OTL logfile created on: 2013-02-01 10:09:33 - Run 1
OTL by OldTimer - Version 3.2.54.0     Folder = G:\Service
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,93 Gb Total Physical Memory | 2,22 Gb Available Physical Memory | 56,58% Memory free
7,86 Gb Paging File | 5,87 Gb Available in Paging File | 74,68% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 90,00 Gb Total Space | 60,06 Gb Free Space | 66,74% Space Free | Partition Type: NTFS
Drive E: | 171,00 Gb Total Space | 170,91 Gb Free Space | 99,95% Space Free | Partition Type: NTFS
Drive F: | 193,59 Gb Total Space | 171,90 Gb Free Space | 88,80% Space Free | Partition Type: NTFS
Drive G: | 7,46 Gb Total Space | 7,29 Gb Free Space | 97,76% Space Free | Partition Type: NTFS
 
Computer Name: BB | User Name: AA | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2013-01-23 22:59:39 | 000,879,080 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe
PRC - [2012-12-18 20:08:28 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012-07-12 17:24:32 | 000,596,480 | ---- | M] (OldTimer Tools) -- G:\Service\OTL.exe
PRC - [2012-02-10 11:28:06 | 000,193,816 | ---- | M] (Microsoft Corporation.) -- C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BBSvc.exe
PRC - [2010-05-05 07:20:00 | 001,604,200 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2010-04-01 09:52:22 | 000,252,728 | ---- | M] (TOSHIBA) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe
PRC - [2010-03-03 14:42:02 | 002,320,920 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
PRC - [2010-03-03 14:41:58 | 000,268,824 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
PRC - [2010-03-03 11:47:38 | 004,581,280 | ---- | M] (TOSHIBA) -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe
PRC - [2010-02-22 13:23:50 | 000,304,496 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
PRC - [2009-12-25 15:21:16 | 000,034,160 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe
PRC - [2009-07-28 20:26:42 | 000,062,848 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe
PRC - [2009-07-22 13:40:00 | 000,083,336 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe
PRC - [2009-07-21 11:43:44 | 000,701,752 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe
PRC - [2009-03-10 18:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2013-01-23 23:25:41 | 014,586,888 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2012-12-26 09:52:34 | 000,182,312 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\systemcore\mfevtps.exe -- (mfevtp)
SRV:[b]64bit:[/b] - [2012-12-26 09:49:32 | 000,218,320 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe -- (mfefire)
SRV:[b]64bit:[/b] - [2012-12-26 09:47:40 | 000,241,016 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe -- (McShield)
SRV:[b]64bit:[/b] - [2012-11-16 21:10:22 | 000,383,608 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\mcafee\virusscan\mcods.exe -- (McODS)
SRV:[b]64bit:[/b] - [2012-08-31 13:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (MSK80Service)
SRV:[b]64bit:[/b] - [2012-08-31 13:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (McProxy)
SRV:[b]64bit:[/b] - [2012-08-31 13:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (McOobeSv)
SRV:[b]64bit:[/b] - [2012-08-31 13:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (McNASvc)
SRV:[b]64bit:[/b] - [2012-08-31 13:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (McNaiAnn)
SRV:[b]64bit:[/b] - [2012-08-31 13:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (mcmscsvc)
SRV:[b]64bit:[/b] - [2012-08-31 13:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (McMPFSvc)
SRV:[b]64bit:[/b] - [2012-08-31 13:20:06 | 000,201,304 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (McAfee SiteAdvisor Service)
SRV:[b]64bit:[/b] - [2010-04-06 14:53:14 | 000,258,928 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\Toshiba\TECO\TecoService.exe -- (TOSHIBA eco Utility Service)
SRV:[b]64bit:[/b] - [2010-02-23 17:57:42 | 000,835,952 | ---- | M] (TOSHIBA Corporation) [On_Demand | Running] -- C:\Program Files\Toshiba\TPHM\TPCHSrv.exe -- (TPCHSrv)
SRV:[b]64bit:[/b] - [2010-02-05 17:44:48 | 000,137,560 | ---- | M] (TOSHIBA Corporation) [On_Demand | Running] -- C:\Program Files\Toshiba\TOSHIBA HDD SSD Alert\TosSmartSrv.exe -- (TOSHIBA HDD SSD Alert Service)
SRV:[b]64bit:[/b] - [2009-11-05 22:05:28 | 000,489,312 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe -- (TosCoSrv)
SRV:[b]64bit:[/b] - [2009-10-21 09:30:36 | 000,531,520 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\SysNative\ThpSrv.exe -- (Thpsrv)
SRV:[b]64bit:[/b] - [2009-07-28 14:48:06 | 000,140,632 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\SysNative\TODDSrv.exe -- (TODDSrv)
SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2012-12-18 20:08:28 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012-07-13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012-02-10 11:28:06 | 000,240,408 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\SeaPort.exe -- (BBUpdate)
SRV - [2012-02-10 11:28:06 | 000,193,816 | ---- | M] (Microsoft Corporation.) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BBSvc.exe -- (BBSvc)
SRV - [2010-05-11 08:40:52 | 000,124,368 | ---- | M] (Toshiba Europe GmbH) [On_Demand | Stopped] -- C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe -- (TemproMonitoringService) Notebook Performance Tuning Service (TEMPRO)
SRV - [2010-05-05 07:20:00 | 001,604,200 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010-03-03 14:42:02 | 002,320,920 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R)
SRV - [2010-03-03 14:41:58 | 000,268,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R)
SRV - [2010-02-25 13:07:14 | 000,196,464 | ---- | M] (TOSHIBA CORPORATION) [On_Demand | Stopped] -- C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
SRV - [2010-01-28 16:44:40 | 000,249,200 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe -- (cfWiMAXService)
SRV - [2009-10-06 09:21:50 | 000,051,512 | ---- | M] (TOSHIBA Corporation) [On_Demand | Running] -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe -- (TMachInfo)
SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009-03-10 18:51:20 | 000,046,448 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe -- (ConfigFree Service)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - [2013-01-23 21:56:11 | 003,058,168 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX)
DRV:[b]64bit:[/b] - [2012-12-26 09:55:26 | 000,069,672 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\cfwids.sys -- (cfwids)
DRV:[b]64bit:[/b] - [2012-12-26 09:52:44 | 000,339,776 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfewfpk.sys -- (mfewfpk)
DRV:[b]64bit:[/b] - [2012-12-26 09:51:24 | 000,106,112 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mferkdet.sys -- (mferkdet)
DRV:[b]64bit:[/b] - [2012-12-26 09:50:48 | 000,771,096 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfehidk.sys -- (mfehidk)
DRV:[b]64bit:[/b] - [2012-12-26 09:49:42 | 000,515,528 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfefirek.sys -- (mfefirek)
DRV:[b]64bit:[/b] - [2012-12-26 09:49:00 | 000,309,400 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfeavfk.sys -- (mfeavfk)
DRV:[b]64bit:[/b] - [2012-12-26 09:48:30 | 000,178,840 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfeapfk.sys -- (mfeapfk)
DRV:[b]64bit:[/b] - [2012-08-17 05:41:48 | 000,126,944 | ---- | M] (Power Software Ltd) [Kernel | System | Running] -- C:\windows\SysNative\drivers\scdemu.sys -- (SCDEmu)
DRV:[b]64bit:[/b] - [2012-04-20 16:40:58 | 000,196,440 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HipShieldK.sys -- (HipShieldK)
