OTL logfile created on: 11/13/2012 2:51:58 PM - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE
Windows Vista (TM) Home Premium Service Pack 2 (Version = 6.0.6002) - Type = System
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 90.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 98.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 100.59 Gb Total Space | 14.03 Gb Free Space | 13.94% Space Free | Partition Type: NTFS
Drive D: | 184.51 Gb Total Space | 44.86 Gb Free Space | 24.31% Space Free | Partition Type: NTFS
Drive E: | 180.66 Gb Total Space | 179.69 Gb Free Space | 99.46% Space Free | Partition Type: NTFS
Drive X: | 284.12 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2012/11/08 13:25:53 | 000,711,112 | ---- | M] () [Auto] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe -- (vToolbarUpdater13.2.0)
SRV - [2012/10/26 07:52:55 | 000,529,744 | ---- | M] (Valve Corporation) [On_Demand] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012/08/29 05:03:36 | 001,385,896 | ---- | M] (LogMeIn Inc.) [Auto] -- D:\dsgSEGF\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012/08/21 14:27:19 | 000,581,632 | ---- | M] (THOMSON Telecom Belgium) [Auto] -- C:\Program Files\Thomson\ST330\service\st330service.exe -- (st330service)
SRV - [2012/07/13 07:01:18 | 000,160,944 | R--- | M] (Skype Technologies) [Auto] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/05/22 09:28:24 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/02/20 17:26:32 | 000,008,704 | ---- | M] (Hi-Rez Studios) [Auto] -- C:\Users\oem\Desktop\Programy\triebens ascend\HiPatchService.exe -- (HiPatchService)
SRV - [2011/11/10 08:17:31 | 000,167,264 | ---- | M] () [On_Demand] -- C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe -- (AVG Security Toolbar Service)
SRV - [2011/08/10 21:06:20 | 002,255,464 | R--- | M] (NVIDIA Corporation) [Auto] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011/08/02 21:31:42 | 000,379,496 | ---- | M] (NVIDIA Corporation) [Auto] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2010/07/16 12:55:51 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto] -- C:\Program Files\AVG\AVG9\avgwdsvc.exe -- (avg9wd)
SRV - [2010/06/02 11:30:55 | 003,594,440 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand] -- C:\Windows\System32\GameMon.des -- (npggsvc)
SRV - [2009/09/28 03:42:50 | 000,109,056 | ---- | M] (ArcSoft Inc.) [Auto] -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
SRV - [2008/01/20 21:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007/05/08 11:00:48 | 002,179,072 | ---- | M] (UASSOFT.COM) [Auto] -- C:\Program Files\Multimedia Keyboard Driver\V5\KMWDSrv.exe -- (KMWDSERVICE)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand] --  -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand] --  -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand] --  -- (IpInIp)
DRV - File not found [Kernel | On_Demand] --  -- (EagleXNt)
DRV - File not found [Kernel | On_Demand] --  -- (EagleNT)
DRV - [2012/11/08 13:25:54 | 000,026,984 | ---- | M] (AVG Technologies) [Kernel | System] -- C:\Windows\System32\drivers\avgtpx86.sys -- (avgtp)
DRV - [2012/02/09 15:43:00 | 010,816,832 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2011/09/13 11:50:21 | 000,029,712 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System] -- C:\Windows\System32\Drivers\avgmfx86.sys -- (AvgMfx86)
DRV - [2011/08/10 21:06:20 | 000,139,368 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2011/05/05 15:11:30 | 000,243,152 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System] -- C:\Windows\System32\Drivers\avgtdix.sys -- (AvgTdiX)
DRV - [2010/07/16 12:55:11 | 000,216,400 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System] -- C:\Windows\System32\Drivers\avgldx86.sys -- (AvgLdx86)
DRV - [2009/08/04 23:18:22 | 000,048,640 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\L1E60x86.sys -- (L1E)
DRV - [2009/04/10 23:45:24 | 000,113,664 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- C:\Windows\System32\drivers\rmcast.sys -- (RMCAST) Sterownik protokołu RMCAST (Pgm)
DRV - [2009/03/18 10:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2008/12/11 10:03:28 | 000,271,360 | ---- | M] () [Kernel | Auto] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt)
DRV - [2008/12/11 10:03:23 | 000,018,048 | ---- | M] () [Kernel | Auto] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2008/11/22 12:48:24 | 000,040,320 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand] -- C:\Windows\System32\drivers\steth.sys -- (STETH)
DRV - [2008/11/22 09:58:21 | 000,035,328 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand] -- C:\Windows\System32\drivers\stppp.sys -- (stppp)
