OTL logfile created on: 2010-12-19 23:01:33 - Run 4
OTL by OldTimer - Version 3.2.17.3     Folder = C:\Users\dracko\Downloads
64bit- Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
6,00 Gb Total Physical Memory | 4,00 Gb Available Physical Memory | 71,00% Memory free
12,00 Gb Paging File | 10,00 Gb Available in Paging File | 82,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 195,31 Gb Total Space | 47,73 Gb Free Space | 24,44% Space Free | Partition Type: NTFS
Drive D: | 97,65 Gb Total Space | 29,83 Gb Free Space | 30,54% Space Free | Partition Type: NTFS
Drive E: | 195,31 Gb Total Space | 24,45 Gb Free Space | 12,52% Space Free | Partition Type: NTFS
Drive F: | 100,85 Gb Total Space | 25,75 Gb Free Space | 25,53% Space Free | Partition Type: NTFS
Drive G: | 74,52 Gb Total Space | 41,17 Gb Free Space | 55,24% Space Free | Partition Type: NTFS
Drive H: | 97,63 Gb Total Space | 25,64 Gb Free Space | 26,27% Space Free | Partition Type: FAT32
Drive I: | 115,00 Gb Total Space | 16,95 Gb Free Space | 14,74% Space Free | Partition Type: FAT32
Drive J: | 200,43 Gb Total Space | 16,03 Gb Free Space | 8,00% Space Free | Partition Type: NTFS
Drive K: | 100,17 Gb Total Space | 15,46 Gb Free Space | 15,44% Space Free | Partition Type: NTFS
Drive L: | 97,07 Gb Total Space | 6,05 Gb Free Space | 6,23% Space Free | Partition Type: NTFS
Drive M: | 308,02 Gb Total Space | 60,77 Gb Free Space | 19,73% Space Free | Partition Type: NTFS
 
Computer Name: DRACKO-KOMPUTER | User Name: dracko | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2010-12-19 20:24:29 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\dracko\Downloads\OTL.exe
PRC - [2010-12-03 20:58:04 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2010-12-03 20:58:04 | 000,016,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
PRC - [2010-11-19 09:21:00 | 007,965,696 | ---- | M] (Creative Team S.A.) -- C:\Program Files (x86)\WapSter\WapSter AQQ\AQQ.exe
PRC - [2010-10-16 11:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2010-09-12 19:19:06 | 000,075,064 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2010-07-20 10:45:24 | 001,531,904 | ---- | M] (Nokia) -- C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe
PRC - [2010-01-27 15:14:10 | 000,286,720 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
PRC - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
PRC - [2009-10-23 22:57:04 | 001,200,128 | ---- | M] (ASUSTeK Inc.) -- C:\Program Files (x86)\ASUS\SmartDoctor\SmartDoctor.exe
PRC - [2009-07-30 18:10:04 | 000,380,928 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\GamerOSD\GamerOSD.exe
PRC - [2009-07-27 11:13:28 | 000,061,440 | ---- | M] () -- C:\Windows\SysWOW64\ASDR.exe
PRC - [2009-05-27 02:27:04 | 029,262,680 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\DAODB\MSSQL.1\MSSQL\Binn\sqlservr.exe
PRC - [2008-08-20 17:56:00 | 000,595,456 | ---- | M] () -- H:\WYSWIETLACZ LCD\PcLcdGZVer02.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2010-12-19 20:24:29 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\dracko\Downloads\OTL.exe
MOD - [2010-08-21 06:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - File not found [Auto | Running] -- C:\Windows\SysNative\PnkBstrA.exe -- (PnkBstrA)
SRV:[b]64bit:[/b] - File not found [On_Demand | Stopped] -- C:\Windows\SysNative\GameMon.des -- (npggsvc)
SRV:[b]64bit:[/b] - [2010-08-09 11:03:36 | 000,099,048 | ---- | M] (SANDBOXIE L.T.D) [Auto | Running] -- C:\Program Files\Sandboxie\SbieSvc.exe -- (SbieSvc)
SRV:[b]64bit:[/b] - [2010-06-11 10:49:57 | 000,405,584 | ---- | M] () [Auto | Running] -- C:\Program Files\ArcaBit\ArcaAgent\ArcaRemoteSvc.exe -- (ArcaRemoteService)
SRV:[b]64bit:[/b] - [2010-06-11 10:49:57 | 000,165,960 | ---- | M] (ArcaBit) [Auto | Running] -- C:\Program Files\ArcaBit\ArcaVir\ArcaMainSV.exe -- (ABMainSV)
SRV:[b]64bit:[/b] - [2010-05-24 21:37:49 | 000,185,424 | ---- | M] (ArcaBit) [Auto | Running] -- C:\Program Files\ArcaBit\ArcaUpdate\update.exe -- (AVUpdate)
