OTL logfile created on: 2012-08-03 11:01:09 - Run 1 OTL by OldTimer - Version 3.2.55.0 Folder = C:\Users\KAJTEK\Desktop\OTL 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 7,86 Gb Total Physical Memory | 5,65 Gb Available Physical Memory | 71,96% Memory free 15,71 Gb Paging File | 13,37 Gb Available in Paging File | 85,11% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 60,00 Gb Total Space | 13,85 Gb Free Space | 23,08% Space Free | Partition Type: NTFS Drive D: | 236,07 Gb Total Space | 95,64 Gb Free Space | 40,51% Space Free | Partition Type: NTFS Drive E: | 300,00 Gb Total Space | 98,80 Gb Free Space | 32,93% Space Free | Partition Type: NTFS Computer Name: KAJTEK-KOMPUTER | User Name: KAJTEK | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-08-03 10:58:56 | 000,597,504 | ---- | M] (OldTimer Tools) -- C:\Users\KAJTEK\Desktop\OTL\OTL.exe PRC - [2012-07-07 00:39:55 | 000,874,384 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe PRC - [2012-07-07 00:39:55 | 000,800,656 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\pluginwrapper\opera_plugin_wrapper.exe PRC - [2012-02-26 16:01:44 | 000,295,728 | ---- | M] (SweetIM Technologies Ltd.) -- C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe PRC - [2012-02-16 15:29:02 | 000,114,992 | R--- | M] (SweetIM Technologies Ltd.) -- C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe PRC - [2012-01-03 15:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2011-08-30 18:18:30 | 002,358,656 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe PRC - [2011-05-21 08:01:00 | 002,214,504 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe PRC - [2011-03-22 02:22:59 | 012,984,928 | ---- | M] (GG Network S.A.) -- C:\Program Files (x86)\Gadu-Gadu 10\gg.exe PRC - [2011-03-17 21:57:28 | 001,596,032 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\Winamp\winamp.exe PRC - [2010-12-17 23:37:56 | 000,115,504 | ---- | M] () -- C:\Program Files (x86)\WizMouse\WizMouse.exe PRC - [2010-10-29 15:49:28 | 000,505,064 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe PRC - [2010-10-06 06:08:48 | 002,655,768 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2010-10-06 06:08:44 | 000,325,656 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2010-09-13 19:32:32 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe PRC - [2010-09-13 19:32:30 | 000,283,160 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe PRC - [2010-07-22 18:07:05 | 000,814,344 | ---- | M] (ABBYY) -- C:\Program Files (x86)\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe PRC - [2010-05-11 23:55:17 | 000,643,072 | ---- | M] () -- D:\Programy\UGS\UGSLicensing\ugslmd.exe PRC - [2010-04-27 04:09:52 | 000,113,288 | ---- | M] (Renesas Electronics Corporation) -- C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe PRC - [2009-07-07 11:16:28 | 001,510,152 | ---- | M] (Acresso Software Inc.) -- D:\Programy\UGS\UGSLicensing\lmgrd.exe PRC - [2009-04-30 12:23:26 | 000,090,112 | ---- | M] () -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe PRC - [2009-01-10 22:24:19 | 000,512,000 | ---- | M] (Planit Software Limited) -- D:\Programy\Edgecam\Cam\cls.exe PRC - [2008-12-04 13:24:30 | 000,665,424 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe PRC - [2005-08-11 21:21:16 | 000,864,256 | ---- | M] (The MathWorks Inc.) -- D:\Programy\MATLAB71\bin\win32\MATLAB.exe PRC - [2005-07-27 14:53:00 | 000,536,576 | ---- | M] () -- D:\Programy\MATLAB71\webserver\bin\win32\matlabserver.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-08-03 10:50:52 | 000,257,024 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\winamp.lng MOD - [2012-08-03 10:50:52 | 000,161,792 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\vis_milk2.lng MOD - [2012-08-03 10:50:52 | 000,087,552 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\vis_avs.lng MOD - [2012-08-03 10:50:52 | 000,066,560 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\burnlib.lng MOD - [2012-08-03 10:50:52 | 000,054,272 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\ml_local.lng MOD - [2012-08-03 10:50:52 | 000,047,616 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\ml_disc.lng MOD - [2012-08-03 10:50:52 | 000,046,080 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\ml_pmp.lng MOD - [2012-08-03 10:50:52 | 000,041,984 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\pmp_wifi.lng MOD - [2012-08-03 10:50:52 | 000,040,448 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\gen_jumpex.lng MOD - [2012-08-03 10:50:52 | 000,036,864 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\ombrowser.lng MOD - [2012-08-03 10:50:52 | 000,022,528 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\in_mp3.lng MOD - [2012-08-03 10:50:52 | 000,022,016 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\gen_ff.lng MOD - [2012-08-03 10:50:52 | 000,021,504 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\gen_ml.lng MOD - [2012-08-03 10:50:52 | 000,020,992 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\in_midi.lng MOD - [2012-08-03 10:50:52 | 000,018,432 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\in_mod.lng MOD - [2012-08-03 10:50:52 | 000,016,896 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\out_ds.lng MOD - [2012-08-03 10:50:52 | 000,014,848 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\in_wm.lng MOD - [2012-08-03 10:50:52 | 000,014,336 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\ml_wire.lng MOD - [2012-08-03 10:50:52 | 000,014,336 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\ml_online.lng MOD - [2012-08-03 10:50:52 | 000,013,312 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\ml_playlists.lng MOD - [2012-08-03 10:50:52 | 000,013,312 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\in_cdda.lng MOD - [2012-08-03 10:50:52 | 000,012,800 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\ml_plg.lng MOD - [2012-08-03 10:50:52 | 000,012,800 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\dsp_sps.lng MOD - [2012-08-03 10:50:52 | 000,011,264 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\in_vorbis.lng MOD - [2012-08-03 10:50:52 | 000,011,264 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\in_nsv.lng MOD - [2012-08-03 10:50:52 | 000,011,264 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\gen_hotkeys.lng MOD - [2012-08-03 10:50:52 | 000,011,264 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\auth.lng MOD - [2012-08-03 10:50:52 | 000,010,752 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\pmp_usb.lng MOD - [2012-08-03 10:50:52 | 000,010,752 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\pmp_android.lng MOD - [2012-08-03 10:50:52 | 000,010,240 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\enc_aacplus.lng MOD - [2012-08-03 10:50:52 | 000,009,216 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\ml_downloads.lng MOD - [2012-08-03 10:50:52 | 000,008,704 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\ml_history.lng MOD - [2012-08-03 10:50:52 | 000,008,704 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\ml_devices.lng MOD - [2012-08-03 10:50:52 | 000,008,192 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\ml_transcode.lng