OTL logfile created on: 2011-08-24 18:10:32 - Run 1
OTL by OldTimer - Version 3.2.26.5     Folder = C:\Users\admin\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19120)
Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 0,37 Gb Available Physical Memory | 18,67% Memory free
4,23 Gb Paging File | 2,46 Gb Available in Paging File | 58,12% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 46,57 Gb Total Space | 3,97 Gb Free Space | 8,52% Space Free | Partition Type: NTFS
Drive D: | 71,62 Gb Total Space | 47,47 Gb Free Space | 66,28% Space Free | Partition Type: NTFS
Drive F: | 56,61 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: KRYSTIAN-PC | User Name: admin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 7 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-08-24 18:08:27 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\admin\Desktop\OTL.exe
PRC - [2011-04-20 10:50:48 | 002,848,144 | ---- | M] (Sony Corporation) -- C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe
PRC - [2011-01-05 17:04:28 | 000,274,608 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\real\realplayer\Update\realsched.exe
PRC - [2010-12-09 12:45:58 | 000,074,752 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Winamp\winampa.exe
PRC - [2010-11-22 14:15:14 | 018,630,656 | ---- | M] (Redefine Sp z o.o.) -- C:\Program Files\ipla\ipla.exe
PRC - [2010-10-13 17:21:08 | 000,111,928 | R--- | M] (SweetIM Technologies Ltd.) -- C:\Program Files\SweetIM\Messenger\SweetIM.exe
PRC - [2010-07-07 10:46:46 | 012,382,816 | ---- | M] (GG Network S.A.) -- C:\Program Files\Gadu-Gadu 10\gg.exe
PRC - [2010-07-04 02:34:17 | 000,231,888 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashUtil10h_ActiveX.exe
PRC - [2010-01-08 01:36:58 | 000,974,848 | ---- | M] (Spigot, Inc.) -- C:\Program Files\Search Settings\SearchSettings.exe
PRC - [2010-01-08 00:51:02 | 000,380,928 | ---- | M] (Spigot, Inc.) -- C:\Program Files\Application Updater\ApplicationUpdater.exe
PRC - [2009-04-11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009-02-28 19:39:04 | 000,516,096 | ---- | M] (Gadwin Systems, Inc) -- C:\Program Files\Gadwin Systems\PrintScreenPro\PrintScreenPro.exe
PRC - [2009-01-18 18:31:24 | 000,140,568 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
PRC - [2009-01-18 18:31:14 | 000,455,960 | ---- | M] (Acronis) -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
PRC - [2007-07-11 15:57:42 | 000,880,640 | R--- | M] (Sony Ericsson Mobile Communications AB) -- C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
PRC - [2007-06-13 08:16:02 | 000,528,384 | R--- | M] () -- C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
PRC - [2007-03-16 03:23:20 | 000,983,040 | R--- | M] (Teleca AB) -- C:\Program Files\Common Files\Teleca Shared\Generic.exe
PRC - [2007-02-13 20:24:44 | 000,135,216 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec AntiVirus\VPTray.exe
PRC - [2007-02-13 20:23:22 | 001,984,048 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec AntiVirus\Rtvscan.exe
PRC - [2007-02-13 20:22:40 | 000,030,768 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec AntiVirus\DefWatch.exe
PRC - [2006-11-25 09:29:44 | 002,134,016 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
PRC - [2006-11-25 03:58:38 | 000,919,672 | ---- | M] (Sony Corporation) -- C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
PRC - [2006-11-24 20:36:54 | 000,182,392 | ---- | M] (Sony Corporation) -- C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
PRC - [2006-11-24 20:36:54 | 000,100,472 | ---- | M] (Sony Corporation) -- C:\Program Files\Sony\VAIO Event Service\VESMgrSub.exe
PRC - [2006-11-22 18:12:36 | 000,107,112 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccApp.exe
PRC - [2006-11-22 18:12:16 | 000,107,624 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
PRC - [2006-11-14 20:46:24 | 000,411,768 | ---- | M] (Sony Corporation) -- C:\Program Files\Sony\VAIO Camera Utility\VCUServe.exe
PRC - [2006-10-31 23:40:16 | 000,077,824 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
PRC - [2006-10-27 21:13:48 | 000,270,336 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe
PRC - [2006-09-27 00:48:36 | 000,172,032 | ---- | M] (Sony Corporation) -- C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
PRC - [2006-09-27 00:46:58 | 000,135,168 | ---- | M] (Sony Corporation) -- C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
PRC - [2006-09-13 16:29:46 | 000,274,432 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
PRC - [2006-09-11 09:23:22 | 000,118,784 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\Apoint\Apoint.exe
PRC - [2006-09-08 08:06:08 | 000,040,960 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\Apoint\ApntEx.exe
PRC - [2006-09-08 07:54:30 | 000,042,544 | ---- | M] (Alps Electric Co., Ltd.) -- C:\Program Files\Apoint\ApMsgFwd.exe
PRC - [2006-08-23 22:43:08 | 000,274,432 | ---- | M] (Sony Corporation) -- C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
PRC - [2006-01-24 00:14:10 | 000,069,632 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
PRC - [2001-06-20 15:57:00 | 000,315,392 | ---- | M] () -- C:\Windows\twain_32\ScanWiz5\SDII.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2010-11-22 13:31:44 | 000,267,264 | ---- | M] () -- C:\Program Files\ipla\MediaFileScanner.dll
MOD - [2010-11-22 13:30:34 | 000,386,560 | ---- | M] () -- C:\Program Files\ipla\jabberoo.dll
MOD - [2010-11-22 13:29:34 | 000,156,160 | ---- | M] () -- C:\Program Files\ipla\lua.dll
MOD - [2010-11-22 13:28:46 | 000,060,928 | ---- | M] () -- C:\Program Files\ipla\ziplib.dll
MOD - [2010-07-07 10:47:48 | 000,217,696 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\gglog.dll
MOD - [2010-07-07 10:47:46 | 000,123,488 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggipcradioproxy.dll
MOD - [2010-07-07 10:47:44 | 000,017,504 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggipc.dll
MOD - [2010-07-07 10:47:40 | 000,027,744 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggcrypto.dll
MOD - [2010-07-07 10:47:38 | 000,356,960 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\ggcommon.dll
MOD - [2010-03-23 12:01:00 | 008,806,400 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtGui4.dll
