OTL logfile created on: 2011-08-17 19:55:30 - Run 2
OTL by OldTimer - Version 3.2.26.4     Folder = C:\Users\Joanna\Desktop
Windows Vista Home Premium Edition  (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.17037)
Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd
 
3.00 Gb Total Physical Memory | 1.41 Gb Available Physical Memory | 47.19% Memory free
6.17 Gb Paging File | 4.55 Gb Available in Paging File | 73.77% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 172.69 Gb Total Space | 77.25 Gb Free Space | 44.73% Space Free | Partition Type: NTFS
Drive D: | 100.00 Mb Total Space | 64.18 Mb Free Space | 64.18% Space Free | Partition Type: NTFS
Drive E: | 195.31 Gb Total Space | 172.15 Gb Free Space | 88.14% Space Free | Partition Type: NTFS
Drive F: | 95.41 Gb Total Space | 79.64 Gb Free Space | 83.47% Space Free | Partition Type: NTFS
Drive J: | 22.19 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: KAMIL-PC | User Name: Joanna | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-08-15 23:42:59 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Users\Joanna\Desktop\OTL.exe
PRC - [2011-08-07 17:46:56 | 000,545,071 | ---- | M] () -- C:\Program Files\Ad-Remover\main.exe
PRC - [2011-05-27 21:22:33 | 000,253,952 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Program Files\blueconnect\DataCardMonitor.exe
PRC - [2011-05-27 21:22:33 | 000,114,688 | ---- | M] () -- C:\Program Files\blueconnect\blueconnect.exe
PRC - [2011-05-21 18:09:19 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010-10-10 18:52:44 | 000,202,256 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe
PRC - [2010-02-04 02:28:02 | 000,025,256 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxmsdmon.exe
PRC - [2010-02-04 02:27:55 | 000,672,424 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe
PRC - [2010-02-04 01:28:30 | 000,094,208 | ---- | M] (Lexmark International, Inc.) -- C:\Windows\System32\spool\drivers\w32x86\3\lxdxserv.exe
PRC - [2010-02-04 00:43:56 | 000,589,824 | ---- | M] ( ) -- C:\Windows\System32\lxdxcoms.exe
PRC - [2010-01-14 16:08:16 | 000,378,128 | ---- | M] (PC Tools) -- C:\Program Files\ThreatFire\TFTray.exe
PRC - [2010-01-14 16:08:12 | 000,070,928 | ---- | M] (PC Tools) -- C:\Program Files\ThreatFire\TFService.exe
PRC - [2009-12-18 02:30:48 | 000,039,424 | ---- | M] (Nullsoft) -- C:\Program Files\Winamp\winampa.exe
PRC - [2009-04-28 03:40:44 | 004,440,064 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe
PRC - [2008-12-24 16:52:08 | 000,068,136 | ---- | M] () -- C:\Program Files\Gigabyte\EasySaver\essvr.exe
PRC - [2008-10-24 21:51:16 | 000,468,224 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
PRC - [2008-10-24 21:50:00 | 001,451,264 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
PRC - [2007-06-27 18:04:00 | 001,213,736 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
PRC - [2007-06-27 18:03:40 | 000,152,872 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
PRC - [2006-11-02 11:45:52 | 000,173,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\wbemtest.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2011-08-07 17:46:56 | 000,545,071 | ---- | M] () -- C:\Program Files\Ad-Remover\main.exe
MOD - [2011-05-27 21:22:33 | 000,114,688 | ---- | M] () -- C:\Program Files\blueconnect\blueconnect.exe
MOD - [2011-05-21 18:09:19 | 001,874,904 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2010-05-23 14:49:04 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\e6001d416f7c468334934a2c6a41c631\System.Configuration.ni.dll
MOD - [2010-05-23 07:02:54 | 005,450,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\7208ffa39630e9b923331f9df0947a12\System.Xml.ni.dll
MOD - [2010-05-23 07:02:18 | 012,430,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\1941d7639299344ae28fb6b23da65247\System.Windows.Forms.ni.dll
MOD - [2010-05-23 07:02:06 | 001,587,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6312464f64727a2a50d5ce3fd73ad1bb\System.Drawing.ni.dll
MOD - [2010-05-23 07:00:55 | 007,868,416 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\52e1ea3c7491e05cda766d7b3ce3d559\System.ni.dll
MOD - [2010-05-23 07:00:47 | 011,486,720 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\17f572b09facdc5fda9431558eb7a26e\mscorlib.ni.dll
MOD - [2010-03-15 11:28:22 | 000,141,824 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2010-02-04 02:28:02 | 000,025,256 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxmsdmon.exe
MOD - [2010-02-04 02:27:55 | 000,672,424 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe
MOD - [2010-02-04 02:05:09 | 000,081,920 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxcaps.dll
MOD - [2010-02-04 02:04:53 | 000,380,928 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxscw.dll
MOD - [2010-02-04 02:04:52 | 000,782,336 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxdrs.dll
MOD - [2010-02-04 01:52:37 | 000,589,824 | ---- | M] () -- C:\Windows\System32\spool\drivers\w32x86\3\lxdxdatr.dll
MOD - [2010-02-04 01:52:33 | 000,069,632 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxcnv4.dll
MOD - [2010-02-02 04:30:16 | 000,036,864 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\app4r.monitor.core.dll
MOD - [2010-02-02 04:30:16 | 000,028,672 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\app4r.monitor.common.dll
MOD - [2010-02-02 04:29:04 | 000,061,440 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\app4r.devmons.mcmdevmon.dll
MOD - [2009-07-14 18:20:30 | 000,860,160 | ---- | M] () -- C:\Program Files\blueconnect\NDISAPI.dll
MOD - [2009-05-31 17:06:16 | 000,217,088 | ---- | M] () -- C:\Program Files\blueconnect\DeviceMgrUIPlugin.dll
