1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
14.
15.
16.
17.
18.
19.
20.
21.
22.
23.
24.
25.
26.
27.
28.
29.
30.
31.
32.
33.
34.
35.
36.
37.
38.
39.
40.
41.
42.
43.
44.
45.
46.
47.
48.
49.
50.
51.
52.
53.
54.
55.
56.
57.
58.
59.
60.
61.
62.
63.
64.
65.
66.
67.
68.
69.
70.
71.
72.
73.
74.
75.
76.
77.
78.
79.
80.
81.
82.
83.
84.
85.
86.
87.
88.
89.
90.
91.
92.
93.
94.
95.
96.
97.
98.
99.
100.
101.
102.
103.
104.
105.
106.
107.
108.
109.
110.
111.
112.
113.
114.
115.
116.
117.
118.
119.
120.
121.
122.
123.
124.
125.
126.
127.
128.
129.
130.
131.
132.
133.
134.
135.
136.
137.
138.
139.
140.
141.
142.
143.
144.
145.
146.
147.
148.
149.
150.
151.
152.
153.
154.
155.
156.
157.
158.
159.
160.
161.
162.
163.
164.
165.
166.
167.
168.
169.
170.
171.
172.
173.
174.
175.
176.
177.
178.
179.
180.
181.
182.
183.
184.
185.
186.
187.
188.
189.
190.
191.
192.
193.
194.
195.
196.
197.
198.
199.
200.
201.
202.
203.
204.
205.
206.
207.
208.
209.
210.
211.
212.
213.
214.
215.
216.
217.
218.
219.
220.
221.
222.
223.
224.
225.
226.
227.
228.
229.
230.
231.
232.
233.
234.
235.
236.
237.
238.
239.
240.
241.
242.
243.
244.
245.
246.
247.
248.
249.
250.
251.
252.
253.
254.
255.
256.
257.
258.
259.
260.
261.
262.
263.
264.
265.
266.
267.
268.
269.
270.
271.
272.
273.
274.
275.
276.
277.
278.
279.
280.
281.
282.
283.
284.
285.
286.
287.
288.
289.
290.
291.
292.
293.
294.
295.
296.
297.
298.
299.
300.
301.
302.
303.
304.
305.
306.
307.
308.
309.
310.
311.
312.
313.
314.
315.
316.
317.
318.
319.
320.
321.
322.
323.
324.
325.
326.
327.
328.
329.
330.
331.
332.
333.
334.
335.
336.
337.
338.
339.
340.
341.
342.
343.
344.
345.
346.
347.
348.
349.
350.
351.
352.
353.
354.
355.
356.
357.
358.
359.
360.
361.
362.
363.
364.
365.
366.
367.
368.
369.
370.
371.
372.
373.
374.
375.
376.
377.
378.
379.
380.
381.
382.
383.
384.
385.
386.
387.
388.
389.
390.
391.
392.
393.
394.
395.
396.
397.
398.
399.
400.
401.
402.
403.
404.
405.
406.
407.
408.
409.
410.
411.
412.
413.
414.
415.
416.
417.
418.
419.
420.
421.
422.
423.
424.
425.
426.
427.
428.
429.
430.
431.
432.
433.
434.
435.
436.
437.
438.
439.
440.
441.
442.
443.
444.
445.
446.
447.
448.
449.
450.
451.
452.
453.
454.
455.
456.
457.
458.
459.
460.
461.
462.
463.
464.
465.
466.
467.
468.
469.
470.
471.
472.
473.
474.
475.
476.
477.
478.
479.
480.
481.
482.
483.
484.
485.
486.
487.
488.
489.
490.
491.
492.
493.
494.
495.
496.
497.
498.
499.
500.
501.
502.
503.
504.
505.
506.
507.
508.
509.
510.
511.
512.
513.
514.
515.
516.
517.
518.
519.
520.
521.
522.
523.
524.
525.
526.
527.
528.
529.
530.
531.
532.
533.
534.
535.
536.
537.
538.
539.
540. | OTL logfile created on: 2012-07-22 17:58:18 - Run 3
OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\Piotrek\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
4,00 Gb Total Physical Memory | 2,63 Gb Available Physical Memory | 65,81% Memory free
8,00 Gb Paging File | 6,38 Gb Available in Paging File | 79,82% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 298,09 Gb Total Space | 69,61 Gb Free Space | 23,35% Space Free | Partition Type: NTFS
Drive D: | 3,95 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive G: | 3,74 Gb Total Space | 2,74 Gb Free Space | 73,26% Space Free | Partition Type: FAT32
Computer Name: PG | User Name: Piotrek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2012-07-22 10:48:12 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Piotrek\Desktop\OTL.exe
PRC - [2012-07-03 18:21:30 | 004,273,976 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2012-07-03 18:21:29 | 000,044,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2012-05-24 20:39:22 | 027,112,840 | ---- | M] (Dropbox, Inc.) -- C:\Users\Piotrek\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2012-05-09 21:57:38 | 000,075,136 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2012-05-02 01:42:31 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2012-05-02 00:34:37 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2012-05-02 00:31:38 | 000,348,624 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2012-01-18 08:44:52 | 000,450,848 | ---- | M] (Logitech Inc.) -- C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe
PRC - [2011-11-11 14:08:06 | 000,205,336 | ---- | M] (Logitech Inc.) -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
PRC - [2011-11-11 14:07:54 | 000,265,240 | ---- | M] () -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
PRC - [2011-09-16 22:34:31 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Steam\Steam.exe
PRC - [2011-08-12 12:19:40 | 000,680,984 | ---- | M] () -- C:\Program Files (x86)\Common Files\LogiShrd\LQCVFX\COCIManager.exe
PRC - [2011-08-02 09:33:30 | 004,910,912 | ---- | M] (DT Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
PRC - [2011-06-06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011-01-17 19:50:30 | 011,322,880 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
PRC - [2011-01-17 19:50:30 | 011,314,688 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
PRC - [2010-01-04 14:57:16 | 000,884,736 | ---- | M] (Edimax Technology Co., Ltd.) -- C:\Program Files\MFP Server Utilities\MFPAgent.exe
PRC - [2009-12-23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
PRC - [2007-11-14 12:54:24 | 002,131,392 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files (x86)\Gadu-Gadu\gg.exe
PRC - [2003-03-21 14:56:28 | 000,040,960 | ---- | M] () -- C:\Program Files (x86)\SKK\AutoTransfer\ATServiceNT.exe
[color=#E56717]========== Modules (No Company Name) ==========[/color]
MOD - [2012-06-19 13:38:01 | 020,313,384 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\libcef.dll
MOD - [2012-06-19 13:37:51 | 001,099,576 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avcodec-53.dll
MOD - [2012-06-19 13:37:51 | 000,895,312 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\chromehtml.dll
MOD - [2012-06-19 13:37:51 | 000,190,776 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avformat-53.dll
MOD - [2012-06-19 13:37:51 | 000,123,192 | ---- | M] () -- C:\Program Files (x86)\Steam\bin\avutil-51.dll
MOD - [2011-11-11 14:09:20 | 000,336,408 | ---- | M] () -- C:\Program Files (x86)\Common Files\LogiShrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll
MOD - [2011-11-11 14:08:18 | 007,956,504 | ---- | M] () -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\QTGui4.dll
MOD - [2011-11-11 14:08:18 | 000,342,552 | ---- | M] () -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\QTXml4.dll
MOD - [2011-11-11 14:08:18 | 000,128,536 | ---- | M] () -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\ImageFormats\QJpeg4.dll
MOD - [2011-11-11 14:08:18 | 000,029,208 | ---- | M] () -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\ImageFormats\QGif4.dll
MOD - [2011-11-11 14:08:06 | 002,145,304 | ---- | M] () -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\QTCore4.dll
MOD - [2011-11-11 14:07:54 | 000,265,240 | ---- | M] () -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
MOD - [2011-09-16 19:08:39 | 000,985,088 | ---- | M] () -- C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
MOD - [2011-08-12 12:19:40 | 000,680,984 | ---- | M] () -- C:\Program Files (x86)\Common Files\LogiShrd\LQCVFX\COCIManager.exe
MOD - [2011-05-26 13:42:00 | 000,067,872 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2007-11-14 12:11:46 | 000,106,496 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu\libiax2.dll
MOD - [2007-11-14 12:11:42 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu\libjb.dll
MOD - [2007-10-25 13:51:16 | 000,198,656 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu\libcurl.dll
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV:[b]64bit:[/b] - [2012-07-03 18:21:29 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:[b]64bit:[/b] - [2011-12-05 14:02:44 | 005,739,008 | ---- | M] (Native Instruments GmbH) [Auto | Running] -- C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe -- (NIHardwareService)
SRV:[b]64bit:[/b] - [2009-08-18 02:36:20 | 000,203,264 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2012-07-18 11:10:42 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-05-09 21:57:38 | 000,075,136 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2012-05-02 01:42:31 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012-05-02 00:34:37 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2012-01-18 08:44:52 | 000,450,848 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe -- (UMVPFSrv)
SRV - [2011-11-13 16:16:30 | 000,419,624 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011-06-06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2009-12-23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2003-03-21 14:56:28 | 000,040,960 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\SKK\AutoTransfer\ATServiceNT.exe -- (ATServiceNT)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV:[b]64bit:[/b] - [2012-07-03 18:21:52 | 000,958,400 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:[b]64bit:[/b] - [2012-07-03 18:21:52 | 000,355,856 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:[b]64bit:[/b] - [2012-07-03 18:21:52 | 000,071,064 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:[b]64bit:[/b] - [2012-07-03 18:21:52 | 000,059,728 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:[b]64bit:[/b] - [2012-07-03 18:21:52 | 000,054,072 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:[b]64bit:[/b] - [2012-07-03 18:21:51 | 000,025,232 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:[b]64bit:[/b] - [2012-05-02 15:24:12 | 000,027,760 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)
DRV:[b]64bit:[/b] - [2012-04-27 10:20:04 | 000,132,832 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:[b]64bit:[/b] - [2012-04-25 00:32:27 | 000,098,848 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:[b]64bit:[/b] - [2012-04-10 20:12:42 | 000,526,392 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2012-01-31 19:29:05 | 000,071,152 | ---- | M] (DENSO WAVE INC.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dwusb.sys -- (dwusb)
DRV:[b]64bit:[/b] - [2012-01-31 19:29:05 | 000,048,368 | ---- | M] (DENSO WAVE INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dwserial.sys -- (dwserial)
DRV:[b]64bit:[/b] - [2012-01-18 08:44:36 | 004,865,568 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvuvc64.sys -- (LVUVC64) Logitech QuickCam Pro 9000(UVC)
DRV:[b]64bit:[/b] - [2012-01-18 08:44:28 | 000,351,136 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (LVRS64)
DRV:[b]64bit:[/b] - [2011-11-30 22:13:40 | 000,772,096 | ---- | M] (Line 6) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L6TPortB64.sys -- (L6TPortB)
DRV:[b]64bit:[/b] - [2011-05-10 16:27:54 | 000,049,256 | ---- | M] (Yamaha Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ymidusbx64.sys -- (YMIDUSBW) Yamaha USB-MIDI Driver (WDM)
DRV:[b]64bit:[/b] - [2011-05-10 08:06:08 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:[b]64bit:[/b] - [2010-11-21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2010-04-22 20:00:10 | 000,066,176 | ---- | M] (Line 6) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\L6SM64.sys -- (L6SeaMonkDev)
DRV:[b]64bit:[/b] - [2009-10-07 01:45:50 | 000,030,232 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LVPr2M64.sys -- (LVPr2M64)
DRV:[b]64bit:[/b] - [2009-08-18 03:48:48 | 006,037,504 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-06-20 04:09:57 | 000,054,272 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1E62x64.sys -- (L1E) Sterownik miniportu NDIS dla kontrolera Ethernet Atheros AR8121/AR8113/AR8114 PCI-E (NDIS6.20)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009-05-18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:[b]64bit:[/b] - [2008-10-28 11:28:44 | 000,011,576 | ---- | M] (Samsung Electronics) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\SSPORT.SYS -- (SSPORT)
DRV:[b]64bit:[/b] - [2008-07-26 17:26:34 | 000,050,072 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LVUSBS64.sys -- (LVUSBS64)
DRV:[b]64bit:[/b] - [2007-05-06 20:44:16 | 000,039,552 | ---- | M] (None) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\mfpec.sys -- (ALIWEHCD)
DRV:[b]64bit:[/b] - [2007-01-09 22:36:28 | 000,013,184 | ---- | M] (None) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mfpcomp.sys -- (AliWGP)
DRV:[b]64bit:[/b] - [2006-11-16 16:58:46 | 000,031,248 | ---- | M] (SIA Syncrosoft) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\synUSB64.sys -- (SynasUSB)
DRV:[b]64bit:[/b] - [2006-10-20 01:57:18 | 000,012,416 | ---- | M] (None) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfpvbus.sys -- (WUSBVBus)
DRV:[b]64bit:[/b] - [2005-09-23 22:18:34 | 000,261,120 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MarvinBus64.sys -- (MarvinBus)
DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2003-07-29 09:57:20 | 000,040,448 | ---- | M] (DeviceGuys, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysWOW64\drivers\Dgivecp.Sys -- (DgiVecp)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = pl.v9.com/idg/idg_1339615494_842340
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = pl.v9.com/idg/idg_1339615494_842340
IE - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&AF=100478&tt=151211_wdgt&babsrc=SP_ss&mntrId=cc08206b000000000000002618caca8c
IE - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "about:home"
FF - prefs.js..keyword.URL: "http://search.babylon.com/?AF=100478&tt=151211_wdgt&babsrc=adbartrp&mntrId=cc08206b000000000000002618caca8c&q="
FF - user.js - File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-07-22 12:42:16 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-07-18 11:10:42 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
[2011-09-16 18:51:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Extensions
[2012-05-17 16:26:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\4jzwfze0.default\extensions
[2012-05-17 16:26:04 | 000,000,000 | ---D | M] (WOT) -- C:\Users\Piotrek\AppData\Roaming\mozilla\Firefox\Profiles\4jzwfze0.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2012-01-25 09:29:53 | 000,001,976 | ---- | M] () -- C:\Users\Piotrek\AppData\Roaming\Mozilla\Firefox\Profiles\4jzwfze0.default\searchplugins\duckduckgo.xml
[2012-05-03 14:39:03 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2011-09-16 20:21:38 | 000,000,000 | ---D | M] (Click to call with Skype) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012-07-18 11:10:42 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012-06-17 17:48:09 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml
[2011-12-20 00:29:33 | 000,002,351 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
[2012-06-17 17:48:09 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml
[2012-06-17 17:48:09 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml
[2012-06-17 17:48:09 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml
[2012-06-13 21:24:54 | 000,002,415 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\v9.xml
[2012-06-17 17:48:09 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-06-17 17:48:09 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml
O1 HOSTS File: ([2012-07-21 16:54:52 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2:[b]64bit:[/b] - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (no name) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - No CLSID value found.
