OTL logfile created on: 2012-12-26 23:15:10 - Run 5 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Roch\Downloads Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,99 Gb Total Physical Memory | 2,33 Gb Available Physical Memory | 77,89% Memory free 6,19 Gb Paging File | 5,74 Gb Available in Paging File | 92,74% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 94,16 Gb Total Space | 9,01 Gb Free Space | 9,57% Space Free | Partition Type: NTFS Drive D: | 195,14 Gb Total Space | 123,06 Gb Free Space | 63,06% Space Free | Partition Type: NTFS Computer Name: DOMINIK_MŁODY | User Name: Dominik | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-12-26 22:57:55 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Roch\Downloads\OTL.exe PRC - [2012-11-30 18:39:53 | 001,807,800 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_5_502_110.exe PRC - [2012-09-06 02:24:58 | 000,917,984 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2009-04-11 07:28:15 | 000,117,248 | ---- | M] () -- \\?\C:\Windows\System32\wbem\WMIADAP.EXE PRC - [2009-04-11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-11-30 18:39:52 | 014,586,808 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_5_502_110.dll MOD - [2012-09-06 02:25:12 | 002,244,064 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2011-01-14 10:38:32 | 000,178,768 | ---- | M] () -- C:\Program Files\ArcaBit\ArcaVir\AVShell.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - [2011-10-27 10:34:30 | 000,718,384 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2011-03-30 21:56:36 | 000,186,960 | ---- | M] (ArcaBit) [Auto | Stopped] -- C:\Program Files\ArcaBit\ArcaTools\ArcaBackup\ArcaBackupService.exe -- (AVBackup) SRV - [2011-03-30 21:56:33 | 000,535,120 | ---- | M] () [Auto | Stopped] -- C:\Program Files\ArcaBit\ArcaAgent\ArcaRemoteSvc.exe -- (ArcaRemoteService) SRV - [2011-03-14 16:27:28 | 000,271,712 | ---- | M] () [Auto | Stopped] -- C:\ProgramData\DataCardService\HWDeviceService.exe -- (HWDeviceService.exe) SRV - [2011-02-14 16:16:34 | 000,170,576 | ---- | M] (ArcaBit) [Auto | Stopped] -- C:\Program Files\ArcaBit\Common\ArcaConfSV.exe -- (ABConfSV) SRV - [2011-02-08 14:11:54 | 000,155,112 | ---- | M] (ArcaBit) [Auto | Stopped] -- C:\Program Files\ArcaBit\ArcaVir\ArcaMainSV.exe -- (ABMainSV) SRV - [2011-01-21 12:42:20 | 000,129,616 | ---- | M] (ArcaBit) [Auto | Stopped] -- C:\Program Files\ArcaBit\Common\ArcaTasksService.exe -- (AVTasks2) SRV - [2010-12-03 12:47:10 | 000,117,328 | ---- | M] (ArcaBit) [Auto | Stopped] -- C:\Program Files\ArcaBit\ArcaUpdate\update.exe -- (AVUpdate) SRV - [2008-04-25 13:23:36 | 000,303,104 | ---- | M] (Fujitsu Siemens Computers) [Auto | Stopped] -- C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe -- (TestHandler) SRV - [2008-02-22 08:24:28 | 000,094,208 | ---- | M] (TODO: <公司名稱>) [Auto | Stopped] -- C:\Program Files\OEM\OSD_1.16\OsdService.exe -- (OsdService) SRV - [2008-01-21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp) DRV - [2012-09-19 05:38:06 | 000,145,280 | ---- | M] (ITE ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\IT9135BDA.sys -- (IT9135BDA) DRV - [2011-11-22 22:26:01 | 000,071,680 | ---- | M] (Notebook Hardware Control) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\nhcDriver.sys -- (nhcDriverDevice) DRV - [2011-08-17 12:56:32 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerfltj.sys -- (UsbserFilt) DRV - [2011-08-17 12:56:30 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2011-08-17 12:56:26 | 000,023,168 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2011-08-17 12:56:22 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2011-03-30 21:56:33 | 000,037,968 | ---- | M] (ArcaBit) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\abndis.sys -- (ABndisMP) DRV - [2011-03-30 21:56:33 | 000,037,968 | ---- | M] (ArcaBit) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\abndis.sys -- (ABndis) DRV - [2011-03-18 17:08:54 | 000,025,240 | ---- | M] (Almico Software) [Kernel | Boot | Running] -- C:\Windows\System32\speedfan.sys -- (speedfan) DRV - [2011-02-14 16:16:02 | 000,052,304 | ---- | M] (ArcaBit) [File_System | On_Demand | Stopped] -- C:\Program Files\ArcaBit\ArcaVir\ABFLT.sys -- (ABFLT) DRV - [2010-10-26 12:04:30 | 000,051,280 | ---- | M] (ArcaBit) [Kernel | System | Running] -- C:\Program Files\ArcaBit\ArcaVir\ABTDI.sys -- (ABTDI) DRV - [2010-06-23 08:21:32 | 000,259,176 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169) DRV - [2010-01-05 18:54:52 | 001,387,008 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\athur.sys -- (athur) DRV - [2009-09-01 07:19:18 | 009,825,728 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2009-04-11 05:42:52 | 000,031,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (winusb) DRV - [2008-08-26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008-06-17 20:27:28 | 000,007,168 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\directport.sys -- (GpdDevDPort) DRV - [2008-05-01 07:35:54 | 003,660,800 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw5v32.sys -- (NETw5v32) DRV - [2008-04-03 13:58:46 | 000,076,688 | ---- | M] (JMicron Technology Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\jraid.sys -- (JRAID) DRV - [2008-03-31 11:02:34 | 000,008,192 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\kbfiltr.sys -- (GpdKbFilter) DRV - [2007-12-19 18:45:00 | 000,170,000 | ---- | M] (AMD Technologies Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\ahcix86s.sys -- (ahcix86s) DRV - [2007-11-02 23:12:32 | 000,041,456 | ---- | M] (Cyberlink Corp.) [Kernel | Auto | Stopped] -- C:\Program Files\CyberLink\PowerDVD\000.fcl -- ({95808DC4-FA4A-4C74-92FE-5B863F82066B}) DRV - [2007-09-18 09:20:22 | 000,099,584 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ZTEusbser.sys -- (qcusbser) DRV - [1996-04-03 20:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\giveio.sys -- (giveio) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2651693254-233013980-3163538551-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = IE - HKU\S-1-5-21-2651693254-233013980-3163538551-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = IE - HKU\S-1-5-21-2651693254-233013980-3163538551-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKU\S-1-5-21-2651693254-233013980-3163538551-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-2651693254-233013980-3163538551-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-2651693254-233013980-3163538551-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.google.pl/http://www.pajacyk.pl/ [binary data] IE - HKU\S-1-5-21-2651693254-233013980-3163538551-1001\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKU\S-1-5-21-2651693254-233013980-3163538551-1001\..\SearchScopes,DefaultScope = {FC7304FC-331D-439D-91F6-44D90236946E} IE - HKU\S-1-5-21-2651693254-233013980-3163538551-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-2651693254-233013980-3163538551-1001\..\SearchScopes\{2FA00B92-574B-44C1-B1DE-83C2D9CCE724}: "URL" = http://www.google.pl/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} IE - HKU\S-1-5-21-2651693254-233013980-3163538551-1001\..\SearchScopes\{FC7304FC-331D-439D-91F6-44D90236946E}: "URL" = http://www.google.com/search?hl=pl&q={searchTerms} IE - HKU\S-1-5-21-2651693254-233013980-3163538551-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "www.gmail.com" FF - prefs.js..extensions.enabledAddons: IplextoALL@ALLPlayer.org:0.7.0 FF - prefs.js..extensions.enabledAddons: {b9bfaf1c-a63f-47cd-8b9a-29526ced9060}:1.4.9 FF - prefs.js..keyword.URL: "http://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=" FF - prefs.js..network.proxy.type: 0 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_110.