MOD - [2009-05-31 15:07:52 | 000,159,744 | ---- | M] () -- C:\Program Files\blueconnect\SMSPlugin.dll
MOD - [2009-05-31 14:57:08 | 000,139,264 | ---- | M] () -- C:\Program Files\blueconnect\NetInfoPlugin.dll
MOD - [2009-05-20 11:41:28 | 000,061,440 | ---- | M] () -- C:\Program Files\blueconnect\SpeedManagerPlugin.dll
MOD - [2009-04-21 17:12:50 | 000,090,112 | ---- | M] () -- C:\Program Files\blueconnect\DialUpPlugin.dll
MOD - [2009-04-21 17:11:50 | 000,065,536 | ---- | M] () -- C:\Program Files\blueconnect\ConfigFilePlugin.dll
MOD - [2009-04-21 17:11:28 | 000,098,304 | ---- | M] () -- C:\Program Files\blueconnect\DeviceMgrPlugin.dll
MOD - [2009-03-10 20:08:16 | 000,155,648 | R--- | M] () -- C:\Program Files\blueconnect\DetectDev.dll
MOD - [2009-03-10 20:08:16 | 000,061,440 | R--- | M] () -- C:\Program Files\blueconnect\XCodec.dll
MOD - [2009-03-10 20:08:16 | 000,061,440 | R--- | M] () -- C:\Program Files\blueconnect\DeviceOperate.dll
MOD - [2009-03-10 20:08:14 | 000,561,152 | R--- | M] () -- C:\Program Files\blueconnect\atcomm.dll
MOD - [2009-02-03 04:15:28 | 003,771,296 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32.dll
MOD - [2009-01-09 11:31:54 | 000,139,264 | ---- | M] () -- C:\Program Files\blueconnect\LocaleMgrPlugin.dll
MOD - [2009-01-09 11:30:38 | 000,032,768 | ---- | M] () -- C:\Program Files\blueconnect\NotifyServicePlugin.dll
MOD - [2008-11-08 10:52:10 | 000,090,112 | R--- | M] () -- C:\Program Files\blueconnect\FileManager.dll
MOD - [2008-11-08 10:52:08 | 000,014,848 | R--- | M] () -- C:\Program Files\blueconnect\isaputrace.dll
MOD - [2007-11-22 04:55:48 | 000,011,776 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\app4r.devmons.mcmdevmon.autoplayutil.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2010-08-24 11:38:18 | 000,092,008 | ---- | M] (TomTom) [Disabled | Stopped] -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)
SRV - [2010-05-03 16:53:51 | 000,265,912 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2010-02-04 01:28:30 | 000,094,208 | ---- | M] () [Auto | Running] -- C:\Windows\System32\spool\DRIVERS\W32X86\3\\lxdxserv.exe -- (lxdxCATSCustConnectService)
SRV - [2010-02-04 00:43:56 | 000,589,824 | ---- | M] ( ) [Auto | Running] -- C:\Windows\System32\lxdxcoms.exe -- (lxdx_device)
SRV - [2010-01-14 16:08:12 | 000,070,928 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files\ThreatFire\TFService.exe -- (ThreatFire)
SRV - [2009-04-28 03:40:44 | 004,440,064 | ---- | M] () [Auto | Running] -- C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe -- (NVIDIA Performance Driver Service)
SRV - [2008-12-24 16:52:08 | 000,068,136 | ---- | M] () [Auto | Running] -- C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE -- (ES lite Service)
SRV - [2008-10-24 21:56:30 | 000,019,200 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv)
SRV - [2008-10-24 21:51:16 | 000,468,224 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
SRV - [2007-11-14 21:41:34 | 000,092,792 | ---- | M] (CACE Technologies) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental)
SRV - [2006-11-02 11:45:35 | 000,009,216 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\System32\regedt32.exe -- (NOD32FiXTemDono)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2011-08-17 13:53:51 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\gdrv.sys -- (gdrv)
DRV - [2010-04-03 22:55:32 | 011,573,800 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2010-01-14 16:08:30 | 000,059,664 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\TfSysMon.sys -- (TfSysMon)
DRV - [2010-01-14 16:08:28 | 000,051,984 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\TfFsMon.sys -- (TfFsMon)
DRV - [2010-01-14 16:08:28 | 000,033,552 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\TfNetMon.sys -- (TfNetMon)
DRV - [2009-06-22 19:38:22 | 000,102,912 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2009-06-22 19:26:04 | 000,100,736 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbdev.sys -- (hwusbdev)
DRV - [2008-12-10 10:37:46 | 000,135,680 | ---- | M] (Realtek Corporation                                            ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2008-10-24 21:53:28 | 000,034,824 | ---- | M] () [Kernel | System | Running] -- C:\Windows\System32\drivers\epfwtdir.sys -- (epfwtdir)
DRV - [2008-10-24 21:46:24 | 000,053,256 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\System32\drivers\easdrv.sys -- (easdrv)
DRV - [2008-10-24 21:45:32 | 000,039,944 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\eamon.sys -- (eamon)
DRV - [2007-11-14 21:40:58 | 000,034,448 | ---- | M] (CACE Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\npf.sys -- (NPF)
DRV - [2007-06-18 20:18:26 | 000,023,680 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\motmodem.sys -- (motmodem)
DRV - [2007-05-02 11:11:18 | 000,109,704 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_mdm.sys -- (ss_mdm)
DRV - [2007-05-02 11:11:18 | 000,015,112 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_mdfl.sys -- (ss_mdfl)
DRV - [2007-05-02 11:11:16 | 000,083,592 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bus.sys -- (ss_bus) SAMSUNG Mobile USB Device 1.0 driver (WDM)
DRV - [2007-04-24 09:33:46 | 000,100,488 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s125mgmt.sys -- (s125mgmt) Sony Ericsson Device 125 USB WMC Device Management Drivers (WDM)
DRV - [2007-04-24 09:33:46 | 000,098,696 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s125obex.sys -- (s125obex)
DRV - [2007-04-24 09:33:44 | 000,108,680 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s125mdm.sys -- (s125mdm)
DRV - [2007-04-24 09:33:42 | 000,015,112 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s125mdfl.sys -- (s125mdfl)
