OTL logfile created on: 2011-10-15 19:33:22 - Run 1
OTL by OldTimer - Version 3.2.30.0     Folder = D:\Użytki\Antywirusy\OTL
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19154)
Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd
 
893,32 Mb Total Physical Memory | 134,75 Mb Available Physical Memory | 15,08% Memory free
1,59 Gb Paging File | 0,25 Gb Available in Paging File | 15,58% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 57,00 Gb Total Space | 19,53 Gb Free Space | 34,25% Space Free | Partition Type: NTFS
Drive D: | 90,58 Gb Total Space | 38,19 Gb Free Space | 42,16% Space Free | Partition Type: NTFS
 
Computer Name: ROBERT-PC | User Name: Robert | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-10-15 19:29:51 | 000,583,168 | ---- | M] (OldTimer Tools) -- D:\Użytki\Antywirusy\OTL\OTL.exe
PRC - [2011-07-02 20:03:03 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2011-04-28 22:35:59 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2010-11-24 09:20:26 | 000,233,936 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashUtil10l_ActiveX.exe
PRC - [2010-09-27 16:42:18 | 004,180,576 | ---- | M] (SafeNet Inc.) -- C:\Windows\System32\hasplms.exe
PRC - [2010-08-03 02:09:55 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010-07-07 17:55:10 | 003,687,736 | ---- | M] (Ghisler Software GmbH) -- C:\totalcmd\TOTALCMD.EXE
PRC - [2010-01-15 08:11:00 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2009-04-11 09:27:38 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009-04-11 09:27:30 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe
PRC - [2008-01-19 09:38:40 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe
PRC - [2007-04-28 05:15:46 | 000,114,688 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe
PRC - [2007-04-27 03:56:10 | 000,538,744 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
PRC - [2007-04-25 20:14:16 | 004,444,160 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2007-03-29 19:39:20 | 000,427,576 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
PRC - [2007-03-29 19:39:18 | 000,411,192 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
PRC - [2007-03-22 20:46:54 | 000,448,632 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\Toshiba\SmoothView\SmoothView.exe
PRC - [2007-02-26 06:55:18 | 000,125,048 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
PRC - [2007-01-26 02:50:26 | 000,063,096 | ---- | M] () -- c:\Toshiba\IVP\swupdate\swupdtmr.exe
PRC - [2007-01-26 02:47:50 | 000,136,816 | ---- | M] () -- C:\Toshiba\IVP\ISM\pinger.exe
PRC - [2007-01-22 17:59:08 | 000,417,792 | ---- | M] (TOSHIBA) -- C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe
PRC - [2006-11-15 07:02:36 | 001,372,160 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
PRC - [2006-11-15 06:19:42 | 000,405,504 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe
PRC - [2006-11-15 05:33:10 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\ConfigFree\CFSvcs.exe
PRC - [2006-10-05 21:10:12 | 000,009,216 | ---- | M] (Agere Systems) -- C:\Windows\System32\agrsmsvc.exe
PRC - [2006-08-24 01:39:48 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
PRC - [2006-05-26 03:30:16 | 000,114,688 | ---- | M] (TOSHIBA Corporation) -- C:\Windows\System32\TODDSrv.exe
PRC - [2004-12-13 01:05:20 | 001,527,893 | ---- | M] (The Firebird Project) -- C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
PRC - [2004-12-13 01:05:20 | 000,065,536 | ---- | M] (The Firebird Project) -- C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2011-10-13 20:20:07 | 000,998,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\6bc98e9b5eedaa8f71c5454d36a4b772\System.Management.ni.dll
MOD - [2011-10-13 20:17:50 | 011,804,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\e00630ec1e225a2376fdd430645e20f7\System.Web.ni.dll
MOD - [2011-10-13 20:17:37 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\6d2f689baff5da3df134fdec0742a13c\System.Runtime.Remoting.ni.dll
MOD - [2011-10-13 20:17:22 | 000,518,656 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\TCrdMain\6033cf440f9bb78656b2a0f9de3818f5\TCrdMain.ni.exe
MOD - [2011-10-13 19:44:18 | 005,450,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\c1c06a392871267db27f7cbc40e1c4fb\System.Xml.ni.dll
MOD - [2011-10-13 19:43:50 | 012,430,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\1363115565fff5a641243a48f396f107\System.Windows.Forms.ni.dll
MOD - [2011-10-13 19:43:29 | 001,587,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\367c4043efc2f32d843cb588b0dc97fc\System.Drawing.ni.dll
MOD - [2011-10-13 19:42:40 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\231b0b42eff55de5c7d7debe555c16b7\PresentationFramework.Aero.ni.dll
MOD - [2011-10-13 19:42:37 | 014,328,832 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\94f892556ec9fa7a508fc9d214ceaedf\PresentationFramework.ni.dll
MOD - [2011-10-13 19:42:08 | 012,216,832 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\53f949f4664bb316f9b7a00d73a6e290\PresentationCore.ni.dll
MOD - [2011-10-13 19:41:48 | 003,325,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\fd2c727bcef2e019eb96c1145f423701\WindowsBase.ni.dll
MOD - [2011-10-13 19:41:42 | 007,950,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\f9c36ea806e77872dce891c77b68fac3\System.ni.dll
MOD - [2011-10-13 19:41:07 | 011,490,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\b6632a8b2f276a8e31f5b0f6b2006cd1\mscorlib.ni.dll
MOD - [2010-10-08 09:09:06 | 001,675,264 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.2670.36984__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll
MOD - [2010-10-08 09:09:06 | 000,233,472 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.2670.36934__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll
MOD - [2010-10-08 09:09:06 | 000,184,320 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.2670.37000__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll
MOD - [2010-10-08 09:09:06 | 000,098,304 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Wizard\2.0.2670.37252__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Wizard.dll
MOD - [2010-10-08 09:09:06 | 000,073,728 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.2670.37243__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll
MOD - [2010-10-08 09:09:06 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.2670.36974__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll
MOD - [2010-10-08 09:09:06 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Runtime\2.0.2670.36998__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Runtime.dll
MOD - [2010-10-08 09:09:06 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.2670.36956__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll
MOD - [2010-10-08 09:09:06 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.2670.37113__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll
MOD - [2010-10-08 09:09:05 | 000,061,440 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.2670.37191__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll
MOD - [2010-10-08 09:09:04 | 000,483,328 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.2670.37290__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll
MOD - [2010-10-08 09:08:28 | 000,135,168 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.2670.37297__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll
MOD - [2010-10-08 09:08:28 | 000,090,112 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.2670.37208__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll
MOD - [2010-10-08 09:08:28 | 000,073,728 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.2670.36950__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll
MOD - [2010-10-08 09:08:27 | 000,667,648 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.2670.37126__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll
MOD - [2010-10-08 09:08:27 | 000,401,408 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.2670.37225__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll
MOD - [2010-10-08 09:08:27 | 000,331,776 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.2670.37202__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll
MOD - [2010-10-08 09:08:27 | 000,061,440 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.2670.37200__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll
MOD - [2010-10-08 09:08:27 | 000,049,152 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.2670.37122__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll
MOD - [2010-10-08 09:08:27 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime\2.0.2670.37280__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.dll
MOD - [2010-10-08 09:08:26 | 000,913,408 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Dashboard\2.0.2670.37246__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Dashboard.dll
MOD - [2010-10-08 09:08:26 | 000,577,536 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.2670.37015__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll
MOD - [2010-10-08 09:08:26 | 000,475,136 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.2670.37116__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll
MOD - [2010-10-08 09:08:26 | 000,438,272 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard\2.0.2670.36959__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll
MOD - [2010-10-08 09:08:26 | 000,401,408 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard\2.0.2670.37176__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.dll
MOD - [2010-10-08 09:08:26 | 000,303,104 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard\2.0.2670.37023__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.dll
MOD - [2010-10-08 09:08:26 | 000,208,896 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.2670.37007__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll
MOD - [2010-10-08 09:08:26 | 000,118,784 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.2670.37152__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll
MOD - [2010-10-08 09:08:26 | 000,053,248 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.2670.37114__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll
MOD - [2010-10-08 09:08:26 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.2670.37021__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll
MOD - [2010-10-08 09:08:26 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.2670.37122__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll
MOD - [2010-10-08 09:08:26 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.2670.37151__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll
MOD - [2010-10-08 09:08:26 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.2670.37175__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll
MOD - [2010-10-08 09:08:25 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.2636.18437__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll
MOD - [2010-10-08 09:08:25 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.2636.18458__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll
MOD - [2010-10-08 09:08:25 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.2636.18458__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll
MOD - [2010-10-08 09:08:25 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.2636.18438__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll
MOD - [2010-10-08 09:08:25 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.2636.18457__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll
MOD - [2010-10-08 09:08:24 | 000,049,152 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Foundation\2.0.2636.18430__90ba9c70f846762e\CLI.Foundation.dll
MOD - [2010-10-08 09:08:24 | 000,045,056 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll
MOD - [2010-10-08 09:08:24 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\LOG.Foundation\2.0.2636.18428__90ba9c70f846762e\LOG.Foundation.dll
MOD - [2010-10-08 09:08:24 | 000,028,672 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.2636.18485__90ba9c70f846762e\CLI.Foundation.XManifest.dll
MOD - [2010-10-08 09:08:24 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.2636.18430__90ba9c70f846762e\NEWAEM.Foundation.dll
MOD - [2010-10-08 09:08:24 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\DEM.OS.I0602\2.0.2636.18442__90ba9c70f846762e\DEM.OS.I0602.dll
MOD - [2010-10-08 09:08:24 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.2636.18438__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll
MOD - [2010-10-08 09:08:24 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.2636.18437__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll
MOD - [2010-10-08 09:08:24 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\MOM.Foundation\2.0.2636.18438__90ba9c70f846762e\MOM.Foundation.dll
MOD - [2010-10-08 09:08:24 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\DEM.OS\2.0.2636.18443__90ba9c70f846762e\DEM.OS.dll
MOD - [2010-10-08 09:08:24 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\DEM.Graphics\2.0.2636.18441__90ba9c70f846762e\DEM.Graphics.dll
MOD - [2010-10-08 09:08:24 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll
MOD - [2010-10-08 09:08:24 | 000,006,656 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll
MOD - [2010-10-08 09:08:23 | 000,057,344 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.2642.27815__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll
MOD - [2010-10-08 09:08:23 | 000,053,248 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Shared\2.0.2636.18443__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Shared.dll
MOD - [2010-10-08 09:08:23 | 000,053,248 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.2636.18449__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll
MOD - [2010-10-08 09:08:23 | 000,049,152 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.2636.18438__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll
MOD - [2010-10-08 09:08:23 | 000,049,152 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.2636.18451__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll
MOD - [2010-10-08 09:08:23 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.2636.18459__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll
MOD - [2010-10-08 09:08:23 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.2636.18449__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll
MOD - [2010-10-08 09:08:23 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.2636.18451__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll
MOD - [2010-10-08 09:08:23 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.2636.18449__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll
MOD - [2010-10-08 09:08:23 | 000,028,672 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.2636.18443__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll
MOD - [2010-10-08 09:08:23 | 000,028,672 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.2636.18442__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll
MOD - [2010-10-08 09:08:23 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Shared\2.0.2636.18459__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.dll
MOD - [2010-10-08 09:08:23 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.2636.18450__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll
MOD - [2010-10-08 09:08:23 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.2636.18440__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll
MOD - [2010-10-08 09:08:23 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.2636.18440__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll
MOD - [2010-10-08 09:08:23 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\APM.Foundation\2.0.2636.18451__90ba9c70f846762e\APM.Foundation.dll
MOD - [2010-10-08 09:08:23 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Foundation\2.0.2636.18429__90ba9c70f846762e\AEM.Foundation.dll
MOD - [2010-10-08 09:08:23 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\ACE.Graphics.DisplaysManager.Shared\2.0.2573.17685__90ba9c70f846762e\ACE.Graphics.DisplaysManager.Shared.dll
MOD - [2010-10-08 09:08:23 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.2636.18435__90ba9c70f846762e\CLI.Component.Client.Shared.dll
MOD - [2010-10-08 09:08:23 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.2636.18442__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll
MOD - [2010-10-08 09:08:23 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.2636.18437__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll
MOD - [2010-10-08 09:08:23 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.2636.18442__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll
MOD - [2010-10-08 09:08:23 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.2636.18441__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll
MOD - [2010-10-08 09:08:23 | 000,016,384 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Server.Shared\2.0.2636.18437__90ba9c70f846762e\AEM.Server.Shared.dll
MOD - [2010-10-08 09:08:12 | 000,036,864 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.2670.37327__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll
MOD - [2010-10-08 09:08:12 | 000,006,656 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.2670.36929__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll
MOD - [2010-10-08 09:08:11 | 000,466,944 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.2670.36967__90ba9c70f846762e\CLI.Component.Wizard.dll
MOD - [2010-10-08 09:08:11 | 000,397,312 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Systemtray\2.0.2670.37259__90ba9c70f846762e\CLI.Component.Systemtray.dll
MOD - [2010-10-08 09:08:11 | 000,102,400 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\MOM.Implementation\2.0.2670.37270__90ba9c70f846762e\MOM.Implementation.dll
MOD - [2010-10-08 09:08:11 | 000,098,304 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.2670.36932__90ba9c70f846762e\CLI.Component.Runtime.dll
MOD - [2010-10-08 09:08:11 | 000,057,344 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.2670.37267__90ba9c70f846762e\LOG.Foundation.Implementation.dll
MOD - [2010-10-08 09:08:11 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.2636.18439__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll
MOD - [2010-10-08 09:08:11 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.2636.18435__90ba9c70f846762e\LOG.Foundation.Private.dll
MOD - [2010-10-08 09:08:11 | 000,024,576 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.2636.18458__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll
MOD - [2010-10-08 09:08:11 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.2636.18440__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll
MOD - [2010-10-08 09:08:11 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.2636.18433__90ba9c70f846762e\CLI.Foundation.Private.dll
MOD - [2010-10-08 09:08:10 | 001,404,928 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.2670.36944__90ba9c70f846762e\CLI.Component.Dashboard.dll
MOD - [2010-10-08 09:08:10 | 000,061,440 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\ATIDEMOS\2.0.2670.36933__90ba9c70f846762e\ATIDEMOS.dll
MOD - [2010-10-08 09:08:10 | 000,045,056 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Server\2.0.2670.36930__90ba9c70f846762e\AEM.Server.dll
MOD - [2010-10-08 09:08:10 | 000,040,960 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.2636.18437__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll
MOD - [2010-10-08 09:08:10 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CCC.Implementation\2.0.2670.37269__90ba9c70f846762e\CCC.Implementation.dll
MOD - [2010-10-08 09:08:10 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll
MOD - [2010-10-08 09:08:10 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.2636.18439__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll
MOD - [2010-10-08 09:08:10 | 000,020,480 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.2636.18452__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll
MOD - [2007-04-25 06:57:36 | 000,159,744 | ---- | M] () -- C:\Windows\System32\atitmmxx.dll
MOD - [2007-04-23 19:38:08 | 000,009,216 | ---- | M] () -- C:\Program Files\Toshiba\ConfigFree\NotifyCFF.dll
MOD - [2006-12-02 03:55:42 | 000,009,216 | ---- | M] () -- C:\Program Files\Toshiba\TBS\NotifyTBS.dll
MOD - [2006-11-10 03:27:00 | 000,090,112 | ---- | M] () -- C:\Program Files\Toshiba\FlashCards\TWarnMsg\TWarnMsg.dll
MOD - [2006-11-09 03:08:30 | 000,009,216 | ---- | M] () -- C:\Program Files\Toshiba\PCDiag\NotifyPCD.dll
MOD - [2006-10-10 20:44:16 | 000,009,728 | ---- | M] () -- C:\Program Files\Toshiba\TOSHIBA Assist\NotifyX.dll
MOD - [2006-10-07 20:57:04 | 000,053,248 | ---- | M] () -- C:\Program Files\Toshiba\TOSHIBA Disc Creator\NotifyTDC.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2011-07-02 20:03:03 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011-06-29 15:59:18 | 000,155,344 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe -- (Sony Ericsson PCCompanion)
SRV - [2011-06-13 22:09:22 | 000,267,568 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Fix it Center\Matsvc.exe -- (MatSvc)
SRV - [2011-04-28 22:35:59 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010-09-27 16:42:18 | 004,180,576 | ---- | M] (SafeNet Inc.) [Auto | Running] -- C:\Windows\System32\hasplms.exe -- (hasplms)
SRV - [2008-01-19 09:38:26 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007-04-28 05:15:46 | 000,114,688 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe -- (TNaviSrv)
SRV - [2007-03-29 19:39:20 | 000,427,576 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe -- (TosCoSrv)
SRV - [2007-02-26 06:55:18 | 000,125,048 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
SRV - [2007-01-26 02:50:26 | 000,063,096 | ---- | M] () [Auto | Running] -- c:\Toshiba\IVP\swupdate\swupdtmr.exe -- (Swupdtmr)
SRV - [2007-01-26 02:47:50 | 000,136,816 | ---- | M] () [Auto | Running] -- C:\Toshiba\IVP\ISM\pinger.exe -- (pinger)
SRV - [2006-11-15 05:33:10 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\Toshiba\ConfigFree\CFSvcs.exe -- (CFSvcs)
SRV - [2006-10-05 21:10:12 | 000,009,216 | ---- | M] (Agere Systems) [Auto | Running] -- C:\Windows\System32\agrsmsvc.exe -- (AgereModemAudio)
SRV - [2006-08-24 01:39:48 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)
SRV - [2006-05-26 03:30:16 | 000,114,688 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\System32\TODDSrv.exe -- (TODDSrv)
SRV - [2004-12-13 01:05:20 | 001,527,893 | ---- | M] (The Firebird Project) [On_Demand | Running] -- C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe -- (FirebirdServerDefaultInstance)
SRV - [2004-12-13 01:05:20 | 000,065,536 | ---- | M] (The Firebird Project) [Auto | Running] -- C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2011-09-24 19:46:18 | 000,047,616 | ---- | M] (Aladdin Knowledge Systems) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\Haspnt.sys -- (Haspnt)
DRV - [2011-07-02 20:03:10 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2011-07-02 20:03:09 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010-09-27 16:42:24 | 000,356,864 | ---- | M] (SafeNet Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\aksfridge.sys -- (aksfridge)
DRV - [2010-09-27 16:42:16 | 000,238,208 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\akshasp.sys -- (akshasp)
DRV - [2010-09-27 16:42:14 | 000,016,384 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\aksusb.sys -- (aksusb)
DRV - [2010-09-27 16:42:12 | 000,046,336 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\akshhl.sys -- (akshhl)
DRV - [2010-06-18 01:27:22 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010-05-26 20:45:04 | 000,018,816 | ---- | M] (Sophos Plc) [Kernel | System | Running] -- C:\Windows\System32\SAVRKBootTasks.sys -- (SAVRKBootTasks)
DRV - [2010-05-10 20:41:30 | 000,067,656 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2010-03-15 11:38:44 | 000,124,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s1039mdm.sys -- (s1039mdm)
DRV - [2010-03-15 11:38:44 | 000,123,504 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s1039unic.sys -- (s1039unic) Sony Ericsson Device 1039 USB Ethernet Emulation (WDM)
DRV - [2010-03-15 11:38:44 | 000,117,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s1039mgmt.sys -- (s1039mgmt) Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM)
DRV - [2010-03-15 11:38:44 | 000,113,904 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s1039obex.sys -- (s1039obex)
DRV - [2010-03-15 11:38:44 | 000,098,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s1039bus.sys -- (s1039bus) Sony Ericsson Device 1039 driver (WDM)
DRV - [2010-03-15 11:38:44 | 000,025,456 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s1039nd5.sys -- (s1039nd5) Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS)
DRV - [2010-03-15 11:38:44 | 000,014,960 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s1039mdfl.sys -- (s1039mdfl)
DRV - [2010-02-17 20:25:48 | 000,012,872 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2008-05-16 11:33:14 | 000,115,752 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s0016unic.sys -- (s0016unic) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM)
DRV - [2008-05-16 11:33:14 | 000,025,512 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s0016nd5.sys -- (s0016nd5) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS)
DRV - [2008-05-16 11:33:14 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s0016mdfl.sys -- (s0016mdfl)
DRV - [2008-05-16 11:33:12 | 000,120,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s0016mdm.sys -- (s0016mdm)
DRV - [2008-05-16 11:33:12 | 000,114,216 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s0016mgmt.sys -- (s0016mgmt) Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM)
DRV - [2008-05-16 11:33:12 | 000,110,632 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s0016obex.sys -- (s0016obex)
DRV - [2008-05-16 11:33:12 | 000,089,256 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\s0016bus.sys -- (s0016bus) Sony Ericsson Device 0016 driver (WDM)
DRV - [2007-08-29 12:10:32 | 000,092,032 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2007-04-28 05:13:58 | 000,285,184 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\tos_sps32.sys -- (tos_sps32)
DRV - [2007-04-25 07:07:14 | 002,590,720 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2007-03-01 03:04:58 | 000,694,784 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2007-01-24 23:44:06 | 000,290,304 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tifm21.sys -- (tifm21)
DRV - [2006-12-26 03:35:08 | 000,067,072 | ---- | M] (Realtek Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2006-11-29 00:11:00 | 001,161,888 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2006-11-22 10:01:48 | 000,693,760 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\hardlock.sys -- (hardlock)
DRV - [2006-10-18 20:50:04 | 000,016,128 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tdcmdpst.sys -- (tdcmdpst)
DRV - [2006-10-06 07:22:14 | 000,016,768 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\TVALZ_O.SYS -- (TVALZ)
DRV - [2006-09-28 05:06:00 | 000,479,488 | ---- | M] (TOSHIBA CORPORATION) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\kr3npxp.sys -- (KR3NPXP)
DRV - [2006-08-30 18:35:58 | 000,140,800 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService)
DRV - [2006-07-29 01:25:26 | 000,019,456 | ---- | M] (COMPAL ELECTRONIC INC.) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\LPCFilter.sys -- (LPCFilter)
DRV - [2006-02-14 20:50:00 | 000,216,320 | ---- | M] (TOSHIBA CORPORATION) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\kr10i.sys -- (KR10I)
DRV - [2005-09-28 01:57:00 | 000,207,104 | ---- | M] (TOSHIBA CORPORATION) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\kr10n.sys -- (KR10N)
DRV - [2000-10-24 00:00:00 | 000,003,608 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\port_nt.sys -- (port_nt)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=stonicla&s={searchTerms}&f=4
IE - HKLM\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://pl.msn.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.bing.com/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.)
 
 
[2011-05-25 22:15:33 | 000,002,423 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2011-05-25 22:27:55 | 000,002,051 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fcmdSrchstonicla.xml
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - Extension: Babylon Chrome OCR = C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.0_0\
CHR - Extension: Facemoods = C:\Users\Robert\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihflimipbcaljfnojhhknppphnnciiif\1.3.0_0\
 
O1 HOSTS File: ([2011-10-15 16:36:57 | 000,000,698 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (CescrtHlpr Object) - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files\facemoods.com\facemoods\1.4.17.8\bh\facemoods.dll (facemoods.com BHO)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll (Google Inc.)
O2 - BHO: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (facemoods Toolbar) - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files\facemoods.com\facemoods\1.4.17.8\facemoodsTlbr.dll (facemoods.com)
O3 - HKCU\..\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (uTorrentBar Toolbar) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - C:\Program Files\uTorrentBar\tbuTor.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (Sopcast Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O4 - HKLM..\Run: [00TCrdMain] C:\Program Files\Toshiba\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [HSON] C:\Program Files\Toshiba\TBS\HSON.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [HWSetup] \HWSetup.exe hwSetUP File not found
O4 - HKLM..\Run: [iPlusManager] C:\Program Files\iPlus\iPlusChecker.exe ()
O4 - HKLM..\Run: [NDSTray.exe] NDSTray.exe File not found
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SmoothView] C:\Program Files\Toshiba\SmoothView\SmoothView.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ()
O4 - HKLM..\Run: [SVPWUTIL] C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe (TOSHIBA)
O4 - HKLM..\Run: [TPwrMain] C:\Program Files\Toshiba\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [TOSCDSPD] C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: UacDisableNotify = 0
O8 - Extra context menu item: Funkcja Google Sidewiki - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll (Google Inc.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: doakcji.pl ([www] http in Trusted sites)
O15 - HKCU\..Trusted Domains: doakcji.pl ([www] https in Trusted sites)
O15 - HKCU\..Trusted Domains: internet ([]about in Trusted sites)
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab (Java Plug-in 1.6.0)
O16 - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 83.175.180.30 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{71ADEAF5-014C-4AB0-BB70-E1BC98096C16}: DhcpNameServer = 83.175.180.30 192.168.0.1
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Public\Pictures\IMG_8101.JPG
O24 - Desktop BackupWallPaper: C:\Users\Public\Pictures\IMG_8101.JPG
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-10-15 13:32:10 | 000,000,000 | ---D | C] -- C:\ProgramData\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42}
[2011-10-15 11:29:00 | 000,000,000 | ---D | C] -- C:\Users\Robert\AppData\Local\FixItCenter
[2011-10-15 11:00:32 | 000,000,000 | ---D | C] -- C:\Windows\MATS
[2011-10-15 11:00:30 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Fix it Center
[2011-10-15 10:57:48 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2011-10-12 19:47:04 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll
[2011-10-12 19:47:03 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax
[2011-10-12 19:47:02 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Mpeg2Data.ax
[2011-10-12 19:46:58 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSDvbNP.ax
[2011-10-12 19:46:33 | 002,043,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2011-10-12 19:45:39 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011-10-12 19:45:37 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2011-10-12 19:45:29 | 001,469,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2011-10-12 19:45:29 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll
[2011-10-12 19:45:29 | 000,602,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011-10-12 19:45:28 | 000,387,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2011-10-12 19:45:28 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2011-10-12 19:45:28 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2011-10-12 19:45:28 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011-10-12 19:45:28 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2011-10-12 19:45:27 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2011-10-12 19:45:26 | 000,174,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2011-10-12 19:45:26 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2011-10-12 19:45:26 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2011-10-12 19:45:26 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2011-10-12 19:45:26 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2011-10-12 19:45:26 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2011-10-12 19:45:25 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011-10-12 19:44:43 | 000,555,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAutomationCore.dll
[2011-10-12 19:44:41 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\oleaccrc.dll
[2011-10-11 18:37:02 | 000,000,000 | ---D | C] -- C:\Program Files\Avanquest update
[2011-10-11 18:37:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Avanquest
[2011-10-11 18:36:14 | 000,000,000 | ---D | C] -- C:\Users\Robert\AppData\Local\Sony Ericsson
[2011-10-11 18:36:14 | 000,000,000 | ---D | C] -- C:\ProgramData\BVRP Software
[2011-10-11 18:32:13 | 000,115,752 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s0016unic.sys
[2011-10-11 18:32:13 | 000,114,216 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s0016mgmt.sys
[2011-10-11 18:32:13 | 000,110,632 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s0016obex.sys
[2011-10-11 18:32:13 | 000,025,512 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s0016nd5.sys
[2011-10-11 18:32:13 | 000,012,200 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s0016whnt.sys
[2011-10-11 18:32:13 | 000,012,200 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s0016wh.sys
[2011-10-11 18:32:12 | 000,120,744 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s0016mdm.sys
[2011-10-11 18:32:12 | 000,089,256 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s0016bus.sys
[2011-10-11 18:32:12 | 000,015,016 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s0016mdfl.sys
[2011-10-11 18:32:12 | 000,012,200 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s0016cmnt.sys
[2011-10-11 18:32:12 | 000,012,200 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s0016cm.sys
[2011-10-11 18:32:12 | 000,010,792 | ---- | C] (MCCI Corporation) -- C:\Windows\System32\drivers\s0016cr.sys
[2011-10-11 18:31:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony Ericsson
[2011-10-11 18:31:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony Ericsson
[2011-10-11 18:31:53 | 000,000,000 | ---D | C] -- C:\Program Files\Sony Ericsson
[2011-10-11 18:28:40 | 019,169,808 | ---- | C] (Sony Ericsson                                               ) -- C:\Users\Robert\Desktop\SEPL.exe
[2011-09-28 20:32:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HASP Emulator PE V2.33
[2011-09-24 20:10:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firebird_1_5
[2011-09-24 20:10:51 | 000,000,000 | ---D | C] -- C:\Program Files\Firebird
[2011-09-24 19:46:18 | 000,191,488 | ---- | C] (Aladdin Knowledge Systems Ltd.) -- C:\Windows\System32\hlvdd.dll
[2011-09-24 19:46:18 | 000,047,616 | ---- | C] (Aladdin Knowledge Systems) -- C:\Windows\System32\drivers\Haspnt.sys
[2011-09-24 19:46:18 | 000,006,656 | ---- | C] (Aladdin Knowledge Systems.) -- C:\Windows\System32\haspvdd.dll
[2011-09-24 19:46:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EWMAPA
[2011-09-24 19:45:39 | 000,000,000 | ---D | C] -- C:\Program Files\Geobid
[2011-09-19 21:53:59 | 000,000,000 | R--D | C] -- C:\Geodezja
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-10-15 18:43:02 | 000,001,036 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011-10-15 18:18:02 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011-10-15 18:18:01 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011-10-15 18:18:01 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011-10-15 18:17:50 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011-10-15 18:17:44 | 935,387,136 | -HS- | M] () -- C:\hiberfil.sys
[2011-10-15 11:00:33 | 000,000,853 | ---- | M] () -- C:\Users\Public\Desktop\Microsoft Fix it Center.lnk
[2011-10-15 10:12:40 | 002,468,638 | ---- | M] () -- C:\Users\Robert\Documents\AutoRuns.arn
[2011-10-15 10:07:05 | 000,000,424 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{A43C4027-4C13-4D7A-A3C5-BC8F083E29E5}.job
[2011-10-13 22:24:37 | 000,640,920 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011-10-13 22:24:37 | 000,122,804 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011-10-13 19:33:16 | 000,461,232 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011-10-11 20:03:21 | 000,069,702 | ---- | M] () -- C:\Users\Robert\Desktop\google.csv
[2011-10-11 18:40:37 | 000,002,056 | ---- | M] () -- C:\Users\Public\Desktop\Sony Ericsson PC Companion 2.0.lnk
[2011-10-11 18:30:21 | 019,169,808 | ---- | M] (Sony Ericsson                                               ) -- C:\Users\Robert\Desktop\SEPL.exe
[2011-10-06 09:45:20 | 000,001,982 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2011-10-05 22:43:25 | 000,002,432 | ---- | M] () -- C:\Users\Robert\AppData\Local\Tempdh4280.html
[2011-10-05 22:43:25 | 000,002,089 | ---- | M] () -- C:\Users\Robert\AppData\Local\TempEL4280.html
[2011-10-04 18:23:18 | 000,002,089 | ---- | M] () -- C:\Users\Robert\AppData\Local\TemphP1256.html
[2011-10-04 18:23:17 | 000,002,432 | ---- | M] () -- C:\Users\Robert\AppData\Local\Tempuz1256.html
[2011-10-04 18:23:17 | 000,002,432 | ---- | M] () -- C:\Users\Robert\AppData\Local\TempGj1256.html
[2011-10-04 18:23:17 | 000,002,089 | ---- | M] () -- C:\Users\Robert\AppData\Local\TempHy1256.html
[2011-10-03 08:51:28 | 000,124,017 | ---- | M] () -- C:\Users\Robert\Desktop\RyanairBoardingPass.pdf
[2011-10-01 01:06:08 | 000,105,984 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2011-10-01 01:03:05 | 000,611,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll
[2011-10-01 01:02:36 | 000,602,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011-10-01 01:02:36 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2011-10-01 01:02:06 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2011-10-01 01:01:57 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011-10-01 01:01:51 | 001,469,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2011-10-01 01:01:34 | 000,164,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011-10-01 01:01:34 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2011-10-01 01:01:34 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2011-10-01 01:01:33 | 000,184,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2011-10-01 01:01:33 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2011-10-01 01:01:29 | 000,387,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2011-10-01 00:07:25 | 000,385,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2011-09-30 23:29:54 | 000,133,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2011-09-30 23:29:44 | 000,174,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2011-09-30 23:29:05 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2011-09-30 23:28:36 | 001,638,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011-09-28 20:34:42 | 000,000,898 | ---- | M] () -- C:\Users\Public\Desktop\EWMAPA.lnk
[2011-09-24 19:46:18 | 000,191,488 | ---- | M] (Aladdin Knowledge Systems Ltd.) -- C:\Windows\System32\hlvdd.dll
[2011-09-24 19:46:18 | 000,047,616 | ---- | M] (Aladdin Knowledge Systems) -- C:\Windows\System32\drivers\Haspnt.sys
[2011-09-24 19:46:18 | 000,006,656 | ---- | M] (Aladdin Knowledge Systems.) -- C:\Windows\System32\haspvdd.dll
[2011-09-24 19:46:18 | 000,002,620 | ---- | M] () -- C:\Windows\System32\config.nt
[2011-09-24 19:46:18 | 000,002,620 | ---- | M] () -- C:\Windows\System32\config.hsp
[2011-09-24 19:46:18 | 000,000,383 | ---- | M] () -- C:\Windows\System32\haspdos.sys
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-10-15 11:00:33 | 000,000,865 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Fix it Center.lnk
[2011-10-15 11:00:33 | 000,000,853 | ---- | C] () -- C:\Users\Public\Desktop\Microsoft Fix it Center.lnk
[2011-10-11 20:01:21 | 000,069,702 | ---- | C] () -- C:\Users\Robert\Desktop\google.csv
[2011-10-11 18:40:37 | 000,002,056 | ---- | C] () -- C:\Users\Public\Desktop\Sony Ericsson PC Companion 2.0.lnk
[2011-10-05 17:50:47 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempdh4280.html
[2011-10-05 17:50:47 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempEL4280.html
[2011-10-04 13:57:59 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempGj1256.html
[2011-10-04 13:57:59 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TemphP1256.html
[2011-10-04 13:54:58 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempuz1256.html
[2011-10-04 13:54:58 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempHy1256.html
[2011-10-03 08:51:23 | 000,124,017 | ---- | C] () -- C:\Users\Robert\Desktop\RyanairBoardingPass.pdf
[2011-09-24 19:46:18 | 000,002,620 | ---- | C] () -- C:\Windows\System32\config.hsp
[2011-09-24 19:46:18 | 000,000,383 | ---- | C] () -- C:\Windows\System32\haspdos.sys
[2011-09-24 19:46:08 | 000,000,898 | ---- | C] () -- C:\Users\Public\Desktop\EWMAPA.lnk
[2011-09-07 20:55:11 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TemprNG256.html
[2011-09-07 20:55:11 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempuOE256.html
[2011-08-31 19:58:15 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempwn4700.html
[2011-06-28 17:11:02 | 000,003,608 | ---- | C] () -- C:\Windows\System32\drivers\port_nt.sys
[2011-06-20 21:44:27 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempvf2528.html
[2011-06-20 21:44:27 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempwk2528.html
[2011-05-30 21:18:41 | 000,000,288 | ---- | C] () -- C:\Windows\ODBC.INI
[2011-05-30 21:18:40 | 000,000,777 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2011-04-19 21:14:53 | 000,723,981 | ---- | C] () -- C:\Users\Robert\AppData\Local\unins000.exe
[2011-04-19 21:14:53 | 000,002,160 | ---- | C] () -- C:\Users\Robert\AppData\Local\unins000.dat
[2011-04-07 16:57:53 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempEv2236.html
[2011-04-07 16:57:53 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempDC2236.html
[2011-04-06 18:51:54 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempDN4764.html
[2011-04-06 18:51:54 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempUp4764.html
[2011-03-27 16:19:45 | 000,000,079 | ---- | C] () -- C:\Windows\pit2010.ini
[2011-03-27 16:19:45 | 000,000,021 | ---- | C] () -- C:\Windows\pit2007.ini
[2011-03-23 17:53:35 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Temphs4648.html
[2011-03-23 17:53:34 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempCx4648.html
[2011-03-23 17:53:34 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempXQ4648.html
[2011-03-22 22:28:18 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempfv3528.html
[2011-03-22 22:28:16 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempkq3528.html
[2011-03-22 22:28:16 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempvP3528.html
[2011-03-17 23:45:29 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempYW2568.html
[2011-03-17 23:45:29 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempAM2568.html
[2011-03-17 23:45:26 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempiS2568.html
[2011-03-17 23:45:26 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempoQ2568.html
[2011-03-17 22:09:38 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempDi3548.html
[2011-03-17 22:09:38 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempzk3548.html
[2011-03-17 22:09:31 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempHe3548.html
[2011-03-17 22:09:30 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempfz3548.html
[2011-03-14 18:46:54 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempWs2324.html
[2011-03-14 18:46:54 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\Temphd2324.html
[2011-03-14 18:46:52 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempyd2324.html
[2011-03-14 18:46:52 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempgN2324.html
[2011-03-09 20:04:38 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempon3516.html
[2011-03-09 20:04:38 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TemppU3516.html
[2011-03-09 20:04:33 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempLC3516.html
[2011-03-09 20:04:33 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TemphS3516.html
[2011-03-08 17:29:48 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempDC3288.html
[2011-03-08 17:29:48 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempOj3288.html
[2011-03-08 17:29:46 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempgg3288.html
[2011-03-08 17:29:46 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempRo3288.html
[2011-03-07 19:41:38 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempTo3552.html
[2011-03-07 19:41:34 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempos3552.html
[2011-03-07 19:41:34 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempUt3552.html
[2011-03-06 23:52:00 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempwE3580.html
[2011-03-06 23:52:00 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempHo3580.html
[2011-03-06 23:51:59 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempnS3580.html
[2011-03-06 23:51:59 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempAA3580.html
[2011-03-01 22:26:08 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempVE3436.html
[2011-03-01 22:26:08 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempsS3436.html
[2011-03-01 22:26:07 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempNk3436.html
[2011-03-01 22:26:07 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempug3436.html
[2011-02-28 07:41:22 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempbb2920.html
[2011-02-28 07:41:22 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempvw2920.html
[2011-02-28 07:41:19 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempOQ2920.html
[2011-02-28 07:41:19 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempyN2920.html
[2011-02-27 15:23:57 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempFQ2808.html
[2011-02-27 15:23:57 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempiA2808.html
[2011-02-27 15:23:52 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempXz2808.html
[2011-02-27 15:23:52 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempHR2808.html
[2011-02-26 11:27:05 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempJS3256.html
[2011-02-26 11:27:03 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempPU3256.html
[2011-02-25 21:27:23 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempzK3480.html
[2011-02-25 21:27:23 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempnf3480.html
[2011-02-25 21:27:16 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempeW3480.html
[2011-02-25 21:27:16 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempAw3480.html
[2011-02-24 20:56:12 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempKQ3504.html
[2011-02-24 20:56:12 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempOZ3504.html
[2011-02-24 20:56:09 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempOs3504.html
[2011-02-24 20:56:09 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempGs3504.html
[2011-02-21 21:47:00 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempOu3456.html
[2011-02-21 21:47:00 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempRC3456.html
[2011-02-21 21:46:58 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempkv3456.html
[2011-02-21 21:46:58 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempuE3456.html
[2011-02-20 21:47:59 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempXY3400.html
[2011-02-20 21:47:59 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempFd3400.html
[2011-02-20 21:47:54 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TemppI3400.html
[2011-02-20 21:47:54 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempAu3400.html
[2011-02-19 20:56:29 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempRU3592.html
[2011-02-19 20:56:29 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempES3592.html
[2011-02-19 20:55:12 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempTl3592.html
[2011-02-19 20:55:12 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempDD3592.html
[2011-02-19 15:23:02 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempPb3368.html
[2011-02-19 15:23:02 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\Templx3368.html
[2011-02-16 20:07:10 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempLS2532.html
[2011-02-16 20:07:10 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempcZ2532.html
[2011-02-15 21:35:24 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempSi3340.html
[2011-02-15 21:35:24 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempwB3340.html
[2011-02-13 21:20:05 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempun3472.html
[2011-02-13 21:20:05 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempHz3472.html
[2011-02-13 13:17:34 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempDN3416.html
[2011-02-13 13:17:34 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempLg3416.html
[2011-02-09 17:04:45 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempbk3468.html
[2011-02-09 17:04:45 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempCx3468.html
[2011-02-06 14:07:54 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempqw2564.html
[2011-02-06 14:07:54 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempjS2564.html
[2011-02-05 14:50:53 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TemplH3604.html
[2011-02-05 14:50:53 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempei3604.html
[2011-02-04 21:37:02 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempTA3544.html
[2011-02-04 21:37:02 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempVP3544.html
[2011-02-03 17:35:24 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TemplF2852.html
[2011-02-03 17:35:24 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempAL2852.html
[2011-01-31 20:57:57 | 000,000,073 | ---- | C] () -- C:\Windows\EurekaLog.ini
[2011-01-31 18:34:37 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempDu3692.html
[2011-01-31 18:34:37 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempMx3692.html
[2011-01-30 10:38:13 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempUL2256.html
[2011-01-30 10:38:13 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempft2256.html
[2011-01-25 18:49:06 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempph3556.html
[2011-01-25 18:49:06 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempmq3556.html
[2011-01-24 22:22:58 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempkV3524.html
[2011-01-24 22:22:58 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempJh3524.html
[2011-01-23 01:28:05 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempYC2728.html
[2011-01-23 01:28:05 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempEf2728.html
[2011-01-22 17:18:00 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempTF3732.html
[2011-01-22 17:18:00 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempaz3732.html
[2011-01-20 21:05:10 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempCd3748.html
[2011-01-20 21:05:10 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempgX3748.html
[2011-01-19 21:09:48 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempAp3356.html
[2011-01-19 21:09:48 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempvb3356.html
[2011-01-18 18:41:27 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempNt2516.html
[2011-01-18 18:41:27 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempJw2516.html
[2011-01-17 20:33:46 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempnj3088.html
[2011-01-17 20:33:46 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempOa3088.html
[2011-01-16 20:47:56 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempZk2856.html
[2011-01-16 20:47:56 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempYo2856.html
[2011-01-16 19:53:16 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempTN3480.html
[2011-01-16 19:53:16 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempsP3480.html
[2011-01-16 19:44:43 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempCQ3548.html
[2011-01-16 19:44:43 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\Temptj3548.html
[2011-01-16 11:55:52 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Templr3252.html
[2011-01-16 11:55:52 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempKH3252.html
[2011-01-13 18:39:12 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempeF2248.html
[2011-01-13 18:39:12 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempWd2248.html
[2011-01-12 19:26:22 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempgX3628.html
[2011-01-12 19:26:22 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempxA3628.html
[2011-01-11 18:49:26 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempdi2588.html
[2011-01-11 18:49:26 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempoZ2588.html
[2011-01-09 17:46:23 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempSv3560.html
[2011-01-09 17:46:23 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempnP3560.html
[2011-01-07 10:59:13 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempyz3564.html
[2011-01-07 10:59:13 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempBn3564.html
[2011-01-05 18:30:29 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempCQ3444.html
[2011-01-05 18:30:29 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempri3444.html
[2011-01-03 22:17:14 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempyR3732.html
[2011-01-03 22:17:14 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempuG3732.html
[2011-01-02 20:44:28 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempWf3452.html
[2011-01-02 20:44:27 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempcS3452.html
[2010-12-30 10:18:18 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempoV3344.html
[2010-12-30 10:18:18 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempRk3344.html
[2010-12-29 18:28:26 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Temptt3460.html
[2010-12-29 18:28:26 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempzr3460.html
[2010-12-28 11:40:07 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempMp3484.html
[2010-12-28 11:40:07 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TemplV3484.html
[2010-12-27 13:43:27 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TemplO3480.html
[2010-12-27 13:27:50 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempVr2976.html
[2010-12-27 13:27:50 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TemprI2976.html
[2010-12-21 17:58:30 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempXI3524.html
[2010-12-21 17:58:30 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempva3524.html
[2010-12-20 18:12:48 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempzw3360.html
[2010-12-20 18:12:48 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempqg3360.html
[2010-12-18 13:18:10 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Temprd3376.html
[2010-12-18 13:18:10 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempGB3376.html
[2010-12-17 18:31:53 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempcc3388.html
[2010-12-17 18:31:53 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempmW3388.html
[2010-12-17 15:08:42 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempCb3388.html
[2010-12-17 15:08:42 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempLI3388.html
[2010-12-17 15:07:43 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempZd3388.html
[2010-12-16 22:11:48 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempfV2568.html
[2010-12-16 22:11:48 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempJp2568.html
[2010-12-16 15:22:11 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempZW2568.html
[2010-12-16 15:22:11 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempBv2568.html
[2010-12-16 15:21:49 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TemprF2568.html
[2010-12-16 15:20:16 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TemppM2568.html
[2010-12-16 14:33:11 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempKk2568.html
[2010-12-16 13:21:42 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempCe3452.html
[2010-12-16 13:21:42 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempHY3452.html
[2010-12-15 21:02:10 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempFN3468.html
[2010-12-15 21:02:10 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempXF3468.html
[2010-12-15 11:39:41 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempxT3576.html
[2010-12-15 11:39:41 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempGS3576.html
[2010-12-14 19:27:45 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Temphg3316.html
[2010-12-14 19:27:45 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempVp3316.html
[2010-12-13 09:47:48 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempZv3192.html
[2010-12-13 09:47:48 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TemptN3192.html
[2010-12-12 11:13:25 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Temprb2792.html
[2010-12-12 11:13:25 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempzP2792.html
[2010-12-10 13:58:34 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempRQ2348.html
[2010-12-10 13:58:34 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempTm2348.html
[2010-12-09 11:49:22 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempyx3508.html
[2010-12-09 11:49:22 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\Tempnf3508.html
[2010-12-08 11:04:22 | 000,002,432 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempND4740.html
[2010-12-08 11:04:22 | 000,002,089 | ---- | C] () -- C:\Users\Robert\AppData\Local\TempaC4740.html
[2010-11-18 21:25:40 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2010-11-18 21:24:27 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2010-11-18 21:24:27 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2010-11-14 01:20:13 | 000,000,691 | ---- | C] () -- C:\Users\Robert\AppData\Roaming\GetValue.vbs
[2010-11-14 01:20:13 | 000,000,035 | ---- | C] () -- C:\Users\Robert\AppData\Roaming\SetValue.bat
[2010-11-14 00:41:52 | 000,881,664 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2010-11-14 00:41:52 | 000,258,048 | ---- | C] () -- C:\Windows\System32\libFLAC.dll
[2010-11-14 00:27:12 | 000,016,384 | ---- | C] () -- C:\Users\Robert\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-11-11 18:20:11 | 000,181,760 | ---- | C] () -- C:\Windows\patchw32.dll
[2010-11-09 22:19:35 | 000,001,356 | ---- | C] () -- C:\Users\Robert\AppData\Local\d3d9caps.dat
[2010-10-10 16:39:39 | 000,000,115 | ---- | C] () -- C:\Windows\WININIT.INI
[2009-01-06 00:44:10 | 000,053,248 | ---- | C] () -- C:\Windows\bdoscandel.exe
[2009-01-06 00:44:10 | 000,000,453 | ---- | C] () -- C:\Windows\bdoscandellang.ini
[2007-05-17 03:40:56 | 000,204,800 | ---- | C] () -- C:\Windows\System32\IVIresizeW7.dll
[2007-05-17 03:40:55 | 000,200,704 | ---- | C] () -- C:\Windows\System32\IVIresizeA6.dll
[2007-05-17 03:40:55 | 000,192,512 | ---- | C] () -- C:\Windows\System32\IVIresizeP6.dll
[2007-05-17 03:40:55 | 000,192,512 | ---- | C] () -- C:\Windows\System32\IVIresizeM6.dll
[2007-05-17 03:40:55 | 000,188,416 | ---- | C] () -- C:\Windows\System32\IVIresizePX.dll
[2007-05-17 03:40:55 | 000,020,480 | ---- | C] () -- C:\Windows\System32\IVIresize.dll
[2007-05-17 02:46:42 | 000,000,000 | ---- | C] () -- C:\Windows\NDSTray.INI
[2007-05-17 02:30:13 | 000,036,864 | ---- | C] () -- C:\Windows\System32\HWS_Ctrl.dll
[2007-05-17 02:15:16 | 000,128,113 | ---- | C] () -- C:\Windows\System32\csellang.ini
[2007-05-17 02:15:16 | 000,045,056 | ---- | C] () -- C:\Windows\System32\csellang.dll
[2007-05-17 02:15:16 | 000,010,150 | ---- | C] () -- C:\Windows\System32\tosmreg.ini
[2007-05-17 02:15:16 | 000,007,671 | ---- | C] () -- C:\Windows\System32\cseltbl.ini
[2007-05-17 02:13:14 | 000,000,291 | ---- | C] () -- C:\Windows\RtDefLvl.ini
[2007-05-17 02:13:14 | 000,000,176 | ---- | C] () -- C:\Windows\System32\drivers\RTHDAEQ1.dat
[2007-05-17 02:13:14 | 000,000,176 | ---- | C] () -- C:\Windows\System32\drivers\RTHDAEQ0.dat
[2007-05-17 02:13:14 | 000,000,008 | ---- | C] () -- C:\Windows\System32\drivers\RtkHDAud.dat
[2007-04-25 06:57:36 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2007-04-25 06:32:44 | 003,107,788 | ---- | C] () -- C:\Windows\System32\atiumdva.dat
[2007-04-02 23:49:54 | 000,145,050 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2006-12-05 22:05:06 | 000,114,688 | ---- | C] () -- C:\Windows\System32\TosBtAcc.dll
[2006-11-02 14:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006-11-02 14:47:37 | 000,461,232 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006-11-02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006-11-02 12:33:01 | 000,640,920 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006-11-02 12:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006-11-02 12:33:01 | 000,122,804 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006-11-02 12:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006-11-02 12:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006-11-02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006-11-02 10:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006-11-02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006-11-02 09:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2005-11-23 23:55:42 | 000,024,576 | ---- | C] () -- C:\Windows\System32\SPCtl.dll
[2005-07-23 06:30:20 | 000,065,536 | ---- | C] () -- C:\Windows\System32\TosCommAPI.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-11-23 06:01:20 | 000,000,000 | ---D | M] -- C:\Users\Robert\AppData\Roaming\Bentley
[2010-11-14 00:31:39 | 000,000,000 | ---D | M] -- C:\Users\Robert\AppData\Roaming\BESTplayer
[2010-11-15 23:40:22 | 000,000,000 | ---D | M] -- C:\Users\Robert\AppData\Roaming\Canneverbe Limited
[2011-04-29 22:13:01 | 000,000,000 | ---D | M] -- C:\Users\Robert\AppData\Roaming\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1
[2010-11-14 01:15:55 | 000,000,000 | ---D | M] -- C:\Users\Robert\AppData\Roaming\EFSoftware
[2011-05-30 21:49:37 | 000,000,000 | ---D | M] -- C:\Users\Robert\AppData\Roaming\ESRI
[2010-12-16 15:20:15 | 000,000,000 | ---D | M] -- C:\Users\Robert\AppData\Roaming\Gadu-Gadu 10
[2010-11-22 04:50:05 | 000,000,000 | ---D | M] -- C:\Users\Robert\AppData\Roaming\GHISLER
[2010-12-27 14:02:04 | 000,000,000 | ---D | M] -- C:\Users\Robert\AppData\Roaming\iPlus
[2011-03-23 17:54:39 | 000,000,000 | ---D | M] -- C:\Users\Robert\AppData\Roaming\OpenFM
[2011-06-21 22:11:08 | 000,000,000 | ---D | M] -- C:\Users\Robert\AppData\Roaming\TMSDirect
[2010-11-14 00:25:56 | 000,000,000 | ---D | M] -- C:\Users\Robert\AppData\Roaming\TOSHIBA
[2011-03-27 22:45:04 | 000,000,000 | ---D | M] -- C:\Users\Robert\AppData\Roaming\uTorrent
[2011-10-15 18:13:26 | 000,032,622 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2011-10-15 10:07:05 | 000,000,424 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{A43C4027-4C13-4D7A-A3C5-BC8F083E29E5}.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 97 bytes -> C:\ProgramData\TEMP:2A81F9CE

< End of report >