MOD - [2012-08-03 10:50:52 | 000,007,680 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\vis_nsfs.lng MOD - [2012-08-03 10:50:52 | 000,007,680 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\gen_tray.lng MOD - [2012-08-03 10:50:52 | 000,007,168 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\out_wave.lng MOD - [2012-08-03 10:50:52 | 000,007,168 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\ml_autotag.lng MOD - [2012-08-03 10:50:52 | 000,007,168 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\in_dshow.lng MOD - [2012-08-03 10:50:52 | 000,007,168 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\gen_orgler.lng MOD - [2012-08-03 10:50:52 | 000,007,168 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\gen_crasher.lng MOD - [2012-08-03 10:50:52 | 000,006,656 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\pmp_ipod.lng MOD - [2012-08-03 10:50:52 | 000,006,144 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\tagz.lng MOD - [2012-08-03 10:50:52 | 000,006,144 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\out_disk.lng MOD - [2012-08-03 10:50:52 | 000,006,144 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\in_flac.lng MOD - [2012-08-03 10:50:52 | 000,006,144 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\enc_wma.lng MOD - [2012-08-03 10:50:52 | 000,005,632 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\ml_rg.lng MOD - [2012-08-03 10:50:52 | 000,005,632 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\in_wave.lng MOD - [2012-08-03 10:50:52 | 000,005,632 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\enc_lame.lng MOD - [2012-08-03 10:50:52 | 000,005,120 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\ml_impex.lng MOD - [2012-08-03 10:50:52 | 000,005,120 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\ml_bookmarks.lng MOD - [2012-08-03 10:50:52 | 000,005,120 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\in_avi.lng MOD - [2012-08-03 10:50:52 | 000,004,608 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\pmp_activesync.lng MOD - [2012-08-03 10:50:52 | 000,004,608 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\in_mp4.lng MOD - [2012-08-03 10:50:52 | 000,004,608 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\in_mkv.lng MOD - [2012-08-03 10:50:52 | 000,004,096 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\pmp_p4s.lng MOD - [2012-08-03 10:50:52 | 000,004,096 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\ml_orb.lng MOD - [2012-08-03 10:50:52 | 000,004,096 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\enc_wav.lng MOD - [2012-08-03 10:50:52 | 000,004,096 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\enc_flac.lng MOD - [2012-08-03 10:50:52 | 000,003,584 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\winampa.lng MOD - [2012-08-03 10:50:52 | 000,003,584 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\pmp_njb.lng MOD - [2012-08-03 10:50:52 | 000,003,584 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\ml_nowplaying.lng MOD - [2012-08-03 10:50:52 | 000,003,584 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\ml_addons.lng MOD - [2012-08-03 10:50:52 | 000,003,584 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\in_swf.lng MOD - [2012-08-03 10:50:52 | 000,003,584 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\in_linein.lng MOD - [2012-08-03 10:50:52 | 000,003,584 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\in_flv.lng MOD - [2012-08-03 10:50:52 | 000,003,072 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temp\WLZCBD6.tmp\playlist.lng MOD - [2012-07-07 00:39:56 | 000,783,360 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\gstreamer.dll MOD - [2012-07-07 00:39:56 | 000,316,928 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstoggdec.dll MOD - [2012-07-07 00:39:56 | 000,276,480 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstwebmdec.dll MOD - [2012-07-07 00:39:56 | 000,168,448 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstffmpegcolorspace.dll MOD - [2012-07-07 00:39:56 | 000,099,840 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstcoreplugins.dll MOD - [2012-07-07 00:39:56 | 000,098,816 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstaudioresample.dll MOD - [2012-07-07 00:39:56 | 000,098,816 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstaudioconvert.dll MOD - [2012-07-07 00:39:56 | 000,078,336 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstwavparse.dll MOD - [2012-07-07 00:39:56 | 000,076,800 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstdirectsound.dll MOD - [2012-07-07 00:39:56 | 000,068,608 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstdecodebin2.dll MOD - [2012-07-07 00:39:56 | 000,064,000 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstautodetect.dll MOD - [2012-07-07 00:39:56 | 000,046,592 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstwaveform.dll MOD - [2012-07-07 00:39:56 | 000,045,568 | ---- | M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gsttypefindfunctions.dll MOD - [2011-12-06 10:40:51 | 008,527,008 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll MOD - [2011-03-22 15:37:18 | 000,090,112 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\xml.w5s MOD - [2011-03-22 15:37:18 | 000,083,968 | ---- | M] () -- C:\Program Files (x86)\Winamp\tataki.dll MOD - [2011-03-22 15:37:18 | 000,047,616 | ---- | M] () -- C:\Program Files (x86)\Winamp\zlib.dll MOD - [2011-03-22 15:37:17 | 000,623,616 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\jnetlib.w5s MOD - [2011-03-22 15:37:17 | 000,154,624 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\jpeg.w5s MOD - [2011-03-22 15:37:17 | 000,103,936 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\png.w5s MOD - [2011-03-22 15:37:17 | 000,084,480 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\playlist.w5s MOD - [2011-03-22 15:37:17 | 000,035,328 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\timer.w5s MOD - [2011-03-22 15:37:17 | 000,021,504 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\tagz.w5s MOD - [2011-03-22 15:37:17 | 000,019,456 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\gif.w5s MOD - [2011-03-22 15:37:17 | 000,016,384 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\gracenote.w5s MOD - [2011-03-22 15:37:17 | 000,014,336 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\filereader.w5s MOD - [2011-03-22 15:37:17 | 000,013,824 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\primo.w5s MOD - [2011-03-22 15:37:16 | 000,237,056 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\aacPlusDecoder.w5s MOD - [2011-03-22 15:37:16 | 000,174,080 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\auth.w5s MOD - [2011-03-22 15:37:16 | 000,044,544 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\devices.w5s MOD - [2011-03-22 15:37:16 | 000,023,040 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\albumart.w5s MOD - [2011-03-22 15:37:16 | 000,019,456 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\bmp.w5s MOD - [2011-03-22 15:37:16 | 000,016,896 | ---- | M] () -- C:\Program Files (x86)\Winamp\System\dlmgr.w5s MOD - [2011-03-22 15:37:15 | 000,240,640 