OTL logfile created on: 9/3/2012 11:29:44 PM - Run 3
OTL by OldTimer - Version 3.2.60.0     Folder = C:\Users\Lukasz\Desktop
64bit- Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3.00 Gb Total Physical Memory | 1.09 Gb Available Physical Memory | 36.25% Memory free
5.99 Gb Paging File | 3.82 Gb Available in Paging File | 63.77% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 285.30 Gb Total Space | 90.78 Gb Free Space | 31.82% Space Free | Partition Type: NTFS
 
Computer Name: LUKASZ-KOMPUTER | User Name: Lukasz | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012/09/03 21:07:57 | 000,927,840 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\12.2.0\ToolbarUpdater.exe
PRC - [2012/09/03 21:07:52 | 001,162,848 | ---- | M] () -- C:\Program Files (x86)\AVG Secure Search\vprot.exe
PRC - [2012/09/03 18:27:58 | 000,599,040 | ---- | M] (OldTimer Tools) -- C:\Users\Lukasz\Desktop\OTL.exe
PRC - [2012/08/29 03:19:14 | 000,917,984 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2012/08/15 20:54:23 | 001,536,712 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_271.exe
PRC - [2012/08/13 13:33:30 | 003,064,000 | ---- | M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
PRC - [2012/08/12 01:53:18 | 001,697,312 | ---- | M] () -- C:\ProgramData\Browser Manager\2.2.565.25\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe
PRC - [2012/08/10 18:59:52 | 004,440,896 | ---- | M] (Akamai Technologies, Inc.) -- C:\Users\Lukasz\AppData\Local\Akamai\netsession_win.exe
PRC - [2012/07/31 13:12:28 | 003,381,384 | ---- | M] (GG Network S.A.) -- C:\Users\Lukasz\AppData\Local\GG\Application\gghub.exe
PRC - [2012/07/31 13:12:28 | 000,047,752 | ---- | M] (GG Network S.A.) -- C:\Users\Lukasz\AppData\Local\GG\Application\ggapp.exe
PRC - [2012/05/25 00:19:27 | 000,111,664 | ---- | M] (TMRG,  Inc.) -- C:\Program Files (x86)\RelevantKnowledge\rlservice.exe
PRC - [2012/05/25 00:19:24 | 002,983,472 | ---- | M] (TMRG,  Inc.) -- C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe
PRC - [2012/01/18 14:02:04 | 000,508,136 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
PRC - [2011/06/14 17:42:26 | 001,540,096 | ---- | M] (Nokia) -- C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe
PRC - [2010/11/02 06:34:33 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\schtasks.exe
PRC - [2009/08/27 22:48:32 | 001,194,504 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
PRC - [2009/08/21 02:25:56 | 000,261,888 | ---- | M] (NewTech Infosystems, Inc.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
PRC - [2009/08/21 02:25:50 | 000,062,720 | ---- | M] (NewTech Infosystems, Inc.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
PRC - [2009/08/07 11:18:54 | 000,311,592 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe
PRC - [2009/08/05 06:45:00 | 000,181,480 | ---- | M] (Acer Corp.) -- C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe
PRC - [2009/08/04 23:09:34 | 000,199,464 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
PRC - [2009/08/01 02:29:12 | 000,128,296 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
PRC - [2009/07/04 03:47:12 | 000,240,160 | ---- | M] (Acer) -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe
PRC - [2009/06/05 04:03:32 | 000,186,904 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2009/06/05 04:03:06 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2009/06/04 15:04:50 | 001,150,496 | ---- | M] (Acer Incorporated) -- C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
PRC - [2008/07/30 04:29:26 | 000,200,704 | ---- | M] () -- C:\Windows\PLFSetI.exe
PRC - [2007/06/05 13:20:32 | 000,177,704 | ---- | M] () -- C:\Windows\SysWOW64\PSIService.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012/09/03 21:07:58 | 000,132,704 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\12.2.0\SiteSafety.dll
MOD - [2012/09/03 21:07:52 | 001,162,848 | ---- | M] () -- C:\Program Files (x86)\AVG Secure Search\vprot.exe
MOD - [2012/08/29 03:19:13 | 002,242,528 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2012/08/15 20:54:23 | 009,465,032 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_271.dll
MOD - [2012/08/12 01:53:18 | 002,049,056 | ---- | M] () -- c:\ProgramData\Browser Manager\2.2.565.25\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll
MOD - [2012/07/31 13:12:28 | 001,900,544 | ---- | M] () -- C:\Users\Lukasz\AppData\Local\GG\Application\xulrunner\mozjs.dll
MOD - [2009/02/03 02:33:56 | 000,460,199 | ---- | M] () -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
MOD - [2008/07/30 04:29:26 | 000,200,704 | ---- | M] () -- C:\Windows\PLFSetI.exe
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2009/08/06 06:30:58 | 000,844,320 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe -- (ePowerSvc)
SRV:[b]64bit:[/b] - [2009/07/14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009/07/04 03:47:12 | 000,240,160 | ---- | M] (Acer) [Auto | Running] -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe -- (Updater Service)
SRV:[b]64bit:[/b] - [2009/07/02 23:16:06 | 000,203,264 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:[b]64bit:[/b] - [2009/03/28 04:10:16 | 000,016,896 | ---- | M] (LSI Corporation) [Auto | Running] -- C:\Program Files\LSI SoftModem\agr64svc.exe -- (AgereModemAudio)
SRV - [2012/09/03 21:07:57 | 000,927,840 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\12.2.0\ToolbarUpdater.exe -- (vToolbarUpdater12.2.0)
SRV - [2012/08/30 22:07:15 | 004,537,664 | ---- | M] () [Auto | Running] -- c:\program files (x86)\common files\akamai/netsession_win_5891ae0.dll -- (Akamai)
SRV - [2012/08/29 03:19:13 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/08/15 20:54:24 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/08/13 13:33:30 | 003,064,000 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2012/08/12 01:53:18 | 001,697,312 | ---- | M] () [Auto | Running] -- C:\ProgramData\Browser Manager\2.2.565.25\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe -- (Browser Manager)
SRV - [2012/05/25 00:19:27 | 000,111,664 | ---- | M] (TMRG,  Inc.) [Auto | Running] -- C:\Program Files (x86)\RelevantKnowledge\rlservice.exe -- (RelevantKnowledge)
SRV - [2012/02/29 08:50:48 | 000,158,856 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2011/06/08 13:02:00 | 000,633,856 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2011/05/23 22:55:00 | 004,338,360 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc)
SRV - [2010/03/18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/01/25 09:22:56 | 000,245,760 | ---- | M] (Brother Industries, Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Browny02\BrYNSvc.exe -- (BrYNSvc)
SRV - [2009/08/21 02:25:50 | 000,062,720 | ---- | M] (NewTech Infosystems, Inc.) [Auto | Running] -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe -- (NTI IScheduleSvc)
SRV - [2009/08/07 11:18:54 | 000,311,592 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe -- (MWLService)
SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009/06/05 04:03:06 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON)
SRV - [2009/06/04 15:04:50 | 001,150,496 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files (x86)\Acer\Registration\GregHSRW.exe -- (Greg_Service)
SRV - [2007/06/05 13:20:32 | 000,177,704 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PSIService.exe -- (ProtexisLicensing)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2012/09/03 21:07:59 | 000,031,080 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp)
DRV:[b]64bit:[/b] - [2011/05/24 00:24:22 | 002,750,464 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:[b]64bit:[/b] - [2011/05/18 10:14:22 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt)
DRV:[b]64bit:[/b] - [2011/05/18 10:14:20 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
DRV:[b]64bit:[/b] - [2011/05/18 10:14:16 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc)
DRV:[b]64bit:[/b] - [2011/05/18 10:14:12 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)
DRV:[b]64bit:[/b] - [2011/05/09 20:42:16 | 000,425,000 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a)
DRV:[b]64bit:[/b] - [2011/03/11 08:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2011/03/11 08:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2011/01/19 20:35:20 | 000,123,520 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ZTEusbser6k.sys -- (ZTEusbser6k)
DRV:[b]64bit:[/b] - [2011/01/19 20:35:20 | 000,123,520 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ZTEusbnmea.sys -- (ZTEusbnmea)
DRV:[b]64bit:[/b] - [2011/01/19 20:35:20 | 000,123,520 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ZTEusbmdm6k.sys -- (ZTEusbmdm6k)
DRV:[b]64bit:[/b] - [2011/01/19 20:35:20 | 000,011,776 | ---- | M] (MBB Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\massfilter.sys -- (massfilter)
DRV:[b]64bit:[/b] - [2010/02/21 22:45:01 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:[b]64bit:[/b] - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009/07/14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2009/07/14 03:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009/07/14 02:06:32 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:[b]64bit:[/b] - [2009/07/02 23:51:30 | 006,036,480 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:[b]64bit:[/b] - [2009/06/20 04:09:57 | 000,054,272 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\L1E62x64.sys -- (L1E)
DRV:[b]64bit:[/b] - [2009/06/10 22:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2009/06/10 22:34:38 | 001,311,232 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX)
DRV:[b]64bit:[/b] - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009/06/05 03:54:36 | 000,408,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:[b]64bit:[/b] - [2009/06/05 02:46:50 | 000,216,064 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV:[b]64bit:[/b] - [2009/06/03 05:15:30 | 000,060,464 | ---- | M] (Egis Technology Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDVDisk.sys -- (mwlPSDVDisk)
DRV:[b]64bit:[/b] - [2009/06/03 05:15:30 | 000,022,576 | ---- | M] (Egis Technology Inc.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDFilter.sys -- (mwlPSDFilter)
DRV:[b]64bit:[/b] - [2009/06/03 05:15:30 | 000,020,016 | ---- | M] (Egis Technology Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\mwlPSDNserv.sys -- (mwlPSDNServ)
DRV:[b]64bit:[/b] - [2009/05/25 05:57:42 | 000,243,760 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService)
DRV:[b]64bit:[/b] - [2009/05/06 02:46:08 | 000,018,432 | ---- | M] (NewTech Infosystems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NTIDrvr.sys -- (NTIDrvr)
DRV:[b]64bit:[/b] - [2009/05/06 02:46:08 | 000,016,896 | ---- | M] (NewTech Infosystems Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\UBHelper.sys -- (UBHelper)
DRV:[b]64bit:[/b] - [2008/08/28 12:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
DRV:[b]64bit:[/b] - [2000/01/01 02:00:00 | 001,208,320 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem)
DRV - [2009/07/14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2005/01/04 11:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&m=aspire_5738&r=273601109226l0338z1l5t57l1w207
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.funmoods.com/?f=1&a=iron2&chnl=iron2&cd=2XzutAtN2Y1L1QzutD0CyCtDyByCyEyDzzyCyC0EyCyEzzzztN0D0TzutBtDtCtBtDzztCtB&cr=566203783
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=iron2&chnl=iron2&cd=2XzutAtN2Y1L1QzutD0CyCtDyByCyEyDzzyCyC0EyCyEzzzztN0D0TzutBtDtCtBtDzztCtB&cr=566203783
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&m=aspire_5738&r=273601109226l0338z1l5t57l1w207
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\..\SearchScopes,Backup.Old.DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{51DAC700-57DC-E621-D1C7-14C0BEF7FBED}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=iron2&chnl=iron2&cd=2XzutAtN2Y1L1QzutD0CyCtDyByCyEyDzzyCyC0EyCyEzzzztN0D0TzutBtDtCtBtDzztCtB&cr=566203783
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
 
 
 
IE - HKU\S-1-5-21-3465942286-244485477-3424122466-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Backup.Old.Start Page = http://www.google.com
IE - HKU\S-1-5-21-3465942286-244485477-3424122466-1000\SOFTWARE\Microsoft\Internet Explorer\Main,BrowserMngr Start Page = http://www.google.com
IE - HKU\S-1-5-21-3465942286-244485477-3424122466-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0415&m=aspire_5738&r=273601109226l0338z1l5t57l1w207
IE - HKU\S-1-5-21-3465942286-244485477-3424122466-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes]
IE - HKU\S-1-5-21-3465942286-244485477-3424122466-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://isearch.avg.com/?cid={56FC60CA-57AC-41D2-8310-2810FFC3B2E9}&mid=dd9f7ea8280947d09105d1565029770b-49ad0b34975539c5735f182b80706802a17d1454&lang=en&ds=ts024&pr=sa&d=2012-09-03 21:08:01&v=12.2.0.5&sap=hp
IE - HKU\S-1-5-21-3465942286-244485477-3424122466-1000\..\SearchScopes,Backup.Old.DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-3465942286-244485477-3424122466-1000\..\SearchScopes,BrowserMngrDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-3465942286-244485477-3424122466-1000\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}
IE - HKU\S-1-5-21-3465942286-244485477-3424122466-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-3465942286-244485477-3424122466-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=113679&tt=090812_ppc_3212_8&babsrc=SP_ss&mntrId=a43664880000000000000c607645866e
IE - HKU\S-1-5-21-3465942286-244485477-3424122466-1000\..\SearchScopes\{51DAC700-57DC-E621-D1C7-14C0BEF7FBED}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=113679&tt=090812_ppc_3212_8&babsrc=SP_ss&mntrId=a43664880000000000000c607645866e
IE - HKU\S-1-5-21-3465942286-244485477-3424122466-1000\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_plPL379
IE - HKU\S-1-5-21-3465942286-244485477-3424122466-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKU\S-1-5-21-3465942286-244485477-3424122466-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = https://isearch.avg.com/search?cid={56FC60CA-57AC-41D2-8310-2810FFC3B2E9}&mid=dd9f7ea8280947d09105d1565029770b-49ad0b34975539c5735f182b80706802a17d1454&lang=en&ds=ts024&pr=sa&d=2012-09-03 21:08:01&v=12.2.0.5&sap=dsp&q={searchTerms}
IE - HKU\S-1-5-21-3465942286-244485477-3424122466-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3465942286-244485477-3424122466-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - user.js - File not found
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_271.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_271.dll ()
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\12.2.0\\npsitesafety.dll ()
FF - HKLM\Software\MozillaPlugins\@ganymede/GanymedeNetPlugin,version=1.0: C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll ( )
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.50917.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.3088: C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.11.3006: C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3C5F0F00-683D-4847-89C8-E7AF64FD1CFB}: C:\Program Files (x86)\RelevantKnowledge [2012/09/03 22:32:22 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\12.2.0.5\ [2012/09/03 21:08:11 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/08/29 03:19:15 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012/08/12 16:26:06 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}: C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [2011/09/30 13:52:52 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{b64982b1-d112-42b5-b1e4-d3867c4533f8}: C:\ProgramData\Browser Manager\2.2.565.25\{16cdff19-861d-48e3-a751-d99a27784753}\FirefoxExtension [2012/08/12 01:53:18 | 000,000,000 | ---D | M]
 
[2010/03/04 00:03:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Lukasz\AppData\Roaming\mozilla\Extensions
[2012/08/30 03:15:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Lukasz\AppData\Roaming\mozilla\Firefox\Profiles\y60h8dyb.default\extensions
[2012/08/22 02:15:16 | 000,000,000 | ---D | M] (digitalchocolate Community Toolbar) -- C:\Users\Lukasz\AppData\Roaming\mozilla\Firefox\Profiles\y60h8dyb.default\extensions\{60c4696a-e4eb-4d2d-9060-38928dd0b6a2}
[2010/07/04 22:53:51 | 000,000,000 | ---D | M] (Tamper Data) -- C:\Users\Lukasz\AppData\Roaming\mozilla\Firefox\Profiles\y60h8dyb.default\extensions\{9c51bd27-6ed8-4000-a2bf-36cb95c0c947}
[2012/08/30 03:15:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Lukasz\AppData\Roaming\mozilla\Firefox\Profiles\y60h8dyb.default\extensions\trash
[2012/08/12 16:45:49 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2012/08/29 03:17:12 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012/08/29 03:19:15 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012/04/21 22:03:34 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2010/11/24 12:12:30 | 000,120,296 | ---- | M] ( ) -- C:\Program Files (x86)\mozilla firefox\plugins\npganymedenet.dll
[2010/02/15 11:59:26 | 000,685,552 | ---- | M] (Ganymede Technologies) -- C:\Program Files (x86)\mozilla firefox\plugins\NPMAKAOV2.dll
[2010/08/20 11:07:50 | 000,497,136 | ---- | M] (Ganymede Technologies) -- C:\Program Files (x86)\mozilla firefox\plugins\NPSUDOKU.dll
[2012/06/28 17:42:00 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll
[2012/07/14 03:22:43 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml
[2012/09/03 21:07:52 | 000,003,751 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
[2012/07/14 03:22:43 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml
[2012/07/14 03:22:43 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml
[2012/07/14 03:22:43 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml
[2012/07/14 03:22:43 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012/07/14 03:22:43 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2012/09/03 18:12:30 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1       localhost
O2:[b]64bit:[/b] - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\12.2.0.5\AVG Secure Search_toolbar.dll ()
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\12.2.0.5\AVG Secure Search_toolbar.dll ()
O3 - HKLM\..\Toolbar: (no name) - {D0F4A166-B8D4-48b8-9D63-80849FE137CB} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-3465942286-244485477-3424122466-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O4:[b]64bit:[/b] - HKLM..\Run: [Acer ePower Management] C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Acer Incorporated)
O4:[b]64bit:[/b] - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [PLFSetI] C:\Windows\PLFSetI.exe ()
O4 - HKLM..\Run: [ArcadeDeluxeAgent] C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe (CyberLink Corp.)
O4 - HKLM..\Run: [BackupManagerTray] C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe (NewTech Infosystems, Inc.)
O4 - HKLM..\Run: [EgisTecLiveUpdate] C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe (Egis Technology Inc.)
O4 - HKLM..\Run: [iPlusManager] C:\Program Files (x86)\iPlus\iPlusChecker.exe ()
O4 - HKLM..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Windows\SysWOW64\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NokiaMServer] C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe (Nokia)
O4 - HKLM..\Run: [PlayMovie] C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe (Acer Corp.)
O4 - HKLM..\Run: [ROC_roc_ssl_v12] C:\Program Files (x86)\AVG Secure Search\ROC_roc_ssl_v12.exe ()
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe ()
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3465942286-244485477-3424122466-1000..\Run: []  File not found
O4 - HKU\S-1-5-21-3465942286-244485477-3424122466-1000..\Run: [Akamai NetSession Interface] C:\Users\Lukasz\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
O4 - HKU\S-1-5-21-3465942286-244485477-3424122466-1000..\Run: [ShowBatteryBar] C:\Program Files\BatteryBar\ShowBatteryBar.exe ()
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\S-1-5-21-3465942286-244485477-3424122466-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:[b]64bit:[/b] - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O9:[b]64bit:[/b] - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.204.159.1 194.204.152.34
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{172E60CE-EC91-4695-AEFF-0EB181E58D5B}: DhcpNameServer = 194.204.159.1 194.204.152.34
O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ms-itss - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
O18:[b]64bit:[/b] - Protocol\Handler\viprotocol - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\12.2.0\ViProtocol.dll ()
O18:[b]64bit:[/b] - Protocol\Filter\text/xml - No CLSID value found
O20 - AppInit_DLLs: (c:\progra~3\browse~1\22565~1.25\{16cdf~1\browse~1.dll) - c:\ProgramData\Browser Manager\2.2.565.25\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll ()
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{0a4988a6-1483-11e1-b70a-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{0a4988a6-1483-11e1-b70a-806e6f6e6963}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{4513e1d8-e48a-11e1-a4e1-001f16cd9ef8}\Shell - "" = AutoRun
O33 - MountPoints2\{4513e1d8-e48a-11e1-a4e1-001f16cd9ef8}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{c33b7f9f-e8a9-11e0-b235-001f16cd9ef8}\Shell - "" = AutoRun
O33 - MountPoints2\{c33b7f9f-e8a9-11e0-b235-001f16cd9ef8}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (aswBoot.exe /A:"*" /L:"Polish" /KBD:2)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012/09/03 22:32:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge
[2012/09/03 22:30:34 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM
[2012/09/03 22:27:34 | 002,605,400 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll
[2012/09/03 22:27:34 | 001,361,336 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\tosade.dll
[2012/09/03 22:27:34 | 000,836,544 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\tadefxapo264.dll
[2012/09/03 22:27:34 | 000,148,416 | ---- | C] (TOSHIBA Corporation) -- C:\Windows\SysNative\tadefxapo.dll
[2012/09/03 22:27:34 | 000,065,944 | ---- | C] (TOSHIBA CORPORATION.) -- C:\Windows\SysNative\tepeqapo64.dll
[2012/09/03 22:27:33 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
[2012/09/03 22:27:33 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
[2012/09/03 22:27:33 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
[2012/09/03 22:27:33 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
[2012/09/03 22:27:29 | 000,220,776 | ---- | C] (Sony Corporation) -- C:\Windows\SysNative\SFSS_APO.dll
[2012/09/03 22:27:28 | 002,674,320 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll
[2012/09/03 22:27:28 | 001,560,168 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl
[2012/09/03 22:27:28 | 000,221,024 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFNHK64.dll
[2012/09/03 22:27:28 | 000,081,248 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFCOM64.dll
[2012/09/03 22:27:28 | 000,078,688 | ---- | C] (Synopsys, Inc.) -- C:\Windows\SysNative\SFAPO64.dll
[2012/09/03 22:27:28 | 000,074,064 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysWow64\SFCOM.dll
[2012/09/03 22:27:27 | 000,331,880 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll
[2012/09/03 22:27:26 | 000,149,608 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll
[2012/09/03 22:27:26 | 000,014,952 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCoLDR64.dll
[2012/09/03 22:27:25 | 003,615,888 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll
[2012/09/03 22:27:25 | 000,869,520 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll
[2012/09/03 22:27:25 | 000,375,128 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
[2012/09/03 22:27:25 | 000,101,208 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
[2012/09/03 22:27:24 | 001,262,696 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll
[2012/09/03 22:27:24 | 000,204,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
[2012/09/03 22:27:24 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
[2012/09/03 22:27:23 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
[2012/09/03 22:27:22 | 005,096,448 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoRes64.dat
[2012/09/03 22:27:22 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
[2012/09/03 22:27:22 | 000,105,616 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInstII64.dll
[2012/09/03 22:27:17 | 007,163,744 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEP64A.dll
[2012/09/03 22:27:17 | 000,141,152 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEL64A.dll
[2012/09/03 22:27:17 | 000,074,592 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEG64A.dll
[2012/09/03 22:27:16 | 000,433,504 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EED64A.dll
[2012/09/03 22:27:16 | 000,123,744 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEA64A.dll
[2012/09/03 22:27:15 | 001,345,368 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek264.dll
[2012/09/03 22:27:15 | 000,396,632 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVolumeSDAPO.dll
[2012/09/03 22:27:14 | 008,363,864 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek.dll
[2012/09/03 22:27:14 | 002,131,288 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll
[2012/09/03 22:27:14 | 001,015,640 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPOShell64.dll
[2012/09/03 22:27:13 | 000,603,984 | ---- | C] (Knowles Acoustics ) -- C:\Windows\SysNative\KAAPORT64.dll
[2012/09/03 22:27:13 | 000,341,336 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO30.dll
[2012/09/03 22:27:13 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
[2012/09/03 22:27:04 | 002,533,952 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
[2012/09/03 22:27:03 | 000,693,352 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll
[2012/09/03 22:27:03 | 000,537,456 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PLFX64.dll
[2012/09/03 22:27:03 | 000,449,392 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PREC64.dll
[2012/09/03 22:27:02 | 001,756,264 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll
[2012/09/03 22:27:02 | 001,568,360 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll
[2012/09/03 22:27:02 | 000,712,296 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSSymmetryDLL64.dll
[2012/09/03 22:27:02 | 000,524,656 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSU2PGFX64.dll
[2012/09/03 22:27:02 | 000,491,112 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll
[2012/09/03 22:27:02 | 000,432,744 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll
[2012/09/03 22:27:02 | 000,242,792 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll
[2012/09/03 22:27:02 | 000,242,792 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll
[2012/09/03 22:27:02 | 000,241,768 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPONS64.dll
[2012/09/03 22:27:01 | 001,486,952 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll
[2012/09/03 22:27:01 | 000,728,680 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll
[2012/09/03 22:27:01 | 000,428,648 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll
[2012/09/03 22:27:00 | 000,202,336 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll
[2012/09/03 22:27:00 | 000,108,640 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll
[2012/09/03 21:24:34 | 000,064,000 | ---- | C] (LSI Corporation) -- C:\Windows\SysWow64\agrsmdel.exe
[2012/09/03 21:24:34 | 000,014,848 | ---- | C] (LSI Corporation) -- C:\Windows\SysWow64\agrsco64.dll
[2012/09/03 21:24:19 | 000,000,000 | ---D | C] -- C:\Windows\Options
[2012/09/03 21:24:01 | 001,208,320 | ---- | C] (LSI Corporation) -- C:\Windows\SysNative\drivers\agrsm64.sys
[2012/09/03 21:24:01 | 000,064,000 | ---- | C] (LSI Corporation) -- C:\Windows\agrsmdel.exe
[2012/09/03 21:24:01 | 000,042,496 | ---- | C] (LSI Corporation) -- C:\Windows\agrdel64.exe
[2012/09/03 21:20:30 | 002,750,464 | ---- | C] (Atheros Communications, Inc.) -- C:\Windows\SysNative\drivers\athrx.sys
[2012/09/03 21:20:30 | 000,443,040 | ---- | C] (Atheros) -- C:\Windows\SysNative\athihvs.dll
[2012/09/03 21:20:30 | 000,063,648 | ---- | C] (Atheros) -- C:\Windows\SysNative\athihvui.dll
[2012/09/03 21:20:30 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\nn-NO
[2012/09/03 21:20:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Atheros
[2012/09/03 21:19:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Atheros
[2012/09/03 21:13:22 | 000,000,000 | ---D | C] -- C:\Program Files\Broadcom
[2012/09/03 21:08:15 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\AppData\Local\AVG Secure Search
[2012/09/03 21:08:11 | 000,000,000 | ---D | C] -- C:\ProgramData\AVG Secure Search
[2012/09/03 21:07:59 | 000,031,080 | ---- | C] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys
[2012/09/03 21:07:54 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\AppData\Local\SlimWare Utilities Inc
[2012/09/03 21:07:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AVG Secure Search
[2012/09/03 21:07:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG Secure Search
[2012/09/03 21:06:56 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2012/09/03 21:06:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimDrivers
[2012/09/03 21:06:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SlimDrivers
[2012/09/03 21:06:43 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Downloaded Installers
[2012/09/03 21:05:16 | 000,608,128 | ---- | C] (SlimWare Utilities, Inc.) -- C:\Users\Lukasz\Desktop\slimdrivers-setup.exe
[2012/09/03 19:50:43 | 000,016,896 | ---- | C] (ASUS) -- C:\Windows\AsTaskSched.dll
[2012/09/03 19:49:24 | 000,414,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\difxapi.dll
[2012/09/03 19:49:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VIA
[2012/09/03 19:33:22 | 102,937,140 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Users\Lukasz\Desktop\Vista_Win7_Win8_R270(dobreprogramy.pl).exe
[2012/09/03 19:24:08 | 001,706,640 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll
[2012/09/03 18:44:59 | 056,324,562 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Users\Lukasz\Desktop\64bit_Vista_Win7_Win8_R270.exe
[2012/09/03 18:27:54 | 000,599,040 | ---- | C] (OldTimer Tools) -- C:\Users\Lukasz\Desktop\OTL.exe
[2012/09/03 18:02:50 | 018,734,784 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Users\Lukasz\Desktop\WDM_A406_(programs.pl).exe
[2012/09/03 17:42:23 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2012/09/03 17:41:16 | 003,927,560 | ---- | C] (Piriform Ltd) -- C:\Users\Lukasz\Desktop\ccsetup322.exe
[2012/08/31 00:55:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite
[2012/08/31 00:55:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs
[2012/08/31 00:55:03 | 000,044,088 | ---- | C] (NCH Software) -- C:\Windows\SysNative\drivers\stdriver64.sys
[2012/08/31 00:55:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NCH Swift Sound
[2012/08/31 00:54:50 | 000,553,672 | ---- | C] (NCH Software) -- C:\Users\Lukasz\Desktop\stsetup.exe
[2012/08/31 00:31:27 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\AppData\Roaming\EZ Audio Recorder Build-in Simple Audio Editor
[2012/08/31 00:25:39 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\AppData\Roaming\EZ Audio Recorder
[2012/08/30 20:36:55 | 000,000,000 | ---D | C] -- C:\ProgramData\NCH Software
[2012/08/30 20:36:50 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\AppData\Roaming\NCH Software
[2012/08/28 03:54:12 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\Desktop\rozmowy z ts
[2012/08/24 05:15:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2012/08/23 15:06:29 | 000,000,000 | ---D | C] -- C:\ProgramData\GG
[2012/08/16 19:25:15 | 001,654,869 | ---- | C] (Dynu Systems Inc.) -- C:\ProgramData\DynuEncrypt.dll
[2012/08/16 18:29:34 | 000,000,000 | ---D | C] -- C:\Allm
[2012/08/16 16:31:56 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Joymax
[2012/08/16 16:11:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Silkroad
[2012/08/16 03:01:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NCH Software
[2012/08/16 03:01:22 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\AppData\Roaming\NCH Swift Sound
[2012/08/16 02:47:49 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\AppData\Roaming\Sonarca Sound Recorder Free
[2012/08/16 02:32:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RelevantKnowledge
[2012/08/16 02:32:56 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\Documents\Free Sound Recorder
[2012/08/16 02:32:56 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\AppData\Roaming\Free Sound Recorder
[2012/08/16 02:32:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Sound Recorder
[2012/08/16 02:32:03 | 001,986,560 | ---- | C] (NCT Company Ltd.) -- C:\Windows\SysWow64\NCTAudioFile2.dll
[2012/08/16 02:32:03 | 001,212,416 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTAudioInformation2.dll
[2012/08/16 02:32:03 | 000,880,640 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTAudioEditor2.dll
[2012/08/16 02:32:03 | 000,835,584 | ---- | C] (NCT) -- C:\Windows\SysWow64\NCTAudioCDGrabber2.dll
[2012/08/16 02:32:03 | 000,602,112 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTAudioTransform2.dll
[2012/08/16 02:32:03 | 000,479,232 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTAudioVisualization2.dll
[2012/08/16 02:32:03 | 000,458,752 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTAudioRecord2.dll
[2012/08/16 02:32:03 | 000,458,752 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTAudioPlayer2.dll
[2012/08/16 02:32:03 | 000,417,792 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTTextToAudio2.dll
[2012/08/16 02:32:03 | 000,348,160 | ---- | C] (NCT Company Ltd.) -- C:\Windows\SysWow64\NCTWMAFile2.dll
[2012/08/16 02:31:00 | 000,000,000 | ---D | C] -- C:\Program Files\BatteryBar
[2012/08/15 23:25:18 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\AppData\Roaming\AVS4YOU
[2012/08/15 23:24:59 | 000,000,000 | ---D | C] -- C:\ProgramData\AVS4YOU
[2012/08/15 23:23:59 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msxml3a.dll
[2012/08/15 23:23:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\AVSMedia
[2012/08/15 05:51:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Nexon
[2012/08/15 05:16:38 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\Documents\Vindictus EU
[2012/08/15 05:14:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexon
[2012/08/15 05:14:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BandiMPEG1
[2012/08/15 04:56:12 | 000,000,000 | ---D | C] -- C:\ProgramData\NexonEU
[2012/08/15 00:17:16 | 000,446,464 | ---- | C] (NEXON Inc.) -- C:\Windows\NEXON_EU_DownloaderUpdater.exe
[2012/08/14 18:26:12 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\AppData\Roaming\iPlus
[2012/08/14 18:25:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iPlus
[2012/08/14 18:25:10 | 000,123,520 | ---- | C] (ZTE Incorporated) -- C:\Windows\SysNative\drivers\ZTEusbser6k.sys
[2012/08/14 18:25:10 | 000,123,520 | ---- | C] (ZTE Incorporated) -- C:\Windows\SysNative\drivers\ZTEusbnmea.sys
[2012/08/14 18:25:10 | 000,123,520 | ---- | C] (ZTE Incorporated) -- C:\Windows\SysNative\drivers\ZTEusbmdm6k.sys
[2012/08/14 18:25:10 | 000,011,776 | ---- | C] (MBB Incorporated) -- C:\Windows\SysNative\drivers\massfilter.sys
[2012/08/14 18:25:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iPlus
[2012/08/13 03:15:13 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\AppData\Roaming\Tibia
[2012/08/13 03:01:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tibia
[2012/08/12 19:13:32 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps
[2012/08/12 05:23:18 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\searchplugins
[2012/08/12 05:23:18 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Extensions
[2012/08/12 04:12:39 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\AppData\Roaming\GG
[2012/08/12 04:12:38 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\AppData\Local\GG
[2012/08/12 04:00:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
[2012/08/12 04:00:28 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Detektor Winampa
[2012/08/12 04:00:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Winamp Detect
[2012/08/12 04:00:03 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\AppData\Roaming\Winamp
[2012/08/12 02:56:54 | 000,012,872 | ---- | C] (SurfRight B.V.) -- C:\Windows\SysNative\bootdelete.exe
[2012/08/12 02:49:40 | 000,000,000 | ---D | C] -- C:\Program Files\HitmanPro
[2012/08/12 02:47:41 | 000,000,000 | ---D | C] -- C:\ProgramData\HitmanPro
[2012/08/12 02:16:10 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\AppData\Roaming\Dropbox
[2012/08/12 01:53:21 | 000,000,000 | ---D | C] -- C:\Users\Lukasz\Start Menu
[2012/08/12 01:53:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Browser Manager
[2012/08/12 01:52:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
[2012/08/12 01:52:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TeamSpeak 3 Client
[2012/08/11 23:31:26 | 000,000,000 | ---D | C] -- C:\ProgramData\wzjrlnfogqqcoob
[2009/08/22 10:44:20 | 000,036,136 | ---- | C] (Oberon Media) -- C:\ProgramData\FullRemove.exe
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012/09/03 23:03:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/09/03 22:42:00 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/09/03 22:37:05 | 000,017,600 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/09/03 22:37:05 | 000,017,600 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/09/03 22:32:01 | 000,000,412 | ---- | M] () -- C:\Windows\tasks\SlimDrivers Startup.job
[2012/09/03 22:29:35 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/09/03 22:29:19 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/09/03 22:29:16 | 2411,925,504 | -HS- | M] () -- C:\hiberfil.sys
[2012/09/03 22:17:08 | 000,466,400 | ---- | M] () -- C:\Users\Lukasz\Desktop\Realtek-High-Definition-Audio-Codecs(21164).exe
[2012/09/03 21:07:59 | 000,031,080 | ---- | M] (AVG Technologies) -- C:\Windows\SysNative\drivers\avgtpx64.sys
[2012/09/03 21:06:50 | 000,002,467 | ---- | M] () -- C:\Users\Public\Desktop\SlimDrivers.lnk
[2012/09/03 21:05:19 | 000,608,128 | ---- | M] (SlimWare Utilities, Inc.) -- C:\Users\Lukasz\Desktop\slimdrivers-setup.exe
[2012/09/03 19:59:12 | 102,937,140 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Users\Lukasz\Desktop\Vista_Win7_Win8_R270(dobreprogramy.pl).exe
[2012/09/03 19:53:45 | 031,125,683 | ---- | M] () -- C:\Users\Lukasz\Desktop\6303_Vista_Win7_PG537.zip
[2012/09/03 19:50:43 | 000,016,896 | ---- | M] (ASUS) -- C:\Windows\AsTaskSched.dll
[2012/09/03 19:47:41 | 000,001,769 | ---- | M] () -- C:\Windows\Language_trs.ini
[2012/09/03 19:46:53 | 103,072,485 | ---- | M] () -- C:\Users\Lukasz\Desktop\VIA_Audio_V6019500_XPVistaWin7.zip
[2012/09/03 19:34:56 | 003,256,656 | ---- | M] () -- C:\Users\Lukasz\Desktop\aida3942(dobreprogramy.pl).zip
[2012/09/03 19:33:16 | 000,466,400 | ---- | M] () -- C:\Users\Lukasz\Desktop\AIDA32-Enterprise-System-Information(11510).exe
[2012/09/03 19:18:45 | 056,324,562 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Users\Lukasz\Desktop\64bit_Vista_Win7_Win8_R270.exe
[2012/09/03 18:27:58 | 000,599,040 | ---- | M] (OldTimer Tools) -- C:\Users\Lukasz\Desktop\OTL.exe
[2012/09/03 18:12:30 | 000,000,098 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\Hosts
[2012/09/03 18:04:16 | 018,734,784 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Users\Lukasz\Desktop\WDM_A406_(programs.pl).exe
[2012/09/03 17:58:46 | 000,466,400 | ---- | M] () -- C:\Users\Lukasz\Desktop\OTL(19450).exe
[2012/09/03 17:48:55 | 000,434,144 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012/09/03 17:42:26 | 000,000,826 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012/09/03 17:41:30 | 003,927,560 | ---- | M] (Piriform Ltd) -- C:\Users\Lukasz\Desktop\ccsetup322.exe
[2012/09/03 17:40:47 | 000,466,400 | ---- | M] () -- C:\Users\Lukasz\Desktop\CCleaner(13061).exe
[2012/09/03 17:04:03 | 000,080,991 | ---- | M] () -- C:\Users\Lukasz\Desktop\GF.jpg
[2012/09/03 01:34:12 | 367,549,733 | ---- | M] () -- C:\Users\Lukasz\Desktop\ms10313_1500.mp4
[2012/09/02 23:33:35 | 380,935,042 | ---- | M] () -- C:\Users\Lukasz\Desktop\btas_nikki_rachel_480p_1000.mp4
[2012/09/01 19:18:34 | 000,000,116 | ---- | M] () -- C:\Windows\NeroDigital.ini
[2012/09/01 15:20:02 | 000,142,058 | ---- | M] () -- C:\Users\Lukasz\Desktop\ecac391c35a3a01484da2639634e3299.png
[2012/08/31 00:55:21 | 008,964,943 | ---- | M] () -- C:\Users\Lukasz\Desktop\Wondershare Streaming Audio Recorder v2.0.2.0.rar
[2012/08/31 00:55:03 | 000,044,088 | ---- | M] (NCH Software) -- C:\Windows\SysNative\drivers\stdriver64.sys
[2012/08/31 00:55:03 | 000,001,137 | ---- | M] () -- C:\Users\Public\Desktop\SoundTap Streaming Audio Recorder.lnk
[2012/08/31 00:54:56 | 000,553,672 | ---- | M] (NCH Software) -- C:\Users\Lukasz\Desktop\stsetup.exe
[2012/08/28 03:46:22 | 001,558,484 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012/08/28 03:46:22 | 000,701,362 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2012/08/28 03:46:22 | 000,619,146 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012/08/28 03:46:22 | 000,136,480 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2012/08/28 03:46:22 | 000,107,466 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012/08/28 03:31:00 | 001,440,066 | ---- | M] () -- C:\Users\Lukasz\Desktop\metin2client 2012-08-27 22-02-09-69.bmp
[2012/08/28 02:05:51 | 004,921,728 | ---- | M] () -- C:\Users\Lukasz\Desktop\IsAmUxPompa - Ajpii in the mix (2012).MP3
[2012/08/24 05:15:39 | 000,002,176 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2012/08/16 16:31:57 | 000,001,849 | ---- | M] () -- C:\Users\Lukasz\Desktop\Silkroad.lnk
[2012/08/15 23:54:52 | 000,012,872 | ---- | M] (SurfRight B.V.) -- C:\Windows\SysNative\bootdelete.exe
[2012/08/15 20:54:23 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012/08/15 20:54:23 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012/08/15 00:17:16 | 000,446,464 | ---- | M] (NEXON Inc.) -- C:\Windows\NEXON_EU_DownloaderUpdater.exe
[2012/08/15 00:17:16 | 000,000,235 | ---- | M] () -- C:\Windows\SysWow64\nxEuUninstall.bat
[2012/08/14 18:25:11 | 000,000,966 | ---- | M] () -- C:\Users\Public\Desktop\iPlus.lnk
[2012/08/12 19:13:32 | 000,000,566 | ---- | M] () -- C:\Users\Lukasz\Desktop\Fraps.lnk
[2012/08/12 16:45:55 | 000,001,094 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012/08/12 04:58:04 | 000,000,966 | ---- | M] () -- C:\Users\Public\Desktop\Metin2.lnk
[2012/08/12 04:49:03 | 000,264,232 | ---- | M] () -- C:\Users\Lukasz\Desktop\Metin2PL_ Pobijanie rekordów Archera na Serwandesie s16 LigaCienia.MP3.sfk
[2012/08/12 04:10:15 | 004,600,634 | ---- | M] () -- C:\Users\Lukasz\Desktop\Metin2PL_ Pobijanie rekordów Archera na Serwandesie s16 LigaCienia.MP3
[2012/08/12 04:00:28 | 000,000,943 | ---- | M] () -- C:\Users\Public\Desktop\Winamp.lnk
[2012/08/12 03:58:33 | 000,000,630 | ---- | M] () -- C:\user.js
[2012/08/12 02:49:41 | 000,001,939 | ---- | M] () -- C:\Users\Public\Desktop\HitmanPro.lnk
[2012/08/12 01:52:33 | 000,001,126 | ---- | M] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2012/08/11 23:31:26 | 000,000,051 | ---- | M] () -- C:\ProgramData\vdfyquhdeztdbdn
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012/09/03 22:27:23 | 000,293,889 | ---- | C] () -- C:\Windows\SysNative\drivers\RTAIODAT.DAT
[2012/09/03 21:08:02 | 000,000,412 | ---- | C] () -- C:\Windows\tasks\SlimDrivers Startup.job
[2012/09/03 21:06:50 | 000,002,467 | ---- | C] () -- C:\Users\Public\Desktop\SlimDrivers.lnk
[2012/09/03 19:51:58 | 031,125,683 | ---- | C] () -- C:\Users\Lukasz\Desktop\6303_Vista_Win7_PG537.zip
[2012/09/03 19:47:41 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
[2012/09/03 19:38:31 | 103,072,485 | ---- | C] () -- C:\Users\Lukasz\Desktop\VIA_Audio_V6019500_XPVistaWin7.zip
[2012/09/03 19:34:00 | 003,256,656 | ---- | C] () -- C:\Users\Lukasz\Desktop\aida3942(dobreprogramy.pl).zip
[2012/09/03 19:33:09 | 000,466,400 | ---- | C] () -- C:\Users\Lukasz\Desktop\AIDA32-Enterprise-System-Information(11510).exe
[2012/09/03 19:33:03 | 000,466,400 | ---- | C] () -- C:\Users\Lukasz\Desktop\Realtek-High-Definition-Audio-Codecs(21164).exe
[2012/09/03 17:58:45 | 000,466,400 | ---- | C] () -- C:\Users\Lukasz\Desktop\OTL(19450).exe
[2012/09/03 17:42:26 | 000,000,826 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012/09/03 17:40:46 | 000,466,400 | ---- | C] () -- C:\Users\Lukasz\Desktop\CCleaner(13061).exe
[2012/09/03 17:03:57 | 000,080,991 | ---- | C] () -- C:\Users\Lukasz\Desktop\GF.jpg
[2012/09/03 00:03:23 | 367,549,733 | ---- | C] () -- C:\Users\Lukasz\Desktop\ms10313_1500.mp4
[2012/09/02 22:31:15 | 380,935,042 | ---- | C] () -- C:\Users\Lukasz\Desktop\btas_nikki_rachel_480p_1000.mp4
[2012/09/01 15:19:44 | 000,142,058 | ---- | C] () -- C:\Users\Lukasz\Desktop\ecac391c35a3a01484da2639634e3299.png
[2012/08/31 00:55:03 | 000,001,149 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoundTap Streaming Audio Recorder.lnk
[2012/08/31 00:55:03 | 000,001,137 | ---- | C] () -- C:\Users\Public\Desktop\SoundTap Streaming Audio Recorder.lnk
[2012/08/31 00:52:53 | 008,964,943 | ---- | C] () -- C:\Users\Lukasz\Desktop\Wondershare Streaming Audio Recorder v2.0.2.0.rar
[2012/08/31 00:49:02 | 000,094,720 | ---- | C] () -- C:\Users\Lukasz\Desktop\Keygen.exe
[2012/08/28 03:30:41 | 001,440,066 | ---- | C] () -- C:\Users\Lukasz\Desktop\metin2client 2012-08-27 22-02-09-69.bmp
[2012/08/28 02:05:43 | 004,921,728 | ---- | C] () -- C:\Users\Lukasz\Desktop\IsAmUxPompa - Ajpii in the mix (2012).MP3
[2012/08/24 05:15:39 | 000,002,176 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2012/08/16 16:31:57 | 000,001,849 | ---- | C] () -- C:\Users\Lukasz\Desktop\Silkroad.lnk
[2012/08/15 00:17:16 | 000,000,235 | ---- | C] () -- C:\Windows\SysWow64\nxEuUninstall.bat
[2012/08/14 18:25:11 | 000,000,966 | ---- | C] () -- C:\Users\Public\Desktop\iPlus.lnk
[2012/08/12 19:13:32 | 000,000,566 | ---- | C] () -- C:\Users\Lukasz\Desktop\Fraps.lnk
[2012/08/12 04:58:04 | 000,000,966 | ---- | C] () -- C:\Users\Public\Desktop\Metin2.lnk
[2012/08/12 04:40:50 | 000,264,232 | ---- | C] () -- C:\Users\Lukasz\Desktop\Metin2PL_ Pobijanie rekordów Archera na Serwandesie s16 LigaCienia.MP3.sfk
[2012/08/12 04:12:38 | 000,001,159 | ---- | C] () -- C:\Users\Lukasz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk
[2012/08/12 04:09:05 | 004,600,634 | ---- | C] () -- C:\Users\Lukasz\Desktop\Metin2PL_ Pobijanie rekordów Archera na Serwandesie s16 LigaCienia.MP3
[2012/08/12 04:00:28 | 000,000,943 | ---- | C] () -- C:\Users\Public\Desktop\Winamp.lnk
[2012/08/12 02:49:41 | 000,001,939 | ---- | C] () -- C:\Users\Public\Desktop\HitmanPro.lnk
[2012/08/12 01:52:49 | 000,000,630 | ---- | C] () -- C:\user.js
[2012/08/12 01:52:33 | 000,001,126 | ---- | C] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2012/08/11 23:31:20 | 000,000,051 | ---- | C] () -- C:\ProgramData\vdfyquhdeztdbdn
[2012/04/17 01:17:34 | 000,001,444 | ---- | C] () -- C:\Users\Lukasz\.recently-used.xbel
[2011/12/18 22:01:45 | 000,000,404 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2011/10/01 03:31:34 | 001,575,678 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011/07/18 21:28:11 | 000,000,809 | ---- | C] () -- C:\Windows\NTIWVEDT.INI
[2011/05/31 08:39:50 | 000,058,368 | ---- | C] () -- C:\Windows\SysWow64\bdmpegv.dll
[2011/05/31 08:38:18 | 000,015,360 | ---- | C] () -- C:\Windows\SysWow64\bdmjpeg.dll
[2011/04/12 22:14:10 | 000,000,116 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2011/03/28 23:55:16 | 000,000,412 | ---- | C] () -- C:\Windows\ODBC.INI
[2010/04/07 21:30:15 | 000,000,866 | ---- | C] () -- C:\Users\Lukasz\AppData\Roaming\wklnhst.dat
[2010/03/15 19:18:30 | 000,009,728 | ---- | C] () -- C:\Users\Lukasz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010/10/10 18:22:24 | 000,000,000 | -HSD | M] -- C:\Users\Lukasz\AppData\Roaming\.#
[2010/05/05 01:38:12 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\AnvSoft
[2010/08/25 02:35:44 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Ashampoo
[2012/08/16 03:02:56 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\BatteryBar
[2011/06/15 22:59:00 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\BitCometLite
[2012/05/21 23:00:00 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Blender Foundation
[2011/01/26 20:54:46 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/11/19 03:42:14 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\com.w3i.FlipToast
[2012/04/27 02:50:55 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\DAEMON Tools Lite
[2010/01/10 19:21:35 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Datalayer
[2012/08/12 02:58:27 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Dropbox
[2012/08/03 19:39:56 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\dynArt
[2011/11/12 22:17:18 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\eKWEJK
[2012/08/31 00:27:14 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\EZ Audio Recorder
[2012/08/31 00:31:27 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\EZ Audio Recorder Build-in Simple Audio Editor
[2012/08/16 02:34:17 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Free Sound Recorder
[2010/03/04 01:00:27 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Gadu-Gadu 10
[2010/01/04 18:48:04 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\GameConsole
[2011/01/24 02:01:26 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\GanymedeNet
[2010/10/04 18:21:12 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Genie-Soft
[2010/10/04 18:20:41 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\GetRightToGo
[2012/09/03 23:32:26 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\GG
[2012/04/17 01:05:39 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\gtk-2.0
[2012/08/14 18:26:12 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\iPlus
[2010/06/30 21:43:34 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\ITTerritory
[2010/02/22 12:38:07 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Leadertech
[2012/08/16 03:01:22 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\NCH Swift Sound
[2010/03/22 01:21:54 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Nokia
[2010/03/14 03:38:05 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\OpenFM
[2011/07/13 22:57:51 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Opera
[2011/09/30 14:09:47 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\PC Suite
[2010/01/04 18:47:13 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\PowerCinema
[2010/09/14 21:02:52 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Publish Providers
[2012/08/03 17:50:02 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Rovio
[2010/01/04 18:47:26 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\SoftDMA
[2012/08/16 02:59:07 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Sonarca Sound Recorder Free
[2010/10/13 20:16:29 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Sony
[2010/08/25 02:27:07 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Sony Creative Software
[2010/04/07 21:30:19 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Template
[2012/08/13 03:17:36 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Tibia
[2012/08/12 01:54:11 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\TS3Client
[2010/12/05 16:15:57 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Uniblue
[2011/01/12 12:58:19 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Windows Live Writer
[2011/08/06 14:08:19 | 000,000,000 | ---D | M] -- C:\Users\Lukasz\AppData\Roaming\Youtube Downloader HD
[2012/05/11 03:59:52 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2012/09/03 22:32:01 | 000,000,412 | ---- | M] () -- C:\Windows\Tasks\SlimDrivers Startup.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 152 bytes -> C:\ProgramData\Temp:AB689DEA
@Alternate Data Stream - 144 bytes -> C:\ProgramData\Temp:4D066AD2
@Alternate Data Stream - 138 bytes -> C:\ProgramData\Temp:5D7E5A8F
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:93DE1838
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:E3C56885
@Alternate Data Stream - 129 bytes -> C:\ProgramData\Temp:1D32EC29
@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:E1F04E8D
@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:242231A9
@Alternate Data Stream - 122 bytes -> C:\ProgramData\Temp:ABE89FFE
@Alternate Data Stream - 122 bytes -> C:\ProgramData\Temp:05EE1EEF
@Alternate Data Stream - 121 bytes -> C:\ProgramData\Temp:0B9176C0
@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:4CF61E54
@Alternate Data Stream - 118 bytes -> C:\ProgramData\Temp:0B9D8E22

< End of report >