MOD - [2010-03-19 09:34:20 | 013,545,472 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtWebKit4.dll
MOD - [2010-03-19 09:34:20 | 003,334,144 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtXmlPatterns4.dll
MOD - [2010-03-19 09:34:20 | 002,400,256 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtCore4.dll
MOD - [2010-03-19 09:34:20 | 001,511,424 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtScript4.dll
MOD - [2010-03-19 09:34:20 | 001,036,288 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtNetwork4.dll
MOD - [2010-03-19 09:34:20 | 000,389,120 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtXml4.dll
MOD - [2010-03-19 09:34:20 | 000,323,584 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\QtSvg4.dll
MOD - [2010-03-19 09:33:46 | 000,311,296 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qtiff4.dll
MOD - [2010-03-19 09:33:46 | 000,274,432 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qmng4.dll
MOD - [2010-03-19 09:33:46 | 000,143,360 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qjpeg4.dll
MOD - [2010-03-19 09:33:46 | 000,027,648 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qgif4.dll
MOD - [2010-03-19 09:33:46 | 000,018,944 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\imageformats\qsvg4.dll
MOD - [2010-03-19 09:33:38 | 000,059,904 | ---- | M] () -- C:\Program Files\Gadu-Gadu 10\zlib1.dll
MOD - [2009-10-28 05:40:14 | 003,885,984 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32.dll
MOD - [2007-06-13 08:16:02 | 000,528,384 | R--- | M] () -- C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
MOD - [2007-05-23 08:23:34 | 004,591,616 | R--- | M] () -- C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application LauncherBmp.dll
MOD - [2007-05-22 16:09:32 | 000,025,600 | R--- | M] () -- C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application LauncherLg.dll
MOD - [2006-11-14 20:46:24 | 000,040,960 | ---- | M] () -- C:\Program Files\Sony\VAIO Camera Utility\VCULib.dll
MOD - [2006-03-09 18:45:36 | 000,081,920 | R--- | M] () -- C:\Program Files\Common Files\Teleca Shared\boost_log-vc71-mt-1_33.dll
MOD - [2005-07-22 22:30:20 | 000,065,536 | ---- | M] () -- C:\Windows\System32\TosCommAPI.dll
MOD - [2001-06-20 15:57:00 | 000,315,392 | ---- | M] () -- C:\Windows\twain_32\ScanWiz5\SDII.exe
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2011-04-20 10:50:46 | 000,792,976 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Sony\VAIO Update 5\VUAgent.exe -- (VUAgent)
SRV - [2010-07-04 09:43:21 | 000,085,096 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)
SRV - [2010-01-08 00:51:02 | 000,380,928 | ---- | M] (Spigot, Inc.) [Auto | Running] -- C:\Program Files\Application Updater\ApplicationUpdater.exe -- (Application Updater)
SRV - [2009-01-18 18:31:14 | 000,455,960 | ---- | M] (Acronis) [Auto | Running] -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
SRV - [2008-01-19 09:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007-02-13 20:23:44 | 000,125,488 | ---- | M] (symantec) [On_Demand | Stopped] -- C:\Program Files\Symantec AntiVirus\SavRoam.exe -- (SavRoam)
SRV - [2007-02-13 20:23:22 | 001,984,048 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec AntiVirus\Rtvscan.exe -- (Symantec AntiVirus)
SRV - [2007-02-13 20:22:40 | 000,030,768 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec AntiVirus\DefWatch.exe -- (DefWatch)
SRV - [2007-01-16 15:05:00 | 002,523,136 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe -- (VAIOMediaPlatform-IntegratedServer-AppServer)
SRV - [2007-01-16 15:05:00 | 001,089,536 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe -- (VAIOMediaPlatform-UCLS-UPnP) VAIO Media Content Collection (UPnP)
SRV - [2007-01-16 15:05:00 | 001,089,536 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe -- (VAIOMediaPlatform-IntegratedServer-UPnP) VAIO Media Integrated Server (UPnP)
SRV - [2007-01-12 12:03:16 | 000,073,728 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe -- (VAIO Entertainment TV Device Arbitration Service)
SRV - [2007-01-10 17:51:06 | 000,745,472 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Sony\VAIO Media Integrated Server\UCLS.exe -- (VAIOMediaPlatform-UCLS-AppServer)
SRV - [2007-01-08 18:06:40 | 000,397,312 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe -- (VAIOMediaPlatform-UCLS-HTTP) VAIO Media Content Collection (HTTP)
SRV - [2007-01-08 18:06:40 | 000,397,312 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe -- (VAIOMediaPlatform-IntegratedServer-HTTP) VAIO Media Integrated Server (HTTP)
SRV - [2007-01-08 18:01:34 | 000,491,520 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe -- (VAIOMediaPlatform-Mobile-Gateway)
SRV - [2006-11-24 20:36:54 | 000,182,392 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Program Files\Sony\VAIO Event Service\VESMgr.exe -- (VAIO Event Service)
SRV - [2006-11-24 13:03:34 | 002,541,248 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE -- (LiveUpdate)
SRV - [2006-11-22 18:12:16 | 000,107,624 | ---- | M] (Symantec Corporation) [Auto | Stopped] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (CLTNetCnService)
SRV - [2006-11-22 18:12:16 | 000,107,624 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr)
SRV - [2006-11-22 18:12:16 | 000,107,624 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr)
SRV - [2006-11-13 18:31:22 | 000,069,632 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AvLib\SSScsiSV.exe -- (SSScsiSV)
SRV - [2006-10-31 23:40:16 | 000,077,824 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
SRV - [2006-10-04 19:25:00 | 000,057,344 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AvLib\MSCSPTISRV.exe -- (MSCSPTISRV)
SRV - [2006-10-04 19:15:30 | 000,057,344 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AvLib\PACSPTISVR.exe -- (PACSPTISVR)
SRV - [2006-10-04 19:06:58 | 000,069,632 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AvLib\SPTISRV.exe -- (SPTISRV)
SRV - [2006-09-27 00:48:36 | 000,172,032 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe -- (VzCdbSvc)
SRV - [2006-09-27 00:46:58 | 000,135,168 | ---- | M] (Sony Corporation) [Auto | Running] -- C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe -- (VzFw)
