wklejto.pl
Dodane przez: ~coeltim (2012-07-22 14:35) -> text
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
14.
15.
16.
17.
18.
19.
20.
21.
22.
23.
24.
25.
26.
27.
28.
29.
30.
31.
32.
33.
34.
35.
36.
37.
38.
39.
40.
41.
42.
43.
44.
45.
46.
47.
48.
49.
50.
51.
52.
53.
54.
55.
56.
57.
58.
59.
60.
61.
62.
63.
64.
65.
66.
67.
68.
69.
70.
71.
72.
73.
74.
75.
76.
77.
78.
79.
80.
81.
82.
83.
84.
85.
86.
87.
88.
89.
90.
91.
92.
93.
94.
95.
96.
97.
98.
99.
100.
101.
102.
103.
104.
105.
106.
107.
108.
109.
110.
111.
112.
113.
114.
115.
116.
117.
118.
119.
120.
121.
122.
123.
124.
125.
126.
127.
128.
129.
130.
131.
132.
133.
134.
135.
136.
137.
138.
139.
140.
141.
142.
143.
144.
145.
146.
147.
148.
149.
150.
151.
152.
153.
154.
155.
156.
157.
158.
159.
160.
161.
162.
163.
164.
165.
166.
167.
168.
169.
170.
171.
172.
173.
174.
175.
176.
177.
178.
179.
180.
181.
182.
183.
184.
185.
186.
187.
188.
189.
190.
191.
192.
193.
194.
195.
196.
197.
198.
199.
200.
201.
202.
203.
204.
205.
206.
207.
208.
209.
210.
211.
212.
213.
214.
215.
216.
217.
218.
219.
220.
221.
222.
223.
224.
225.
226.
227.
228.
229.
230.
231.
232.
233.
234.
235.
236.
237.
238.
239.
240.
241.
242.
243.
244.
245.
246.
247.
248.
249.
250.
251.
252.
253.
254.
255.
256.
257.
258.
259.
260.
261.
262.
263.
264.
265.
266.
267.
268.
269.
270.
271.
272.
273.
274.
275.
276.
277.
278.
279.
280.
281.
282.
283.
284.
285.
286.
287.
288.
289.
290.
291.
292.
293.
294.
295.
296.
297.
298.
299.
300.
301.
302.
303.
304.
305.
306.
307.
308.
309.
310.
311.
312.
313.
314.
315.
316.
317.
318.
319.
320.
321.
322.
323.
324.
325.
326.
327.
328.
329.
330.
331.
332.
333.
334.
335.
336.
337.
338.
339.
340.
341.
342.
343.
344.
345.
346.
347.
348.
349.
350.
351.
352.
353.
354.
355.
356.
357.
358.
359.
360.
361.
362.
363.
364.
365.
366.
367.
368.
369.
370.
371.
372.
373.
374.
375.
376.
377.
378.
379.
380.
381.
382.
383.
384.
385.
386.
387.
388.
389.
390.
391.
392.
393.
394.
395.
396.
397.
398.
399.
400.
401.
402.
403.
404.
405.
406.
407.
408.
409.
410.
411.
412.
413.
414.
415.
416.
417.
418.
419.
420.
421.
422.
423.
424.
425.
426.
427.
428.
429.
430.
431.
432.
433.
434.
435.
436.
437.
438.
439.
440.
441.
442.
443.
444.
445.
446.
447.
448.
449.
450.
451.
452.
453.
454.
455.
456.
457.
458.
459.
460.
461.
462.
463.
464.
465.
466.
467.
468.
469.
470.
471.
472.
473.
474.
475.
476.
477.
478.
479.
480.
481.
482.
483.
484.
485.
486.
487.
488.
489.
490.
491.
492.
493.
494.
495.
496.
497.
498.
499.
500.
501.
502.
503.
504.
505.
506.
507.
508.
509.
510.
511.
512.
513.
514.
515.
516.
517.
518.
519.
520.
521.
522.
523.
524.
525.
526.
527.
528.
529.
530.
531.
532.
533.
534.
535.
536.
537.
538.
539.
540.
541.
542.
543.
544.
545.
546.
547.
548.
549.
550.
551.
552.
553.
554.
555.
556.
557.
558.
559.
560.
561.
562.
563.
564.
565.
566.
567.
568.
569.
570.
571.
572.
573.
574.
575.
576.
577.
578.
579.
580.
581.
582.
583.
584.
585.
586.
587.
588.
589.
590.
591.
592.
593.
594.
595.
596.
597.
598.
599.
600.
601.
602.
603.
604.
605.
606.
607.
608.
609.
610.
611.
612.
613.
614.
615.
616.
617.
618.
619.
620.
621.
622.
623.
624.
625.
626.
627.
628.
629.
630.
631.
632.
633.
634.
635.
636.
637.
638.
639.
640.
641.
642.
643.
644.
645.
646.
647.
648.
649.
650.
651.
652.
653.
654.
655.
656.
657.
658.
659.
660.
661.
662.
663.
664.
665.
666.
667.
668.
669.
670.
671.
672.
673.
674.
675.
676.
677.
678.
679.
680.
681.
682.
683.
684.
685.
686.
687.
688.
689.
690.
691.
692.
693.
694.
695.
696.
697.
698.
699.
700.
701.
702.
703.
704.
705.
706.
707.
708.
709.
710.
711.
712.
713.
714.
715.
716.
717.
718.
719.
720.
721.
722.
723.
724.
725.
726.
727.
728.
729.
730.
731.
732.
733.
734.
735.
736.
737.
738.
739.
740.
741.
742.
743.
744.
745.
746.
747.
748.
749.
750.
751.
752.
753.
754.
755.
756.
757.
758.
759.
760.
761.
762.
763.
764.
765.
766.
767.
768.
769.
770.
771.
772.
773.
774.
775.
776.
777.
778.
779.
780.
781.
782.
783.
784.
785.
786.
787.
788.
789.
790.
791.
792.
793.
794.
795.
796.
797.
798.
799.
800.
801.
802.
803.
804.
805.
806.
807.
808.
809.
810.
811.
812.
813.
814.
815.
816.
817.
818.
819.
820.
821.
822.
823.
824.
825.
826.
827.
828.
829.
830.
831.
832.
833.
834.
835.
836.
837.
838.
839.
840.
841.
842.
843.
844.
845.
846.
847.
848.
849.
850.
851.
852.
853.
854.
855.
856.
857.
858.
859.
860.
861.
862.
863.
864.
865.
866.
867.
868.
869.
870.
871.
872.
873.
874.
875.
876.
877.
878.
879.
880.
881.
882.
883.
884.
885.
886.
887.
888.
889.
890.
891.
892.
893.
894.
895.
896.
897.
898.
899.
900.
901.
902.
903.
904.
905.
906.
907.
908.
909.
910.
911.
912.
913.
914.
915.
916.
917.
918.
919.
920.
921.
922.
923.
924.
925.
926.
927.
928.
929.
930.
931.
932.
933.
934.
935.
936.
937.
938.
939.
940.
941.
942.
943.
944.
945.
946.
947.
948.
949.
950.
951.
952.
953.
954.
955.
956.
957.
958.
959.
960.
961.
962.
963.
964.
965.
966.
967.
968.
969.
970.
971.
972.
973.
974.
975.
976.
977.
978.
979.
980.
981.
982.
983.
984.
985.
986.
987.
988.
989.
990.
991.
992.
993.
994.
995.
996.
997.
998.
999.
1000.
1001.
1002.
1003.
1004.
1005.
1006.
1007.
1008.
1009.
1010.
1011.
1012.
1013.
1014.
1015.
1016.
1017.
1018.
1019.
1020.
1021.
ÿþOTL logfile created on: 2012-07-22 14:26:11 - Run 1
 