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2011-09-04 22:36:53 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fe_7.0@nokia.com: C:\Program Files\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_7.0 [2011-12-04 18:04:17 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-09-24 11:28:12 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-11-26 16:54:32 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\te_7.0@nokia.com: C:\Program Files\Nokia\Nokia Suite\Connectors\Thunderbird Connector\ThunderbirdExtension_7.0 [2011-12-04 18:04:22 | 000,000,000 | ---D | M] [2011-04-05 22:16:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dominik\AppData\Roaming\mozilla\Extensions [2012-10-30 08:42:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dominik\AppData\Roaming\mozilla\Firefox\Profiles\9wpuoxkt.default\extensions [2011-11-24 22:15:16 | 000,010,043 | ---- | M] () (No name found) -- C:\Users\Dominik\AppData\Roaming\mozilla\firefox\profiles\9wpuoxkt.default\extensions\IplextoALL@ALLPlayer.org.xpi [2012-10-30 08:42:49 | 000,012,929 | ---- | M] () (No name found) -- C:\Users\Dominik\AppData\Roaming\mozilla\firefox\profiles\9wpuoxkt.default\extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi [2014-04-14 20:59:43 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2012-09-06 02:26:03 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2012-09-06 03:57:09 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2012-09-06 03:57:10 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2012-09-06 03:57:10 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2012-09-06 03:57:10 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2012-09-06 03:57:10 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-09-06 03:57:09 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2006-09-18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\programiki;)\Tworzenie i edycja filmików;)\All player;)\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) O3 - HKLM\..\Toolbar: (Easy-WebPrint) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll () O4 - HKLM..\Run: [ABREGMON] C:\Program Files\ArcaBit\ArcaVir\abregmon.exe (ArcaBit) O4 - HKLM..\Run: [AvMenu] C:\Program Files\ArcaBit\ArcaVir\AVMenu.exe (ArcaBit) O4 - HKLM..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE (CANON INC.) O4 - HKLM..\Run: [FSCRecovery] c:\Program Files\Fujitsu Siemens Computers\Fujitsu Siemens Computers Recovery\FSCRecoveryReminder.exe (Fujitsu Siemens Computers GmbH) O4 - HKLM..\Run: [LanguageShortcut] C:\Program Files\CyberLink\PowerDVD\Language\Language.exe () O4 - HKLM..\Run: [OSD] C:\Program Files\OEM\OSD_1.16\osd.exe (ODM) O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-21-2651693254-233013980-3163538551-1000..\Run: [IVONA ControlCenter] C:\Program Files\IVONA\IVONA ControlCenter\IVONA ControlCenter.exe (IVONA Software Sp. z o.o.) O4 - HKU\S-1-5-21-2651693254-233013980-3163538551-1000..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-21-2651693254-233013980-3163538551-1001..\RunOnce: [547FA78775198C980000547F530F940A] C:\ProgramData\547FA78775198C980000547F530F940A\547FA78775198C980000547F530F940A.exe () O7 - HKU\S-1-5-21-2651693254-233013980-3163538551-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-2651693254-233013980-3163538551-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2 O7 - HKU\S-1-5-21-2651693254-233013980-3163538551-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1 O7 - HKU\S-1-5-21-2651693254-233013980-3163538551-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-2651693254-233013980-3163538551-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2 O7 - HKU\S-1-5-21-2651693254-233013980-3163538551-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1 O8 - Extra context menu item: E&ksport do programu Microsoft Excel - D:\Akta\Łochwice kotwice\OFFICE11\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Easy-WebPrint Add To Print List - C:\Program Files\Canon\Easy-WebPrint\Resource.dll () O8 - Extra context menu item: Easy-WebPrint High Speed Print - C:\Program Files\Canon\Easy-WebPrint\Resource.dll () O8 - Extra context menu item: Easy-WebPrint Preview - C:\Program Files\Canon\Easy-WebPrint\Resource.dll () O8 - Extra context menu item: Easy-WebPrint Print - C:\Program Files\Canon\Easy-WebPrint\Resource.dll () O9 - Extra Button: ArcaVir >> - {40525A66-DB98-480D-BCF9-7AF88C1AF438} - C:\Program Files\ArcaBit\WebExtensions\ie\ArcaIEExt.dll (ArcaBit sp. z o.o) O9 - Extra 'Tools' menuitem : ArcaVir >> - {40525A66-DB98-480D-BCF9-7AF88C1AF438} - C:\Program Files\ArcaBit\WebExtensions\ie\ArcaIEExt.dll (ArcaBit sp. z o.o) O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Akta\Łochwice