DRV - [2007-04-24 09:33:34 | 000,083,336 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s125bus.sys -- (s125bus) Sony Ericsson Device 125 driver (WDM)
DRV - [2006-09-24 15:28:46 | 000,005,248 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Boot | Running] -- C:\Windows\system32\speedfan.sys -- (speedfan)
DRV - [2006-07-24 16:05:00 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\Windows\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2005-08-17 07:46:26 | 000,093,872 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdm.sys -- (sscdmdm)
DRV - [2005-08-17 07:46:20 | 000,008,272 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV - [2005-08-17 07:45:00 | 000,058,352 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)
DRV - [2005-07-28 15:20:44 | 000,027,008 | ---- | M] (Siemens AG ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\siusbmod.sys -- (siusbmod)
DRV - [1996-04-03 21:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\system32\giveio.sys -- (giveio)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-2620197854-1719786493-1418023469-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = 
IE - HKU\S-1-5-21-2620197854-1719786493-1418023469-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = 
IE - HKU\S-1-5-21-2620197854-1719786493-1418023469-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/web?&o=13799&l=dis&q=
IE - HKU\S-1-5-21-2620197854-1719786493-1418023469-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-2620197854-1719786493-1418023469-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2620197854-1719786493-1418023469-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = :
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.startup.homepage: "about:home"
FF - prefs.js..extensions.enabledItems: DTToolbar@toolbarnet.com:1.1.2.0185
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.1.5
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..keyword.URL: "http://www.ask.com/web?&o=13795&l=dis&q="
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.775: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.775: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=1.0.0.0: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.775: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1: C:\Program Files\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010-10-10 18:53:29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}: C:\Program Files\SpeedBit Video Downloader\SPFireFox
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-07-31 14:31:02 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-06-16 13:25:12 | 000,000,000 | ---D | M]
 
[2010-12-02 16:17:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Joanna\AppData\Roaming\Mozilla\Extensions
[2010-12-02 16:17:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Joanna\AppData\Roaming\Mozilla\Extensions\home2@tomtom.com
[2011-08-16 14:16:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Joanna\AppData\Roaming\Mozilla\Firefox\Profiles\v7wn210l.default\extensions
[2010-07-06 13:36:57 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Joanna\AppData\Roaming\Mozilla\Firefox\Profiles\v7wn210l.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010-06-20 15:49:08 | 000,002,059 | ---- | M] () -- C:\Users\Joanna\AppData\Roaming\Mozilla\Firefox\Profiles\v7wn210l.default\searchplugins\daemon-search.xml
[2011-07-08 17:37:11 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011-04-25 19:44:53 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011-07-08 17:37:11 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
File not found (No name found) -- 
[2011-05-21 18:09:18 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011-05-04 04:52:23 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2009-12-18 02:31:54 | 000,063,488 | ---- | M] (Nullsoft) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
[2010-11-14 14:01:21 | 000,003,187 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\acpro.xml
[2011-05-21 18:09:20 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2011-05-21 18:09:20 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2011-05-21 18:09:20 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2011-05-21 18:09:20 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2011-05-21 18:09:20 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2011-05-21 18:09:20 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2006-09-18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Tonec Inc.)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Users\Kamil\AppData\Roaming\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.)
O3 - HKU\S-1-5-21-2620197854-1719786493-1418023469-1000\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O4 - HKLM..\Run: [DataCardMonitor] C:\Program Files\blueconnect\DataCardMonitor.exe (Huawei Technologies Co., Ltd.)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [lxdxamon] C:\Program Files\Lexmark 3600-4600 Series\lxdxamon.exe ()
O4 - HKLM..\Run: [lxdxmon.exe] C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe ()
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [ThreatFire] C:\Program Files\ThreatFire\TFTray.exe (PC Tools)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe (Nullsoft)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-2620197854-1719786493-1418023469-1000..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
O4 - HKU\S-1-5-21-2620197854-1719786493-1418023469-1000..\Run: [HW_OPENEYE_OUC_] C:\Program Files\blueconnect\UpdateDog\ouc.exe (Huawei Technologies Co., Ltd.)
O4 - HKU\S-1-5-21-2620197854-1719786493-1418023469-1000..\Run: [Nowe Gadu-Gadu] C:\Program Files\Nowe Gadu-Gadu\gg.exe (GG Network S.A.)
