OTL logfile created on: 2013-01-11 10:22:19 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = H:\ 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3.48 Gb Total Physical Memory | 2.35 Gb Available Physical Memory | 67.63% Memory free 6.96 Gb Paging File | 5.69 Gb Available in Paging File | 81.84% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 447.61 Gb Total Space | 148.44 Gb Free Space | 33.16% Space Free | Partition Type: NTFS Drive D: | 17.86 Gb Total Space | 1.92 Gb Free Space | 10.77% Space Free | Partition Type: NTFS Drive H: | 3.73 Gb Total Space | 3.28 Gb Free Space | 87.76% Space Free | Partition Type: FAT32 Computer Name: PATRYK-HP | User Name: patryk | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2013-01-11 10:29:38 | 000,602,112 | ---- | M] (OldTimer Tools) -- H:\OTL.exe PRC - [2012-12-27 14:17:16 | 000,200,336 | ---- | M] (http://www.goforfiles.com/) -- C:\Program Files (x86)\GoforFiles\GFFUpdater.exe PRC - [2012-11-28 16:34:18 | 000,793,600 | ---- | M] (Spigot, Inc.) -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe PRC - [2012-11-08 21:37:29 | 000,711,112 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe PRC - [2012-10-30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2012-10-06 17:35:53 | 000,245,168 | ---- | M] (http://yourfiledownloader.com) -- C:\Program Files (x86)\YourFileDownloader\YourFileUpdater.exe PRC - [2012-09-29 20:40:59 | 000,042,504 | ---- | M] (COMPANYVERS_NAME) -- C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbarsvc.exe PRC - [2012-09-03 08:13:08 | 000,188,760 | ---- | M] () -- C:\Program Files\Web Assistant\ExtensionUpdaterService.exe PRC - [2012-07-27 12:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2012-07-08 06:37:22 | 000,026,008 | ---- | M] (Uniblue Systems Ltd) -- C:\Program Files (x86)\Uniblue\SpeedUpMyPC\spmonitor.exe PRC - [2012-05-25 15:20:42 | 000,265,952 | ---- | M] () -- C:\Program Files (x86)\StartNow Toolbar\ToolbarUpdaterService.exe PRC - [2011-03-22 11:42:40 | 000,136,488 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe PRC - [2011-02-28 14:08:30 | 000,092,216 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe PRC - [2011-02-25 10:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE PRC - [2011-02-17 22:48:24 | 000,265,544 | ---- | M] (HP) -- C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe PRC - [2011-02-17 22:48:12 | 000,642,888 | ---- | M] (HP) -- C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe PRC - [2011-02-17 22:47:58 | 000,142,664 | ---- | M] (HP) -- C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe PRC - [2010-11-09 14:20:34 | 000,026,680 | ---- | M] (Hewlett-Packard Development Company, L.P.) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe PRC - [2010-04-23 11:00:00 | 000,514,232 | ---- | M] (EasyBits Software AS) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2012-10-30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV:[b]64bit:[/b] - [2012-09-13 14:26:50 | 001,259,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\dmwu.exe -- (WebOptimizer) SRV:[b]64bit:[/b] - [2012-09-03 08:13:08 | 000,188,760 | ---- | M] () [Auto | Running] -- C:\Program Files\Web Assistant\ExtensionUpdaterService.exe -- (Web Assistant Updater) SRV:[b]64bit:[/b] - [2011-04-02 08:54:06 | 000,204,288 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2011-04-01 23:06:22 | 000,365,568 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service) SRV:[b]64bit:[/b] - [2011-03-11 11:23:16 | 000,297,984 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Program Files\IDT\WDM\stacsv64.exe -- (STacSV) SRV:[b]64bit:[/b] - [2011-01-26 16:01:00 | 000,030,520 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Windows\SysNative\hpservice.exe -- (hpsrv) SRV:[b]64bit:[/b] - [2010-10-11 01:48:14 | 000,346,168 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe -- (HPClientSvc) SRV:[b]64bit:[/b] - [2010-09-22 17:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc) SRV:[b]64bit:[/b] - [2010-07-29 19:39:24 | 000,951,584 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins) SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-03-03 11:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Program Files\IDT\WDM\AESTSr64.exe -- (AESTFilters) SRV - [2013-01-09 20:46:17 | 000,251,400 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012-12-10 17:29:46 | 002,465,712 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2012-12-05 18:25:35 | 000,541,168 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2012-11-28 16:34:18 | 000,793,600 | ---- | M] (Spigot, Inc.) [Auto | Running] -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe -- (Application Updater) SRV - [2012-11-12 16:45:35 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2012-11-08 21:37:29 | 000,711,112 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe -- (vToolbarUpdater13.2.0) SRV - [2012-09-29 20:40:59 | 000,042,504 | ---- | M] (COMPANYVERS_NAME) [Auto | Running] -- C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbarsvc.exe -- (VideoDownloadConverter_4zService) SRV - [2012-09-06 02:25:06 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012-07-27 12:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2012-07-13 12:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012-05-25 15:20:42 | 000,265,952 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\StartNow Toolbar\ToolbarUpdaterService.exe -- (Updater Service for StartNow Toolbar) SRV - [2011-03-08 01:43:30 | 002,375,168 | ---- | M] (Realsil Microelectronics Inc.) [Auto | Running] -- C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe -- (IconMan_R) SRV - [2011-03-01 21:23:36 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc) SRV - [2011-02-28 14:08:30 | 000,092,216 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe -- (HPDrvMntSvc.exe) SRV - [2011-02-25 10:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (SeaPort) SRV - [2011-02-17 22:48:24 | 000,265,544 | ---- | M] (HP) [Auto | Running] -- C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe -- (FPLService) SRV - [2011-02-15 15:48:52 | 001,071,160 | ---- | M] (Hewlett-Packard Development Company L.P.) [On_Demand | Stopped] -- C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe -- (hpCMSrv) SRV - [2010-11-09 14:20:34 | 000,026,680 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe -- (HPWMISVC) SRV - [2010-10-12 18:59:12 | 000,206,072 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService) SRV - [2010-03-18 12:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2012-12-15 13:38:04 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt) DRV:[b]64bit:[/b] - [2012-12-15 13:38:03 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt) DRV:[b]64bit:[/b] - [2012-11-08 21:37:30 | 000,030,568 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtpx64.sys -- (avgtp) DRV:[b]64bit:[/b] - [2012-10-30 23:51:56 | 000,059,728 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi) DRV:[b]64bit:[/b] - [2012-10-30 23:51:55 | 000,984,144 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx) DRV:[b]64bit:[/b] - [2012-10-30 23:51:55 | 000,370,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP) DRV:[b]64bit:[/b] - [2012-10-30 23:51:55 | 000,071,600 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt) DRV:[b]64bit:[/b] - [2012-10-30 23:51:53 | 000,025,232 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk) DRV:[b]64bit:[/b] - [2012-10-15 17:59:28 | 000,054,072 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr) DRV:[b]64bit:[/b] - [2012-07-02 15:17:56 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV:[b]64bit:[/b] - [2012-03-01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2011-11-05 07:02:14 | 003,065,408 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX) DRV:[b]64bit:[/b] - [2011-09-02 19:58:07 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011-09-02 19:58:07 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2011-04-15 22:37:50 | 000,079,488 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_sata.sys -- (amd_sata) DRV:[b]64bit:[/b] - [2011-04-15 22:37:50 | 000,040,064 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_xata.sys -- (amd_xata) DRV:[b]64bit:[/b] - [2011-04-02 11:42:30 | 009,256,960 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2011-04-02 08:16:22 | 000,300,544 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2011-03-25 01:20:36 | 000,337,512 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsPStor.sys -- (RSPCIESTOR) DRV:[b]64bit:[/b] - [2011-03-18 06:04:20 | 000,188,544 | ---- | M] (Advanced Micro Devices, INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdxhc.sys -- (amdxhc) DRV:[b]64bit:[/b] - [2011-03-18 06:04:18 | 000,087,168 | ---- | M] (Advanced Micro Devices, INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdhub30.sys -- (amdhub30) DRV:[b]64bit:[/b] - [2011-03-11 11:23:16 | 000,521,728 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA) DRV:[b]64bit:[/b] - [2011-02-17 02:11:08 | 000,428,136 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2011-01-26 16:01:00 | 000,043,320 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelerometer.sys -- (Accelerometer) DRV:[b]64bit:[/b] - [2011-01-26 16:01:00 | 000,030,008 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hpdskflt.sys -- (hpdskflt) DRV:[b]64bit:[/b] - [2010-12-17 03:28:38 | 001,403,440 