DRV:[b]64bit:[/b] - [2012-03-01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2011-07-29 13:54:56 | 000,016,776 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\epmntdrv.sys -- (epmntdrv)
DRV:[b]64bit:[/b] - [2011-07-29 13:54:56 | 000,009,096 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\EuGdiDrv.sys -- (EuGdiDrv)
DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2011-03-11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2010-11-20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2010-11-20 12:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:[b]64bit:[/b] - [2010-11-20 10:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2010-05-18 16:02:48 | 000,164,464 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR)
DRV:[b]64bit:[/b] - [2010-05-08 18:38:56 | 000,482,384 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\tos_sps64.sys -- (tos_sps64)
DRV:[b]64bit:[/b] - [2010-05-03 14:44:02 | 000,331,880 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2010-03-10 18:51:32 | 000,316,464 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:[b]64bit:[/b] - [2010-01-28 06:25:04 | 000,086,120 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:[b]64bit:[/b] - [2010-01-15 12:22:08 | 000,538,136 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:[b]64bit:[/b] - [2009-09-17 12:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R)
DRV:[b]64bit:[/b] - [2009-07-30 21:02:36 | 000,044,912 | ---- | M] (COMPAL ELECTRONIC INC.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\LPCFilter.sys -- (LPCFilter)
DRV:[b]64bit:[/b] - [2009-07-30 19:22:04 | 000,027,784 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tdcmdpst.sys -- (tdcmdpst)
DRV:[b]64bit:[/b] - [2009-07-14 16:31:18 | 000,026,840 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\TVALZ_O.SYS -- (TVALZ)
DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-07-14 01:00:24 | 000,009,728 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\acpials.sys -- (acpials)
DRV:[b]64bit:[/b] - [2009-07-13 22:12:00 | 000,019,824 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tosrfec.sys -- (tosrfec)
DRV:[b]64bit:[/b] - [2009-06-29 16:16:20 | 000,014,784 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\Thpevm.sys -- (Thpevm)
DRV:[b]64bit:[/b] - [2009-06-29 10:25:22 | 000,034,880 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\thpdrv.sys -- (Thpdrv)
DRV:[b]64bit:[/b] - [2009-06-29 10:17:00 | 000,070,656 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\enecir.sys -- (enecir)
DRV:[b]64bit:[/b] - [2009-06-22 17:06:38 | 000,035,008 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\PGEffect.sys -- (PGEffect)
DRV:[b]64bit:[/b] - [2009-06-19 19:15:22 | 000,014,472 | ---- | M] (TOSHIBA Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TVALZFL.sys -- (TVALZFL)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009-05-19 21:59:00 | 000,014,848 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\enecirhid.sys -- (enecirhid)
DRV:[b]64bit:[/b] - [2008-04-24 18:16:00 | 000,006,656 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\enecirhidma.sys -- (enecirhidma)
DRV - [2011-07-29 13:54:56 | 000,014,216 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\epmntdrv.sys -- (epmntdrv)
DRV - [2011-07-29 13:54:56 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\EuGdiDrv.sys -- (EuGdiDrv)
DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
[color=#E56717]========== Standard Registry (All) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =  [binary data]
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {5DCED21F-A744-408B-91D4-38548274FFA3}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{5DCED21F-A744-408B-91D4-38548274FFA3}: "URL" = http://www.bing.com/search?q={searchTerms}&form=TSHMDF&pc=MATM&src=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL =  [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\..\SearchScopes,DefaultScope = {DE26CA68-C6C7-494C-A4A4-03ADEB858613}
IE - HKLM\..\SearchScopes\{DE26CA68-C6C7-494C-A4A4-03ADEB858613}: "URL" = http://www.bing.com/search?q={searchTerms}&form=TSHMDF&pc=MATM&src=IE-SearchBox
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://toshiba.msn.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://toshiba.msn.com
IE - HKCU\..\URLSearchHook: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation)
IE - HKCU\..\SearchScopes,DefaultScope = {DE26CA68-C6C7-494C-A4A4-03ADEB858613}
IE - HKCU\..\SearchScopes\{71E6C327-D3A3-45ED-BCB8-CBCE86E241F4}: "URL" = http://rover.ebay.com/rover/1/4908-44618-9400-8/4?satitle={searchTerms}
IE - HKCU\..\SearchScopes\{C1054827-ADAD-4E06-A331-D13966BC53E9}: "URL" = http://www.amazon.co.uk/gp/search?ie=UTF8&keywords={searchTerms}&tag=tochibauk-win7-ie-search-21&index=blended&linkCode=ur2
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF64_11_5_502_146.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
FF - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\Program Files (x86)\McAfee\SiteAdvisor [2013-01-31 11:39:14 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\msktbird@mcafee.com: C:\Program Files\McAfee\MSK [2013-01-27 17:03:12 | 000,000,000 | ---D | M]
 
[2013-01-26 13:05:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\AA\AppData\Roaming\mozilla\Extensions
 
O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\MSKAPB~1.DLL File not found
O2:[b]64bit:[/b] - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2:[b]64bit:[/b] - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\Program Files\mcafee\msk\mskapbho.dll ()
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (TOSHIBA Media Controller Plug-in) - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:[b]64bit:[/b] - HKLM..\Run: []  File not found
O4:[b]64bit:[/b] - HKLM..\Run: [00TCrdMain] C:\Program Files\Toshiba\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [HSON] C:\Program Files\Toshiba\TBS\HSON.exe (TOSHIBA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [NvCplDaemon] C:\windows\SysNative\NvCpl.dll (NVIDIA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:[b]64bit:[/b] - HKLM..\Run: [SmartFaceVWatcher] C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe (TOSHIBA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [SmoothView] C:\Program Files\Toshiba\SmoothView\SmoothView.exe (TOSHIBA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated)
O4:[b]64bit:[/b] - HKLM..\Run: [Teco] C:\Program Files\TOSHIBA\TECO\Teco.exe (TOSHIBA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [ThpSrv] C:\windows\SysNative\thpsrv.exe (TOSHIBA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaReminder.exe (Toshiba Europe GmbH)
O4:[b]64bit:[/b] - HKLM..\Run: [Toshiba TEMPRO] C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe (Toshiba Europe GmbH)
O4:[b]64bit:[/b] - HKLM..\Run: [TosNC] C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe (TOSHIBA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [TosReelTimeMonitor] C:\Program Files\Toshiba\ReelTime\TosReelTimeMonitor.exe (TOSHIBA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [TosSENotify] C:\Program Files\Toshiba\TOSHIBA HDD SSD Alert\TosWaitSrv.exe (TOSHIBA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [TosVolRegulator] C:\Program Files\Toshiba\TosVolRegulator\TosVolRegulator.exe (TOSHIBA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [TosWaitSrv] C:\Program Files\Toshiba\TPHM\TosWaitSrv.exe (TOSHIBA Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [TPwrMain] C:\Program Files\Toshiba\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe (TOSHIBA Electronics, Inc.)
O4 - HKLM..\Run: [ITSecMng] C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe (TOSHIBA CORPORATION)
O4 - HKLM..\Run: [KeNotify] C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe (TOSHIBA CORPORATION)
O4 - HKLM..\Run: [mcui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [PWRISOVM.EXE] C:\Program Files (x86)\PowerISO\PWRISOVM.EXE (Power Software Ltd)
O4 - HKLM..\Run: [SVPWUTIL] C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe (TOSHIBA)
O4 - HKLM..\Run: [ToshibaServiceStation] C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TRCMan] C:\Program Files (x86)\TOSHIBA\TRCMan\TRCMan.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TSleepSrv] C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe (TOSHIBA)
O4 - HKLM..\Run: [TWebCamera] C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe (TOSHIBA CORPORATION.)
O4 - HKCU..\Run: [TOSHIBA Online Product Information] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe (TOSHIBA)
O4 - Startup: C:\Users\AA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk = C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceActiveDesktopOn = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRun = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O9 - Extra Button: Wpis w blogu - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Wpis w blogu w Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000001 [] - C:\Windows\SysNative\nlaapi.dll (Microsoft Corporation)
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000002 [] - C:\Windows\SysNative\NapiNSP.dll (Microsoft Corporation)
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000003 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000004 [] - C:\Windows\SysNative\pnrpnsp.dll (Microsoft Corporation)
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Windows\SysNative\winrnr.dll (Microsoft Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000009 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries64\000000000010 - C:\Windows\SysNative\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\SysWOW64\nlaapi.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\SysWOW64\NapiNSP.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Windows\SysWOW64\winrnr.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F71F6FBB-3B17-42D1-BE8F-BE7E2CA5F218}: DhcpNameServer = 192.168.0.1
O18:[b]64bit:[/b] - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
O18:[b]64bit:[/b] - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysNative\inetcomm.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysNative\urlmon.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysNative\itss.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll (McAfee, Inc.)
O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysNative\MSVidCtl.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysNative\mshtml.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysWOW64\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll (McAfee, Inc.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\windows\SysNative\mscoree.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\windows\SysNative\mscoree.dll (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
O18:[b]64bit:[/b] - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\windows\SysNative\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\windows\SysWow64\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\windows\SysWow64\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\PROGRA~2\mcafee\msc\mcsniepl.dll (McAfee, Inc.)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\windows\SysWow64\mscoree.dll (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O29:[b]64bit:[/b] - HKLM SecurityProviders - (credssp.dll) - C:\windows\SysWow64\credssp.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) - C:\windows\SysWow64\credssp.dll (Microsoft Corporation)
O30:[b]64bit:[/b] - LSA: Authentication Packages - (msv1_0) - C:\windows\SysNative\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\windows\SysWow64\msv1_0.dll (Microsoft Corporation)
O30:[b]64bit:[/b] - LSA: Security Packages - (kerberos) - C:\windows\SysNative\kerberos.dll (Microsoft Corporation)
O30:[b]64bit:[/b] - LSA: Security Packages - (msv1_0) - C:\windows\SysNative\msv1_0.dll (Microsoft Corporation)
O30:[b]64bit:[/b] - LSA: Security Packages - (schannel) - C:\windows\SysNative\schannel.dll (Microsoft Corporation)
O30:[b]64bit:[/b] - LSA: Security Packages - (wdigest) - C:\windows\SysNative\wdigest.dll (Microsoft Corporation)
O30:[b]64bit:[/b] - LSA: Security Packages - (tspkg) - C:\windows\SysNative\tspkg.dll (Microsoft Corporation)
O30:[b]64bit:[/b] - LSA: Security Packages - (pku2u) - C:\windows\SysNative\pku2u.dll (Microsoft Corporation)
O30:[b]64bit:[/b] - LSA: Security Packages - (livessp) - C:\windows\SysNative\livessp.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\windows\SysWow64\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\windows\SysWow64\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\windows\SysWow64\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\windows\SysWow64\wdigest.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (tspkg) - C:\windows\SysWow64\tspkg.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\windows\SysWow64\pku2u.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (livessp) - C:\windows\SysWow64\livessp.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010-04-14 22:54:30 | 000,000,166 | -H-- | M] () - G:\autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2013-02-01 10:08:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
[2013-02-01 10:01:46 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Local\Diagnostics
[2013-01-27 21:17:44 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Roaming\PowerISO
[2013-01-27 21:17:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO
[2013-01-27 21:17:35 | 000,126,944 | ---- | C] (Power Software Ltd) -- C:\windows\SysNative\drivers\scdemu.sys
[2013-01-27 21:17:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PowerISO
[2013-01-27 21:05:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nero