O4 - HKU\S-1-5-21-2620197854-1719786493-1418023469-1000..\RunOnce: [FlashPlayerUpdate] C:\Windows\System32\macromed\Flash\NPSWF32_FlashUtil.exe (Adobe Systems, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStartupSound = 0
O7 - HKU\S-1-5-21-2620197854-1719786493-1418023469-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O24 - Desktop WallPaper: C:\Users\Joanna\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\Joanna\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 | ---- | M] () - E:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2009-04-30 19:48:12 | 000,126,976 | R--- | M] (Huawei Technologies Co., Ltd.) - J:\AutoRun.exe -- [ CDFS ]
O32 - AutoRun File - [2009-05-03 19:59:04 | 000,000,045 | R--- | M] () - J:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-08-17 15:46:28 | 000,000,000 | ---D | C] -- C:\Users\Joanna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ad-Remover
[2011-08-17 15:46:21 | 000,000,000 | ---D | C] -- C:\Program Files\Ad-Remover
[2011-08-16 14:26:55 | 000,607,288 | ---- | C] (Duplex Secure Ltd.) -- C:\Users\Joanna\Desktop\SPTDinst-v178-x86.exe
[2011-08-15 23:42:15 | 000,579,584 | ---- | C] (OldTimer Tools) -- C:\Users\Joanna\Desktop\OTL.exe
[2011-08-14 23:21:54 | 000,000,000 | ---D | C] -- C:\Users\Joanna\AppData\Roaming\Malwarebytes
[2011-08-14 23:21:47 | 000,041,272 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2011-08-14 23:21:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011-08-14 23:21:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011-08-14 23:21:43 | 000,022,712 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011-08-14 23:21:43 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011-08-14 22:58:08 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2011-08-14 22:58:08 | 000,000,000 | ---D | C] -- C:\rsit
[2011-08-12 20:40:50 | 000,000,000 | ---D | C] -- C:\Users\Joanna\AppData\Roaming\Opera
[2011-08-12 20:40:50 | 000,000,000 | ---D | C] -- C:\Users\Joanna\AppData\Local\Opera
[2011-08-12 20:40:37 | 000,000,000 | ---D | C] -- C:\Program Files\Opera
[2011-08-12 20:15:17 | 000,000,000 | ---D | C] -- C:\Users\Joanna\AppData\Local\Google
[2011-08-11 21:05:21 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Speedbit
[2011-08-10 16:50:40 | 000,000,000 | ---D | C] -- C:\ProgramData\SpeedBit
[2011-08-10 16:50:39 | 000,172,032 | ---- | C] (Jin Hui    E-mail: jinhui@jcomsoft.com   Web: http://www.jcomsoft.com) -- C:\Windows\System32\AniGIF.ocx
[2011-08-10 13:33:25 | 000,000,000 | ---D | C] -- C:\Program Files\b
[2011-08-09 18:49:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
[2011-08-09 18:49:25 | 000,000,000 | ---D | C] -- C:\Program Files\WinPcap
[2011-08-09 18:49:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ace Password Sniffer
[2011-08-08 08:17:24 | 000,000,000 | ---D | C] -- C:\Program Files\Nowe Gadu-Gadu
[2011-08-07 19:35:17 | 000,000,000 | ---D | C] -- C:\Users\Joanna\AppData\Local\ElevatedDiagnostics
[2011-08-07 19:33:36 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell 1.0
[2011-08-07 19:33:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\WindowsPowerShell
[2011-08-07 15:11:26 | 000,000,000 | ---D | C] -- C:\Users\Joanna\AppData\Local\GHISLER
[2011-08-07 15:09:48 | 000,000,000 | ---D | C] -- C:\totalcmd
[2011-08-07 15:09:48 | 000,000,000 | ---D | C] -- C:\Users\Joanna\AppData\Roaming\GHISLER
[2011-08-05 16:02:22 | 000,135,680 | ---- | C] (Realtek Corporation                                            ) -- C:\Windows\System32\drivers\Rtlh86.sys
[2011-08-05 16:02:21 | 000,010,240 | ---- | C] (Realtek Semiconductor Corporation                           ) -- C:\Windows\System32\RtNicProp32.dll
[2011-08-05 16:01:52 | 000,000,000 | ---D | C] -- C:\Users\Joanna\AppData\Roaming\InstallShield
[2011-08-05 15:56:49 | 000,000,000 | ---D | C] -- C:\Windows\System32\RTCOM
[2011-08-05 15:55:46 | 000,319,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\DIFxAPI.dll
[2011-08-05 15:55:43 | 001,777,664 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\WavesLib.dll
[2011-08-05 15:55:43 | 000,339,968 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll
[2011-08-05 15:55:43 | 000,185,776 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSHD.dll
[2011-08-05 15:55:43 | 000,167,936 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSHP360.dll
[2011-08-05 15:55:43 | 000,135,168 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll
[2011-08-05 15:55:42 | 000,965,664 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkPgExt.dll
[2011-08-05 15:55:42 | 000,322,080 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkApoApi.dll
[2011-08-05 15:55:42 | 000,045,088 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoInst.dll
[2011-08-05 15:55:41 | 002,510,368 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkAPO.dll
[2011-08-05 15:55:40 | 000,551,456 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RTSndMgr.cpl
[2011-08-05 15:55:39 | 001,933,312 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioEQ.dll
[2011-08-05 15:55:39 | 000,159,744 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioAPO20.dll
[2011-08-05 15:55:39 | 000,126,976 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioAPO.dll
[2011-08-05 15:55:36 | 000,147,968 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\System32\FMAPO.dll
[2011-08-05 15:55:36 | 000,141,312 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTACap.dll
[2011-08-05 15:55:36 | 000,060,416 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTARen.dll
[2011-08-05 15:55:36 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2011-08-05 15:55:34 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp
[2011-08-05 15:55:33 | 000,528,384 | R--- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll
[2011-08-05 15:50:07 | 000,053,248 | R--- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\System32\CSVer.dll
[2011-08-05 15:50:07 | 000,000,000 | ---D | C] -- C:\Program Files\Intel
[2011-08-05 15:49:37 | 000,000,000 | ---D | C] -- C:\Intel
[2011-08-05 15:49:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
[2011-08-05 15:49:10 | 000,000,000 | ---D | C] -- C:\Program Files\Gigabyte
[2011-08-05 15:41:31 | 000,016,608 | ---- | C] (Windows (R) 2000 DDK provider) -- C:\Windows\gdrv.sys
[2011-08-04 01:24:25 | 000,000,000 | ---D | C] -- C:\Users\Joanna\AppData\Local\uTorrent
[2011-08-04 01:12:32 | 000,000,000 | ---D | C] -- C:\Program Files\uTorrent
[2011-08-04 01:09:07 | 000,000,000 | ---D | C] -- C:\Users\Joanna\AppData\Roaming\uTorrent
[2011-07-31 14:17:08 | 000,000,000 | ---D | C] -- C:\Users\Joanna\AppData\Roaming\WNR
[2011-07-23 23:07:37 | 000,000,000 | ---D | C] -- C:\Program Files\HD Tune Pro
[2011-07-23 22:16:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ThreatFire
[2011-07-23 22:16:16 | 000,059,664 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\TfSysMon.sys
[2011-07-23 22:16:16 | 000,051,984 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\TfFsMon.sys
[2011-07-23 22:16:16 | 000,033,552 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\TfNetMon.sys
[2011-07-23 22:16:14 | 000,000,000 | ---D | C] -- C:\Program Files\ThreatFire
[2011-07-23 22:16:14 | 000,000,000 | ---D | C] -- C:\ProgramData\PC Tools
[2011-07-20 16:29:09 | 000,000,000 | ---D | C] -- C:\Program Files\Yahoo!