DRV - [2008/11/22 09:58:21 | 000,030,464 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand] -- C:\Windows\System32\drivers\st330.sys -- (ST330)
DRV - [2008/11/22 09:58:21 | 000,012,672 | ---- | M] (THOMSON Telecom Belgium) [Kernel | On_Demand] -- C:\Windows\System32\drivers\stbus.sys -- (STBUS)
DRV - [2008/11/21 06:26:07 | 000,717,296 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2007/12/17 04:14:06 | 000,012,400 | R--- | M] () [Kernel | System] -- C:\Windows\System32\drivers\AsIO.sys -- (AsIO)
DRV - [2007/03/16 04:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand] -- C:\Windows\System32\drivers\TBPanel.sys -- (TBPanel)
DRV - [2006/10/18 00:44:48 | 000,007,680 | ---- | M] () [Kernel | On_Demand] -- C:\Windows\System32\drivers\ASACPI.sys -- (MTsensor)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_medium=ins&from=ins&uid=6QM07TPR_ST3500320AS&ts=1342440060
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com/?utm_source=b&utm_medium=ins&from=ins&uid=6QM07TPR_ST3500320AS&ts=1342440060
IE - HKLM\..\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.)
 
 
IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\oem_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_medium=ins&from=ins&uid=6QM07TPR_ST3500320AS&ts=1342440060
IE - HKU\oem_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKU\oem_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\oem_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKU\oem_ON_C\Software\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\oem_ON_C\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKU\oem_ON_C\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\oem_ON_C\..\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.)
IE - HKU\oem_ON_C\..\URLSearchHook: {87d5d709-40f2-48a7-8f47-7bb821af70ab} - Reg Error: Key error. File not found
IE - HKU\oem_ON_C\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - Reg Error: Key error. File not found
IE - HKU\oem_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\System32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\System32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\13.2.0\\npsitesafety.dll ()
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin:  File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2852: C:\Program Files\K-Lite Codec Pack\Real\Browser\Plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.46: C:\Program Files\K-Lite Codec Pack\Real\Browser\Plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1662: C:\Program Files\K-Lite Codec Pack\Real\Browser\Plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.46: C:\Program Files\K-Lite Codec Pack\Real\Browser\Plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG9\Firefox [2011/09/13 11:50:48 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\crossriderapp1466@crossrider.com: C:\ProgramData\SendSpaceExtention\firefox [2011/10/07 15:18:44 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\FireFoxExt\13.2.0.5 [2012/11/08 13:27:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/05/22 09:28:25 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/01/02 15:57:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
 
[2012/04/15 07:27:06 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012/05/22 09:28:24 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012/01/02 15:57:33 | 000,611,224 | ---- | M] (Oracle Corporation) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012/05/22 09:28:22 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012/11/08 13:26:14 | 000,003,572 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml
[2012/07/15 07:08:09 | 000,002,313 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2012/05/22 09:28:22 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012/05/22 09:28:22 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012/05/22 09:28:22 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012/04/15 07:26:45 | 000,002,515 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml
[2012/07/16 07:01:06 | 000,000,402 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\v9.xml
[2012/05/22 09:28:22 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012/05/22 09:28:22 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2006/09/18 16:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Giant Savings) - {11111111-1111-1111-1111-110011441179} - C:\Program Files\Giant Savings\Giant Savings.dll (215 Apps)
O2 - BHO: (Wincore Mediabar) - {28387537-e3f9-4ed7-860c-11e69af4a8a0} - C:\Program Files\iMesh Applications\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll ()
O2 - BHO: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (uTorrentControl2 Toolbar) - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.)