SRV - [2006-08-23 22:43:08 | 000,274,432 | ---- | M] (Sony Corporation) [On_Demand | Running] -- C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe -- (Vcsw)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2011-08-04 10:00:00 | 001,576,312 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Symantec\Definitions\VirusDefs\20110823.002\NAVEX15.SYS -- (NAVEX15)
DRV - [2011-08-04 10:00:00 | 000,086,136 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Symantec\Definitions\VirusDefs\20110823.002\NAVENG.SYS -- (NAVENG)
DRV - [2011-07-28 10:00:00 | 000,374,392 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2011-07-28 10:00:00 | 000,105,592 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2011-01-18 13:19:16 | 000,218,176 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2010-07-04 14:21:38 | 000,441,760 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\timntr.sys -- (timounter)
DRV - [2010-07-04 14:21:38 | 000,044,384 | ---- | M] (Acronis) [File_System | Auto | Running] -- C:\Windows\System32\drivers\tifsfilt.sys -- (tifsfilter)
DRV - [2010-07-04 14:21:31 | 000,134,272 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\snman380.sys -- (snapman380) Acronis Snapshots Manager (Build 380)
DRV - [2010-07-03 20:39:48 | 000,109,744 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2007-06-19 09:51:20 | 000,107,304 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s816mdm.sys -- (s816mdm)
DRV - [2007-06-19 09:51:18 | 000,099,112 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s816mgmt.sys -- (s816mgmt) Sony Ericsson Device 816 USB WMC Device Management Drivers (WDM)
DRV - [2007-06-19 09:51:18 | 000,097,704 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s816unic.sys -- (s816unic) Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (WDM)
DRV - [2007-06-19 09:51:18 | 000,097,320 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s816obex.sys -- (s816obex)
DRV - [2007-06-19 09:51:18 | 000,021,928 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s816nd5.sys -- (s816nd5) Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (NDIS)
DRV - [2007-06-19 09:51:18 | 000,013,864 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s816mdfl.sys -- (s816mdfl)
DRV - [2007-06-19 09:51:16 | 000,081,832 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s816bus.sys -- (s816bus) Sony Ericsson Device 816 driver (WDM)
DRV - [2006-12-07 13:25:00 | 004,456,416 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2006-11-22 17:17:06 | 000,274,328 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\srtspl.sys -- (SRTSPL)
DRV - [2006-11-22 17:17:06 | 000,247,144 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- C:\Windows\System32\drivers\srtsp.sys -- (SRTSP)
DRV - [2006-11-22 17:17:06 | 000,025,448 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\srtspx.sys -- (SRTSPX)
DRV - [2006-11-21 23:57:36 | 000,113,792 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbd.sys -- (tosrfbd)
DRV - [2006-11-20 18:55:16 | 000,036,480 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbnp.sys -- (tosrfbnp)
DRV - [2006-11-17 07:18:44 | 000,645,120 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA)
DRV - [2006-11-06 15:56:03 | 000,227,328 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ti21sony.sys -- (ti21sony)
DRV - [2006-11-02 09:30:55 | 000,200,704 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express) Intel(R)
DRV - [2006-11-01 06:31:46 | 000,017,328 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\siwinacc.sys -- (SiFilter)
DRV - [2006-11-01 06:31:14 | 000,012,464 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\siremfil.sys -- (SiRemFil)
DRV - [2006-11-01 06:30:34 | 000,074,672 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\SI3132.sys -- (SI3132)
DRV - [2006-10-30 02:42:28 | 001,786,880 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw3v32.sys -- (NETw3v32) Sterownik karty Intel(R)
DRV - [2006-10-28 01:29:10 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfusb.sys -- (tosrfusb)
DRV - [2006-10-27 15:08:36 | 000,072,704 | ---- | M] (Ricoh) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\R5U870FLx86.sys -- (R5U870FLx86)
DRV - [2006-10-27 15:08:32 | 000,043,904 | ---- | M] (Ricoh) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\R5U870FUx86.sys -- (R5U870FUx86)
DRV - [2006-10-26 13:01:34 | 000,185,744 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\SYMTDI.SYS -- (SYMTDI)
DRV - [2006-10-26 13:01:34 | 000,026,384 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\SYMREDRV.SYS -- (SYMREDRV)
DRV - [2006-10-18 21:56:30 | 000,010,216 | ---- | M] (Sony Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\DMICall.sys -- (DMICall)
DRV - [2006-10-13 13:34:22 | 000,027,520 | ---- | M] (Sony Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SonyNC.sys -- (SNC)
DRV - [2006-10-10 20:33:22 | 000,041,600 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosporte.sys -- (tosporte)
DRV - [2006-10-06 15:26:16 | 000,406,672 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv)
DRV - [2006-10-05 17:07:46 | 000,073,600 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TosRfhid.sys -- (Tosrfhid)
DRV - [2006-09-06 11:44:52 | 000,030,976 | ---- | M] (Sony Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SonyImgF.sys -- (SonyImgF)
DRV - [2006-08-30 02:35:58 | 000,140,800 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService)
DRV - [2006-08-04 10:39:10 | 000,008,192 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio)
DRV - [2005-08-01 17:45:08 | 000,064,896 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\tosrfcom.sys -- (Tosrfcom)
DRV - [2005-01-06 14:42:42 | 000,018,612 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfnds.sys -- (tosrfnds)
DRV - [1996-07-12 19:31:10 | 000,014,528 | ---- | M] (Adaptec) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\ASPI32.SYS -- (ASPI32)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.club-vaio.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
IE - HKLM\..\URLSearchHook: {5c81f57f-3cf7-4785-b4ef-11ace31aec4f} - C:\Program Files\Bigpoint_Games_PL\prxtbBig0.dll (Conduit Ltd.)