SRV:[b]64bit:[/b] - [2010-04-28 10:13:52 | 000,141,392 | ---- | M] (ArcaBit) [Auto | Running] -- C:\Program Files\ArcaBit\Common\ArcaTasksService.exe -- (AVTasks2)
SRV:[b]64bit:[/b] - [2010-03-22 16:44:45 | 000,551,824 | ---- | M] (Protection Technology) [Auto | Stopped] -- C:\Windows\SysNative\appdrvrem01.exe -- (appdrvrem01)
SRV:[b]64bit:[/b] - [2010-02-05 16:36:22 | 000,312,912 | ---- | M] (ArcaBit) [On_Demand | Running] -- C:\Program Files\ArcaBit\Common\arcabit.core.configurator2.exe -- (ArcaBit.Core.Configurator)
SRV:[b]64bit:[/b] - [2009-09-11 15:01:48 | 000,375,376 | ---- | M] (ArcaBit) [On_Demand | Stopped] -- C:\Program Files\ArcaBit\Common\arcabit.core.loggingservice.exe -- (ArcaBit.Core.LoggingService)
SRV:[b]64bit:[/b] - [2009-09-11 14:54:58 | 000,243,792 | ---- | M] (ArcaBit) [Auto | Running] -- C:\Program Files\ArcaBit\ArcaTools\arcabackup\ArcaBackupService.exe -- (AVBackup)
SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:[b]64bit:[/b] - [2009-05-06 10:41:52 | 000,062,464 | ---- | M] (ASUSTeK COMPUTER INC.) [Auto | Running] -- C:\Windows\SysNative\ATKFUSService.exe -- (ATKFUSService)
SRV - [2010-12-09 12:20:00 | 003,020,888 | ---- | M] () [Auto | Running] -- c:\program files (x86)\common files\akamai\netsession_win_aeec0f0.dll -- (Akamai)
SRV - [2010-11-11 14:39:34 | 000,128,928 | ---- | M] (Futuremark Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe -- (Futuremark SystemInfo Service)
SRV - [2010-10-16 11:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2010-09-12 19:19:06 | 000,075,064 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2010-06-14 14:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2010-04-27 17:32:00 | 003,612,912 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWow64\GameMon.des -- (npggsvc)
SRV - [2010-04-10 14:19:30 | 000,332,720 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010-02-19 21:31:28 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service)
SRV - [2010-02-13 11:28:34 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
SRV - [2010-01-27 15:14:10 | 000,286,720 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)
SRV - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2009-12-15 21:07:16 | 000,025,832 | ---- | M] (BioWare) [On_Demand | Stopped] -- M:\gry\Dragon Age\bin_ship\daupdatersvc.service.exe -- (DAUpdaterSvc)
SRV - [2009-07-27 11:13:28 | 000,061,440 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\ASDR.exe -- (ASDR)
SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009-05-27 02:27:04 | 029,262,680 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\DAODB\MSSQL.1\MSSQL\Binn\sqlservr.exe -- (MSSQL$BWDATOOLSET) SQL Server (BWDATOOLSET)
SRV - [2007-05-31 09:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007-05-31 09:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\npptNT2.sys -- (NPPTNT2)
DRV:[b]64bit:[/b] - [2010-10-03 12:52:19 | 000,066,128 | ---- | M] (ArcaBit) [File_System | On_Demand | Running] -- C:\Program Files\ArcaBit\ArcaVir\abflt.sys -- (ABFLT)
DRV:[b]64bit:[/b] - [2010-08-09 11:03:32 | 000,143,464 | ---- | M] (SANDBOXIE L.T.D) [Kernel | On_Demand | Running] -- C:\Program Files\Sandboxie\SbieDrv.sys -- (SbieDrv)
DRV:[b]64bit:[/b] - [2010-03-22 16:44:45 | 002,667,120 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\appdrv01.sys -- (appdrv01) Application Driver (01)
DRV:[b]64bit:[/b] - [2010-02-26 13:33:40 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64j.sys -- (UsbserFilt)
DRV:[b]64bit:[/b] - [2010-02-26 13:33:24 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
DRV:[b]64bit:[/b] - [2010-02-26 13:33:22 | 000,025,088 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdcx64)
DRV:[b]64bit:[/b] - [2010-02-26 13:33:22 | 000,019,456 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcdx64)
DRV:[b]64bit:[/b] - [2010-02-22 12:30:36 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:[b]64bit:[/b] - [2010-02-13 11:05:05 | 000,016,384 | ---- | M] (ASUSTeK Computer Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\EIO64.sys -- (EIO64)