[2013-01-27 19:07:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2013-01-27 19:07:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2013-01-27 19:06:52 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Local\Adobe
[2013-01-27 18:58:28 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Roaming\AbiSuite
[2013-01-27 18:58:04 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AbiWord Word Processor
[2013-01-27 18:58:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AbiWord Word Processor
[2013-01-27 18:57:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AbiWord
[2013-01-27 18:29:22 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Local\Nero_AG
[2013-01-27 12:48:18 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Local\Windows Live
[2013-01-27 12:29:00 | 000,000,000 | ---D | C] -- C:\windows\SysNative\SPReview
[2013-01-27 12:28:23 | 000,000,000 | ---D | C] -- C:\windows\SysNative\EventProviders
[2013-01-27 12:13:13 | 000,196,440 | ---- | C] (McAfee, Inc.) -- C:\windows\SysNative\drivers\HipShieldK.sys
[2013-01-26 13:06:03 | 000,000,000 | --SD | C] -- C:\Users\AA\GG dysk
[2013-01-26 13:05:39 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Roaming\Mozilla
[2013-01-26 13:05:31 | 000,000,000 | ---D | C] -- C:\ProgramData\GG
[2013-01-26 13:04:46 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Roaming\GG
[2013-01-26 13:04:45 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Local\GG
[2013-01-26 12:27:46 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Roaming\XnView
[2013-01-26 12:27:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XnView
[2013-01-26 12:27:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\XnView
[2013-01-26 12:08:11 | 000,078,720 | ---- | C] (Hewlett-Packard Company) -- C:\windows\SysNative\drivers\HpSAMD.sys
[2013-01-26 12:07:57 | 000,116,224 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\windows\SysNative\fms.dll
[2013-01-26 12:07:36 | 000,093,696 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\windows\SysWow64\fms.dll
[2013-01-26 12:07:32 | 000,051,200 | ---- | C] (Twain Working Group) -- C:\windows\twain_32.dll
[2013-01-26 12:07:18 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\windows\SysWow64\iccvid.dll
[2013-01-26 09:48:05 | 000,107,904 | ---- | C] (Advanced Micro Devices) -- C:\windows\SysNative\drivers\amdsata.sys
[2013-01-26 09:48:05 | 000,027,008 | ---- | C] (Advanced Micro Devices) -- C:\windows\SysNative\drivers\amdxata.sys
[2013-01-26 09:45:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2013-01-24 23:56:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0
[2013-01-24 21:38:23 | 000,000,000 | ---D | C] -- C:\windows\SysWow64\Wat
[2013-01-24 21:38:22 | 000,000,000 | ---D | C] -- C:\windows\SysNative\Wat
[2013-01-24 13:23:31 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\windows\SysNative\atmlib.dll
[2013-01-24 13:23:31 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\windows\SysWow64\atmlib.dll
[2013-01-24 13:23:30 | 000,367,616 | ---- | C] (Adobe Systems Incorporated) -- C:\windows\SysNative\atmfd.dll
[2013-01-24 13:23:30 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\windows\SysWow64\atmfd.dll
[2013-01-24 13:21:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2013-01-24 13:21:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2013-01-24 13:04:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Damian Pasternak
[2013-01-24 12:14:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader
[2013-01-24 12:14:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\JDownloader
[2013-01-24 12:02:22 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013-01-24 12:02:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013-01-24 12:01:57 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Roaming\WinRAR
[2013-01-24 12:01:57 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2013-01-24 11:57:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2013-01-24 11:57:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VideoLAN
[2013-01-24 11:52:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
[2013-01-24 11:52:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\K-Lite Codec Pack
[2013-01-24 11:49:38 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Local\Programs
[2013-01-24 11:43:01 | 000,000,000 | ---D | C] -- C:\windows\SysWow64\directx
[2013-01-24 11:40:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2013-01-24 11:26:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
[2013-01-24 11:26:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PX Storage Engine
[2013-01-24 11:26:06 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Roaming\Winamp
[2013-01-24 11:26:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Winamp
[2013-01-24 10:32:09 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp
[2013-01-24 00:40:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\uTorrent
[2013-01-24 00:38:14 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Roaming\uTorrent
[2013-01-24 00:12:58 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Local\TOSHIBA_Corporation
[2013-01-24 00:04:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EASEUS Partition Master 9.1.1 Professional Edition
[2013-01-24 00:04:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\EASEUS
[2013-01-24 00:03:51 | 050,424,768 | ---- | C] (EASEUS                                                      ) -- C:\Users\AA\EASEUS Partition Master 9.1.1 Professional Edition.exe
[2013-01-23 23:54:10 | 000,000,000 | ---D | C] -- C:\Users\AA\Partition Magic
[2013-01-23 23:52:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2013-01-23 23:52:54 | 000,000,000 | ---D | C] -- C:\Program Files\7-Zip
[2013-01-23 23:26:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2013-01-23 23:25:51 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Local\Google
[2013-01-23 23:25:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2013-01-23 23:25:41 | 000,697,864 | ---- | C] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerApp.exe
[2013-01-23 23:25:41 | 000,074,248 | ---- | C] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerCPLApp.cpl
[2013-01-23 23:25:39 | 000,000,000 | ---D | C] -- C:\windows\SysNative\Macromed
[2013-01-23 22:59:49 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Roaming\Opera
[2013-01-23 22:59:49 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Local\Opera
[2013-01-23 22:59:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Opera
[2013-01-23 22:58:53 | 012,774,200 | ---- | C] (Opera Software ASA) -- C:\Users\AA\Opera_1212_int_Setup.exe
[2013-01-23 22:42:53 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Roaming\Toshiba
[2013-01-23 22:41:56 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Roaming\Nero
[2013-01-23 22:41:47 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Local\Toshiba
[2013-01-23 22:41:38 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Roaming\WinBatch
[2013-01-23 22:41:22 | 000,000,000 | R--D | C] -- C:\Users\AA\Searches
[2013-01-23 22:41:22 | 000,000,000 | R--D | C] -- C:\Users\AA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2013-01-23 22:41:09 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Roaming\Identities
[2013-01-23 22:41:04 | 000,000,000 | R--D | C] -- C:\Users\AA\Contacts
[2013-01-23 22:40:09 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Roaming\Adobe
[2013-01-23 22:38:09 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Local\VirtualStore
[2013-01-23 22:36:56 | 000,000,000 | ---D | C] -- C:\ProgramData\ToshibaEurope
[2013-01-23 22:36:22 | 000,000,000 | -HSD | C] -- C:\Users\AA\Ustawienia lokalne
[2013-01-23 22:36:22 | 000,000,000 | -HSD | C] -- C:\Users\AA\AppData\Local\Temporary Internet Files
[2013-01-23 22:36:22 | 000,000,000 | -HSD | C] -- C:\Users\AA\Szablony
[2013-01-23 22:36:22 | 000,000,000 | -HSD | C] -- C:\Users\AA\SendTo
[2013-01-23 22:36:22 | 000,000,000 | -HSD | C] -- C:\Users\AA\Recent
[2013-01-23 22:36:22 | 000,000,000 | -HSD | C] -- C:\Users\AA\PrintHood
[2013-01-23 22:36:22 | 000,000,000 | -HSD | C] -- C:\Users\AA\NetHood
[2013-01-23 22:36:22 | 000,000,000 | -HSD | C] -- C:\Users\AA\Documents\Moje wideo
[2013-01-23 22:36:22 | 000,000,000 | -HSD | C] -- C:\Users\AA\Documents\Moje obrazy
[2013-01-23 22:36:22 | 000,000,000 | -HSD | C] -- C:\Users\AA\Moje dokumenty
[2013-01-23 22:36:22 | 000,000,000 | -HSD | C] -- C:\Users\AA\Documents\Moja muzyka
[2013-01-23 22:36:22 | 000,000,000 | -HSD | C] -- C:\Users\AA\Menu Start
[2013-01-23 22:36:22 | 000,000,000 | -HSD | C] -- C:\Users\AA\AppData\Local\Historia
[2013-01-23 22:36:22 | 000,000,000 | -HSD | C] -- C:\Users\AA\Dane aplikacji
[2013-01-23 22:36:22 | 000,000,000 | -HSD | C] -- C:\Users\AA\AppData\Local\Dane aplikacji
[2013-01-23 22:36:22 | 000,000,000 | -HSD | C] -- C:\Users\AA\Cookies
[2013-01-23 22:36:21 | 000,000,000 | --SD | C] -- C:\Users\AA\AppData\Roaming\Microsoft
[2013-01-23 22:36:21 | 000,000,000 | R--D | C] -- C:\Users\AA\Videos
[2013-01-23 22:36:21 | 000,000,000 | R--D | C] -- C:\Users\AA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2013-01-23 22:36:21 | 000,000,000 | R--D | C] -- C:\Users\AA\Saved Games
[2013-01-23 22:36:21 | 000,000,000 | R--D | C] -- C:\Users\AA\Pictures
[2013-01-23 22:36:21 | 000,000,000 | R--D | C] -- C:\Users\AA\Music
[2013-01-23 22:36:21 | 000,000,000 | R--D | C] -- C:\Users\AA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2013-01-23 22:36:21 | 000,000,000 | R--D | C] -- C:\Users\AA\Links
[2013-01-23 22:36:21 | 000,000,000 | R--D | C] -- C:\Users\AA\Favorites
[2013-01-23 22:36:21 | 000,000,000 | R--D | C] -- C:\Users\AA\Downloads
[2013-01-23 22:36:21 | 000,000,000 | R--D | C] -- C:\Users\AA\Documents
[2013-01-23 22:36:21 | 000,000,000 | R--D | C] -- C:\Users\AA\Desktop
[2013-01-23 22:36:21 | 000,000,000 | R--D | C] -- C:\Users\AA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2013-01-23 22:36:21 | 000,000,000 | -H-D | C] -- C:\Users\AA\AppData
[2013-01-23 22:36:21 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Local\Temp
[2013-01-23 22:36:21 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Local\Microsoft
[2013-01-23 22:36:21 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Roaming\Media Center Programs
[2013-01-23 22:36:21 | 000,000,000 | ---D | C] -- C:\Users\AA\AppData\Roaming\Macromedia
[2013-01-23 22:36:02 | 000,000,000 | -HSD | C] -- C:\ProgramData\Ulubione
[2013-01-23 22:36:02 | 000,000,000 | -HSD | C] -- C:\ProgramData\Szablony
[2013-01-23 22:36:02 | 000,000,000 | -HSD | C] -- C:\ProgramData\Pulpit
[2013-01-23 22:36:02 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje wideo
[2013-01-23 22:36:02 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje obrazy
[2013-01-23 22:36:02 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moja muzyka
[2013-01-23 22:36:02 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Start
[2013-01-23 22:36:02 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty
[2013-01-23 22:36:02 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dane aplikacji
[2013-01-23 22:32:20 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2013-01-23 22:22:33 | 000,000,000 | ---D | C] -- C:\windows\OemDrv
[2013-01-23 22:12:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Toshiba Shared
[2013-01-23 22:12:02 | 000,482,384 | ---- | C] (TOSHIBA Corporation) -- C:\windows\SysNative\drivers\tos_sps64.sys
[2013-01-23 22:11:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA DVD PLAYER
[2013-01-23 22:08:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2013-01-23 22:06:51 | 000,000,000 | ---D | C] -- C:\windows\SysWow64\Macromed
[2013-01-23 22:06:08 | 000,140,632 | ---- | C] (TOSHIBA Corporation) -- C:\windows\SysNative\TODDSrv.exe
[2013-01-23 22:03:40 | 000,035,008 | ---- | C] (TOSHIBA Corporation) -- C:\windows\SysNative\drivers\PGEffect.sys
[2013-01-23 22:01:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Toshiba
[2013-01-23 21:59:50 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX
[2013-01-23 21:59:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\JMicron
[2013-01-23 21:59:37 | 000,000,000 | ---D | C] -- C:\windows\SysWow64\SDA
[2013-01-23 21:58:56 | 000,331,880 | ---- | C] (Realtek                                            ) -- C:\windows\SysNative\drivers\Rt64win7.sys
[2013-01-23 21:58:56 | 000,107,552 | ---- | C] (Realtek Semiconductor Corporation) -- C:\windows\SysNative\RTNUninst64.dll
[2013-01-23 21:57:56 | 000,000,000 | ---D | C] -- C:\windows\SysNative\tr
[2013-01-23 21:57:56 | 000,000,000 | ---D | C] -- C:\windows\SysNative\sv
[2013-01-23 21:57:56 | 000,000,000 | ---D | C] -- C:\windows\SysNative\sk
[2013-01-23 21:57:56 | 000,000,000 | ---D | C] -- C:\windows\SysNative\ru
[2013-01-23 21:57:56 | 000,000,000 | ---D | C] -- C:\windows\SysNative\pt
[2013-01-23 21:57:56 | 000,000,000 | ---D | C] -- C:\windows\SysNative\no
[2013-01-23 21:57:56 | 000,000,000 | ---D | C] -- C:\windows\SysNative\nl
[2013-01-23 21:57:56 | 000,000,000 | ---D | C] -- C:\windows\SysNative\it
[2013-01-23 21:57:56 | 000,000,000 | ---D | C] -- C:\windows\SysNative\hu
[2013-01-23 21:57:56 | 000,000,000 | ---D | C] -- C:\windows\SysNative\fr
[2013-01-23 21:57:56 | 000,000,000 | ---D | C] -- C:\windows\SysNative\fi
[2013-01-23 21:57:56 | 000,000,000 | ---D | C] -- C:\windows\SysNative\es
[2013-01-23 21:57:56 | 000,000,000 | ---D | C] -- C:\windows\SysNative\el
[2013-01-23 21:57:56 | 000,000,000 | ---D | C] -- C:\windows\SysNative\de
[2013-01-23 21:57:56 | 000,000,000 | ---D | C] -- C:\windows\SysNative\da
[2013-01-23 21:57:56 | 000,000,000 | ---D | C] -- C:\windows\SysNative\cs
[2013-01-23 21:57:40 | 000,000,000 | ---D | C] -- C:\Program Files\Synaptics
[2013-01-23 21:56:15 | 003,891,200 | ---- | C] (Broadcom Corporation) -- C:\windows\SysNative\bcmihvsrv64.dll
[2013-01-23 21:56:15 | 003,555,840 | ---- | C] (Broadcom Corporation) -- C:\windows\SysNative\bcmihvui64.dll
[2013-01-23 21:56:15 | 000,095,472 | ---- | C] (Broadcom Corporation) -- C:\windows\SysNative\bcmwlcoi.dll
[2013-01-23 21:56:14 | 003,058,168 | ---- | C] (Broadcom Corporation) -- C:\windows\SysNative\drivers\BCMWL664.SYS
[2013-01-23 21:56:14 | 000,000,000 | ---D | C] -- C:\Program Files\Broadcom
[2013-01-23 21:53:35 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2013-01-23 21:51:33 | 000,000,000 | ---D | C] -- C:\windows\SysWow64\RTCOM
[2013-01-23 21:51:33 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2013-01-23 21:51:19 | 002,719,504 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\WavesGUILib.dll
[2013-01-23 21:51:19 | 001,929,760 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtPgEx64.dll
[2013-01-23 21:51:19 | 001,660,448 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtkAPO64.dll
[2013-01-23 21:51:19 | 001,210,912 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RTCOM64.dll
[2013-01-23 21:51:19 | 000,612,384 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RTSnMg64.cpl
[2013-01-23 21:51:19 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\windows\SysNative\SRSTSX64.dll
[2013-01-23 21:51:19 | 000,477,216 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtkApi64.dll
[2013-01-23 21:51:19 | 000,372,936 | ---- | C] (Dolby Laboratories, Inc.) -- C:\windows\SysNative\RTEEP64A.dll
[2013-01-23 21:51:19 | 000,332,320 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtlCPAPI64.dll
[2013-01-23 21:51:19 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\windows\SysNative\RP3DHT64.dll
[2013-01-23 21:51:19 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\windows\SysNative\RP3DAA64.dll
[2013-01-23 21:51:19 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\windows\SysNative\SRSTSH64.dll
[2013-01-23 21:51:19 | 000,201,928 | ---- | C] (Dolby Laboratories, Inc.) -- C:\windows\SysNative\RTEED64A.dll
[2013-01-23 21:51:19 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\windows\SysNative\SRSHP64.dll
[2013-01-23 21:51:19 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\windows\SysNative\SRSWOW64.dll
[2013-01-23 21:51:19 | 000,149,536 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RtkCfg64.dll
[2013-01-23 21:51:19 | 000,099,016 | ---- | C] (Dolby Laboratories, Inc.) -- C:\windows\SysNative\RTEEL64A.dll
[2013-01-23 21:51:19 | 000,076,488 | ---- | C] (Dolby Laboratories, Inc.) -- C:\windows\SysNative\RTEEG64A.dll
[2013-01-23 21:51:19 | 000,069,664 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\SysNative\RCoInst64.dll
[2013-01-23 21:51:18 | 002,197,264 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioEQ.dll
[2013-01-23 21:51:18 | 001,325,328 | ---- | C] (DTS) -- C:\windows\SysNative\DTSS2SpeakerDLL64.dll
[2013-01-23 21:51:18 | 001,247,776 | ---- | C] (Realtek Semiconductor Corp.) -- C:\windows\RtlExUpd.dll
[2013-01-23 21:51:18 | 001,178,384 | ---- | C] (DTS) -- C:\windows\SysNative\DTSS2HeadphoneDLL64.dll
[2013-01-23 21:51:18 | 001,110,800 | ---- | C] (DTS) -- C:\windows\SysNative\DTSBoostDLL64.dll
[2013-01-23 21:51:18 | 000,504,592 | ---- | C] (DTS) -- C:\windows\SysNative\DTSBassEnhancementDLL64.dll
[2013-01-23 21:51:18 | 000,489,744 | ---- | C] (DTS) -- C:\windows\SysNative\DTSSymmetryDLL64.dll
[2013-01-23 21:51:18 | 000,474,896 | ---- | C] (DTS) -- C:\windows\SysNative\DTSVoiceClarityDLL64.dll
[2013-01-23 21:51:18 | 000,338,848 | ---- | C] (Fortemedia Corporation) -- C:\windows\SysNative\FMAPO64.dll
[2013-01-23 21:51:18 | 000,325,904 | ---- | C] (Waves Audio Ltd.) -- C:\windows\SysNative\MaxxAudioAPO20.dll
[2013-01-23 21:51:18 | 000,315,152 | ---- | C] (DTS) -- C:\windows\SysNative\DTSNeoPCDLL64.dll
[2013-01-23 21:51:18 | 000,268,560 | ---- | C] (DTS) -- C:\windows\SysNative\DTSLimiterDLL64.dll
[2013-01-23 21:51:18 | 000,265,488 | ---- | C] (DTS) -- C:\windows\SysNative\DTSGainCompensatorDLL64.dll
[2013-01-23 21:51:18 | 000,168,288 | ---- | C] (Andrea Electronics Corporation) -- C:\windows\SysNative\AERTAC64.dll
[2013-01-23 21:51:18 | 000,123,664 | ---- | C] (DTS) -- C:\windows\SysNative\DTSLFXAPO64.dll
[2013-01-23 21:51:18 | 000,123,152 | ---- | C] (DTS) -- C:\windows\SysNative\DTSGFXAPO64.dll
[2013-01-23 21:51:18 | 000,122,128 | ---- | C] (DTS) -- C:\windows\SysNative\DTSGFXAPONS64.dll
[2013-01-23 21:51:18 | 000,108,960 | ---- | C] (Andrea Electronics Corporation) -- C:\windows\SysNative\AERTAR64.dll
[2013-01-23 21:51:18 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
[2013-01-23 21:51:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2013-01-23 21:51:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2013-01-23 21:48:11 | 000,024,576 | ---- | C] (Toshiba) -- C:\windows\SysWow64\TSCI.dll
[2013-01-23 21:48:11 | 000,024,576 | ---- | C] (Toshiba) -- C:\windows\SysWow64\THCI.dll
[2013-01-23 21:47:35 | 000,049,664 | ---- | C] (COMPAL ELECTRONIC INC.) -- C:\windows\SysNative\HWS_Ctrl.dll
[2013-01-23 21:47:35 | 000,008,192 | ---- | C] (COMPAL ELECTRONIC INC.) -- C:\windows\SysNative\TSBWLS.dll
[2013-01-23 21:47:10 | 000,000,000 | ---D | C] -- C:\ProgramData\xp
[2013-01-23 21:47:10 | 000,000,000 | ---D | C] -- C:\ProgramData\win7_64
[2013-01-23 21:47:10 | 000,000,000 | ---D | C] -- C:\ProgramData\win7_32
[2013-01-23 21:47:10 | 000,000,000 | ---D | C] -- C:\ProgramData\vista64
[2013-01-23 21:47:10 | 000,000,000 | ---D | C] -- C:\ProgramData\vista32
[2013-01-23 21:47:10 | 000,000,000 | ---D | C] -- C:\windows\SysWow64\Microsoft.VC80.MFC
[2013-01-23 21:47:10 | 000,000,000 | ---D | C] -- C:\windows\SysNative\Microsoft.VC80.MFC
[2013-01-23 21:46:55 | 000,000,000 | ---D | C] -- C:\windows\Downloaded Installations
[2013-01-23 21:45:00 | 000,538,136 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\drivers\iaStor.sys
[2013-01-23 21:42:45 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2013-01-23 21:42:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
[2013-01-23 21:42:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2013-01-23 21:42:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies
[2013-01-23 21:42:15 | 000,000,000 | ---D | C] -- C:\windows\SysWow64\AGEIA
[2013-01-23 21:42:04 | 000,659,048 | ---- | C] (NVIDIA Corporation) -- C:\windows\SysNative\nvuninst.exe
[2013-01-23 21:39:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\postureAgent
[2013-01-23 21:39:48 | 000,056,344 | ---- | C] (Intel Corporation) -- C:\windows\SysNative\drivers\HECIx64.sys
[2013-01-23 21:37:03 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\windows\SysWow64\CSVer.dll
[2013-01-23 21:37:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel
[2013-01-23 21:36:26 | 000,000,000 | ---D | C] -- C:\windows\SoftwareDistribution
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2013-02-01 10:12:48 | 000,016,080 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013-02-01 10:12:48 | 000,016,080 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013-02-01 10:11:45 | 001,549,696 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI
[2013-02-01 10:11:45 | 000,697,912 | ---- | M] () -- C:\windows\SysNative\perfh015.dat
[2013-02-01 10:11:45 | 000,616,008 | ---- | M] () -- C:\windows\SysNative\perfh009.dat
[2013-02-01 10:11:45 | 000,134,990 | ---- | M] () -- C:\windows\SysNative\perfc015.dat
[2013-02-01 10:11:45 | 000,106,388 | ---- | M] () -- C:\windows\SysNative\perfc009.dat
[2013-02-01 10:08:38 | 000,001,839 | ---- | M] () -- C:\Users\Public\Desktop\McAfee Internet Security.lnk
[2013-02-01 10:04:40 | 000,002,050 | ---- | M] () -- C:\Users\AA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
[2013-02-01 10:04:14 | 000,001,036 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2013-02-01 10:04:00 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2013-02-01 10:03:56 | 3166,703,616 | -HS- | M] () -- C:\hiberfil.sys
[2013-02-01 07:54:38 | 000,001,040 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2013-01-31 23:42:32 | 000,003,288 | ---- | M] () -- C:\bootsqm.dat
[2013-01-28 12:14:12 | 000,276,200 | ---- | M] () -- C:\windows\SysNative\FNTCACHE.DAT
[2013-01-27 21:17:37 | 000,001,022 | ---- | M] () -- C:\Users\Public\Desktop\PowerISO.lnk
[2013-01-27 21:05:39 | 000,000,860 | ---- | M] () -- C:\Users\AA\Desktop\Nero 12.lnk
[2013-01-27 19:00:03 | 000,001,531 | ---- | M] () -- C:\Users\AA\Desktop\AbiWord.lnk
[2013-01-27 18:17:59 | 000,000,000 | -H-- | M] () -- C:\windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2013-01-26 13:04:58 | 000,001,105 | ---- | M] () -- C:\Users\AA\Desktop\GG.lnk
[2013-01-26 12:28:09 | 000,000,934 | ---- | M] () -- C:\Users\AA\Desktop\XnView.lnk
[2013-01-24 13:30:58 | 000,072,822 | ---- | M] () -- C:\windows\SysWow64\ieuinit.inf
[2013-01-24 13:30:56 | 000,072,822 | ---- | M] () -- C:\windows\SysNative\ieuinit.inf
[2013-01-24 13:04:05 | 000,001,207 | ---- | M] () -- C:\Users\Public\Desktop\CWK.lnk
[2013-01-24 13:01:55 | 000,001,306 | ---- | M] () -- C:\Users\AA\Desktop\Media Player Classic.lnk
[2013-01-24 12:36:20 | 000,000,000 | -H-- | M] () -- C:\windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2013-01-24 12:14:11 | 000,001,051 | ---- | M] () -- C:\Users\Public\Desktop\JDownloader.lnk
[2013-01-24 11:57:39 | 000,001,081 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2013-01-24 11:55:30 | 022,916,830 | ---- | M] () -- C:\Users\AA\Desktop\vlc-2-0-5-win32.exe
[2013-01-24 11:47:32 | 000,001,864 | ---- | M] () -- C:\Users\Public\Desktop\Winamp.lnk
[2013-01-24 10:32:57 | 000,000,095 | ---- | M] () -- C:\windows\winamp.ini
[2013-01-24 00:40:15 | 000,000,958 | ---- | M] () -- C:\Users\Public\Desktop\µTorrent.lnk
[2013-01-24 00:14:07 | 000,001,605 | -H-- | M] () -- C:\windows\EPMBatch.ept
[2013-01-24 00:04:44 | 000,001,501 | ---- | M] () -- C:\Users\Public\Desktop\EASEUS Partition Master 9.1.1 Professional Edition.lnk
[2013-01-24 00:03:15 | 050,424,886 | ---- | M] () -- C:\Users\AA\EASEUS-Partition-Master-9.1.1-Professional-Edition.rar
[2013-01-23 23:52:23 | 001,376,768 | ---- | M] () -- C:\Users\AA\7z920-x64(dobreprogramy.pl).msi
[2013-01-23 23:50:41 | 031,840,355 | ---- | M] () -- C:\Users\AA\Paron.Magic2010-keys-kobe.rar
[2013-01-23 23:25:41 | 000,697,864 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerApp.exe
[2013-01-23 23:25:41 | 000,074,248 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\SysWow64\FlashPlayerCPLApp.cpl
[2013-01-23 22:58:53 | 012,774,200 | ---- | M] (Opera Software ASA) -- C:\Users\AA\Opera_1212_int_Setup.exe
[2013-01-23 22:33:16 | 000,064,519 | ---- | M] () -- C:\windows\SysWow64\license.rtf
[2013-01-23 22:33:16 | 000,064,519 | ---- | M] () -- C:\windows\SysNative\license.rtf
[2013-01-23 22:09:15 | 000,000,000 | ---- | M] () -- C:\windows\NDSTray.INI
[2013-01-23 21:57:43 | 000,000,000 | -H-- | M] () -- C:\windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2013-01-23 21:56:30 | 000,696,784 | ---- | M] () -- C:\windows\SysNative\oem14.inf
[2013-01-23 21:56:12 | 000,006,656 | ---- | M] () -- C:\windows\SysNative\bcmwlrc.dll
[2013-01-23 21:56:11 | 003,891,200 | ---- | M] (Broadcom Corporation) -- C:\windows\SysNative\bcmihvsrv64.dll
[2013-01-23 21:56:11 | 003,555,840 | ---- | M] (Broadcom Corporation) -- C:\windows\SysNative\bcmihvui64.dll
[2013-01-23 21:56:11 | 003,058,168 | ---- | M] (Broadcom Corporation) -- C:\windows\SysNative\drivers\BCMWL664.SYS
[2013-01-23 21:56:11 | 000,095,472 | ---- | M] (Broadcom Corporation) -- C:\windows\SysNative\bcmwlcoi.dll
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2013-01-31 23:42:32 | 000,003,288 | ---- | C] () -- C:\bootsqm.dat
[2013-01-27 21:17:37 | 000,001,022 | ---- | C] () -- C:\Users\Public\Desktop\PowerISO.lnk
[2013-01-27 21:05:39 | 000,000,860 | ---- | C] () -- C:\Users\AA\Desktop\Nero 12.lnk
[2013-01-27 19:07:15 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
[2013-01-27 19:00:03 | 000,001,531 | ---- | C] () -- C:\Users\AA\Desktop\AbiWord.lnk
[2013-01-27 18:17:59 | 000,000,000 | -H-- | C] () -- C:\windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2013-01-26 13:04:58 | 000,001,105 | ---- | C] () -- C:\Users\AA\Desktop\GG.lnk
[2013-01-26 13:04:46 | 000,001,113 | ---- | C] () -- C:\Users\AA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk
[2013-01-26 12:27:19 | 000,000,934 | ---- | C] () -- C:\Users\AA\Desktop\XnView.lnk
[2013-01-26 12:08:47 | 000,347,904 | ---- | C] () -- C:\windows\SysNative\systemsf.ebd
[2013-01-26 12:07:19 | 000,010,429 | ---- | C] () -- C:\windows\SysNative\ScavengeSpace.xml
[2013-01-26 12:07:06 | 000,105,559 | ---- | C] () -- C:\windows\SysWow64\RacRules.xml
[2013-01-26 12:07:06 | 000,105,559 | ---- | C] () -- C:\windows\SysNative\RacRules.xml
[2013-01-26 12:06:47 | 000,001,041 | ---- | C] () -- C:\windows\SysWow64\tcpbidi.xml
[2013-01-24 21:47:14 | 000,001,432 | ---- | C] () -- C:\Users\AA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2013-01-24 13:43:53 | 000,000,003 | ---- | C] () -- C:\windows\SysNative\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2013-01-24 13:30:58 | 000,072,822 | ---- | C] () -- C:\windows\SysWow64\ieuinit.inf
[2013-01-24 13:30:56 | 000,072,822 | ---- | C] () -- C:\windows\SysNative\ieuinit.inf
[2013-01-24 13:22:59 | 000,000,003 | ---- | C] () -- C:\windows\SysNative\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2013-01-24 13:04:05 | 000,001,207 | ---- | C] () -- C:\Users\Public\Desktop\CWK.lnk
[2013-01-24 13:01:55 | 000,001,306 | ---- | C] () -- C:\Users\AA\Desktop\Media Player Classic.lnk
[2013-01-24 12:36:20 | 000,000,000 | -H-- | C] () -- C:\windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2013-01-24 12:14:11 | 000,001,051 | ---- | C] () -- C:\Users\Public\Desktop\JDownloader.lnk
[2013-01-24 11:57:39 | 000,001,081 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2013-01-24 11:54:25 | 022,916,830 | ---- | C] () -- C:\Users\AA\Desktop\vlc-2-0-5-win32.exe
[2013-01-24 11:52:13 | 000,178,688 | ---- | C] () -- C:\windows\SysWow64\unrar.dll
[2013-01-24 11:26:26 | 000,001,864 | ---- | C] () -- C:\Users\Public\Desktop\Winamp.lnk
[2013-01-24 10:31:44 | 000,000,095 | ---- | C] () -- C:\windows\winamp.ini
[2013-01-24 00:40:15 | 000,000,958 | ---- | C] () -- C:\Users\Public\Desktop\µTorrent.lnk
[2013-01-24 00:12:57 | 000,001,605 | -H-- | C] () -- C:\windows\EPMBatch.ept
[2013-01-24 00:04:44 | 000,001,501 | ---- | C] () -- C:\Users\Public\Desktop\EASEUS Partition Master 9.1.1 Professional Edition.lnk
[2013-01-24 00:04:43 | 000,016,256 | ---- | C] () -- C:\windows\SysNative\EuEpmGdi.dll
[2013-01-24 00:04:42 | 003,316,736 | ---- | C] () -- C:\windows\SysNative\BootMan.exe
[2013-01-24 00:04:42 | 002,469,760 | ---- | C] () -- C:\windows\SysWow64\BootMan.exe
[2013-01-24 00:04:42 | 000,100,232 | ---- | C] () -- C:\windows\SysNative\setupempdrvx64.exe
[2013-01-24 00:04:42 | 000,086,408 | ---- | C] () -- C:\windows\SysWow64\setupempdrv03.exe
[2013-01-24 00:04:42 | 000,019,840 | ---- | C] () -- C:\windows\SysWow64\EuEpmGdi.dll
[2013-01-24 00:04:42 | 000,016,776 | ---- | C] () -- C:\windows\SysNative\epmntdrv.sys
[2013-01-24 00:04:42 | 000,014,216 | ---- | C] () -- C:\windows\SysWow64\epmntdrv.sys
[2013-01-24 00:04:42 | 000,009,096 | ---- | C] () -- C:\windows\SysNative\EuGdiDrv.sys
[2013-01-24 00:04:42 | 000,008,456 | ---- | C] () -- C:\windows\SysWow64\EuGdiDrv.sys
[2013-01-23 23:59:58 | 050,424,886 | ---- | C] () -- C:\Users\AA\EASEUS-Partition-Master-9.1.1-Professional-Edition.rar
[2013-01-23 23:52:23 | 001,376,768 | ---- | C] () -- C:\Users\AA\7z920-x64(dobreprogramy.pl).msi
[2013-01-23 23:48:55 | 031,840,355 | ---- | C] () -- C:\Users\AA\Paron.Magic2010-keys-kobe.rar
[2013-01-23 23:25:55 | 000,001,040 | ---- | C] () -- C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2013-01-23 23:25:55 | 000,001,036 | ---- | C] () -- C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2013-01-23 22:59:43 | 000,001,856 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
[2013-01-23 22:41:26 | 000,001,466 | ---- | C] () -- C:\Users\AA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2013-01-23 22:36:21 | 000,002,050 | ---- | C] () -- C:\Users\AA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
[2013-01-23 22:09:15 | 000,000,000 | ---- | C] () -- C:\windows\NDSTray.INI
[2013-01-23 22:08:52 | 000,002,435 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2010.lnk
[2013-01-23 21:58:56 | 000,074,272 | ---- | C] () -- C:\windows\SysNative\RtNicProp64.dll
[2013-01-23 21:57:43 | 000,000,000 | -H-- | C] () -- C:\windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2013-01-23 21:56:39 | 000,696,784 | ---- | C] () -- C:\windows\SysNative\oem14.inf
[2013-01-23 21:56:15 | 000,006,656 | ---- | C] () -- C:\windows\SysNative\bcmwlrc.dll
[2013-01-23 21:51:21 | 000,002,204 | ---- | C] () -- C:\windows\SysNative\drivers\RtPCEE3.DAT
[2013-01-23 21:51:21 | 000,000,852 | ---- | C] () -- C:\windows\SysNative\drivers\RTKHDRC.dat
[2013-01-23 21:51:21 | 000,000,712 | ---- | C] () -- C:\windows\SysNative\drivers\RTEQEX1.dat
[2013-01-23 21:51:21 | 000,000,712 | ---- | C] () -- C:\windows\SysNative\drivers\RTEQEX0.dat
[2013-01-23 21:51:21 | 000,000,048 | ---- | C] () -- C:\windows\SysNative\drivers\rtkhdaud.dat
[2013-01-23 21:33:17 | 3166,703,616 | -HS- | C] () -- C:\hiberfil.sys

< End of report >