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-2971943543-1819769394-880338243-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.onet.pl/ [binary data]
IE - HKU\S-1-5-21-2971943543-1819769394-880338243-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/
IE - HKU\S-1-5-21-2971943543-1819769394-880338243-1003\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-2971943543-1819769394-880338243-1003\..\URLSearchHook: {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\SearchSettings.dll (Spigot, Inc.)
IE - HKU\S-1-5-21-2971943543-1819769394-880338243-1003\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.)
IE - HKU\S-1-5-21-2971943543-1819769394-880338243-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-21-2971943543-1819769394-880338243-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-2971943543-1819769394-880338243-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKU\S-1-5-21-2971943543-1819769394-880338243-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-2971943543-1819769394-880338243-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes]
IE - HKU\S-1-5-21-2971943543-1819769394-880338243-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
IE - HKU\S-1-5-21-2971943543-1819769394-880338243-1005\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-2971943543-1819769394-880338243-1005\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-2971943543-1819769394-880338243-1005\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-2971943543-1819769394-880338243-1005\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKU\S-1-5-21-2971943543-1819769394-880338243-1005\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
IE - HKU\S-1-5-21-2971943543-1819769394-880338243-1005\..\URLSearchHook: {5c81f57f-3cf7-4785-b4ef-11ace31aec4f} - C:\Program Files\Bigpoint_Games_PL\prxtbBig0.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-2971943543-1819769394-880338243-1005\..\URLSearchHook: {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\SearchSettings.dll (Spigot, Inc.)
IE - HKU\S-1-5-21-2971943543-1819769394-880338243-1005\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.)
IE - HKU\S-1-5-21-2971943543-1819769394-880338243-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Oracle)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.609: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.609: c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.609: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.609: c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-01-05 17:05:05 | 000,000,000 | ---D | M]
 
 
Hosts file not found
O2 - BHO: (Dealio Toolbar) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\IE\4.0.2\dealioToolbarIE.dll (Spigot, Inc.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (Bigpoint Games PL Toolbar) - {5c81f57f-3cf7-4785-b4ef-11ace31aec4f} - C:\Program Files\Bigpoint_Games_PL\prxtbBig0.dll (Conduit Ltd.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll (Google Inc.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google BAE\BAE.dll (Your Company Name)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O2 - BHO: (SearchSettings Class) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\SearchSettings.dll (Spigot, Inc.)
O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKLM\..\Toolbar: (Dealio Toolbar) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\IE\4.0.2\dealioToolbarIE.dll (Spigot, Inc.)
O3 - HKLM\..\Toolbar: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Bigpoint Games PL Toolbar) - {5c81f57f-3cf7-4785-b4ef-11ace31aec4f} - C:\Program Files\Bigpoint_Games_PL\prxtbBig0.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O3 - HKLM\..\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKU\S-1-5-21-2971943543-1819769394-880338243-1003\..\Toolbar\WebBrowser: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-2971943543-1819769394-880338243-1003\..\Toolbar\WebBrowser: (Bigpoint Games PL Toolbar) - {5C81F57F-3CF7-4785-B4EF-11ACE31AEC4F} - C:\Program Files\Bigpoint_Games_PL\prxtbBig0.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-2971943543-1819769394-880338243-1003\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKU\S-1-5-21-2971943543-1819769394-880338243-1003\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O3 - HKU\S-1-5-21-2971943543-1819769394-880338243-1003\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKU\S-1-5-21-2971943543-1819769394-880338243-1005\..\Toolbar\WebBrowser: (Bigpoint Games PL Toolbar) - {5C81F57F-3CF7-4785-B4EF-11ACE31AEC4F} - C:\Program Files\Bigpoint_Games_PL\prxtbBig0.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-2971943543-1819769394-880338243-1005\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKU\S-1-5-21-2971943543-1819769394-880338243-1005\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC.)
O3 - HKU\S-1-5-21-2971943543-1819769394-880338243-1005\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [Acronis Scheduler2 Service] C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe (Acronis)
O4 - HKLM..\Run: [AcronisTimounterMonitor]  File not found
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask)
O4 - HKLM..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe (Alps Electric Co., Ltd.)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe (Spigot, Inc.)
O4 - HKLM..\Run: [Sony Ericsson PC Suite] C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe ()
O4 - HKLM..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [TkBellExe] c:\program files\real\realplayer\Update\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [TrueImageMonitor.exe]  File not found
O4 - HKLM..\Run: [VAIOCameraUtility] C:\Program Files\Sony\VAIO Camera Utility\VCUServe.exe (Sony Corporation)
O4 - HKLM..\Run: [vptray] C:\Program Files\Symantec AntiVirus\VPTray.exe (Symantec Corporation)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-2971943543-1819769394-880338243-1003..\Run: [Badoo Desktop] C:\ProgramData\Badoo\Badoo Desktop\1.5.3.949\Badoo.Desktop.exe (Badoo)
O4 - HKU\S-1-5-21-2971943543-1819769394-880338243-1003..\Run: [Mzerililunuto] C:\Users\Krystian\AppData\Local\NOKBDU.dll (Agere Systems)
O4 - HKU\S-1-5-21-2971943543-1819769394-880338243-1005..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-2971943543-1819769394-880338243-1005..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.)
O4 - HKU\S-1-5-21-2971943543-1819769394-880338243-1005..\Run: [Gadwin PrintScreen Pro] C:\Program Files\Gadwin Systems\PrintScreenPro\PrintScreenPro.exe (Gadwin Systems, Inc)
O4 - HKU\S-1-5-21-2971943543-1819769394-880338243-1005..\Run: [IPLA!] C:\Program Files\ipla\ipla.exe (Redefine Sp z o.o.)