DRV:[b]64bit:[/b] - [2009-12-01 18:14:40 | 000,040,528 | ---- | M] (ArcaBit) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\abndis.sys -- (ABndisMP)
DRV:[b]64bit:[/b] - [2009-12-01 18:14:40 | 000,040,528 | ---- | M] (ArcaBit) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\abndis.sys -- (ABndis)
DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2009-07-14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-07-14 01:06:32 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:[b]64bit:[/b] - [2009-06-10 21:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:[b]64bit:[/b] - [2009-06-10 21:35:42 | 000,187,392 | ---- | M] (Realtek Corporation                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009-02-17 18:22:22 | 000,039,424 | ---- | M] (ASUSTeK Computer Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ATKDispLowFilter.sys -- (atkdisplf)
DRV:[b]64bit:[/b] - [2009-02-17 18:22:22 | 000,017,792 | ---- | M] (ASUSTeK Computer Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\asusgsb.sys -- (asusgsb)
DRV:[b]64bit:[/b] - [2008-08-28 11:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
DRV:[b]64bit:[/b] - [2008-08-14 14:48:34 | 000,024,064 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\skfiltv.sys -- (skfiltv)
DRV:[b]64bit:[/b] - [2008-02-26 14:45:52 | 000,094,728 | ---- | M] (ArcaBit) [Kernel | System | Running] -- C:\Program Files\ArcaBit\ArcaVir\ABTDI.sys -- (ABTDI)
DRV:[b]64bit:[/b] - [2007-12-13 09:22:48 | 001,491,712 | ---- | M] (ZSMC.Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ZS211.sys -- (ZSMC30x)
DRV:[b]64bit:[/b] - [2007-12-10 17:15:48 | 000,308,224 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vvftav211.sys -- (vvftav211)
DRV - [2009-04-06 09:08:04 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
FF - HKLM\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files (x86)\Nokia\Nokia PC Suite 7\bkmrksync\ [2010-09-06 15:02:19 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}: C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ [2010-09-06 18:25:41 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010-12-16 09:29:29 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010-12-16 09:29:27 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}: C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [2010-09-06 18:25:42 | 000,000,000 | ---D | M]
 
[2010-12-16 09:29:37 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\mozilla\Extensions
[2010-12-19 20:22:08 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\mozilla\Firefox\Profiles\9awdclcz.default\extensions
[2010-12-16 09:32:04 | 000,000,000 | ---D | M] (FlashGot) -- C:\Users\dracko\AppData\Roaming\mozilla\Firefox\Profiles\9awdclcz.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}
[2010-12-16 09:32:04 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\dracko\AppData\Roaming\mozilla\Firefox\Profiles\9awdclcz.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010-12-16 09:32:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\dracko\AppData\Roaming\mozilla\Firefox\Profiles\9awdclcz.default\extensions\{54BB9F3F-07E5-486c-9B39-C7398B99391C}
[2010-12-16 09:32:04 | 000,000,000 | ---D | M] (BitComet Video Downloader) -- C:\Users\dracko\AppData\Roaming\mozilla\Firefox\Profiles\9awdclcz.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}
[2010-12-16 09:32:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\dracko\AppData\Roaming\mozilla\Firefox\Profiles\9awdclcz.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}-trash
[2010-12-19 19:54:46 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\dracko\AppData\Roaming\mozilla\Firefox\Profiles\9awdclcz.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010-12-16 09:32:04 | 000,000,000 | ---D | M] (DownThemAll!) -- C:\Users\dracko\AppData\Roaming\mozilla\Firefox\Profiles\9awdclcz.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2010-12-16 09:32:04 | 000,000,000 | ---D | M] (OpenDownload) -- C:\Users\dracko\AppData\Roaming\mozilla\Firefox\Profiles\9awdclcz.default\extensions\{F0B6E3F9-ECD1-40b6-A25F-5C3FF68FB079}
[2010-12-16 09:32:04 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\mozilla\Firefox\Profiles\9awdclcz.default\extensions\pl@dictionaries.addons.mozilla.org
[2010-12-16 09:32:04 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\mozilla\Firefox\Profiles\9awdclcz.default\extensions\SkipScreen@SkipScreen
[2010-12-16 09:27:06 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\mozilla\Firefox\Profiles\ebnuzjiz.default\extensions
[2010-12-16 09:27:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\dracko\AppData\Roaming\mozilla\Firefox\Profiles\ebnuzjiz.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}
[2010-12-16 09:27:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\dracko\AppData\Roaming\mozilla\Firefox\Profiles\ebnuzjiz.default\extensions\{54BB9F3F-07E5-486c-9B39-C7398B99391C}
[2010-12-16 09:27:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\dracko\AppData\Roaming\mozilla\Firefox\Profiles\ebnuzjiz.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}
[2010-12-16 09:27:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\dracko\AppData\Roaming\mozilla\Firefox\Profiles\ebnuzjiz.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}-trash
[2010-12-16 09:29:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions
[2010-05-24 14:38:23 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010-03-05 16:38:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions\arcabit@www.arcabit.pl
[2010-02-21 11:22:32 | 000,712,704 | ---- | M] (BitComet) -- C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll
[2010-05-24 14:38:16 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2010-02-18 13:05:36 | 000,075,208 | ---- | M] (Foxit Software Company) -- C:\Program Files (x86)\mozilla firefox\plugins\npFoxitReaderPlugin.dll
[2010-12-03 18:54:54 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml
[2010-12-03 18:54:54 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml
[2010-12-03 18:54:54 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml
[2010-12-03 18:54:54 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml
[2010-12-03 18:54:54 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml
[2010-12-03 18:54:54 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2010-07-27 18:40:41 | 000,000,771 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: copyright (c) 1993-2009 microsoft corp.
O1 - Hosts: this is a sample hosts file used by microsoft tcp/ip for windows.
O1 - Hosts: this file contains the mappings of ip addresses to host names. each
O1 - Hosts: entry should be kept on an individual line. the ip address should
O1 - Hosts: be placed in the first column followed by the corresponding host name.
O1 - Hosts: the ip address and the host name should be separated by at least one
O1 - Hosts: space.
O1 - Hosts: additionally, comments (such as these) may be inserted on individual
O1 - Hosts: lines or following the machine name denoted by a '
O1 - Hosts: for example:
O1 - Hosts: 102.54.94.97 rhino.acme.com
O1 - Hosts: 38.25.63.10 x.acme.com
O1 - Hosts: localhost name resolution is handled within dns itself.
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 192.126.33.136 l2authd.lineage2.com
O1 - Hosts: 192.126.33.136 l2testauthd.lineage2.com
O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.4.6.22.dll (BitComet)
O2 - BHO: (CatcherBHO Class) - {9B4DF450-DCC7-4B07-935D-0CD757A64583} - C:\Program Files (x86)\Moyea\YouTube FLV Downloader\MoyeaCatcher.dll (Moyea Software Co., Ltd.)
O4:[b]64bit:[/b] - HKLM..\Run: [ABRegmon] C:\Program Files\ArcaBit\ArcaVir\abregmon.exe (ArcaBit)
O4:[b]64bit:[/b] - HKLM..\Run: [AvMenu] C:\Program Files\ArcaBit\ArcaVir\AVMenu.exe (ArcaBit)
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [ASUSGamerOSD] C:\Program Files (x86)\ASUS\GamerOSD\GamerOSD.exe (ASUSTeK Computer Inc.)
O4 - HKLM..\Run: [NokiaMServer] C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe (Nokia)
O4 - HKCU..\Run: [AlcoholAutomount] C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe (Alcohol Soft Development Team)
O4 - HKCU..\Run: [AQQ] C:\PROGRA~2\WapSter\WAPSTE~1\AQQ.exe (Creative Team S.A.)
O4 - Startup: C:\Users\dracko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PcLcdGZVer02.exe — skrót.lnk = H:\WYSWIETLACZ LCD\PcLcdGZVer02.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:[b]64bit:[/b] - Extra context menu item: Pobierz wszystkie wideo za pomocą BitComet - C:\Program Files (x86)\BitComet\BitComet.exe (www.BitComet.com)
O8:[b]64bit:[/b] - Extra context menu item: Pobierz wszystko za pomocą BitComet - C:\Program Files (x86)\BitComet\BitComet.exe (www.BitComet.com)
O8:[b]64bit:[/b] - Extra context menu item: Pobierz za pomocą BitComet - C:\Program Files (x86)\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Pobierz wszystkie wideo za pomocą BitComet - C:\Program Files (x86)\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - C:\Program Files (x86)\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: Pobierz za pomocą BitComet - C:\Program Files (x86)\BitComet\BitComet.exe (www.BitComet.com)
O9:[b]64bit:[/b] - Extra Button: ArcaVir >> - {40525A66-DB98-480D-BCF9-7AF88C1AF438} - C:\Program Files\ArcaBit\WebExtensions\ie\ArcaIEExt.dll (ArcaBit sp. z o.o)
O9:[b]64bit:[/b] - Extra 'Tools' menuitem : ArcaVir >> - {40525A66-DB98-480D-BCF9-7AF88C1AF438} - C:\Program Files\ArcaBit\WebExtensions\ie\ArcaIEExt.dll (ArcaBit sp. z o.o)
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.4.6.22.dll (BitComet)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {4D21BDFC-A621-4DE6-87DA-7C952D0ADF7E} http://www.galeriavictoria.pl/push04.cab (P00RecImageCtrl Class)
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} http://ax.emsisoft.com/asquared.cab (a-squared Scanner)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.3.1.0.cab (SysInfo Class)
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} http://download.mcafee.com/molbin/iss-loc/mcfscan/3,0,0,6148/mcfscan.cab (McFreeScan Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18:[b]64bit:[/b] - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-10-15 16:12:36 | 000,000,000 | ---- | M] () - G:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2010-12-19 20:24:39 | 000,000,000 | ---D | C] -- C:\_OTL
[2010-12-19 19:11:14 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2010-12-19 19:08:50 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2010-12-17 22:37:01 | 000,367,104 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2010-12-17 22:37:01 | 000,294,400 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2010-12-17 22:37:01 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2010-12-17 22:37:01 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2010-12-17 22:36:56 | 001,169,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskschd.dll
[2010-12-17 22:36:56 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmicmiplugin.dll
[2010-12-17 22:36:56 | 000,496,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskschd.dll
[2010-12-17 22:36:56 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskcomp.dll
[2010-12-17 22:36:56 | 000,464,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskeng.exe
[2010-12-17 22:36:56 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll
[2010-12-17 22:36:56 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schtasks.exe
[2010-12-17 22:36:56 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schtasks.exe
[2010-12-17 22:36:48 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll
[2010-12-17 22:36:48 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll
[2010-12-17 22:35:53 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2010-12-17 22:35:53 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2010-12-17 22:35:53 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2010-12-17 22:35:53 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2010-12-17 22:35:53 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2010-12-17 22:35:53 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2010-12-17 22:35:53 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2010-12-17 22:35:53 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2010-12-17 22:35:52 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2010-12-17 22:35:52 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2010-12-17 22:35:52 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2010-12-17 22:35:52 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2010-12-17 22:35:52 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2010-12-17 22:35:52 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2010-12-17 22:35:50 | 000,112,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe
[2010-12-13 12:03:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Trend Micro
[2010-12-11 12:33:43 | 000,000,000 | ---D | C] -- C:\Users\dracko\AppData\Local\IsolatedStorage
[2010-12-11 12:33:30 | 000,000,000 | ---D | C] -- C:\Users\dracko\AppData\Local\Futuremark_Corporation
[2010-12-11 12:24:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Futuremark Shared
[2010-12-09 12:31:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Lite
[2010-12-09 12:19:46 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2010-12-05 17:45:14 | 000,000,000 | ---D | C] -- C:\Program Files\KLCP64
[2010-12-05 17:34:20 | 000,630,784 | ---- | C] (On2.com) -- C:\Windows\SysWow64\vp7vfw.dll
[2010-12-05 17:34:20 | 000,039,936 | ---- | C] (Disappearing Inc.) -- C:\Windows\SysWow64\huffyuv.dll
[2010-12-05 17:25:00 | 000,000,000 | ---D | C] -- C:\Users\dracko\AppData\Roaming\Media Player Classic
[2010-12-05 17:24:07 | 000,839,680 | ---- | C] (http://www.mp3dev.org/) -- C:\Windows\SysWow64\lameACM.acm
[2010-12-05 17:24:07 | 000,217,088 | ---- | C] (www.helixcommunity.org) -- C:\Windows\SysWow64\yv12vfw.dll
[2010-12-05 17:24:07 | 000,151,552 | ---- | C] (fccHandler) -- C:\Windows\SysWow64\ac3acm.acm
[2010-12-05 17:24:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\K-Lite Codec Pack
[2010-12-02 21:39:02 | 000,000,000 | ---D | C] -- C:\Users\dracko\Documents\Harry Potter II
[2010-11-27 18:35:46 | 000,000,000 | ---D | C] -- C:\Users\dracko\Documents\Criterion Games
[2010-11-27 18:35:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts
[2010-11-27 18:35:05 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Core
[2010-11-26 10:11:03 | 001,242,552 | ---- | C] (NuMedia Soft, Inc.) -- C:\Windows\SysWow64\NMSDVDXU.dll
[2010-11-26 10:11:03 | 000,877,568 | ---- | C] (NCT Company Ltd.) -- C:\Windows\SysWow64\NCTAudioFile2.dll
[2010-11-26 10:11:03 | 000,724,992 | ---- | C] (EB Design Pty Ltd) -- C:\Windows\SysWow64\ebCrypt.dll
[2010-11-26 10:11:03 | 000,376,832 | ---- | C] (Touch22) -- C:\Windows\SysWow64\cmd22.dll
[2010-11-26 10:11:03 | 000,253,952 | ---- | C] (SmartBrain Software) -- C:\Windows\SysWow64\SkinBoxer43.dll
[2010-11-26 10:11:03 | 000,102,400 | ---- | C] (ECX Programming / CCRP) -- C:\Windows\SysWow64\ccrpprg6.ocx
[2010-11-26 10:11:02 | 001,081,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCOMCTL.OCX
[2010-11-26 09:51:00 | 000,000,000 | ---D | C] -- C:\AudioConverter Studio
[2010-11-24 10:55:30 | 000,000,000 | ---D | C] -- C:\Users\dracko\Documents\Alcohol 120%
[2010-11-23 13:41:17 | 000,000,000 | ---D | C] -- C:\KabodOnline
[2010-11-20 13:06:53 | 000,000,000 | ---D | C] -- C:\Team17
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2010-12-19 23:04:48 | 000,013,536 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010-12-19 23:04:48 | 000,013,536 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010-12-19 22:57:55 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010-12-19 22:57:31 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010-12-19 22:57:27 | 536,317,951 | -HS- | M] () -- C:\hiberfil.sys
[2010-12-19 22:10:00 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010-12-19 18:52:41 | 000,011,776 | ---- | M] () -- C:\Users\dracko\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-12-17 22:57:34 | 000,289,672 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010-12-17 22:40:16 | 003,349,992 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010-12-17 22:40:16 | 000,744,382 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2010-12-17 22:40:16 | 000,662,518 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010-12-17 22:40:16 | 000,435,028 | ---- | M] () -- C:\Windows\SysNative\perfh011.dat
[2010-12-17 22:40:16 | 000,424,380 | ---- | M] () -- C:\Windows\SysNative\prfh0404.dat
[2010-12-17 22:40:16 | 000,408,278 | ---- | M] () -- C:\Windows\SysNative\prfh0804.dat
[2010-12-17 22:40:16 | 000,152,486 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2010-12-17 22:40:16 | 000,123,892 | ---- | M] () -- C:\Windows\SysNative\perfc011.dat
[2010-12-17 22:40:16 | 000,123,892 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010-12-17 22:40:16 | 000,121,752 | ---- | M] () -- C:\Windows\SysNative\prfc0804.dat
[2010-12-17 22:40:16 | 000,116,838 | ---- | M] () -- C:\Windows\SysNative\prfc0404.dat
[2010-12-13 12:03:14 | 000,002,981 | ---- | M] () -- C:\Users\dracko\Desktop\HiJackThis.lnk
[2010-12-09 12:46:54 | 000,002,562 | ---- | M] () -- C:\Windows\diagwrn.xml
[2010-12-09 12:46:54 | 000,001,908 | ---- | M] () -- C:\Windows\diagerr.xml
[2010-12-09 12:31:39 | 000,001,958 | ---- | M] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2010-12-09 12:28:34 | 000,000,413 | ---- | M] () -- C:\Users\dracko\Documents\ax_files.xml
[2010-12-06 18:49:54 | 000,000,886 | ---- | M] () -- C:\Users\dracko\Desktop\NFS11.exe — skrót.lnk
[2010-12-02 21:37:04 | 000,001,850 | ---- | M] () -- C:\Users\dracko\Desktop\Harry Potter i Komnata Tajemnic.lnk
[2010-11-25 13:12:31 | 016,404,215 | ---- | M] () -- C:\Users\dracko\Documents\TW II Atlas Swiata.pdf
[2010-11-25 13:00:52 | 016,404,215 | ---- | M] () -- C:\Users\dracko\Documents\Two_Worlds_II_Atlas_Swiata_-_Poradnik_GRY-OnLine.pdf
[2010-11-24 19:00:00 | 000,136,704 | ---- | M] () -- C:\Windows\SysNative\ff_vfw.dll
[2010-11-23 13:41:29 | 000,001,469 | ---- | M] () -- C:\Users\dracko\Desktop\Kabod Online.lnk
[2010-11-21 09:50:44 | 000,000,649 | ---- | M] () -- C:\Users\dracko\Desktop\revolt.exe — skrót.lnk
[2010-11-20 13:08:10 | 000,001,517 | ---- | M] () -- C:\Users\Public\Desktop\Stunt GP.lnk
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2010-12-13 12:03:13 | 000,002,981 | ---- | C] () -- C:\Users\dracko\Desktop\HiJackThis.lnk
[2010-12-09 12:31:39 | 000,001,958 | ---- | C] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2010-12-06 18:49:54 | 000,000,886 | ---- | C] () -- C:\Users\dracko\Desktop\NFS11.exe — skrót.lnk
[2010-12-05 17:45:16 | 000,191,488 | ---- | C] () -- C:\Windows\SysNative\unrar.dll
[2010-12-05 17:45:15 | 000,136,704 | ---- | C] () -- C:\Windows\SysNative\ff_vfw.dll
[2010-12-05 17:34:19 | 000,790,528 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2010-12-05 17:34:19 | 000,134,144 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2010-12-05 17:34:19 | 000,108,032 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2010-12-05 17:24:08 | 000,165,376 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2010-12-05 17:24:08 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2010-12-05 17:24:07 | 000,000,414 | ---- | C] () -- C:\Windows\SysWow64\lame_acm.xml
[2010-12-02 21:37:04 | 000,001,850 | ---- | C] () -- C:\Users\dracko\Desktop\Harry Potter i Komnata Tajemnic.lnk
[2010-11-26 10:11:03 | 000,389,120 | ---- | C] () -- C:\Windows\SysWow64\actskn43.ocx
[2010-11-25 13:07:40 | 016,404,215 | ---- | C] () -- C:\Users\dracko\Documents\TW II Atlas Swiata.pdf
[2010-11-25 12:59:54 | 016,404,215 | ---- | C] () -- C:\Users\dracko\Documents\Two_Worlds_II_Atlas_Swiata_-_Poradnik_GRY-OnLine.pdf
[2010-11-23 13:41:29 | 000,001,469 | ---- | C] () -- C:\Users\dracko\Desktop\Kabod Online.lnk
[2010-11-21 09:49:32 | 000,000,649 | ---- | C] () -- C:\Users\dracko\Desktop\revolt.exe — skrót.lnk
[2010-11-20 13:08:10 | 000,001,517 | ---- | C] () -- C:\Users\Public\Desktop\Stunt GP.lnk
[2010-08-25 20:35:49 | 000,001,852 | ---- | C] () -- C:\Windows\Sandboxie.ini
[2010-08-07 15:57:53 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010-07-10 10:19:19 | 000,000,134 | ---- | C] () -- C:\Windows\w5win.ini
[2010-05-15 16:02:03 | 002,980,510 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010-04-17 09:15:34 | 000,217,088 | ---- | C] () -- C:\Windows\NVGfxOgl.dll
[2010-04-03 14:14:55 | 000,011,776 | ---- | C] () -- C:\Users\dracko\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-04-02 16:17:34 | 000,179,091 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2010-02-14 09:37:58 | 000,007,632 | ---- | C] () -- C:\Users\dracko\AppData\Local\Resmon.ResmonCfg
[2010-02-13 11:28:57 | 000,001,209 | ---- | C] () -- C:\Windows\skSPcfg.ini
[2010-02-13 11:28:57 | 000,000,381 | ---- | C] () -- C:\Windows\skMCcfg.ini
[2010-02-13 11:27:58 | 000,147,968 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL
[2010-02-13 11:27:58 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL
[2010-02-13 11:02:48 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\asrussian.dll
[2010-02-13 11:02:48 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\askorean.dll
[2010-02-13 11:02:48 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\asjapan.dll
[2010-02-13 11:02:48 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\asgerman.dll
[2010-02-13 11:02:48 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\asfrench.dll
[2010-02-13 11:02:48 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\aseng.dll
[2010-02-13 11:02:48 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\ASCHT.dll
[2010-02-13 11:02:48 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\aschs.dll
[2009-07-14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009-07-13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009-07-09 02:03:02 | 000,058,880 | ---- | C] () -- C:\Windows\SysWow64\bdmpegv.dll
[2006-05-10 08:18:10 | 000,309,464 | ---- | C] () -- C:\Windows\SysWow64\P00RecImage.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-02-27 09:09:53 | 000,000,000 | -HSD | M] -- C:\Users\dracko\AppData\Roaming\.#
[2010-03-30 16:21:15 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\ACD Systems
[2010-02-13 11:11:46 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\ArcaBit
[2010-06-19 08:35:50 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\Ashampoo
[2010-10-06 16:11:26 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\AutoUpdate
[2010-05-27 16:35:41 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\Bioshock2
[2010-12-16 09:29:19 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\BitComet
[2010-08-18 17:22:12 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\ChemTable Software
[2010-07-31 18:16:28 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\CosFeti
[2010-02-22 12:38:58 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\DAEMON Tools Lite
[2010-05-19 08:29:55 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\EurekaLog
[2010-10-06 16:11:27 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\Flircik
[2010-02-18 13:05:51 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\Foxit
[2010-08-27 11:18:01 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\Foxit Software
[2010-11-26 10:10:34 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\GetRightToGo
[2010-10-28 20:24:19 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\Hothead Games
[2010-05-17 09:11:25 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\ImgBurn
[2010-05-01 14:17:10 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\InstantAction
[2010-05-01 14:17:49 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\LucasArts
[2010-03-02 15:18:56 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\Moyea
[2010-09-07 13:40:41 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\Nokia
[2010-02-15 10:32:31 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\OpenOffice.org
[2010-09-07 19:13:32 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\PandoraRecovery
[2010-09-25 21:49:14 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\PC Suite
[2010-10-03 20:19:26 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\Samsung
[2010-03-03 18:47:35 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\Sony
[2010-03-03 18:36:29 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\Sony Setup
[2010-02-16 13:23:20 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\The Bat!
[2010-02-19 21:03:53 | 000,000,000 | ---D | M] -- C:\Users\dracko\AppData\Roaming\TigerPlayer
[2010-12-04 09:06:34 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Files - Unicode (All) ==========[/color]
[2010-10-13 12:11:46 | 000,000,000 | ---D | M](C:\Users\dracko\Documents\?? ???) -- C:\Users\dracko\Documents\넥슨 플러그
[2010-10-13 12:11:46 | 000,000,000 | ---D | C](C:\Users\dracko\Documents\?? ???) -- C:\Users\dracko\Documents\넥슨 플러그
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:D06A4C76

< End of report >