OTL logfile created on: 2011-08-18 21:17:57 - Run 3
OTL by OldTimer - Version 3.2.26.4     Folder = C:\Users\Joanna\Desktop
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd
 
3,00 Gb Total Physical Memory | 1,78 Gb Available Physical Memory | 59,39% Memory free
6,19 Gb Paging File | 4,96 Gb Available in Paging File | 80,02% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 172,69 Gb Total Space | 104,43 Gb Free Space | 60,47% Space Free | Partition Type: NTFS
Drive D: | 100,00 Mb Total Space | 63,11 Mb Free Space | 63,12% Space Free | Partition Type: NTFS
Drive E: | 195,31 Gb Total Space | 172,15 Gb Free Space | 88,14% Space Free | Partition Type: NTFS
Drive F: | 95,41 Gb Total Space | 79,64 Gb Free Space | 83,47% Space Free | Partition Type: NTFS
Drive J: | 22,19 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: KAMIL-PC | User Name: Kamil | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-08-15 23:42:59 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Users\Joanna\Desktop\OTL.exe
PRC - [2011-07-20 15:54:22 | 002,815,408 | ---- | M] (Tonec Inc.) -- C:\Program Files\Internet Download Manager\IDMan.exe
PRC - [2011-05-27 21:22:33 | 000,253,952 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Program Files\blueconnect\DataCardMonitor.exe
PRC - [2011-05-27 21:22:33 | 000,114,688 | ---- | M] () -- C:\Program Files\blueconnect\blueconnect.exe
PRC - [2010-10-10 18:52:44 | 000,202,256 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\Common Files\Real\Update_OB\realsched.exe
PRC - [2010-08-24 11:38:16 | 000,247,144 | ---- | M] (TomTom) -- C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe
PRC - [2010-02-04 02:28:02 | 000,025,256 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxmsdmon.exe
PRC - [2010-02-04 02:27:55 | 000,672,424 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe
PRC - [2010-02-04 01:28:30 | 000,094,208 | ---- | M] (Lexmark International, Inc.) -- C:\Windows\System32\spool\drivers\w32x86\3\lxdxserv.exe
PRC - [2010-02-04 00:43:56 | 000,589,824 | ---- | M] ( ) -- C:\Windows\System32\lxdxcoms.exe
PRC - [2010-01-14 16:08:16 | 000,378,128 | ---- | M] (PC Tools) -- C:\Program Files\ThreatFire\TFTray.exe
PRC - [2010-01-14 16:08:12 | 000,070,928 | ---- | M] (PC Tools) -- C:\Program Files\ThreatFire\TFService.exe
PRC - [2009-12-18 02:30:48 | 000,039,424 | ---- | M] (Nullsoft) -- C:\Program Files\Winamp\winampa.exe
PRC - [2009-04-28 03:40:44 | 004,440,064 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe
PRC - [2008-12-24 16:52:08 | 000,068,136 | ---- | M] () -- C:\Program Files\Gigabyte\EasySaver\essvr.exe
PRC - [2008-10-24 21:51:16 | 000,468,224 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
PRC - [2008-10-24 21:50:00 | 001,451,264 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
PRC - [2008-02-18 15:01:01 | 000,251,312 | ---- | M] (Tonec Inc.) -- C:\Program Files\Internet Download Manager\IEMonitor.exe
PRC - [2008-01-19 09:33:40 | 000,192,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsqmcons.exe
PRC - [2007-06-27 18:04:00 | 001,213,736 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
PRC - [2007-06-27 18:03:40 | 000,152,872 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2011-08-18 14:46:39 | 005,450,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\2920c7fb663a83e4fb7f6c12aab3c506\System.Xml.ni.dll
MOD - [2011-08-18 14:46:20 | 012,430,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\a0daec66e0abd4e1a7070da324598bf4\System.Windows.Forms.ni.dll
MOD - [2011-08-18 14:46:10 | 001,587,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5e32e7efd22748422dd180a08660b5c7\System.Drawing.ni.dll
MOD - [2011-08-18 14:43:35 | 007,949,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\8baeeeca91ee99f0a5dfb87129ab606c\System.ni.dll
MOD - [2011-08-17 23:38:25 | 011,486,720 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\c068708e16abf0be77a21b9f29817d83\mscorlib.ni.dll
MOD - [2011-05-27 21:22:33 | 000,114,688 | ---- | M] () -- C:\Program Files\blueconnect\blueconnect.exe
MOD - [2010-02-04 02:28:02 | 000,025,256 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxmsdmon.exe
MOD - [2010-02-04 02:27:55 | 000,672,424 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe
MOD - [2010-02-04 02:05:09 | 000,081,920 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxcaps.dll
MOD - [2010-02-04 02:04:53 | 000,380,928 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxscw.dll
MOD - [2010-02-04 02:04:52 | 000,782,336 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxdrs.dll
MOD - [2010-02-04 01:52:37 | 000,589,824 | ---- | M] () -- C:\Windows\System32\spool\drivers\w32x86\3\lxdxdatr.dll
MOD - [2010-02-04 01:52:33 | 000,069,632 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\lxdxcnv4.dll
MOD - [2010-02-02 04:30:16 | 000,036,864 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\app4r.monitor.core.dll
MOD - [2010-02-02 04:30:16 | 000,028,672 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\app4r.monitor.common.dll
MOD - [2010-02-02 04:29:04 | 000,061,440 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\app4r.devmons.mcmdevmon.dll
MOD - [2009-07-14 18:20:30 | 000,860,160 | ---- | M] () -- C:\Program Files\blueconnect\NDISAPI.dll
MOD - [2009-05-31 17:06:16 | 000,217,088 | ---- | M] () -- C:\Program Files\blueconnect\DeviceMgrUIPlugin.dll
MOD - [2009-05-31 15:07:52 | 000,159,744 | ---- | M] () -- C:\Program Files\blueconnect\SMSPlugin.dll
MOD - [2009-05-31 14:57:08 | 000,139,264 | ---- | M] () -- C:\Program Files\blueconnect\NetInfoPlugin.dll
MOD - [2009-05-20 11:41:28 | 000,061,440 | ---- | M] () -- C:\Program Files\blueconnect\SpeedManagerPlugin.dll
MOD - [2009-04-21 17:12:50 | 000,090,112 | ---- | M] () -- C:\Program Files\blueconnect\DialUpPlugin.dll
MOD - [2009-04-21 17:11:50 | 000,065,536 | ---- | M] () -- C:\Program Files\blueconnect\ConfigFilePlugin.dll
MOD - [2009-04-21 17:11:28 | 000,098,304 | ---- | M] () -- C:\Program Files\blueconnect\DeviceMgrPlugin.dll
MOD - [2009-03-10 20:08:16 | 000,155,648 | R--- | M] () -- C:\Program Files\blueconnect\DetectDev.dll
MOD - [2009-03-10 20:08:16 | 000,061,440 | R--- | M] () -- C:\Program Files\blueconnect\XCodec.dll
MOD - [2009-03-10 20:08:16 | 000,061,440 | R--- | M] () -- C:\Program Files\blueconnect\DeviceOperate.dll
MOD - [2009-03-10 20:08:14 | 000,561,152 | R--- | M] () -- C:\Program Files\blueconnect\atcomm.dll