[2011-07-20 16:29:01 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2011-07-20 15:52:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
[2011-07-20 15:52:27 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Download Manager
[2011-05-20 16:48:26 | 000,499,712 | ---- | C] (Microsoft Corporation) -- C:\Users\Joanna\AppData\Roaming\msvcp71.dll
[2011-05-20 16:48:26 | 000,401,462 | ---- | C] (Microsoft Corporation) -- C:\Users\Joanna\AppData\Roaming\msvcp60.dll
[2011-05-20 16:48:26 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Users\Joanna\AppData\Roaming\msvcr71.dll
[2011-05-20 16:48:26 | 000,151,552 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Users\Joanna\AppData\Roaming\XMessageBox.dll
[2011-05-20 16:48:25 | 001,060,864 | ---- | C] (Microsoft Corporation) -- C:\Users\Joanna\AppData\Roaming\mfc71.dll
[2011-05-20 16:48:25 | 001,047,552 | ---- | C] (Microsoft Corporation) -- C:\Users\Joanna\AppData\Roaming\MFC71u.dll
[2011-05-20 16:48:25 | 000,927,504 | ---- | C] (Microsoft Corporation) -- C:\Users\Joanna\AppData\Roaming\mfc40u.dll
[2010-05-02 18:54:23 | 000,053,248 | ---- | C] ( ) -- C:\Windows\System32\lxdxprox.dll
[2010-05-02 18:54:21 | 000,647,168 | ---- | C] ( ) -- C:\Windows\System32\lxdxpmui.dll
[2010-05-02 18:54:18 | 000,376,832 | ---- | C] ( ) -- C:\Windows\System32\lxdxcomm.dll
[2010-05-02 18:54:17 | 000,851,968 | ---- | C] ( ) -- C:\Windows\System32\lxdxcomc.dll
[2010-05-02 18:54:14 | 000,663,552 | ---- | C] ( ) -- C:\Windows\System32\lxdxhbn3.dll
[2010-05-02 18:54:12 | 000,360,448 | ---- | C] ( ) -- C:\Windows\System32\lxdxcfg.exe
[2010-05-02 18:54:12 | 000,315,392 | ---- | C] ( ) -- C:\Windows\System32\lxdxih.exe
[2010-05-02 18:52:50 | 000,438,272 | ---- | C] ( ) -- C:\Windows\System32\LXDXhcp.dll
[2010-05-02 18:52:50 | 000,364,544 | ---- | C] ( ) -- C:\Windows\System32\lxdxinpa.dll
[2010-05-02 18:52:50 | 000,339,968 | ---- | C] ( ) -- C:\Windows\System32\lxdxiesc.dll
[2010-05-02 18:52:49 | 001,105,920 | ---- | C] ( ) -- C:\Windows\System32\lxdxserv.dll
[2010-05-02 18:52:49 | 000,843,776 | ---- | C] ( ) -- C:\Windows\System32\lxdxusb1.dll
[2010-05-02 18:52:49 | 000,569,344 | ---- | C] ( ) -- C:\Windows\System32\lxdxlmpm.dll
[2010-05-02 18:52:47 | 000,589,824 | ---- | C] ( ) -- C:\Windows\System32\lxdxcoms.exe
[2010-05-02 18:51:49 | 000,409,600 | ---- | C] ( ) -- C:\Windows\System32\lxdxcoin.dll
[46 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[46 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-08-17 20:00:00 | 000,000,422 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{C2A7AFD6-ECE9-4E88-96F0-DD5714E66EE7}.job
[2011-08-17 19:57:35 | 000,003,552 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011-08-17 19:57:35 | 000,003,552 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011-08-17 19:53:35 | 003,670,016 | -HS- | M] () -- C:\Users\Joanna\NTUSER.DAT
[2011-08-17 15:46:28 | 000,001,636 | ---- | M] () -- C:\Users\Joanna\Desktop\Ad-Remover.lnk
[2011-08-17 15:40:03 | 001,563,105 | ---- | M] () -- C:\Users\Joanna\Desktop\AD-R.exe
[2011-08-17 14:01:08 | 000,716,948 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2011-08-17 14:01:08 | 000,618,410 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011-08-17 14:01:08 | 000,103,818 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011-08-17 13:54:12 | 000,106,389 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2011-08-17 13:54:12 | 000,106,389 | ---- | M] () -- C:\ProgramData\nvModes.001
[2011-08-17 13:53:51 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\Windows\gdrv.sys
[2011-08-17 13:53:50 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2011-08-17 13:53:47 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011-08-17 13:53:43 | 3219,644,416 | -HS- | M] () -- C:\hiberfil.sys
[2011-08-17 13:52:43 | 003,146,932 | -H-- | M] () -- C:\Users\Joanna\AppData\Local\IconCache.db
[2011-08-16 14:49:13 | 245,017,075 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2011-08-16 14:27:17 | 000,607,288 | ---- | M] (Duplex Secure Ltd.) -- C:\Users\Joanna\Desktop\SPTDinst-v178-x86.exe
[2011-08-16 14:10:05 | 000,302,592 | ---- | M] () -- C:\Users\Joanna\Desktop\5vgmhykl.exe
[2011-08-15 23:42:59 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Users\Joanna\Desktop\OTL.exe
[2011-08-14 23:21:47 | 000,000,866 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011-08-14 22:57:37 | 000,781,383 | ---- | M] () -- C:\Users\Joanna\Desktop\RSIT.exe
[2011-08-12 20:40:48 | 000,001,598 | ---- | M] () -- C:\Users\Joanna\Application Data\Microsoft\Internet Explorer\Quick Launch\Opera.lnk