OTL by OldTimer - Version 3.2.54.0     Folder = C:\Users\Piotrek\Desktop
 
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
 
Internet Explorer (Version = 9.0.8112.16421)
 
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
 
 
4,00 Gb Total Physical Memory | 3,14 Gb Available Physical Memory | 78,60% Memory free
 
8,00 Gb Paging File | 7,37 Gb Available in Paging File | 92,11% Paging File free
 
Paging file location(s): ?:\pagefile.sys [binary data]
 
 
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
 
Drive C: | 298,09 Gb Total Space | 68,51 Gb Free Space | 22,98% Space Free | Partition Type: NTFS
 
Drive D: | 3,95 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Drive G: | 3,74 Gb Total Space | 2,74 Gb Free Space | 73,27% Space Free | Partition Type: FAT32
 
 
 
Computer Name: PG | User Name: Piotrek | Logged in as Administrator.
 
Boot Mode: SafeMode | Scan Mode: All users | Include 64bit Scans
 
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
 
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
 
 
PRC - [2012-07-22 10:48:12 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Piotrek\Desktop\OTL.exe
 
PRC - [2012-07-03 18:21:30 | 004,273,976 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
 
PRC - [2011-09-16 18:35:22 | 000,349,184 | ---- | M] () -- C:\Users\Piotrek\Desktop\SALAMAND.EXE
 
 
 
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
 
 
MOD - [2011-09-16 18:35:22 | 000,349,184 | ---- | M] () -- C:\Users\Piotrek\Desktop\SALAMAND.EXE
 
 
 
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
 
 
SRV:[b]64bit:[/b] - [2012-07-03 18:21:29 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Stopped] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
 
SRV:[b]64bit:[/b] - [2011-12-05 14:02:44 | 005,739,008 | ---- | M] (Native Instruments GmbH) [Auto | Stopped] -- C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe -- (NIHardwareService)
 
SRV:[b]64bit:[/b] - [2009-08-18 02:36:20 | 000,203,264 | ---- | M] (AMD) [Auto | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
 
SRV - [2012-07-18 11:10:42 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
 
SRV - [2012-05-09 21:57:38 | 000,075,136 | ---- | M] () [Auto | Stopped] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
 
SRV - [2012-05-02 01:42:31 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
 
SRV - [2012-05-02 00:34:37 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Stopped] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
 
SRV - [2012-01-18 08:44:52 | 000,450,848 | ---- | M] (Logitech Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe -- (UMVPFSrv)
 
SRV - [2011-11-13 16:16:30 | 000,419,624 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
 
SRV - [2011-06-06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
 
SRV - [2009-12-23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Stopped] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
 
SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
SRV - [2003-03-21 14:56:28 | 000,040,960 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\SKK\AutoTransfer\ATServiceNT.exe -- (ATServiceNT)
 
 
 
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
 
 
DRV:[b]64bit:[/b] - [2012-07-03 18:21:52 | 000,958,400 | ---- | M] (AVAST Software) [File_System | System | Stopped] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
 
DRV:[b]64bit:[/b] - [2012-07-03 18:21:52 | 000,355,856 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
 
DRV:[b]64bit:[/b] - [2012-07-03 18:21:52 | 000,071,064 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
 
DRV:[b]64bit:[/b] - [2012-07-03 18:21:52 | 000,059,728 | ---- | M] (AVAST Software) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
 
DRV:[b]64bit:[/b] - [2012-07-03 18:21:52 | 000,054,072 | ---- | M] (AVAST Software) [Kernel | System | Unknown] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
 
DRV:[b]64bit:[/b] - [2012-07-03 18:21:51 | 000,025,232 | ---- | M] (AVAST Software) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
 
DRV:[b]64bit:[/b] - [2012-05-02 15:24:12 | 000,027,760 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)
 
DRV:[b]64bit:[/b] - [2012-04-27 10:20:04 | 000,132,832 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
 
DRV:[b]64bit:[/b] - [2012-04-25 00:32:27 | 000,098,848 | ---- | M] (Avira GmbH) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
 
DRV:[b]64bit:[/b] - [2012-04-10 20:12:42 | 000,526,392 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
 
DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
 
DRV:[b]64bit:[/b] - [2012-01-31 19:29:05 | 000,071,152 | ---- | M] (DENSO WAVE INC.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dwusb.sys -- (dwusb)
 
DRV:[b]64bit:[/b] - [2012-01-31 19:29:05 | 000,048,368 | ---- | M] (DENSO WAVE INC.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dwserial.sys -- (dwserial)
 
DRV:[b]64bit:[/b] - [2012-01-18 08:44:36 | 004,865,568 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvuvc64.sys -- (LVUVC64) Logitech QuickCam Pro 9000(UVC)
 
DRV:[b]64bit:[/b] - [2012-01-18 08:44:28 | 000,351,136 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (LVRS64)
 
DRV:[b]64bit:[/b] - [2011-11-30 22:13:40 | 000,772,096 | ---- | M] (Line 6) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\L6TPortB64.sys -- (L6TPortB)
 
DRV:[b]64bit:[/b] - [2011-05-10 16:27:54 | 000,049,256 | ---- | M] (Yamaha Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ymidusbx64.sys -- (YMIDUSBW) Yamaha USB-MIDI Driver (WDM)
 
DRV:[b]64bit:[/b] - [2011-05-10 08:06:08 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
 
DRV:[b]64bit:[/b] - [2010-11-21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
 
DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
 
DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
 
DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
 
DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
 
DRV:[b]64bit:[/b] - [2010-04-22 20:00:10 | 000,066,176 | ---- | M] (Line 6) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\L6SM64.sys -- (L6SeaMonkDev)
 
DRV:[b]64bit:[/b] - [2009-10-07 01:45:50 | 000,030,232 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LVPr2M64.sys -- (LVPr2M64)
 
DRV:[b]64bit:[/b] - [2009-08-18 03:48:48 | 006,037,504 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
 
DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
 
DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
 
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
 
DRV:[b]64bit:[/b] - [2009-06-20 04:09:57 | 000,054,272 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\L1E62x64.sys -- (L1E) Sterownik miniportu NDIS dla kontrolera Ethernet Atheros AR8121/AR8113/AR8114 PCI-E (NDIS6.20)
 
DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
 
DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
 
DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
 
DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
 
DRV:[b]64bit:[/b] - [2009-05-18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
 
DRV:[b]64bit:[/b] - [2008-10-28 11:28:44 | 000,011,576 | ---- | M] (Samsung Electronics) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\SSPORT.SYS -- (SSPORT)
 
DRV:[b]64bit:[/b] - [2008-07-26 17:26:34 | 000,050,072 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LVUSBS64.sys -- (LVUSBS64)
 
DRV:[b]64bit:[/b] - [2007-05-06 20:44:16 | 000,039,552 | ---- | M] (None) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\mfpec.sys -- (ALIWEHCD)
 
DRV:[b]64bit:[/b] - [2007-01-09 22:36:28 | 000,013,184 | ---- | M] (None) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mfpcomp.sys -- (AliWGP)
 
DRV:[b]64bit:[/b] - [2006-11-16 16:58:46 | 000,031,248 | ---- | M] (SIA Syncrosoft) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\synUSB64.sys -- (SynasUSB)
 
DRV:[b]64bit:[/b] - [2006-10-20 01:57:18 | 000,012,416 | ---- | M] (None) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfpvbus.sys -- (WUSBVBus)
 
DRV:[b]64bit:[/b] - [2005-09-23 22:18:34 | 000,261,120 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MarvinBus64.sys -- (MarvinBus)
 
DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
DRV - [2003-07-29 09:57:20 | 000,040,448 | ---- | M] (DeviceGuys, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysWOW64\drivers\Dgivecp.Sys -- (DgiVecp)
 
 
 
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
 
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
 
 
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
 
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = pl.v9.com/idg/idg_1339615494_842340
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
 
 
 
 
IE - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = pl.v9.com/idg/idg_1339615494_842340
 
IE - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
 
IE - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
 
IE - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&AF=100478&tt=151211_wdgt&babsrc=SP_ss&mntrId=cc08206b000000000000002618caca8c
 
IE - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
 
 
[color=#E56717]========== FireFox ==========[/color]
 
 
 
FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
 
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
 
FF - prefs.js..browser.search.selectedEngine: "Google"
 
FF - prefs.js..browser.search.useDBForOrder: true
 
FF - prefs.js..browser.startup.homepage: "about:home"
 
FF - prefs.js..keyword.URL: "http://search.babylon.com/?AF=100478&tt=151211_wdgt&babsrc=adbartrp&mntrId=cc08206b000000000000002618caca8c&q="
 
FF - user.js - File not found
 
 
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
 
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
 
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
 
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
 
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
 
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
 
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
 
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
 
 
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-07-22 12:42:16 | 000,000,000 | ---D | M]
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-07-18 11:10:42 | 000,000,000 | ---D | M]
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
 
 
 
[2011-09-16 18:51:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Extensions
 
[2012-05-17 16:26:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\4jzwfze0.default\extensions
 
[2012-05-17 16:26:04 | 000,000,000 | ---D | M] (WOT) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\4jzwfze0.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
 
[2012-01-25 09:29:53 | 000,001,976 | ---- | M] () -- C:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\4jzwfze0.default\searchplugins\duckduckgo.xml
 
[2012-05-03 14:39:03 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
 
[2011-09-16 20:21:38 | 000,000,000 | ---D | M] (Click to call with Skype) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
 
[2012-07-18 11:10:42 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
 
[2012-06-17 17:48:09 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml
 
[2011-12-20 00:29:33 | 000,002,351 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
 
[2012-06-17 17:48:09 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml
 
[2012-06-17 17:48:09 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml
 
[2012-06-17 17:48:09 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml
 
[2012-06-13 21:24:54 | 000,002,415 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\v9.xml
 
[2012-06-17 17:48:09 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml
 
[2012-06-17 17:48:09 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml
 
 
 
O1 HOSTS File: ([2012-07-21 16:54:52 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
 
O1 - Hosts: 127.0.0.1       localhost
 
O2:[b]64bit:[/b] - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
 
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
 
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
 
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
 
O2 - BHO: (no name) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - No CLSID value found.
 
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
 
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
 
O4:[b]64bit:[/b] - HKLM..\Run: [UIAutomationCore] C:\Users\Piotrek\AppData\Local\Microsoft\Windows\3947\UIAutomationCore.exe ()
 
O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD)
 
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
 
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
 
O4 - HKLM..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.)
 
O4 - HKLM..\Run: [MFP Manager] C:\Program Files\MFP Server Utilities\MFPAgent.exe (Edimax Technology Co., Ltd.)
 
O4 - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001..\Run: [AlcoholAutomount] C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe (Alcohol Soft Development Team)
 
O4 - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
 
O4 - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001..\Run: [Gadu-Gadu] C:\Program Files (x86)\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.)
 
O4 - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)
 
O4 - Startup: C:\Users\Ewa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
 
O4 - Startup: C:\Users\Piotrek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Piotrek\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
 
O4 - Startup: C:\Users\Piotrek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
 
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
 
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
 
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
 
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
 
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
 
O7 - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001\Software\Policies\Microsoft\Internet Explorer\Control Panel present
 
O7 - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
 
O7 - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
 
O8:[b]64bit:[/b] - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
 
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
 
O9 - Extra Button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
 
O9 - Extra 'Tools' menuitem : Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
 
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
 
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
 
O13[b]64bit:[/b] - gopher Prefix: missing
 
O15 - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001\..Trusted Domains: line6.net ([]* in Trusted sites)
 
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/products/plugin/autodl/jinstall-160-windows-i586.cab (Java Plug-in 1.6.0_31)
 
O16 - DPF: {CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab (Java Plug-in 1.4.2_07)
 
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
 
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
 
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
 
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F5AED4DF-08C2-490B-B061-50064F49F99A}: NameServer = 4.2.2.1
 
O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data - No CLSID value found
 
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
 
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
 
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
 
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
 
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
 
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
 
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
 
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
 
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
 
O32 - HKLM CDRom: AutoRun - 1
 
O32 - AutoRun File - [2012-01-31 19:36:26 | 000,000,000 | ---D | M] - C:\Autotransfer -- [ NTFS ]
 
O32 - AutoRun File - [2011-02-18 12:33:08 | 000,000,067 | R--- | M] () - D:\Autorun.inf -- [ CDFS ]
 
O34 - HKLM BootExecute: (autocheck autochk *)
 
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
 
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
 
O35 - HKLM\..comfile [open] -- "%1" %*
 
O35 - HKLM\..exefile [open] -- "%1" %*
 
O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %*
 
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
 
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
 
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
 
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
 
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
 
 
[2012-07-22 13:40:14 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Piotrek\Desktop\OTL.exe
 
[2012-07-22 12:42:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
 
[2012-07-22 12:42:29 | 000,355,856 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
 
[2012-07-22 12:42:29 | 000,025,232 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
 
[2012-07-22 12:42:24 | 000,059,728 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
 
[2012-07-22 12:42:24 | 000,054,072 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
 
[2012-07-22 12:42:23 | 000,958,400 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
 
[2012-07-22 12:42:21 | 000,285,328 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
 
[2012-07-22 12:42:21 | 000,071,064 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
 
[2012-07-22 12:42:09 | 000,227,648 | ---- | C] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
 
[2012-07-22 12:42:09 | 000,041,224 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
 
[2012-07-22 12:42:00 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
 
[2012-07-22 12:42:00 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
 
[2012-07-21 17:00:45 | 000,000,000 | ---D | C] -- C:\Windows\temp
 
[2012-07-21 17:00:45 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Local\temp
 
[2012-07-21 16:56:23 | 000,000,000 | ---D | C] -- C:\$RECYCLE.BIN
 
[2012-07-21 16:46:25 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
 
[2012-07-21 16:46:25 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
 
[2012-07-21 16:46:25 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
 
[2012-07-21 16:46:21 | 000,000,000 | ---D | C] -- C:\ComboFix
 
[2012-07-21 16:46:19 | 000,000,000 | ---D | C] -- C:\Qoobox
 
[2012-07-21 16:46:03 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
 
[2012-07-21 14:24:30 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\Avira
 
[2012-07-21 14:23:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
 
[2012-07-21 14:23:08 | 000,132,832 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys
 
[2012-07-21 14:23:08 | 000,098,848 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys
 
[2012-07-21 14:23:08 | 000,027,760 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avkmgr.sys
 
[2012-07-21 14:23:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
 
[2012-07-21 14:23:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira
 
[2012-07-21 01:26:13 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\hellomoto
 