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.)
O4 - HKLM..\Run: [MFP Manager] C:\Program Files\MFP Server Utilities\MFPAgent.exe (Edimax Technology Co., Ltd.)
O4 - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001..\Run: [AlcoholAutomount] C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe (Alcohol Soft Development Team)
O4 - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001..\Run: [Gadu-Gadu] C:\Program Files (x86)\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.)
O4 - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)
O4 - Startup: C:\Users\Ewa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O4 - Startup: C:\Users\Piotrek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Piotrek\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O4 - Startup: C:\Users\Piotrek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8:[b]64bit:[/b] - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)
O9 - Extra Button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13[b]64bit:[/b] - gopher Prefix: missing
O15 - HKU\S-1-5-21-1602323878-1899000999-2633565943-1001\..Trusted Domains: line6.net ([]* in Trusted sites)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/products/plugin/autodl/jinstall-160-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab (Java Plug-in 1.4.2_07)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F5AED4DF-08C2-490B-B061-50064F49F99A}: NameServer = 4.2.2.1
O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012-01-31 19:36:26 | 000,000,000 | ---D | M] - C:\Autotransfer -- [ NTFS ]
O32 - AutoRun File - [2011-02-18 12:33:08 | 000,000,067 | R--- | M] () - D:\Autorun.inf -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2012-07-22 17:49:57 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\Desktop\Nowy folder (2)
[2012-07-22 17:34:16 | 000,000,000 | ---D | C] -- C:\_OTL
[2012-07-22 17:29:21 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\Desktop\otl1
[2012-07-22 13:40:14 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Piotrek\Desktop\OTL.exe
[2012-07-22 12:42:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2012-07-22 12:42:29 | 000,355,856 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2012-07-22 12:42:29 | 000,025,232 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2012-07-22 12:42:24 | 000,059,728 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2012-07-22 12:42:24 | 000,054,072 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2012-07-22 12:42:23 | 000,958,400 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2012-07-22 12:42:21 | 000,285,328 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2012-07-22 12:42:21 | 000,071,064 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2012-07-22 12:42:09 | 000,227,648 | ---- | C] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
[2012-07-22 12:42:09 | 000,041,224 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2012-07-22 12:42:00 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2012-07-22 12:42:00 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2012-07-21 17:00:45 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2012-07-21 17:00:45 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Local\temp
[2012-07-21 16:56:23 | 000,000,000 | ---D | C] -- C:\$RECYCLE.BIN
[2012-07-21 16:46:25 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2012-07-21 16:46:25 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2012-07-21 16:46:25 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2012-07-21 16:46:21 | 000,000,000 | ---D | C] -- C:\ComboFix
[2012-07-21 16:46:19 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012-07-21 16:46:03 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2012-07-21 14:24:30 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\Avira
[2012-07-21 14:23:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2012-07-21 14:23:08 | 000,132,832 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys
[2012-07-21 14:23:08 | 000,098,848 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys
[2012-07-21 14:23:08 | 000,027,760 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avkmgr.sys
[2012-07-21 14:23:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2012-07-21 14:23:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira
[2012-07-20 21:13:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Ubisoft
[2012-07-20 17:18:10 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
[2012-07-20 15:18:02 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\Desktop\More Than Words in the Style of Extreme with lyrics (no lead vocal)_data
[2012-07-19 23:13:30 | 000,000,000 | -HSD | C] -- C:\ProgramData\DSS
[2012-07-17 22:49:22 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Roaming\Lionhead Studios
[2012-07-12 01:27:18 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2012-07-12 01:27:18 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2012-07-12 01:27:17 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2012-07-12 01:27:17 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2012-07-12 01:27:17 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2012-07-12 01:27:17 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2012-07-12 01:27:16 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2012-07-12 01:27:16 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2012-07-12 01:27:15 | 002,311,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2012-07-12 01:27:15 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2012-07-12 01:27:15 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2012-07-12 01:27:15 | 000,818,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2012-07-12 01:27:15 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2012-07-11 23:24:21 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3r.dll
[2012-07-11 23:24:21 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msxml3r.dll
[2012-07-11 23:24:16 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll
[2012-07-11 23:24:15 | 001,462,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
[2012-07-11 23:24:14 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
[2012-07-11 23:24:07 | 001,133,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdosys.dll
[2012-07-11 23:24:07 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cdosys.dll
[2012-07-10 23:47:09 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\Documents\Games for Windows - LIVE Demos
[2012-07-10 18:29:06 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\Desktop\DO ZROBIENIA YOUTUBE
[2012-07-10 18:18:25 | 000,000,000 | ---D | C] -- C:\OutputFolder
[2012-07-10 18:18:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Digiarty
[2012-07-10 18:18:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Digiarty
[2012-07-10 16:07:39 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\Documents\WB Games
[2012-07-10 16:07:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD
[2012-07-08 18:45:38 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Local\WMTools Downloaded Files
[2012-07-07 00:41:33 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browserchoice.exe
[2012-07-06 16:28:49 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\Desktop\OGŁOSZENIE ZAROBEK
[2012-06-30 15:52:10 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\Documents\Projekty Avid
[2012-06-28 14:34:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
[2012-06-28 13:29:08 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Local\LooksBuilder
[2012-06-28 13:21:23 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\AppData\Local\MicroVision Applications
[2012-06-28 13:21:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SureThing Express Labeler
[2012-06-28 13:21:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\SureThing Shared
[2012-06-28 13:21:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SureThing Express Labeler
[2012-06-28 13:14:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Studio Plugins
[2012-06-28 13:14:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LooksBuilderSE
[2012-06-22 18:23:01 | 000,000,000 | ---D | C] -- C:\Users\Piotrek\Desktop\ORGANIKA EGZ
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2012-07-22 17:44:40 | 000,021,888 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012-07-22 17:44:40 | 000,021,888 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012-07-22 17:44:29 | 001,523,412 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012-07-22 17:44:29 | 000,687,590 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2012-07-22 17:44:29 | 000,606,992 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012-07-22 17:44:29 | 000,131,176 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2012-07-22 17:44:29 | 000,103,370 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012-07-22 17:37:14 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-07-22 17:37:08 | 3220,529,152 | -HS- | M] () -- C:\hiberfil.sys
[2012-07-22 12:42:31 | 000,001,922 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2012-07-22 12:42:21 | 000,000,350 | -H-- | M] () -- C:\Windows\tasks\avast! Emergency Update.job
[2012-07-22 12:42:21 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2012-07-22 10:48:12 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Piotrek\Desktop\OTL.exe
[2012-07-21 16:54:52 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2012-07-21 14:23:16 | 000,002,030 | ---- | M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2012-07-20 17:18:10 | 000,000,221 | ---- | M] () -- C:\Users\Piotrek\Desktop\Tom Clancy's Splinter Cell Conviction.url
[2012-07-20 15:18:02 | 000,014,016 | ---- | M] () -- C:\Users\Piotrek\Desktop\More Than Words in the Style of Extreme with lyrics (no lead vocal).aup
[2012-07-20 15:08:00 | 004,078,477 | ---- | M] () -- C:\Users\Piotrek\Desktop\More Than Words in the Style of Extreme with lyrics (no lead vocal).mp3
[2012-07-20 10:58:02 | 000,048,347 | ---- | M] () -- C:\Users\Piotrek\Desktop\Ważne.pdf
[2012-07-20 10:57:45 | 000,020,676 | ---- | M] () -- C:\Users\Piotrek\Desktop\Ważne.odt
[2012-07-19 23:57:50 | 000,009,252 | ---- | M] () -- C:\Users\Piotrek\Desktop\riff3(blues-roll).gp4
[2012-07-18 11:31:15 | 000,004,934 | ---- | M] () -- C:\Users\Piotrek\Desktop\paul_gilbert_guitar_sequences.gp3
[2012-07-18 11:14:01 | 000,010,802 | ---- | M] () -- C:\Users\Piotrek\Desktop\marty_friedman_exercises.gp5
[2012-07-18 11:12:16 | 000,006,737 | ---- | M] () -- C:\Users\Piotrek\Desktop\marty_friedman_exercises.gp3
[2012-07-15 22:10:52 | 000,131,207 | ---- | M] () -- C:\Users\Piotrek\Desktop\blues_brothers_sweet_home_chicago.gp5
[2012-07-15 22:04:27 | 000,017,335 | ---- | M] () -- C:\Users\Piotrek\Desktop\blues_brothers_soul_man.gp3
[2012-07-15 16:10:01 | 001,098,080 | ---- | M] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo 03 - Brisingr.epub
[2012-07-15 16:09:46 | 001,719,061 | ---- | M] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo - 02 - Najstarszy.epub
[2012-07-15 16:09:26 | 000,513,499 | ---- | M] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo - 01- Eragon.epub
[2012-07-15 16:08:20 | 002,371,718 | ---- | M] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo 03 - Brisingr.pdf
[2012-07-15 16:08:16 | 003,793,134 | ---- | M] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo - 02 - Najstarszy.pdf
[2012-07-15 16:08:06 | 002,578,048 | ---- | M] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo - 01- Eragon.pdf
[2012-07-15 15:53:10 | 000,046,296 | ---- | M] () -- C:\Users\Piotrek\Desktop\blues_brothers_everybody_needs_somebody.gp5
[2012-07-15 10:46:59 | 000,009,961 | ---- | M] () -- C:\Users\Piotrek\Desktop\pat_metheny_james.gp4
[2012-07-15 10:45:14 | 000,016,602 | ---- | M] () -- C:\Users\Piotrek\Desktop\pat_metheny_james.gp5
[2012-07-15 10:42:21 | 000,009,231 | ---- | M] () -- C:\Users\Piotrek\Desktop\19350.gp3
[2012-07-15 10:41:23 | 000,002,849 | ---- | M] () -- C:\Users\Piotrek\Desktop\Scofield, John - Busted.zip
[2012-07-13 17:21:19 | 004,552,150 | ---- | M] () -- C:\Users\Piotrek\Desktop\I Am The Walrus The Beatles Karaoke.wmv.mp3
[2012-07-13 13:43:41 | 000,042,442 | ---- | M] () -- C:\Users\Piotrek\Desktop\PLAN UNCHAINED.pdf
[2012-07-12 20:45:47 | 000,000,349 | ---- | M] () -- C:\Users\Public\Documents\PCLECHAL.INI
[2012-07-12 18:03:09 | 000,019,456 | ---- | M] () -- C:\Users\Piotrek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-07-12 18:03:07 | 000,006,844 | ---- | M] () -- C:\Users\Piotrek\Desktop\steel panther - eyes of the panther vordrab2.cos2
[2012-07-12 13:28:11 | 000,391,056 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012-07-10 21:43:19 | 000,057,574 | ---- | M] () -- C:\Users\Piotrek\Desktop\jamiroquai_cosmic_girl.gp4
[2012-07-10 18:18:18 | 000,001,366 | ---- | M] () -- C:\Users\Piotrek\Desktop\WinX Free WMV to MP4 Converter.lnk
[2012-07-03 18:21:52 | 000,958,400 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2012-07-03 18:21:52 | 000,355,856 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2012-07-03 18:21:52 | 000,071,064 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2012-07-03 18:21:52 | 000,059,728 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2012-07-03 18:21:52 | 000,054,072 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2012-07-03 18:21:51 | 000,025,232 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2012-07-03 18:21:32 | 000,041,224 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2012-07-03 18:21:28 | 000,227,648 | ---- | M] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
[2012-07-03 18:21:18 | 000,285,328 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2012-06-28 14:34:06 | 000,001,584 | ---- | M] () -- C:\Users\Public\Desktop\Logitech Webcam Software .lnk
[2012-06-28 14:22:17 | 000,002,131 | ---- | M] () -- C:\Users\Public\Desktop\Avid Studio.lnk
[2012-06-28 13:21:20 | 000,001,066 | ---- | M] () -- C:\Users\Piotrek\Desktop\SureThing Express Labeler.lnk
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2012-07-22 12:42:31 | 000,001,922 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2012-07-22 12:42:21 | 000,000,350 | -H-- | C] () -- C:\Windows\tasks\avast! Emergency Update.job
[2012-07-22 12:42:21 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt
[2012-07-21 16:46:25 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2012-07-21 16:46:25 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2012-07-21 16:46:25 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2012-07-21 16:46:25 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2012-07-21 16:46:25 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2012-07-21 14:23:16 | 000,002,030 | ---- | C] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2012-07-20 22:11:57 | 000,046,322 | ---- | C] () -- C:\Users\Piotrek\Desktop\Pink Floyd - Another Brick In The Wall (Part II).gp4
