OTL logfile created on: 2013-05-05 14:01:31 - Run 3 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Piotrek\Downloads An unknown product (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16540) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 0,85 Gb Available Physical Memory | 42,30% Memory free 4,25 Gb Paging File | 2,79 Gb Available in Paging File | 65,73% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 451,05 Gb Total Space | 170,80 Gb Free Space | 37,87% Space Free | Partition Type: NTFS Drive E: | 166,02 Gb Total Space | 75,26 Gb Free Space | 45,34% Space Free | Partition Type: NTFS Drive F: | 231,65 Gb Total Space | 104,80 Gb Free Space | 45,24% Space Free | Partition Type: NTFS Drive H: | 247,58 Gb Total Space | 245,96 Gb Free Space | 99,34% Space Free | Partition Type: NTFS Computer Name: BRZEZPC | User Name: Marek | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2013-05-05 13:38:45 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Piotrek\Downloads\OTL(1).exe PRC - [2013-04-22 15:22:15 | 000,920,472 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe PRC - [2013-03-27 17:24:50 | 000,138,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1114.318_x86__8wekyb3d8bbwe\LiveComm.exe PRC - [2013-03-27 16:17:42 | 000,185,688 | ---- | M] (Garmin Ltd or its subsidiaries) -- C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe PRC - [2013-03-25 08:04:59 | 001,822,424 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_6_602_180.exe PRC - [2013-03-21 03:52:22 | 000,491,008 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe PRC - [2013-03-21 03:51:44 | 000,219,136 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe PRC - [2013-03-20 23:33:06 | 000,291,840 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe PRC - [2013-03-02 10:24:03 | 000,053,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhostex.exe PRC - [2013-01-10 01:26:46 | 001,611,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mmc.exe PRC - [2012-12-24 05:33:29 | 000,144,520 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\20.3.1.22\ccsvchst.exe PRC - [2012-10-11 07:56:41 | 002,115,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2012-07-26 05:30:19 | 000,029,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RuntimeBroker.exe PRC - [2012-07-26 05:20:44 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dasHost.exe PRC - [2010-12-13 15:37:46 | 000,135,536 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft LifeCam\MSCamS32.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2013-05-05 11:31:25 | 013,320,192 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Web\4f3fa291f02296ddbf4bc73a5d65368a\System.Web.ni.dll MOD - [2013-04-22 15:22:15 | 003,133,336 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll MOD - [2013-03-25 08:04:59 | 014,717,144 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_6_602_180.dll MOD - [2013-02-25 14:51:08 | 001,621,504 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\MMCEx\838072c2e0a069343c5bcba936c816a3\MMCEx.ni.dll MOD - [2013-02-25 14:51:08 | 000,263,168 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\MMCFxCommon\b3609fa181bf5c7644b2599b95362202\MMCFxCommon.ni.dll MOD - [2013-02-25 14:51:06 | 006,387,200 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\MIGUIControls\f6465c5b359f3f983fef737d8a5dfe1e\MIGUIControls.ni.dll MOD - [2013-02-25 14:49:19 | 000,570,880 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Microsoft.Mff1be75b#\89c0b83855be7e373eea5403bb281c09\Microsoft.ManagementConsole.ni.dll MOD - [2013-02-25 14:49:08 | 000,554,496 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\EventViewer\abef2e61152221c6209a0a813bde37d0\EventViewer.ni.dll MOD - [2013-02-25 14:46:08 | 012,700,160 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\9c95779cc3d65cda80695cabc367476b\System.Windows.Forms.ni.dll MOD - [2013-02-25 14:45:59 | 000,220,160 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Serv759bfb78#\1f3dbc5b0a874bf49a4559e71274f8ba\System.ServiceProcess.ni.dll MOD - [2013-02-07 17:57:33 | 007,561,216 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml\e1ec8b9a6d4f9af9d6065c4187fb1b5f\System.Xml.ni.dll MOD - [2013-02-07 17:56:46 | 001,631,744 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Drawing\38638a559066bf7f2325a53ed53629bc\System.Drawing.ni.dll MOD - [2013-02-07 17:56:36 | 000,958,464 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Configuration\05cc6faa6704d01e78700561b22937e3\System.Configuration.ni.dll MOD - [2013-02-07 17:56:03 | 006,998,016 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Core\0247de206c1c48ac4f8b55df16468405\System.Core.ni.dll MOD - [2013-02-07 17:55:57 | 009,937,408 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\a7811936e59aaee26b1d9d467174d6d4\System.ni.dll MOD - [2013-02-07 17:55:48 | 000,045,056 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Accessibility\d6c3813f8784ba727c402f06663a400b\Accessibility.ni.dll MOD - [2013-02-07 17:55:47 | 016,544,768 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\374a0cc6603f58864831897ef723bd4a\mscorlib.ni.dll MOD - [2012-06-18 17:24:30 | 000,260,096 | ---- | M] () -- C:\Program Files\Notepad++\NppShell_05.dll MOD - [2012-05-30 08:51:08 | 000,699,280 | R--- | M] () -- C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\20.3.1.22\wincfi39.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- C:\WINDOWS\system32\opsrv.exe /startedbyscm:BB66DA22-40E2A281-OpiekunService -- (OpSrv) SRV - [2013-04-22 15:22:15 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2013-03-29 21:53:56 | 000,543,656 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2013-03-27 16:17:42 | 000,185,688 | ---- | M] (Garmin Ltd or its subsidiaries) [Auto | Running] -- C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe -- (Garmin Core Update Service) SRV - [2013-03-21 03:51:44 | 000,219,136 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility) SRV - [2013-03-20 23:33:06 | 000,291,840 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service) SRV - [2013-03-02 10:23:17 | 000,114,176 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\TimeBrokerServer.dll -- (TimeBroker) SRV - [2013-03-02 10:23:15 | 000,117,760 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\SystemEventsBrokerServer.dll -- (SystemEventsBroker) SRV - [2013-02-28 18:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [On_Demand | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2013-02-02 10:39:33 | 000,367,104 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\netprofmsvc.dll -- (netprofm) SRV - [2013-01-29 02:02:40 | 000,013,344 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend) SRV - [2013-01-13 17:07:45 | 000,316,888 | ---- | M] (Protection Technology) [Disabled | Stopped] -- C:\WINDOWS\System32\appdrvrem01.exe -- (appdrvrem01) SRV - [2013-01-10 01:26:37 | 001,532,928 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\wlidsvc.dll -- (wlidsvc) SRV - [2013-01-10 01:26:01 | 000,349,696 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\lsm.dll -- (LSM) SRV - [2012-12-24 05:33:29 | 000,144,520 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\20.3.1.22\ccSvcHst.exe -- (NIS) SRV - [2012-12-18 21:08:28 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2012-11-06 06:54:13 | 002,205,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\spool\drivers\w32x86\3\PrintConfig.dll -- (PrintNotify) SRV - [2012-11-06 06:18:36 | 000,136,704 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\AudioEndpointBuilder.dll -- (AudioEndpointBuilder) SRV - [2012-09-20 08:32:32 | 002,151,128 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\WSService.dll -- (WSService) SRV - [2012-09-20 07:53:51 | 000,095,232 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\fhsvc.dll -- (fhsvc) SRV - [2012-09-20 07:53:35 | 000,142,848 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\bisrv.dll -- (BrokerInfrastructure) SRV - [2012-07-26 05:20:19 | 000,051,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wiarpc.dll -- (WiaRpc) SRV - [2012-07-26 05:20:13 | 000,226,304 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\wcmsvc.dll -- (Wcmsvc) SRV - [2012-07-26 05:20:11 | 000,192,512 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\vaultsvc.dll -- (VaultSvc) SRV - [2012-07-26 05:20:04 | 000,018,432 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc) SRV - [2012-07-26 05:20:04 | 000,010,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\svsvc.dll -- (svsvc) SRV - [2012-07-26 05:19:54 | 000,132,608 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2012-07-26 05:19:40 | 002,028,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) SRV - [2012-07-26 05:19:21 | 000,138,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\NcaSvc.dll -- (NcaSvc) SRV - [2012-07-26 05:19:21 | 000,062,976 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\NcdAutoSetup.dll -- (NcdAutoSetup) SRV - [2012-07-26 05:18:47 | 000,043,520 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\keyiso.dll -- (KeyIso) SRV - [2012-07-26 05:18:24 | 000,027,136 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\efssvc.dll -- (EFS) SRV - [2012-07-26 05:18:18 | 000,161,792 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\DeviceSetupManager.dll -- (DsmSvc) SRV - [2012-07-26 05:18:13 | 000,261,632 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\das.dll -- (DeviceAssociationService) SRV - [2012-07-26 05:17:58 | 000,109,568 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\AUInstallAgent.dll -- (AllUserInstallAgent) SRV - [2012-07-26 02:27:36 | 000,276,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicvss) SRV - [2012-07-26 02:27:36 | 000,276,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmictimesync) SRV - [2012-07-26 02:27:36 | 000,276,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicshutdown) SRV - [2012-07-26 02:27:36 | 000,276,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicrdv) SRV - [2012-07-26 02:27:36 | 000,276,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmickvpexchange) SRV - [2012-07-26 02:27:36 | 000,276,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\icsvc.dll -- (vmicheartbeat) SRV - [2012-07-25 19:04:02 | 000,094,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe -- (Te.Service) SRV - [2012-07-25 18:20:50 | 000,133,632 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Kits\8.0\App Certification Kit\fussvc.exe -- (fussvc) SRV - [2012-01-18 14:38:28 | 000,155,320 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion) SRV - [2010-12-13 15:37:46 | 000,135,536 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft LifeCam\MSCamS32.exe -- (MSCamSvc) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\XDva401.sys -- (XDva401) DRV - [2013-05-03 12:50:49 | 001,603,824 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\VirusDefs\20130504.007\NAVEX15.SYS -- (NAVEX15) DRV - [2013-05-03 12:50:49 | 000,093,296 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\VirusDefs\20130504.007\NAVENG.SYS -- (NAVENG) DRV - [2013-04-13 01:53:06 | 001,000,024 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\BASHDefs\20130412.001\BHDrvx86.sys -- (BHDrvx86) DRV - [2013-04-06 16:32:06 | 000,142,496 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\SYMEVENT.SYS -- (SymEvent) DRV - [2013-04-06 04:59:01 | 000,376,480 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl) DRV - [2013-04-06 04:59:01 | 000,106,656 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv) DRV - [2013-04-05 16:07:10 | 000,386,720 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\Definitions\IPSDefs\20130505.002\IDSvix86.sys -- (IDSVix86) DRV - [2013-03-21 08:36:48 | 000,015,968 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\amdkmafd.sys -- (amdkmafd) DRV - [2013-03-21 08:31:40 | 009,951,744 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\atikmdag.sys -- (amdkmdag) DRV - [2013-03-21 03:25:08 | 000,460,288 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\atikmpag.sys -- (amdkmdap) DRV - [2013-03-02 11:54:25 | 000,121,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\tpm.sys -- (TPM) DRV - [2013-03-02 11:06:16 | 000,057,576 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\pdc.sys -- (pdc) DRV - [2013-03-02 10:52:49 | 000,268,008 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\USBXHCI.SYS -- (USBXHCI) DRV - [2013-03-02 10:52:47 | 000,237,800 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\spaceport.sys -- (spaceport) DRV - [2013-03-02 10:52:47 | 000,066,280 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\storahci.sys -- (storahci) DRV - [2013-02-09 10:42:01 | 000,025,280 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\hamachi.sys -- (hamachi) DRV - [2013-02-07 10:28:36 | 000,136,808 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\ssadmdm.sys -- (ssadmdm) DRV - [2013-02-07 10:28:36 | 000,121,064 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\ssadbus.sys -- (ssadbus) DRV - [2013-02-07 10:28:36 | 000,114,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\ssadserd.sys -- (ssadserd) DRV - [2013-02-07 10:28:36 | 000,030,312 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\ssadadb.sys -- (androidusb) DRV - [2013-02-07 10:28:36 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\ssadmdfl.sys -- (ssadmdfl) DRV - [2013-02-02 11:00:11 | 000,361,704 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\USBHUB3.SYS -- (USBHUB3) DRV - [2013-02-02 09:31:49 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\BthAvrcpTg.sys -- (BthAvrcpTg) DRV - [2013-01-31 05:18:18 | 000,338,592 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\NIS\1403010.016\symnets.sys -- (SymNetS) DRV - [2013-01-31 05:18:06 | 000,934,488 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\System32\Drivers\NIS\1403010.016\symefa.sys -- (SymEFA) DRV - [2013-01-29 03:45:18 | 000,602,712 | ---- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\Drivers\NIS\1403010.016\srtsp.sys -- (SRTSP) DRV - [2013-01-29 03:45:18 | 000,032,344 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\NIS\1403010.016\srtspx.sys -- (SRTSPX) DRV - [2013-01-29 02:02:46 | 000,029,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\WdBoot.sys -- (WdBoot) DRV - [2013-01-29 01:07:34 | 000,193,936 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\Drivers\WdFilter.sys -- (WdFilter) DRV - [2013-01-22 04:15:32 | 000,367,704 | ---- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\NIS\1403010.016\symds.sys -- (SymDS) DRV - [2013-01-15 12:11:20 | 000,079,360 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\AtihdW83.sys -- (AtiHDAudioService) DRV - [2013-01-13 17:07:46 | 002,627,760 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\Windows\System32\Drivers\appdrv01.sys -- (appdrv01) DRV - [2013-01-10 03:07:00 | 000,024,808 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\msgpiowin32.sys -- (msgpiowin32) DRV - [2012-12-21 14:54:00 | 000,014,920 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\epmntdrv.sys -- (epmntdrv) DRV - [2012-12-21 14:53:58 | 000,009,160 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\EuGdiDrv.sys -- (EuGdiDrv) DRV - [2012-11-27 05:53:14 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\BthhfHid.sys -- (bthhfhid) DRV - [2012-11-20 06:56:58 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\hidi2c.sys -- (hidi2c) DRV - [2012-11-16 04:22:01 | 000,175,264 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\NIS\1403010.016\ironx86.sys -- (SymIRON) DRV - [2012-11-16 04:18:04 | 000,134,304 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\NIS\1403010.016\ccsetx86.sys -- (ccSet_NIS) DRV - [2012-11-15 20:45:14 | 000,021,400 | R--- | M] (Symantec Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\NIS\1403010.016\symelam.sys -- (SymELAM) DRV - [2012-11-06 05:52:56 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\fxppm.sys -- (FxPPM) DRV - [2012-10-12 09:12:33 | 000,023,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV - [2012-10-11 07:45:31 | 000,050,920 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\System32\Drivers\dam.sys -- (dam) DRV - [2012-10-11 07:28:23 | 000,046,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\sdstor.sys -- (sdstor) DRV - [2012-09-20 09:09:32 | 000,031,464 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\Drivers\cnghwassist.sys -- (cnghwassist) DRV - [2012-09-20 08:34:10 | 000,179,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\UCX01000.SYS -- (UCX01000) DRV - [2012-09-20 08:34:07 | 000,097,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\msgpioclx.sys -- (GPIOClx0101) DRV - [2012-08-29 19:46:12 | 000,024,424 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\dfx11_1.sys -- (DFX11_1) DRV - [2012-07-26 06:17:18 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\condrv.sys -- (condrv) DRV - [2012-07-26 05:48:44 | 000,058,608 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\acpiex.sys -- (acpiex) DRV - [2012-07-26 05:42:33 | 000,068,848 | ---- | M] (LSI Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\lsi_sss.sys -- (LSI_SSS) DRV - [2012-07-26 05:42:32 | 000,099,056 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\EhStorTcgDrv.sys -- (EhStorTcgDrv) DRV - [2012-07-26 05:42:32 | 000,070,384 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\EhStorClass.sys -- (EhStorClass) DRV - [2012-07-26 05:42:31 | 000,085,232 | ---- | M] (LSI) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\3ware.sys -- (3ware) DRV - [2012-07-26 05:42:19 | 000,285,424 | ---- | M] (VIA Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\VSTXRAID.SYS -- (VSTXRAID) DRV - [2012-07-26 05:42:19 | 000,080,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\VerifierExt.sys -- (VerifierExt) DRV - [2012-07-26 05:42:18 | 000,076,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\uaspstor.sys -- (UASPStor) DRV - [2012-07-26 05:42:15 | 000,059,120 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\mvumis.sys -- (mvumis) DRV - [2012-07-26 05:40:36 | 000,038,640 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\wfplwfs.sys -- (WFPLWFS) DRV - [2012-07-26 05:40:10 | 000,256,240 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\clfs.sys -- (CLFS) DRV - [2012-07-26 05:39:55 | 000,029,936 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\terminpt.sys -- (terminpt) DRV - [2012-07-26 05:33:00 | 000,130,024 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\vmbus.sys -- (vmbus) DRV - [2012-07-26 05:33:00 | 000,042,344 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\vmstorfl.sys -- (storflt) DRV - [2012-07-26 05:33:00 | 000,032,872 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Stopped] -- C:\Windows\System32\Drivers\storvsc.sys -- (storvsc) DRV - [2012-07-26 04:36:54 | 000,042,496 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\BasicDisplay.sys -- (BasicDisplay) DRV - [2012-07-26 04:36:49 | 000,007,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\mshidumdf.sys -- (mshidumdf) DRV - [2012-07-26 04:36:36 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\HyperVideo.sys -- (HyperVideo) DRV - [2012-07-26 04:36:35 | 000,024,576 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\BasicRender.sys -- (BasicRender) DRV - [2012-07-26 04:35:30 | 000,006,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\vms3cap.sys -- (s3cap) DRV - [2012-07-26 04:35:28 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\Drivers\npsvctrig.sys -- (npsvctrig) DRV - [2012-07-26 04:35:10 | 000,015,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\kdnic.sys -- (kdnic) DRV - [2012-07-26 04:35:06 | 000,008,704 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\acpitime.sys -- (acpitime) DRV - [2012-07-26 04:35:04 | 000,009,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\vmgencounter.sys -- (gencounter) DRV - [2012-07-26 