O4 - Startup: C:\Users\Krystian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
F3 - HKU\S-1-5-21-2971943543-1819769394-880338243-1003 WinNT: Load - (C:\Users\Krystian\LOCALS~1\Temp\00e9cd03.com) - C:\Users\Krystian\LOCALS~1\Temp\00e9cd03.com ()
O7 - HKU\S-1-5-21-2971943543-1819769394-880338243-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2971943543-1819769394-880338243-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html ()
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/sites/production/ieawsdc32.cab (Microsoft Office Template and Media Control)
O16 - DPF: {02CF1781-EA91-4FA5-A200-646E8241987C} http://esupport.sony.com/VaioInfo.CAB (VaioInfo.CMClass)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab (Java Plug-in 1.6.0)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.179.1.63 62.179.1.62
O18 - Protocol\Handler\asp {8D32BA61-D15B-11d4-894B-000000000000} - C:\Windows\System32\hsppp.dll (EzTools Software)
O18 - Protocol\Handler\ezstor {8D32BA61-D15B-11d4-894B-000000000000} - C:\Windows\System32\hsppp.dll (EzTools Software)
O18 - Protocol\Handler\hsp {8D32BA61-D15B-11d4-894B-000000000000} - C:\Windows\System32\hsppp.dll (EzTools Software)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\x-asp {8D32BA61-D15B-11d4-894B-000000000000} - C:\Windows\System32\hsppp.dll (EzTools Software)
O18 - Protocol\Handler\x-cnote {8D32BA61-D15B-11d4-894B-000000000000} - C:\Windows\System32\hsppp.dll (EzTools Software)
O18 - Protocol\Handler\x-hsp {8D32BA61-D15B-11d4-894B-000000000000} - C:\Windows\System32\hsppp.dll (EzTools Software)
O18 - Protocol\Handler\x-mem1 {C3719F83-7EF8-4BA0-89B0-3360C7AFB7CC} - C:\Windows\System32\WowCtl2.dll (EzTools Software)
O18 - Protocol\Handler\x-zip {8D32BA61-D15B-11d4-894B-000000000000} - C:\Windows\System32\hsppp.dll (EzTools Software)
O18 - Protocol\Handler\zip {8D32BA61-D15B-11d4-894B-000000000000} - C:\Windows\System32\hsppp.dll (EzTools Software)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\VESWinlogon: DllName - VESWinlogon.dll - C:\Windows\System32\VESWinlogon.dll (Sony Corporation)
O24 - Desktop WallPaper: C:\Users\admin\Desktop\Turyn+Portofino\100PENTX\IMGP5952.JPG
O24 - Desktop BackupWallPaper: C:\Users\admin\Desktop\Turyn+Portofino\100PENTX\IMGP5952.JPG
O30 - LSA: Authentication Packages - (relog_ap) - C:\Windows\System32\relog_ap.dll (Acronis)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{82ba6c5e-22f2-11e0-a0a5-0013a986f5c7}\Shell - "" = AutoRun
O33 - MountPoints2\{82ba6c5e-22f2-11e0-a0a5-0013a986f5c7}\Shell\AutoRun\command - "" = I:\setupIdiomy.exe
O33 - MountPoints2\{c3b9eeb4-8717-11df-b4af-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{c3b9eeb4-8717-11df-b4af-806e6f6e6963}\Shell\AutoRun\command - "" = F:\Autorun.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 7 Days ==========[/color]
 
[2011-08-24 18:08:17 | 000,580,096 | ---- | C] (OldTimer Tools) -- C:\Users\admin\Desktop\OTL.exe
[2011-08-22 21:37:55 | 000,000,000 | ---D | C] -- C:\ProgramData\dD15401KiCfK15401
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 7 Days ==========[/color]
 
[2011-08-24 18:08:27 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\admin\Desktop\OTL.exe
[2011-08-24 17:49:42 | 000,000,462 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{7E97CD74-AB96-4026-B497-4299C19F0B1E}.job
[2011-08-24 17:49:11 | 000,002,432 | ---- | M] () -- C:\Users\admin\AppData\Local\TempYm1680.html
[2011-08-24 17:49:11 | 000,002,089 | ---- | M] () -- C:\Users\admin\AppData\Local\TemptN1680.html
[2011-08-24 17:47:01 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011-08-24 17:46:34 | 000,001,036 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011-08-24 17:46:25 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011-08-24 15:46:13 | 000,642,954 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011-08-24 15:46:13 | 000,121,902 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011-08-24 15:46:13 | 000,121,360 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2011-08-24 15:46:13 | 000,037,800 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2011-08-24 15:38:35 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011-08-24 15:38:34 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011-08-24 15:37:59 | 2145,574,912 | -HS- | M] () -- C:\hiberfil.sys
[2011-08-23 23:49:16 | 000,002,432 | ---- | M] () -- C:\Users\admin\AppData\Local\TempaZ3684.html
[2011-08-23 23:49:16 | 000,002,089 | ---- | M] () -- C:\Users\admin\AppData\Local\TempHe3684.html
[2011-08-23 23:15:11 | 000,002,432 | ---- | M] () -- C:\Users\admin\AppData\Local\TempKH3968.html
[2011-08-23 23:15:11 | 000,002,089 | ---- | M] () -- C:\Users\admin\AppData\Local\TempsP3968.html
[2011-08-23 22:32:30 | 000,002,432 | ---- | M] () -- C:\Users\admin\AppData\Local\Tempkj1080.html
[2011-08-23 22:32:30 | 000,002,089 | ---- | M] () -- C:\Users\admin\AppData\Local\TempQJ1080.html
[2011-08-23 18:23:20 | 000,002,432 | ---- | M] () -- C:\Users\admin\AppData\Local\Tempyc4360.html
[2011-08-23 18:23:20 | 000,002,089 | ---- | M] () -- C:\Users\admin\AppData\Local\TempDz4360.html
[2011-08-23 06:56:20 | 000,002,432 | ---- | M] () -- C:\Users\admin\AppData\Local\TempBD5248.html
[2011-08-23 06:56:20 | 000,002,089 | ---- | M] () -- C:\Users\admin\AppData\Local\TempNg5248.html
[2011-08-22 23:45:13 | 000,002,432 | ---- | M] () -- C:\Users\admin\AppData\Local\TempQh4396.html
[2011-08-22 23:45:13 | 000,002,089 | ---- | M] () -- C:\Users\admin\AppData\Local\TempEu4396.html
[2011-08-22 23:10:20 | 000,002,432 | ---- | M] () -- C:\Users\admin\AppData\Local\TempXi4564.html
[2011-08-22 23:10:20 | 000,002,089 | ---- | M] () -- C:\Users\admin\AppData\Local\TempTx4564.html
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-08-24 17:49:11 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempYm1680.html
[2011-08-24 17:49:11 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TemptN1680.html
[2011-08-23 23:23:06 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempaZ3684.html
[2011-08-23 23:23:06 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempHe3684.html
[2011-08-23 22:47:45 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempKH3968.html
[2011-08-23 22:47:45 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempsP3968.html
[2011-08-23 22:05:19 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempkj1080.html