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_pmp.dll MOD - [2011-03-22 15:37:15 | 000,171,008 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\pmp_ipod.dll MOD - [2011-03-22 15:37:15 | 000,126,464 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_online.dll MOD - [2011-03-22 15:37:15 | 000,118,272 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\pmp_p4s.dll MOD - [2011-03-22 15:37:15 | 000,113,152 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\pmp_wifi.dll MOD - [2011-03-22 15:37:15 | 000,083,456 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_plg.dll MOD - [2011-03-22 15:37:15 | 000,082,944 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_playlists.dll MOD - [2011-03-22 15:37:15 | 000,060,928 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\pmp_android.dll MOD - [2011-03-22 15:37:15 | 000,053,760 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\pmp_usb.dll MOD - [2011-03-22 15:37:15 | 000,052,224 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\out_ds.dll MOD - [2011-03-22 15:37:15 | 000,033,792 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_rg.dll MOD - [2011-03-22 15:37:15 | 000,031,744 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_transcode.dll MOD - [2011-03-22 15:37:15 | 000,022,528 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\out_disk.dll MOD - [2011-03-22 15:37:15 | 000,020,480 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\pmp_njb.dll MOD - [2011-03-22 15:37:15 | 000,018,432 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\out_wave.dll MOD - [2011-03-22 15:37:14 | 000,293,888 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_local.dll MOD - [2011-03-22 15:37:14 | 000,250,368 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_devices.dll MOD - [2011-03-22 15:37:14 | 000,200,704 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_disc.dll MOD - [2011-03-22 15:37:14 | 000,057,344 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_impex.dll MOD - [2011-03-22 15:37:14 | 000,052,224 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_history.dll MOD - [2011-03-22 15:37:14 | 000,028,672 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_autotag.dll MOD - [2011-03-22 15:37:14 | 000,027,648 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\ml_bookmarks.dll MOD - [2011-03-22 15:37:13 | 000,313,344 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_wm.dll MOD - [2011-03-22 15:37:13 | 000,288,768 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_mp3.dll MOD - [2011-03-22 15:37:13 | 000,252,416 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_vorbis.dll MOD - [2011-03-22 15:37:13 | 000,165,376 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_mod.dll MOD - [2011-03-22 15:37:13 | 000,109,568 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_midi.dll MOD - [2011-03-22 15:37:13 | 000,074,752 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_nsv.dll MOD - [2011-03-22 15:37:13 | 000,072,192 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_dshow.dll MOD - [2011-03-22 15:37:13 | 000,060,928 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_flac.dll MOD - [2011-03-22 15:37:13 | 000,050,688 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_mp4.dll MOD - [2011-03-22 15:37:13 | 000,049,152 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_mkv.dll MOD - [2011-03-22 15:37:13 | 000,043,008 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_flv.dll MOD - [2011-03-22 15:37:13 | 000,023,552 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_swf.dll MOD - [2011-03-22 15:37:13 | 000,016,896 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_wave.dll MOD - [2011-03-22 15:37:13 | 000,007,168 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_linein.dll MOD - [2011-03-22 15:37:12 | 001,737,728 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\gen_ff.dll MOD - [2011-03-22 15:37:12 | 000,340,992 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\freeform\wacs\freetype\freetype.wac MOD - [2011-03-22 15:37:12 | 000,312,832 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\gen_ml.dll MOD - [2011-03-22 15:37:12 | 000,183,808 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\gen_jumpex.dll MOD - [2011-03-22 15:37:12 | 000,102,400 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_cdda.dll MOD - [2011-03-22 15:37:12 | 000,068,608 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\in_avi.dll MOD - [2011-03-22 15:37:12 | 000,057,344 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\gen_orgler.dll MOD - [2011-03-22 15:37:12 | 000,027,648 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\gen_hotkeys.dll MOD - [2011-03-22 15:37:12 | 000,025,600 | ---- | M] () -- C:\Program Files (x86)\Winamp\Plugins\gen_tray.dll MOD - [2011-03-22 15:37:11 | 000,410,624 | ---- | M] () -- C:\Program Files (x86)\Winamp\nsutil.dll MOD - [2011-03-22 15:37:10 | 000,253,440 | ---- | M] () -- C:\Program Files (x86)\Winamp\libsndfile.dll MOD - [2011-03-22 15:37:10 | 000,079,360 | ---- | M] () -- C:\Program Files (x86)\Winamp\nde.dll MOD - [2011-03-22 01:57:19 | 000,475,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\0acaaa18864b8ce389d6756876a269bc\IAStorUtil.ni.dll MOD - [2011-03-22 01:57:19 | 000,014,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\e38d1efe292b58ac295f4db70c873016\IAStorCommon.ni.dll MOD - [2011-03-22 01:48:26 | 003,347,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\cf293040f3a93afa1ea782487acae816\WindowsBase.ni.dll MOD - [2011-03-22 01:48:04 | 012,432,896 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3afcd5168c7a6cb02eab99d7fd71e102\System.Windows.Forms.ni.dll MOD - [2011-03-22 01:47:48 | 001,587,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dbfe8642a8ed7b2b103ad28e0c96418a\System.Drawing.ni.dll MOD - [2011-03-22 01:47:42 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\5cae93d923c8378370758489e5535820\System.Runtime.Remoting.ni.dll MOD - [2011-03-22 01:47:38 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\461d3b6b3f43e6fbe6c897d5936e17e4\System.Xml.ni.dll MOD - [2011-03-22 01:47:35 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\bc09ad2d49d8535371845cd7532f9271\System.Configuration.ni.dll MOD - [2011-03-22 01:47:33 | 007,963,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9e0a3b9b9f457233a335d7fba8f95419\System.ni.dll MOD - [2011-03-22 01:47:23 | 011,490,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\62a0b3e4b40ec0e8c5cfaa0c8848e64a\mscorlib.ni.dll MOD - [2010-12-17 23:37:56 | 000,115,504 | ---- | M] () -- C:\Program Files (x86)\WizMouse\WizMouse.exe MOD - [2010-12-16 07:20:20 | 000,217,696 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\gglog.dll MOD - [2010-12-16 07:20:18 | 000,123,488 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\ggipcradioproxy.dll MOD - [2010-12-16 07:20:16 | 000,017,504 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\ggipc.dll MOD - [2010-12-16 07:20:12 | 000,027,744 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\ggcrypto.dll MOD - [2010-12-16 07:20:10 | 000,356,960 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\ggcommon.dll MOD - [2010-08-06 21:01:42 | 002,404,352 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtCore4.dll MOD - [2010-08-06 21:01:42 | 001,515,520 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtScript4.dll MOD - [2010-08-06 21:01:42 | 001,040,384 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtNetwork4.dll MOD - [2010-08-06 21:01:42 | 000,389,120 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtXml4.dll MOD - [2010-08-06 21:01:42 | 000,323,584 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtSvg4.dll MOD - [2010-08-06 21:01:40 | 013,553,664 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtWebKit4.dll MOD - [2010-08-06 21:01:38 | 008,818,688 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtGui4.dll MOD - [2010-08-06 21:01:22 | 003,334,144 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\QtXmlPatterns4.dll MOD - [2010-08-06 21:00:32 | 000,311,296 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qtiff4.dll MOD - [2010-08-06 21:00:32 | 000,274,432 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qmng4.dll MOD - [2010-08-06 21:00:32 | 000,143,360 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qjpeg4.dll MOD - [2010-08-06 21:00:32 | 000,027,648 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qgif4.dll MOD - [2010-08-06 21:00:32 | 000,018,944 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\imageformats\qsvg4.dll MOD - [2010-03-19 09:33:38 | 000,059,904 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu 10\zlib1.dll MOD - [2010-01-30 03:41:12 | 004,254,560 | ---- | M] () -- C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf MOD - [2009-07-14 19:55:04 | 000,311,296 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll MOD - [2009-07-14 19:55:02 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_pl_b77a5c561934e089\System.Runtime.Remoting.resources.dll MOD - [2008-10-15 20:36:14 | 000,022,016 | ---- | M] () -- D:\Programy\Edgecam\Cam\platform.dll MOD - [2008-10-15 19:06:48 | 000,025,600 | ---- | M] () -- D:\Programy\Edgecam\Cam\edgecfg.dll MOD - [2008-10-15 18:53:08 | 000,061,440 | ---- | M] () -- D:\Programy\Edgecam\Cam\stlport_allocator.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2011-12-14 18:33:11 | 001,431,888 | ---- | M] (Flexera Software, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64) SRV:[b]64bit:[/b] - [2011-11-10 07:58:18 | 000,089,160 | ---- | M] (Dassault Systèmes SolidWorks Corp.) [On_Demand | Stopped] -- C:\Program Files\SolidWorks\swScheduler\DTSCoordinatorService.exe -- (CoordinatorServiceHost) SRV:[b]64bit:[/b] - [2011-10-18 00:44:22 | 004,954,112 | ---- | M] (ANSYS, Inc.) [Auto | Running] -- C:\Program Files\ANSYS Inc\Shared Files\Licensing\winx64\ansysli_server.exe -- (ANSYS, Inc. License Manager) SRV:[b]64bit:[/b] - [2010-11-11 15:36:38 | 000,282,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe -- (NisSrv) SRV:[b]64bit:[/b] - [2010-11-11 15:36:38 | 000,012,784 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc) SRV:[b]64bit:[/b] - [2010-10-08 03:24:16 | 000,150,016 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost) SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2012-02-26 21:23:50 | 000,079,360 | ---- | M] (SolidWorks) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe -- (SolidWorks Licensing Service) SRV - [2012-01-03 15:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011-08-30 18:18:30 | 002,358,656 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe -- (TeamViewer6) SRV - [2011-05-21 08:01:00 | 002,214,504 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService) SRV - [2010-11-25 21:29:54 | 000,052,896 | ---- | M] (Atheros Commnucations) [Auto | Running] -- C:\Program Files (x86)\Bluetooth Suite\adminservice.exe -- (AtherosSvc) SRV - [2010-10-06 06:08:48 | 002,655,768 | R--- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) SRV - [2010-10-06 06:08:44 | 000,325,656 | R--- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) SRV - [2010-09-13 19:32:32 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) SRV - [2010-07-22 18:07:05 | 000,814,344 | ---- | M] (ABBYY) [Auto | Running] -- C:\Program Files (x86)\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Professional.10.0) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010-03-11 10:01:02 | 000,153,736 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe -- (Sony Ericsson PCCompanion) SRV - [2010-02-18 15:07:00 | 001,351,168 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\MPI-RT\4.0.0.012\em64t\bin\smpd.exe -- (impi_smpd) SRV - [2010-01-23 09:12:18 | 000,673,792 | ---- | M] () [Auto | Running] -- D:\Programy\Autodesk\Inventor 2011\Moldflow\bin\mitsijm.exe -- (mitsijm2011) SRV - [2010-01-09 04:04:02 | 000,046,592 | ---- | M] (Dassault Systemes) [Auto | Running] -- D:\Programy\Dassault Systemes\B20\win_b64\code\bin\CATSysDemon.exe -- (BBDemon) SRV - [2009-07-07 11:16:28 | 001,510,152 | ---- | M] (Acresso Software Inc.) [Auto | Running] -- D:\Programy\UGS\UGSLicensing\lmgrd.exe -- (UGS License Server (ugslmd) SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2009-04-30 12:23:26 | 000,090,112 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe -- (OMSI download service) SRV - [2005-07-27 14:53:00 | 000,536,576 | ---- | M] () [Auto | Running] -- D:\Programy\MATLAB71\webserver\bin\win32\matlabserver.exe -- (matlabserver) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2011-05-21 08:01:00 | 000,027,240 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt) DRV:[b]64bit:[/b] - [2011-03-26 14:23:14 | 000,254,528 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV:[b]64bit:[/b] - [2010-12-24 02:44:22 | 012,260,000 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2010-12-11 21:43:54 | 000,085,544 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\bScsiSDa.sys -- (bScsiSDa) DRV:[b]64bit:[/b] - [2010-12-11 09:12:54 | 000,019,496 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\b57xdmp.sys -- (b57xdmp) DRV:[b]64bit:[/b] - [2010-12-11 09:12:50 | 000,067,112 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\b57xdbd.sys -- (b57xdbd) DRV:[b]64bit:[/b] - [2010-12-10 18:46:56 | 000,035,368 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\bScsiMSa.sys -- (bScsiMSa) DRV:[b]64bit:[/b] - [2010-12-02 12:14:26 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt) DRV:[b]64bit:[/b] - [2010-12-02 12:14:24 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev) DRV:[b]64bit:[/b] - [2010-12-02 12:14:22 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc) DRV:[b]64bit:[/b] - [2010-12-02 12:14:18 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd) DRV:[b]64bit:[/b] - [2010-12-01 23:36:04 | 000,411,688 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a) DRV:[b]64bit:[/b] - [2010-11-25 21:30:12 | 000,028,832 | ---- | M] (Atheros) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btath_bus.sys -- (BTATH_BUS) DRV:[b]64bit:[/b] - [2010-11-20 06:33:36 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-11-20 06:32:48 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2010-11-20 06:32:48 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2010-11-20 04:07:06 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010-11-20 03:43:58 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser) DRV:[b]64bit:[/b] - [2010-11-20 02:37:44 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2010-11-12 08:23:40 | 000,138,024 | ---- | M] (ELAN Microelectronics Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD) DRV:[b]64bit:[/b] - [2010-11-02 20:00:32 | 002,380,448 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:[b]64bit:[/b] - [2010-10-24 22:25:38 | 000,072,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv) DRV:[b]64bit:[/b] - [2010-10-15 10:28:18 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) DRV:[b]64bit:[/b] - [2010-10-08 03:23:38 | 000,019,192 | ---- | M] (Intel(R) Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB) DRV:[b]64bit:[/b] - [2010-09-30 07:00:06 | 000,180,736 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc) DRV:[b]64bit:[/b] - [2010-09-30 07:00:06 | 000,080,384 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub) DRV:[b]64bit:[/b] - [2010-09-21 18:59:38 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) DRV:[b]64bit:[/b] - [2010-09-13 19:24:26 | 000,437,272 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:[b]64bit:[/b] - [2010-04-12 10:55:00 | 000,091,568 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\scdemu.sys -- (SCDEmu) DRV:[b]64bit:[/b] - [2010-03-15 09:38:46 | 000,161,904 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1039mdm.sys -- (s1039mdm) DRV:[b]64bit:[/b] - [2010-03-15 09:38:46 | 000,158,320 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1039unic.sys -- (s1039unic) DRV:[b]64bit:[/b] - [2010-03-15 09:38:46 | 000,141,424 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1039mgmt.sys -- (s1039mgmt) DRV:[b]64bit:[/b] - [2010-03-15 09:38:46 | 000,137,328 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1039obex.sys -- (s1039obex) DRV:[b]64bit:[/b] - [2010-03-15 09:38:46 | 000,034,416 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1039nd5.sys -- (s1039nd5) DRV:[b]64bit:[/b] - [2010-03-15 09:38:46 | 000,019,568 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1039mdfl.sys -- (s1039mdfl) DRV:[b]64bit:[/b] - [2010-03-01 11:43:02 | 000,127,600 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1039bus.sys -- (s1039bus) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 02:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2008-01-09 12:28:20 | 000,034,032 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\seehcri.sys -- (seehcri) DRV:[b]64bit:[/b] - [2008-01-02 17:11:50 | 000,024,848 | ---- | M] (IBM) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\LUMDriver.sys -- (LUMDriver) DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) DRV - [2008-04-02 18:29:02 | 000,076,288 | ---- | M] (Rainbow Technologies, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysWOW64\drivers\SENTINEL.SYS -- (Sentinel) DRV - [2004-07-14 13:54:42 | 000,676,864 | ---- | M] (Aladdin Knowledge Systems) [Kernel | Auto | Stopped] -- C:\Windows\SysWOW64\drivers\hardlock.sys -- (Hardlock) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?crg=3.1010000.10011&barid={41B02FE5-A76B-11E1-91FF-1C7508D46284} IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=6714fc49-80ad-11e1-aa3b-1c7508d46284&q={searchTerms} IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10011&barid={41B02FE5-A76B-11E1-91FF-1C7508D46284} IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-431582136-1152607028-3571924844-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=113480&tt=190712_n_mont_3012_6&babsrc=HP_ss&mntrId=60f0d3d8000000000000a2004e505685 IE - HKU\S-1-5-21-431582136-1152607028-3571924844-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - No CLSID value found IE - HKU\S-1-5-21-431582136-1152607028-3571924844-1000\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.) IE - HKU\S-1-5-21-431582136-1152607028-3571924844-1000\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} IE - HKU\S-1-5-21-431582136-1152607028-3571924844-1000\..\SearchScopes\{043C5167-00BB-4324-AF7E-62013FAEDACF}: "URL" = http://vshare.toolbarhome.com/search.aspx?q={searchTerms}&srch=dsp IE - HKU\S-1-5-21-431582136-1152607028-3571924844-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-431582136-1152607028-3571924844-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=113480&tt=190712_n_mont_3012_6&babsrc=SP_ss&mntrId=60f0d3d8000000000000a2004e505685 IE - HKU\S-1-5-21-431582136-1152607028-3571924844-1000\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=SPC2&o=15000&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=PV&apn_dtid=YYYYYYYYPL&apn_uid=573E135B-F4BF-43A7-B8D2-9FC1836BEA7D&apn_sauid=5ECA77EA-755F-4E6D-AFD0-4A13D152075A IE - HKU\S-1-5-21-431582136-1152607028-3571924844-1000\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http://www.daemon-search.com/search/web?q={searchTerms} IE - HKU\S-1-5-21-431582136-1152607028-3571924844-1000\..\SearchScopes\{CCFC48CF-8F44-47DD-AF85-1268E4761417}: "URL" = http://search.babylon.com/?q={searchTerms}&AF=100481&babsrc=SP_ss&mntrId=60f0d3d8000000000000a2004e505685 IE - HKU\S-1-5-21-431582136-1152607028-3571924844-1000\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10011&barid={41B02FE5-A76B-11E1-91FF-1C7508D46284} IE - HKU\S-1-5-21-431582136-1152607028-3571924844-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@idsoftware.com/QuakeLive: C:\ProgramData\id Software\QuakeLive\npquakezero.dll (id Software Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc) FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2012-06-23 14:40:26 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2012-06-23 14:40:30 | 000,000,000 | ---D | M] [2012-05-26 21:44:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\KAJTEK\AppData\Roaming\mozilla\Firefox\Profiles\0\extensions [2012-07-24 11:21:32 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [color=#E56717]========== Chrome ==========[/color] CHR - homepage: http://search.babylon.com/?affID=113480&tt=190712_n_mont_3012_6&babsrc=HP_ss&mntrId=60f0d3d8000000000000a2004e505685 CHR - default_search_provider: Search the web (Babylon) (Enabled) CHR - default_search_provider: search_url = http://search.babylon.com/?q={searchTerms}&affID=113480&tt=190712_n_mont_3012_6&babsrc=SP_ss&mntrId=60f0d3d8000000000000a2004e505685 CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms} CHR - homepage: http://search.babylon.com/?affID=113480&tt=190712_n_mont_3012_6&babsrc=HP_ss&mntrId=60f0d3d8000000000000a2004e505685 CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.60\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.60\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\21.0.1180.60\gcswf32.dll CHR - plugin: Shockwave Flash (Disabled) = C:\Users\KAJTEK\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll CHR - plugin: StartSearch Video plug-in (Enabled) = C:\Users\KAJTEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\bildoibdboopgomcbiplincneeicgipj\1.3_0\chvsharetvplg.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\plugins\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\plugins\nprpjplug.dll CHR - plugin: Java Deployment Toolkit 6.0.240.7 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U24 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll CHR - plugin: Veetle TV Player (Enabled) = C:\Program Files (x86)\Veetle\Player\npvlc.dll CHR - plugin: Veetle TV Core (Enabled) = C:\Program Files (x86)\Veetle\plugins\npVeetle.dll CHR - plugin: QUAKE LIVE (Enabled) = C:\ProgramData\id Software\QuakeLive\npquakezero.dll CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll CHR - Extension: StartSearch Video plug-in = C:\Users\KAJTEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\bildoibdboopgomcbiplincneeicgipj\1.3_0\ CHR - Extension: YouTube = C:\Users\KAJTEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Speed Dial = C:\Users\KAJTEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgpdioedihjhncjafcpgbbjdpbbkikmi\2.1_0\ CHR - Extension: Babylon Toolbar = C:\Users\KAJTEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.7_0\ CHR - Extension: SweetIM for Facebook = C:\Users\KAJTEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\Copy of CHR - Extension: SweetIM for Facebook = C:\Users\KAJTEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\ CHR - Extension: 1Click Downloader = C:\Users\KAJTEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\jplinpmadfkdgipabgcdchbdikologlh\1.5_0\ CHR - Extension: Pocket Legends = C:\Users\KAJTEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhpdbcnfpodnaefldpdohoibdajcfabp\1.7.5.3_0\ CHR - Extension: Assassin creed 3 = C:\Users\KAJTEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmeebgkckgojipfmkblgfpbbjgfanooo\1_0\ CHR - Extension: StartSearch Video plug-in = C:\Users\KAJTEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\bildoibdboopgomcbiplincneeicgipj\1.3_0\ CHR - Extension: YouTube = C:\Users\KAJTEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Speed Dial = C:\Users\KAJTEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgpdioedihjhncjafcpgbbjdpbbkikmi\2.1_0\ CHR - Extension: Babylon Toolbar = C:\Users\KAJTEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.7_0\ CHR - Extension: SweetIM for Facebook = C:\Users\KAJTEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\Copy of CHR - Extension: SweetIM for Facebook = C:\Users\KAJTEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\ CHR - Extension: 1Click Downloader = C:\Users\KAJTEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\jplinpmadfkdgipabgcdchbdikologlh\1.5_0\ CHR - Extension: Pocket Legends = C:\Users\KAJTEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhpdbcnfpodnaefldpdohoibdajcfabp\1.7.5.3_0\ CHR - Extension: Assassin creed 3 = C:\Users\KAJTEK\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmeebgkckgojipfmkblgfpbbjgfanooo\1_0\ O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O3:[b]64bit:[/b] - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKU\S-1-5-21-431582136-1152607028-3571924844-1000\..\Toolbar\WebBrowser: (vShare Toolbar) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files (x86)\vShare\vshare_toolbar.dll () O3:[b]64bit:[/b] - HKU\S-1-5-21-431582136-1152607028-3571924844-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3 - HKU\S-1-5-21-431582136-1152607028-3571924844-1000\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKU\S-1-5-21-431582136-1152607028-3571924844-1000\..\Toolbar\WebBrowser: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O4:[b]64bit:[/b] - HKLM..\Run: [AthBtTray] C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Atheros Commnucations) O4:[b]64bit:[/b] - HKLM..\Run: [AtherosBtStack] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Communications) O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [IntelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" File not found O4:[b]64bit:[/b] - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [EEventManager] C:\PROGRA~2\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION) O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation) O4 - HKLM..\Run: [SweetIM] C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe (SweetIM Technologies Ltd.) O4 - HKLM..\Run: [Sweetpacks Communicator] C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe (SweetIM Technologies Ltd.) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-431582136-1152607028-3571924844-1000..\Run: [CONNMGRTRAY] C:\Program Files\Acer\Acer 3G Connection Manager\ConnMgrLauncher.exe () O4 - HKU\S-1-5-21-431582136-1152607028-3571924844-1000..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKU\S-1-5-21-431582136-1152607028-3571924844-1000..\Run: [EPSON SX210 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFDE.EXE /FU "C:\Windows\TEMP\E_SEDE7.tmp" /EF "HKCU" File not found O4 - HKU\S-1-5-21-431582136-1152607028-3571924844-1000..\Run: [Gadu-Gadu 10] C:\Program Files (x86)\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKU\S-1-5-21-431582136-1152607028-3571924844-1000..\Run: [HP Photosmart 5510 series (NET)] C:\Program Files\HP\HP Photosmart 5510 series\Bin\ScanToPCActivationApp.exe (Hewlett-Packard Co.) O4 - HKU\S-1-5-21-431582136-1152607028-3571924844-1000..\Run: [Sony Ericsson PC Companion] C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe () O4 - HKU\S-1-5-21-431582136-1152607028-3571924844-1008..\Run: [CONNMGRTRAY] C:\Program Files\Acer\Acer 3G Connection Manager\ConnMgrLauncher.exe () O4 - HKU\S-1-5-21-431582136-1152607028-3571924844-1008..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-21-431582136-1152607028-3571924844-1008..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - Startup: C:\Users\KAJTEK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tworzenie wycinków ekranu i uruchamianie programu OneNote 2010.lnk = File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKU\S-1-5-21-431582136-1152607028-3571924844-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1 O8:[b]64bit:[/b] - Extra context menu item: Search the Web - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html () O8 - Extra context menu item: Search the Web - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html () O9:[b]64bit:[/b] - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - Reg Error: Value error. File not found O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab (System Requirements Lab Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{11796AFF-F5ED-40E0-B2EA-E5FEEC6DFC66}: DhcpNameServer = 95.160.170.92 88.156.222.92 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AF3ADE3A-2ED2-409B-9555-E5D74B4AF3E2}: DhcpNameServer = 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\vsharechrome - No CLSID value found O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\Web Components\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Handler\vsharechrome {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files (x86)\vShare\vshare_toolbar.dll () O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation) O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{1aa21988-5791-11e0-8b93-1c7508d46284}\Shell - "" = AutoRun O33 - MountPoints2\{1aa21988-5791-11e0-8b93-1c7508d46284}\Shell\AutoRun\command - "" = G:\cdstartup\cdstartup.exe O33 - MountPoints2\{3000aa58-d6b5-11e1-b496-1c7508d46284}\Shell - "" = AutoRun O33 - MountPoints2\{3000aa58-d6b5-11e1-b496-1c7508d46284}\Shell\AutoRun\command - "" = H:\Startme.exe O33 - MountPoints2\{9f3832cc-e46c-11e0-b1c4-1c7508d46284}\Shell - "" = AutoRun O33 - MountPoints2\{9f3832cc-e46c-11e0-b1c4-1c7508d46284}\Shell\AutoRun\command - "" = H:\AutoRun.exe O33 - MountPoints2\{a306f035-e445-11e0-b161-1c7508d46284}\Shell - "" = AutoRun O33 - MountPoints2\{a306f035-e445-11e0-b161-1c7508d46284}\Shell\AutoRun\command - "" = I:\AutoRun.exe O33 - MountPoints2\{a306f042-e445-11e0-b161-1c7508d46284}\Shell - "" = AutoRun O33 - MountPoints2\{a306f042-e445-11e0-b161-1c7508d46284}\Shell\AutoRun\command - "" = J:\AutoRun.exe O33 - MountPoints2\{b4f942e1-5431-11e0-91ab-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{b4f942e1-5431-11e0-91ab-806e6f6e6963}\Shell\AutoRun\command - "" = F:\DistinguishOS.exe O33 - MountPoints2\H\Shell - "" = AutoRun O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\autorun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-08-03 10:59:04 | 000,000,000 | ---D | C] -- C:\Users\KAJTEK\Desktop\OTL [2012-08-02 22:34:42 | 000,000,000 | ---D | C] -- C:\Users\KAJTEK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live Security Platinum [2012-08-02 22:31:51 | 000,000,000 | ---D | C] -- C:\ProgramData\7531CCA902A330BA21A229FEF875EF60 [2012-08-02 08:27:34 | 000,000,000 | ---D | C] -- C:\Users\KAJTEK\Desktop\halflight_shadows [2012-07-27 14:25:34 | 000,000,000 | ---D | C] -- C:\Users\KAJTEK\Desktop\Magisterka [2012-07-24 23:07:16 | 000,000,000 | ---D | C] -- C:\Users\KAJTEK\AppData\Roaming\TeamViewer [2012-07-24 19:40:01 | 000,000,000 | ---D | C] -- C:\Users\KAJTEK\AppData\Roaming\hellomoto [2012-07-24 11:21:52 | 000,000,000 | ---D | C] -- C:\Users\KAJTEK\AppData\Roaming\GoPlayer [2012-07-24 11:21:39 | 000,000,000 | ---D | C] -- C:\Users\KAJTEK\AppData\Roaming\BabylonToolbar [2012-07-24 11:21:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Software Plate [2012-07-24 11:21:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2012-07-24 11:21:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GoPlayer [2012-07-24 10:55:01 | 000,000,000 | ---D | C] -- C:\Users\KAJTEK\Desktop\ANSI-AGMA%202005-D03 [2012-07-19 22:45:11 | 000,000,000 | ---D | C] -- C:\Users\KAJTEK\Desktop\19.07.2012 [2012-07-17 13:29:37 | 000,000,000 | ---D | C] -- C:\Users\KAJTEK\Desktop\CV [2012-07-12 23:20:11 | 000,000,000 | ---D | C] -- C:\Users\KAJTEK\Desktop\kopia [2012-07-12 23:17:58 | 000,000,000 | ---D | C] -- C:\Users\KAJTEK\Desktop\KISSsoft-03-2012-SP2 [2012-07-12 23:13:15 | 017,177,888 | ---- | C] (KISSsoft AG ) -- C:\Users\KAJTEK\Desktop\KISSsoft-03-2012-SP2.exe [2012-07-12 22:44:37 | 000,000,000 | ---D | C] -- C:\Users\KAJTEK\Desktop\tutorials [2011-09-27 20:56:12 | 000,148,736 | ---- | C] (Avanquest Software) -- C:\ProgramData\hpeE9A3.dll [2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-08-03 11:04:41 | 006,815,744 | -HS- | M] () -- C:\Users\KAJTEK\NTUSER.DAT [2012-08-03 11:01:00 | 000,000,258 | ---- | M] () -- C:\Windows\tasks\HP Photo Creations Messager.job [2012-08-03 10:57:00 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012-08-03 10:47:17 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012-08-03 10:47:17 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012-08-03 10:44:19 | 000,634,537 | ---- | M] () -- C:\Users\KAJTEK\Desktop\Magisterka.rar [2012-08-03 10:39:57 | 000,000,035 | ---- | M] () -- C:\Users\Public\Documents\AtherosServiceConfig.ini [2012-08-03 10:39:40 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012-08-03 10:39:33 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-08-03 10:39:33 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2012-08-03 10:39:22 | 2030,981,119 | -HS- | M] () -- C:\hiberfil.sys [2012-08-02 22:43:47 | 002,723,688 | -H-- | M] () -- C:\Users\KAJTEK\AppData\Local\IconCache.db [2012-08-02 22:34:42 | 000,002,074 | ---- | M] () -- C:\Users\KAJTEK\Desktop\Live Security Platinum.lnk [2012-08-02 21:32:02 | 000,207,121 | ---- | M] () -- C:\Users\KAJTEK\Documents\zakładki1.adr [2012-08-02 08:27:27 | 087,223,815 | ---- | M] () -- C:\Users\KAJTEK\Desktop\halflight_shadows.zip [2012-08-02 00:56:29 | 001,808,106 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012-08-02 00:56:29 | 000,789,636 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2012-08-02 00:56:29 | 000,703,360 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012-08-02 00:56:29 | 000,174,154 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2012-08-02 00:56:29 | 000,140,186 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2012-08-01 16:10:24 | 000,163,973 | ---- | M] () -- C:\Users\KAJTEK\Desktop\A0.pdf [2012-08-01 15:18:07 | 000,000,490 | ---- | M] () -- C:\Users\KAJTEK\Desktop\2.kpro [2012-07-26 02:21:18 | 000,002,288 | ---- | M] () -- C:\Users\Public\Desktop\Sony Ericsson PC Companion 2.0.lnk [2012-07-26 02:18:59 | 006,489,016 | ---- | M] () -- C:\Users\KAJTEK\Desktop\11-mona-special.mp3 [2012-07-26 02:17:45 | 004,261,498 | ---- | M] () -- C:\Users\KAJTEK\Desktop\11 - mona - special.mp3 [2012-07-24 23:24:01 | 000,000,822 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk [2012-07-24 11:21:38 | 000,004,563 | ---- | M] () -- C:\user.js [2012-07-24 10:54:59 | 001,457,664 | ---- | M] () -- C:\Users\KAJTEK\Desktop\ANSI-AGMA%202005-D03.part1.rar [2012-07-23 23:51:50 | 000,002,234 | ---- | M] () -- C:\Users\KAJTEK\Desktop\1.png [2012-07-23 23:51:22 | 000,000,000 | ---- | M] () -- C:\Users\KAJTEK\AppData\Local\Temptable.xml [2012-07-23 23:51:16 | 000,004,836 | ---- | M] () -- C:\Users\KAJTEK\Desktop\1.jpg [2012-07-23 23:30:38 | 000,000,471 | ---- | M] () -- C:\Users\KAJTEK\Desktop\planet1.kpro [2012-07-12 23:17:41 | 017,322,971 | ---- | M] () -- C:\Users\KAJTEK\Desktop\KISSsoft-03-2012-SP2.zip [2012-07-12 23:17:22 | 017,177,888 | ---- | M] (KISSsoft AG ) -- C:\Users\KAJTEK\Desktop\KISSsoft-03-2012-SP2.exe [2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-08-03 10:44:18 | 000,634,537 | ---- | C] () -- C:\Users\KAJTEK\Desktop\Magisterka.rar [2012-08-02 22:34:42 | 000,002,074 | ---- | C] () -- C:\Users\KAJTEK\Desktop\Live Security Platinum.lnk [2012-08-02 21:32:01 | 000,207,121 | ---- | C] () -- C:\Users\KAJTEK\Documents\zakładki1.adr [2012-08-02 08:25:41 | 087,223,815 | ---- | C] () -- C:\Users\KAJTEK\Desktop\halflight_shadows.zip [2012-08-01 16:10:24 | 000,163,973 | ---- | C] () -- C:\Users\KAJTEK\Desktop\A0.pdf [2012-08-01 15:18:07 | 000,000,490 | ---- | C] () -- C:\Users\KAJTEK\Desktop\2.kpro [2012-07-26 02:21:18 | 000,002,288 | ---- | C] () -- C:\Users\Public\Desktop\Sony Ericsson PC Companion 2.0.lnk [2012-07-26 02:18:49 | 006,489,016 | ---- | C] () -- C:\Users\KAJTEK\Desktop\11-mona-special.mp3 [2012-07-26 02:17:45 | 004,261,498 | ---- | C] () -- C:\Users\KAJTEK\Desktop\11 - mona - special.mp3 [2012-07-25 01:28:24 | 002,723,688 | -H-- | C] () -- C:\Users\KAJTEK\AppData\Local\IconCache.db [2012-07-24 23:24:01 | 000,000,822 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk [2012-07-24 10:54:28 | 001,457,664 | ---- | C] () -- C:\Users\KAJTEK\Desktop\ANSI-AGMA%202005-D03.part1.rar [2012-07-23 23:51:50 | 000,002,234 | ---- | C] () -- C:\Users\KAJTEK\Desktop\1.png [2012-07-23 23:51:16 | 000,004,836 | ---- | C] () -- C:\Users\KAJTEK\Desktop\1.jpg [2012-07-23 23:30:38 | 000,000,471 | ---- | C] () -- C:\Users\KAJTEK\Desktop\planet1.kpro [2012-07-12 23:16:30 | 017,322,971 | ---- | C] () -- C:\Users\KAJTEK\Desktop\KISSsoft-03-2012-SP2.zip [2012-06-23 14:38:21 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini [2012-04-07 14:30:26 | 000,075,045 | ---- | C] () -- C:\Windows\SysWow64\dbd5b73b.exe [2012-03-14 17:11:47 | 000,000,016 | ---- | C] () -- C:\Users\KAJTEK\pmtl621.dll [2012-02-27 00:25:46 | 000,000,000 | ---- | C] () -- C:\Users\KAJTEK\AppData\Local\Temptable.xml [2012-02-26 21:31:09 | 000,015,872 | ---- | C] () -- C:\Windows\SysWow64\ibfs32.dll [2011-12-20 01:37:41 | 000,029,078 | ---- | C] () -- C:\Users\KAJTEK\model1_job1_b1.t18 [2011-12-20 01:31:05 | 000,000,086 | ---- | C] () -- C:\Users\KAJTEK\model1_job1_b1.t01 [2011-12-20 01:17:52 | 005,286,984 | ---- | C] () -- C:\Users\KAJTEK\model1_job1.t16 [2011-12-20 01:17:51 | 000,597,001 | ---- | C] () -- C:\Users\KAJTEK\model1_job1.out [2011-12-20 01:17:51 | 000,002,274 | ---- | C] () -- C:\Users\KAJTEK\model1_job1.sts [2011-12-20 01:17:50 | 000,261,754 | ---- | C] () -- C:\Users\KAJTEK\model1_job1.dat [2011-12-20 00:51:35 | 000,006,401 | ---- | C] () -- C:\Users\KAJTEK\mentat.proc [2011-11-03 18:21:21 | 000,000,087 | ---- | C] () -- C:\Windows\winDecrypt.INI [2011-09-27 13:35:00 | 000,000,000 | ---- | C] () -- C:\Windows\EEventManager.INI [2011-09-27 10:46:20 | 000,111,932 | ---- | C] () -- C:\Windows\SysWow64\EPPICPrinterDB.dat [2011-09-27 10:46:20 | 000,031,053 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern131.dat [2011-09-27 10:46:20 | 000,027,417 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern121.dat [2011-09-27 10:46:20 | 000,026,154 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern1.dat [2011-09-27 10:46:20 | 000,024,903 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern3.dat [2011-09-27 10:46:20 | 000,021,390 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern5.dat [2011-09-27 10:46:20 | 000,020,148 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern2.dat [2011-09-27 10:46:20 | 000,011,811 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern4.dat [2011-09-27 10:46:20 | 000,004,943 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern6.dat [2011-09-27 10:46:20 | 000,001,146 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_DU.dat [2011-09-27 10:46:20 | 000,001,139 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_PT.dat [2011-09-27 10:46:20 | 000,001,139 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_BP.dat [2011-09-27 10:46:20 | 000,001,136 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_ES.dat [2011-09-27 10:46:20 | 000,001,129 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_FR.dat [2011-09-27 10:46:20 | 000,001,129 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_CF.dat [2011-09-27 10:46:20 | 000,001,120 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_IT.dat [2011-09-27 10:46:20 | 000,001,107 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_GE.dat [2011-09-27 10:46:20 | 000,001,104 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_EN.dat [2011-09-27 10:46:20 | 000,000,097 | ---- | C] () -- C:\Windows\SysWow64\PICSDK.ini [2011-06-19 19:19:06 | 000,007,597 | ---- | C] () -- C:\Users\KAJTEK\AppData\Local\Resmon.ResmonCfg [2011-05-29 12:38:56 | 000,000,000 | ---- | C] () -- C:\Windows\proftool.INI [2011-05-08 11:54:25 | 000,000,157 | ---- | C] () -- C:\Windows\matlab.ini [2011-05-06 08:36:19 | 000,000,000 | ---- | C] () -- C:\Users\KAJTEK\AppData\Local\{7C950A51-2714-4766-B2B2-BBCE146D4EE9} [2011-03-28 21:12:03 | 000,000,524 | ---- | C] () -- C:\Windows\QIII.INI [2011-03-22 18:14:03 | 001,784,372 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011-03-22 15:08:57 | 000,207,376 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin [2011-03-22 06:33:21 | 000,960,940 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin [2011-03-22 06:33:21 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin [2011-03-22 06:23:03 | 000,008,192 | R--- | C] () -- C:\Windows\SysWow64\drivers\IntelMEFWVer.dll [2011-03-22 06:02:22 | 000,174,200 | ---- | C] () -- C:\Users\KAJTEK\AppData\Local\GDIPFONTCACHEV1.DAT [2011-03-22 05:14:31 | 006,815,744 | -HS- | C] () -- C:\Users\KAJTEK\NTUSER.DAT [2011-03-22 05:14:31 | 000,524,288 | -HS- | C] () -- C:\Users\KAJTEK\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms [2011-03-22 05:14:31 | 000,524,288 | -HS- | C] () -- C:\Users\KAJTEK\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms [2011-03-22 05:14:31 | 000,065,536 | -HS- | C] () -- C:\Users\KAJTEK\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf [2011-03-22 05:14:31 | 000,000,020 | -HS- | C] () -- C:\Users\KAJTEK\ntuser.ini [color=#E56717]========== LOP Check ==========[/color] [2012-04-07 13:05:37 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\Ansys [2012-04-14 01:19:31 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\Autodesk [2011-12-28 13:40:47 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\Babylon [2012-07-24 11:21:40 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\BabylonToolbar [2012-07-12 16:59:30 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\BESTplayer [2012-04-06 13:22:42 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\cadenas [2011-07-11 17:40:57 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\Canneverbe Limited [2012-07-24 23:43:35 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\DAEMON Tools Lite [2011-03-24 11:42:01 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\DassaultSystemes [2012-04-07 14:07:53 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\Dev-Cpp [2011-12-02 21:45:47 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\Epson [2011-03-25 21:16:48 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\Gadu-Gadu 10 [2012-04-06 14:19:45 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\GHISLER [2012-07-24 11:22:33 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\GoPlayer [2012-07-24 19:40:08 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\hellomoto [2012-01-10 17:57:25 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\ipla [2011-09-21 18:32:57 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\iPlus [2012-06-05 22:48:48 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\KISSsoft AG [2011-12-14 18:16:17 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\Notepad++ [2012-05-29 15:49:30 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\OpenFM [2011-04-13 22:09:30 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\Opera [2012-04-07 13:45:09 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\QuickStoresToolbar [2011-03-22 15:46:00 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\RDRM [2011-12-28 14:13:13 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\Softland [2012-07-24 23:07:16 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\TeamViewer [2012-04-16 23:15:57 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\Unigraphics Solutions [2012-07-24 23:43:35 | 000,000,000 | ---D | M] -- C:\Users\KAJTEK\AppData\Roaming\uTorrent [2011-12-28 14:42:00 | 000,000,498 | ---- | M] () -- C:\Windows\Tasks\At1.job [2012-07-18 13:04:19 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] < End of report >