[2012-07-20 17:18:10 | 000,000,221 | ---- | C] () -- C:\Users\Piotrek\Desktop\Tom Clancy's Splinter Cell Conviction.url
[2012-07-20 15:18:02 | 000,014,016 | ---- | C] () -- C:\Users\Piotrek\Desktop\More Than Words in the Style of Extreme with lyrics (no lead vocal).aup
[2012-07-20 15:07:59 | 004,078,477 | ---- | C] () -- C:\Users\Piotrek\Desktop\More Than Words in the Style of Extreme with lyrics (no lead vocal).mp3
[2012-07-20 14:43:42 | 002,583,863 | ---- | C] () -- C:\Users\Piotrek\Desktop\Pinball Wizard .mp3
[2012-07-20 10:57:58 | 000,048,347 | ---- | C] () -- C:\Users\Piotrek\Desktop\Ważne.pdf
[2012-07-20 10:54:27 | 000,020,676 | ---- | C] () -- C:\Users\Piotrek\Desktop\Ważne.odt
[2012-07-19 23:57:48 | 000,009,252 | ---- | C] () -- C:\Users\Piotrek\Desktop\riff3(blues-roll).gp4
[2012-07-18 11:31:15 | 000,004,934 | ---- | C] () -- C:\Users\Piotrek\Desktop\paul_gilbert_guitar_sequences.gp3
[2012-07-18 11:14:00 | 000,010,802 | ---- | C] () -- C:\Users\Piotrek\Desktop\marty_friedman_exercises.gp5
[2012-07-18 11:12:15 | 000,006,737 | ---- | C] () -- C:\Users\Piotrek\Desktop\marty_friedman_exercises.gp3
[2012-07-15 22:10:51 | 000,131,207 | ---- | C] () -- C:\Users\Piotrek\Desktop\blues_brothers_sweet_home_chicago.gp5
[2012-07-15 22:04:26 | 000,017,335 | ---- | C] () -- C:\Users\Piotrek\Desktop\blues_brothers_soul_man.gp3
[2012-07-15 16:10:01 | 001,098,080 | ---- | C] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo 03 - Brisingr.epub
[2012-07-15 16:09:46 | 001,719,061 | ---- | C] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo - 02 - Najstarszy.epub
[2012-07-15 16:09:26 | 000,513,499 | ---- | C] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo - 01- Eragon.epub
[2012-07-15 16:08:15 | 002,371,718 | ---- | C] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo 03 - Brisingr.pdf
[2012-07-15 16:08:10 | 003,793,134 | ---- | C] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo - 02 - Najstarszy.pdf
[2012-07-15 16:08:03 | 002,578,048 | ---- | C] () -- C:\Users\Piotrek\Desktop\Paolini Christopher - Dziedzictwo - 01- Eragon.pdf
[2012-07-15 15:53:09 | 000,046,296 | ---- | C] () -- C:\Users\Piotrek\Desktop\blues_brothers_everybody_needs_somebody.gp5
[2012-07-15 10:46:58 | 000,009,961 | ---- | C] () -- C:\Users\Piotrek\Desktop\pat_metheny_james.gp4
[2012-07-15 10:45:13 | 000,016,602 | ---- | C] () -- C:\Users\Piotrek\Desktop\pat_metheny_james.gp5
[2012-07-15 10:42:21 | 000,009,231 | ---- | C] () -- C:\Users\Piotrek\Desktop\19350.gp3
[2012-07-15 10:41:23 | 000,002,849 | ---- | C] () -- C:\Users\Piotrek\Desktop\Scofield, John - Busted.zip
[2012-07-13 17:21:16 | 004,552,150 | ---- | C] () -- C:\Users\Piotrek\Desktop\I Am The Walrus The Beatles Karaoke.wmv.mp3
[2012-07-13 13:43:39 | 000,042,442 | ---- | C] () -- C:\Users\Piotrek\Desktop\PLAN UNCHAINED.pdf
[2012-07-12 18:03:07 | 000,006,844 | ---- | C] () -- C:\Users\Piotrek\Desktop\steel panther - eyes of the panther vordrab2.cos2
[2012-07-10 21:43:17 | 000,057,574 | ---- | C] () -- C:\Users\Piotrek\Desktop\jamiroquai_cosmic_girl.gp4
[2012-07-10 21:36:09 | 000,053,999 | ---- | C] () -- C:\Users\Piotrek\Desktop\Red Hot Chili Peppers - Can't Stop (6).gp4
[2012-07-10 18:18:18 | 000,001,366 | ---- | C] () -- C:\Users\Piotrek\Desktop\WinX Free WMV to MP4 Converter.lnk
[2012-06-28 14:34:06 | 000,001,584 | ---- | C] () -- C:\Users\Public\Desktop\Logitech Webcam Software .lnk
[2012-06-28 13:21:20 | 000,001,066 | ---- | C] () -- C:\Users\Piotrek\Desktop\SureThing Express Labeler.lnk
[2012-06-28 13:06:50 | 000,002,131 | ---- | C] () -- C:\Users\Public\Desktop\Avid Studio.lnk
[2012-06-02 13:17:13 | 000,021,683 | ---- | C] () -- C:\Users\Piotrek\.recently-used.xbel
[2012-05-09 21:55:02 | 000,268,952 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012-05-09 21:55:01 | 000,682,280 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe
[2012-05-09 21:55:01 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2012-05-08 19:59:10 | 000,000,163 | ---- | C] () -- C:\Users\Piotrek\.gtkrc-2.0
[2012-04-12 13:21:26 | 004,174,336 | ---- | C] () -- C:\Windows\SysWow64\LS3Renderer.dll
[2012-02-29 19:45:03 | 000,000,092 | ---- | C] () -- C:\Windows\mp3wavcon.ini
[2012-02-29 19:43:05 | 000,000,005 | ---- | C] () -- C:\Windows\SysWow64\SySmp3con.dat
[2012-02-29 19:43:01 | 000,237,568 | ---- | C] () -- C:\Windows\SysWow64\lame_enc.dll
[2012-02-17 18:35:43 | 001,576,007 | ---- | C] () -- C:\Windows\SysWow64\libfftw3-3.dll
[2012-02-17 18:35:43 | 001,527,650 | ---- | C] () -- C:\Windows\SysWow64\libfftw3f-3.dll
[2012-02-17 18:35:43 | 001,038,577 | ---- | C] () -- C:\Windows\SysWow64\libfftw3l-3.dll
[2012-01-18 08:44:00 | 010,920,984 | ---- | C] () -- C:\Windows\SysWow64\LogiDPP.dll
[2012-01-18 08:44:00 | 000,336,408 | ---- | C] () -- C:\Windows\SysWow64\DevManagerCore.dll
[2012-01-18 08:44:00 | 000,104,472 | ---- | C] () -- C:\Windows\SysWow64\LogiDPPApp.exe
[2012-01-12 18:36:40 | 000,417,792 | ---- | C] () -- C:\Windows\SysWow64\MFPBot.dll
[2012-01-12 18:36:40 | 000,229,376 | ---- | C] () -- C:\Windows\SysWow64\Install98MFPPS.dll
[2012-01-12 18:36:39 | 000,245,760 | ---- | C] () -- C:\Windows\SysWow64\InstallMFPPS.dll
[2012-01-12 18:36:39 | 000,151,552 | ---- | C] () -- C:\Windows\SysWow64\ddschk.dll
[2011-12-20 00:15:35 | 000,007,680 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2011-11-12 16:32:27 | 000,110,592 | ---- | C] () -- C:\Windows\WiaInst.exe
[2011-11-02 16:31:57 | 000,005,934 | ---- | C] () -- C:\Windows\CDex.INI
[2011-10-27 21:06:02 | 000,000,051 | ---- | C] () -- C:\Windows\SysWow64\SYNSOPOS.exe.cfg
[2011-10-03 22:11:46 | 000,208,896 | ---- | C] () -- C:\Windows\SysWow64\SSRemove.Exe
[2011-09-28 17:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2011-09-17 22:41:18 | 000,019,456 | ---- | C] () -- C:\Users\Piotrek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-09-16 21:13:07 | 000,002,892 | ---- | C] () -- C:\Windows\SysWow64\audcon.sys
[2011-09-16 21:12:54 | 000,086,016 | ---- | C] () -- C:\Windows\SysWow64\SYNSOPOS.exe
[2011-09-16 18:20:24 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2011-02-10 06:03:48 | 000,000,326 | ---- | C] () -- C:\Windows\primopdf.ini
[color=#E56717]========== LOP Check ==========[/color]
[2011-11-10 13:15:38 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\OpenOffice.org
[2011-11-10 01:01:36 | 000,000,000 | ---D | M] -- C:\Users\Ewa\AppData\Roaming\Opera
[2011-12-20 00:32:33 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\AnvSoft
[2012-04-11 15:11:26 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Audacity
[2011-12-20 00:22:20 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Babylon
[2012-05-14 00:06:34 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Cakewalk
[2012-04-04 19:13:44 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\calibre
[2011-12-20 01:02:06 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Canneverbe Limited
[2012-06-04 19:19:52 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Celemony Software GmbH
[2012-04-10 21:30:04 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\DAEMON Tools Lite
[2012-07-22 17:39:04 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Dropbox
[2011-10-22 17:38:48 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\EarMaster
[2012-04-29 00:58:30 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\FXpansion
[2011-10-05 10:57:22 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Gadu-Gadu
[2012-06-02 13:17:13 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\gtk-2.0
[2011-11-13 16:13:47 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\ImgBurn
[2012-05-08 12:32:58 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\inkscape
[2011-09-16 19:04:32 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\IrfanView
[2012-06-20 15:48:28 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\iZotope
[2012-04-23 15:32:54 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Kazrog LLC
[2011-09-16 21:02:50 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Leadertech
[2012-06-19 13:52:51 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Line 6
[2012-07-17 22:49:22 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Lionhead Studios
[2012-03-03 14:10:41 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Logia
[2012-05-08 13:10:03 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\LogoMaker
[2012-03-23 21:15:02 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\LucasArts
[2012-04-07 14:49:14 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\MAGIX
[2011-09-16 19:09:43 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\OpenOffice.org
[2012-01-05 17:17:54 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Opera
[2012-05-10 00:54:05 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\PanoViewer
[2012-05-10 01:10:01 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\PhotoScape
[2012-06-28 13:25:00 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\PrimoPDF
[2012-05-01 20:10:53 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Recabinet3Presets
[2012-06-07 01:13:25 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Red Giant Link
[2011-09-16 21:14:53 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Steinberg
[2012-07-12 01:14:49 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Synthesia
[2012-02-05 13:19:30 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Toontrack
[2011-12-31 00:39:05 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\Trine2
[2012-02-20 22:53:08 | 000,000,000 | ---D | M] -- C:\Users\Piotrek\AppData\Roaming\VST3 Presets
[2012-07-22 12:42:21 | 000,000,350 | -H-- | M] () -- C:\Windows\Tasks\avast! Emergency Update.job
[2012-07-21 16:55:51 | 000,032,604 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[color=#E56717]========== Purity Check ==========[/color]
< End of report > |