[2011-08-23 22:05:19 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempQJ1080.html
[2011-08-23 18:07:44 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempyc4360.html
[2011-08-23 18:07:44 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempDz4360.html
[2011-08-23 06:39:07 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempBD5248.html
[2011-08-23 06:39:07 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempNg5248.html
[2011-08-22 23:19:48 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempQh4396.html
[2011-08-22 23:19:48 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempEu4396.html
[2011-08-22 22:58:50 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempXi4564.html
[2011-08-22 22:58:50 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempTx4564.html
[2011-07-13 08:02:22 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempsr4068.html
[2011-07-13 08:02:22 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\Temphm4068.html
[2011-07-09 09:55:21 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempCe6748.html
[2011-07-09 09:55:21 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempxS6748.html
[2011-06-20 16:38:59 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempgm6216.html
[2011-06-20 16:38:59 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempFk6216.html
[2011-06-14 19:40:08 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TemphO6804.html
[2011-06-14 19:40:08 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempnu6804.html
[2011-06-08 17:20:05 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TemptQ4924.html
[2011-06-08 17:20:05 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempLO4924.html
[2011-06-05 01:08:24 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempBs5360.html
[2011-06-05 01:08:24 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempMo5360.html
[2011-05-23 14:09:37 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempRu6916.html
[2011-05-23 14:09:36 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempQH6916.html
[2011-05-21 22:17:28 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempqZ7248.html
[2011-05-21 22:17:28 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempxu7248.html
[2011-05-20 21:18:45 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempXs6488.html
[2011-05-20 21:18:45 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TemppU6488.html
[2011-05-19 23:16:21 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempah5768.html
[2011-05-19 23:16:21 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempDR5768.html
[2011-05-18 19:59:23 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempHc1264.html
[2011-05-18 19:59:23 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempwo1264.html
[2011-05-17 23:36:35 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempfs7716.html
[2011-05-17 23:36:35 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempXa7716.html
[2011-05-17 00:12:31 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempHL5456.html
[2011-05-17 00:12:31 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempRl5456.html
[2011-05-15 22:22:53 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempmW3432.html
[2011-05-15 22:22:53 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempTP3432.html
[2011-05-15 00:49:32 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempoF7020.html
[2011-05-15 00:49:32 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempvK7020.html
[2011-05-13 16:18:32 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempSw6732.html
[2011-05-13 16:18:32 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempTH6732.html
[2011-05-13 09:49:51 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempyq6908.html
[2011-05-13 09:49:51 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempdq6908.html
[2011-05-12 17:44:49 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempLG4112.html
[2011-05-12 17:44:49 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempeS4112.html
[2011-05-12 09:57:49 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempiA6408.html
[2011-05-12 09:57:49 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempSB6408.html
[2011-05-11 23:32:09 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempaL5472.html
[2011-05-11 23:32:09 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempyg5472.html
[2011-05-11 14:31:48 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempPN4532.html
[2011-05-11 14:31:48 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempeV4532.html
[2011-05-11 09:49:22 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempvk6752.html
[2011-05-11 09:49:22 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempcG6752.html
[2011-05-10 10:34:22 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempSj6020.html
[2011-05-10 10:34:22 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempLS6020.html
[2011-05-10 00:06:19 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempJk6276.html
[2011-05-10 00:06:19 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\Temprt6276.html
[2011-05-09 12:01:58 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempoN6696.html
[2011-05-09 12:01:58 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempDq6696.html
[2011-05-08 12:34:09 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempaH5344.html
[2011-05-08 12:34:09 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempMa5344.html
[2011-05-07 12:12:05 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempDk7180.html
[2011-05-07 12:12:05 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempqI7180.html
[2011-04-21 10:23:56 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempXF6764.html
[2011-04-21 10:23:56 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempQP6764.html
[2011-04-17 16:39:38 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempAh7976.html
[2011-04-17 16:39:38 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempsh7976.html
[2011-04-05 09:34:38 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempab6124.html
[2011-04-05 09:34:38 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempgC6124.html
[2011-03-26 11:43:07 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempDz4684.html
[2011-03-26 11:43:07 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempML4684.html
[2011-03-04 20:25:57 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempgl6844.html