kotwice\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Windows\System32\wpclsp.dll (Microsoft Corporation) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.231.1.206 217.172.224.160 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CD404D23-4732-46A1-A29E-85E234CD69A1}: DhcpNameServer = 89.231.1.206 217.172.224.160 O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\Dominik\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O24 - Desktop BackupWallPaper: C:\Users\Dominik\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-09-18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2014-04-20 13:21:15 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\NapiProjekt [2014-04-20 12:13:07 | 002,422,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll [2014-04-20 12:13:07 | 000,045,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll [2014-04-20 12:12:30 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll [2014-04-20 12:12:30 | 000,035,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll [2014-04-20 12:12:29 | 000,577,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll [2014-04-20 12:12:09 | 000,171,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll [2014-04-20 12:12:06 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe [2014-04-15 14:16:19 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio [2014-03-29 01:33:53 | 000,000,000 | ---D | C] -- C:\Users\Dominik\AppData\Roaming\IVONA ControlCenter [2014-03-29 01:25:36 | 000,000,000 | ---D | C] -- C:\Program Files\IVONA [2012-12-26 22:42:13 | 000,000,000 | ---D | C] -- C:\ProgramData\547FA78775198C980000547F530F940A [2012-12-22 10:22:25 | 000,293,376 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll [2012-12-22 10:22:24 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll [2012-12-14 03:10:09 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2012-12-14 03:10:08 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2012-12-14 03:10:08 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2012-12-14 03:10:08 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2012-12-14 03:10:08 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2012-12-14 03:10:07 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2012-12-14 03:10:07 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2012-12-14 03:10:05 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2012-12-14 03:06:31 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wdfres.dll [2012-12-14 03:06:28 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFPlatform.dll [2012-12-14 03:06:28 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winusb.dll [2012-12-14 03:06:27 | 000,047,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\WdfLdr.sys [2012-12-14 03:06:26 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFx.dll [2012-12-14 03:06:26 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFCoinstaller.dll [2012-12-13 06:59:48 | 002,048,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys [2012-12-13 06:59:46 | 000,376,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnet.dll [2012-12-13 06:59:46 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnsvr.exe [2012-12-13 06:59:37 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll [2012-12-01 11:07:42 | 000,163,840 | ---- | C] (CANON INC.) -- C:\Windows\BJPSUNST.EXE [2012-12-01 11:07:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities [2012-12-01 11:06:29 | 000,306,688 | ---- | C] (InstallShield Software Corporation) -- C:\Windows\IsUninst.exe [2012-12-01 11:04:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon PhotoRecord [2012-12-01 11:03:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon PIXMA iP1000 [2012-12-01 11:01:58 | 000,116,736 | ---- | C] (CANON INC.) -- C:\Windows\System32\CNMLM6e.DLL [2012-12-01 11:01:56 | 000,086,016 | R--- | C] (CANON INC.) -- C:\Windows\System32\CNMCP6e.exe [2012-12-01 11:01:40 | 000,000,000 | -H-D | C] -- C:\BJPrinter [2012-12-01 11:01:15 | 000,000,000 | ---D | C] -- C:\Windows\StartHtmico [2012-12-01 11:01:15 | 000,000,000 | ---D | C] -- C:\Windows\IP1000 [2012-12-01 