MOD - [2009-01-09 11:31:54 | 000,139,264 | ---- | M] () -- C:\Program Files\blueconnect\LocaleMgrPlugin.dll
MOD - [2009-01-09 11:30:38 | 000,032,768 | ---- | M] () -- C:\Program Files\blueconnect\NotifyServicePlugin.dll
MOD - [2008-11-08 10:52:10 | 000,090,112 | R--- | M] () -- C:\Program Files\blueconnect\FileManager.dll
MOD - [2008-11-08 10:52:08 | 000,014,848 | R--- | M] () -- C:\Program Files\blueconnect\isaputrace.dll
MOD - [2008-07-27 20:03:14 | 000,425,984 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll
MOD - [2007-11-22 04:55:48 | 000,011,776 | ---- | M] () -- C:\Program Files\Lexmark 3600-4600 Series\app4r.devmons.mcmdevmon.autoplayutil.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2010-08-24 11:38:18 | 000,092,008 | ---- | M] (TomTom) [Disabled | Stopped] -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)
SRV - [2010-02-04 01:28:30 | 000,094,208 | ---- | M] () [Auto | Running] -- C:\Windows\System32\spool\DRIVERS\W32X86\3\\lxdxserv.exe -- (lxdxCATSCustConnectService)
SRV - [2010-02-04 00:43:56 | 000,589,824 | ---- | M] ( ) [Auto | Running] -- C:\Windows\System32\lxdxcoms.exe -- (lxdx_device)
SRV - [2010-01-14 16:08:12 | 000,070,928 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files\ThreatFire\TFService.exe -- (ThreatFire)
SRV - [2009-04-28 03:40:44 | 004,440,064 | ---- | M] () [Auto | Running] -- C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe -- (NVIDIA Performance Driver Service)
SRV - [2008-12-24 16:52:08 | 000,068,136 | ---- | M] () [Auto | Running] -- C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE -- (ES lite Service)
SRV - [2008-10-24 21:56:30 | 000,019,200 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv)
SRV - [2008-10-24 21:51:16 | 000,468,224 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
SRV - [2008-01-19 09:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007-11-14 21:41:34 | 000,092,792 | ---- | M] (CACE Technologies) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental)
SRV - [2006-11-02 11:45:35 | 000,009,216 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\System32\regedt32.exe -- (NOD32FiXTemDono)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2011-08-18 21:06:38 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\gdrv.sys -- (gdrv)
DRV - [2010-04-03 22:55:32 | 011,573,800 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2010-01-14 16:08:30 | 000,059,664 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\TfSysMon.sys -- (TfSysMon)
DRV - [2010-01-14 16:08:28 | 000,051,984 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\TfFsMon.sys -- (TfFsMon)
DRV - [2010-01-14 16:08:28 | 000,033,552 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\TfNetMon.sys -- (TfNetMon)
DRV - [2009-06-22 19:38:22 | 000,102,912 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2009-06-22 19:26:04 | 000,100,736 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbdev.sys -- (hwusbdev)
DRV - [2008-10-24 21:53:28 | 000,034,824 | ---- | M] () [Kernel | System | Running] -- C:\Windows\System32\drivers\epfwtdir.sys -- (epfwtdir)
DRV - [2008-10-24 21:46:24 | 000,053,256 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\System32\drivers\easdrv.sys -- (easdrv)
DRV - [2008-10-24 21:45:32 | 000,039,944 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\eamon.sys -- (eamon)
DRV - [2008-10-09 15:42:42 | 000,017,408 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\KMWDFILTER.sys -- (KMWDFILTER)
DRV - [2007-11-14 21:40:58 | 000,034,448 | ---- | M] (CACE Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\npf.sys -- (NPF)
DRV - [2007-06-25 05:37:24 | 000,084,480 | ---- | M] (Realtek Corporation                                            ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2007-06-18 20:18:26 | 000,023,680 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\motmodem.sys -- (motmodem)
DRV - [2007-05-02 11:11:18 | 000,109,704 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_mdm.sys -- (ss_mdm)
DRV - [2007-05-02 11:11:18 | 000,015,112 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_mdfl.sys -- (ss_mdfl)
DRV - [2007-05-02 11:11:16 | 000,083,592 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bus.sys -- (ss_bus) SAMSUNG Mobile USB Device 1.0 driver (WDM)
DRV - [2007-04-24 09:33:46 | 000,100,488 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s125mgmt.sys -- (s125mgmt) Sony Ericsson Device 125 USB WMC Device Management Drivers (WDM)
DRV - [2007-04-24 09:33:46 | 000,098,696 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s125obex.sys -- (s125obex)
DRV - [2007-04-24 09:33:44 | 000,108,680 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s125mdm.sys -- (s125mdm)
DRV - [2007-04-24 09:33:42 | 000,015,112 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s125mdfl.sys -- (s125mdfl)
DRV - [2007-04-24 09:33:34 | 000,083,336 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s125bus.sys -- (s125bus) Sony Ericsson Device 125 driver (WDM)
DRV - [2006-09-24 15:28:46 | 000,005,248 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Boot | Running] -- C:\Windows\system32\speedfan.sys -- (speedfan)
DRV - [2006-07-24 16:05:00 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\Windows\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2005-08-17 07:46:26 | 000,093,872 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdm.sys -- (sscdmdm)
DRV - [2005-08-17 07:46:20 | 000,008,272 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV - [2005-08-17 07:45:00 | 000,058,352 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)
DRV - [2005-07-28 15:20:44 | 000,027,008 | ---- | M] (Siemens AG ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\siusbmod.sys -- (siusbmod)
DRV - [1996-04-03 21:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\system32\giveio.sys -- (giveio)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.autocompletepro.com/?si=7148&bi=400
IE - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.autocompletepro.com/?si=7148&bi=400
IE - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.autocompletepro.com/?si=7148&bi=400
IE - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = http://search.autocompletepro.com/?si=7148&bi=400
IE - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.autocompletepro.com/?si=7148&bi=400
IE - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.autocompletepro.com/?si=7148&bi=400