[2011-03-04 20:25:57 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempod6844.html
[2011-02-16 17:15:13 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempLS3740.html
[2011-02-16 17:15:13 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempeW3740.html
[2011-01-18 13:17:55 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempPz1244.html
[2011-01-18 13:17:55 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempTs1244.html
[2011-01-13 02:51:19 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempLC4444.html
[2011-01-13 02:51:19 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempJI4444.html
[2011-01-12 00:16:12 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempwl3364.html
[2011-01-12 00:16:12 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempjd3364.html
[2011-01-05 17:01:42 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempTc6612.html
[2011-01-05 17:01:42 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempyo6612.html
[2010-12-05 19:23:51 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempsW4388.html
[2010-12-05 19:23:51 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempex4388.html
[2010-11-23 23:17:14 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempNz3516.html
[2010-11-23 23:17:14 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TemppH3516.html
[2010-11-10 19:23:49 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempTR1456.html
[2010-11-10 19:23:46 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempCy1456.html
[2010-10-30 17:37:24 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TemppS6136.html
[2010-10-30 17:37:24 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempyN6136.html
[2010-10-14 15:55:34 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempQem680.html
[2010-10-14 15:55:34 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempoCw680.html
[2010-10-02 15:03:40 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\Temphr5124.html
[2010-10-02 15:03:40 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempVU5124.html
[2010-10-01 23:32:15 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempEm5496.html
[2010-10-01 23:32:15 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempkP5496.html
[2010-09-20 21:30:33 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempyB8524.html
[2010-09-20 21:30:33 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempHv8524.html
[2010-09-13 17:25:53 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempwQ6784.html
[2010-09-13 17:25:53 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempFM6784.html
[2010-09-04 13:46:02 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempKV2000.html
[2010-09-04 13:46:02 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempiB2000.html
[2010-08-19 23:07:10 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempoj6356.html
[2010-08-19 23:07:10 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TemprQ6356.html
[2010-08-18 23:45:50 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempIZ7616.html
[2010-08-18 23:45:50 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempGc7616.html
[2010-08-16 23:59:43 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempT11228.html
[2010-08-16 23:59:43 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempX11228.html
[2010-08-07 12:08:13 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempOO5356.html
[2010-08-07 12:08:13 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempLA5356.html
[2010-08-01 23:06:15 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempRo5232.html
[2010-08-01 23:06:15 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempYf5232.html
[2010-08-01 00:14:31 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\Tempml3180.html
[2010-08-01 00:14:31 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TemppY3180.html
[2010-07-31 12:01:07 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempRp5016.html
[2010-07-31 12:01:07 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\TempcS5016.html
[2010-07-29 11:36:37 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempAC6324.html
[2010-07-29 11:36:37 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\Temphd6324.html
[2010-07-10 13:52:14 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2010-07-09 18:17:01 | 000,000,328 | ---- | C] () -- C:\Windows\spcfg1.ini
[2010-07-09 18:16:12 | 000,000,209 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2010-07-09 18:16:08 | 000,002,275 | ---- | C] () -- C:\Windows\System32\FSDM.INI
[2010-07-09 18:16:05 | 000,126,976 | ---- | C] () -- C:\Windows\System32\ECATENB2.DLL
[2010-07-09 18:16:05 | 000,065,536 | ---- | C] () -- C:\Windows\System32\ECATEN33.DLL
[2010-07-09 18:16:05 | 000,065,536 | ---- | C] () -- C:\Windows\System32\ECATEN32.DLL
[2010-07-09 17:31:11 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2010-07-09 17:31:11 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2010-07-07 20:39:26 | 000,000,048 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010-07-06 23:21:47 | 000,002,432 | ---- | C] () -- C:\Users\admin\AppData\Local\TempTW8436.html
[2010-07-06 23:21:47 | 000,002,089 | ---- | C] () -- C:\Users\admin\AppData\Local\Temphc8436.html
[2010-07-06 03:07:02 | 000,121,360 | ---- | C] () -- C:\Windows\System32\perfh015.dat
[2010-07-06 03:07:02 | 000,037,800 | ---- | C] () -- C:\Windows\System32\perfc015.dat
[2010-07-05 23:09:14 | 000,026,624 | ---- | C] () -- C:\Users\admin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-07-04 01:43:06 | 000,001,356 | ---- | C] () -- C:\Users\admin\AppData\Local\d3d9caps.dat
[2010-07-03 21:36:38 | 000,000,634 | ---- | C] () -- C:\Windows\ODBC.INI
[2010-07-03 21:32:04 | 000,019,968 | ---- | C] () -- C:\Windows\System32\Cpuinf32.dll
[2010-07-03 21:25:23 | 000,520,192 | ---- | C] () -- C:\Windows\System32\CddbPlaylist2Sony.dll
[2010-06-15 18:06:38 | 000,153,502 | ---- | C] () -- C:\Windows\System32\libmplayer.dll
[2010-06-15 18:05:02 | 005,002,416 | ---- | C] () -- C:\Windows\System32\libavcodec.dll
[2010-06-15 17:43:58 | 001,641,574 | ---- | C] () -- C:\Windows\System32\ffmpegmt.dll
[2010-05-24 21:39:50 | 000,289,065 | ---- | C] () -- C:\Windows\System32\ff_kernelDeint.dll
[2010-05-24 21:38:34 | 000,962,008 | ---- | C] () -- C:\Windows\System32\ff_x264.dll
[2010-05-24 21:38:22 | 000,901,509 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2010-05-19 22:59:20 | 000,150,528 | ---- | C] () -- C:\Windows\System32\mkx.dll