[2011-08-10 17:20:58 | 000,026,112 | ---- | M] () -- C:\Users\Joanna\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-08-10 12:26:20 | 008,376,017 | ---- | M] () -- C:\Users\Joanna\Desktop\AVG PC Tuneup 2011 v10.0.0.23.rar
[2011-08-09 23:33:51 | 011,875,239 | ---- | M] () -- C:\Users\Joanna\Desktop\AVG PC Tuneup 2011PL.rar
[2011-08-09 20:59:48 | 000,160,234 | ---- | M] () -- C:\Users\Joanna\Desktop\zasady_przyjec_na_studia_na_rok_akademicki_2011_2012.pdf
[2011-08-09 20:18:42 | 000,100,432 | ---- | M] () -- C:\Users\Joanna\AppData\Local\GDIPFONTCACHEV1.DAT
[2011-08-09 20:10:17 | 000,371,128 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011-08-09 19:20:11 | 000,000,219 | ---- | M] () -- C:\Windows\win.ini
[2011-08-07 19:28:00 | 002,031,616 | ---- | M] () -- C:\Windows\ocsetup_install_MicrosoftWindowsPowerShell.etl
[2011-08-07 19:28:00 | 000,196,608 | ---- | M] () -- C:\Windows\ocsetup_cbs_install_MicrosoftWindowsPowerShell.perf
[2011-08-07 19:28:00 | 000,065,536 | ---- | M] () -- C:\Windows\ocsetup_cbs_install_MicrosoftWindowsPowerShell.dpx
[2011-08-05 19:32:06 | 000,000,010 | ---- | M] () -- C:\Windows\GSetup.ini
[2011-08-05 15:55:46 | 000,319,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\DIFxAPI.dll
[46 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[46 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-08-17 15:46:28 | 000,001,636 | ---- | C] () -- C:\Users\Joanna\Desktop\Ad-Remover.lnk
[2011-08-17 15:38:17 | 001,563,105 | ---- | C] () -- C:\Users\Joanna\Desktop\AD-R.exe
[2011-08-16 14:48:45 | 245,017,075 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2011-08-16 14:09:52 | 000,302,592 | ---- | C] () -- C:\Users\Joanna\Desktop\5vgmhykl.exe
[2011-08-14 23:21:47 | 000,000,866 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011-08-14 22:57:15 | 000,781,383 | ---- | C] () -- C:\Users\Joanna\Desktop\RSIT.exe
[2011-08-12 20:40:48 | 000,001,598 | ---- | C] () -- C:\Users\Joanna\Application Data\Microsoft\Internet Explorer\Quick Launch\Opera.lnk
[2011-08-12 20:40:48 | 000,001,586 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
[2011-08-10 12:19:35 | 008,376,017 | ---- | C] () -- C:\Users\Joanna\Desktop\AVG PC Tuneup 2011 v10.0.0.23.rar
[2011-08-09 23:23:28 | 011,875,239 | ---- | C] () -- C:\Users\Joanna\Desktop\AVG PC Tuneup 2011PL.rar
[2011-08-09 20:59:41 | 000,160,234 | ---- | C] () -- C:\Users\Joanna\Desktop\zasady_przyjec_na_studia_na_rok_akademicki_2011_2012.pdf
[2011-08-08 08:17:29 | 000,000,782 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nowe Gadu-Gadu.lnk
[2011-08-07 19:27:43 | 002,031,616 | ---- | C] () -- C:\Windows\ocsetup_install_MicrosoftWindowsPowerShell.etl
[2011-08-07 19:27:43 | 000,196,608 | ---- | C] () -- C:\Windows\ocsetup_cbs_install_MicrosoftWindowsPowerShell.perf
[2011-08-07 19:27:43 | 000,065,536 | ---- | C] () -- C:\Windows\ocsetup_cbs_install_MicrosoftWindowsPowerShell.dpx
[2011-08-07 15:09:48 | 000,000,545 | ---- | C] () -- C:\Windows\UC.PIF
[2011-08-07 15:09:48 | 000,000,545 | ---- | C] () -- C:\Windows\RAR.PIF
[2011-08-07 15:09:48 | 000,000,545 | ---- | C] () -- C:\Windows\PKZIP.PIF
[2011-08-07 15:09:48 | 000,000,545 | ---- | C] () -- C:\Windows\PKUNZIP.PIF
[2011-08-07 15:09:48 | 000,000,545 | ---- | C] () -- C:\Windows\NOCLOSE.PIF
[2011-08-07 15:09:48 | 000,000,545 | ---- | C] () -- C:\Windows\LHA.PIF
[2011-08-07 15:09:48 | 000,000,545 | ---- | C] () -- C:\Windows\ARJ.PIF
[2011-08-05 15:57:44 | 000,000,553 | R--- | C] () -- C:\Windows\USetup.iss
[2011-08-05 15:41:35 | 000,203,328 | R--- | C] () -- C:\Windows\GSetup.exe
[2011-08-05 15:41:35 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini
[2011-05-20 16:48:25 | 000,000,712 | ---- | C] () -- C:\Users\Joanna\AppData\Roaming\LiveUpdate.ini
[2010-11-13 20:51:11 | 000,258,048 | ---- | C] () -- C:\Windows\System32\libFLAC.dll
[2010-09-12 15:58:49 | 000,000,000 | ---- | C] () -- C:\ProgramData\LauncherAccess.dt
[2010-09-12 15:57:56 | 000,005,632 | ---- | C] () -- C:\Windows\System32\drivers\StarOpen.sys
[2010-06-17 06:28:26 | 000,106,389 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2010-06-17 06:28:26 | 000,106,389 | ---- | C] () -- C:\ProgramData\nvModes.001
[2010-06-12 19:14:30 | 000,002,560 | ---- | C] () -- C:\Windows\_MSRSTRT.EXE
[2010-06-05 14:52:35 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat
[2010-05-08 20:16:08 | 000,782,336 | ---- | C] () -- C:\Windows\System32\lxdxdrs.dll
[2010-05-08 20:16:08 | 000,081,920 | ---- | C] () -- C:\Windows\System32\lxdxcaps.dll