IE - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://search.autocompletepro.com/?si=7148&bi=400
IE - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001\..\URLSearchHook: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = :
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultengine: "ACPro"
FF - prefs.js..browser.search.defaultenginename: "ACPro"
FF - prefs.js..browser.search.defaultthis.engineName: "Brothersoft Customized Web Search"
FF - prefs.js..browser.search.order.1: "ACPro"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.useDBForOrder: false
FF - prefs.js..browser.startup.homepage: "http://www.google.pl/"
FF - prefs.js..extensions.enabledItems: firefound@efinke.com:2.0.2
FF - prefs.js..extensions.enabledItems: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf}:2.7.1.3
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.1.5
FF - prefs.js..extensions.enabledItems: support@predictad.com:1.11
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2
FF - prefs.js..extensions.enabledItems: {e8de9422-3b2c-4243-bf6f-235da84d8ef8}:3.2.5.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.775: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.775: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=1.0.0.0: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.775: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1: C:\Program Files\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010-10-10 18:53:29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}: C:\Program Files\SpeedBit Video Downloader\SPFireFox
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-08-18 16:57:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-06-16 13:25:12 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\Kamil\AppData\Roaming\IDM\idmmzcc3 [2011-07-20 15:53:01 | 000,000,000 | ---D | M]
 
[2011-02-24 20:44:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kamil\AppData\Roaming\Mozilla\Extensions
[2011-02-24 20:44:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kamil\AppData\Roaming\Mozilla\Extensions\home2@tomtom.com
[2011-08-18 18:57:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kamil\AppData\Roaming\Mozilla\Firefox\Profiles\276webzn.default\extensions
[2010-06-03 10:09:07 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Kamil\AppData\Roaming\Mozilla\Firefox\Profiles\276webzn.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011-06-24 19:24:39 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\Kamil\AppData\Roaming\Mozilla\Firefox\Profiles\276webzn.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2011-07-08 17:37:11 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011-04-25 19:44:53 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011-07-08 17:37:11 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
File not found (No name found) -- 
() (No name found) -- C:\USERS\KAMIL\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\276WEBZN.DEFAULT\EXTENSIONS\FIREFOUND@EFINKE.COM.XPI
[2011-05-21 18:09:18 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011-05-04 04:52:23 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2009-12-18 02:31:54 | 000,063,488 | ---- | M] (Nullsoft) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
[2011-05-21 18:09:20 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2011-05-21 18:09:20 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2011-05-21 18:09:20 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2011-05-21 18:09:20 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2011-05-21 18:09:20 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2011-05-21 18:09:20 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2006-09-18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Tonec Inc.)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Users\Kamil\AppData\Roaming\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.)
O3 - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001\..\Toolbar\WebBrowser: (no name) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - No CLSID value found.
O3 - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001\..\Toolbar\WebBrowser: (no name) - {C86EB8A9-CCC2-4B6C-B75D-73576ED591BF} - No CLSID value found.
O4 - HKLM..\Run: [DataCardMonitor] C:\Program Files\blueconnect\DataCardMonitor.exe (Huawei Technologies Co., Ltd.)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [lxdxamon] C:\Program Files\Lexmark 3600-4600 Series\lxdxamon.exe ()
O4 - HKLM..\Run: [lxdxmon.exe] C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe ()
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\SkyTel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [ThreatFire] C:\Program Files\ThreatFire\TFTray.exe (PC Tools)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe (Nullsoft)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe ()
O4 - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
O4 - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001..\Run: [HW_OPENEYE_OUC_] C:\Program Files\blueconnect\UpdateDog\ouc.exe (Huawei Technologies Co., Ltd.)
O4 - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.)
O4 - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001..\Run: [Nowe Gadu-Gadu] C:\Program Files\Nowe Gadu-Gadu\gg.exe (GG Network S.A.)
O4 - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001..\Run: [PSwitch]  File not found
O4 - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001..\Run: [TomTomHOME.exe] C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStartupSound = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKU\S-1-5-21-2620197854-1719786493-1418023469-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O8 - Extra context menu item: Œci¹gnij przez IDM - C:\Program Files\Internet Download Manager\IEExt.htm ()
O8 - Extra context menu item: Œci¹gnij wszystkie linki przez IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: Œci¹gnij zawartoœæ wideo FLV przez IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm ()
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O24 - Desktop WallPaper: C:\Users\Kamil\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\Kamil\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 | ---- | M] () - E:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2009-04-30 19:48:12 | 000,126,976 | R--- | M] (Huawei Technologies Co., Ltd.) - J:\AutoRun.exe -- [ CDFS ]
O32 - AutoRun File - [2009-05-03 19:59:04 | 000,000,045 | R--- | M] () - J:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{04186600-627d-11e0-b197-df097a3335be}\Shell - "" = AutoRun
O33 - MountPoints2\{04186600-627d-11e0-b197-df097a3335be}\Shell\AutoRun\command - "" = J:\AutoRun.exe -- [2009-04-30 19:48:12 | 000,126,976 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{27566898-569e-11df-bfee-d3de2c625206}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RuNdLl32.EXE      .\RECYCLER\S-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx,ahaezedrn
O33 - MountPoints2\{39a645e4-564e-11df-8c9d-e55973a603a6}\Shell - "" = AutoRun
O33 - MountPoints2\{39a645e4-564e-11df-8c9d-e55973a603a6}\Shell\AutoRun\command - "" = M:\AutoRun.exe
O33 - MountPoints2\{572d93ee-8894-11e0-8c02-9fe460051270}\Shell - "" = AutoRun
O33 - MountPoints2\{572d93ee-8894-11e0-8c02-9fe460051270}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{572d93f9-8894-11e0-8c02-9fe460051270}\Shell - "" = AutoRun
O33 - MountPoints2\{572d93f9-8894-11e0-8c02-9fe460051270}\Shell\AutoRun\command - "" = M:\AutoRun.exe
O33 - MountPoints2\{5c51e90b-6994-11df-a7b1-8bb845ad608f}\Shell - "" = AutoRun
O33 - MountPoints2\{5c51e90b-6994-11df-a7b1-8bb845ad608f}\Shell\AutoRun\command - "" = M:\AutoRun.exe
O33 - MountPoints2\{70ddff11-7315-11df-bd36-acb235a1ce8e}\Shell - "" = AutoRun
O33 - MountPoints2\{70ddff11-7315-11df-bd36-acb235a1ce8e}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{712ef2bc-8c51-11e0-ab32-c792021b83f9}\Shell - "" = AutoRun
O33 - MountPoints2\{712ef2bc-8c51-11e0-ab32-c792021b83f9}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{712ef2c7-8c51-11e0-ab32-c792021b83f9}\Shell - "" = AutoRun
O33 - MountPoints2\{712ef2c7-8c51-11e0-ab32-c792021b83f9}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{90399f9c-b3cf-11e0-8ac7-e284709eb064}\Shell - "" = AutoRun
O33 - MountPoints2\{90399f9c-b3cf-11e0-8ac7-e284709eb064}\Shell\AutoRun\command - "" = J:\AutoRun.exe -- [2009-04-30 19:48:12 | 000,126,976 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{afe252cb-6c43-11e0-9a70-9448e961f527}\Shell - "" = AutoRun
O33 - MountPoints2\{afe252cb-6c43-11e0-9a70-9448e961f527}\Shell\AutoRun\command - "" = J:\AutoRun.exe -- [2009-04-30 19:48:12 | 000,126,976 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{e63afe2c-6850-11e0-9beb-b2749e00c86b}\Shell - "" = AutoRun
O33 - MountPoints2\{e63afe2c-6850-11e0-9beb-b2749e00c86b}\Shell\AutoRun\command - "" = J:\AutoRun.exe -- [2009-04-30 19:48:12 | 000,126,976 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{e73a22f0-94bb-11e0-83b2-944e1439b4c5}\Shell - "" = AutoRun
O33 - MountPoints2\{e73a22f0-94bb-11e0-83b2-944e1439b4c5}\Shell\AutoRun\command - "" = J:\AutoRun.exe -- [2009-04-30 19:48:12 | 000,126,976 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\J\Shell - "" = AutoRun
O33 - MountPoints2\J\Shell\AutoRun\command - "" = J:\AutoRun.exe -- [2009-04-30 19:48:12 | 000,126,976 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\L\Shell - "" = AutoRun
O33 - MountPoints2\L\Shell\AutoRun\command - "" = L:\AutoRun.exe
O33 - MountPoints2\M\Shell - "" = AutoRun
O33 - MountPoints2\M\Shell\AutoRun\command - "" = M:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-08-18 18:57:13 | 000,000,000 | ---D | C] -- C:\_OTL
[2011-08-18 14:28:02 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe
[2011-08-18 14:28:02 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll
[2011-08-18 14:28:02 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll
[2011-08-18 12:45:53 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Faultrep.dll
[2011-08-18 12:45:51 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dataclen.dll
[2011-08-18 12:45:51 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
[2011-08-18 12:05:12 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2011-08-18 12:01:22 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40.dll
[2011-08-18 12:01:22 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40u.dll
[2011-08-18 11:17:43 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scrobj.dll
[2011-08-18 11:17:43 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cscript.exe
[2011-08-18 10:48:58 | 000,671,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll
[2011-08-18 10:48:58 | 000,467,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011-08-18 10:48:58 | 000,389,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2011-08-18 10:48:57 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2011-08-18 10:48:57 | 000,380,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2011-08-18 10:48:57 | 000,230,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2011-08-18 10:48:57 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2011-08-18 10:48:56 | 001,383,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011-08-18 10:48:56 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieencode.dll
[2011-08-18 10:48:56 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011-08-18 10:48:56 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2011-08-18 10:44:37 | 003,548,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2011-08-18 10:44:36 | 003,600,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2011-08-18 10:44:16 | 008,147,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
[2011-08-18 10:43:43 | 000,292,864 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2011-08-18 10:43:43 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2011-08-18 10:43:43 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2011-08-18 10:43:36 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netevent.dll
[2011-08-18 10:43:14 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pacerprf.dll
[2011-08-18 10:42:58 | 001,169,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdclt.exe
[2011-08-18 10:42:40 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
[2011-08-18 10:42:38 | 002,042,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2011-08-18 10:42:26 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll
[2011-08-18 10:42:25 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
[2011-08-18 10:42:21 | 000,081,920 | ---- | C] (Radius Inc.) -- C:\Windows\System32\iccvid.dll
[2011-08-18 10:36:45 | 000,866,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpmde.dll
[2011-08-18 05:34:17 | 000,375,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2011-08-18 05:34:16 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
[2011-08-18 00:13:08 | 000,675,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gpprefcl.dll
[2011-08-17 23:25:37 | 000,000,000 | ---D | C] -- C:\PerfLogs
[2011-08-17 22:54:21 | 000,000,000 | ---D | C] -- C:\ad958f4208beb0bc59367581a1c0
[2011-08-17 15:46:21 | 000,000,000 | ---D | C] -- C:\Program Files\Ad-Remover
[2011-08-14 23:21:47 | 000,041,272 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2011-08-14 23:21:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011-08-14 23:21:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011-08-14 23:21:43 | 000,022,712 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011-08-14 23:21:43 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011-08-14 22:58:08 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2011-08-14 22:58:08 | 000,000,000 | ---D | C] -- C:\rsit
[2011-08-12 20:40:37 | 000,000,000 | ---D | C] -- C:\Program Files\Opera
[2011-08-11 21:05:21 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Speedbit
[2011-08-10 16:50:40 | 000,000,000 | ---D | C] -- C:\ProgramData\SpeedBit
[2011-08-10 16:50:39 | 000,172,032 | ---- | C] (Jin Hui    E-mail: jinhui@jcomsoft.com   Web: http://www.jcomsoft.com) -- C:\Windows\System32\AniGIF.ocx
[2011-08-10 13:33:25 | 000,000,000 | ---D | C] -- C:\Program Files\b
[2011-08-09 18:49:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
[2011-08-09 18:49:25 | 000,000,000 | ---D | C] -- C:\Program Files\WinPcap
[2011-08-09 18:49:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ace Password Sniffer
[2011-08-09 18:17:10 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\uTorrent
[2011-08-09 18:17:10 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Local\uTorrent
[2011-08-09 17:16:41 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Instalatory
[2011-08-08 08:17:24 | 000,000,000 | ---D | C] -- C:\Program Files\Nowe Gadu-Gadu
[2011-08-07 19:33:36 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell 1.0
[2011-08-07 19:33:36 | 000,000,000 | ---D | C] -- C:\Windows\System32\WindowsPowerShell
[2011-08-07 15:09:48 | 000,000,000 | ---D | C] -- C:\totalcmd
[2011-08-05 16:02:21 | 000,010,240 | ---- | C] (Realtek Semiconductor Corporation                           ) -- C:\Windows\System32\RtNicProp32.dll
[2011-08-05 15:56:49 | 000,000,000 | ---D | C] -- C:\Windows\System32\RTCOM
[2011-08-05 15:55:46 | 000,319,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\DIFxAPI.dll
[2011-08-05 15:55:43 | 001,777,664 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\WavesLib.dll
[2011-08-05 15:55:43 | 000,339,968 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSXT.dll
[2011-08-05 15:55:43 | 000,185,776 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSTSHD.dll
[2011-08-05 15:55:43 | 000,167,936 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSHP360.dll
[2011-08-05 15:55:43 | 000,135,168 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\System32\SRSWOW.dll
[2011-08-05 15:55:42 | 000,965,664 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkPgExt.dll
[2011-08-05 15:55:42 | 000,322,080 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkApoApi.dll
[2011-08-05 15:55:42 | 000,045,088 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkCoInst.dll
[2011-08-05 15:55:41 | 002,510,368 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtkAPO.dll
[2011-08-05 15:55:40 | 000,551,456 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RTSndMgr.cpl
[2011-08-05 15:55:39 | 001,933,312 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioEQ.dll
[2011-08-05 15:55:39 | 000,159,744 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioAPO20.dll
[2011-08-05 15:55:39 | 000,126,976 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\System32\MaxxAudioAPO.dll
[2011-08-05 15:55:36 | 000,147,968 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\System32\FMAPO.dll
[2011-08-05 15:55:36 | 000,141,312 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTACap.dll
[2011-08-05 15:55:36 | 000,060,416 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\System32\AERTARen.dll
[2011-08-05 15:55:36 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2011-08-05 15:55:34 | 000,000,000 | -H-D | C] -- C:\Program Files\Temp
[2011-08-05 15:55:33 | 000,528,384 | R--- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll
[2011-08-05 15:50:07 | 000,053,248 | R--- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\System32\CSVer.dll
[2011-08-05 15:50:07 | 000,000,000 | ---D | C] -- C:\Program Files\Intel
[2011-08-05 15:49:37 | 000,000,000 | ---D | C] -- C:\Intel
[2011-08-05 15:49:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
[2011-08-05 15:49:10 | 000,000,000 | ---D | C] -- C:\Program Files\Gigabyte
[2011-08-05 15:41:31 | 000,016,608 | ---- | C] (Windows (R) 2000 DDK provider) -- C:\Windows\gdrv.sys
[2011-08-04 01:12:32 | 000,000,000 | ---D | C] -- C:\Program Files\uTorrent
[2011-07-23 23:38:13 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\BinarySense
[2011-07-23 23:07:47 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\HD Tune Pro
[2011-07-23 23:07:37 | 000,000,000 | ---D | C] -- C:\Program Files\HD Tune Pro
[2011-07-23 22:16:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ThreatFire
[2011-07-23 22:16:16 | 000,059,664 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\TfSysMon.sys
[2011-07-23 22:16:16 | 000,051,984 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\TfFsMon.sys
[2011-07-23 22:16:16 | 000,033,552 | ---- | C] (PC Tools) -- C:\Windows\System32\drivers\TfNetMon.sys
[2011-07-23 22:16:14 | 000,000,000 | ---D | C] -- C:\Program Files\ThreatFire
[2011-07-23 22:16:14 | 000,000,000 | ---D | C] -- C:\ProgramData\PC Tools
[2011-07-21 22:55:04 | 000,000,000 | ---D | C] -- C:\Users\Kamil\Desktop\MemTest
[2011-07-20 16:29:09 | 000,000,000 | ---D | C] -- C:\Program Files\Yahoo!
[2011-07-20 16:29:02 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner
[2011-07-20 16:29:01 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2011-07-20 15:52:51 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\IDM
[2011-07-20 15:52:50 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\DMCache
[2011-07-20 15:52:39 | 000,000,000 | ---D | C] -- C:\Users\Kamil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
[2011-07-20 15:52:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
[2011-07-20 15:52:27 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Download Manager
[2011-05-20 16:48:26 | 000,499,712 | ---- | C] (Microsoft Corporation) -- C:\Users\Kamil\AppData\Roaming\msvcp71.dll
[2011-05-20 16:48:26 | 000,401,462 | ---- | C] (Microsoft Corporation) -- C:\Users\Kamil\AppData\Roaming\msvcp60.dll
[2011-05-20 16:48:26 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Users\Kamil\AppData\Roaming\msvcr71.dll
[2011-05-20 16:48:26 | 000,151,552 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Users\Kamil\AppData\Roaming\XMessageBox.dll
[2011-05-20 16:48:25 | 001,060,864 | ---- | C] (Microsoft Corporation) -- C:\Users\Kamil\AppData\Roaming\mfc71.dll
[2011-05-20 16:48:25 | 001,047,552 | ---- | C] (Microsoft Corporation) -- C:\Users\Kamil\AppData\Roaming\MFC71u.dll
[2011-05-20 16:48:25 | 000,983,040 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Users\Kamil\AppData\Roaming\LiveUpdate.exe
[2011-05-20 16:48:25 | 000,927,504 | ---- | C] (Microsoft Corporation) -- C:\Users\Kamil\AppData\Roaming\mfc40u.dll
[2010-05-02 18:54:23 | 000,053,248 | ---- | C] ( ) -- C:\Windows\System32\lxdxprox.dll
[2010-05-02 18:54:21 | 000,647,168 | ---- | C] ( ) -- C:\Windows\System32\lxdxpmui.dll
[2010-05-02 18:54:18 | 000,376,832 | ---- | C] ( ) -- C:\Windows\System32\lxdxcomm.dll
[2010-05-02 18:54:17 | 000,851,968 | ---- | C] ( ) -- C:\Windows\System32\lxdxcomc.dll
[2010-05-02 18:54:14 | 000,663,552 | ---- | C] ( ) -- C:\Windows\System32\lxdxhbn3.dll
[2010-05-02 18:54:12 | 000,360,448 | ---- | C] ( ) -- C:\Windows\System32\lxdxcfg.exe
[2010-05-02 18:54:12 | 000,315,392 | ---- | C] ( ) -- C:\Windows\System32\lxdxih.exe
[2010-05-02 18:52:50 | 000,438,272 | ---- | C] ( ) -- C:\Windows\System32\LXDXhcp.dll
[2010-05-02 18:52:50 | 000,364,544 | ---- | C] ( ) -- C:\Windows\System32\lxdxinpa.dll
[2010-05-02 18:52:50 | 000,339,968 | ---- | C] ( ) -- C:\Windows\System32\lxdxiesc.dll
[2010-05-02 18:52:49 | 001,105,920 | ---- | C] ( ) -- C:\Windows\System32\lxdxserv.dll
[2010-05-02 18:52:49 | 000,843,776 | ---- | C] ( ) -- C:\Windows\System32\lxdxusb1.dll
[2010-05-02 18:52:49 | 000,569,344 | ---- | C] ( ) -- C:\Windows\System32\lxdxlmpm.dll
[2010-05-02 18:52:47 | 000,589,824 | ---- | C] ( ) -- C:\Windows\System32\lxdxcoms.exe
[2010-05-02 18:51:49 | 000,409,600 | ---- | C] ( ) -- C:\Windows\System32\lxdxcoin.dll
[46 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[46 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-08-18 21:20:00 | 000,000,422 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{C2A7AFD6-ECE9-4E88-96F0-DD5714E66EE7}.job
[2011-08-18 21:19:05 | 003,670,016 | -HS- | M] () -- C:\Users\Kamil\NTUSER.DAT
[2011-08-18 21:13:55 | 000,690,960 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2011-08-18 21:13:55 | 000,595,446 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011-08-18 21:13:55 | 000,101,144 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011-08-18 21:07:00 | 000,106,357 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2011-08-18 21:06:59 | 000,106,357 | ---- | M] () -- C:\ProgramData\nvModes.001
[2011-08-18 21:06:39 | 000,003,664 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011-08-18 21:06:39 | 000,003,664 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011-08-18 21:06:38 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\Windows\gdrv.sys
[2011-08-18 21:06:37 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2011-08-18 21:06:35 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011-08-18 21:06:33 | 3219,644,416 | -HS- | M] () -- C:\hiberfil.sys
[2011-08-18 21:05:02 | 000,524,288 | -HS- | M] () -- C:\Users\Kamil\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms
[2011-08-18 21:05:02 | 000,065,536 | -HS- | M] () -- C:\Users\Kamil\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf
[2011-08-18 21:04:59 | 001,886,620 | -H-- | M] () -- C:\Users\Kamil\AppData\Local\IconCache.db
[2011-08-18 20:46:20 | 000,000,943 | ---- | M] () -- C:\Users\Kamil\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011-08-18 14:42:06 | 000,371,128 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011-08-17 23:37:12 | 000,000,749 | RH-- | M] () -- C:\Windows\WindowsShell.Manifest
[2011-08-17 23:02:00 | 000,101,888 | ---- | M] (Infineon Technologies AG) -- C:\Windows\System32\ifxcardm.dll
[2011-08-17 23:01:59 | 000,082,432 | ---- | M] (Gemalto, Inc.) -- C:\Windows\System32\axaltocm.dll
[2011-08-16 14:49:13 | 245,017,075 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2011-08-14 23:21:47 | 000,000,866 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011-08-14 22:32:36 | 000,030,552 | ---- | M] () -- C:\Users\Kamil\Documents\cc_20110814_2231-14sierpien2011.reg
[2011-08-09 19:45:37 | 000,100,432 | ---- | M] () -- C:\Users\Kamil\AppData\Local\GDIPFONTCACHEV1.DAT
[2011-08-09 19:20:11 | 000,000,219 | ---- | M] () -- C:\Windows\win.ini
[2011-08-09 19:16:40 | 000,000,102 | ---- | M] () -- C:\Users\Kamil\Desktop\DivFix.ini
[2011-08-09 17:24:11 | 000,028,672 | ---- | M] () -- C:\Users\Kamil\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-08-07 19:28:00 | 002,031,616 | ---- | M] () -- C:\Windows\ocsetup_install_MicrosoftWindowsPowerShell.etl
[2011-08-07 19:28:00 | 000,196,608 | ---- | M] () -- C:\Windows\ocsetup_cbs_install_MicrosoftWindowsPowerShell.perf
[2011-08-07 19:28:00 | 000,065,536 | ---- | M] () -- C:\Windows\ocsetup_cbs_install_MicrosoftWindowsPowerShell.dpx
[2011-08-05 19:32:06 | 000,000,010 | ---- | M] () -- C:\Windows\GSetup.ini
[2011-08-05 15:55:46 | 000,319,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\DIFxAPI.dll
[2011-07-31 20:31:31 | 000,025,974 | ---- | M] () -- C:\Users\Kamil\Documents\cc_20110731_2031.reg
[2011-07-27 19:05:03 | 000,023,878 | ---- | M] () -- C:\Users\Kamil\Documents\cc_20110727_1904.reg
[2011-07-24 20:52:37 | 000,001,906 | ---- | M] () -- C:\Users\Kamil\Documents\cc_20110724_2052.reg
[2011-07-24 20:51:50 | 000,003,662 | ---- | M] () -- C:\Users\Kamil\Documents\cc_20110724_2051.reg
[2011-07-23 23:34:07 | 000,074,306 | ---- | M] () -- C:\Users\Kamil\Documents\cc_20110723_2333.reg
[2011-07-23 22:16:17 | 000,000,727 | ---- | M] () -- C:\Users\Kamil\Application Data\Microsoft\Internet Explorer\Quick Launch\ThreatFire.lnk