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:[b]64bit:[/b] - [2010-12-16 09:06:46 | 000,047,232 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter) DRV:[b]64bit:[/b] - [2010-11-21 04:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2010-11-17 18:04:32 | 000,115,216 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService) DRV:[b]64bit:[/b] - [2010-07-28 09:13:50 | 000,031,088 | ---- | M] (CyberLink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\clwvd.sys -- (clwvd) DRV:[b]64bit:[/b] - [2010-07-20 22:26:42 | 000,102,952 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio) DRV:[b]64bit:[/b] - [2010-07-20 22:26:38 | 000,135,720 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt) DRV:[b]64bit:[/b] - [2010-07-20 22:26:34 | 000,021,544 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid) DRV:[b]64bit:[/b] - [2010-07-14 15:25:38 | 000,344,616 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwampfl.sys -- (btwampfl) DRV:[b]64bit:[/b] - [2010-03-02 23:37:40 | 000,039,464 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap) DRV:[b]64bit:[/b] - [2010-02-18 09:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64) DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-06-10 22:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92) DRV:[b]64bit:[/b] - [2009-06-10 22:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac) DRV:[b]64bit:[/b] - [2009-06-10 22:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA) DRV:[b]64bit:[/b] - [2009-06-10 21:35:35 | 000,408,960 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvm62x64.sys -- (NVENETFD) DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-03-18 16:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi) DRV:[b]64bit:[/b] - [2005-08-24 14:57:05 | 000,092,160 | ---- | M] (Protection Technology) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sfvfs02.sys -- (sfvfs02) DRV:[b]64bit:[/b] - [2005-08-10 13:46:20 | 000,068,608 | ---- | M] (Protection Technology) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sfdrv01.sys -- (sfdrv01) DRV:[b]64bit:[/b] - [2005-05-16 14:21:16 | 000,007,168 | ---- | M] (Protection Technology) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sfhlp02.sys -- (sfhlp02) DRV - [2010-11-01 05:08:46 | 000,014,544 | ---- | M] (OpenLibSys.org) [File_System | On_Demand | Stopped] -- C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys -- (WinRing0_1_2_0) DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPNTDF IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://searchfunmoods.com/?f=1&a=nv1&ir=nv1&cd=2XzuyEtN2Y1L1QzuyB0AyBzytDyD0AyB0A0CtA0ByC0DzytCtN0D0Tzu0CtAyDtDtN1L2XzutBtFtBtFtCtFyEtDyB&cr=1602198999 IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{36797539-4331-4F47-8080-547665B76732}: "URL" = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B}: "URL" = http://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=nv1&ir=nv1&cd=2XzuyEtN2Y1L1QzuyB0AyBzytDyD0AyB0A0CtA0ByC0DzytCtN0D0Tzu0CtAyDtDtN1L2XzutBtFtBtFtCtFyEtDyB&cr=1602198999 IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://pl.wikipedia.org/wiki/Special:Search?search={searchTerms} IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_medium=vlt2&from=vlt2&uid=Hitachi_HTS547550A9E384_J2150050DBYUADDBYUADX&ts=1353229511 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://websearch.just-browse.info/ IE - HKLM\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\prxtbuTor.dll (Conduit Ltd.) IE - HKLM\..\SearchScopes,DefaultScope = {B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox IE - HKLM\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF IE - HKLM\..\SearchScopes\{36797539-4331-4F47-8080-547665B76732}: "URL" = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} IE - HKLM\..\SearchScopes\{B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B}: "URL" = http://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=nv1&ir=nv1&cd=2XzuyEtN2Y1L1QzuyB0AyBzytDyD0AyB0A0CtA0ByC0DzytCtN0D0Tzu0CtAyDtDtN1L2XzutBtFtBtFtCtFyEtDyB&cr=1602198999 IE - HKLM\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.just-browse.info/?l=1&q={searchTerms} IE - HKLM\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://pl.wikipedia.org/wiki/Special:Search?search={searchTerms} IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&crg=3.1010000&st=18&q={searchTerms}&barid={79EC76CF-9C4B-11E1-BEEA-402CF42469D5} IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default Download Directory = C:\Users\Public\Videos\Sample Videos IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com/?utm_source=b&utm_medium=vlt2&from=vlt2&uid=Hitachi_HTS547550A9E384_J2150050DBYUADDBYUADX&ts=1353229511 IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://isearch.babylon.com/?affID=116632&tl=gkn487600&babsrc=HP_ss&mntrId=423e6d91000000000000402cf438c15f IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.google.pl/ IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\..\URLSearchHook: {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files (x86)\Dealio Toolbar\IE\6.6\dealioToolbarIE.dll (Spigot, Inc.) IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\..\URLSearchHook: {93a3111f-4f74-4ed8-895e-d9708497629e} - No CLSID value found IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\..\SearchScopes,DefaultScope = {7F15C74E-7E71-4260-A7E3-1D706938A14D} IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://isearch.babylon.com/?q={searchTerms}&affID=116632&tl=gkn487600&babsrc=SP_ss&mntrId=423e6d91000000000000402cf438c15f IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\..\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}: "URL" = http://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\..\SearchScopes\{36797539-4331-4F47-8080-547665B76732}: "URL" = http://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\..\SearchScopes\{70BA3E6B-1059-2266-0B2C-40E4A85231B8}: "URL" = http://www.ddlstart.com/s/?q={searchTerms}&src=defsearch&provider=&provider_name=yahoo&provider_code=&partner_id=750&product_id=872&affiliate_id=&channel=&toolbar_id=200&toolbar_version=2.5.0&install_country=PL&install_date=20120717&user_guid=0401A7C1820A4BE99D280AB08C5398D8&machine_id=03a6ee44e44a58366ccbb0fa14035f7f&browser=IE&os=win&os_version=6.1-x64-SP1&iesrc={referrer:source} IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\..\SearchScopes\{7F15C74E-7E71-4260-A7E3-1D706938A14D}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=616163&p={searchTerms} IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = https://isearch.avg.com/search?cid={BE67BAE6-A6C2-4607-B5C6-3BF79C07BFCC}&mid=9f9b05cfa4f1462d88ed791614ad6076-ebd58b056c5d18503b3a7d24240404407a839c21&lang=pl&ds=xn011&pr=sa&d=2012-09-08 07:21:20&v=12.2.0.5&sap=dsp&q={searchTerms} IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\..\SearchScopes\{B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B}: "URL" = http://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=nv1&ir=nv1&cd=2XzuyEtN2Y1L1QzuyB0AyBzytDyD0AyB0A0CtA0ByC0DzytCtN0D0Tzu0CtAyDtDtN1L2XzutBtFtBtFtCtFyEtDyB&cr=1602198999 IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.just-browse.info/?l=1&q={searchTerms} IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = http://mystart.incredibar.com/mb128/?search={searchTerms}&loc=IB_DS&a=6OyFr0tyjS&i=26 IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\..\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}: "URL" = http://pl.wikipedia.org/wiki/Special:Search?search={searchTerms} IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\..\SearchScopes\{DB6BBC42-ECEC-4584-9A49-31C0EF8CA31E}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2786678 IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\..\SearchScopes\{ED1DF8B7-62A3-4C27-A69A-CB5525CF83C6}: "URL" = http://search.aol.pl/aol/search?s_it=tb50winamp&q={searchTerms} IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = http://search.sweetim.com/search.asp?src=6&st=2&q={searchTerms}&barid={79EC76CF-9C4B-11E1-BEEA-402CF42469D5} IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\..\SearchScopes\{F67E0F87-69E2-48A6-81AE-C668394A1CBA}: "URL" = http://search.softonic.com/MON00006/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=504 IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)" FF - prefs.js..browser.search.defaultenginename,S: S", "WebSearch" FF - prefs.js..browser.search.defaultthis.engineName: "" FF - prefs.js..browser.search.defaulturl: "http://websearch.just-browse.info/?l=1&q=" FF - prefs.js..browser.search.order.1: "WebSearch" FF - prefs.js..browser.search.order.1,S: S", "WebSearch" FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&ilc=12&type=616163" FF - prefs.js..browser.search.selectedEngine: "Funmoods" FF - prefs.js..browser.search.selectedEngine,S: S", "WebSearch" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://home.mywebsearch.com/index.jhtml?ptb=ADB00EE1-F17C-42BF-8D03-1EE4343767EA&n=77ee19f9&ptnrS=HJxdm007YYpl&si=CLbHxbTF27ICFUhe3god0FAADg" FF - prefs.js..extensions.enabledAddons: ffxtlbr@funmoods.com:1.5.1 FF - prefs.js..extensions.enabledAddons: {5ddeb737-082c-48fb-8c06-aa4b38d61e5f}:1.0 FF - prefs.js..extensions.enabledAddons: 4zffxtbr@VideoDownloadConverter_4z.com:2.50.0.65474 FF - prefs.js..extensions.enabledAddons: IplextoALL@ALLPlayer.org:0.7.0 FF - prefs.js..extensions.enabledAddons: YouTubetoALL@ALLPlayer.org:0.8.3 FF - prefs.js..keyword.URL: "http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?st=kwd&ptb=ADB00EE1-F17C-42BF-8D03-1EE4343767EA&n=77ee19f9&ind=2012092921&id=HJxdm007YYpl&ptnrS=HJxdm007YYpl&si=CLbHxbTF27ICFUhe3god0FAADg&searchfor=" FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "Yahoo" FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: "" FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "Yahoo" FF - prefs.js..browser.startup.homepage: "http://www.v9.com/?utm_source=b&utm_medium=vlt2&from=vlt2&uid=Hitachi_HTS547550A9E384_J2150050DBYUADDBYUADX&ts=1353229511" FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "" FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_146.