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\13.2.0.5\AVG Secure Search_toolbar.dll ()
O2 - BHO: (DealPly) - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Program Files\DealPly\DealPlyIE.dll (DealPly Technologies Ltd)
O2 - BHO: (CrossRider) - {A876E312-7D08-401a-B7A6-FAFC5DC2F292} - C:\Program Files\CrossriderWebApps\Crossrider.dll ()
O2 - BHO: (DataMngr) - {BE7A24F5-69CB-4708-B77B-B1EDA6043B95} - C:\Program Files\iMesh Applications\MediaBar\Datamngr\BrowserConnection.dll (iMesh, Inc)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Wincore Mediabar) - {28387537-e3f9-4ed7-860c-11e69af4a8a0} - C:\Program Files\iMesh Applications\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll ()
O3 - HKLM\..\Toolbar: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (uTorrentControl2 Toolbar) - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\13.2.0.5\AVG Secure Search_toolbar.dll ()
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKU\oem_ON_C\..\Toolbar\WebBrowser: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O4 - HKLM..\Run: [4StoryPrePatch]  File not found
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [DATAMNGR] C:\Program Files\iMesh Applications\MediaBar\Datamngr\datamngrUI.exe (iMesh, Inc)
O4 - HKLM..\Run: [diagnostics] C:\Program Files\Thomson\ST330\diagnostics\diagnostics.exe (THOMSON Telecom Belgium)
O4 - HKLM..\Run: [HF_G_Jul] C:\Program Files\AVG Secure Search\HF_G_Jul.exe ()
O4 - HKLM..\Run: [KMConfig]  File not found
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] D:\dsgSEGF\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [ROC_roc_dec12] C:\Program Files\AVG Secure Search\ROC_roc_dec12.exe ()
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SunJavaUpdateSched]  File not found
O4 - HKLM..\Run: [vProt] C:\Program Files\AVG Secure Search\vprot.exe ()
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\LocalService_ON_C..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\NetworkService_ON_C..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\oem_ON_C..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
O4 - HKU\oem_ON_C..\Run: [Steam] C:\Program Files\Steam\Steam.exe (Valve Corporation)
O4 - HKU\oem_ON_C..\Run: [TBPanel] C:\Program Files\Vtune\TBPanel.exe ()
O4 - HKU\UpdatusUser_ON_C..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - Startup: Error locating startup folders.
O7 - HKU\oem_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\oem_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKU\oem_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab (Java Plug-in 10.1.0)
O16 - DPF: {92ECE6FA-AC2E-4042-BFAE-0C8608E52A43} https://www.bph.pl/pi/components/bph/SignActivX.cab (SignActivX Control)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab (Java Plug-in 1.7.0_01)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.7.0_01)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\13.2.0\ViProtocol.dll ()
O20 - AppInit_DLLs: (C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\datamngr.dll) - C:\Program Files\iMesh Applications\MediaBar\Datamngr\datamngr.dll (iMesh, Inc)
O20 - AppInit_DLLs: (C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\IEBHO.dll) - C:\Program Files\iMesh Applications\MediaBar\Datamngr\IEBHO.dll (iMesh, Inc)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 16:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 06:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012/11/12 12:46:02 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\ProgramData\lsass.exe
[2012/11/08 13:26:33 | 000,026,984 | ---- | C] (AVG Technologies) -- C:\Windows\System32\drivers\avgtpx86.sys
[2012/10/20 11:39:08 | 000,696,760 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012/10/16 09:20:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012/11/13 08:41:04 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/11/13 08:40:59 | 000,196,608 | ---- | M] () -- C:\Windows\System32\Ikeext.etl
[2012/11/13 08:40:01 | 083,023,306 | ---- | M] () -- C:\ProgramData\0tbpw.pad
[2012/11/13 08:36:30 | 000,003,712 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/11/13 08:36:29 | 000,003,712 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/11/13 08:36:08 | 3488,661,504 | -HS- | M] () -- C:\hiberfil.sys
[2012/11/13 08:08:01 | 100,115,241 | ---- | M] () -- C:\Windows\System32\drivers\Avg\incavi.avm