[2010-05-19 22:59:10 | 000,109,568 | ---- | C] () -- C:\Windows\System32\avi.dll
[2010-05-19 22:59:02 | 000,141,824 | ---- | C] () -- C:\Windows\System32\mp4.dll
[2010-05-19 22:58:52 | 000,123,392 | ---- | C] () -- C:\Windows\System32\ogm.dll
[2010-05-19 22:58:24 | 000,113,152 | ---- | C] () -- C:\Windows\System32\dsmux.exe
[2010-05-19 22:58:18 | 000,154,112 | ---- | C] () -- C:\Windows\System32\ts.dll
[2010-05-19 22:58:08 | 000,249,856 | ---- | C] () -- C:\Windows\System32\dxr.dll
[2010-05-19 22:57:42 | 000,097,792 | ---- | C] () -- C:\Windows\System32\avs.dll
[2010-05-19 22:57:38 | 000,137,728 | ---- | C] () -- C:\Windows\System32\mkv2vfr.exe
[2010-05-19 22:57:26 | 000,093,184 | ---- | C] () -- C:\Windows\System32\avss.dll
[2010-05-19 22:57:20 | 000,358,400 | ---- | C] () -- C:\Windows\System32\gdsmux.exe
[2010-05-19 22:55:40 | 000,080,384 | ---- | C] () -- C:\Windows\System32\mkzlib.dll
[2010-05-19 22:55:36 | 000,024,576 | ---- | C] () -- C:\Windows\System32\mkunicode.dll
[2010-05-12 17:09:06 | 000,108,032 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2010-05-11 23:26:52 | 000,324,096 | ---- | C] () -- C:\Windows\System32\TomsMoComp_ff.dll
[2010-05-11 23:22:22 | 000,100,864 | ---- | C] () -- C:\Windows\System32\ff_wmv9.dll
[2010-05-11 00:10:04 | 000,178,688 | ---- | C] () -- C:\Windows\System32\ff_libmad.dll
[2010-05-11 00:09:50 | 000,257,024 | ---- | C] () -- C:\Windows\System32\ff_libdts.dll
[2010-05-11 00:09:42 | 000,142,848 | ---- | C] () -- C:\Windows\System32\ff_liba52.dll
[2010-05-11 00:09:30 | 000,484,864 | ---- | C] () -- C:\Windows\System32\ff_libfaad2.dll
[2010-05-11 00:07:24 | 001,556,992 | ---- | C] () -- C:\Windows\System32\ff_samplerate.dll
[2010-05-11 00:05:28 | 000,146,944 | ---- | C] () -- C:\Windows\System32\ff_tremor.dll
[2010-05-11 00:05:06 | 000,113,152 | ---- | C] () -- C:\Windows\System32\ff_unrar.dll
[2010-05-11 00:03:56 | 000,163,328 | ---- | C] () -- C:\Windows\System32\libmpeg2_ff.dll
[2009-08-11 23:21:26 | 000,087,552 | ---- | C] () -- C:\Windows\System32\ac3config.exe
[2009-06-07 18:24:04 | 000,180,224 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2009-01-11 00:15:44 | 000,159,744 | ---- | C] () -- C:\Windows\System32\mmfinfo.dll
[2008-11-06 17:37:32 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2007-10-13 11:30:20 | 000,000,137 | ---- | C] () -- C:\Windows\System32\Registration.ini
[2006-12-04 01:25:14 | 000,022,723 | ---- | C] () -- C:\Windows\System32\sugs2l3.dll
[2006-12-01 02:15:22 | 000,000,000 | ---- | C] () -- C:\Windows\VAIOUpdt.INI
[2006-11-02 14:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006-11-02 14:47:37 | 000,397,552 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006-11-02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006-11-02 12:33:01 | 000,642,954 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006-11-02 12:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006-11-02 12:33:01 | 000,121,902 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006-11-02 12:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006-11-02 12:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006-11-02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006-11-02 10:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006-11-02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006-11-02 09:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2006-10-31 18:37:00 | 000,114,688 | ---- | C] () -- C:\Windows\System32\TosBtAcc.dll
[2006-08-10 16:00:52 | 000,094,208 | ---- | C] () -- C:\Windows\System32\TosBtHcrpAPI.dll
[2005-07-22 22:30:20 | 000,065,536 | ---- | C] () -- C:\Windows\System32\TosCommAPI.dll
[2003-04-08 11:40:22 | 000,005,679 | ---- | C] () -- C:\Windows\System32\OUTLPERF.INI
[2003-01-30 07:04:00 | 000,618,496 | ---- | C] () -- C:\Windows\System32\stlpmt45.dll
[1999-08-23 14:21:54 | 000,331,776 | ---- | C] () -- C:\Windows\System32\icuuc.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-09-15 20:23:07 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Artifex Mundi
[2010-07-04 10:55:24 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Autodesk
[2010-07-18 10:04:49 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\BeachPartyCraze
[2011-04-18 02:35:15 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\BitTorrent
[2011-01-18 13:24:00 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\DAEMON Tools Lite
[2010-09-20 22:28:20 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Friday's games
[2010-07-06 23:21:44 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Gadu-Gadu 10
[2010-07-04 14:36:34 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\GHISLER
[2011-08-24 17:48:23 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\ipla
[2010-08-07 13:12:34 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\OpenOffice.org
[2011-01-12 00:16:46 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\RDRM
[2011-03-26 12:05:35 | 000,000,000 | ---D | M] -- C:\Users\admin\AppData\Roaming\Teleca
[2011-05-15 00:11:35 | 000,000,000 | ---D | M] -- C:\Users\Krystian\AppData\Roaming\937FC73C5CB6786060C9B6D72519F7B8
[2010-07-13 22:54:39 | 000,000,000 | ---D | M] -- C:\Users\Krystian\AppData\Roaming\Autodesk
[2011-04-21 14:06:34 | 000,000,000 | ---D | M] -- C:\Users\Krystian\AppData\Roaming\BitTorrent
[2011-06-14 19:36:41 | 000,000,000 | ---D | M] -- C:\Users\Krystian\AppData\Roaming\DAEMON Tools Lite
[2010-09-15 13:44:46 | 000,000,000 | ---D | M] -- C:\Users\Krystian\AppData\Roaming\Friday's games
[2010-08-03 19:24:15 | 000,000,000 | ---D | M] -- C:\Users\Krystian\AppData\Roaming\Gadu-Gadu 10
[2011-08-07 21:58:32 | 000,000,000 | ---D | M] -- C:\Users\Krystian\AppData\Roaming\Lindab
[2010-07-10 00:12:43 | 000,000,000 | ---D | M] -- C:\Users\Krystian\AppData\Roaming\OpenOffice.org
[2010-08-14 23:00:25 | 000,000,000 | ---D | M] -- C:\Users\Krystian\AppData\Roaming\Teleca
[2011-08-04 18:00:00 | 000,000,290 | ---- | M] () -- C:\Windows\Tasks\Defraggler Volume C Task.job
[2011-07-10 18:00:00 | 000,000,290 | ---- | M] () -- C:\Windows\Tasks\Defraggler Volume D Task.job
[2011-08-23 23:53:17 | 000,032,576 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2011-08-24 17:49:42 | 000,000,462 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{7E97CD74-AB96-4026-B497-4299C19F0B1E}.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >