OTL logfile created on: 2012-07-06 21:29:49 - Run 2
OTL by OldTimer - Version 3.2.53.1     Folder = D:\
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,87 Gb Total Physical Memory | 3,06 Gb Available Physical Memory | 79,01% Memory free
7,74 Gb Paging File | 7,08 Gb Available in Paging File | 91,50% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 232,19 Gb Total Space | 102,18 Gb Free Space | 44,01% Space Free | Partition Type: NTFS
Drive D: | 3,73 Gb Total Space | 3,11 Gb Free Space | 83,37% Space Free | Partition Type: NTFS
Drive I: | 195,31 Gb Total Space | 24,81 Gb Free Space | 12,70% Space Free | Partition Type: NTFS
Drive J: | 175,78 Gb Total Space | 33,91 Gb Free Space | 19,29% Space Free | Partition Type: NTFS
Drive K: | 175,78 Gb Total Space | 28,59 Gb Free Space | 16,26% Space Free | Partition Type: NTFS
Drive L: | 136,71 Gb Total Space | 78,43 Gb Free Space | 57,37% Space Free | Partition Type: NTFS
 
Computer Name: PAULO-BAZA | User Name: Paulo | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-07-06 19:39:00 | 000,595,968 | ---- | M] (OldTimer Tools) -- D:\OTL.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2011-10-22 18:23:12 | 001,436,424 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
SRV:[b]64bit:[/b] - [2011-09-08 17:48:36 | 006,583,160 | ---- | M] (Wacom Technology, Corp.) [Auto | Stopped] -- C:\Program Files\Tablet\Pen\Pen_Tablet.exe -- (TabletServicePen)
SRV:[b]64bit:[/b] - [2011-09-08 17:48:36 | 000,528,760 | ---- | M] (Wacom Technology, Corp.) [Auto | Stopped] -- C:\Program Files\Tablet\Pen\Pen_TouchService.exe -- (TouchServicePen)
SRV:[b]64bit:[/b] - [2010-03-16 17:04:24 | 000,167,280 | ---- | M] (Samsung Electronics CO., LTD.) [On_Demand | Stopped] -- C:\Windows\SysNative\SUPDSvc.exe -- (Samsung UPD Service)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2012-06-28 17:54:41 | 000,257,224 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-05-15 12:48:00 | 001,262,400 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012-05-15 02:21:40 | 000,382,272 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2011-06-30 16:52:10 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Stopped] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011-06-29 15:59:18 | 000,155,344 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe -- (Sony Ericsson PCCompanion)
SRV - [2011-06-06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011-04-28 20:49:13 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Stopped] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010-12-05 15:52:20 | 000,077,944 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)
SRV - [2010-11-20 14:21:36 | 000,351,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- winhttp.dll -- (WinHttpAutoProxySvc)
SRV - [2010-03-18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010-03-10 01:38:18 | 000,086,016 | ---- | M] () [Auto | Stopped] -- L:\3ds Max 2011 Program\mentalimages\satellite\raysat_3dsmax2011_64server.exe -- (mi-raysat_3dsmax2011_64)
SRV - [2010-02-19 14:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2010-01-15 14:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009-10-13 08:39:04 | 000,935,208 | ---- | M] (Nero AG) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2009-07-24 20:38:50 | 000,189,728 | ---- | M] (Protexis Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2005-08-10 08:37:50 | 001,527,893 | ---- | M] (The Firebird Project) [On_Demand | Stopped] -- C:\Program Files (x86)\Firebird\Firebird_1_5\bin\fbserver.exe -- (FirebirdServerDefaultInstance)
SRV - [2004-12-13 00:05:20 | 000,065,536 | ---- | M] (The Firebird Project) [Auto | Stopped] -- C:\Program Files (x86)\Firebird\Firebird_1_5\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2012-04-18 19:08:03 | 000,188,736 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2011-09-08 17:49:26 | 000,012,848 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\wacommousefilter.sys -- (wacommousefilter)
DRV:[b]64bit:[/b] - [2011-09-08 17:49:24 | 000,016,168 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\wacomvhid.sys -- (wacomvhid)
DRV:[b]64bit:[/b] - [2011-06-30 16:52:10 | 000,123,784 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:[b]64bit:[/b] - [2011-06-30 16:52:10 | 000,088,288 | ---- | M] (Avira GmbH) [File_System | Auto | Stopped] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2010-11-20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2010-11-20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2010-09-11 21:23:41 | 000,834,544 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:[b]64bit:[/b] - [2010-09-11 17:23:14 | 000,314,016 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)
DRV:[b]64bit:[/b] - [2010-09-11 17:23:13 | 000,043,680 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)
DRV:[b]64bit:[/b] - [2010-03-22 17:57:20 | 000,347,680 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2009-12-03 06:00:00 | 000,103,224 | ---- | M] (WIBU-SYSTEMS AG) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\WibuKey64.sys -- (WIBUKEY)
DRV:[b]64bit:[/b] - [2009-11-11 17:44:24 | 000,031,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\point64.sys -- (Point64)
DRV:[b]64bit:[/b] - [2009-11-10 17:05:04 | 000,027,504 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dc3d.sys -- (dc3d) MS Hardware Device Detection Driver (HID)
DRV:[b]64bit:[/b] - [2009-09-18 04:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-06-19 09:56:08 | 000,712,704 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr28x.sys -- (netr28x)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009-06-01 13:49:56 | 000,015,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nuidfltr.sys -- (NuidFltr)
DRV:[b]64bit:[/b] - [2009-05-25 15:34:54 | 000,151,592 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1029unic.sys -- (s1029unic) Sony Ericsson Device 1029 USB Ethernet Emulation (WDM)
DRV:[b]64bit:[/b] - [2009-05-25 15:34:54 | 000,139,304 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1029mgmt.sys -- (s1029mgmt) Sony Ericsson Device 1029 USB WMC Device Management Drivers (WDM)
DRV:[b]64bit:[/b] - [2009-05-25 15:34:54 | 000,135,208 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1029obex.sys -- (s1029obex)
DRV:[b]64bit:[/b] - [2009-05-25 15:34:52 | 000,158,760 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1029mdm.sys -- (s1029mdm)
DRV:[b]64bit:[/b] - [2009-05-25 15:34:52 | 000,034,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1029nd5.sys -- (s1029nd5) Sony Ericsson Device 1029 USB Ethernet Emulation (NDIS)
DRV:[b]64bit:[/b] - [2009-05-25 15:34:50 | 000,019,496 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1029mdfl.sys -- (s1029mdfl)
DRV:[b]64bit:[/b] - [2009-05-25 15:34:48 | 000,116,264 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1029bus.sys -- (s1029bus) Sony Ericsson Device 1029 driver (WDM)
DRV:[b]64bit:[/b] - [2008-12-08 17:35:52 | 000,061,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)
DRV:[b]64bit:[/b] - [2008-01-24 19:25:14 | 000,011,576 | ---- | M] (Samsung Electronics) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\SSPORT.sys -- (SSPORT)
DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1&cf=13e88424-80ce-11e1-8ff5-6cf049b8d6c0
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=13e88424-80ce-11e1-8ff5-6cf049b8d6c0&q={searchTerms}
IE - HKLM\..\SearchScopes\{793236A4-A948-4ABF-9737-5483C3C02748}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.vobis.pl
IE - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = about:blank [binary data]
IE - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001\..\SearchScopes\{043C5167-00BB-4324-AF7E-62013FAEDACF}: "URL" = http://vshare.toolbarhome.com/search.aspx?q={searchTerms}&srch=dsp
IE - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001\..\SearchScopes\{4C98FCF4-5912-436E-AAB7-CAEF750DB240}: "URL" = http://www.vobis.pl/wynikiwyszukiwania.aspx?q={searchTerms}
IE - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001\..\SearchScopes\{56361A71-4E9F-401D-9E12-8AEAA3D7A672}: "URL" = http://mil.toolbarhome.com/search.aspx?q={searchTerms}&srch=dsp
IE - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GGLL_plPL396
IE - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001\..\SearchScopes\{793236A4-A948-4ABF-9737-5483C3C02748}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GGLL_plPL396
IE - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8051.1204: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@wacom.com/wacom-plugin,version=1.1.0.10: C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF - HKLM\Software\MozillaPlugins\@wacom.com/wtPlugin,version=2.0.0.1: C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\wacom.com/WacomTabletPlugin: C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
 
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{20978f0f-2978-4992-ae97-7d373c44e04e}: C:\Program Files (x86)\Techland\English Translator XT\MozillaTranslator [2011-02-18 17:41:45 | 000,000,000 | ---D | M]
 
 
O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (Windows Live Family Safety Browser Helper Class) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
O2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2 - BHO: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll ()
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (MakeItLive Plugin) - {56361A71-4E9F-401D-9E12-8AEAA3D7A672} - C:\Program Files (x86)\MakeItLive\makeitlive_toolbar.dll ()
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~4\Office12\GR469A~1.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Users\Paulo\AppData\Roaming\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll ()
O3 - HKLM\..\Toolbar: (&Tłumaczenie) - {0D704FAD-66E9-4F0A-BFED-4F665770DDB3} - C:\Program Files (x86)\Techland\English Translator XT\InternetTranslator\InternetTranslator.dll (Techland)
O3 - HKLM\..\Toolbar: (MakeItLive Plugin) - {56361A71-4E9F-401D-9E12-8AEAA3D7A672} - C:\Program Files (x86)\MakeItLive\makeitlive_toolbar.dll ()
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001\..\Toolbar\WebBrowser: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll ()
O3:[b]64bit:[/b] - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001\..\Toolbar\WebBrowser: (MakeItLive Plugin) - {56361A71-4E9F-401D-9E12-8AEAA3D7A672} - C:\Program Files (x86)\MakeItLive\makeitlive_toolbar.dll ()
O3 - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:[b]64bit:[/b] - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4:[b]64bit:[/b] - HKLM..\Run: [CanonSolutionMenu] C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.)
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [BambooCore] C:\Program Files (x86)\Bamboo Dock\BambooCore.exe ()
O4 - HKLM..\Run: [Browsers Protector] C:\Program Files (x86)\Browsers Protector\regmon32.exe ()
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKLM..\Run: [XZqIqa15281iwWR] C:\Users\Paulo\AppData\Roaming\aerga43ge4r.exe ()
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001..\Run: [AdobeBridge]  File not found
O4 - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001..\Run: [RGSC] I:\Grand Theft Auto IV\Rockstar Games Social Club\RGSCLauncher.exe /silent File not found
O4 - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001..\Run: [XZqIqa15281iwWR] C:\Users\Paulo\AppData\Roaming\aerga43ge4r.exe ()
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001..\RunOnce: [B7E8586B000174330067D184B4EB2367] C:\ProgramData\B7E8586B000174330067D184B4EB2367\B7E8586B000174330067D184B4EB2367.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 1
O7 - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 1
O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000 File not found
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Techland\English Translator XT\InternetTranslator\InternetTranslator.dll,-103 - {B46B0919-62BA-4D99-A5C4-916B57A6805C} - C:\Program Files (x86)\Techland\English Translator XT\InternetTranslator\InternetTranslator.dll (Techland)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab (QuickTime Object)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D4C79B77-7D0A-43F4-B668-2AA2CDC6764F}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D5BAACD5-3714-45EB-821D-42CD82BF1606}: DhcpNameServer = 192.168.0.1
O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\makeitlivechrome - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\vsharechrome - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~4\Office12\GRA32A~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\makeitlivechrome {51472043-0170-45F9-BCCF-19FCFC676D18} - C:\Program Files (x86)\MakeItLive\makeitlive_toolbar.dll ()
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\vsharechrome {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files (x86)\vShare\vshare_toolbar.dll ()
O18:[b]64bit:[/b] - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (C:\Users\Paulo\AppData\Roaming\aerga43ge4r.exe) - C:\Users\Paulo\AppData\Roaming\aerga43ge4r.exe ()
O20 - HKLM Winlogon: UserInit - (C:\Users\Paulo\AppData\Roaming\aerga43ge4r.exe) - C:\Users\Paulo\AppData\Roaming\aerga43ge4r.exe ()
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\System32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001 Winlogon: Shell - (C:\Users\Paulo\AppData\Roaming\aerga43ge4r.exe) - C:\Users\Paulo\AppData\Roaming\aerga43ge4r.exe ()
O20 - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001 Winlogon: UserInit - (C:\Users\Paulo\AppData\Roaming\aerga43ge4r.exe) - C:\Users\Paulo\AppData\Roaming\aerga43ge4r.exe ()
O20 - HKU\S-1-5-21-2225979431-1048592176-2657008964-1001 Winlogon: UserInit - (C:\WINDOWS\System32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~4\Office12\GR469A~1.DLL (Microsoft Corporation)
O29:[b]64bit:[/b] - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O31 - SafeBoot: UseAlternatShell - 1
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011-06-08 22:41:15 | 000,000,000 | ---D | M] - L:\AutoCad 2007 ENG -- [ NTFS ]
O32 - AutoRun File - [2011-10-23 13:17:41 | 000,000,000 | ---D | M] - L:\AutoCAD 2011 Program -- [ NTFS ]
O32 - AutoRun File - [2010-09-12 18:05:52 | 000,000,000 | ---D | M] - L:\Autocad instalka -- [ NTFS ]
O33 - MountPoints2\{8de0dbe4-bdda-11df-b904-6cf049b8d6c0}\Shell - "" = AutoRun
O33 - MountPoints2\{8de0dbe4-bdda-11df-b904-6cf049b8d6c0}\Shell\AutoRun\command - "" = N:\_AUTORUN\AUTORUN.EXE
O33 - MountPoints2\{cfdef7d0-5747-11e1-8d8a-6cf049b8d6c0}\Shell - "" = AutoRun
O33 - MountPoints2\{cfdef7d0-5747-11e1-8d8a-6cf049b8d6c0}\Shell\AutoRun\command - "" = D:\Startme.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-07-06 17:58:26 | 000,000,000 | ---D | C] -- C:\ProgramData\B7E8586B000174330067D184B4EB2367
[2012-06-30 17:09:49 | 000,000,000 | ---D | C] -- C:\Users\Paulo\Desktop\Zdjecia
[2012-06-26 22:01:41 | 000,000,000 | ---D | C] -- C:\Users\Paulo\Desktop\bIAŁYSTOK
[2012-06-21 10:49:02 | 002,622,464 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wucltux.dll
[2012-06-21 10:49:02 | 000,057,880 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wuauclt.exe
[2012-06-21 10:49:02 | 000,044,056 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wups2.dll
[2012-06-21 10:48:51 | 000,701,976 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wuapi.dll
[2012-06-21 10:48:51 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wudriver.dll
[2012-06-21 10:48:51 | 000,038,424 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wups.dll
[2012-06-21 10:48:39 | 000,186,752 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wuwebv.dll
[2012-06-21 10:48:39 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\wuapp.exe
[2012-06-20 21:09:33 | 000,000,000 | ---D | C] -- C:\Users\Paulo\Documents\SCANIA Truck Driving Simulator
[2012-06-20 21:08:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SCANIA Truck Driving Simulator
[2012-06-20 21:04:04 | 000,000,000 | ---D | C] -- C:\Users\Paulo\Desktop\Scania Truck Driving Simulator Extended Edition (2012) FLT PL
[2012-06-13 20:00:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pakiet SPECBUD 10 demo
[2012-06-13 20:00:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Pakiet SPECBUD-demo
[2012-06-13 19:58:46 | 013,906,132 | ---- | C] (SPECBUD s.c.                                                ) -- C:\Users\Paulo\Desktop\rama_demo.exe
[2012-06-13 15:58:37 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\url.dll
[2012-06-13 15:58:37 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\url.dll
[2012-06-13 15:58:37 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\mshtmled.dll
[2012-06-13 15:58:37 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmled.dll
[2012-06-13 15:58:36 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieui.dll
[2012-06-13 15:58:36 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieui.dll
[2012-06-13 15:58:35 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieUnatt.exe
[2012-06-13 15:58:35 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieUnatt.exe
[2012-06-13 15:58:34 | 002,311,680 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript9.dll
[2012-06-13 15:58:34 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\inetcpl.cpl
[2012-06-13 15:58:34 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\inetcpl.cpl
[2012-06-13 15:58:34 | 000,818,688 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript.dll
[2012-06-13 15:58:34 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\jscript.dll
[2012-06-13 12:40:15 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\rdpcorekmts.dll
[2012-06-13 12:40:15 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\rdpwsx.dll
[2012-06-13 12:40:15 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\rdrmemptylst.exe
[2012-06-13 12:40:06 | 005,559,664 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ntoskrnl.exe
[2012-06-13 12:40:05 | 003,968,368 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ntkrnlpa.exe
[2012-06-13 12:40:05 | 003,913,072 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ntoskrnl.exe
[2012-06-13 12:40:00 | 003,216,384 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\msi.dll
[2012-06-13 12:39:55 | 001,462,272 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\crypt32.dll
[2012-06-13 12:39:55 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\cryptnet.dll
[2012-06-13 09:06:03 | 000,000,000 | ---D | C] -- C:\Users\Paulo\Desktop\materiały na teoeire urbanistyki
[2012-06-12 02:46:28 | 000,000,000 | ---D | C] -- C:\Users\Paulo\Desktop\Nowy folder
[2012-06-11 23:42:57 | 000,000,000 | ---D | C] -- C:\Users\Paulo\Desktop\GIMNAZJUM
[2012-06-10 21:32:06 | 000,000,000 | ---D | C] -- C:\Users\Paulo\AppData\Roaming\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1
[2012-06-10 21:29:13 | 000,000,000 | ---D | C] -- C:\Users\Paulo\AppData\Roaming\Wacom
[2012-06-10 21:29:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Wacom
[2012-06-10 21:29:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bamboo Dock
[2012-06-10 21:28:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bamboo Dock
[2012-06-10 21:27:28 | 000,000,000 | ---D | C] -- C:\Users\Paulo\AppData\Roaming\WTablet
[2012-06-10 21:27:27 | 001,326,456 | ---- | C] (Wacom Technology, Corp.) -- C:\windows\SysNative\Pen_Touch_Tablet.dll
[2012-06-10 21:27:27 | 001,107,832 | ---- | C] (Wacom Technology, Corp.) -- C:\windows\SysWow64\Pen_Touch_Tablet.dll
[2012-06-10 21:27:22 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bamboo
[2012-06-10 21:27:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TabletPlugins
[2012-06-10 21:27:14 | 000,012,848 | ---- | C] (Wacom Technology) -- C:\windows\SysNative\drivers\wacommousefilter.sys
[2012-06-10 21:26:51 | 000,016,168 | ---- | C] (Wacom Technology) -- C:\windows\SysNative\drivers\wacomvhid.sys
[2012-06-10 21:26:49 | 001,152,888 | ---- | C] (Wacom Technology, Corp.) -- C:\windows\SysWow64\WacomMT.dll
[2012-06-10 21:26:48 | 001,665,400 | ---- | C] (Wacom Technology, Corp.) -- C:\windows\SysNative\Pen_Tablet.dll
[2012-06-10 21:26:48 | 001,401,208 | ---- | C] (Wacom Technology, Corp.) -- C:\windows\SysNative\Wintab32.dll
[2012-06-10 21:26:48 | 001,392,504 | ---- | C] (Wacom Technology, Corp.) -- C:\windows\SysNative\WacomMT.dll
[2012-06-10 21:26:48 | 001,369,464 | ---- | C] (Wacom Technology, Corp.) -- C:\windows\SysWow64\Pen_Tablet.dll
[2012-06-10 21:26:48 | 001,156,472 | ---- | C] (Wacom Technology, Corp.) -- C:\windows\SysWow64\Wintab32.dll
[2012-06-10 21:26:45 | 000,000,000 | ---D | C] -- C:\Program Files\Tablet
[3 C:\windows\*.tmp files -> C:\windows\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2060-08-18 19:02:32 | 002,023,424 | ---- | M] (Inprise Corporation) -- C:\windows\SysWow64\Vcl50.bpl
[2060-08-18 19:02:22 | 001,496,064 | ---- | M] (Inprise Corporation) -- C:\windows\SysWow64\Cc3250mt.dll
[2060-08-18 19:02:12 | 000,248,832 | ---- | M] (Inprise Corporation) -- C:\windows\SysWow64\Vclx50.bpl
[2060-08-18 18:40:44 | 000,909,824 | ---- | M] (Inprise Corporation) -- C:\windows\SysWow64\Cp3245mt.dll
[2060-08-18 18:40:44 | 000,024,064 | ---- | M] (Inprise Corporation) -- C:\windows\SysWow64\Borlndmm.dll
[2012-07-06 21:29:48 | 006,029,312 | -HS- | M] () -- C:\Users\Paulo\ntuser.dat
[2012-07-06 21:17:22 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2012-07-06 21:17:16 | 3117,015,040 | -HS- | M] () -- C:\hiberfil.sys
[2012-07-06 20:20:13 | 000,001,042 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2012-07-06 20:19:52 | 000,000,006 | -H-- | M] () -- C:\windows\tasks\SA.DAT
[2012-07-06 20:16:53 | 001,663,412 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI
[2012-07-06 20:16:53 | 000,737,942 | ---- | M] () -- C:\windows\SysNative\perfh015.dat
[2012-07-06 20:16:53 | 000,652,150 | ---- | M] () -- C:\windows\SysNative\perfh009.dat
[2012-07-06 20:16:53 | 000,154,630 | ---- | M] () -- C:\windows\SysNative\perfc015.dat
[2012-07-06 20:16:53 | 000,121,082 | ---- | M] () -- C:\windows\SysNative\perfc009.dat
[2012-07-06 20:16:00 | 000,001,046 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2012-07-06 18:11:01 | 000,012,080 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012-07-06 18:11:01 | 000,012,080 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012-07-06 17:58:16 | 000,220,507 | -HS- | M] () -- C:\Users\Paulo\AppData\Roaming\aerga43ge4r.exe
[2012-07-05 23:34:22 | 013,355,294 | -H-- | M] () -- C:\Users\Paulo\AppData\Local\IconCache.db
[2012-07-05 23:28:00 | 000,000,930 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job
[2012-07-05 13:10:02 | 000,064,431 | ---- | M] () -- C:\Users\Paulo\Desktop\Oferta - OF-12 - 335 poprawiona.pdf
[2012-07-05 12:35:27 | 000,064,359 | ---- | M] () -- C:\Users\Paulo\Desktop\Oferta - OF-12 - 335.pdf
[2012-07-01 08:09:24 | 010,007,032 | ---- | M] () -- C:\Users\Paulo\Desktop\06-tede-dwadziescia_lat_feat._seta.mp3
[2012-07-01 08:09:07 | 009,446,966 | ---- | M] () -- C:\Users\Paulo\Desktop\12-tede-bomby_na_miasto_feat._diox.mp3
[2012-07-01 08:08:20 | 007,174,618 | ---- | M] () -- C:\Users\Paulo\Desktop\18. Tede - Amerikan Paj Party.m4a
[2012-06-30 23:17:35 | 000,002,346 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2012-06-28 17:54:41 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerApp.exe
[2012-06-28 17:54:41 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerCPLApp.cpl
[2012-06-20 21:08:00 | 000,000,779 | ---- | M] () -- C:\Users\Public\Desktop\SCANIA Truck Driving Simulator.lnk
[2012-06-20 21:01:39 | 1072,693,248 | ---- | M] () -- C:\Users\Paulo\Desktop\Scania Truck Driving Simulator Extended Edition (2012) FLT PL.part1.rar
[2012-06-20 20:42:32 | 467,096,133 | ---- | M] () -- C:\Users\Paulo\Desktop\Scania Truck Driving Simulator Extended Edition (2012) FLT PL.part2.rar
[2012-06-18 09:56:38 | 019,252,806 | ---- | M] () -- C:\Users\Paulo\Desktop\plansza siemki final.jpg
[2012-06-13 20:00:34 | 000,001,209 | ---- | M] () -- C:\Users\Paulo\Desktop\Rama - demo.lnk
[2012-06-13 19:58:46 | 013,906,132 | ---- | M] (SPECBUD s.c.                                                ) -- C:\Users\Paulo\Desktop\rama_demo.exe
[2012-06-13 19:36:48 | 005,070,016 | ---- | M] () -- C:\windows\SysNative\FNTCACHE.DAT
[2012-06-10 21:29:06 | 000,001,149 | ---- | M] () -- C:\Users\Public\Desktop\Bamboo Dock.lnk
[3 C:\windows\*.tmp files -> C:\windows\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-07-06 17:58:20 | 000,220,507 | -HS- | C] () -- C:\Users\Paulo\AppData\Roaming\aerga43ge4r.exe
[2012-07-05 13:10:02 | 000,064,431 | ---- | C] () -- C:\Users\Paulo\Desktop\Oferta - OF-12 - 335 poprawiona.pdf
[2012-07-05 12:35:27 | 000,064,359 | ---- | C] () -- C:\Users\Paulo\Desktop\Oferta - OF-12 - 335.pdf
[2012-07-01 08:08:52 | 009,446,966 | ---- | C] () -- C:\Users\Paulo\Desktop\12-tede-bomby_na_miasto_feat._diox.mp3
[2012-07-01 08:08:40 | 010,007,032 | ---- | C] () -- C:\Users\Paulo\Desktop\06-tede-dwadziescia_lat_feat._seta.mp3
[2012-07-01 08:08:14 | 007,174,618 | ---- | C] () -- C:\Users\Paulo\Desktop\18. Tede - Amerikan Paj Party.m4a
[2012-06-28 17:54:42 | 000,000,930 | ---- | C] () -- C:\windows\tasks\Adobe Flash Player Updater.job
[2012-06-20 21:08:00 | 000,000,779 | ---- | C] () -- C:\Users\Public\Desktop\SCANIA Truck Driving Simulator.lnk
[2012-06-20 20:08:28 | 467,096,133 | ---- | C] () -- C:\Users\Paulo\Desktop\Scania Truck Driving Simulator Extended Edition (2012) FLT PL.part2.rar
[2012-06-20 20:08:16 | 1072,693,248 | ---- | C] () -- C:\Users\Paulo\Desktop\Scania Truck Driving Simulator Extended Edition (2012) FLT PL.part1.rar
[2012-06-18 09:56:29 | 019,252,806 | ---- | C] () -- C:\Users\Paulo\Desktop\plansza siemki final.jpg
[2012-06-13 20:00:34 | 000,001,209 | ---- | C] () -- C:\Users\Paulo\Desktop\Rama - demo.lnk
[2012-06-10 21:29:06 | 000,001,149 | ---- | C] () -- C:\Users\Public\Desktop\Bamboo Dock.lnk
[2012-06-10 21:26:45 | 000,000,488 | ---- | C] () -- C:\windows\SysNative\PenTouchTabletUserDefaults.xml
[2012-06-10 21:26:45 | 000,000,488 | ---- | C] () -- C:\windows\SysNative\PenTabletUserDefaults.xml
[2012-05-24 09:06:48 | 000,524,288 | -HS- | C] () -- C:\Users\Paulo\ntuser.dat{f85541db-a56e-11e1-9179-6cf049b8d6c0}.TMContainer00000000000000000002.regtrans-ms
[2012-05-24 09:06:48 | 000,524,288 | -HS- | C] () -- C:\Users\Paulo\ntuser.dat{f85541db-a56e-11e1-9179-6cf049b8d6c0}.TMContainer00000000000000000001.regtrans-ms
[2012-05-24 09:06:48 | 000,065,536 | -HS- | C] () -- C:\Users\Paulo\ntuser.dat{f85541db-a56e-11e1-9179-6cf049b8d6c0}.TM.blf
[2012-05-15 02:21:50 | 000,423,744 | ---- | C] () -- C:\windows\SysWow64\nvStreaming.exe
[2012-03-23 00:30:01 | 000,001,410 | ---- | C] () -- C:\windows\ARPR.INI
[2011-10-17 21:11:28 | 000,000,858 | ---- | C] () -- C:\Users\Paulo\.recently-used.xbel
[2011-05-11 21:36:38 | 000,524,288 | -HS- | C] () -- C:\Users\Paulo\ntuser.dat{f17abbdd-7c05-11e0-85d8-6cf049b8d6c0}.TMContainer00000000000000000002.regtrans-ms
[2011-05-11 21:36:38 | 000,524,288 | -HS- | C] () -- C:\Users\Paulo\ntuser.dat{f17abbdd-7c05-11e0-85d8-6cf049b8d6c0}.TMContainer00000000000000000001.regtrans-ms
[2011-05-11 21:36:38 | 000,065,536 | -HS- | C] () -- C:\Users\Paulo\ntuser.dat{f17abbdd-7c05-11e0-85d8-6cf049b8d6c0}.TM.blf
[2011-04-25 20:01:57 | 001,638,614 | ---- | C] () -- C:\windows\SysWow64\PerfStringBackup.INI
[2011-02-18 17:47:27 | 000,000,090 | ---- | C] () -- C:\Users\Paulo\AppData\Roaming\XTDocSettings_et.ini
[2010-11-13 21:53:43 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010-10-10 15:41:30 | 000,000,001 | ---- | C] () -- C:\windows\SysWow64\SI.bin
[2010-09-14 12:57:36 | 000,165,376 | ---- | C] () -- C:\windows\SysWow64\unrar.dll
[2010-09-14 12:56:06 | 000,006,656 | ---- | C] () -- C:\Users\Paulo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-09-12 18:30:23 | 000,002,432 | ---- | C] () -- C:\Users\Paulo\AppData\Local\TempUU4692.html
[2010-09-12 15:00:37 | 000,113,768 | ---- | C] () -- C:\windows\Wiainst.exe
[2010-09-12 14:35:52 | 000,482,408 | ---- | C] () -- C:\windows\ssndii.exe
[2010-09-12 14:35:33 | 000,259,440 | ---- | C] () -- C:\windows\SUPDRun.exe
[2010-09-11 19:36:55 | 000,150,656 | ---- | C] () -- C:\Users\Paulo\AppData\Local\GDIPFONTCACHEV1.DAT
[2010-09-11 13:39:54 | 013,355,294 | -H-- | C] () -- C:\Users\Paulo\AppData\Local\IconCache.db
[2010-09-11 12:28:02 | 000,007,602 | ---- | C] () -- C:\Users\Paulo\AppData\Local\Resmon.ResmonCfg
[2010-09-11 11:28:29 | 000,524,288 | -HS- | C] () -- C:\Users\Paulo\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2010-09-11 11:28:29 | 000,000,020 | -HS- | C] () -- C:\Users\Paulo\ntuser.ini
[2010-09-11 11:28:28 | 006,029,312 | -HS- | C] () -- C:\Users\Paulo\ntuser.dat
[2010-09-11 11:28:28 | 000,524,288 | -HS- | C] () -- C:\Users\Paulo\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2010-09-11 11:28:28 | 000,065,536 | -HS- | C] () -- C:\Users\Paulo\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2010-08-26 09:22:51 | 000,010,240 | ---- | C] () -- C:\windows\SysWow64\vidx16.dll
[2010-07-26 10:13:40 | 000,108,032 | ---- | C] () -- C:\windows\SysWow64\ff_vfw.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2011-09-28 11:25:08 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\Abvent
[2011-09-28 11:25:08 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\Abvent_Artlantis3
[2011-12-01 22:52:09 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\ANNO 2070
[2011-04-10 18:36:10 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\AutoCAD DWG to PDF Converter
[2011-10-26 21:12:57 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\Autodesk
[2012-01-17 13:18:13 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\BESTplayer
[2010-10-02 16:29:09 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\Canon
[2010-09-14 10:49:59 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\DAEMON Tools Lite
[2012-06-24 19:36:45 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\DC++
[2011-05-25 14:27:51 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\e-Kiosk Reader
[2010-09-12 20:11:06 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\Gadu-Gadu 10
[2011-02-05 17:43:25 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\GIANTS Editor 0.3.0
[2011-09-28 12:25:04 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\Graphisoft
[2011-05-01 16:39:25 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\gtk-2.0
[2011-09-28 12:14:44 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\Install.GS
[2012-06-03 14:47:12 | 000,000,000 | --SD | M] -- C:\Users\Paulo\AppData\Roaming\INTERsoft
[2011-09-30 20:00:18 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\Kalypso Media
[2010-11-03 21:47:25 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\Leadertech
[2012-01-30 22:22:39 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\MAXON
[2012-06-21 20:38:27 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\Might & Magic Heroes VI
[2010-09-12 20:23:45 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\Nowe Gadu-Gadu
[2010-11-02 22:39:04 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\OpenFM
[2011-08-29 15:32:51 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\Quest3D
[2011-11-25 20:48:25 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\Rovio
[2011-12-03 11:39:05 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2011-11-09 13:20:34 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\SWiSH Max2
[2011-08-29 15:56:23 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\Thinstall
[2010-09-14 20:02:58 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\Tropico 3
[2012-04-10 18:26:40 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\Tropico 4
[2011-12-01 22:35:07 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\Ubisoft
[2012-06-24 22:42:11 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\uTorrent
[2012-06-10 21:29:13 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\Wacom
[2012-06-10 21:32:06 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1
[2010-09-24 18:11:08 | 000,000,000 | ---D | M] -- C:\Users\Paulo\AppData\Roaming\Win7codecs
[2012-06-23 10:29:59 | 000,032,604 | ---- | M] () -- C:\windows\Tasks\SCHEDLGU.TXT
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >