OTL logfile created on: 2013-06-25 22:04:13 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Slimowski\Downloads Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,96 Gb Total Physical Memory | 1,26 Gb Available Physical Memory | 42,50% Memory free 6,13 Gb Paging File | 4,02 Gb Available in Paging File | 65,64% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 116,44 Gb Total Space | 14,81 Gb Free Space | 12,72% Space Free | Partition Type: NTFS Drive D: | 232,88 Gb Total Space | 69,69 Gb Free Space | 29,92% Space Free | Partition Type: NTFS Drive E: | 114,98 Gb Total Space | 2,28 Gb Free Space | 1,98% Space Free | Partition Type: NTFS Drive H: | 1,83 Gb Total Space | 1,03 Gb Free Space | 56,25% Space Free | Partition Type: FAT Computer Name: SLIMOWSKI-PC | User Name: Slimowski | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2013-06-25 22:03:13 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Slimowski\Downloads\OTL.exe PRC - [2013-05-10 09:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2013-05-07 17:33:13 | 000,345,312 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe PRC - [2013-05-06 11:55:32 | 000,216,968 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\1.3.21.145\GoogleCrashHandler.exe PRC - [2013-03-28 00:02:41 | 000,086,752 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe PRC - [2013-03-28 00:02:20 | 000,079,584 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe PRC - [2013-03-28 00:02:17 | 000,110,816 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe PRC - [2013-03-19 12:37:02 | 000,056,904 | ---- | M] (Simplygen) -- C:\Program Files\Protected Search\ProtectedSearch.exe PRC - [2011-08-08 13:43:58 | 000,690,072 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosA2dp.exe PRC - [2011-08-08 13:36:58 | 000,087,960 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtHid.exe PRC - [2011-05-09 16:06:02 | 002,750,376 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtMng.exe PRC - [2011-04-01 17:41:44 | 000,152,496 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe PRC - [2011-01-14 18:19:00 | 002,885,056 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtProc.exe PRC - [2010-11-02 10:38:00 | 000,341,392 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosOBEX.exe PRC - [2010-10-06 22:28:12 | 003,768,176 | ---- | M] (Stardock) -- C:\Program Files\Stardock\ObjectDockFree\ObjectDock.exe PRC - [2010-09-06 16:18:00 | 000,746,384 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtHSP.exe PRC - [2009-04-11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009-04-03 18:17:00 | 000,447,816 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosAVRC.exe PRC - [2008-07-15 16:16:58 | 000,106,496 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe PRC - [2006-11-06 17:14:44 | 000,034,352 | ---- | M] () -- C:\Program Files\TOSHIBA\Utilities\KeNotify.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2013-06-15 03:28:42 | 000,393,168 | ---- | M] () -- C:\Users\Slimowski\AppData\Local\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll MOD - [2013-06-15 03:28:41 | 013,140,432 | ---- | M] () -- C:\Users\Slimowski\AppData\Local\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll MOD - [2013-06-15 03:28:40 | 004,051,408 | ---- | M] () -- C:\Users\Slimowski\AppData\Local\Google\Chrome\Application\27.0.1453.116\pdf.dll MOD - [2013-06-15 03:27:51 | 000,599,504 | ---- | M] () -- C:\Users\Slimowski\AppData\Local\Google\Chrome\Application\27.0.1453.116\libglesv2.dll MOD - [2013-06-15 03:27:50 | 000,124,368 | ---- | M] () -- C:\Users\Slimowski\AppData\Local\Google\Chrome\Application\27.0.1453.116\libegl.dll MOD - [2013-06-15 03:27:48 | 001,597,392 | ---- | M] () -- C:\Users\Slimowski\AppData\Local\Google\Chrome\Application\27.0.1453.116\ffmpegsumo.dll MOD - [2013-05-16 08:13:04 | 012,433,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\e9ea3e70247b4aa4a8b260426db3aa6b\System.Windows.Forms.ni.dll MOD - [2013-04-29 07:59:30 | 000,998,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\f042f66c2ad8fd5b8c34fa22cd22079e\System.Management.ni.dll MOD - [2013-04-29 07:55:59 | 001,593,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\78157a494dc9a7e52be8840decfcd9cc\System.Drawing.ni.dll MOD - [2013-04-29 06:07:00 | 007,977,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\cc149d08e75f8c53cd28ac926b38c370\System.ni.dll MOD - [2013-04-29 06:06:55 | 011,492,352 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\2227d1559f87943255069398608d5c56\mscorlib.ni.dll MOD - [2011-04-20 03:21:00 | 000,037,376 | ---- | M] () -- C:\Windows\System32\atitmpxx.dll MOD - [2011-03-17 00:11:16 | 004,297,568 | ---- | M] () -- C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF MOD - [2010-10-04 19:54:31 | 000,053,760 | ---- | M] () -- C:\Program Files\Stardock\ObjectDockFree\zlib.dll MOD - [2010-10-04 19:54:29 | 000,807,936 | ---- | M] () -- C:\Program Files\Stardock\ObjectDockFree\CrashRpt.dll MOD - [2010-10-04 19:54:29 | 000,675,840 | ---- | M] () -- C:\Program Files\Stardock\ObjectDockFree\DockShellHook.dll MOD - [2006-11-06 17:14:44 | 000,034,352 | ---- | M] () -- C:\Program Files\TOSHIBA\Utilities\KeNotify.exe [color=#E56717]========== Services (SafeList) ==========[/color] SRV - [2013-05-10 09:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2013-03-28 00:02:41 | 000,086,752 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2013-03-28 00:02:17 | 000,110,816 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2013-03-13 15:13:29 | 000,253,656 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2013-03-07 22:58:10 | 000,115,608 | ---- | M] (Mozilla Foundation) [Disabled | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2013-02-28 18:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012-10-02 13:13:44 | 003,064,000 | ---- | M] (Skype Technologies S.A.) [Disabled | Stopped] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service) SRV - [2012-09-20 14:28:48 | 030,785,672 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service) SRV - [2012-08-23 20:55:54 | 000,655,624 | ---- | M] (Acresso Software Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2012-04-12 05:27:08 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) [Disabled | Stopped] -- C:\Windows\System32\NLSSRV32.EXE -- (nlsX86cc) SRV - [2012-04-12 05:27:00 | 000,175,624 | ---- | M] (Nitro PDF Software) [Disabled | Stopped] -- C:\Program Files\Nitro PDF\Professional 7\NitroPDFDriverService2.exe -- (NitroDriverReadSpool2) SRV - [2011-06-06 19:13:24 | 000,008,192 | ---- | M] () [Disabled | Stopped] -- C:\Windows\System32\srvany.exe -- (KMService) SRV - [2011-04-20 04:04:06 | 000,176,128 | ---- | M] (AMD) [Disabled | Stopped] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility) SRV - [2011-04-01 17:41:44 | 000,152,496 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service) SRV - [2010-03-25 14:39:22 | 000,490,280 | ---- | M] (Nero AG) [Disabled | Stopped] -- C:\Program Files\Nero\Update\NASvc.exe -- (NAUpdate) SRV - [2010-02-19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2008-07-15 16:16:58 | 000,106,496 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe -- (TOSHIBA SMART Log Service) SRV - [2008-01-19 09:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\Toshidpt.sys -- (toshidpt) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp) DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive) DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\AtihdLH3.sys -- (AtiHDAudioService) DRV - [2013-03-28 00:02:47 | 000,135,136 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb) DRV - [2013-03-28 00:02:47 | 000,084,744 | ---- | M] (Avira Operations GmbH & Co. KG) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt) DRV - [2013-03-28 00:02:47 | 000,037,352 | ---- | M] (Avira Operations GmbH & Co. KG) [Kernel | System | Running] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr) DRV - [2013-03-01 14:25:18 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2013-01-31 10:19:50 | 000,181,344 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudmdm.sys -- (ssudmdm) DRV - [2013-01-31 10:19:50 | 000,083,168 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudbus.sys -- (dg_ssudbus) DRV - [2011-08-05 10:21:52 | 000,236,728 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfbd.sys -- (tosrfbd) DRV - [2011-07-12 19:07:40 | 000,016,064 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfec.sys -- (tosrfec) DRV - [2011-05-26 08:21:18 | 000,144,984 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\jmcr.sys -- (JMCR) DRV - [2011-04-20 04:43:40 | 007,772,160 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag) DRV - [2011-04-20 04:43:40 | 007,772,160 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag) DRV - [2011-04-20 03:22:08 | 000,243,712 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap) DRV - [2011-02-09 14:26:44 | 000,023,640 | ---- | M] (JMicron Technology Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\johci.sys -- (johci) DRV - [2011-01-27 15:26:16 | 000,056,888 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfusb.sys -- (Tosrfusb) DRV - [2011-01-19 12:20:08 | 006,923,264 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETwNv32.sys -- (NETwNv32) DRV - [2010-11-29 11:47:00 | 000,070,448 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\tosrfcom.sys -- (Tosrfcom) DRV - [2010-11-23 18:33:00 | 000,263,464 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RtHDMIV.sys -- (RTHDMIAzAudService) DRV - [2010-11-11 10:26:00 | 000,042,672 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfbnp.sys -- (tosrfbnp) DRV - [2010-08-30 10:48:00 | 000,080,064 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Tosrfhid.sys -- (Tosrfhid) DRV - [2009-08-05 12:55:00 | 000,061,168 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TosRfSnd.sys -- (TosRfSnd) DRV - [2009-07-24 11:31:00 | 000,021,608 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tosrfnds.sys -- (tosrfnds) DRV - [2009-07-14 01:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (winusb) DRV - [2009-06-17 11:59:00 | 000,046,984 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosporte.sys -- (tosporte) DRV - [2008-11-17 15:40:22 | 003,668,480 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NETw5v32.sys -- (NETw5v32) DRV - [2008-10-21 07:57:16 | 000,124,928 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169) DRV - [2008-07-15 19:59:06 | 000,017,960 | ---- | M] (Chicony Electronics Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\UVCFTR_S.SYS -- (UVCFTR) DRV - [2008-05-07 11:30:12 | 000,025,896 | ---- | M] (COMPAL ELECTRONIC INC.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\LPCFilter.sys -- (LPCFilter) DRV - [2008-02-07 00:23:46 | 000,166,448 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService) DRV - [2008-01-14 12:06:32 | 000,021,632 | ---- | M] (ManyCam LLC.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ManyCam.sys -- (ManyCam) DRV - [2007-11-09 05:00:52 | 000,023,640 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\TVALZ_O.SYS -- (TVALZ) DRV - [2007-08-20 01:03:00 | 000,227,488 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\V0270Dev.sys -- (VF0270Dev) DRV - [2007-03-05 18:45:04 | 000,007,424 | ---- | M] (EyePower Games Pte. Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\V0270Vfx.sys -- (VF0270Vfx) DRV - [2006-11-02 09:41:50 | 000,983,552 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.certified-toolbar.com?si=43251&tid=3623&ver=3.2&ts=1367866126444&tguid=43251-3623-1367866126444-E296C6E83AD87F214475430732B05EFE&st=chrome&q= IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.certified-toolbar.com?si=43251&tid=3623&ver=3.2&ts=1367866126444&tguid=43251-3623-1367866126444-E296C6E83AD87F214475430732B05EFE&st=chrome&q= IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.certified-toolbar.com?si=43251&tid=3623&ver=3.2&ts=1367866126444&tguid=43251-3623-1367866126444-E296C6E83AD87F214475430732B05EFE&st=chrome&q= IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = about:newtab IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:newtab IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.certified-toolbar.com?si=43251&tid=3623&ver=3.2&ts=1367866126444&tguid=43251-3623-1367866126444-E296C6E83AD87F214475430732B05EFE&st=chrome&q= IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://search.certified-toolbar.com?si=43251&tid=3623&ver=3.2&ts=1367866126444&tguid=43251-3623-1367866126444-E296C6E83AD87F214475430732B05EFE&st=chrome&q= IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://search.certified-toolbar.com?si=43251&tid=3623&ver=3.2&ts=1367866126444&tguid=43251-3623-1367866126444-E296C6E83AD87F214475430732B05EFE&st=chrome&q= IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = about:newtab IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = about:newtab IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.certified-toolbar.com?si=43251&st=bs&tid=3623&ver=3.2&ts=1367866126444&tguid=43251-3623-1367866126444-E296C6E83AD87F214475430732B05EFE&q={searchTerms} IE - HKLM\..\SearchScopes\{3E4A6765-A944-428C-80EA-D73C154965BD}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=9881c6cb-058c-11e1-8c32-00235a019316&q={searchTerms} IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.certified-toolbar.com?si=43251&st=bs&tid=3623&ver=3.2&ts=1367866126444&tguid=43251-3623-1367866126444-E296C6E83AD87F214475430732B05EFE&q={searchTerms} IE - HKLM\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://websearch.a-searchpage.info/?l=1&q={searchTerms}&pid=658&r=2013/06/06&hid=2914140455&lg=EN&cc=PL&unqvl=18 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3958440826-2036700987-1971538616-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.certified-toolbar.com?si=43251&tid=3623&ver=3.2&ts=1367866126444&tguid=43251-3623-1367866126444-E296C6E83AD87F214475430732B05EFE&st=chrome&q= IE - HKU\S-1-5-21-3958440826-2036700987-1971538616-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://search.certified-toolbar.com?si=43251&tid=3623&ver=3.2&ts=1367866126444&tguid=43251-3623-1367866126444-E296C6E83AD87F214475430732B05EFE&st=chrome&q= IE - HKU\S-1-5-21-3958440826-2036700987-1971538616-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.certified-toolbar.com?si=43251&tid=3623&ver=3.2&ts=1367866126444&tguid=43251-3623-1367866126444-E296C6E83AD87F214475430732B05EFE&st=chrome&q= IE - HKU\S-1-5-21-3958440826-2036700987-1971538616-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = about:newtab IE - HKU\S-1-5-21-3958440826-2036700987-1971538616-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:newtab IE - HKU\S-1-5-21-3958440826-2036700987-1971538616-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKU\S-1-5-21-3958440826-2036700987-1971538616-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.certified-toolbar.com?si=43251&tid=3623&ver=3.2&ts=1367866126444&tguid=43251-3623-1367866126444-E296C6E83AD87F214475430732B05EFE&st=chrome&q= IE - HKU\S-1-5-21-3958440826-2036700987-1971538616-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = http://search.certified-toolbar.com?si=43251&tid=3623&ver=3.2&ts=1367866126444&tguid=43251-3623-1367866126444-E296C6E83AD87F214475430732B05EFE&st=chrome&q= IE - HKU\S-1-5-21-3958440826-2036700987-1971538616-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = http://search.certified-toolbar.com?si=43251&tid=3623&ver=3.2&ts=1367866126444&tguid=43251-3623-1367866126444-E296C6E83AD87F214475430732B05EFE&st=chrome&q= IE - HKU\S-1-5-21-3958440826-2036700987-1971538616-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = about:newtab IE - HKU\S-1-5-21-3958440826-2036700987-1971538616-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = about:newtab IE - HKU\S-1-5-21-3958440826-2036700987-1971538616-1000\..\SearchScopes,DefaultScope = {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} IE - HKU\S-1-5-21-3958440826-2036700987-1971538616-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-3958440826-2036700987-1971538616-1000\..\SearchScopes\{3E4A6765-A944-428C-80EA-D73C154965BD}: "URL" = http://search.certified-toolbar.com?si=43251&st=bs&tid=3623&ver=3.1&ts=1367866126444&tguid=43251-3623-1367866126444-E296C6E83AD87F214475430732B05EFE&q={searchTerms} IE - HKU\S-1-5-21-3958440826-2036700987-1971538616-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.certified-toolbar.com?si=43251&st=bs&tid=3623&ver=3.2&ts=1367866126444&tguid=43251-3623-1367866126444-E296C6E83AD87F214475430732B05EFE&q={searchTerms} IE - HKU\S-1-5-21-3958440826-2036700987-1971538616-1000\..\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}: "URL" = http://search.certified-toolbar.com?si=43251&st=bs&tid=3623&ver=3.2&ts=1367866126444&tguid=43251-3623-1367866126444-E296C6E83AD87F214475430732B05EFE&q={searchTerms} IE - HKU\S-1-5-21-3958440826-2036700987-1971538616-1000\..\SearchScopes\{C204D54D-49BF-4070-8862-BBD26DB01022}: "URL" = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 IE - HKU\S-1-5-21-3958440826-2036700987-1971538616-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3958440826-2036700987-1971538616-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultengine: "Web Search" FF - prefs.js..browser.search.defaultenginename: "Web Search" FF - prefs.js..browser.search.defaultenginenameS: "WebSearch" FF - prefs.js..browser.search.defaulturl: "http://websearch.a-searchpage.info/?pid=658&r=2013/06/06&hid=2914140455&lg=EN&cc=PL&unqvl=18&l=1&q=" FF - prefs.js..browser.search.order.1: "Web Search" FF - prefs.js..browser.search.order.1S: "WebSearch" FF - prefs.js..browser.search.selectedEngine: "Web Search" FF - prefs.js..browser.search.selectedEngineS: "WebSearch" FF - prefs.js..browser.search.useDBForOrder: false FF - prefs.js..browser.startup.homepage: "about:home" FF - prefs.js..extensions.enabledAddons: IplextoALL%40ALLPlayer.org:0.7.0 FF - prefs.js..extensions.enabledAddons: youtube2mp3%40mondayx.de:1.2.3 FF - prefs.js..extensions.enabledAddons: youtube_downloader%40anishsane.googlepages.com:3.6 FF - prefs.js..extensions.enabledAddons: %7B46868735-c3fa-47ce-8ce7-cce51a66aceb%7D:1.2 FF - prefs.js..extensions.enabledAddons: %7BD4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389%7D:0.9.10 FF - prefs.js..extensions.enabledAddons: %7Bf65af8e3-60ed-4a06-9699-c361e87a3f01%7D:3.5 FF - prefs.js..keyword.URL: "http://search.certified-toolbar.com?si=43251&tid=3623&ver=3.2&ts=1367866126444&tguid=43251-3623-1367866126444-E296C6E83AD87F214475430732B05EFE&st=chrome&q=" FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Slimowski\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Slimowski\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Slimowski\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013-06-03 12:48:08 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 17.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013-06-03 12:48:08 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.4\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2013-06-03 12:48:08 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.4\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2011-05-25 09:46:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Slimowski\AppData\Roaming\mozilla\Extensions [2011-05-25 09:46:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Slimowski\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2013-06-14 07:21:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Slimowski\AppData\Roaming\mozilla\Firefox\Profiles\2y1t5ns8.default\extensions [2013-06-25 20:44:47 | 000,000,000 | ---D | M] (HomeTab) -- C:\Users\Slimowski\AppData\Roaming\mozilla\Firefox\Profiles\2y1t5ns8.default\extensions\{f65af8e3-60ed-4a06-9699-c361e87a3f01} [2012-07-29 10:30:00 | 000,000,000 | ---D | M] (Iplex to ALLPlayer) -- C:\Users\Slimowski\AppData\Roaming\mozilla\Firefox\Profiles\2y1t5ns8.default\extensions\IplextoALL@ALLPlayer.org [2011-06-24 23:04:31 | 000,010,043 | ---- | M] () (No name found) -- C:\Users\Slimowski\AppData\Roaming\mozilla\firefox\profiles\2y1t5ns8.default\extensions\IplextoALL@ALLPlayer.org.xpi [2012-09-18 11:57:38 | 000,011,510 | ---- | M] () (No name found) -- C:\Users\Slimowski\AppData\Roaming\mozilla\firefox\profiles\2y1t5ns8.default\extensions\youtube2mp3@mondayx.de.xpi [2013-03-05 23:16:44 | 000,014,676 | ---- | M] () (No name found) -- C:\Users\Slimowski\AppData\Roaming\mozilla\firefox\profiles\2y1t5ns8.default\extensions\YouTubetoALL@ALLPlayer.org.xpi [2012-09-18 11:56:16 | 000,012,710 | ---- | M] () (No name found) -- C:\Users\Slimowski\AppData\Roaming\mozilla\firefox\profiles\2y1t5ns8.default\extensions\youtube_downloader@anishsane.googlepages.com.xpi [2011-05-25 10:50:00 | 000,001,736 | ---- | M] () (No name found) -- C:\Users\Slimowski\AppData\Roaming\mozilla\firefox\profiles\2y1t5ns8.default\extensions\{46868735-c3fa-47ce-8ce7-cce51a66aceb}.xpi [2013-06-04 01:25:19 | 000,870,680 | ---- | M] () (No name found) -- C:\Users\Slimowski\AppData\Roaming\mozilla\firefox\profiles\2y1t5ns8.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-10-30 09:32:31 | 000,434,392 | ---- | M] () (No name found) -- C:\Users\Slimowski\AppData\Roaming\mozilla\firefox\profiles\2y1t5ns8.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi [2013-06-14 07:21:23 | 000,003,363 | ---- | M] () -- C:\Users\Slimowski\AppData\Roaming\mozilla\firefox\profiles\2y1t5ns8.default\searchplugins\Web Search.xml [2013-06-25 20:44:45 | 000,007,847 | ---- | M] () -- C:\Users\Slimowski\AppData\Roaming\mozilla\firefox\profiles\2y1t5ns8.default\searchplugins\WebSearch.xml [2013-03-07 22:58:03 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2013-03-07 22:58:03 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-03-07 22:58:11 | 000,262,552 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2012-10-29 14:06:24 | 000,172,032 | ---- | M] (LiveVDO.tv) -- C:\Program Files\mozilla firefox\plugins\npfflivevdoplg.dll [2011-10-03 11:14:54 | 000,083,456 | ---- | M] (vShare.tv ) -- C:\Program Files\mozilla firefox\plugins\npvsharetvplg.dll [2011-03-22 20:38:12 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll [2013-03-07 22:58:08 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2013-03-07 22:58:08 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2013-03-07 22:58:08 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2013-03-07 22:58:08 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2013-06-14 07:21:23 | 000,003,363 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Web Search.xml [2013-03-07 22:58:08 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2013-03-07 22:58:08 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter} CHR - homepage: http://websearch.a-searchpage.info/?pid=658&r=2013/06/06&hid=2914140455&lg=EN&cc=PL&unqvl=18 CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Slimowski\AppData\Local\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Slimowski\AppData\Local\Google\Chrome\Application\27.0.1453.116\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Slimowski\AppData\Local\Google\Chrome\Application\27.0.1453.116\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll CHR - plugin: vShare.tv plug-in (Enabled) = C:\Users\Slimowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj\1.3_0\chvsharetvplg.dll CHR - plugin: vShare.tv plug-in (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npvsharetvplg.dll CHR - plugin: Skype Toolbars (Enabled) = C:\Users\Slimowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\npSkypeChromePlugin.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll CHR - plugin: Java Deployment Toolkit 6.0.310.5 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll CHR - plugin: Winamp Application Detector (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npwachk.dll CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: Facebook Video Calling Plugin (Enabled) = C:\Users\Slimowski\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll CHR - plugin: Google Update (Enabled) = C:\Users\Slimowski\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll CHR - Extension: YouTube = C:\Users\Slimowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\ CHR - Extension: Szukaj w Google = C:\Users\Slimowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: Eliminator Slajd\u00F3w = C:\Users\Slimowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\eplekpmdodlgejgogbojajncdlapamff\1.4.5_0\ CHR - Extension: AdBlock = C:\Users\Slimowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.1_0\ CHR - Extension: vshare plugin = C:\Users\Slimowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj\1.3_0\ CHR - Extension: LiveVDO.tv plugin = C:\Users\Slimowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbiamblgmkgbcgbcgejjgebalncpmhnp\1.3_0\ CHR - Extension: HomeTab = C:\Users\Slimowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbigfkbippnoeffniighecdghnbnmced\3.5_0\ CHR - Extension: Gmail = C:\Users\Slimowski\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\ O1 HOSTS File: ([2011-06-01 18:50:04 | 000,001,518 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O1 - Hosts: 127.0.0.1 activate.adobe.com O1 - Hosts: 127.0.0.1 activate.adobe.com O1 - Hosts: 127.0.0.1 practivate.adobe.com O1 - Hosts: 127.0.0.1 ereg.adobe.com O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com O1 - Hosts: 127.0.0.1 wip3.adobe.com O1 - Hosts: 127.0.0.1 3dns-3.adobe.com O1 - Hosts: 127.0.0.1 3dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com O1 - Hosts: 127.0.0.1 activate-sea.adobe.com O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com O1 - Hosts: 127.0.0.1 adobe.activate.com O1 - Hosts: 127.0.0.1 adobeereg.com O1 - Hosts: 127.0.0.1 www.adobeereg.com O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com O1 - Hosts: 127.0.0.1 125.252.224.90 O1 - Hosts: 127.0.0.1 125.252.224.91 O1 - Hosts: 127.0.0.1 hl2rcv.adobe.com O2 - BHO: (HomeTab) - {036451d5-97b6-4882-a0cb-0f3b6de4df8d} - C:\Users\Slimowski\AppData\Roaming\HomeTab\HomeTab.dll (Simplytech Ltd.) O2 - BHO: (YouTube To ALLPlayer) - {61DB16C5-B733-43F4-872E-B20DC9E72740} - C:\Program Files\ALLPlayer\YouTubeToALLPlayer.dll (ALLPlayer.org) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (IE5BarLauncherBHO Class) - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) O3 - HKLM\..\Toolbar: (HomeTab) - {036451d5-97b6-4882-a0cb-0f3b6de4df8d} - C:\Users\Slimowski\AppData\Roaming\HomeTab\HomeTab.dll (Simplytech Ltd.) O3 - HKLM\..\Toolbar: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.) O3 - HKU\S-1-5-21-3958440826-2036700987-1971538616-1000\..\Toolbar\WebBrowser: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.) O4 - HKLM..\Run: [00TCrdMain] C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) O4 - HKLM..\Run: [HSON] C:\Program Files\TOSHIBA\TBS\HSON.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe (TOSHIBA Electronics, Inc.) O4 - HKLM..\Run: [ITSecMng] C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe (TOSHIBA CORPORATION) O4 - HKLM..\Run: [KeNotify] C:\Program Files\TOSHIBA\Utilities\KeNotify.exe () O4 - HKLM..\Run: [Onet.pl AutoUpdate] "C:\Program Files\Common Files\Onet.pl\NewAutoUpdate.exe" /updateexetsr File not found O4 - HKLM..\Run: [SmoothView] C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [TaskTray] File not found O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation) O4 - Startup: C:\Users\Slimowski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDockFree\ObjectDock.exe (Stardock) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1 O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Wyślij &do programu OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.25.2) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.25.2) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 8.8.8.8 217.17.34.10 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{98E65389-757F-41DB-BA9A-03127B6EA86A}: DhcpNameServer = 8.8.8.8 217.17.34.10 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CA6321F9-8CFC-4F33-8FB8-878C8AF991D8}: DhcpNameServer = 192.168.137.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O22 - SharedTaskScheduler: {1984D045-52CF-49cd-DB77-08F378FEA4DB} - ObjectDockShellExt - C:\Program Files\Stardock\ObjectDockFree\ODMenu.dll (Stardock) O24 - Desktop WallPaper: C:\Users\Slimowski\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O24 - Desktop BackupWallPaper: C:\Users\Slimowski\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2013-06-25 21:52:22 | 000,263,592 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe [2013-06-25 21:51:38 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe [2013-06-25 21:51:38 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe [2013-06-25 21:51:38 | 000,094,632 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll [2013-06-25 08:45:13 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{FF7EAA00-7B10-4376-B305-5F9854E563B7} [2013-06-23 20:51:47 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\Desktop\GINGER [2013-06-22 15:22:14 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{B63E3BAD-3F3F-486E-BE2F-93474BB11807} [2013-06-22 11:54:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes [2013-06-22 11:53:53 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes [2013-06-22 11:53:53 | 000,000,000 | ---D | C] -- C:\Program Files\iPod [2013-06-22 11:51:28 | 000,000,000 | ---D | C] -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1 [2013-06-21 11:17:59 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{D9456080-5ABF-4989-91C9-F2620D231332} [2013-06-19 09:55:26 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{6F610DCB-02A8-44E5-94A9-4F05F85D07A1} [2013-06-17 21:10:03 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{FFCCA5F5-782F-4128-BB20-4675EA94592B} [2013-06-14 11:11:09 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{A01B3EC1-3373-482F-8A38-B62198BBD95E} [2013-06-13 22:29:58 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{2C29B8D3-1525-4BBD-8524-A0DAA8E73656} [2013-06-13 09:00:16 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\Desktop\2013 [2013-06-13 06:16:12 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb [2013-06-13 06:16:08 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll [2013-06-13 06:16:08 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll [2013-06-13 06:16:08 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe [2013-06-13 06:16:08 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll [2013-06-13 06:16:07 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll [2013-06-13 06:16:06 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll [2013-06-13 06:16:05 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl [2013-06-12 21:23:45 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\printcom.dll [2013-06-12 21:23:40 | 000,812,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certutil.exe [2013-06-12 21:23:39 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certenc.dll [2013-06-12 21:23:28 | 003,603,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe [2013-06-12 21:23:27 | 003,551,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe [2013-06-12 21:23:15 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptdlg.dll [2013-06-11 00:07:48 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{97262BEF-3445-4D9A-82E0-E44C78513416} [2013-06-10 05:43:41 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{358734D3-0463-4391-909B-A408C7DC20E0} [2013-06-09 11:54:48 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{09F946B8-7012-452D-88E0-AAD576C57AEA} [2013-06-08 22:43:03 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{32A944AB-097B-40C8-9356-1F374D1633BF} [2013-06-08 08:28:36 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{E3264EAA-82DE-4D94-8374-4B8031A02507} [2013-06-07 19:19:46 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{45B18522-8314-4B6C-8297-02BF7466AC67} [2013-06-07 00:04:44 | 000,000,000 | ---D | C] -- C:\ProgramData\StarApp [2013-06-07 00:04:04 | 000,000,000 | ---D | C] -- C:\Program Files\WebSearch [2013-06-07 00:04:03 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Roaming\Systweak [2013-06-07 00:03:58 | 000,018,952 | ---- | C] (Systweak Inc., (www.systweak.com)) -- C:\Windows\System32\roboot.exe [2013-06-07 00:03:37 | 000,000,000 | ---D | C] -- C:\Program Files\ContinueToSave [2013-06-07 00:02:58 | 000,000,000 | ---D | C] -- C:\ProgramData\InstallMate [2013-06-06 22:02:46 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{696D1607-84C0-436D-85D8-74C7F7E2848C} [2013-06-05 21:24:08 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{C7BBE78C-0C2D-45E7-B98A-93100BC27E46} [2013-06-05 16:22:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Onet.pl [2013-06-05 16:22:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kamerzysta [2013-06-05 16:22:38 | 000,000,000 | ---D | C] -- C:\Program Files\onetowe [2013-06-05 08:39:31 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{2D163C35-7198-484D-90FB-88AAB341775D} [2013-06-04 09:26:30 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{D10F97E1-D4EA-4628-86FD-80E46BDCB089} [2013-06-03 12:47:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime [2013-06-03 12:47:40 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime [2013-06-03 09:30:49 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{B95CD8BE-89F8-494C-808C-932F5183F535} [2013-06-02 19:33:20 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\Desktop\KOCIE [2013-06-02 11:22:15 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{E50B0FB8-3D61-40B1-8AFB-1A9BC460AAE1} [2013-05-31 12:42:32 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{EE5874F3-4BC0-41E6-9382-23D627590C23} [2013-05-29 16:00:44 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{C3E62B5C-57F7-452C-8D8F-F0308672E0B5} [2013-05-28 09:44:31 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{9AF8D87E-2AB7-48FF-A6E6-443DF8CB556C} [2013-05-27 13:35:03 | 000,000,000 | ---D | C] -- C:\Users\Slimowski\AppData\Local\{7BEDD932-B1BF-44CD-9911-61947BC905A9} [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2013-06-25 22:00:04 | 000,001,042 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2013-06-25 21:51:06 | 000,094,632 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll [2013-06-25 21:51:05 | 000,867,240 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll [2013-06-25 21:51:05 | 000,789,416 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\deployJava1.dll [2013-06-25 21:51:05 | 000,263,592 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaws.exe [2013-06-25 21:51:05 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe [2013-06-25 21:51:05 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\java.exe [2013-06-25 21:35:01 | 000,001,038 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2013-06-25 21:34:56 | 000,003,664 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2013-06-25 21:34:56 | 000,003,664 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2013-06-25 21:34:45 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2013-06-25 21:32:40 | 000,002,067 | ---- | M] () -- C:\Users\Slimowski\Desktop\Google Chrome.lnk [2013-06-25 21:20:04 | 000,001,074 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3958440826-2036700987-1971538616-1000UA.job [2013-06-25 21:11:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2013-06-25 20:36:51 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3958440826-2036700987-1971538616-1000UA.job [2013-06-25 10:17:29 | 000,001,072 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3958440826-2036700987-1971538616-1000Core.job [2013-06-25 07:53:06 | 000,001,022 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3958440826-2036700987-1971538616-1000Core.job [2013-06-24 13:25:21 | 000,102,912 | ---- | M] () -- C:\Users\Slimowski\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2013-06-22 23:21:57 | 000,007,944 | ---- | M] () -- C:\Users\Slimowski\AppData\Local\d3d9caps.dat [2013-06-21 21:44:07 | 000,069,621 | ---- | M] () -- C:\Users\Slimowski\Desktop\koty.jpg [2013-06-13 05:58:44 | 000,031,816 | ---- | M] () -- C:\Windows\Launcher.exe [2013-06-11 20:14:51 | 108,357,749 | ---- | M] () -- C:\Users\Slimowski\Desktop\20130611_191330.mp4 [2013-06-11 00:11:53 | 000,785,176 | ---- | M] () -- C:\Users\Slimowski\Desktop\grafik.jpg [2013-06-09 17:47:46 | 000,674,024 | ---- | M] () -- C:\Windows\System32\perfh015.dat [2013-06-09 17:47:46 | 000,597,330 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2013-06-09 17:47:46 | 000,130,994 | ---- | M] () -- C:\Windows\System32\perfc015.dat [2013-06-09 17:47:46 | 000,104,206 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2013-06-06 23:34:38 | 000,000,357 | ---- | M] () -- C:\Users\Slimowski\Desktop\filmy — skrót.lnk [color=#E56717]========== Files Created - No Company Name ==========[/color] [2013-06-25 21:32:40 | 000,002,067 | ---- | C] () -- C:\Users\Slimowski\Desktop\Google Chrome.lnk [2013-06-21 21:44:06 | 000,069,621 | ---- | C] () -- C:\Users\Slimowski\Desktop\koty.jpg [2013-06-13 09:08:46 | 108,357,749 | ---- | C] () -- C:\Users\Slimowski\Desktop\20130611_191330.mp4 [2013-06-11 00:11:52 | 000,785,176 | ---- | C] () -- C:\Users\Slimowski\Desktop\grafik.jpg [2013-06-06 23:34:38 | 000,000,357 | ---- | C] () -- C:\Users\Slimowski\Desktop\filmy — skrót.lnk [2013-04-28 13:09:08 | 000,031,816 | ---- | C] () -- C:\Windows\Launcher.exe [2012-12-24 15:37:21 | 020,044,657 | ---- | C] () -- C:\Users\Slimowski\kato_wice.psd [2012-12-18 11:06:10 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe [2012-12-18 11:06:06 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll [2012-12-18 11:06:06 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll [2012-12-18 11:06:06 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll [2012-12-18 11:06:06 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll [2012-11-21 20:17:19 | 000,314,935 | ---- | C] () -- C:\Users\Slimowski\prowokacja.jpg [2012-08-30 18:06:53 | 000,000,000 | ---- | C] () -- C:\Windows\ViewNX.INI [2012-08-30 16:45:20 | 000,000,268 | RH-- | C] () -- C:\ProgramData\Legacy [2012-08-30 16:45:20 | 000,000,268 | RH-- | C] () -- C:\Users\Slimowski\AppData\Roaming\Keyboard Layouts [2012-08-30 16:45:20 | 000,000,012 | RH-- | C] () -- C:\ProgramData\MIDI Devices [2012-08-30 16:45:19 | 000,000,020 | -H-- | C] () -- C:\ProgramData\PKP_DLdw.DAT [2012-06-02 22:00:08 | 000,079,872 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll [2012-04-20 22:20:21 | 000,080,384 | ---- | C] () -- C:\Windows\System32\mkzlib.dll [2012-04-20 22:20:19 | 000,024,576 | ---- | C] () -- C:\Windows\System32\mkunicode.dll [2012-02-24 17:20:26 | 018,082,846 | ---- | C] () -- C:\Users\Slimowski\tlo.psd [2012-02-24 17:20:13 | 000,182,904 | ---- | C] () -- C:\Users\Slimowski\tlo.png [2012-02-24 17:14:45 | 005,107,503 | ---- | C] () -- C:\Users\Slimowski\profilowe.png [2012-02-24 17:12:31 | 000,187,158 | ---- | C] () -- C:\Users\Slimowski\profilowe.jpg [2012-02-24 17:11:47 | 055,625,376 | ---- | C] () -- C:\Users\Slimowski\profilowe.psd [2011-12-15 21:08:51 | 000,000,091 | ---- | C] () -- C:\Windows\fnerr.dat [2011-12-10 14:23:05 | 001,398,603 | ---- | C] () -- C:\Users\Slimowski\361d6cb6a3ffa9b0ba5a291b324e463b-jpg.jpg [2011-12-08 12:04:58 | 000,111,813 | ---- | C] () -- C:\Users\Slimowski\10-11lg.jpg [2011-11-27 19:11:26 | 000,130,732 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat [2011-11-20 21:53:41 | 000,003,058 | ---- | C] () -- C:\Users\Slimowski\elf.jpg [2011-11-20 21:23:44 | 000,015,695 | ---- | C] () -- C:\Users\Slimowski\Excoffon_Wiewiorka.jpg [2011-11-18 21:32:50 | 000,034,998 | ---- | C] () -- C:\Users\Slimowski\How Sex And The City sold its soul Since Carrie & Co hit the big screen they've turned into man-obsessed morons 6.jpg [2011-11-13 22:03:59 | 000,102,451 | ---- | C] () -- C:\Users\Slimowski\5042328b7321613489d85eb3e611522e.jpg [2011-10-31 15:15:22 | 000,085,935 | ---- | C] () -- C:\Users\Slimowski\h&m 2.jpg [2011-10-31 15:14:08 | 000,068,073 | ---- | C] () -- C:\Users\Slimowski\h&m.jpg [2011-10-05 16:25:17 | 000,095,880 | ---- | C] () -- C:\Users\Slimowski\IMG_0312.jpg [2011-09-13 19:21:14 | 000,741,376 | ---- | C] () -- C:\Users\Slimowski\do_pracy.indd [2011-08-31 12:10:14 | 000,000,132 | ---- | C] () -- C:\Users\Slimowski\AppData\Roaming\Adobe PNG Format CS5 Prefs [2011-08-25 12:11:01 | 001,985,565 | ---- | C] () -- C:\Users\Slimowski\suknia.pdf [2011-08-25 12:10:42 | 000,778,240 | ---- | C] () -- C:\Users\Slimowski\suknia.indd [2011-08-25 12:01:50 | 001,865,137 | ---- | C] () -- C:\Users\Slimowski\kwioty.pdf [2011-08-25 12:01:17 | 002,564,096 | ---- | C] () -- C:\Users\Slimowski\kwiot.indd [2011-08-25 11:58:43 | 090,973,371 | ---- | C] () -- C:\Users\Slimowski\kwioty.psd [2011-05-25 12:02:47 | 000,102,912 | ---- | C] () -- C:\Users\Slimowski\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-05-24 23:49:14 | 000,007,944 | ---- | C] () -- C:\Users\Slimowski\AppData\Local\d3d9caps.dat [2011-02-21 20:12:36 | 000,528,384 | ---- | C] () -- C:\Users\Slimowski\kanapki.indd [2010-12-29 20:58:32 | 000,039,188 | ---- | C] () -- C:\Users\Slimowski\bmf.png [2010-12-29 20:58:24 | 000,432,186 | ---- | C] () -- C:\Users\Slimowski\bmf.psd [2010-12-13 15:47:21 | 000,296,631 | ---- | C] () -- C:\Users\Slimowski\tapeta.jpg [2010-12-13 15:47:17 | 007,349,608 | ---- | C] () -- C:\Users\Slimowski\tapeta.psd [2010-12-10 11:53:44 | 000,659,456 | ---- | C] () -- C:\Users\Slimowski\brutal.indd [2010-12-09 11:09:54 | 113,999,824 | ---- | C] () -- C:\Users\Slimowski\dworzec pkp.psd [2010-07-18 16:25:33 | 000,033,053 | ---- | C] () -- C:\Users\Slimowski\foto.jpg [2010-06-23 09:04:03 | 001,499,500 | ---- | C] () -- C:\Users\Slimowski\wp.psd [2010-05-25 11:14:34 | 000,079,741 | ---- | C] () -- C:\Users\Slimowski\tap.png [2010-04-07 10:37:04 | 000,154,762 | ---- | C] () -- C:\Users\Slimowski\gruzinskie rugby.jpg [2010-03-11 21:02:44 | 000,126,662 | ---- | C] () -- C:\Users\Slimowski\upper.png [2010-02-16 22:58:03 | 000,537,560 | ---- | C] () -- C:\Users\Slimowski\dyplom_1.pdf [2009-06-26 22:46:01 | 000,493,595 | ---- | C] () -- C:\Users\Slimowski\Wideo005.3gp [2009-06-26 22:45:40 | 002,684,878 | ---- | C] () -- C:\Users\Slimowski\Wideo003.3gp [2009-01-15 00:12:25 | 000,005,809 | ---- | C] () -- C:\Users\Slimowski\wygaszacz.swf [2009-01-15 00:12:21 | 000,114,688 | ---- | C] () -- C:\Users\Slimowski\wygaszacz.fla [2009-01-07 00:52:52 | 064,432,826 | ---- | C] () -- C:\Users\Slimowski\forum_gkw_katowice_pl_Zobacz_temat_-_Katowice_Przebudowa_r_d.avi [2009-01-06 13:42:54 | 003,964,635 | ---- | C] () -- C:\Users\Slimowski\Comp 1.swf [2008-07-03 14:49:29 | 032,676,437 | ---- | C] () -- C:\Users\Slimowski\indesign_cs4_help_ang.pdf [2008-07-03 14:48:45 | 038,663,805 | ---- | C] () -- C:\Users\Slimowski\indesign_cs4_help.pdf [2008-06-13 23:53:08 | 011,141,577 | ---- | C] () -- C:\Users\Slimowski\The_new_CHANEL_N_5_film.mp4 [2008-06-13 23:51:31 | 009,655,848 | ---- | C] () -- C:\Users\Slimowski\nicole_kidman_chanel_commercial.mp4 [2008-06-13 23:43:18 | 015,776,507 | ---- | C] () -- C:\Users\Slimowski\adidas.mp4 [color=#E56717]========== ZeroAccess Check ==========[/color] [2006-11-02 14:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012-06-08 19:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2009-04-11 08:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = %systemroot%\system32\wbem\wbemess.dll -- [2009-04-11 08:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [color=#E56717]========== LOP Check ==========[/color] [2011-10-21 12:02:27 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\AnvSoft [2011-06-08 16:11:50 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\AutoUpdate [2012-04-18 18:07:39 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\Downloaded Installations [2013-06-16 10:17:31 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\Dropbox [2012-03-27 11:28:41 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\FMZilla [2012-02-21 13:55:13 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\Gadu-Gadu 10 [2013-06-24 07:43:48 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\GG [2013-06-14 07:21:28 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\HomeTab [2013-06-25 20:53:14 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\Kamerzysta [2011-06-08 16:27:09 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\ManyCam [2012-08-16 19:49:08 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\NapiProjekt [2012-08-30 16:48:34 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\Nikon [2012-04-18 18:12:46 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\Nitro PDF [2013-04-19 23:32:31 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\Nokia [2011-10-25 18:19:23 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\Nowe Gadu-Gadu [2011-06-14 09:23:43 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\OpenFM [2012-04-24 21:37:27 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\Opera [2011-08-09 13:00:46 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\PDF Writer [2013-02-17 13:19:05 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\Samsung [2011-05-30 10:24:11 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\SharePod [2013-04-28 13:09:08 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\SimplyTech [2012-08-16 12:33:24 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1 [2011-05-25 01:02:24 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\Stardock [2013-06-07 00:13:05 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\Systweak [2012-06-05 17:09:55 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\TaboretSoft [2012-01-25 15:02:45 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\TeamViewer [2011-05-25 09:46:50 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\Thunderbird [2011-05-29 23:15:16 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\toshiba [2013-03-01 18:23:23 | 000,000,000 | ---D | M] -- C:\Users\Slimowski\AppData\Roaming\Windows Live Writer [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 64 bytes -> C:\Users\Slimowski\The_new_CHANEL_N_5_film.mp4:TOC.WMV @Alternate Data Stream - 64 bytes -> C:\Users\Slimowski\nicole_kidman_chanel_commercial.mp4:TOC.WMV @Alternate Data Stream - 64 bytes -> C:\Users\Slimowski\forum_gkw_katowice_pl_Zobacz_temat_-_Katowice_Przebudowa_r_d.avi:TOC.WMV @Alternate Data Stream - 64 bytes -> C:\Users\Slimowski\adidas.mp4:TOC.WMV @Alternate Data Stream - 192 bytes -> C:\Windows:nlsPreferences < End of report >