011-06-29 17:47:25 | 000,096,594 | ---- | C] () -- C:\Users\ProLine\Desktop\strze.jpg
[2011-06-29 00:10:23 | 000,449,750 | ---- | C] () -- C:\Users\ProLine\Desktop\ETI.Camcorder.2.v2.02.S60.SymbianOS7.CrackedBiNPDA.sis
[2011-06-28 22:11:04 | 000,210,547 | ---- | C] () -- C:\Users\ProLine\Desktop\ko.jpg
[2011-06-28 18:59:02 | 000,048,901 | ---- | C] () -- C:\dance80.mp3
[2011-06-25 22:47:29 | 000,001,818 | ---- | C] () -- C:\Users\ProLine\Desktop\str.gp5
[2011-06-25 09:58:03 | 000,124,254 | ---- | C] () -- C:\Users\ProLine\Desktop\zakon.jpg
[2011-06-17 21:43:31 | 003,768,320 | ---- | C] () -- C:\Users\ProLine\Desktop\hamachi.msi
[2011-06-15 22:52:47 | 000,248,367 | ---- | C] () -- C:\Users\ProLine\Desktop\Plakat_Zaglebiak.jpg
[2011-06-14 23:49:45 | 000,000,066 | ---- | C] () -- C:\Users\ProLine\Desktop\index.php
[2011-06-14 21:53:46 | 000,184,528 | ---- | C] () -- C:\Users\ProLine\Desktop\wyg.jpg
[2011-06-14 20:32:17 | 000,015,138 | ---- | C] () -- C:\Users\ProLine\Desktop\zagłęb.odt
[2011-06-12 11:15:44 | 000,017,923 | ---- | C] () -- C:\Users\ProLine\Desktop\logo.png
[2011-06-11 00:25:57 | 000,000,319 | ---- | C] () -- C:\Windows\game.ini
[2011-06-10 16:06:16 | 000,105,033 | ---- | C] () -- C:\Users\ProLine\Desktop\zapsla.jpg
[2011-06-10 16:02:30 | 000,013,701 | ---- | C] () -- C:\Users\ProLine\Desktop\slavia.png
[2011-05-16 22:36:21 | 000,004,768 | ---- | C] () -- C:\Users\ProLine\AppData\Local\operaprefs.ini
[2011-05-16 17:54:40 | 000,000,002 | ---- | C] () -- C:\ProgramData\timerxfile
[2011-05-16 17:54:40 | 000,000,002 | ---- | C] () -- C:\ProgramData\datesavefile
[2011-05-16 17:54:40 | 000,000,001 | ---- | C] () -- C:\ProgramData\varsavefile
[2011-05-16 17:54:37 | 000,004,768 | ---- | C] () -- C:\ProgramData\operaprefs.ini
[2011-03-27 09:22:44 | 000,165,376 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2011-03-11 23:17:44 | 000,028,672 | ---- | C] () -- C:\Windows\System32\AVEQ.dll
[2011-03-06 16:41:32 | 008,180,224 | ---- | C] () -- C:\ProgramData\TunesHelper.exe
[2011-02-06 14:09:16 | 000,000,524 | ---- | C] () -- C:\Windows\bpfdat.dat
[2011-01-15 13:07:59 | 000,000,024 | ---- | C] () -- C:\Windows\System32\DVCStateBkp-{00000004-00000000-00000000-00001102-00000002-100A1102}.dat
[2011-01-15 13:07:59 | 000,000,024 | ---- | C] () -- C:\Windows\System32\DVCState-{00000004-00000000-00000000-00001102-00000002-100A1102}.dat
[2011-01-15 13:05:40 | 000,037,727 | ---- | C] () -- C:\Windows\System32\Emu10kx.ini
[2011-01-15 13:05:40 | 000,000,029 | ---- | C] () -- C:\Windows\System32\ctzapxx.ini
[2011-01-15 13:05:31 | 000,179,669 | ---- | C] () -- C:\Windows\System32\CTSTATIC.DAT
[2011-01-15 13:05:31 | 000,164,044 | ---- | C] () -- C:\Windows\System32\CTDLANG.DAT
[2011-01-15 13:05:31 | 000,113,373 | ---- | C] () -- C:\Windows\System32\CTBASICW.DAT
[2011-01-15 13:05:31 | 000,113,273 | ---- | C] () -- C:\Windows\System32\CTBAS2W.DAT
[2011-01-15 13:05:31 | 000,044,055 | ---- | C] () -- C:\Windows\System32\CTDAUGHT.DAT