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\13.2.0\\npsitesafety.dll () FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_35: C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69: C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@VideoDownloadConverter_4z.com/Plugin: C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll (MindSpark) FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll () FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\patryk\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft) 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\PROGRAM FILES\WEB ASSISTANT\FIREFOX [2012-09-14 07:54:14 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\FireFoxExt\13.2.0.5 [2012-11-08 21:37:42 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\Program Files\Web Assistant\Firefox [2012-09-14 07:54:14 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\4zffxtbr@VideoDownloadConverter_4z.com: C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin [2012-09-29 20:41:04 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-11-15 19:53:29 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-09-29 20:49:03 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012-08-26 10:09:42 | 000,000,000 | ---D | M] (No name found) -- C:\Users\patryk\AppData\Roaming\mozilla\Extensions [2012-01-06 13:06:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\patryk\AppData\Roaming\mozilla\Firefox\extensions [2012-01-06 13:06:45 | 000,000,000 | ---D | M] (uTorrentBar Community Toolbar) -- C:\Users\patryk\AppData\Roaming\mozilla\Firefox\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} [2013-01-05 10:33:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\patryk\AppData\Roaming\mozilla\Firefox\Profiles\extensions [2012-12-15 14:58:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\patryk\AppData\Roaming\mozilla\Firefox\Profiles\extensions\extensions [2012-06-19 16:36:07 | 000,000,000 | ---D | M] (OneClickDownloader) -- C:\Users\patryk\AppData\Roaming\mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com [2012-09-29 20:41:04 | 000,000,000 | ---D | M] (VideoDownloadConverter) -- C:\Users\patryk\AppData\Roaming\mozilla\Firefox\Profiles\extensions\extensions\4zffxtbr@VideoDownloadConverter_4z.com [2012-12-15 14:58:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\patryk\AppData\Roaming\mozilla\Firefox\Profiles\extensions\extensions\staged [2013-01-06 11:51:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\patryk\AppData\Roaming\mozilla\Firefox\Profiles\nkd4d90u.default\extensions [2013-01-06 11:51:52 | 000,000,000 | ---D | M] (VideoDownloadConverter) -- C:\Users\patryk\AppData\Roaming\mozilla\Firefox\Profiles\nkd4d90u.default\extensions\4zffxtbr@VideoDownloadConverter_4z.com [2012-12-29 12:37:46 | 000,000,000 | ---D | M] (Browse2save) -- C:\Users\patryk\AppData\Roaming\mozilla\Firefox\Profiles\nkd4d90u.default\extensions\50d7011791fb7@50d7011791fef.com [2012-12-29 12:37:47 | 000,000,000 | ---D | M] (Funmoods.com) -- C:\Users\patryk\AppData\Roaming\mozilla\Firefox\Profiles\nkd4d90u.default\extensions\ffxtlbr@funmoods.com [2012-12-15 14:58:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\patryk\AppData\Roaming\mozilla\Firefox\Profiles\toolbar@ask.com\extensions [2012-09-29 20:41:04 | 000,000,000 | ---D | M] (VideoDownloadConverter) -- C:\Users\patryk\AppData\Roaming\mozilla\Firefox\Profiles\toolbar@ask.com\extensions\4zffxtbr@VideoDownloadConverter_4z.com [2012-12-15 14:58:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\patryk\AppData\Roaming\mozilla\Firefox\Profiles\toolbar@ask.com\extensions\staged [2012-11-29 15:47:10 | 000,197,580 | ---- | M] () (No name found) -- C:\Users\patryk\AppData\Roaming\mozilla\firefox\profiles\nkd4d90u.default\extensions\ftdownloader@ftdownloader.com.xpi [2012-07-31 12:59:18 | 000,221,380 | ---- | M] () (No name found) -- C:\Users\patryk\AppData\Roaming\mozilla\firefox\profiles\nkd4d90u.default\extensions\gophoto@gophoto.it.xpi [2013-01-06 11:51:52 | 000,010,043 | ---- | M] () (No name found) -- C:\Users\patryk\AppData\Roaming\mozilla\firefox\profiles\nkd4d90u.default\extensions\IplextoALL@ALLPlayer.org.xpi [2013-01-06 11:51:53 | 000,013,745 | ---- | M] () (No name found) -- C:\Users\patryk\AppData\Roaming\mozilla\firefox\profiles\nkd4d90u.default\extensions\YouTubetoALL@ALLPlayer.org.xpi [2012-12-29 12:37:59 | 000,002,329 | ---- | M] () -- C:\Users\patryk\AppData\Roaming\mozilla\firefox\profiles\nkd4d90u.default\searchplugins\Funmoods.xml [2012-09-29 20:49:09 | 000,009,650 | ---- | M] () -- C:\Users\patryk\AppData\Roaming\mozilla\firefox\profiles\nkd4d90u.default\searchplugins\my-web-search.xml [2012-12-10 06:19:51 | 000,003,978 | ---- | M] () -- C:\Users\patryk\AppData\Roaming\mozilla\firefox\profiles\nkd4d90u.default\searchplugins\sweetim.xml [2012-12-23 13:45:07 | 000,000,556 | ---- | M] () -- C:\Users\patryk\AppData\Roaming\mozilla\firefox\profiles\nkd4d90u.default\searchplugins\WebSearch.xml [2012-09-30 06:52:13 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions [2013-01-05 10:32:40 | 000,000,000 | ---D | M] ("BitAccelerator") -- C:\Program Files (x86)\Mozilla Firefox\extensions\{5ddeb737-082c-48fb-8c06-aa4b38d61e5f} [2012-07-29 12:43:26 | 000,000,000 | ---D | M] (Babylon) -- C:\Program Files (x86)\Mozilla Firefox\extensions\ffxtlbr@babylon.com [2012-09-30 06:52:13 | 000,000,000 | ---D | M] (TrueSuite Website Logon) -- C:\Program Files (x86)\Mozilla Firefox\extensions\websitelogon@truesuite.com [2012-09-06 02:26:03 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2012-09-06 03:57:09 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2012-11-08 21:37:33 | 000,003,573 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml [2012-12-27 14:17:36 | 000,002,354 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml [2012-09-06 03:57:10 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2012-09-06 03:57:10 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2012-09-06 03:57:10 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2012-09-06 03:57:10 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2012-09-06 03:57:09 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - homepage: http://isearch.babylon.com/?affID=116632&tl=gkn487600&babsrc=HP_ss&mntrId=423e6d91000000000000402cf438c15f CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaoeljheghbhpgohamdianlpdglflj\7.15.4.24170_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\aepeildmfnnehghlknddebgjghlompfe\1.0_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh\1.0_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh\1.0_1\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\bejbohlohkkgompgecdcbbglkpjfjgdj\2.3.18.20_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmbgdmijgopggjaelphhajpjldacbnba\1.0_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodddioamolcibagionmmobehnbhiakf\1.0.5_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\6.0_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\6.0_1\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\dednnpigldgdbpgcdpfppmlcnnbjciel\2.6_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\dednnpigldgdbpgcdpfppmlcnnbjciel\2.6_1\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\eknafepcdbpokikiddaibmdlmfkeakep\1.0_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjodimcoghnpbakimbiacchpgcfdhlea\5.1_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkjoindjjcmbdpbfppabdgflnkgbbcli\1.0_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_1\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\incfcgceegpikennjoplhfghaaikdgei\2.5.0_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\Copy of CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_1\Copy of CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_1\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_1\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jplinpmadfkdgipabgcdchbdikologlh\1.5_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmfnjapncjennggamgdhfihplfkpdklb\3.8_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\13.2.0.5_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\13.2.0.5_0\.bak CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc\1.0.2_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk\1.4_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.2_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaoeljheghbhpgohamdianlpdglflj\7.15.4.24170_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\aepeildmfnnehghlknddebgjghlompfe\1.0_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh\1.0_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh\1.0_1\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\bejbohlohkkgompgecdcbbglkpjfjgdj\2.3.18.20_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmbgdmijgopggjaelphhajpjldacbnba\1.0_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\bodddioamolcibagionmmobehnbhiakf\1.0.5_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\6.0_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\6.0_1\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\dednnpigldgdbpgcdpfppmlcnnbjciel\2.6_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\dednnpigldgdbpgcdpfppmlcnnbjciel\2.6_1\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\eknafepcdbpokikiddaibmdlmfkeakep\1.0_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjodimcoghnpbakimbiacchpgcfdhlea\5.1_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkjoindjjcmbdpbfppabdgflnkgbbcli\1.0_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_1\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\incfcgceegpikennjoplhfghaaikdgei\2.5.0_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\Copy of CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_1\Copy of CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_1\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_1\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\jplinpmadfkdgipabgcdchbdikologlh\1.5_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmfnjapncjennggamgdhfihplfkpdklb\3.8_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\13.2.0.5_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\13.2.0.5_0\.bak CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc\1.0.2_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk\1.4_0\ CHR - Extension: No name found = C:\Users\patryk\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco\1.2_0\ O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:[b]64bit:[/b] - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) O2:[b]64bit:[/b] - BHO: (Web Assistant) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension64.dll () O2:[b]64bit:[/b] - BHO: (TrueSuite Website Log On) - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll (HP) O2:[b]64bit:[/b] - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (Browser Companion Helper) - {00cbb66b-1d3b-46d3-9577-323a336acb50} - C:\Program Files (x86)\BrowserCompanion\jsloader.dll ( ) O2 - BHO: (Dealio Toolbar) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files (x86)\Dealio Toolbar\IE\6.6\dealioToolbarIE.dll (Spigot, Inc.) O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO) O2 - BHO: (Toolbar BHO) - {312f84fb-8970-4fd3-bddb-7012eac4afc9} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll (MindSpark) O2 - BHO: (Web Assistant) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension32.dll () O2 - BHO: (ALLYouTubeDownloader) - {61DB16C5-B733-43F4-872E-B20DC9E72740} - C:\Program Files (x86)\ALLYouTubeDownloader\ALLYouTubeDownloader.dll (ALLCinema Ltd.) O2 - BHO: (StartNow Toolbar Helper) - {6E13D095-45C3-4271-9475-F3B48227DD9F} - C:\Program Files (x86)\StartNow Toolbar\Toolbar32.dll () O2 - BHO: (Incredibar.com Helper Object) - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll (Montera Technologeis LTD) O2 - BHO: (Funmoods Helper Object) - {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} - C:\Program Files (x86)\Funmoods\1.5.23.22\bh\escort.dll (Funmoods BHO) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (TrueSuite Website Log On) - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll (HP) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\13.2.0.5\AVG Secure Search_toolbar.dll () O2 - BHO: (Browser Companion Helper Verifier) - {963B125B-8B21-49A2-A3A8-E37092276531} - C:\Program Files (x86)\BrowserCompanion\updatebhoWin32.dll ( ) O2 - BHO: (Browse2save Class) - {AE200E96-2355-DDA0-37D2-38A010A20402} - C:\ProgramData\Browse2save\50d7011792137.ocx () O2 - BHO: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\prxtbuTor.dll (Conduit Ltd.) O2 - BHO: (Search Assistant BHO) - {c547c6c2-561b-4169-a2a5-20ba771ca93b} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll (MindSpark) O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O2 - BHO: (Softonic Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) O2 - BHO: (Softonic Helper Object) - {E87806B5-E908-45FD-AF5E-957D83E58E68} - C:\Program Files (x86)\Softonic\Softonic\1.5.24.3\bh\Softonic.dll (Softonic.com) O2 - BHO: (SweetPacks Browser Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O2 - BHO: (Yontoo) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll (Yontoo LLC) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) O3 - HKLM\..\Toolbar: (Dealio Toolbar) - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files (x86)\Dealio Toolbar\IE\6.6\dealioToolbarIE.dll (Spigot, Inc.) O3 - HKLM\..\Toolbar: (VideoDownloadConverter) - {48586425-6bb7-4f51-8dc6-38c88e3ebb58} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll (MindSpark) O3 - HKLM\..\Toolbar: (Softonic Toolbar) - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - C:\Program Files (x86)\Softonic\Softonic\1.5.24.3\SoftonicTlbr.dll (Softonic.com) O3 - HKLM\..\Toolbar: (StartNow Toolbar) - {5911488E-9D1E-40ec-8CBB-06B231CC153F} - C:\Program Files (x86)\StartNow Toolbar\Toolbar32.dll () O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\13.2.0.5\AVG Secure Search_toolbar.dll () O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.) O3 - HKLM\..\Toolbar: (Funmoods Toolbar) - {A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} - C:\Program Files (x86)\Funmoods\1.5.23.22\escorTlbr.dll (Funmoods) O3 - HKLM\..\Toolbar: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\prxtbuTor.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Softonic Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKLM\..\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O3 - HKLM\..\Toolbar: (Incredibar Toolbar) - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Program Files (x86)\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll (Montera Technologeis LTD) O3 - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found. O3 - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\..\Toolbar\WebBrowser: (uTorrentBar Toolbar) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - C:\Program Files (x86)\uTorrentBar\prxtbuTor.dll (Conduit Ltd.) O3 - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001\..\Toolbar\WebBrowser: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.) O4:[b]64bit:[/b] - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Development Company, L.P.) O4 - HKLM..\Run: [HPConnectionManager] C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe (Hewlett-Packard Development Company L.P.) O4 - HKLM..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe (Hewlett-Packard Development Company, L.P.) O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001..\Run: [RGSC] C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe (Take-Two Interactive Software, Inc.) O4 - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001..\Run: [SpeedUpMyPC] C:\Program Files (x86)\Uniblue\SpeedUpMyPC\launcher.exe (Uniblue Systems Ltd) O4 - HKU\S-1-5-21-1184120399-3153701421-1720054441-1001..\Run: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent File not found O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: EnableShellExecuteHooks = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:[b]64bit:[/b] - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found O8:[b]64bit:[/b] - Extra context menu item: Download with &Media Finder - C:\Program Files (x86)\Media Finder\hook.html File not found O8:[b]64bit:[/b] - Extra context menu item: Search the Web - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\MenuExt.html () O8:[b]64bit:[/b] - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O8:[b]64bit:[/b] - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Download with &Media Finder - C:\Program Files (x86)\Media Finder\hook.html File not found O8 - Extra context menu item: Search the Web - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\MenuExt.html () O8 - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O8 - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9:[b]64bit:[/b] - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9:[b]64bit:[/b] - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra Button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041) O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041) O9 - Extra Button: Wyślij do interfejsu Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : Wyślij do urządzenia &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O10 - NameSpace_Catalog5\Catalog_Entries\000000000010 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O16:[b]64bit:[/b] - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 10.3.0) O16:[b]64bit:[/b] - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16:[b]64bit:[/b] - DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 1.7.0_03) O16:[b]64bit:[/b] - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_03-windows-i586.cab (Java Plug-in 1.7.0_03) O16:[b]64bit:[/b] - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35) O16 - DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A6421EB9-4BC3-4586-AD95-E012E730DA82}: DhcpNameServer = 172.168.31.32 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B4A6D1D0-93D9-4A91-8DF9-D4023F3982A5}: DhcpNameServer = 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\base64 - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\chrome - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\prox - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\viprotocol - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Handler\base64 {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd) O18 - Protocol\Handler\chrome {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd) O18 - Protocol\Handler\prox {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\13.2.0\ViProtocol.dll () O20 - AppInit_DLLs: (c:\progra~2\mocaflix\sprote~1.dll) - c:\Program Files (x86)\MocaFlix\sprotector.dll () O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (C:\PROGRA~3\dsgsdgdsgdsgw.bat) - C:\ProgramData\dsgsdgdsgdsgw.bat () O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (C:\PROGRA~3\dsgsdgdsgdsgw.bat) - C:\ProgramData\dsgsdgdsgdsgw.bat () O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll (EasyBits Software Corp.) O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{7e44bbfe-c410-11e1-9973-402cf42469d5}\Shell - "" = AutoRun O33 - MountPoints2\{7e44bbfe-c410-11e1-9973-402cf42469d5}\Shell\AutoRun\command - "" = G:\Baldur.exe O33 - MountPoints2\{f65a04b6-ff04-11e1-86fb-402cf42469d5}\Shell - "" = AutoRun O33 - MountPoints2\{f65a04b6-ff04-11e1-86fb-402cf42469d5}\Shell\AutoRun\command - "" = F:\Setup.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2013-01-11 09:44:31 | 000,000,000 | ---D | C] -- C:\Windows\pss [2013-01-10 18:23:10 | 000,000,000 | -HSD | C] -- C:\found.000 [2013-01-10 14:50:16 | 000,000,000 | ---D | C] -- C:\Kaspersky Rescue Disk 10.0 [2013-01-09 21:35:53 | 000,750,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll [2013-01-09 21:35:53 | 000,492,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll [2013-01-09 21:33:46 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncrypt.dll [2013-01-09 21:33:45 | 000,800,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usp10.dll [2013-01-09 21:33:40 | 000,046,592 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\fpb.rs [2013-01-09 21:33:40 | 000,045,568 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\oflc-nz.rs [2013-01-09 21:33:40 | 000,045,568 | ---- | C] (Microsoft) -- C:\Windows\SysNative\oflc-nz.rs [2013-01-09 21:33:40 | 000,043,520 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\csrr.rs [2013-01-09 21:33:40 | 000,043,520 | ---- | C] (Microsoft) -- C:\Windows\SysNative\csrr.rs [2013-01-09 21:33:39 | 000,046,592 | ---- | C] (Microsoft) -- C:\Windows\SysNative\fpb.rs [2013-01-09 21:33:39 | 000,044,544 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\pegibbfc.rs [2013-01-09 21:33:39 | 000,044,544 | ---- | C] (Microsoft) -- C:\Windows\SysNative\pegibbfc.rs [2013-01-09 21:33:39 | 000,040,960 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\cob-au.rs [2013-01-09 21:33:39 | 000,040,960 | ---- | C] (Microsoft) -- C:\Windows\SysNative\cob-au.rs [2013-01-09 21:33:39 | 000,030,720 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\usk.rs [2013-01-09 21:33:39 | 000,030,720 | ---- | C] (Microsoft) -- C:\Windows\SysNative\usk.rs [2013-01-09 21:33:39 | 000,015,360 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\djctq.rs [2013-01-09 21:33:39 | 000,015,360 | ---- | C] (Microsoft) -- C:\Windows\SysNative\djctq.rs [2013-01-09 21:33:38 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wpc.dll [2013-01-09 21:33:38 | 000,021,504 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\grb.rs [2013-01-09 21:33:38 | 000,021,504 | ---- | C] (Microsoft) -- C:\Windows\SysNative\grb.rs [2013-01-09 21:33:38 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\pegi-pt.rs [2013-01-09 21:33:38 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysNative\pegi-pt.rs [2013-01-09 21:33:38 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\pegi.rs [2013-01-09 21:33:38 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysNative\pegi.rs [2013-01-09 21:33:37 | 002,746,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gameux.dll [2013-01-09 21:33:37 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gameux.dll [2013-01-09 21:33:37 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Wpc.dll [2013-01-09 21:33:33 | 000,051,712 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\esrb.rs [2013-01-09 21:33:32 | 000,055,296 | ---- | C] (Microsoft) -- C:\Windows\SysNative\cero.rs [2013-01-09 21:33:32 | 000,051,712 | ---- | C] (Microsoft) -- C:\Windows\SysNative\esrb.rs [2013-01-09 21:33:32 | 000,023,552 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\oflc.rs [2013-01-09 21:33:32 | 000,023,552 | ---- | C] (Microsoft) -- C:\Windows\SysNative\oflc.rs [2013-01-09 21:33:32 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\pegi-fi.rs [2013-01-09 21:33:32 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\SysNative\pegi-fi.rs [2013-01-09 21:33:31 | 000,055,296 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\cero.rs [2013-01-09 21:31:50 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhost.exe [2013-01-06 15:07:03 | 000,000,000 | ---D | C] -- C:\Users\patryk\Desktop\config [2013-01-06 13:40:42 | 000,000,000 | ---D | C] -- C:\confing [2013-01-04 18:55:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BitAccelerator [2013-01-04 18:55:15 | 000,000,000 | ---D | C] -- C:\Users\patryk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenBitCoin [2013-01-04 18:55:09 | 000,000,000 | ---D | C] -- C:\Users\patryk\Desktop\Downloads [2013-01-04 18:55:01 | 000,000,000 | ---D | C] -- C:\ProgramData\OpenBitCoin [2013-01-04 18:55:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenBitCoin [2013-01-04 18:54:59 | 000,000,000 | ---D | C] -- C:\Users\patryk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DirectDownloader [2013-01-03 18:07:45 | 000,000,000 | ---D | C] -- C:\Users\patryk\Documents\GTA LC User Files [2013-01-03 17:48:35 | 000,000,000 | ---D | C] -- C:\Users\patryk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rockstar Games [2013-01-03 17:48:32 | 000,000,000 | ---D | C] -- C:\Users\patryk\AppData\Roaming\InstallShield Installation Information [2013-01-03 17:48:08 | 000,000,000 | ---D | C] -- C:\Users\patryk\Desktop\gta_mod_installer_v5.0_beta [2013-01-03 15:08:16 | 000,000,000 | ---D | C] -- C:\Users\patryk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Urządzenia interfejsu Bluetooth [2013-01-03 10:46:39 | 000,000,000 | ---D | C] -- C:\Users\patryk\AppData\Roaming\hewlett-packard [2013-01-01 18:32:34 | 000,000,000 | ---D | C] -- C:\Users\patryk\Desktop\kira [2013-01-01 17:55:05 | 000,000,000 | ---D | C] -- C:\Users\patryk\Desktop\mugenek [2012-12-31 20:13:07 | 000,000,000 | ---D | C] -- C:\Users\patryk\Desktop\GTA San Andreas [2012-12-31 14:08:37 | 000,000,000 | ---D | C] -- C:\Users\patryk\AppData\Roaming\.minecraft [2012-12-30 17:26:31 | 000,000,000 | ---D | C] -- C:\Users\patryk\Documents\The Witcher [2012-12-30 17:26:31 | 000,000,000 | ---D | C] -- C:\Users\patryk\AppData\Local\The Witcher [2012-12-30 17:15:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wiedźmin Edycja rozszerzona [2012-12-30 17:00:03 | 000,000,000 | ---D | C] -- C:\Users\patryk\Desktop\forge~ [2012-12-30 16:50:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\The Witcher Enhanced Edition [2012-12-30 16:50:52 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\The Witcher [2012-12-30 16:45:25 | 000,000,000 | ---D | C] -- C:\Users\patryk\Desktop\Millenaire3.3.2 [2012-12-30 16:09:42 | 000,000,000 | ---D | C] -- C:\Users\patryk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Buena Vista Games [2012-12-30 16:08:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Buena Vista Games [2012-12-30 16:01:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Buena Vista Games [2012-12-30 16:01:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Buena Vista Games [2012-12-30 15:36:15 | 000,000,000 | ---D | C] -- C:\Users\patryk\Desktop\Escape By pl.Judasz [2012-12-29 18:31:28 | 000,000,000 | ---D | C] -- C:\Users\patryk\Documents\Bus-Simulator [2012-12-29 18:30:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Techland [2012-12-29 18:30:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Techland [2012-12-29 10:08:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McDonald's Dragons [2012-12-29 10:08:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\McDonaldsDragons [2012-12-28 19:12:36 | 000,000,000 | ---D | C] -- C:\Users\patryk\Desktop\Epic Jump Map Christmas Trolling [2012-12-28 18:55:37 | 000,000,000 | ---D | C] -- C:\Users\patryk\Desktop\IceMan [2012-12-28 17:59:51 | 000,000,000 | ---D | C] -- C:\Users\patryk\Desktop\Intro [2012-12-28 16:55:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ubisoft [2012-12-28 16:43:57 | 000,000,000 | ---D | C] -- C:\Users\patryk\Desktop\Następny odcinek [2012-12-28 14:35:58 | 001,347,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvbvm50.dll [2012-12-28 14:35:56 | 000,129,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comdlg32.ocx [2012-12-28 14:35:50 | 000,604,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comctl32.ocx [2012-12-28 14:35:49 | 000,155,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comct232.ocx [2012-12-28 12:59:50 | 000,000,000 | ---D | C] -- C:\Users\patryk\Desktop\ProTOtype [2012-12-28 12:14:37 | 000,000,000 | ---D | C] -- C:\Users\patryk\Desktop\Minecraft filmiki [2012-12-27 14:17:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BabylonToolbar [2012-12-27 14:17:15 | 000,000,000 | ---D | C] -- C:\Users\patryk\AppData\Roaming\GoforFiles [2012-12-27 14:17:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GoforFiles [2012-12-27 13:58:03 | 000,000,000 | ---D | C] -- C:\Users\patryk\Desktop\Registeel [2012-12-27 13:17:38 | 000,000,000 | ---D | C] -- C:\ProgramData\WoW Worldwide Software LTD [2012-12-27 12:26:50 | 000,000,000 | ---D | C] -- C:\LORD [2012-12-23 13:45:44 | 000,000,000 | ---D | C] -- C:\ProgramData\CloudSoft [2012-12-23 13:45:09 | 000,000,000 | ---D | C] -- C:\Users\patryk\AppData\Roaming\SendSpace [2012-12-23 13:45:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MocaFlix [2012-12-23 13:45:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Browse2save [2012-12-23 13:45:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Browse2save [2012-12-22 18:38:33 | 000,357,888 | ---- | C] (AnjoCaido) -- C:\Users\patryk\AppData\Roaming\Tekkit.exe [2012-12-22 08:56:03 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2012-12-22 08:56:03 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2012-12-22 08:56:00 | 000,367,616 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2012-12-22 08:55:59 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2012-12-21 17:38:14 | 000,000,000 | ---D | C] -- C:\Users\patryk\Desktop\BMPSPV1 [2012-12-16 18:18:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sierra [2012-12-16 17:18:51 | 000,000,000 | ---D | C] -- C:\Users\patryk\AppData\Roaming\dll-files.com [2012-12-16 17:18:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dll-Files Fixer [2012-12-16 17:18:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Dll-Files.com Fixer [2012-12-15 14:59:43 | 000,000,000 | ---D | C] -- C:\Users\patryk\AppData\Roaming\Funmoods [2012-12-15 14:58:52 | 000,000,000 | ---D | C] -- C:\Users\patryk\AppData\Local\PutLockerDownloader [2012-12-15 14:58:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Gophoto.it [2012-12-15 14:58:17 | 000,000,000 | ---D | C] -- C:\Users\patryk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FTDownloader.com [2012-12-15 14:58:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FTDownloader.com [2012-12-15 14:50:44 | 000,000,000 | ---D | C] -- C:\Users\patryk\AppData\Local\Risen [2012-12-13 15:06:29 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2012-12-13 15:06:28 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2012-12-13 15:06:27 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2012-12-13 15:06:27 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2012-12-13 15:06:27 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2012-12-13 15:06:26 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll [2012-12-13 15:06:26 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll [2012-12-13 15:06:26 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2012-12-13 15:06:24 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2012-12-13 15:06:23 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2012-12-13 15:06:23 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2012-12-13 15:06:23 | 000,729,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2012-12-13 15:06:19 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2012-12-13 15:06:19 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2012-12-13 15:06:19 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2012-12-12 20:12:32 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll [2012-12-12 20:12:31 | 001,161,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll [2012-12-12 20:12:31 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe [2012-12-12 20:12:31 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll [2012-12-12 20:12:29 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll [2012-12-12 20:12:29 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll [2012-12-12 20:12:29 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe [2012-12-12 20:12:29 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll [2012-12-12 20:12:29 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll [2012-12-12 20:12:29 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll [2012-12-12 20:12:29 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll [2012-12-12 20:12:28 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe [2012-12-12 20:12:28 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll [2012-12-12 20:12:28 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll [2012-12-12 20:12:28 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll [2012-12-12 20:12:28 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll [2012-12-12 20:12:28 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll [2012-12-12 20:12:28 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll [2012-12-12 20:12:28 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll [2012-12-12 20:12:28 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll [2012-12-12 20:12:28 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll [2012-12-12 20:12:28 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll [2012-12-12 20:12:28 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll [2012-12-12 20:12:28 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll [2012-12-12 20:12:27 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll [2012-12-12 20:12:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll [2012-12-12 20:12:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll [2012-12-12 20:12:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll [2012-12-12 20:12:27 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll [2012-12-12 20:12:26 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll [2012-12-12 20:12:26 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll [2012-12-12 20:12:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll [2012-12-12 20:12:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll [2012-12-12 20:12:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll [2012-12-12 20:12:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll [2012-12-12 20:12:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll [2012-12-12 20:12:26 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll [2012-12-12 20:12:25 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll [2012-12-12 20:12:25 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll [2012-12-12 20:12:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll [2012-12-12 20:12:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll [2012-12-12 20:12:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll [2012-12-12 20:12:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll [2012-12-12 20:12:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll [2012-12-12 20:12:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll [2012-12-12 20:12:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll [2012-12-12 20:12:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll [2012-12-12 20:12:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll [2012-12-12 20:12:23 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll [2012-12-12 20:12:23 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll [2012-12-12 20:12:23 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll [2012-12-12 20:12:23 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll [2012-12-12 20:12:23 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll [2012-12-12 20:12:23 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll [2012-12-12 20:12:23 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll [2012-12-12 20:12:23 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll [2012-12-12 20:12:23 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll [2012-12-12 20:12:22 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll [2012-12-12 20:12:22 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll [2012-12-12 20:12:22 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll [2012-12-12 20:12:22 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll [2012-12-12 20:12:22 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll [2012-12-12 20:12:22 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll [2012-12-12 20:12:22 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll [2012-12-12 20:12:22 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll [2012-12-12 20:12:22 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll [2012-12-12 20:12:22 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll [2012-12-12 20:12:22 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll [2012-12-12 20:12:21 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe [2012-12-12 20:12:00 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpnet.dll [2012-12-12 20:11:59 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpnet.dll [2012-12-12 14:58:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi [2012-12-12 14:58:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi [2012-10-23 17:32:29 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\ProgramData\lsass.exe [2012-03-08 14:25:08 | 002,371,152 | ---- | C] (DownVision ) -- C:\Users\patryk\AppData\Local\setup.exe [2010-11-03 11:33:35 | 000,695,296 | ---- | C] (AnjoCaido) -- C:\Users\patryk\AppData\Roaming\MinecraftSP.exe [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2013-01-11 10:25:29 | 000,032,064 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2013-01-11 10:25:29 | 000,032,064 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2013-01-11 10:24:18 | 001,693,446 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2013-01-11 10:24:18 | 000,748,130 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2013-01-11 10:24:18 | 000,661,512 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2013-01-11 10:24:18 | 000,160,664 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2013-01-11 10:24:18 | 000,125,598 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2013-01-11 10:18:12 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013-01-11 10:18:01 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013-01-11 10:17:58 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013-01-11 09:45:53 | 000,000,338 | ---- | M] () -- C:\Windows\tasks\SpeedUpMyPC.job [2013-01-11 09:45:22 | 2801,979,392 | -HS- | M] () -- C:\hiberfil.sys [2013-01-11 09:39:49 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013-01-10 18:25:51 | 000,003,480 | ---- | M] () -- C:\bootsqm.dat [2013-01-10 15:11:51 | 083,023,306 | ---- | M] () -- C:\ProgramData\dsgsdgdsgdsgw.pad [2013-01-09 22:43:48 | 001,669,584 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2013-01-09 20:46:02 | 000,697,864 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2013-01-09 20:46:01 | 000,074,248 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2013-01-08 16:17:34 | 000,002,918 | ---- | M] () -- C:\ProgramData\dsgsdgdsgdsgw.js [2013-01-08 16:17:34 | 000,000,159 | ---- | M] () -- C:\ProgramData\dsgsdgdsgdsgw.reg [2013-01-08 16:17:34 | 000,000,067 | ---- | M] () -- C:\ProgramData\dsgsdgdsgdsgw.bat [2013-01-08 16:00:36 | 020,982,454 | ---- | M] () -- C:\Users\patryk\Desktop\Nowy Archiwum WinRARa.rar [2013-01-07 14:39:54 | 131,333,441 | ---- | M] () -- C:\Users\patryk\Desktop\Nowy Archiwum WinRARa (2).rar [2013-01-06 11:46:38 | 000,000,085 | ---- | M] () -- C:\ICSCreeperMod.properties [2013-01-05 17:18:54 | 000,000,294 | ---- | M] () -- C:\Windows\tasks\DLL-Files.Com Fixer_Updates.job [2013-01-05 17:18:46 | 000,000,610 | ---- | M] () -- C:\Users\patryk\Desktop\Prototype — skrót.lnk [2013-01-05 15:36:41 | 000,068,240 | ---- | M] () -- C:\Users\patryk\Desktop\Bez tytułu.png [2013-01-05 14:49:28 | 000,002,002 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk [2013-01-05 14:27:24 | 000,000,375 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.ics [2013-01-05 10:35:15 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt [2013-01-03 21:44:25 | 000,679,469 | ---- | M] () -- C:\Users\patryk\Desktop\W pustyni i w puszczy [CAŁY FILM] - YouTube.mht [2013-01-03 21:43:50 | 000,655,467 | ---- | M] () -- C:\Users\patryk\Desktop\_ W pustyni i w puszczy 1973 cały film - YouTube.mht [2013-01-01 18:21:13 | 110,810,024 | ---- | M] () -- C:\Users\patryk\Desktop\Chars part 3.rar [2012-12-31 14:00:43 | 000,263,186 | ---- | M] () -- C:\Users\patryk\Desktop\Minecraft.exe [2012-12-30 16:58:59 | 001,733,220 | ---- | M] () -- C:\Users\patryk\Desktop\forge [2012-12-30 16:17:14 | 000,043,520 | ---- | M] () -- C:\Windows\SysWow64\CmdLineExt03.dll [2012-12-29 22:19:54 | 002,347,352 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012-12-28 18:05:33 | 000,009,216 | ---- | M] () -- C:\Users\patryk\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-12-28 12:11:21 | 297,254,576 | ---- | M] () -- C:\Users\patryk\Desktop\FW_141-12-20-12.apk [2012-12-27 14:17:52 | 000,007,538 | ---- | M] () -- C:\user.js [2012-12-26 17:51:34 | 000,000,862 | ---- | M] () -- C:\Users\patryk\Desktop\Tekkit.lnk [2012-12-26 17:48:34 | 000,000,278 | ---- | M] () -- C:\Windows\tasks\DLL-Files.Com Fixer_MONTHLY.job [2012-12-25 19:01:56 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2012-12-22 18:37:34 | 068,243,765 | ---- | M] () -- C:\Users\patryk\Desktop\Tekkit 3.1.3.exe [2012-12-21 16:34:04 | 043,090,896 | ---- | M] () -- C:\Users\patryk\Desktop\Bleach M.U.G.E.N By SkinarfDragon.rar.xmalw7i.partial [2012-12-21 16:34:04 | 043,090,896 | ---- | M] () -- C:\Users\patryk\Desktop\Bleach M.U.G.E.N By SkinarfDragon.partial [2012-12-16 18:11:22 | 000,046,080 | ---- | M] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2012-12-16 17:18:37 | 000,001,052 | ---- | M] () -- C:\Users\Public\Desktop\Dll-Files Fixer.lnk [2012-12-16 15:45:03 | 000,367,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2012-12-16 15:13:28 | 000,295,424 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2012-12-16 15:13:20 | 000,034,304 | ---- | M] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2012-12-15 14:58:36 | 000,368,102 | ---- | M] () -- C:\Users\patryk\AppData\Local\funmoods-speeddial_sf.crx [2012-12-15 14:58:36 | 000,031,465 | ---- | M] () -- C:\Users\patryk\AppData\Local\funmoods.crx [2012-12-15 14:58:17 | 000,000,870 | ---- | M] () -- C:\Users\patryk\Desktop\FTDownloader.lnk [2012-12-15 13:38:04 | 000,314,016 | ---- | M] () -- C:\Windows\SysNative\drivers\atksgt.sys [2012-12-15 13:38:03 | 000,043,680 | ---- | M] () -- C:\Windows\SysNative\drivers\lirsgt.sys [2012-12-12 20:15:58 | 000,002,378 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2013-01-10 18:25:51 | 000,003,480 | ---- | C] () -- C:\bootsqm.dat [2013-01-08 16:17:34 | 000,000,159 | ---- | C] () -- C:\ProgramData\dsgsdgdsgdsgw.reg [2013-01-08 16:17:34 | 000,000,067 | ---- | C] () -- C:\ProgramData\dsgsdgdsgdsgw.bat [2013-01-07 14:37:56 | 131,333,441 | ---- | C] () -- C:\Users\patryk\Desktop\Nowy Archiwum WinRARa (2).rar [2013-01-06 17:43:42 | 020,982,454 | ---- | C] () -- C:\Users\patryk\Desktop\Nowy Archiwum WinRARa.rar [2013-01-05 17:18:46 | 000,000,610 | ---- | C] () -- C:\Users\patryk\Desktop\Prototype — skrót.lnk [2013-01-05 15:36:41 | 000,068,240 | ---- | C] () -- C:\Users\patryk\Desktop\Bez tytułu.png [2013-01-03 21:44:24 | 000,679,469 | ---- | C] () -- C:\Users\patryk\Desktop\W pustyni i w puszczy [CAŁY FILM] - YouTube.mht [2013-01-03 21:43:48 | 000,655,467 | ---- | C] () -- C:\Users\patryk\Desktop\_ W pustyni i w puszczy 1973 cały film - YouTube.mht [2013-01-01 18:17:59 | 110,810,024 | ---- | C] () -- C:\Users\patryk\Desktop\Chars part 3.rar [2013-01-01 17:48:47 | 043,090,896 | ---- | C] () -- C:\Users\patryk\Desktop\Bleach M.U.G.E.N By SkinarfDragon.partial [2012-12-31 14:09:24 | 000,000,085 | ---- | C] () -- C:\ICSCreeperMod.properties [2012-12-31 14:00:40 | 000,263,186 | ---- | C] () -- C:\Users\patryk\Desktop\Minecraft.exe [2012-12-30 16:58:49 | 001,733,220 | ---- | C] () -- C:\Users\patryk\Desktop\forge [2012-12-30 16:17:13 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\CmdLineExt03.dll [2012-12-28 14:35:58 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\iyvu9_32.dll [2012-12-28 12:06:52 | 297,254,576 | ---- | C] () -- C:\Users\patryk\Desktop\FW_141-12-20-12.apk [2012-12-25 19:01:56 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2012-12-22 18:38:52 | 000,000,862 | ---- | C] () -- C:\Users\patryk\Desktop\Tekkit.lnk [2012-12-22 18:11:13 | 068,243,765 | ---- | C] () -- C:\Users\patryk\Desktop\Tekkit 3.1.3.exe [2012-12-21 16:35:07 | 000,002,918 | ---- | C] () -- C:\ProgramData\dsgsdgdsgdsgw.js [2012-12-21 16:34:04 | 043,090,896 | ---- | C] () -- C:\Users\patryk\Desktop\Bleach M.U.G.E.N By SkinarfDragon.rar.xmalw7i.partial [2012-12-16 17:18:57 | 000,000,294 | ---- | C] () -- C:\Windows\tasks\DLL-Files.Com Fixer_Updates.job [2012-12-16 17:18:57 | 000,000,278 | ---- | C] () -- C:\Windows\tasks\DLL-Files.Com Fixer_MONTHLY.job [2012-12-16 17:18:37 | 000,001,052 | ---- | C] () -- C:\Users\Public\Desktop\Dll-Files Fixer.lnk [2012-12-15 14:59:37 | 000,368,102 | ---- | C] () -- C:\Users\patryk\AppData\Local\funmoods-speeddial_sf.crx [2012-12-15 14:58:17 | 000,000,870 | ---- | C] () -- C:\Users\patryk\Desktop\FTDownloader.lnk [2012-12-15 13:38:04 | 000,314,016 | ---- | C] () -- C:\Windows\SysNative\drivers\atksgt.sys [2012-12-15 13:38:03 | 000,043,680 | ---- | C] () -- C:\Windows\SysNative\drivers\lirsgt.sys [2012-12-09 09:46:17 | 004,032,098 | ---- | C] () -- C:\Users\patryk\AppData\Roaming\emibackup.jar [2012-12-09 09:46:17 | 000,046,737 | ---- | C] () -- C:\Users\patryk\AppData\Roaming\audiomod.zip [2012-12-09 09:46:16 | 011,186,225 | ---- | C] () -- C:\Users\patryk\AppData\Roaming\minecraft.jar [2012-12-09 09:46:16 | 000,738,345 | ---- | C] () -- C:\Users\patryk\AppData\Roaming\lwjgl.jar [2012-12-09 09:46:16 | 000,227,833 | ---- | C] () -- C:\Users\patryk\AppData\Roaming\jinput.jar [2012-12-09 09:46:16 | 000,138,318 | ---- | C] () -- C:\Users\patryk\AppData\Roaming\lwjgl_util.jar [2012-12-09 09:46:16 | 000,103,347 | ---- | C] () -- C:\Users\patryk\AppData\Roaming\modloader.zip [2012-12-09 09:46:16 | 000,000,311 | ---- | C] () -- C:\Users\patryk\AppData\Roaming\md5s [2012-12-09 09:46:16 | 000,000,015 | ---- | C] () -- C:\Users\patryk\AppData\Roaming\version [2012-10-23 17:32:31 | 083,023,306 | ---- | C] () -- C:\ProgramData\dsgsdgdsgdsgw.pad [2012-10-14 11:46:55 | 000,001,869 | ---- | C] () -- C:\Users\patryk\AppData\Roaming\DustModConfig.cfg [2012-09-16 15:05:03 | 000,004,096 | ---- | C] () -- C:\Windows\d3dx.dat [2012-09-14 16:16:56 | 000,000,901 | ---- | C] () -- C:\Windows\Spidey.ini [2012-09-09 16:10:53 | 051,524,671 | ---- | C] () -- C:\Users\patryk\AppData\Roaming\Helicopter Mod.rar [2012-09-08 06:22:23 | 000,258,048 | ---- | C] () -- C:\Windows\SysWow64\libFLAC.dll [2012-09-06 21:53:05 | 000,384,844 | ---- | C] () -- C:\Users\patryk\AppData\Local\funmoods-speeddial.crx [2012-09-06 21:53:00 | 000,031,465 | ---- | C] () -- C:\Users\patryk\AppData\Local\funmoods.crx [2012-08-29 14:14:47 | 000,004,728 | ---- | C] () -- C:\Program Files (x86)\user.cfg [2012-08-24 13:10:38 | 000,009,216 | ---- | C] () -- C:\Users\patryk\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-07-05 19:28:47 | 000,000,344 | ---- | C] () -- C:\Windows\wininit.ini [2012-07-04 18:25:17 | 000,000,730 | ---- | C] () -- C:\Windows\COD.INI [2012-07-03 16:43:25 | 000,043,366 | ---- | C] () -- C:\Windows\DIIUnin.dat [2012-07-02 15:42:26 | 000,021,840 | ---- | C] () -- C:\Windows\SysWow64\SIntfNT.dll [2012-07-02 15:42:26 | 000,017,212 | ---- | C] () -- C:\Windows\SysWow64\SIntf32.dll [2012-07-02 15:42:26 | 000,012,067 | ---- | C] () -- C:\Windows\SysWow64\SIntf16.dll [2012-04-22 21:12:22 | 004,424,704 | ---- | C] () -- C:\Windows\SysWow64\ffmpeg.dll [2012-04-09 00:40:36 | 000,079,360 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll [2012-04-09 00:39:46 | 000,260,608 | ---- | C] () -- C:\Windows\SysWow64\TomsMoComp_ff.dll [2012-04-09 00:39:32 | 000,158,720 | ---- | C] () -- C:\Windows\SysWow64\ff_unrar.dll [2012-04-09 00:39:32 | 000,099,840 | ---- | C] () -- C:\Windows\SysWow64\ff_wmv9.dll [2012-04-09 00:39:30 | 001,525,248 | ---- | C] () -- C:\Windows\SysWow64\ff_samplerate.dll [2012-04-09 00:39:30 | 000,146,944 | ---- | C] () -- C:\Windows\SysWow64\ff_libmad.dll [2012-04-09 00:39:28 | 000,212,480 | ---- | C] () -- C:\Windows\SysWow64\ff_libdts.dll [2012-04-09 00:39:28 | 000,115,200 | ---- | C] () -- C:\Windows\SysWow64\ff_liba52.dll [2012-04-09 00:39:26 | 000,328,704 | ---- | C] () -- C:\Windows\SysWow64\ff_libfaad2.dll [2012-03-29 15:21:26 | 000,172,032 | ---- | C] () -- C:\Windows\SysWow64\libbluray.dll [2012-03-29 15:21:18 | 006,582,226 | ---- | C] () -- C:\Windows\SysWow64\avcodec-lav-54.dll [2012-03-29 15:21:18 | 001,152,365 | ---- | C] () -- C:\Windows\SysWow64\avformat-lav-54.dll [2012-03-29 15:21:18 | 000,374,152 | ---- | C] () -- C:\Windows\SysWow64\swscale-lav-2.dll [2012-03-29 15:21:18 | 000,207,872 | ---- | C] () -- C:\Windows\SysWow64\avutil-lav-51.dll [2012-03-29 15:21:18 | 000,144,523 | ---- | C] () -- C:\Windows\SysWow64\avfilter-lav-2.dll [2011-12-25 10:13:12 | 000,000,000 | ---- | C] () -- C:\Windows\PowerReg.dat [2011-12-15 18:33:09 | 000,098,304 | ---- | C] () -- C:\Windows\SysWow64\redmonnt.dll [2011-12-12 21:36:09 | 043,795,464 | ---- | C] () -- C:\Users\patryk\AppData\Roaming\Minecraft 1.2.0_02 Installer (Cracked).exe [2011-12-12 20:42:42 | 000,082,586 | ---- | C] () -- C:\Users\patryk\AppData\Roaming\Uninstal.exe [2011-12-07 20:32:24 | 000,216,064 | ---- | C] ( ) -- C:\Windows\SysWow64\Lagarith.dll [2011-11-05 07:10:41 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2011-11-05 06:57:40 | 001,669,584 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011-11-05 06:45:04 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat [2011-09-08 15:00:52 | 000,150,528 | ---- | C] () -- C:\Windows\SysWow64\mkx.dll [2011-09-08 15:00:48 | 000,142,336 | ---- | C] () -- C:\Windows\SysWow64\mp4.dll [2011-09-08 15:00:42 | 000,123,392 | ---- | C] () -- C:\Windows\SysWow64\ogm.dll [2011-09-08 15:00:38 | 000,249,856 | ---- | C] () -- C:\Windows\SysWow64\dxr.dll [2011-09-08 15:00:34 | 000,113,152 | ---- | C] () -- C:\Windows\SysWow64\dsmux.exe [2011-09-08 15:00:24 | 000,154,624 | ---- | C] () -- C:\Windows\SysWow64\ts.dll [2011-09-08 15:00:10 | 000,137,728 | ---- | C] () -- C:\Windows\SysWow64\mkv2vfr.exe [2011-09-08 15:00:06 | 000,358,400 | ---- | C] () -- C:\Windows\SysWow64\gdsmux.exe [2011-09-08 14:59:54 | 000,080,384 | ---- | C] () -- C:\Windows\SysWow64\mkzlib.dll [2011-09-08 14:59:52 | 000,024,576 | ---- | C] () -- C:\Windows\SysWow64\mkunicode.dll [2011-09-02 10:32:37 | 000,000,068 | ---- | C] () -- C:\Windows\SysWow64\ezdigsgn.dat [2011-05-30 14:42:50 | 000,240,640 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2011-05-23 08:46:30 | 000,645,632 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2011-03-21 19:56:22 | 000,059,904 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll [2011-03-03 21:04:58 | 000,007,736 | ---- | C] () -- C:\Windows\hpDSTRES.DLL [2011-03-03 12:39:56 | 000,109,568 | ---- | C] () -- C:\Windows\SysWow64\avi.dll [2011-03-03 12:38:10 | 000,097,792 | ---- | C] () -- C:\Windows\SysWow64\avs.dll [2011-03-03 12:37:50 | 000,093,184 | ---- | C] () -- C:\Windows\SysWow64\avss.dll [2011-01-13 08:03:20 | 000,003,155 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2011-11-17 07:41:18 | 000,002,048 | -HS- | M] () -- C:\Users\patryk\AppData\Local\{edb94f7a-576a-bf97-4b65-39fc03b448f3}\@ [2011-11-17 07:41:18 | 000,000,000 | -HSD | M] -- C:\Users\patryk\AppData\Local\{edb94f7a-576a-bf97-4b65-39fc03b448f3}\L [2011-11-17 07:41:18 | 000,000,000 | -HSD | M] -- C:\Users\patryk\AppData\Local\{edb94f7a-576a-bf97-4b65-39fc03b448f3}\U [2009-07-14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "ThreadingModel" = Both "" = C:\Users\patryk\AppData\Local\{edb94f7a-576a-bf97-4b65-39fc03b448f3}\n. [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2012-06-09 06:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012-06-09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2013-01-08 20:44:10 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\.minecraft [2012-10-27 15:49:05 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\.techniclauncher [2011-12-15 18:33:07 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\Babylon [2012-08-17 10:09:39 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\BlackBean [2012-08-17 11:12:23 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\Braid [2013-01-09 16:51:16 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\BrowserCompanion [2013-01-06 13:55:36 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\config [2012-07-03 16:40:14 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\DAEMON Tools Lite [2012-12-16 17:18:51 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\dll-files.com [2012-10-14 11:46:56 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\dust_pages [2012-05-20 13:26:43 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\e-pity [2012-08-24 09:29:42 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\eType [2012-09-08 07:20:30 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\EurekaLog [2012-12-15 14:59:43 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\Funmoods [2012-12-27 14:17:23 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\GoforFiles [2012-03-08 14:35:40 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\GrabIt [2012-09-08 05:37:40 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\IVONA ControlCenter [2012-03-24 18:14:30 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\LolClient [2012-05-24 16:04:06 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\LolClient2 [2012-10-14 11:30:56 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\lucasarts [2012-10-04 14:51:31 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\Media Finder [2012-12-11 17:31:36 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\minecraft [2012-11-16 20:55:40 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\NapiProjekt [2012-12-09 09:46:17 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\natives [2012-06-19 16:53:32 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\Optimizer Pro [2012-08-05 17:00:17 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\Publish Providers [2011-12-20 21:39:46 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\pymclevel [2012-01-18 12:57:02 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\runic games [2012-11-03 19:08:47 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\saves [2012-12-23 13:45:09 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\SendSpace [2012-10-10 13:48:02 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\skyz [2012-08-14 06:56:06 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\Sony [2012-07-17 10:17:04 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\StartNow Toolbar [2011-12-12 14:01:41 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\Synaptics [2012-12-28 17:27:11 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\Ubisoft [2012-09-22 10:34:36 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\Uniblue [2013-01-05 10:33:09 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\uTorrent [2012-07-23 12:55:54 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\wargaming.net [2012-05-14 17:17:05 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\WildTangent [2012-02-23 21:16:32 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\Windows Live Writer [2012-08-24 14:54:14 | 000,000,000 | ---D | M] -- C:\Users\patryk\AppData\Roaming\YourFileDownloader [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Files - Unicode (All) ==========[/color] [2012-06-18 16:53:29 | 000,000,288 | ---- | C] ()(C:\?????.txt) -- C:\התקנה.txt [2006-05-26 16:25:50 | 000,000,288 | ---- | M] ()(C:\?????.txt) -- C:\התקנה.txt < End of report >