04:34:43 | 000,008,704 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\acpipagr.sys -- (acpipagr) DRV - [2012-07-26 04:34:42 | 000,015,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\WpdUpFltr.sys -- (WpdUpFltr) DRV - [2012-07-26 04:34:22 | 000,018,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\VMBusHID.sys -- (VMBusHID) DRV - [2012-07-26 04:34:04 | 000,010,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\hyperkbd.sys -- (hyperkbd) DRV - [2012-07-26 04:33:53 | 000,051,200 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\SerCx.sys -- (SerCx) DRV - [2012-07-26 04:33:50 | 000,046,080 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\SpbCx.sys -- (SpbCx) DRV - [2012-07-26 04:33:37 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\winusb.sys -- (WinUSB) DRV - [2012-07-26 04:33:29 | 000,027,264 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\TsUsbGD.sys -- (TsUsbGD) DRV - [2012-07-26 04:33:16 | 000,044,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\bthhfenum.sys -- (BthHFEnum) DRV - [2012-07-26 04:32:54 | 000,049,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV - [2012-07-26 04:32:53 | 000,028,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\dmvsc.sys -- (dmvsc) DRV - [2012-07-26 04:32:02 | 000,035,328 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\wpcfltr.sys -- (wpcfltr) DRV - [2012-07-26 04:31:11 | 000,110,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\NdisImPlatform.sys -- (NdisImPlatform) DRV - [2012-07-26 04:30:56 | 000,057,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\mslldp.sys -- (MsLldp) DRV - [2012-07-26 04:30:39 | 000,084,480 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\Drivers\Ndu.sys -- (Ndu) DRV - [2012-07-26 00:49:40 | 000,495,104 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\Rt630x86.sys -- (RTL8168) DRV - [2011-11-25 15:04:40 | 000,025,200 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\ggsemc.sys -- (ggsemc) DRV - [2011-11-25 15:04:40 | 000,012,400 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\ggflt.sys -- (ggflt) DRV - [2010-12-13 15:37:46 | 000,030,576 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\Drivers\nx6000.sys -- (MSHUSBVideo) DRV - [2010-07-04 21:51:26 | 000,004,096 | ---- | M] () [Kernel | Unavailable | Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5) DRV - [2008-05-16 13:33:14 | 000,115,752 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\s0016unic.sys -- (s0016unic) DRV - [2008-05-16 13:33:14 | 000,025,512 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\s0016nd5.sys -- (s0016nd5) DRV - [2008-05-16 13:33:14 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\s0016mdfl.sys -- (s0016mdfl) DRV - [2008-05-16 13:33:12 | 000,120,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\s0016mdm.sys -- (s0016mdm) DRV - [2008-05-16 13:33:12 | 000,114,216 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\s0016mgmt.sys -- (s0016mgmt) DRV - [2008-05-16 13:33:12 | 000,110,632 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\s0016obex.sys -- (s0016obex) DRV - [2008-05-16 13:33:12 | 000,089,256 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\s0016bus.sys -- (s0016bus) DRV - [2002-07-17 16:20:32 | 000,084,832 | ---- | M] (Adaptec) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\Drivers\ASPI32.SYS -- (ASPI) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = B6 66 C1 A1 A7 DA CD 01 [binary data] IE - HKCU\..\SearchScopes,DefaultScope = {83A62B22-58D1-471F-B6BC-9F7EE0A27AAF} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR IE - HKCU\..\SearchScopes\{83A62B22-58D1-471F-B6BC-9F7EE0A27AAF}: "URL" = http://www.google.com/search?hl=pl&q={searchTerms} IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:20.0.1 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll () FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.5: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{6D5C8FC4-DE46-41bf-9092-93F0F78E9115}: C:\ProgramData\Norton\{78CA3BF0-9C3B-40e1-B46D-38C877EF059A}\NSM_2.6.0.61\coFFFw\ FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\web2pdfextension@web2pdf.adobedotcom: C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2013-03-28 19:41:10 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\IPSFFPlgn\ [2013-04-06 16:32:36 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.3.0.36\coFFPlgn\ [2013-05-01 10:04:35 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013-04-22 15:22:16 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013-04-17 19:22:33 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2013-03-11 19:57:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marek\AppData\Roaming\mozilla\Extensions [2013-03-09 15:47:49 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2013-04-22 15:22:15 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2013-01-11 03:05:40 | 000,033,968 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2013-03-07 18:48:47 | 000,002,980 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2013-03-07 18:48:47 | 000,001,619 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2013-03-07 18:48:47 | 000,001,130 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2013-03-07 18:48:47 | 000,001,071 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2013-03-07 18:48:47 | 000,001,396 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2013-03-07 18:48:47 | 000,001,896 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter} CHR - homepage: http://www.gazeta.pl/0,0.html?p=137 CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\26.0.1410.64\pdf.dll CHR - plugin: Norton Identity Safe (Enabled) = C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.1.0.32_0\npcoplgn.dll CHR - plugin: Microsoft Office 2013 (Enabled) = C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.124\npGoogleUpdate3.dll CHR - plugin: Microsoft Office 2013 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll CHR - Extension: Dysk Google = C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: WOT = C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp\1.4.11_0\ CHR - Extension: YouTube = C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\ CHR - Extension: Szukaj w Google = C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: Adobe Acrobat \u2014 utw\u00F3rz PDF = C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj\11.0.0.379_0\ CHR - Extension: AdBlock = C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.5.61_0\ CHR - Extension: Norton Identity Protection = C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.3.3.19_0\ CHR - Extension: Gmail = C:\Users\Marek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2013-04-20 11:14:40 | 000,000,922 | ---- | M]) - C:\Windows\System32\Drivers\etc\hosts O1 - Hosts: 127.0.0.1 tv.tarnobrzeg.pl O1 - Hosts: 127.0.0.1 www.tv.tarnobrzeg.pl O1 - Hosts: 127.0.0.1 update.silverangel.org O2 - BHO: (Lync Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\20.3.1.22\coieplg.dll (Symantec Corporation) O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\20.3.1.22\ips\ipsbho.dll (Symantec Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Adobe Acrobat Create PDF Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) O2 - BHO: (Adobe Acrobat Create PDF from Selection) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKLM\..\Toolbar: (Adobe Acrobat Create PDF Toolbar) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\20.3.1.22\coieplg.dll (Symantec Corporation) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe (Adobe Systems Inc.) O4 - HKLM..\Run: [LifeCam] C:\Program Files\Microsoft LifeCam\LifeExp.exe (Microsoft Corporation) O4 - HKCU..\Run: [GarminExpressTrayApp] C:\Program Files\Garmin\Express Tray\ExpressTray.exe (Garmin Ltd or its subsidiaries) O4 - HKCU..\Run: [Steam] C:\Program Files\Steam\Steam.exe (Valve Corporation) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2 () O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0 O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office15\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Lync — kliknij, aby połączyć - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Lync — kliknij, aby połączyć - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) O9 - Extra Button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office15\ONBttnIELinkedNotes.dll (Microsoft Corporation) O13 - gopher Prefix: missing O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.6.2.cab (DLM Control) O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} http://www.battlefieldheroes.com/static/updater/BFHUpdater_5.0.200.0.cab (Battlefield Heroes Updater) O16 - DPF: Garmin Communicator Plug-In https://static.garmincdn.com/gcp/ie/4.0.4.0/GarminAxControl_32.CAB (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.241.79.38 194.204.159.1 178.159.175.247 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{ED5BB85F-9779-4A90-9871-3527A91055EF}: DhcpNameServer = 213.241.79.38 194.204.159.1 178.159.175.247 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{ED5BB85F-9779-4A90-9871-3527A91055EF}: NameServer = 8.8.8.8,8.8.4.4 O18 - Protocol\Handler\osf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\WINDOWS\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O27 - HKLM IFEO\sidebar.exe: Debugger - C:\Program Files\Windows Sidebar\8GadgetPack.exe () O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2012-02-07 15:53:11 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2013-05-05 13:45:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java [2013-05-05 13:45:02 | 000,263,584 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe [2013-05-05 13:44:53 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe [2013-05-05 13:44:53 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe [2013-05-05 13:44:53 | 000,094,112 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll [2013-05-05 13:44:46 | 000,000,000 | ---D | C] -- C:\Program Files\Java [2013-05-02 17:48:36 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Roaming\Mirillis [2013-05-02 17:48:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Mirillis [2013-05-02 17:48:23 | 000,000,000 | ---D | C] -- C:\Action! [2013-05-02 17:48:18 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\Mirillis [2013-05-02 17:47:45 | 000,000,000 | ---D | C] -- C:\Program Files\Mirillis [2013-05-01 17:14:16 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype [2013-04-30 11:40:20 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Roaming\wargaming.net [2013-04-29 16:19:33 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\PunkBuster [2013-04-29 14:39:22 | 000,000,000 | ---D | C] -- C:\Fraps [2013-04-27 18:45:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warplanes [2013-04-26 17:45:32 | 000,000,000 | ---D | C] -- C:\Program Files\NuGet [2013-04-26 17:33:23 | 000,000,000 | ---D | C] -- C:\Program Files\Application Verifier [2013-04-26 17:33:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Windows App Certification Kit [2013-04-23 17:46:29 | 000,000,000 | ---D | C] -- C:\Program Files\Bandicam [2013-04-22 18:57:04 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Roaming\Media Player Classic [2013-04-22 18:54:33 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Roaming\WinRAR [2013-04-22 08:59:52 | 000,000,000 | ---D | C] -- C:\Users\Marek\Documents\Visual Studio 2012 [2013-04-21 18:40:27 | 000,000,000 | ---D | C] -- C:\Users\Marek\.thumbnails [2013-04-21 18:39:21 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\fontconfig [2013-04-21 18:39:18 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\gegl-0.2 [2013-04-21 18:39:18 | 000,000,000 | ---D | C] -- C:\Users\Marek\.gimp-2.8 [2013-04-21 18:35:08 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Roaming\Notepad++ [2013-04-21 12:27:48 | 000,000,000 | ---D | C] -- C:\Users\Marek\Documents\Need for Speed World [2013-04-20 13:07:00 | 000,000,000 | ---D | C] -- C:\Program Files\Window Title Changer [2013-04-19 09:59:23 | 000,000,000 | ---D | C] -- C:\Program Files\DarkLauncher [2013-04-17 12:18:01 | 000,000,000 | ---D | C] -- C:\Users\Marek\Documents\Bandicam [2013-04-17 11:57:49 | 000,000,000 | ---D | C] -- C:\Program Files\FXhome [2013-04-17 11:57:48 | 000,000,000 | ---D | C] -- C:\ProgramData\FXhome [2013-04-16 16:28:22 | 000,988,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sppobjs.dll [2013-04-16 16:28:17 | 008,857,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\twinui.dll [2013-04-16 16:28:13 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfasfsrcsnk.dll [2013-04-16 16:28:12 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\BCP47Langs.dll [2013-04-16 16:28:12 | 000,246,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ubpm.dll [2013-04-16 16:28:11 | 000,298,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\Classpnp.sys [2013-04-16 16:28:11 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SystemEventsBrokerServer.dll [2013-04-16 16:28:10 | 000,820,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmpmde.dll [2013-04-16 16:28:08 | 000,898,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mcmde.dll [2013-04-16 16:28:08 | 000,893,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winmde.dll [2013-04-16 16:28:08 | 000,601,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Globalization.dll [2013-04-16 16:28:08 | 000,550,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drvstore.dll [2013-04-16 16:28:08 | 000,302,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\storport.sys [2013-04-16 16:28:08 | 000,114,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TimeBrokerServer.dll [2013-04-16 16:28:07 | 002,033,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\authui.dll [2013-04-16 16:28:07 | 000,621,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll [2013-04-16 16:28:07 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\Windows.Security.Authentication.OnlineId.dll [2013-04-16 16:28:06 | 000,271,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\FWPKCLNT.SYS [2013-04-16 16:28:01 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingSync.dll [2013-04-16 16:27:58 | 001,555,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltux.dll [2013-04-16 16:27:55 | 000,268,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\USBXHCI.SYS [2013-04-16 16:27:55 | 000,104,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dumpsd.sys [2013-04-16 16:27:54 | 000,237,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\spaceport.sys [2013-04-16 16:27:54 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WUSettingsProvider.dll [2013-04-16 16:27:54 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\powercfg.cpl [2013-04-16 16:27:54 | 000,121,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tpm.sys [2013-04-16 16:27:54 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\discan.dll [2013-04-16 16:27:54 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\SettingSyncInfo.dll [2013-04-16 16:27:54 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\NdisImPlatform.dll [2013-04-16 16:27:54 | 000,066,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\storahci.sys [2013-04-16 16:27:54 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\WSDPrintProxy.DLL [2013-04-16 16:27:54 | 000,057,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\pdc.sys [2013-04-16 16:27:53 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\storewuauth.dll [2013-04-16 16:27:53 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuwebv.dll [2013-04-16 16:27:53 | 000,083,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wudriver.dll [2013-04-16 16:27:53 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\taskhostex.exe [2013-04-16 16:27:53 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapp.exe [2013-04-16 16:27:53 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups2.dll [2013-04-16 16:27:52 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DevDispItemProvider.dll [2013-04-16 09:35:11 | 000,934,488 | ---- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1403010.016\symefa.sys [2013-04-16 09:35:11 | 000,602,712 | ---- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1403010.016\srtsp.sys [2013-04-16 09:35:11 | 000,367,704 | ---- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1403010.016\symds.sys [2013-04-16 09:35:11 | 000,338,592 | ---- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1403010.016\symnets.sys [2013-04-16 09:35:11 | 000,175,264 | ---- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1403010.016\ironx86.sys [2013-04-16 09:35:11 | 000,134,304 | ---- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1403010.016\ccsetx86.sys [2013-04-16 09:35:11 | 000,032,344 | ---- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1403010.016\srtspx.sys [2013-04-16 09:35:11 | 000,021,400 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1403010.016\symelam.sys [2013-04-16 09:34:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\NIS\1403010.016 [2013-04-15 15:32:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 [2013-04-15 15:31:47 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER [2013-04-15 15:27:36 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Analysis Services [2013-04-11 07:14:13 | 000,847,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\reseteng.dll [2013-04-11 07:14:13 | 000,375,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ReAgent.dll [2013-04-10 18:30:09 | 005,575,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ntoskrnl.exe [2013-04-10 16:00:28 | 003,393,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\win32k.sys [2013-04-10 15:31:04 | 002,877,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\jscript9.dll [2013-04-10 15:30:59 | 000,493,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeeds.dll [2013-04-10 15:30:59 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iesysprep.dll [2013-04-10 15:30:59 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\iesetup.dll [2013-04-10 15:30:59 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ie4uinit.exe [2013-04-10 15:30:59 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\jsproxy.dll [2013-04-09 19:49:38 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Roaming\Garmin [2013-04-09 19:49:17 | 000,000,000 | ---D | C] -- C:\Users\Marek\AppData\Local\Garmin [2013-04-09 19:48:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin [2013-04-09 19:48:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Garmin [2013-04-09 19:48:10 | 000,000,000 | ---D | C] -- C:\Program Files\Garmin [2013-04-06 16:32:06 | 000,142,496 | ---- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\SYMEVENT.SYS [2013-04-06 16:32:06 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared [2013-04-06 16:32:06 | 000,000,000 | ---D | C] -- C:\Program Files\Symantec [2013-04-06 16:31:09 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\NIS [2013-04-06 16:31:07 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security [2013-04-05 16:43:48 | 000,000,000 | ---D | C] -- C:\Users\Marek\Documents\My Cheat Tables [2013-04-05 16:43:41 | 000,000,000 | ---D | C] -- C:\Program Files\Cheat Engine 6.2 [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2013-05-05 13:44:47 | 000,866,720 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\npDeployJava1.dll [2013-05-05 13:44:47 | 000,788,896 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\deployJava1.dll [2013-05-05 13:44:47 | 000,263,584 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe [2013-05-05 13:44:47 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe [2013-05-05 13:44:47 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe [2013-05-05 13:44:47 | 000,094,112 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll [2013-05-05 13:29:39 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2013-05-04 19:11:29 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys [2013-05-04 19:11:28 | 1717,452,800 | -HS- | M] () -- C:\hiberfil.sys [2013-05-04 11:40:35 | 000,793,704 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2013-05-04 11:40:35 | 000,710,046 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2013-05-04 11:40:35 | 000,159,324 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2013-05-04 11:40:35 | 000,132,416 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2013-05-01 13:35:26 | 000,484,864 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2013-05-01 10:33:15 | 000,002,505 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk [2013-04-29 16:27:04 | 000,139,048 | ---- | M] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2013-04-29 16:26:56 | 000,282,296 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.xtr [2013-04-29 16:24:07 | 000,138,056 | ---- | M] () -- C:\Users\Marek\AppData\Roaming\PnkBstrK.sys [2013-04-29 16:23:39 | 002,434,856 | ---- | M] () -- C:\WINDOWS\System32\pbsvc_bc2.exe [2013-04-27 18:45:19 | 000,000,776 | ---- | M] () -- C:\Users\Public\Desktop\World of Warplanes.lnk [2013-04-26 17:31:44 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_User_SensorsSimulatorDriver_01_11_00.Wdf [2013-04-26 17:31:42 | 001,780,955 | ---- | M] () -- C:\WINDOWS\System32\drivers\NIS\1403010.016\Cat.DB [2013-04-22 13:49:49 | 000,107,733 | ---- | M] () -- C:\WINDOWS\DWMGlass.png [2013-04-21 19:01:41 | 000,001,629 | ---- | M] () -- C:\Users\Marek\AppData\Local\recently-used.xbel [2013-04-19 13:21:42 | 000,002,772 | ---- | M] () -- C:\Users\Public\Desktop\Norton Internet Security.lnk [2013-04-19 13:20:27 | 000,014,818 | ---- | M] () -- C:\WINDOWS\System32\drivers\NIS\1403010.016\VT20130115.021 [2013-04-18 11:59:58 | 000,002,173 | ---- | M] () -- C:\Users\Marek\Desktop\Need For Speed World.lnk [2013-04-15 22:39:56 | 001,833,984 | ---- | M] () -- C:\WINDOWS\DWMGlass.dll [2013-04-09 19:48:22 | 000,001,864 | ---- | M] () -- C:\Users\Public\Desktop\Garmin Express.lnk [2013-04-06 16:32:06 | 000,142,496 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\SYMEVENT.SYS [2013-04-06 16:32:06 | 000,007,446 | ---- | M] () -- C:\WINDOWS\System32\drivers\SYMEVENT.CAT [2013-04-06 16:32:06 | 000,000,806 | ---- | M] () -- C:\WINDOWS\System32\drivers\SYMEVENT.INF [2013-04-05 18:39:11 | 000,007,618 | ---- | M] () -- C:\Users\Marek\AppData\Local\Resmon.ResmonCfg [1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2013-04-29 16:24:07 | 000,139,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2013-04-29 16:23:39 | 000,076,888 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe [2013-04-27 18:45:19 | 000,000,776 | ---- | C] () -- C:\Users\Public\Desktop\World of Warplanes.lnk [2013-04-26 17:31:44 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_User_SensorsSimulatorDriver_01_11_00.Wdf [2013-04-22 20:28:16 | 3487,333,913 | ---- | C] () -- C:\Users\Marek\Desktop\Fa11.m720p.BluRay.x264.mkv [2013-04-21 19:01:41 | 000,001,629 | ---- | C] () -- C:\Users\Marek\AppData\Local\recently-used.xbel [2013-04-19 13:20:27 | 001,780,955 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1403010.016\Cat.DB [2013-04-19 13:20:27 | 000,014,818 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1403010.016\VT20130115.021 [2013-04-18 11:59:57 | 000,002,173 | ---- | C] () -- C:\Users\Marek\Desktop\Need For Speed World.lnk [2013-04-16 16:27:52 | 000,387,867 | ---- | C] () -- C:\WINDOWS\System32\ApnDatabase.xml [2013-04-16 09:35:11 | 000,009,670 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1403010.016\symelam.cat [2013-04-16 09:35:11 | 000,007,611 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1403010.016\ccsetx86.cat [2013-04-16 09:35:11 | 000,007,601 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1403010.016\symnet.cat [2013-04-16 09:35:11 | 000,007,593 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1403010.016\iron.cat [2013-04-16 09:35:11 | 000,007,583 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1403010.016\symefa.cat [2013-04-16 09:35:11 | 000,007,581 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1403010.016\srtspx.cat [2013-04-16 09:35:11 | 000,007,577 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1403010.016\symds.cat [2013-04-16 09:35:11 | 000,007,577 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1403010.016\srtsp.cat [2013-04-16 09:35:11 | 000,003,434 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1403010.016\symefa.inf [2013-04-16 09:35:11 | 000,002,852 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1403010.016\symds.inf [2013-04-16 09:35:11 | 000,001,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1403010.016\symnet.inf [2013-04-16 09:35:11 | 000,001,389 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1403010.016\srtspx.inf [2013-04-16 09:35:11 | 000,001,389 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1403010.016\srtsp.inf [2013-04-16 09:35:11 | 000,000,996 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1403010.016\symelam.inf [2013-04-16 09:35:11 | 000,000,827 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1403010.016\ccsetx86.inf [2013-04-16 09:35:11 | 000,000,737 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1403010.016\iron.inf [2013-04-16 09:34:54 | 000,014,818 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1403010.016\symvtcer.dat [2013-04-16 09:34:54 | 000,000,172 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1403010.016\isolate.ini [2013-04-11 12:11:07 | 000,484,864 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2013-04-09 19:48:22 | 000,001,864 | ---- | C] () -- C:\Users\Public\Desktop\Garmin Express.lnk [2013-04-06 16:32:06 | 000,007,446 | ---- | C] () -- C:\WINDOWS\System32\drivers\SYMEVENT.CAT [2013-04-06 16:32:06 | 000,000,806 | ---- | C] () -- C:\WINDOWS\System32\drivers\SYMEVENT.INF [2013-04-06 16:32:03 | 000,002,772 | ---- | C] () -- C:\Users\Public\Desktop\Norton Internet Security.lnk [2013-04-05 18:39:11 | 000,007,618 | ---- | C] () -- C:\Users\Marek\AppData\Local\Resmon.ResmonCfg [2013-04-01 12:06:18 | 000,138,056 | ---- | C] () -- C:\Users\Marek\AppData\Roaming\PnkBstrK.sys [2013-04-01 12:05:46 | 002,577,776 | ---- | C] () -- C:\WINDOWS\System32\pbsvc_heroes.exe [2013-03-29 12:47:03 | 000,000,084 | ---- | C] () -- C:\WINDOWS\netdet.ini [2013-03-20 23:29:22 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\clinfo.exe [2013-02-20 19:23:03 | 000,000,132 | ---- | C] () -- C:\Users\Marek\AppData\Roaming\Preferencje Adobe CS5 dla formatu PNG [2013-02-09 15:02:17 | 001,068,400 | ---- | C] () -- C:\WINDOWS\System32\bnmndrv.dll [2013-02-09 15:02:17 | 001,064,304 | ---- | C] () -- C:\WINDOWS\System32\BnmnSrv.exe [2013-02-09 14:33:49 | 000,000,073 | ---- | C] () -- C:\WINDOWS\EurekaLog.ini [2013-02-04 19:38:17 | 002,493,952 | ---- | C] () -- C:\WINDOWS\System32\BootMan.exe [2013-02-04 19:38:17 | 000,087,112 | ---- | C] () -- C:\WINDOWS\System32\setupempdrv03.exe [2013-02-04 19:38:17 | 000,019,840 | ---- | C] () -- C:\WINDOWS\System32\EuEpmGdi.dll [2013-02-04 19:38:17 | 000,014,920 | ---- | C] () -- C:\WINDOWS\System32\epmntdrv.sys [2013-02-04 19:38:17 | 000,009,160 | ---- | C] () -- C:\WINDOWS\System32\EuGdiDrv.sys [2013-01-16 11:41:00 | 000,003,584 | ---- | C] () -- C:\Users\Marek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2013-01-12 11:17:09 | 000,083,968 | ---- | C] () -- C:\WINDOWS\System32\OEMLicense.dll [2012-12-22 19:35:44 | 000,282,296 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe [2012-12-22 19:35:43 | 002,434,856 | ---- | C] () -- C:\WINDOWS\System32\pbsvc_bc2.exe [2012-12-19 22:12:24 | 000,230,452 | ---- | C] () -- C:\WINDOWS\System32\ativvaxy_cik.dat [2012-12-19 18:42:08 | 000,665,329 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat [2012-12-15 16:38:14 | 000,293,889 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTAIODAT.DAT [2012-12-15 11:48:08 | 000,644,608 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2012-12-15 11:48:08 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll [2012-12-15 02:35:14 | 000,073,984 | ---- | C] () -- C:\WINDOWS\System32\ativce02.dat [2012-12-14 21:00:31 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin [2012-11-27 02:18:46 | 000,038,912 | ---- | C] () -- C:\WINDOWS\System32\kdbsdk32.dll [2012-11-22 17:14:26 | 000,230,064 | ---- | C] () -- C:\WINDOWS\System32\ativvaxy_cik_nd.dat [2012-11-19 09:33:32 | 000,065,656 | ---- | C] () -- C:\WINDOWS\System32\bdmpegv.dll [2012-11-19 09:33:30 | 000,022,640 | ---- | C] () -- C:\WINDOWS\System32\bdmjpeg.dll [2012-09-28 03:21:22 | 000,204,952 | ---- | C] () -- C:\WINDOWS\System32\ativvsvl.dat [2012-09-28 03:21:22 | 000,157,144 | ---- | C] () -- C:\WINDOWS\System32\ativvsva.dat [2012-07-26 10:14:12 | 000,793,704 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2012-07-26 10:14:12 | 000,342,912 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2012-07-26 10:14:12 | 000,159,324 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2012-07-26 10:14:12 | 000,041,236 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2012-07-26 08:55:27 | 000,710,046 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2012-07-26 08:55:27 | 000,296,742 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2012-07-26 08:55:27 | 000,132,416 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2012-07-26 08:55:27 | 000,033,362 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2012-07-26 08:53:47 | 000,215,943 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2012-07-26 08:53:46 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\NOISE.DAT [2012-07-26 08:03:55 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2012-07-26 03:20:38 | 000,071,680 | ---- | C] () -- C:\WINDOWS\System32\BthpanContextHandler.dll [2012-07-26 03:17:42 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\BWContextHandler.dll [2012-07-25 22:41:36 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin [2012-07-25 22:24:47 | 000,526,068 | ---- | C] () -- C:\WINDOWS\System32\staticurllist.bin [2012-07-17 15:22:04 | 000,179,200 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2012-07-14 04:00:46 | 000,043,882 | ---- | C] () -- C:\WINDOWS\System32\srms.dat [2012-07-12 16:25:22 | 000,639,488 | ---- | C] () -- C:\WINDOWS\System32\ficvdec_x86.dll [2012-06-02 22:25:24 | 000,008,192 | ---- | C] () -- C:\WINDOWS\System32\settings.dat [2012-06-02 16:31:24 | 001,520,828 | ---- | C] () -- C:\WINDOWS\System32\WpcNBModel.bin [2012-06-02 16:31:19 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2011-09-13 00:06:16 | 000,003,917 | ---- | C] () -- C:\WINDOWS\System32\atipblag.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2012-12-19 21:14:52 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2013-03-02 10:23:07 | 017,560,576 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2012-07-26 05:18:27 | 000,784,896 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2012-07-26 05:20:13 | 000,354,304 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2013-02-25 19:21:03 | 000,000,000 | ---D | M] -- C:\Users\Marek\AppData\Roaming\Assassin's Creed III [2013-04-04 19:19:22 | 000,000,000 | ---D | M] -- C:\Users\Marek\AppData\Roaming\BANDISOFT [2013-02-22 10:14:09 | 000,000,000 | ---D | M] -- C:\Users\Marek\AppData\Roaming\BitTorrent [2013-03-28 18:49:19 | 000,000,000 | ---D | M] -- C:\Users\Marek\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant [2013-02-03 12:11:10 | 000,000,000 | ---D | M] -- C:\Users\Marek\AppData\Roaming\com.aspiro.wimp.pl.25F5C0086CDE1F22CA0B92A487729991CA6CD013.1 [2013-01-14 22:03:58 | 000,000,000 | ---D | M] -- C:\Users\Marek\AppData\Roaming\ESET [2013-04-09 19:49:38 | 000,000,000 | ---D | M] -- C:\Users\Marek\AppData\Roaming\Garmin [2013-03-09 19:10:37 | 000,000,000 | ---D | M] -- C:\Users\Marek\AppData\Roaming\GetRightToGo [2013-03-03 15:37:56 | 000,000,000 | ---D | M] -- C:\Users\Marek\AppData\Roaming\ImgBurn [2013-02-14 09:46:25 | 000,000,000 | ---D | M] -- C:\Users\Marek\AppData\Roaming\LibreOffice [2013-03-07 12:55:30 | 000,000,000 | ---D | M] -- C:\Users\Marek\AppData\Roaming\LolClient [2013-05-02 17:48:36 | 000,000,000 | ---D | M] -- C:\Users\Marek\AppData\Roaming\Mirillis [2012-12-16 13:37:35 | 000,000,000 | ---D | M] -- C:\Users\Marek\AppData\Roaming\MyPhoneExplorer [2012-12-29 21:03:45 | 000,000,000 | ---D | M] -- C:\Users\Marek\AppData\Roaming\NapiProjekt [2013-02-11 11:28:47 | 000,000,000 | ---D | M] -- C:\Users\Marek\AppData\Roaming\Need for Speed World [2013-04-21 19:22:44 | 000,000,000 | ---D | M] -- C:\Users\Marek\AppData\Roaming\Notepad++ [2013-01-21 20:30:54 | 000,000,000 | ---D | M] -- C:\Users\Marek\AppData\Roaming\OpenOffice.org [2013-03-11 19:55:06 | 000,000,000 | ---D | M] -- C:\Users\Marek\AppData\Roaming\Origin [2013-03-03 16:20:38 | 000,000,000 | ---D | M] -- C:\Users\Marek\AppData\Roaming\PunkBuster [2013-02-24 16:46:50 | 000,000,000 | ---D | M] -- C:\Users\Marek\AppData\Roaming\uTorrent [2013-04-30 19:52:23 | 000,000,000 | ---D | M] -- C:\Users\Marek\AppData\Roaming\wargaming.net [2012-12-15 12:08:29 | 000,000,000 | ---D | M] -- C:\Users\Marek\AppData\Roaming\Windows Live Writer [color=#E56717]========== Purity Check ==========[/color] < End of report >