[2010-05-08 20:16:08 | 000,069,632 | ---- | C] () -- C:\Windows\System32\lxdxcnv4.dll
[2010-05-03 14:31:10 | 000,026,112 | ---- | C] () -- C:\Users\Joanna\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-05-03 02:56:42 | 000,100,432 | ---- | C] () -- C:\Users\Joanna\AppData\Local\GDIPFONTCACHEV1.DAT
[2010-05-03 02:56:24 | 000,000,680 | ---- | C] () -- C:\Users\Joanna\AppData\Local\d3d9caps.dat
[2010-05-02 18:54:13 | 000,208,896 | ---- | C] () -- C:\Windows\System32\lxdxgrd.dll
[2010-05-02 18:54:12 | 000,040,960 | ---- | C] () -- C:\Windows\System32\lxdxvs.dll
[2010-05-02 18:52:50 | 000,348,160 | ---- | C] () -- C:\Windows\System32\LXDXinst.dll
[2010-05-02 18:25:23 | 003,146,932 | -H-- | C] () -- C:\Users\Joanna\AppData\Local\IconCache.db
[2010-05-02 18:16:40 | 000,000,552 | ---- | C] () -- C:\Users\Joanna\AppData\Local\d3d8caps.dat
[2008-10-24 21:53:28 | 000,034,824 | ---- | C] () -- C:\Windows\System32\drivers\epfwtdir.sys
[2007-11-14 21:37:26 | 000,053,299 | ---- | C] () -- C:\Windows\System32\pthreadVC.dll
[2006-11-02 14:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006-11-02 14:47:37 | 000,371,128 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006-11-02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006-11-02 12:33:01 | 000,716,948 | ---- | C] () -- C:\Windows\System32\PerfStringBackup.INI
[2006-11-02 12:33:01 | 000,618,410 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006-11-02 12:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006-11-02 12:33:01 | 000,103,818 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006-11-02 12:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006-11-02 12:24:31 | 000,001,405 | ---- | C] () -- C:\Windows\msdfmap.ini
[2006-11-02 12:23:31 | 000,000,219 | ---- | C] () -- C:\Windows\win.ini
[2006-11-02 12:23:31 | 000,000,219 | ---- | C] () -- C:\Windows\system.ini
[2006-11-02 12:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006-11-02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006-11-02 10:23:38 | 000,055,858 | ---- | C] () -- C:\Windows\System32\tcpmon.ini
[2006-11-02 10:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006-11-02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006-11-02 09:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2006-11-02 09:22:43 | 000,099,999 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2006-11-02 09:22:43 | 000,018,271 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2006-11-02 09:10:37 | 000,053,536 | ---- | C] () -- C:\Windows\System32\dosx.exe
[2006-11-02 09:10:02 | 000,000,718 | ---- | C] () -- C:\Windows\System32\mscdexnt.exe
[2006-11-02 09:10:00 | 000,002,842 | ---- | C] () -- C:\Windows\System32\redir.exe
[2006-11-02 09:09:59 | 000,069,886 | ---- | C] () -- C:\Windows\System32\edit.com
[2006-11-02 09:09:59 | 000,019,694 | ---- | C] () -- C:\Windows\System32\GRAPHICS.COM
[2006-11-02 09:09:59 | 000,000,882 | ---- | C] () -- C:\Windows\System32\share.exe
[2006-11-02 09:09:59 | 000,000,882 | ---- | C] () -- C:\Windows\System32\fastopen.exe
[2006-11-02 09:09:57 | 000,014,710 | ---- | C] () -- C:\Windows\System32\KB16.COM
[2006-11-02 09:09:56 | 000,007,052 | ---- | C] () -- C:\Windows\System32\nlsfunc.exe
[2006-11-02 09:09:55 | 000,039,274 | ---- | C] () -- C:\Windows\System32\mem.exe
[2006-11-02 09:09:55 | 000,001,131 | ---- | C] () -- C:\Windows\System32\LOADFIX.COM
[2006-11-02 09:09:53 | 000,011,753 | ---- | C] () -- C:\Windows\System32\setver.exe
[2006-11-02 09:09:52 | 000,020,634 | ---- | C] () -- C:\Windows\System32\debug.exe
[2006-11-02 09:09:51 | 000,008,424 | ---- | C] () -- C:\Windows\System32\exe2bin.exe
[2006-11-02 09:09:50 | 000,012,642 | ---- | C] () -- C:\Windows\System32\edlin.exe
[2006-11-02 09:09:49 | 000,050,648 | ---- | C] () -- C:\Windows\System32\COMMAND.COM
[2006-11-02 09:09:49 | 000,012,498 | ---- | C] () -- C:\Windows\System32\append.exe
[2006-11-02 09:09:45 | 000,027,097 | ---- | C] () -- C:\Windows\System32\country.sys
[2006-11-02 09:09:44 | 000,042,809 | ---- | C] () -- C:\Windows\System32\KEY01.SYS
[2006-11-02 09:09:44 | 000,042,537 | ---- | C] () -- C:\Windows\System32\KEYBOARD.SYS
[2006-11-02 09:09:42 | 000,009,029 | ---- | C] () -- C:\Windows\System32\ANSI.SYS
[2006-11-02 09:09:41 | 000,004,768 | ---- | C] () -- C:\Windows\System32\HIMEM.SYS
[2006-11-02 09:09:40 | 000,029,274 | ---- | C] () -- C:\Windows\System32\NTDOS412.SYS
[2006-11-02 09:09:38 | 000,029,370 | ---- | C] () -- C:\Windows\System32\NTDOS411.SYS
[2006-11-02 09:09:35 | 000,029,146 | ---- | C] () -- C:\Windows\System32\NTDOS404.SYS
[2006-11-02 09:09:31 | 000,029,146 | ---- | C] () -- C:\Windows\System32\NTDOS804.SYS
[2006-11-02 09:09:29 | 000,027,866 | ---- | C] () -- C:\Windows\System32\NTDOS.SYS
[2006-11-02 09:09:26 | 000,035,536 | ---- | C] () -- C:\Windows\System32\NTIO412.SYS
[2006-11-02 09:09:24 | 000,035,776 | ---- | C] () -- C:\Windows\System32\NTIO411.SYS
[2006-11-02 09:09:23 | 000,034,672 | ---- | C] () -- C:\Windows\System32\NTIO404.SYS
[2006-11-02 09:09:22 | 000,034,672 | ---- | C] () -- C:\Windows\System32\NTIO804.SYS
[2006-11-02 09:09:20 | 000,033,952 | ---- | C] () -- C:\Windows\System32\NTIO.SYS
[2006-11-02 08:47:51 | 000,364,544 | ---- | C] () -- C:\Windows\System32\msjetoledb40.dll
[2006-11-02 08:25:08 | 000,013,312 | ---- | C] () -- C:\Windows\System32\win87em.dll
[1996-04-03 21:33:26 | 000,005,248 | ---- | C] () -- C:\Windows\System32\giveio.sys
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-06-30 09:46:00 | 000,000,000 | ---D | M] -- C:\Users\Guest\AppData\Roaming\blueconnect
[2010-05-02 18:14:14 | 000,000,000 | ---D | M] -- C:\Users\Joanna\AppData\Roaming\blueconnect
[2010-06-20 16:02:42 | 000,000,000 | ---D | M] -- C:\Users\Joanna\AppData\Roaming\DAEMON Tools Lite
[2011-08-07 15:09:48 | 000,000,000 | ---D | M] -- C:\Users\Joanna\AppData\Roaming\GHISLER
[2010-05-09 18:02:48 | 000,000,000 | ---D | M] -- C:\Users\Joanna\AppData\Roaming\Lexmark Productivity Studio
[2011-05-20 16:48:26 | 000,000,000 | ---D | M] -- C:\Users\Joanna\AppData\Roaming\log
[2011-07-16 14:11:27 | 000,000,000 | ---D | M] -- C:\Users\Joanna\AppData\Roaming\Nowe Gadu-Gadu
[2010-05-03 12:32:34 | 000,000,000 | ---D | M] -- C:\Users\Joanna\AppData\Roaming\OpenFM
[2011-08-12 20:40:50 | 000,000,000 | ---D | M] -- C:\Users\Joanna\AppData\Roaming\Opera
[2010-12-02 16:17:25 | 000,000,000 | ---D | M] -- C:\Users\Joanna\AppData\Roaming\TomTom
[2011-08-04 01:24:25 | 000,000,000 | ---D | M] -- C:\Users\Joanna\AppData\Roaming\uTorrent
[2011-07-31 14:17:08 | 000,000,000 | ---D | M] -- C:\Users\Joanna\AppData\Roaming\WNR
[2010-06-21 16:56:12 | 000,000,000 | ---D | M] -- C:\Users\Justyna\AppData\Roaming\blueconnect
[2010-06-22 15:32:05 | 000,000,000 | ---D | M] -- C:\Users\Justyna\AppData\Roaming\DAEMON Tools Lite
[2010-06-21 17:48:34 | 000,000,000 | ---D | M] -- C:\Users\Justyna\AppData\Roaming\Nowe Gadu-Gadu
[2010-06-22 14:36:54 | 000,000,000 | ---D | M] -- C:\Users\Justyna\AppData\Roaming\OpenFM
[2010-07-25 15:50:37 | 000,000,000 | ---D | M] -- C:\Users\Justyna\AppData\Roaming\PandoraRecovery
[2010-09-12 16:00:35 | 000,000,000 | ---D | M] -- C:\Users\Justyna\AppData\Roaming\Samsung
[2011-07-23 23:38:13 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\BinarySense
[2010-06-13 16:25:01 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\blueconnect
[2010-06-20 15:56:05 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\DAEMON Tools Lite
[2011-08-13 19:29:27 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\DMCache
[2010-07-17 10:09:22 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\GetRightToGo
[2011-07-23 23:07:47 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\HD Tune Pro
[2011-07-20 15:57:59 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\IDM
[2010-05-10 18:12:43 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\Lexmark Productivity Studio
[2011-05-20 16:48:26 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\log
[2011-02-16 17:29:46 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\Nowe Gadu-Gadu
[2010-05-02 21:43:33 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\OpenFM
[2010-05-15 13:04:29 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\Qrix
[2011-02-24 20:44:02 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\TomTom
[2011-08-09 18:17:10 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\uTorrent
[2011-03-04 22:33:55 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\Vso
[2011-02-24 15:03:57 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\WNR
[2011-08-17 13:52:47 | 000,032,596 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2011-08-17 20:00:00 | 000,000,422 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{C2A7AFD6-ECE9-4E88-96F0-DD5714E66EE7}.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 142 bytes -> C:\ProgramData\TEMP:0B4227B4
@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:9482CFB4
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:9E00596C
@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:2BE9FEFC

< End of report >