[2012/11/12 13:02:42 | 000,000,000 | ---- | M] () -- C:\Users\oem\AppData\Local\prvlcl.dat
[2012/11/12 12:47:01 | 000,001,050 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3828063910-3716613409-77487195-1000UA.job
[2012/11/12 12:46:59 | 083,023,306 | ---- | M] () -- C:\ProgramData\dsgsdgdsgdsgw.pad
[2012/11/12 12:46:04 | 000,000,752 | ---- | M] () -- C:\Users\oem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
[2012/11/12 12:46:02 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\ProgramData\lsass.exe
[2012/11/12 07:58:47 | 000,015,872 | ---- | M] () -- C:\Users\oem\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/11/12 07:47:00 | 000,000,998 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3828063910-3716613409-77487195-1000Core.job
[2012/11/08 13:25:54 | 000,026,984 | ---- | M] (AVG Technologies) -- C:\Windows\System32\drivers\avgtpx86.sys
[2012/11/06 13:52:03 | 000,002,032 | ---- | M] () -- C:\Users\oem\Desktop\Google Chrome.lnk
[2012/11/06 13:52:03 | 000,001,994 | ---- | M] () -- C:\Users\oem\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2012/11/06 07:56:08 | 000,720,428 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2012/11/06 07:56:08 | 000,632,784 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012/11/06 07:56:08 | 000,154,322 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2012/11/06 07:56:08 | 000,130,702 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012/10/20 11:58:14 | 000,696,760 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012/10/20 11:58:13 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012/10/16 09:20:50 | 000,000,483 | ---- | M] () -- C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
[2012/10/16 09:20:50 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012/11/13 08:00:35 | 3488,661,504 | -HS- | C] () -- C:\hiberfil.sys
[2012/11/12 12:46:07 | 083,023,306 | ---- | C] () -- C:\ProgramData\dsgsdgdsgdsgw.pad
[2012/11/12 12:46:04 | 000,000,752 | ---- | C] () -- C:\Users\oem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
[2012/11/12 12:46:03 | 083,023,306 | ---- | C] () -- C:\ProgramData\0tbpw.pad
[2012/10/16 09:20:50 | 000,000,483 | ---- | C] () -- C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
[2012/01/13 06:44:02 | 000,000,091 | ---- | C] () -- C:\Users\oem\AppData\Local\fusioncache.dat
[2011/10/28 15:59:35 | 000,000,017 | ---- | C] () -- C:\Users\oem\AppData\Local\Images.fl
[2011/08/02 21:31:54 | 000,311,912 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe
[2010/09/06 12:39:12 | 000,000,131 | ---- | C] () -- C:\Windows\7THLEVEL.INI
[2010/09/05 12:02:03 | 000,000,422 | ---- | C] () -- C:\Windows\{EF47D09C-9392-487A-B7E5-986F6DB7B189}_WiseFW.ini
[2010/04/30 12:54:13 | 000,000,000 | ---- | C] () -- C:\Users\oem\AppData\Local\prvlcl.dat
[2010/03/02 11:52:13 | 000,403,047 | ---- | C] () -- C:\Windows\fishing_beta_0.1.3.exe
[2010/03/02 11:52:13 | 000,000,147 | ---- | C] () -- C:\Windows\l33td.ini
[2010/02/23 09:20:06 | 000,158,911 | ---- | C] () -- C:\Windows\hpoins19.dat
[2010/02/23 09:19:43 | 000,026,952 | ---- | C] () -- C:\Windows\hpomdl19.dat
[2010/02/22 14:40:12 | 000,112,637 | ---- | C] () -- C:\Windows\hpoins07.dat.temp
[2010/02/22 14:40:12 | 000,021,124 | ---- | C] () -- C:\Windows\hpomdl07.dat.temp
[2009/12/27 13:03:05 | 000,000,813 | ---- | C] () -- C:\Windows\disney.ini
[2009/12/27 12:56:23 | 000,000,060 | ---- | C] () -- C:\Windows\SIERRA.INI
[2009/12/27 12:55:14 | 000,000,043 | ---- | C] () -- C:\Windows\KA.INI
[2009/12/04 10:01:30 | 000,000,552 | ---- | C] () -- C:\Users\oem\AppData\Local\d3d8caps.dat
[2009/08/11 14:06:21 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009/08/11 14:06:21 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2009/05/26 11:11:00 | 000,000,039 | ---- | C] () -- C:\Windows\WININIT.INI
[2009/05/26 11:06:35 | 000,166,400 | ---- | C] () -- C:\Windows\RemLomax.exe
[2009/05/10 11:04:06 | 000,000,418 | ---- | C] () -- C:\Windows\ODBC.INI
[2009/03/29 11:27:40 | 000,000,046 | ---- | C] () -- C:\Windows\System32\imon1.dat
[2009/02/04 11:22:29 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2009/01/17 11:28:54 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2008/12/11 10:03:28 | 000,271,360 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys
[2008/12/11 10:03:23 | 000,018,048 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys
[2008/12/06 14:31:18 | 000,010,240 | ---- | C] () -- C:\Windows\System32\vidx16.dll
[2008/11/23 11:28:21 | 000,000,138 | ---- | C] () -- C:\Users\oem\AppData\default.pls
[2008/11/22 12:03:08 | 000,015,872 | ---- | C] () -- C:\Users\oem\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/11/22 06:20:44 | 000,022,328 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2008/11/22 06:20:44 | 000,022,328 | ---- | C] () -- C:\Users\oem\AppData\Roaming\PnkBstrK.sys
[2008/11/22 06:20:29 | 000,103,736 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2008/11/22 06:20:28 | 000,669,184 | ---- | C] () -- C:\Windows\System32\pbsvc.exe
[2008/11/22 06:20:28 | 000,066,872 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2008/11/21 06:25:25 | 000,003,972 | ---- | C] () -- C:\Windows\System32\drivers\PciBus.sys
[2008/11/21 06:20:12 | 000,164,352 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2008/11/21 06:20:11 | 002,102,272 | ---- | C] () -- C:\Windows\System32\x264vfw.dll
[2008/11/21 06:20:11 | 000,755,027 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2008/11/21 06:20:10 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2008/11/21 06:20:10 | 000,159,839 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2008/11/21 06:20:10 | 000,007,680 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2008/11/21 06:14:25 | 000,130,048 | ---- | C] () -- C:\Windows\System32\SpoonUninstall.exe
[2008/11/21 06:14:25 | 000,035,132 | ---- | C] () -- C:\Windows\System32\SpoonUninstall-dBpowerAMP Music Converter.dat
[2008/11/18 10:12:58 | 000,024,576 | R--- | C] () -- C:\Windows\System32\AsIO.dll
[2008/11/18 10:12:58 | 000,012,400 | R--- | C] () -- C:\Windows\System32\drivers\AsIO.sys
[2008/11/18 10:12:55 | 000,011,832 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp64.sys
[2008/11/18 10:12:55 | 000,010,216 | ---- | C] () -- C:\Windows\System32\drivers\AsInsHelp32.sys
[2008/11/18 10:08:52 | 000,007,680 | ---- | C] () -- C:\Windows\System32\drivers\ASACPI.sys
[2008/11/18 10:08:46 | 000,030,201 | ---- | C] () -- C:\Windows\Ascd_tmp.ini
[2008/11/18 10:06:28 | 000,002,032 | ---- | C] () -- C:\Users\oem\AppData\Local\d3d9caps.dat
[2008/01/21 01:24:14 | 000,720,428 | ---- | C] () -- C:\Windows\System32\perfh015.dat
[2008/01/21 01:24:14 | 000,332,832 | ---- | C] () -- C:\Windows\System32\perfi015.dat
[2008/01/21 01:24:14 | 000,154,322 | ---- | C] () -- C:\Windows\System32\perfc015.dat
[2008/01/21 01:24:14 | 000,037,468 | ---- | C] () -- C:\Windows\System32\perfd015.dat
[2007/12/28 02:22:02 | 000,010,296 | ---- | C] () -- C:\Windows\System32\drivers\ASUSHWIO.SYS
[2006/11/02 07:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006/11/02 07:47:37 | 000,404,424 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 07:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 05:33:01 | 000,632,784 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006/11/02 05:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006/11/02 05:33:01 | 000,130,702 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006/11/02 05:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006/11/02 05:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006/11/02 03:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006/11/02 03:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006/11/02 02:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/11/02 02:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2005/05/24 03:22:22 | 000,021,124 | ---- | C] () -- C:\Windows\hpomdl07.dat
[1999/01/22 13:46:58 | 000,065,536 | ---- | C] () -- C:\Windows\System32\MSRTEDIT.DLL
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012/07/18 12:11:34 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\.minecraft
[2011/10/07 15:18:18 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\Babylon
[2008/11/21 06:26:01 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\DAEMON Tools
[2008/11/22 13:26:56 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\ESET
[2011/10/12 14:09:24 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\Gadu-Gadu 10
[2011/03/12 14:22:09 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\GetRightToGo
[2009/05/10 12:36:12 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\GHISLER
[2012/07/12 08:37:47 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\Image Zone Express
[2011/12/13 19:52:54 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\LolClient
[2012/05/29 12:51:18 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\LolClient2
[2009/04/09 16:31:11 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\MakeUpPilot
[2009/04/25 13:34:34 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\Mount&Blade
[2011/05/14 13:24:27 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\Mount&Blade Ogniem i Mieczem
[2012/04/15 07:27:22 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\MusicNet
[2011/10/28 16:01:22 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\ObviousIdea
[2011/10/12 11:34:01 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\OpenFM
[2012/01/02 16:07:15 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\OpenOffice.org
[2012/01/02 15:50:39 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\OpenOffice.ux.pl2
[2008/12/21 16:54:28 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\Printer Info Cache
[2011/04/29 11:10:35 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\Shape games
[2012/04/09 12:24:11 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\SumatraPDF
[2012/06/02 11:24:59 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\TS3Client
[2011/11/13 11:38:25 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\Ubisoft
[2012/11/12 05:40:06 | 000,000,000 | ---D | M] -- C:\Users\oem\AppData\Roaming\uTorrent
[2011/04/29 11:10:18 | 000,000,000 | ---D | M] -- C:\ProgramData\AlawarWrapper
[2006/11/02 08:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data
[2012/11/08 13:27:23 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG Secure Search
[2010/10/26 08:15:36 | 000,000,000 | ---D | M] -- C:\ProgramData\AVG Security Toolbar
[2010/02/20 05:46:50 | 000,000,000 | ---D | M] -- C:\ProgramData\avg9
[2011/10/07 15:18:18 | 000,000,000 | ---D | M] -- C:\ProgramData\Babylon
[2012/04/15 09:52:08 | 000,000,000 | ---D | M] -- C:\ProgramData\boost_interprocess
[2011/03/14 12:44:17 | 000,000,000 | -H-D | M] -- C:\ProgramData\Common Files
[2008/11/18 10:06:18 | 000,000,000 | -HSD | M] -- C:\ProgramData\Dane aplikacji
[2006/11/02 08:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Desktop
[2006/11/02 08:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Documents
[2008/11/18 10:06:18 | 000,000,000 | -HSD | M] -- C:\ProgramData\Dokumenty
[2009/06/18 05:55:06 | 000,000,000 | ---D | M] -- C:\ProgramData\ESET
[2006/11/02 08:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favorites
[2008/11/19 02:25:02 | 000,000,000 | ---D | M] -- C:\ProgramData\Futuremark
[2011/10/12 11:31:36 | 000,000,000 | ---D | M] -- C:\ProgramData\Gadu-Gadu 10
[2012/02/25 10:29:43 | 000,000,000 | ---D | M] -- C:\ProgramData\Hi-Rez Studios
[2012/04/15 07:24:54 | 000,000,000 | ---D | M] -- C:\ProgramData\iMesh
[2011/10/07 15:17:54 | 000,000,000 | ---D | M] -- C:\ProgramData\InstallMate
[2008/11/26 12:16:52 | 000,000,000 | ---D | M] -- C:\ProgramData\LightScribe
[2008/11/18 10:06:18 | 000,000,000 | -HSD | M] -- C:\ProgramData\Menu Start
[2012/10/12 09:55:07 | 000,000,000 | ---D | M] -- C:\ProgramData\MFAData
[2012/10/21 10:13:16 | 000,000,000 | ---D | M] -- C:\ProgramData\OpenFM
[2011/10/07 15:17:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Premium
[2008/11/18 10:06:18 | 000,000,000 | -HSD | M] -- C:\ProgramData\Pulpit
[2011/10/07 15:18:44 | 000,000,000 | ---D | M] -- C:\ProgramData\SendSpaceExtention
[2006/11/02 08:02:03 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu
[2008/11/18 10:06:18 | 000,000,000 | -HSD | M] -- C:\ProgramData\Szablony
[2011/11/08 09:01:27 | 000,000,000 | ---D | M] -- C:\ProgramData\TEMP
[2006/11/02 08:02:04 | 000,000,000 | -HSD | M] -- C:\ProgramData\Templates
[2011/11/13 11:38:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Ubisoft
[2008/11/18 10:06:18 | 000,000,000 | -HSD | M] -- C:\ProgramData\Ulubione
[2010/11/21 09:54:57 | 000,000,000 | ---D | M] -- C:\ProgramData\WindowsSearch
[2008/11/19 02:19:49 | 000,000,000 | ---D | M] -- C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1}
[2012/04/15 07:27:05 | 000,000,000 | -H-D | M] -- C:\ProgramData\{6DFE6B59-3F4E-45AF-A9D0-5EDC43DD23AF}
[2012/11/13 08:40:58 | 000,032,580 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:671329E4
< End of report >