[2011-01-15 13:05:30 | 000,184,320 | ---- | C] () -- C:\Windows\PSCONV.EXE
[2011-01-15 13:05:30 | 000,049,152 | ---- | C] () -- C:\Windows\System32\KILLAPPS.EXE
[2011-01-15 13:05:30 | 000,036,864 | ---- | C] () -- C:\Windows\System32\REGPLIB.EXE
[2011-01-15 13:05:30 | 000,000,180 | ---- | C] () -- C:\Windows\System32\KILL.INI
[2010-12-29 11:18:43 | 000,190,464 | ---- | C] () -- C:\Windows\System32\PCGW32.DLL
[2010-12-26 17:39:29 | 000,000,028 | ---- | C] () -- C:\Windows\Robota.INI
[2010-12-26 17:37:26 | 000,053,248 | ---- | C] () -- C:\Windows\System32\mgxasio2.dll
[2010-12-26 17:36:52 | 000,120,200 | ---- | C] () -- C:\Windows\System32\DLLDEV32i.dll
[2010-12-26 17:36:44 | 000,006,211 | ---- | C] () -- C:\Windows\mgxoschk.ini
[2010-12-25 00:56:58 | 000,000,032 | ---- | C] () -- C:\Windows\GearBox.ini
[2010-12-12 10:35:22 | 000,002,432 | ---- | C] () -- C:\Users\ProLine\AppData\Local\TemppT1456.html
[2010-12-10 08:41:32 | 000,002,432 | ---- | C] () -- C:\Users\ProLine\AppData\Local\Tempsq1608.html
[2010-12-10 08:41:32 | 000,002,089 | ---- | C] () -- C:\Users\ProLine\AppData\Local\TempFE1608.html
[2010-12-10 07:44:31 | 000,002,432 | ---- | C] () -- C:\Users\ProLine\AppData\Local\TempzD2556.html
[2010-12-09 17:27:16 | 000,002,432 | ---- | C] () -- C:\Users\ProLine\AppData\Local\Tempsl2588.html
[2010-12-09 07:40:59 | 000,002,432 | ---- | C] () -- C:\Users\ProLine\AppData\Local\Tempmg3004.html
[2010-12-08 09:16:14 | 000,002,432 | ---- | C] () -- C:\Users\ProLine\AppData\Local\TempXy3256.html
[2010-12-08 09:16:14 | 000,002,089 | ---- | C] () -- C:\Users\ProLine\AppData\Local\Tempro3256.html
[2010-12-08 08:13:39 | 000,002,432 | ---- | C] () -- C:\Users\ProLine\AppData\Local\Temppo2456.html
[2010-12-07 16:12:27 | 000,002,432 | ---- | C] () -- C:\Users\ProLine\AppData\Local\Tempht4024.html
[2010-12-06 17:02:03 | 000,002,432 | ---- | C] () -- C:\Users\ProLine\AppData\Local\Tempre4080.html
[2010-12-06 09:04:29 | 000,002,432 | ---- | C] () -- C:\Users\ProLine\AppData\Local\TempGk2472.html
[2010-12-06 09:04:29 | 000,002,089 | ---- | C] () -- C:\Users\ProLine\AppData\Local\TemplE2472.html
[2010-12-06 08:15:21 | 000,002,432 | ---- | C] () -- C:\Users\ProLine\AppData\Local\TempCU1156.html
[2010-12-05 13:49:05 | 000,002,432 | ---- | C] () -- C:\Users\ProLine\AppData\Local\TempTs4032.html
[2010-12-05 12:18:10 | 000,002,432 | ---- | C] () -- C:\Users\ProLine\AppData\Local\TempBk2764.html
[2010-12-05 12:18:10 | 000,002,089 | ---- | C] () -- C:\Users\ProLine\AppData\Local\TempdZ2764.html
[2010-12-05 10:28:19 | 000,002,432 | ---- | C] () -- C:\Users\ProLine\AppData\Local\Tempyq2188.html
[2010-12-04 09:40:31 | 000,002,432 | ---- | C] () -- C:\Users\ProLine\AppData\Local\TempZO3452.html
[2010-12-03 16:46:44 | 000,002,432 | ---- | C] () -- C:\Users\ProLine\AppData\Local\Templx1804.html
[2010-12-03 07:51:27 | 000,002,432 | ---- | C] () -- C:\Users\ProLine\AppData\Local\Tempft1004.html
[2010-12-02 17:43:51 | 000,002,432 | ---- | C] () -- C:\Users\ProLine\AppData\Local\TempUs2496.html
[2010-12-02 08:38:52 | 000,002,432 | ---- | C] () -- C:\Users\ProLine\AppData\Local\TempGk4064.html
[2010-12-02 08:38:52 | 000,002,089 | ---- | C] () -- C:\Users\ProLine\AppData\Local\TempHQ4064.html
[2010-12-02 07:46:28 | 000,002,432 | ---- | C] () -- C:\Users\ProLine\AppData\Local\Tempvu3264.html
[2010-11-28 17:52:52 | 000,637,428 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat
[2010-08-25 23:29:03 | 000,001,496 | ---- | C] () -- C:\Users\ProLine\AppData\Local\Adobe Zapisz dla Internetu 12.0 Prefs
[2010-08-22 02:01:28 | 000,000,132 | ---- | C] () -- C:\Users\ProLine\AppData\Roaming\Preferencje Adobe CS5 dla formatu GIF
[2010-08-17 21:56:55 | 000,000,132 | ---- | C] () -- C:\Users\ProLine\AppData\Roaming\Preferencje Adobe CS5 dla formatu BMP
[2010-08-17 21:38:22 | 000,000,132 | ---- | C] () -- C:\Users\ProLine\AppData\Roaming\Preferencje Adobe CS5 dla formatu PNG
[2010-08-14 23:18:54 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2010-08-13 18:44:49 | 000,000,510 | ---- | C] () -- C:\Users\ProLine\AppData\Roaming\photophant.ini
[2010-08-12 08:58:13 | 000,000,031 | ---- | C] () -- C:\Windows\System32\Days5.ini
[2010-05-04 21:45:40 | 002,984,184 | ---- | C] () -- C:\Windows\Eset fix.exe
[2010-04-29 16:43:36 | 000,000,088 | RHS- | C] () -- C:\Windows\System32\3D4B6ED8F2.sys
[2010-04-29 16:40:04 | 000,002,828 | -HS- | C] () -- C:\Windows\System32\KGyGaAvL.sys
[2010-04-11 18:05:39 | 000,110,592 | ---- | C] () -- C:\Windows\System32\FsUsbExDevice.Dll
[2010-04-11 18:05:39 | 000,036,608 | ---- | C] () -- C:\Windows\System32\FsUsbExDisk.Sys
[2010-04-02 17:17:34 | 000,179,091 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2010-03-29 21:34:04 | 000,000,887 | ---- | C] () -- C:\Windows\FOE2.ini
[2010-02-28 09:44:44 | 002,434,856 | ---- | C] () -- C:\Windows\System32\pbsvc_bc2.exe
[2010-02-16 23:13:49 | 000,000,000 | ---- | C] () -- C:\Windows\System32\Access.dat
[2010-02-09 19:46:45 | 000,000,016 | ---- | C] () -- C:\Windows\System32\msvcsv60.dll
[2010-02-09 19:46:45 | 000,000,016 | ---- | C] () -- C:\Windows\msocreg32.dat
[2010-01-23 20:02:36 | 000,000,096 | -H-- | C] () -- C:\Windows\System32\HsInfo.dat
[2010-01-21 22:16:44 | 000,036,864 | ---- | C] () -- C:\Users\ProLine\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-01-17 21:08:24 | 000,022,328 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2010-01-17 21:08:11 | 000,103,736 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2010-01-17 21:07:44 | 000,066,872 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2010-01-02 19:45:01 | 000,002,302 | ---- | C] () -- C:\Windows\TSCTNDBG.INI
[2010-01-02 19:45:01 | 000,000,804 | ---- | C] () -- C:\Windows\TSCTVDIV.BIN
[2010-01-02 19:44:58 | 000,018,455 | ---- | C] () -- C:\Windows\TSCTVMSG.INI
[2010-01-02 19:44:58 | 000,010,686 | ---- | C] () -- C:\Windows\TSCTVDIV.INI
[2010-01-02 19:44:58 | 000,000,466 | ---- | C] () -- C:\Windows\TSCFM.INI
[2009-12-26 21:01:58 | 000,000,017 | ---- | C] () -- C:\Users\ProLine\AppData\Local\resmon.resmoncfg
[2009-11-21 17:19:12 | 000,002,560 | ---- | C] () -- C:\Windows\_MSRSTRT.EXE
[2009-10-27 09:50:01 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2009-10-25 20:31:21 | 000,000,043 | ---- | C] () -- C:\Windows\Muma60.INI
[2009-10-15 20:03:06 | 000,000,068 | ---- | C] () -- C:\Windows\WaterIllusion.ini
[2009-10-15 10:56:55 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI
[2009-09-30 19:20:25 | 000,001,793 | ---- | C] () -- C:\Windows\kaillera.ini
[2009-09-13 20:50:38 | 000,021,337 | ---- | C] () -- C:\ProgramData\lxde
[2009-09-12 09:39:21 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini
[2009-09-10 22:06:17 | 000,374,032 | ---- | C] () -- C:\Windows\System32\GDFBinary.dll
[2009-09-10 22:06:16 | 006,829,328 | ---- | C] () -- C:\Windows\System32\FIFA10Demo.exe
[2009-09-10 22:06:16 | 004,532,736 | ---- | C] () -- C:\Windows\System32\autorun.dat
[2009-09-10 22:06:16 | 000,324,880 | ---- | C] () -- C:\Windows\System32\dirtysock.dll
[2009-09-10 22:06:16 | 000,030,398 | ---- | C] () -- C:\Windows\System32\config.dat
[2009-09-10 15:40:48 | 000,348,160 | ---- | C] () -- C:\Windows\System32\lxdecoin.dll
[2009-09-10 15:39:06 | 000,045,056 | ---- | C] () -- C:\Windows\System32\LXF3PMON.DLL
[2009-09-10 15:39:06 | 000,036,864 | ---- | C] () -- C:\Windows\System32\lxf3oem.dll
[2009-09-10 15:39:06 | 000,032,768 | ---- | C] () -- C:\Windows\System32\LXF3FXPU.DLL
[2009-09-10 15:39:06 | 000,012,288 | ---- | C] () -- C:\Windows\System32\LXF3PMRC.DLL
[2009-09-10 15:37:22 | 000,000,060 | -H-- | C] () -- C:\Windows\System32\lxderwrd.ini
[2009-09-10 15:37:09 | 000,348,160 | ---- | C] () -- C:\Windows\System32\lxdeinst.dll
[2009-09-10 15:37:07 | 000,208,896 | ---- | C] () -- C:\Windows\System32\lxdegrd.dll
[2009-09-08 15:06:26 | 000,022,328 | ---- | C] () -- C:\Users\ProLine\AppData\Roaming\PnkBstrK.sys
[2009-09-08 15:06:03 | 000,794,408 | ---- | C] () -- C:\Windows\System32\pbsvc.exe
[2009-09-06 14:24:20 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat
[2009-09-06 14:21:35 | 000,000,000 | ---- | C] () -- C:\Windows\System32\CoDWaWmp_Loader.exe
[2009-09-06 10:29:57 | 000,258,048 | ---- | C] () -- C:\Windows\System32\libFLAC.dll
[2009-09-06 10:29:36 | 000,079,360 | ---- | C] () -- C:\Windows\System32\mkzlib.dll
[2009-09-06 10:29:36 | 000,023,552 | ---- | C] () -- C:\Windows\System32\mkunicode.dll
[2009-07-14 10:07:57 | 000,748,916 | ---- | C] () -- C:\Windows\System32\perfh015.dat
[2009-07-14 10:07:57 | 000,337,158 | ---- | C] () -- C:\Windows\System32\perfi015.dat
[2009-07-14 10:07:57 | 000,158,576 | ---- | C] () -- C:\Windows\System32\perfc015.dat
[2009-07-14 10:07:57 | 000,038,710 | ---- | C] () -- C:\Windows\System32\perfd015.dat
[2009-07-14 06:33:53 | 002,806,904 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009-07-14 04:05:48 | 000,662,680 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009-07-14 04:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009-07-14 04:05:48 | 000,124,616 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009-07-14 04:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009-07-14 04:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009-07-14 04:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009-07-14 02:19:49 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2009-07-14 01:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009-07-14 01:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009-07-14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009-06-10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2007-10-25 18:26:10 | 000,005,632 | ---- | C] () -- C:\Windows\System32\drivers\StarOpen.sys
[2007-06-21 08:34:08 | 000,203,328 | R--- | C] () -- C:\Windows\GSetup.exe
[2007-06-05 13:20:32 | 000,177,704 | ---- | C] () -- C:\Windows\System32\PSIService.exe
[2007-05-24 22:24:25 | 000,692,224 | ---- | C] () -- C:\Windows\System32\lxdedrs.dll
[2007-05-22 16:09:42 | 000,065,536 | ---- | C] () -- C:\Windows\System32\lxdecaps.dll
[2007-04-17 16:17:05 | 000,069,632 | ---- | C] () -- C:\Windows\System32\lxdecnv4.dll
[2007-01-26 01:04:12 | 000,138,752 | ---- | C] () -- C:\Windows\System32\mase32.dll
[2007-01-26 01:04:12 | 000,027,648 | ---- | C] () -- C:\Windows\System32\ma32.dll
[2006-08-23 11:33:46 | 000,006,144 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2006-08-01 07:53:18 | 000,040,960 | ---- | C] () -- C:\Windows\System32\lxdevs.dll
[2006-02-25 13:12:34 | 000,180,224 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2006-02-25 13:09:38 | 000,819,200 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2002-11-18 18:02:58 | 000,040,960 | ---- | C] () -- C:\Windows\System32\MMAVILNG.exe
[2002-11-15 15:11:28 | 000,077,824 | ---- | C] () -- C:\Windows\System32\MMSwitch.dll
[2002-10-06 21:42:58 | 000,237,568 | ---- | C] () -- C:\Windows\System32\OggDS.dll
[2002-10-05 02:04:26 | 000,921,600 | ---- | C] () -- C:\Windows\System32\vorbisenc.dll
[2002-10-05 02:04:26 | 000,188,416 | ---- | C] () -- C:\Windows\System32\VORBIS.DLL
[2002-10-05 02:04:18 | 000,045,056 | ---- | C] () -- C:\Windows\System32\OGG.DLL
 
[color=#E56717]========== Files - Unicode (All) ==========[/color]
[2011-05-16 08:04:00 | 000,001,131 | ---- | M] ()(C:\Users\ProLine\Desktop\??????? 2. ?????? ???????.lnk) -- C:\Users\ProLine\Desktop\Ведьмак 2. Убийцы королей.lnk
[2011-05-16 08:04:00 | 000,001,131 | ---- | C] ()(C:\Users\ProLine\Desktop\??????? 2. ?????? ???????.lnk) -- C:\Users\ProLine\Desktop\Ведьмак 2. Убийцы королей.lnk
(C:\ProgramData\Microsoft\Windows\Start Menu\Programs\1C-????????) -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\1C-СофтКлаб
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 96 bytes -> C:\ProgramData\TEMP:C8B8CEBD
@Alternate Data Stream - 140 bytes -> C:\ProgramData\TEMP:0A8E2C33
@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:05EE1EEF
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:888AFB86

< End of report >