[2011-07-20 18:47:16 | 000,073,446 | ---- | M] () -- C:\Users\Kamil\Documents\cc_20110720_1846.reg
[2011-07-20 16:29:02 | 000,001,630 | ---- | M] () -- C:\Users\Kamil\Desktop\CCleaner.lnk
[46 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[46 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-08-16 14:48:45 | 245,017,075 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2011-08-14 23:21:47 | 000,000,866 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011-08-14 22:32:21 | 000,030,552 | ---- | C] () -- C:\Users\Kamil\Documents\cc_20110814_2231-14sierpien2011.reg
[2011-08-12 20:40:48 | 000,001,586 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
[2011-08-09 19:16:40 | 000,000,102 | ---- | C] () -- C:\Users\Kamil\Desktop\DivFix.ini
[2011-08-08 08:17:29 | 000,000,782 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nowe Gadu-Gadu.lnk
[2011-08-07 19:27:43 | 002,031,616 | ---- | C] () -- C:\Windows\ocsetup_install_MicrosoftWindowsPowerShell.etl
[2011-08-07 19:27:43 | 000,196,608 | ---- | C] () -- C:\Windows\ocsetup_cbs_install_MicrosoftWindowsPowerShell.perf
[2011-08-07 19:27:43 | 000,065,536 | ---- | C] () -- C:\Windows\ocsetup_cbs_install_MicrosoftWindowsPowerShell.dpx
[2011-08-07 15:09:48 | 000,000,545 | ---- | C] () -- C:\Windows\UC.PIF
[2011-08-07 15:09:48 | 000,000,545 | ---- | C] () -- C:\Windows\RAR.PIF
[2011-08-07 15:09:48 | 000,000,545 | ---- | C] () -- C:\Windows\PKZIP.PIF
[2011-08-07 15:09:48 | 000,000,545 | ---- | C] () -- C:\Windows\PKUNZIP.PIF
[2011-08-07 15:09:48 | 000,000,545 | ---- | C] () -- C:\Windows\NOCLOSE.PIF
[2011-08-07 15:09:48 | 000,000,545 | ---- | C] () -- C:\Windows\LHA.PIF
[2011-08-07 15:09:48 | 000,000,545 | ---- | C] () -- C:\Windows\ARJ.PIF
[2011-08-05 15:57:44 | 000,000,553 | R--- | C] () -- C:\Windows\USetup.iss
[2011-08-05 15:41:35 | 000,203,328 | R--- | C] () -- C:\Windows\GSetup.exe
[2011-08-05 15:41:35 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini
[2011-07-31 20:31:26 | 000,025,974 | ---- | C] () -- C:\Users\Kamil\Documents\cc_20110731_2031.reg
[2011-07-27 19:04:53 | 000,023,878 | ---- | C] () -- C:\Users\Kamil\Documents\cc_20110727_1904.reg
[2011-07-24 20:52:28 | 000,001,906 | ---- | C] () -- C:\Users\Kamil\Documents\cc_20110724_2052.reg
[2011-07-24 20:51:31 | 000,003,662 | ---- | C] () -- C:\Users\Kamil\Documents\cc_20110724_2051.reg
[2011-07-23 23:33:59 | 000,074,306 | ---- | C] () -- C:\Users\Kamil\Documents\cc_20110723_2333.reg
[2011-07-23 22:16:17 | 000,000,727 | ---- | C] () -- C:\Users\Kamil\Application Data\Microsoft\Internet Explorer\Quick Launch\ThreatFire.lnk
[2011-07-20 18:46:30 | 000,073,446 | ---- | C] () -- C:\Users\Kamil\Documents\cc_20110720_1846.reg
[2011-07-20 16:29:02 | 000,001,630 | ---- | C] () -- C:\Users\Kamil\Desktop\CCleaner.lnk
[2011-05-20 16:48:25 | 000,000,712 | ---- | C] () -- C:\Users\Kamil\AppData\Roaming\LiveUpdate.ini
[2011-03-04 22:33:53 | 000,000,668 | ---- | C] () -- C:\Users\Kamil\AppData\Roaming\vso_ts_preview.xml
[2010-11-13 20:51:11 | 000,258,048 | ---- | C] () -- C:\Windows\System32\libFLAC.dll
[2010-10-10 18:59:51 | 001,886,620 | -H-- | C] () -- C:\Users\Kamil\AppData\Local\IconCache.db
[2010-09-12 15:58:49 | 000,000,000 | ---- | C] () -- C:\ProgramData\LauncherAccess.dt
[2010-09-12 15:57:56 | 000,005,632 | ---- | C] () -- C:\Windows\System32\drivers\StarOpen.sys
[2010-06-17 06:28:26 | 000,106,357 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2010-06-17 06:28:26 | 000,106,357 | ---- | C] () -- C:\ProgramData\nvModes.001
[2010-06-16 17:13:26 | 000,368,640 | ---- | C] () -- C:\Windows\System32\msjetoledb40.dll
[2010-06-16 17:13:03 | 000,100,043 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2010-06-16 17:12:57 | 000,060,124 | ---- | C] () -- C:\Windows\System32\tcpmon.ini
[2010-06-12 19:14:30 | 000,002,560 | ---- | C] () -- C:\Windows\_MSRSTRT.EXE
[2010-06-05 14:52:35 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat
[2010-05-08 20:16:08 | 000,782,336 | ---- | C] () -- C:\Windows\System32\lxdxdrs.dll
[2010-05-08 20:16:08 | 000,081,920 | ---- | C] () -- C:\Windows\System32\lxdxcaps.dll
[2010-05-08 20:16:08 | 000,069,632 | ---- | C] () -- C:\Windows\System32\lxdxcnv4.dll
[2010-05-02 20:39:37 | 000,000,552 | ---- | C] () -- C:\Users\Kamil\AppData\Local\d3d8caps.dat
[2010-05-02 20:39:29 | 000,028,672 | ---- | C] () -- C:\Users\Kamil\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-05-02 20:38:10 | 000,100,432 | ---- | C] () -- C:\Users\Kamil\AppData\Local\GDIPFONTCACHEV1.DAT
[2010-05-02 20:36:56 | 000,000,680 | ---- | C] () -- C:\Users\Kamil\AppData\Local\d3d9caps.dat
[2010-05-02 18:54:13 | 000,208,896 | ---- | C] () -- C:\Windows\System32\lxdxgrd.dll
[2010-05-02 18:54:12 | 000,040,960 | ---- | C] () -- C:\Windows\System32\lxdxvs.dll
[2010-05-02 18:52:50 | 000,348,160 | ---- | C] () -- C:\Windows\System32\LXDXinst.dll
[2008-10-24 21:53:28 | 000,034,824 | ---- | C] () -- C:\Windows\System32\drivers\epfwtdir.sys
[2007-11-14 21:37:26 | 000,053,299 | ---- | C] () -- C:\Windows\System32\pthreadVC.dll
[2006-11-02 14:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006-11-02 14:47:37 | 000,371,128 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006-11-02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006-11-02 12:33:01 | 000,690,960 | ---- | C] () -- C:\Windows\System32\PerfStringBackup.INI
[2006-11-02 12:33:01 | 000,595,446 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006-11-02 12:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006-11-02 12:33:01 | 000,101,144 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006-11-02 12:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006-11-02 12:24:31 | 000,001,405 | ---- | C] () -- C:\Windows\msdfmap.ini
[2006-11-02 12:23:31 | 000,000,219 | ---- | C] () -- C:\Windows\win.ini
[2006-11-02 12:23:31 | 000,000,219 | ---- | C] () -- C:\Windows\system.ini
[2006-11-02 12:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006-11-02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006-11-02 10:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006-11-02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006-11-02 09:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2006-11-02 09:22:43 | 000,018,271 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2006-11-02 09:10:37 | 000,053,536 | ---- | C] () -- C:\Windows\System32\dosx.exe
[2006-11-02 09:10:02 | 000,000,718 | ---- | C] () -- C:\Windows\System32\mscdexnt.exe
[2006-11-02 09:10:00 | 000,002,842 | ---- | C] () -- C:\Windows\System32\redir.exe
[2006-11-02 09:09:59 | 000,069,886 | ---- | C] () -- C:\Windows\System32\edit.com
[2006-11-02 09:09:59 | 000,019,694 | ---- | C] () -- C:\Windows\System32\GRAPHICS.COM
[2006-11-02 09:09:59 | 000,000,882 | ---- | C] () -- C:\Windows\System32\share.exe
[2006-11-02 09:09:59 | 000,000,882 | ---- | C] () -- C:\Windows\System32\fastopen.exe
[2006-11-02 09:09:57 | 000,014,710 | ---- | C] () -- C:\Windows\System32\KB16.COM
[2006-11-02 09:09:56 | 000,007,052 | ---- | C] () -- C:\Windows\System32\nlsfunc.exe
[2006-11-02 09:09:55 | 000,039,274 | ---- | C] () -- C:\Windows\System32\mem.exe
[2006-11-02 09:09:55 | 000,001,131 | ---- | C] () -- C:\Windows\System32\LOADFIX.COM
[2006-11-02 09:09:53 | 000,011,753 | ---- | C] () -- C:\Windows\System32\setver.exe
[2006-11-02 09:09:52 | 000,020,634 | ---- | C] () -- C:\Windows\System32\debug.exe
[2006-11-02 09:09:51 | 000,008,424 | ---- | C] () -- C:\Windows\System32\exe2bin.exe
[2006-11-02 09:09:50 | 000,012,642 | ---- | C] () -- C:\Windows\System32\edlin.exe
[2006-11-02 09:09:49 | 000,050,648 | ---- | C] () -- C:\Windows\System32\COMMAND.COM
[2006-11-02 09:09:49 | 000,012,498 | ---- | C] () -- C:\Windows\System32\append.exe
[2006-11-02 09:09:45 | 000,027,097 | ---- | C] () -- C:\Windows\System32\country.sys
[2006-11-02 09:09:44 | 000,042,809 | ---- | C] () -- C:\Windows\System32\KEY01.SYS
[2006-11-02 09:09:44 | 000,042,537 | ---- | C] () -- C:\Windows\System32\KEYBOARD.SYS
[2006-11-02 09:09:42 | 000,009,029 | ---- | C] () -- C:\Windows\System32\ANSI.SYS
[2006-11-02 09:09:41 | 000,004,768 | ---- | C] () -- C:\Windows\System32\HIMEM.SYS
[2006-11-02 09:09:40 | 000,029,274 | ---- | C] () -- C:\Windows\System32\NTDOS412.SYS
[2006-11-02 09:09:38 | 000,029,370 | ---- | C] () -- C:\Windows\System32\NTDOS411.SYS
[2006-11-02 09:09:35 | 000,029,146 | ---- | C] () -- C:\Windows\System32\NTDOS404.SYS
[2006-11-02 09:09:31 | 000,029,146 | ---- | C] () -- C:\Windows\System32\NTDOS804.SYS
[2006-11-02 09:09:29 | 000,027,866 | ---- | C] () -- C:\Windows\System32\NTDOS.SYS
[2006-11-02 09:09:26 | 000,035,536 | ---- | C] () -- C:\Windows\System32\NTIO412.SYS
[2006-11-02 09:09:24 | 000,035,776 | ---- | C] () -- C:\Windows\System32\NTIO411.SYS
[2006-11-02 09:09:23 | 000,034,672 | ---- | C] () -- C:\Windows\System32\NTIO404.SYS
[2006-11-02 09:09:22 | 000,034,672 | ---- | C] () -- C:\Windows\System32\NTIO804.SYS
[2006-11-02 09:09:20 | 000,033,952 | ---- | C] () -- C:\Windows\System32\NTIO.SYS
[2006-11-02 08:25:08 | 000,013,312 | ---- | C] () -- C:\Windows\System32\win87em.dll
[1996-04-03 21:33:26 | 000,005,248 | ---- | C] () -- C:\Windows\System32\giveio.sys
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-06-30 09:46:00 | 000,000,000 | ---D | M] -- C:\Users\Guest\AppData\Roaming\blueconnect
[2010-05-02 18:14:14 | 000,000,000 | ---D | M] -- C:\Users\Joanna\AppData\Roaming\blueconnect
[2010-06-20 16:02:42 | 000,000,000 | ---D | M] -- C:\Users\Joanna\AppData\Roaming\DAEMON Tools Lite
[2011-08-07 15:09:48 | 000,000,000 | ---D | M] -- C:\Users\Joanna\AppData\Roaming\GHISLER
[2010-05-09 18:02:48 | 000,000,000 | ---D | M] -- C:\Users\Joanna\AppData\Roaming\Lexmark Productivity Studio
[2011-05-20 16:48:26 | 000,000,000 | ---D | M] -- C:\Users\Joanna\AppData\Roaming\log
[2011-07-16 14:11:27 | 000,000,000 | ---D | M] -- C:\Users\Joanna\AppData\Roaming\Nowe Gadu-Gadu
[2010-05-03 12:32:34 | 000,000,000 | ---D | M] -- C:\Users\Joanna\AppData\Roaming\OpenFM
[2011-08-12 20:40:50 | 000,000,000 | ---D | M] -- C:\Users\Joanna\AppData\Roaming\Opera
[2010-12-02 16:17:25 | 000,000,000 | ---D | M] -- C:\Users\Joanna\AppData\Roaming\TomTom
[2011-08-04 01:24:25 | 000,000,000 | ---D | M] -- C:\Users\Joanna\AppData\Roaming\uTorrent
[2011-07-31 14:17:08 | 000,000,000 | ---D | M] -- C:\Users\Joanna\AppData\Roaming\WNR
[2010-06-21 16:56:12 | 000,000,000 | ---D | M] -- C:\Users\Justyna\AppData\Roaming\blueconnect
[2010-06-22 15:32:05 | 000,000,000 | ---D | M] -- C:\Users\Justyna\AppData\Roaming\DAEMON Tools Lite
[2010-06-21 17:48:34 | 000,000,000 | ---D | M] -- C:\Users\Justyna\AppData\Roaming\Nowe Gadu-Gadu
[2010-06-22 14:36:54 | 000,000,000 | ---D | M] -- C:\Users\Justyna\AppData\Roaming\OpenFM
[2010-07-25 15:50:37 | 000,000,000 | ---D | M] -- C:\Users\Justyna\AppData\Roaming\PandoraRecovery
[2010-09-12 16:00:35 | 000,000,000 | ---D | M] -- C:\Users\Justyna\AppData\Roaming\Samsung
[2011-07-23 23:38:13 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\BinarySense
[2010-06-13 16:25:01 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\blueconnect
[2010-06-20 15:56:05 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\DAEMON Tools Lite
[2011-08-18 21:06:59 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\DMCache
[2010-07-17 10:09:22 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\GetRightToGo
[2011-07-23 23:07:47 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\HD Tune Pro
[2011-07-20 15:57:59 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\IDM
[2010-05-10 18:12:43 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\Lexmark Productivity Studio
[2011-05-20 16:48:26 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\log
[2011-02-16 17:29:46 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\Nowe Gadu-Gadu
[2010-05-02 21:43:33 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\OpenFM
[2010-05-15 13:04:29 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\Qrix
[2011-02-24 20:44:02 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\TomTom
[2011-08-09 18:17:10 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\uTorrent
[2011-03-04 22:33:55 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\Vso
[2011-02-24 15:03:57 | 000,000,000 | ---D | M] -- C:\Users\Kamil\AppData\Roaming\WNR
[2011-08-18 21:05:12 | 000,032,596 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2011-08-18 21:20:00 | 000,000,422 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{C2A7AFD6-ECE9-4E88-96F0-DD5714E66EE7}.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 142 bytes -> C:\ProgramData\TEMP:0B4227B4
@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:9482CFB4
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:9E00596C
@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:2BE9FEFC

< End of report >