[2012-07-20 21:13:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Ubisoft
 
[2012-07-20 17:18:10 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
 
[2012-07-20 15:18:02 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\Desktop\More Than Words in the Style of Extreme with lyrics (no lead vocal)_data
 
[2012-07-19 23:13:30 | 000,000,000 | -HSD | C] -- C:\ProgramData\DSS
 
[2012-07-17 22:49:22 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\Lionhead Studios
 
[2012-07-12 01:27:18 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
 
[2012-07-12 01:27:18 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
 
[2012-07-12 01:27:17 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
 
[2012-07-12 01:27:17 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
 
[2012-07-12 01:27:17 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
 
[2012-07-12 01:27:17 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
 
[2012-07-12 01:27:16 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
 
[2012-07-12 01:27:16 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
 
[2012-07-12 01:27:15 | 002,311,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
 
[2012-07-12 01:27:15 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
 
[2012-07-12 01:27:15 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
 
[2012-07-12 01:27:15 | 000,818,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
 
[2012-07-12 01:27:15 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
 
[2012-07-11 23:24:21 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll
 
[2012-07-11 23:24:21 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll
 
[2012-07-11 23:24:16 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
 
[2012-07-11 23:24:15 | 001,462,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
 
[2012-07-11 23:24:14 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
 
[2012-07-11 23:24:07 | 001,133,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdosys.dll
 
[2012-07-11 23:24:07 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cdosys.dll
 
[2012-07-10 23:47:09 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\Documents\Games for Windows - LIVE Demos
 
[2012-07-10 18:29:06 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\Desktop\DO ZROBIENIA YOUTUBE
 
[2012-07-10 18:18:25 | 000,000,000 | ---D | C] -- C:\OutputFolder
 
[2012-07-10 18:18:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Digiarty
 
[2012-07-10 18:18:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Digiarty
 
[2012-07-10 16:07:39 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\Documents\WB Games
 
[2012-07-10 16:07:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD
 
[2012-07-08 18:45:38 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Local\WMTools Downloaded Files
 
[2012-07-07 00:41:33 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browserchoice.exe
 
[2012-07-06 16:28:49 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\Desktop\OGAOSZENIE ZAROBEK
 
[2012-06-30 15:52:10 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\Documents\Projekty Avid
 
[2012-06-28 14:34:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
 
[2012-06-28 13:29:08 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Local\LooksBuilder
 
[2012-06-28 13:21:23 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Local\MicroVision Applications
 
[2012-06-28 13:21:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SureThing Express Labeler
 
[2012-06-28 13:21:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\SureThing Shared
 
[2012-06-28 13:21:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SureThing Express Labeler
 
[2012-06-28 13:14:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Studio Plugins
 
[2012-06-28 13:14:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LooksBuilderSE
 
[2012-06-22 18:23:01 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\Desktop\ORGANIKA EGZ
 
[2012-06-22 16:12:34 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Groove Monkee
 
[2012-06-22 16:12:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Groove Monkee
 
[2012-06-22 16:05:26 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\Desktop\PERKUSJA FILLE
 
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
 
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
 
 
[2012-07-22 12:43:09 | 001,523,412 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
 
[2012-07-22 12:43:09 | 000,687,590 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
 
[2012-07-22 12:43:09 | 000,606,992 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
 
[2012-07-22 12:43:09 | 000,131,176 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
 
[2012-07-22 12:43:09 | 000,103,370 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
 
[2012-07-22 12:42:31 | 000,001,922 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
 
[2012-07-22 12:42:21 | 000,000,350 | -H-- | M] () -- C:\Windows\tasks\avast! Emergency Update.job
 
[2012-07-22 12:42:21 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
 
[2012-07-22 12:34:42 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
 
[2012-07-22 12:34:37 | 3220,529,152 | -HS- | M] () -- C:\hiberfil.sys
 
[2012-07-22 10:48:12 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Piotrek\Desktop\OTL.exe
 
[2012-07-22 10:06:52 | 000,021,888 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
 
[2012-07-22 10:06:52 | 000,021,888 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
 
[2012-07-21 16:54:52 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
 
[2012-07-21 14:23:16 | 000,002,030 | ---- | M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
 
[2012-07-20 17:18:10 | 000,000,221 | ---- | M] () -- C:\Users\Piotrek\Desktop\Tom Clancy's Splinter Cell Conviction.url
 
[2012-07-20 15:18:02 | 000,014,016 | ---- | M] () -- C:\Users\Piotrek\Desktop\More Than Words in the Style of Extreme with lyrics (no lead vocal).aup
 
[2012-07-20 15:08:00 | 004,078,477 | ---- | M] () -- C:\Users\Piotrek\Desktop\More Than Words in the Style of Extreme with lyrics (no lead vocal).mp3
 
[2012-07-20 10:58:02 | 000,048,347 | ---- | M] () -- C:\Users\Piotrek\Desktop\Wa|ne.pdf
 
[2012-07-20 10:57:45 | 000,020,676 | ---- | M] () -- C:\Users\Piotrek\Desktop\Wa|ne.odt
 
[2012-07-19 23:57:50 | 000,009,252 | ---- | M] () -- C:\Users\Piotrek\Desktop\riff3(blues-roll).gp4
 
[2012-07-18 11:31:15 | 000,004,934 | ---- | M] () -- C:\Users\Piotrek\Desktop\paul_gilbert_guitar_sequences.gp3
 
[2012-07-18 11:14:01 | 000,010,802 | ---- | M] () -- C:\Users\Piotrek\Desktop\marty_friedman_exercises.gp5
 
[2012-07-18 11:12:16 | 000,006,737 | ---- | M] () -- C:\Users\Piotrek\Desktop\marty_friedman_exercises.gp3
 
[2012-07-15 22:10:52 | 000,131,207 | ---- | M] () -- C:\Users\Piotrek\Desktop\blues_brothers_sweet_home_chicago.gp5
 
[2012-07-15 22:04:27 | 000,017,335 | ---- | M] () -- C:\Users\Piotrek\Desktop\blues_brothers_soul_man.gp3
 
[2012-07-15 16:10:01 | 001,098,080 | ---- | M] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo 03 - Brisingr.epub
 
[2012-07-15 16:09:46 | 001,719,061 | ---- | M] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo - 02 - Najstarszy.epub
 
[2012-07-15 16:09:26 | 000,513,499 | ---- | M] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo - 01- Eragon.epub
 
[2012-07-15 16:08:20 | 002,371,718 | ---- | M] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo 03 - Brisingr.pdf
 
[2012-07-15 16:08:16 | 003,793,134 | ---- | M] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo - 02 - Najstarszy.pdf
 
[2012-07-15 16:08:06 | 002,578,048 | ---- | M] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo - 01- Eragon.pdf
 
[2012-07-15 15:53:10 | 000,046,296 | ---- | M] () -- C:\Users\Piotrek\Desktop\blues_brothers_everybody_needs_somebody.gp5
 
[2012-07-15 10:46:59 | 000,009,961 | ---- | M] () -- C:\Users\Piotrek\Desktop\pat_metheny_james.gp4
 
[2012-07-15 10:45:14 | 000,016,602 | ---- | M] () -- C:\Users\Piotrek\Desktop\pat_metheny_james.gp5
 
[2012-07-15 10:42:21 | 000,009,231 | ---- | M] () -- C:\Users\Piotrek\Desktop\19350.gp3
 
[2012-07-15 10:41:23 | 000,002,849 | ---- | M] () -- C:\Users\Piotrek\Desktop\Scofield, John - Busted.zip
 
[2012-07-13 17:21:19 | 004,552,150 | ---- | M] () -- C:\Users\Piotrek\Desktop\I Am The Walrus The Beatles  Karaoke.wmv.mp3
 
[2012-07-13 13:43:41 | 000,042,442 | ---- | M] () -- C:\Users\Piotrek\Desktop\PLAN UNCHAINED.pdf
 
[2012-07-12 20:45:47 | 000,000,349 | ---- | M] () -- C:\Users\Public\Documents\PCLECHAL.INI
 
[2012-07-12 18:03:09 | 000,019,456 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
[2012-07-12 18:03:07 | 000,006,844 | ---- | M] () -- C:\Users\Piotrek\Desktop\steel panther - eyes of the panther vordrab2.cos2
 
[2012-07-12 13:28:11 | 000,391,056 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
 
[2012-07-10 21:43:19 | 000,057,574 | ---- | M] () -- C:\Users\Piotrek\Desktop\jamiroquai_cosmic_girl.gp4
 
[2012-07-10 18:18:18 | 000,001,366 | ---- | M] () -- C:\Users\Piotrek\Desktop\WinX Free WMV to MP4 Converter.lnk
 
[2012-07-03 18:21:52 | 000,958,400 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
 
[2012-07-03 18:21:52 | 000,355,856 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
 
[2012-07-03 18:21:52 | 000,071,064 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
 
[2012-07-03 18:21:52 | 000,059,728 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
 
[2012-07-03 18:21:52 | 000,054,072 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
 
[2012-07-03 18:21:51 | 000,025,232 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
 
[2012-07-03 18:21:32 | 000,041,224 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
 
[2012-07-03 18:21:28 | 000,227,648 | ---- | M] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
 
[2012-07-03 18:21:18 | 000,285,328 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
 
[2012-06-28 14:34:06 | 000,001,584 | ---- | M] () -- C:\Users\Public\Desktop\Logitech Webcam Software  .lnk
 
[2012-06-28 14:22:17 | 000,002,131 | ---- | M] () -- C:\Users\Public\Desktop\Avid Studio.lnk
 
[2012-06-28 13:21:20 | 000,001,066 | ---- | M] () -- C:\Users\Piotrek\Desktop\SureThing Express Labeler.lnk
 
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
 
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
 
 
[2012-07-22 12:42:31 | 000,001,922 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
 
[2012-07-22 12:42:21 | 000,000,350 | -H-- | C] () -- C:\Windows\tasks\avast! Emergency Update.job
 
[2012-07-22 12:42:21 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt
 
[2012-07-21 16:46:25 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
 
[2012-07-21 16:46:25 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
 
[2012-07-21 16:46:25 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
 
[2012-07-21 16:46:25 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
 
[2012-07-21 16:46:25 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
 
[2012-07-21 14:23:16 | 000,002,030 | ---- | C] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
 
[2012-07-20 22:11:57 | 000,046,322 | ---- | C] () -- C:\Users\Piotrek\Desktop\Pink Floyd - Another Brick In The Wall (Part II).gp4
 
[2012-07-20 17:18:10 | 000,000,221 | ---- | C] () -- C:\Users\Piotrek\Desktop\Tom Clancy's Splinter Cell Conviction.url
 
[2012-07-20 15:18:02 | 000,014,016 | ---- | C] () -- C:\Users\Piotrek\Desktop\More Than Words in the Style of Extreme with lyrics (no lead vocal).aup
 
[2012-07-20 15:07:59 | 004,078,477 | ---- | C] () -- C:\Users\Piotrek\Desktop\More Than Words in the Style of Extreme with lyrics (no lead vocal).mp3
 
[2012-07-20 14:43:42 | 002,583,863 | ---- | C] () -- C:\Users\Piotrek\Desktop\Pinball Wizard .mp3
 
[2012-07-20 10:57:58 | 000,048,347 | ---- | C] () -- C:\Users\Piotrek\Desktop\Wa|ne.pdf
 
[2012-07-20 10:54:27 | 000,020,676 | ---- | C] () -- C:\Users\Piotrek\Desktop\Wa|ne.odt
 
[2012-07-19 23:57:48 | 000,009,252 | ---- | C] () -- C:\Users\Piotrek\Desktop\riff3(blues-roll).gp4
 
[2012-07-18 11:31:15 | 000,004,934 | ---- | C] () -- C:\Users\Piotrek\Desktop\paul_gilbert_guitar_sequences.gp3
 
[2012-07-18 11:14:00 | 000,010,802 | ---- | C] () -- C:\Users\Piotrek\Desktop\marty_friedman_exercises.gp5
 
[2012-07-18 11:12:15 | 000,006,737 | ---- | C] () -- C:\Users\Piotrek\Desktop\marty_friedman_exercises.gp3
 
[2012-07-15 22:10:51 | 000,131,207 | ---- | C] () -- C:\Users\Piotrek\Desktop\blues_brothers_sweet_home_chicago.gp5
 
[2012-07-15 22:04:26 | 000,017,335 | ---- | C] () -- C:\Users\Piotrek\Desktop\blues_brothers_soul_man.gp3
 
[2012-07-15 16:10:01 | 001,098,080 | ---- | C] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo 03 - Brisingr.epub
 
[2012-07-15 16:09:46 | 001,719,061 | ---- | C] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo - 02 - Najstarszy.epub
 
[2012-07-15 16:09:26 | 000,513,499 | ---- | C] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo - 01- Eragon.epub
 
[2012-07-15 16:08:15 | 002,371,718 | ---- | C] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo 03 - Brisingr.pdf
 
[2012-07-15 16:08:10 | 003,793,134 | ---- | C] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo - 02 - Najstarszy.pdf
 
[2012-07-15 16:08:03 | 002,578,048 | ---- | C] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo - 01- Eragon.pdf
 
[2012-07-15 15:53:09 | 000,046,296 | ---- | C] () -- C:\Users\Piotrek\Desktop\blues_brothers_everybody_needs_somebody.gp5
 
[2012-07-15 10:46:58 | 000,009,961 | ---- | C] () -- C:\Users\Piotrek\Desktop\pat_metheny_james.gp4
 
[2012-07-15 10:45:13 | 000,016,602 | ---- | C] () -- C:\Users\Piotrek\Desktop\pat_metheny_james.gp5
 
[2012-07-15 10:42:21 | 000,009,231 | ---- | C] () -- C:\Users\Piotrek\Desktop\19350.gp3
 
[2012-07-15 10:41:23 | 000,002,849 | ---- | C] () -- C:\Users\Piotrek\Desktop\Scofield, John - Busted.zip
 
[2012-07-13 17:21:16 | 004,552,150 | ---- | C] () -- C:\Users\Piotrek\Desktop\I Am The Walrus The Beatles  Karaoke.wmv.mp3
 
[2012-07-13 13:43:39 | 000,042,442 | ---- | C] () -- C:\Users\Piotrek\Desktop\PLAN UNCHAINED.pdf
 
[2012-07-12 18:03:07 | 000,006,844 | ---- | C] () -- C:\Users\Piotrek\Desktop\steel panther - eyes of the panther vordrab2.cos2
 
[2012-07-10 21:43:17 | 000,057,574 | ---- | C] () -- C:\Users\Piotrek\Desktop\jamiroquai_cosmic_girl.gp4
 
[2012-07-10 21:36:09 | 000,053,999 | ---- | C] () -- C:\Users\Piotrek\Desktop\Red Hot Chili Peppers - Can't Stop (6).gp4
 
[2012-07-10 18:18:18 | 000,001,366 | ---- | C] () -- C:\Users\Piotrek\Desktop\WinX Free WMV to MP4 Converter.lnk
 
[2012-06-28 14:34:06 | 000,001,584 | ---- | C] () -- C:\Users\Public\Desktop\Logitech Webcam Software  .lnk
 
[2012-06-28 13:21:20 | 000,001,066 | ---- | C] () -- C:\Users\Piotrek\Desktop\SureThing Express Labeler.lnk
 
[2012-06-28 13:06:50 | 000,002,131 | ---- | C] () -- C:\Users\Public\Desktop\Avid Studio.lnk
 
[2012-06-02 13:17:13 | 000,021,683 | ---- | C] () -- C:\Users\Piotrek\.recently-used.xbel
 
[2012-05-09 21:55:02 | 000,268,952 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
 
[2012-05-09 21:55:01 | 000,682,280 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe
 
[2012-05-09 21:55:01 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
 
[2012-05-08 19:59:10 | 000,000,163 | ---- | C] () -- C:\Users\Piotrek\.gtkrc-2.0
 
[2012-04-12 13:21:26 | 004,174,336 | ---- | C] () -- C:\Windows\SysWow64\LS3Renderer.dll
 
[2012-02-29 19:45:03 | 000,000,092 | ---- | C] () -- C:\Windows\mp3wavcon.ini
 
[2012-02-29 19:43:05 | 000,000,005 | ---- | C] () -- C:\Windows\SysWow64\SySmp3con.dat
 
[2012-02-29 19:43:01 | 000,237,568 | ---- | C] () -- C:\Windows\SysWow64\lame_enc.dll
 
[2012-02-17 18:35:43 | 001,576,007 | ---- | C] () -- C:\Windows\SysWow64\libfftw3-3.dll
 
[2012-02-17 18:35:43 | 001,527,650 | ---- | C] () -- C:\Windows\SysWow64\libfftw3f-3.dll
 
[2012-02-17 18:35:43 | 001,038,577 | ---- | C] () -- C:\Windows\SysWow64\libfftw3l-3.dll
 
[2012-01-18 08:44:00 | 010,920,984 | ---- | C] () -- C:\Windows\SysWow64\LogiDPP.dll
 
[2012-01-18 08:44:00 | 000,336,408 | ---- | C] () -- C:\Windows\SysWow64\DevManagerCore.dll
 
[2012-01-18 08:44:00 | 000,104,472 | ---- | C] () -- C:\Windows\SysWow64\LogiDPPApp.exe
 
[2012-01-12 18:36:40 | 000,417,792 | ---- | C] () -- C:\Windows\SysWow64\MFPBot.dll
 
[2012-01-12 18:36:40 | 000,229,376 | ---- | C] () -- C:\Windows\SysWow64\Install98MFPPS.dll
 
[2012-01-12 18:36:39 | 000,245,760 | ---- | C] () -- C:\Windows\SysWow64\InstallMFPPS.dll
 
[2012-01-12 18:36:39 | 000,151,552 | ---- | C] () -- C:\Windows\SysWow64\ddschk.dll
 
[2011-12-20 00:15:35 | 000,007,680 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
 
[2011-11-12 16:32:27 | 000,110,592 | ---- | C] () -- C:\Windows\WiaInst.exe
 
[2011-11-02 16:31:57 | 000,005,934 | ---- | C] () -- C:\Windows\CDex.INI
 
[2011-10-27 21:06:02 | 000,000,051 | ---- | C] () -- C:\Windows\SysWow64\SYNSOPOS.exe.cfg
 
[2011-10-03 22:11:46 | 000,208,896 | ---- | C] () -- C:\Windows\SysWow64\SSRemove.Exe
 
[2011-09-28 17:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
 
[2011-09-17 22:41:18 | 000,019,456 | ---- | C] () -- C:\Users\Piotrek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
[2011-09-16 21:13:07 | 000,002,892 | ---- | C] () -- C:\Windows\SysWow64\audcon.sys
 
[2011-09-16 21:12:54 | 000,086,016 | ---- | C] () -- C:\Windows\SysWow64\SYNSOPOS.exe
 
[2011-09-16 18:20:24 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
 
[2011-02-10 06:03:48 | 000,000,326 | ---- | C] () -- C:\Windows\primopdf.ini
 
 
 
[color=#E56717]========== LOP Check ==========[/color]
 
 
 
[2011-11-10 13:15:38 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\OpenOffice.org
 
[2011-11-10 01:01:36 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\Opera
 
[2011-12-20 00:32:33 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\AnvSoft
 
[2012-04-11 15:11:26 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Audacity
 
[2011-12-20 00:22:20 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Babylon
 
[2012-05-14 00:06:34 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Cakewalk
 
[2012-04-04 19:13:44 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\calibre
 
[2011-12-20 01:02:06 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Canneverbe Limited
 
[2012-06-04 19:19:52 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Celemony Software GmbH
 
[2012-04-10 21:30:04 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\DAEMON Tools Lite
 
[2012-07-21 16:56:36 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Dropbox
 
[2011-10-22 17:38:48 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\EarMaster
 
[2012-04-29 00:58:30 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\FXpansion
 
[2011-10-05 10:57:22 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Gadu-Gadu
 
[2012-06-02 13:17:13 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\gtk-2.0
 
[2012-07-21 01:26:20 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\hellomoto
 
[2011-11-13 16:13:47 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\ImgBurn
 
[2012-05-08 12:32:58 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\inkscape
 
[2011-09-16 19:04:32 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\IrfanView
 
[2012-06-20 15:48:28 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\iZotope
 
[2012-04-23 15:32:54 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Kazrog LLC
 
[2011-09-16 21:02:50 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Leadertech
 
[2012-06-19 13:52:51 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Line 6
 
[2012-07-17 22:49:22 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Lionhead Studios
 
[2012-03-03 14:10:41 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Logia
 
[2012-05-08 13:10:03 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\LogoMaker
 
[2012-03-23 21:15:02 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\LucasArts
 
[2012-04-07 14:49:14 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\MAGIX
 
[2011-09-16 19:09:43 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\OpenOffice.org
 
[2012-01-05 17:17:54 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Opera
 
[2012-05-10 00:54:05 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\PanoViewer
 
[2012-05-10 01:10:01 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\PhotoScape
 
[2012-06-28 13:25:00 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\PrimoPDF
 
[2012-05-01 20:10:53 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Recabinet3Presets
 
[2012-06-07 01:13:25 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Red Giant Link
 
[2011-09-16 21:14:53 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Steinberg
 
[2012-07-12 01:14:49 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Synthesia
 
[2012-02-05 13:19:30 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Toontrack
 
[2011-12-31 00:39:05 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Trine2
 
[2012-02-20 22:53:08 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\VST3 Presets
 
[2012-07-22 12:42:21 | 000,000,350 | -H-- | M] () -- C:\Windows\Tasks\avast! Emergency Update.job
 
[2012-07-21 16:55:51 | 000,032,604 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
 
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
 
 
 
 
< End of report >
 
 
Wygenerowano w 0.611s, przy pomocy GeSHi 1.0.8
'
Podziel się na Facebook Podziel się na BLIP Podziel się na Twitter Podziel się na Buzz Podziel się na Flaker Dodaj zakładkę Google Podziel się na Delicious Wykop to!

Nowy Komentarz:

Komentarze:

Brak Komentarzy!

Copyright © 2007 - 2010 wklejto.pl Wszelkie prawa zastrzezone