11:01:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon PIXMA iP1000 Manual [2012-12-01 11:00:26 | 000,000,000 | ---D | C] -- C:\Program Files\Canon [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-12-26 23:10:57 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-12-26 23:08:53 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2012-12-26 23:08:53 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2012-12-26 23:08:53 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat [2012-12-26 23:08:00 | 000,001,038 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012-12-26 23:07:28 | 000,263,051 | ---- | M] () -- C:\ProgramData\nvModes.dat [2012-12-26 23:07:27 | 000,262,958 | ---- | M] () -- C:\ProgramData\nvModes.001 [2012-12-26 23:07:21 | 000,001,034 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012-12-26 11:43:11 | 000,672,312 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2012-12-26 11:43:11 | 000,596,168 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2012-12-26 11:43:11 | 000,130,688 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2012-12-26 11:43:11 | 000,104,242 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2012-12-22 10:40:08 | 000,342,960 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2012-12-16 14:12:54 | 000,034,304 | ---- | M] (Adobe Systems) -- C:\Windows\System32\atmlib.dll [2012-12-16 11:50:29 | 000,293,376 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll [2012-12-01 11:04:40 | 000,000,000 | ---- | M] () -- C:\Windows\OpPrintServer.INI [2012-12-01 00:44:04 | 000,004,608 | ---- | M] () -- C:\6XSourceFilter.grf [2012-11-30 18:39:52 | 000,697,272 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe [2012-11-30 18:39:52 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-12-14 03:06:38 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf [2012-12-14 03:06:38 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf [2012-12-01 11:04:40 | 000,000,000 | ---- | C] () -- C:\Windows\OpPrintServer.INI [2012-12-01 11:01:58 | 000,007,680 | ---- | C] () -- C:\Windows\System32\CNMVS6e.DLL [2012-09-19 05:41:07 | 000,000,014 | ---- | C] () -- C:\Windows\System32\SysInfo_6.dll [2012-09-19 05:38:17 | 000,000,245 | ---- | C] () -- C:\Windows\System32\AF15IRTBL.bin [2011-11-02 15:26:59 | 000,175,616 | ---- | C] () -- C:\Windows\System32\unrar.dll [2011-11-02 14:31:23 | 000,258,048 | ---- | C] () -- C:\Windows\System32\libFLAC.dll [2011-09-04 22:01:35 | 000,000,012 | ---- | C] () -- C:\Windows\bthservsdp.dat [2011-04-05 22:16:22 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat [2011-02-10 16:51:58 | 003,075,072 | ---- | C] () -- C:\Windows\System32\x264vfw.dll [2011-01-21 03:02:34 | 000,000,640 | RHS- | C] () -- C:\Users\Dominik\ntuser.pol [2010-12-29 01:23:14 | 000,079,360 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll [2010-12-19 21:17:08 | 000,000,680 | ---- | C] () -- C:\Users\Dominik\AppData\Local\d3d9caps.dat [2010-01-15 21:40:46 | 000,004,096 | -H-- | C] () -- C:\Users\Dominik\AppData\Local\keyfile3.drm [2010-01-08 00:04:05 | 000,000,635 | ---- | C] () -- C:\Users\Dominik\Europejska Akademia Dyplomacji European Academy of Diplomacy diplomats_pl DYPLOMACJA - FAQ.mht [2010-01-08 00:00:27 | 000,566,947 | ---- | C] () -- C:\Users\Dominik\Europejska Akademia Dyplomacji European Academy of Diplomacy diplomats_pl DYPLOMACJA - AMD6 opis.mht [2009-12-08 18:14:40 | 000,665,596 | ---- | C] () -- C:\Users\Dominik\NOKIA E52 NOWA!!!!!! (845053360) - Aukcje internetowe Allegro.mht [2009-12-04 14:15:52 | 000,702,568 | ---- | C] () -- C:\Users\Dominik\Plus2.mht [2009-12-04 14:11:30 | 000,699,925 | ---- | C] () -- C:\Users\Dominik\Plus1.mht [2009-12-04 14:08:15 | 000,700,535 | ---- | C] () -- C:\Users\Dominik\Plus.mht [2009-12-04 13:41:54 | 000,347,975 | ---- | C] () -- C:\Users\Dominik\Umowa OdNowa.mht [2009-11-28 23:24:24 | 000,658,955 | ---- | C] () -- C:\Users\Dominik\motoAllegro.mht [2009-09-01 23:02:05 | 000,024,206 | ---- | C] () -- C:\Users\Dominik\AppData\Roaming\UserTile.png [2009-07-05 15:48:12 | 000,000,266 | RHS- | C] () -- C:\ProgramData\ntuser.pol [2009-06-23 20:40:50 | 000,027,648 | ---- | C] () -- C:\Users\Dominik\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008-07-03 17:49:53 | 000,262,958 | ---- | C] () -- C:\ProgramData\nvModes.001 [2008-07-03 17:49:26 | 000,263,051 | ---- | C] () -- C:\ProgramData\nvModes.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2006-11-02 13:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012-06-08 18:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2009-04-11 07:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009-04-11 07:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2011-03-16 02:01:02 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\ArcaVirMicroScan [2010-07-13 18:34:55 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Gadu-Gadu 10 [2010-12-22 21:26:49 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\HTML Executable [2011-10-23 21:50:37 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\ipla [2014-03-29 01:34:08 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\IVONA ControlCenter [2012-11-23 03:40:02 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\IVONA Reader [2012-06-22 13:38:10 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\NapiProjekt [2010-06-21 16:48:33 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Nokia [2011-11-22 22:26:01 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\Notebook Hardware Control [2010-07-13 13:54:44 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\PC Suite [2009-09-01 23:02:04 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\PeerNetworking [2011-02-13 19:08:19 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\RDRM [2012-09-20 14:45:02 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\SuperMemo World [2011-11-13 17:36:12 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\VistaCodecs [2010-12-08 23:52:39 | 000,000,000 | ---D | M] -- C:\Users\Dominik\AppData\Roaming\WKPolska [2011-12-03 13:37:04 | 000,000,000 | ---D | M] -- C:\Users\Roch\AppData\Roaming\Gadu-Gadu 10 [2012-10-28 00:28:32 | 000,000,000 | ---D | M] -- C:\Users\Roch\AppData\Roaming\NapiProjekt [2012-08-31 13:28:14 | 000,000,000 | ---D | M] -- C:\Users\Roch\AppData\Roaming\PC Suite [2012-10-27 19:13:42 | 000,000,000 | ---D | M] -- C:\Users\Roch\AppData\Roaming\SuperMemo World [2011-03-13 17:08:04 | 000,000,000 | ---D | M] -- C:\Users\Rodzice\AppData\Roaming\Dr. Tax Light - PIT 2010 [2014-04-14 19:33:17 | 000,000,000 | ---D | M] -- C:\Users\Rodzice\AppData\Roaming\Expressivo [2010-05-24 14:32:52 | 000,000,000 | ---D | M] -- C:\Users\Rodzice\AppData\Roaming\Gadu-Gadu 10 [2012-06-09 19:42:51 | 000,000,000 | ---D | M] -- C:\Users\Rodzice\AppData\Roaming\HTML Executable [2011-12-10 00:53:09 | 000,000,000 | ---D | M] -- C:\Users\Rodzice\AppData\Roaming\ipla [2014-03-30 03:52:18 | 000,000,000 | ---D | M] -- C:\Users\Rodzice\AppData\Roaming\IVONA ControlCenter [2012-06-22 13:47:39 | 000,000,000 | ---D | M] -- C:\Users\Rodzice\AppData\Roaming\NapiProjekt [2010-06-21 17:20:54 | 000,000,000 | ---D | M] -- C:\Users\Rodzice\AppData\Roaming\Nokia [2011-11-22 22:25:50 | 000,000,000 | ---D | M] -- C:\Users\Rodzice\AppData\Roaming\Notebook Hardware Control [2010-05-24 14:30:52 | 000,000,000 | ---D | M] -- C:\Users\Rodzice\AppData\Roaming\OpenFM [2010-05-27 01:29:24 | 000,000,000 | ---D | M] -- C:\Users\Rodzice\AppData\Roaming\OpenOffice.org [2010-06-21 16:58:05 | 000,000,000 | ---D | M] -- C:\Users\Rodzice\AppData\Roaming\PC Suite [2010-03-07 17:24:45 | 000,000,000 | ---D | M] -- C:\Users\Rodzice\AppData\Roaming\PeerNetworking [2012-09-26 23:06:28 | 000,000,000 | ---D | M] -- C:\Users\Rodzice\AppData\Roaming\Plus Internet [2011-02-17 01:56:24 | 000,000,000 | ---D | M] -- C:\Users\Rodzice\AppData\Roaming\RDRM [2012-09-28 22:19:56 | 000,000,000 | ---D | M] -- C:\Users\Rodzice\AppData\Roaming\SuperMemo World [2010-12-16 22:06:49 | 000,000,000 | ---D | M] -- C:\Users\Rodzice\AppData\Roaming\VistaCodecs [2010-12-08 23:37:47 | 000,000,000 | ---D | M] -- C:\Users\Rodzice\AppData\Roaming\WKPolska [2011-03-17 02:18:50 | 000,000,000 | ---D | M] -- C:\Users\Rodzice\AppData\Roaming\Youtube Downloader HD [color=#E56717]========== Purity Check ==========[/color] < End of report >