OTL logfile created on: 2013-06-30 13:43:04 - Run 2
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Kuba\Downloads
 Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,25 Gb Total Physical Memory | 1,33 Gb Available Physical Memory | 40,82% Memory free
6,50 Gb Paging File | 4,01 Gb Available in Paging File | 61,74% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 60,55 Gb Total Space | 32,49 Gb Free Space | 53,65% Space Free | Partition Type: NTFS
Drive D: | 117,19 Gb Total Space | 113,51 Gb Free Space | 96,86% Space Free | Partition Type: NTFS
Drive E: | 117,19 Gb Total Space | 62,56 Gb Free Space | 53,39% Space Free | Partition Type: NTFS
Drive F: | 214,84 Gb Total Space | 94,34 Gb Free Space | 43,91% Space Free | Partition Type: NTFS
Drive I: | 6,44 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive J: | 7,03 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
Drive K: | 6,81 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
 
Computer Name: KUBA-KOMPUTER | User Name: Kuba | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2013-06-30 13:42:27 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Kuba\Downloads\OTL.exe
PRC - [2013-06-30 12:58:02 | 001,855,880 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
PRC - [2013-06-11 11:51:46 | 000,614,416 | ---- | M] () -- E:\EslWire\EslWire\service\WireHelperSvc.exe
PRC - [2013-05-23 13:30:52 | 003,402,304 | ---- | M] (GG Network S.A.) -- C:\Users\Kuba\AppData\Local\GG\Application\ggdrive\ggdrive.exe
PRC - [2013-05-23 13:30:52 | 003,365,440 | ---- | M] (GG Network S.A.) -- C:\Users\Kuba\AppData\Local\GG\Application\gghub.exe
PRC - [2013-05-23 13:30:52 | 000,318,016 | ---- | M] (GG Network S.A.) -- C:\Users\Kuba\AppData\Local\GG\Application\ggapp.exe
PRC - [2013-05-17 18:41:12 | 000,920,472 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2013-05-09 10:58:30 | 004,858,968 | ---- | M] (AVAST Software) -- D:\Avast\AvastUI.exe
PRC - [2013-05-09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) -- D:\Avast\AvastSvc.exe
PRC - [2013-05-08 21:45:20 | 000,844,168 | ---- | M] (Samsung) -- D:\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
PRC - [2013-04-23 13:48:16 | 000,311,152 | ---- | M] (Samsung Electronics Co., Ltd.) -- D:\Samsung\Kies\KiesTrayAgent.exe
PRC - [2013-04-23 13:48:12 | 001,561,968 | ---- | M] (Samsung) -- D:\Samsung\Kies\Kies.exe
PRC - [2012-12-18 16:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012-11-29 15:50:25 | 003,463,080 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
PRC - [2012-11-29 02:10:52 | 005,479,224 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech Gaming Software\LCore.exe
PRC - [2012-09-01 21:21:53 | 001,201,656 | ---- | M] (Webroot Software, Inc. ) -- D:\Webroot Security\WRConsumerService.exe
PRC - [2012-06-11 13:10:58 | 000,291,840 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
PRC - [2011-10-26 04:01:18 | 000,417,792 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
PRC - [2011-10-26 04:00:46 | 000,176,128 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
PRC - [2011-03-22 10:14:12 | 004,048,256 | ---- | M] (Webroot Software, Inc. (www.webroot.com)) -- D:\Webroot Security\SpySweeper.exe
PRC - [2011-01-20 11:20:12 | 001,305,408 | ---- | M] (DT Soft Ltd) -- D:\DAEMON Tools Lite\DTLite.exe
PRC - [2010-11-20 14:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2010-11-20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010-11-20 14:16:54 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
PRC - [2010-02-12 10:23:12 | 000,286,720 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe
PRC - [2009-02-27 18:04:38 | 000,850,432 | ---- | M] () -- D:\Blue Soleil\BlueSoleilCS.exe
PRC - [2009-02-27 17:42:20 | 000,098,407 | ---- | M] () -- D:\Blue Soleil\BsHelpCS.exe
PRC - [2009-02-27 17:40:48 | 000,143,467 | ---- | M] () -- D:\Blue Soleil\BsMobileCS.exe
PRC - [2009-02-05 14:43:26 | 000,068,136 | ---- | M] () -- C:\Program Files\Gigabyte\EasySaver\essvr.exe
PRC - [2009-01-15 16:58:02 | 000,430,968 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\Shared Files\Software Update\AutoUpdate.exe
PRC - [2007-09-20 10:51:46 | 000,853,288 | ---- | M] (Nero AG) -- D:\Nero 8\Nero 8\Nero BackItUp\NBService.exe
PRC - [2006-11-17 17:42:46 | 000,053,341 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\Shared Files\CTSched.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2013-06-30 12:58:01 | 016,033,160 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_7_700_224.dll
MOD - [2013-05-23 13:30:52 | 014,718,312 | ---- | M] () -- C:\Users\Kuba\AppData\Local\GG\Application\FMSBWChecker\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll
MOD - [2013-05-23 13:30:52 | 001,945,600 | ---- | M] () -- C:\Users\Kuba\AppData\Local\GG\Application\xulrunner\mozjs.dll
MOD - [2013-05-23 13:30:52 | 000,135,168 | ---- | M] () -- C:\Users\Kuba\AppData\Local\GG\Application\ggdrive\zlib1.dll
MOD - [2013-05-17 18:41:11 | 003,128,728 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2013-05-08 21:45:53 | 017,554,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Theme\29b76c4557411720d9941e699525efa5\Kies.Theme.ni.dll
MOD - [2013-05-08 21:45:52 | 000,307,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\DummyStorePlugin\1a9a7343fe3c6846baccc09e5af5547b\DummyStorePlugin.ni.dll
MOD - [2013-05-08 21:45:52 | 000,115,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\DeviceStoryAlbum\f39232599d68feddcac4e1d0328a00c2\DeviceStoryAlbum.ni.dll
MOD - [2013-05-08 21:45:51 | 000,613,888 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\DevicePodcast\06b7f88e92d7649c94c0f8062e2d356c\DevicePodcast.ni.dll
MOD - [2013-05-08 21:45:50 | 000,300,544 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\DeviceVideo\6365794aad25a3897995e98abd282fa6\DeviceVideo.ni.dll
MOD - [2013-05-08 21:45:49 | 000,355,840 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\DevicePhoto\998ad060c28a5ca9faddacf9b3be576b\DevicePhoto.ni.dll
MOD - [2013-05-08 21:45:48 | 000,307,712 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\DeviceMusic\164ffbe914d41c3c332ed4feeaad0514\DeviceMusic.ni.dll
MOD - [2013-05-08 21:45:47 | 000,475,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\VideoManager\b99d944b84836e50b0020f65ab777de6\VideoManager.ni.dll
MOD - [2013-05-08 21:45:46 | 000,782,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PhotoManager\3b9111fef34efcb80ffea30c2fc7555a\PhotoManager.ni.dll
MOD - [2013-05-08 21:45:43 | 001,988,608 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Phonebook\cb23b2da49fb7547c8bc070db185392a\Phonebook.ni.dll
MOD - [2013-05-08 21:45:40 | 000,207,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\StoryAlbumManager\c90c5aabd9ab0ec4c8fe9f3f8be450c2\StoryAlbumManager.ni.dll
MOD - [2013-05-08 21:45:38 | 000,945,152 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\MusicManager\84b2d533910a6f60e270b3844bfbb9f7\MusicManager.ni.dll
MOD - [2013-05-08 21:45:37 | 000,403,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\BATPlugin\755a0f097fc192775efbf99f68724521\BATPlugin.ni.dll
MOD - [2013-05-08 21:45:31 | 000,029,184 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.StoreMa#\956db5fee67767ec6d6a8342c3dd870b\Kies.Common.StoreManager.ni.dll
MOD - [2013-05-08 21:45:30 | 000,533,504 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.MediaDB\0525fa0e70eded5c544f6e14fc6ed9cb\Kies.Common.MediaDB.ni.dll
MOD - [2013-05-08 21:45:29 | 000,232,960 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\ASF_cSharpAPI\c6ff17f640d26384df72fdf01719742b\ASF_cSharpAPI.ni.dll
MOD - [2013-05-08 21:45:29 | 000,063,488 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.AllShare\cb211fef200e02a13bf9013f6f5afbfe\Kies.Common.AllShare.ni.dll
MOD - [2013-05-08 21:45:28 | 000,066,560 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DBManag#\9845c1469461fc0d9c8c0fc759b5d43f\Kies.Common.DBManager.ni.dll
MOD - [2013-05-08 21:45:27 | 000,109,568 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.CRMMana#\adad560397e6f1557df2e88cee94eed0\Kies.Common.CRMManager.ni.dll
MOD - [2013-05-08 21:45:26 | 001,146,368 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Podcaster\14ebff7049890b68867f92f64e3f680d\Podcaster.ni.dll
MOD - [2013-05-08 21:45:24 | 000,283,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\68aaabbe3c9dd1e9d769bf488b0a973a\Kies.Common.DeviceServiceLib.FirmwareUpdate.Common.ni.dll
MOD - [2013-05-08 21:45:23 | 000,189,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\cfcfb195d9482300946620bfa8c2f9c4\Kies.Common.DeviceServiceLib.FirmwareUpdate.Downloader.ni.dll
MOD - [2013-05-08 21:45:22 | 000,579,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\98384e2e4475fe1f6b13cc67c847875b\Kies.Common.DeviceServiceLib.FileService.ni.dll
MOD - [2013-05-08 21:45:22 | 000,175,616 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Interop.DevFileServ#\91e3ef45d8b6601be3cda231e8b3c32f\Interop.DevFileServiceLib.ni.dll
MOD - [2013-05-08 21:45:21 | 001,203,712 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\5546811a9652bc9749b2ad4516a07e24\Kies.Common.DeviceService.ni.dll
MOD - [2013-05-08 21:45:16 | 000,994,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\DeviceCommonLib\12f65ccb648b3c923f4ab0efa6cecd70\DeviceCommonLib.ni.dll
MOD - [2013-05-08 21:45:14 | 000,743,424 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Plugin.Content#\bd36816081cafa16a0ad13f3f2e4978e\Kies.Plugin.ContentsManagerLib.ni.dll
MOD - [2013-05-08 21:45:11 | 000,205,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.MainUI\24bce818a391fb824fb29cf8ccf7e8f0\Kies.Common.MainUI.ni.dll
MOD - [2013-05-08 21:44:52 | 000,045,568 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\94a649441d9d4eed908fcd39bcba73ee\Kies.Common.DeviceServiceLib.FirmwareUpdate.FirmwareUpdateAgentHelper.ni.dll
MOD - [2013-05-08 21:44:51 | 000,928,256 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\3eee615af88f32967d6d28d796d3dc1b\Kies.Common.DeviceServiceLib.DeviceManagement.ni.dll
MOD - [2013-05-08 21:44:44 | 000,052,224 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Interop.MP3FileInfo#\c99811c6a988ca6c2104a5b45acbddbb\Interop.MP3FileInfoCOMLib.ni.dll
MOD - [2013-05-08 21:44:44 | 000,032,256 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Interop.OGGFileInfo#\cbeefee33636e0d0be226cf11e180ba3\Interop.OGGFileInfoCOMLib.ni.dll
MOD - [2013-05-08 21:44:43 | 000,171,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Interop.P3MPINTERFA#\b0b31095249cec5ef5c0407fa6b7fc22\Interop.P3MPINTERFACECTRLLib.ni.dll
MOD - [2013-05-08 21:44:43 | 000,030,720 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Interop.PRPLAYERCOR#\2e9140867d3e81e347b8f2cd25bb8e08\Interop.PRPLAYERCORELib.ni.dll
MOD - [2013-05-08 21:44:42 | 002,199,040 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.Multime#\df27cc1b6060b2708d2cc18e776ab516\Kies.Common.Multimedia.ni.dll
MOD - [2013-05-08 21:44:38 | 000,638,464 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\7a1ca8887b05104fdd8656739233af6c\Kies.Common.DeviceServiceLib.DeviceDataService.ni.dll
MOD - [2013-05-08 21:44:38 | 000,188,416 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\8aea24874f35aeabb737410f1ef2c96e\Kies.Common.DeviceServiceLib.Interface.ni.dll
MOD - [2013-05-08 21:44:32 | 007,029,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\DeviceHost\d247bbebdd9f2b80af1ed7d00587e684\DeviceHost.ni.dll
MOD - [2013-05-08 21:44:26 | 000,395,776 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CabLib\6265ffca46eab52d5f798847b5ea908c\CabLib.ni.dll
MOD - [2013-05-08 21:44:25 | 000,281,600 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Common.Util\e68254f79347e29fd7d50c7f008659c7\Kies.Common.Util.ni.dll
MOD - [2013-05-08 21:44:24 | 001,644,032 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Locale\f83b917c9ecc64a3f7a7c1c2f0338c8f\Kies.Locale.ni.dll
MOD - [2013-05-08 21:44:24 | 000,052,224 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Interop.DeviceSearc#\f108203a60eadaff95b82bed51846431\Interop.DeviceSearchLib.ni.dll
MOD - [2013-05-08 21:44:23 | 001,899,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.UI\3997d048379e5f49d68219a033ef1674\Kies.UI.ni.dll
MOD - [2013-05-08 21:44:23 | 000,079,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.MVVM\885d5e585bd2e191e14afa5ef3cd8be3\Kies.MVVM.ni.dll
MOD - [2013-05-08 21:44:21 | 000,160,256 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\GongSolutions.Wpf.D#\2d6ffdec540ad52e732b9b5cdd251603\GongSolutions.Wpf.DragDrop.ni.dll
MOD - [2013-05-08 21:44:19 | 001,273,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies.Interface\bea4d60f83ade0faae038114cf893fd8\Kies.Interface.ni.dll
MOD - [2013-05-08 21:44:10 | 000,221,696 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\a41ce1b6f77a65783d1c0d3a4223559f\System.ServiceProcess.ni.dll
MOD - [2013-05-08 21:43:54 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\1799edaf526c8acd66a05266ced58279\System.Runtime.Remoting.ni.dll
MOD - [2013-05-08 21:43:46 | 001,781,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\6e2e6c933b6f13a9bcac17c9a8350f83\System.Xaml.ni.dll
MOD - [2013-05-08 21:43:44 | 002,175,488 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Kies\69a1fb012e6ce8888b34a25ce0ceadea\Kies.ni.exe
MOD - [2013-05-08 21:36:15 | 018,017,792 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\5e234618000edb585e4307e30a5eb085\PresentationFramework.ni.dll
MOD - [2013-05-08 21:35:59 | 011,522,048 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\334f4a2b874af82700a37098b4b27e50\PresentationCore.ni.dll
MOD - [2013-05-08 21:35:59 | 000,980,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\b8c47ff8eba1c63c4b5d50fe571cac5a\System.Configuration.ni.dll
MOD - [2013-05-08 21:35:55 | 007,053,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\a77b7b58c3a6b12d8e1d4862a5e4707c\System.Core.ni.dll
MOD - [2013-05-08 21:35:47 | 005,618,176 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\27db9abf05348711baf8ce46589ea251\System.Xml.ni.dll
MOD - [2013-05-08 21:35:47 | 003,879,936 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\eca1bc38b28d3caf12dc3f6469c2be90\WindowsBase.ni.dll
MOD - [2013-05-08 21:35:41 | 009,091,072 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\d9f2d9f4d4bda48670bdae6555fec6dd\System.ni.dll
MOD - [2013-05-08 21:35:35 | 014,414,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\c1af4ec9a36f671617a8ecaec00373f4\mscorlib.ni.dll
MOD - [2010-01-30 03:41:12 | 004,254,560 | ---- | M] () -- C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2009-02-27 17:44:10 | 000,622,693 | ---- | M] () -- C:\Windows\System32\BSShell.dll
MOD - [2009-02-27 17:41:02 | 000,122,976 | ---- | M] () -- C:\Windows\System32\BsMobileSDK.dll
MOD - [2009-02-27 17:38:48 | 000,102,499 | ---- | M] () -- C:\Windows\System32\Bs2Res.dll
MOD - [2008-03-07 14:54:22 | 017,907,824 | ---- | M] () -- C:\Windows\System32\BsLangInDepRes.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - [2013-06-11 11:51:46 | 000,614,416 | ---- | M] () [Auto | Running] -- E:\EslWire\EslWire\service\WireHelperSvc.exe -- (EslWireHelper)
SRV - [2013-06-07 00:06:24 | 000,543,656 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013-06-03 16:21:54 | 000,162,408 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013-05-17 18:41:12 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013-05-09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) [Auto | Running] -- D:\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2012-12-18 16:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012-11-29 15:50:25 | 003,463,080 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8)
SRV - [2012-09-01 21:21:53 | 001,201,656 | ---- | M] (Webroot Software, Inc. ) [Auto | Running] -- D:\Webroot Security\WRConsumerService.exe -- (WRConsumerService)
SRV - [2012-06-11 13:10:58 | 000,291,840 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
SRV - [2011-10-26 04:00:46 | 000,176,128 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2011-05-17 14:44:27 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
SRV - [2011-03-22 10:14:12 | 004,048,256 | ---- | M] (Webroot Software, Inc. (www.webroot.com)) [Auto | Running] -- D:\Webroot Security\SpySweeper.exe -- (WebrootSpySweeperService)
SRV - [2010-03-25 11:25:22 | 030,969,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- D:\Microsoft Office 2010\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2010-02-12 10:23:12 | 000,286,720 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)
SRV - [2009-07-14 03:16:15 | 000,016,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\StorSvc.dll -- (StorSvc)
SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009-07-14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009-07-14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009-02-27 18:04:38 | 000,850,432 | ---- | M] () [Auto | Running] -- D:\Blue Soleil\BlueSoleilCS.exe -- (BlueSoleilCS)
SRV - [2009-02-27 17:42:20 | 000,098,407 | ---- | M] () [On_Demand | Running] -- D:\Blue Soleil\BsHelpCS.exe -- (BsHelpCS)
SRV - [2009-02-27 17:40:48 | 000,143,467 | ---- | M] () [Auto | Running] -- D:\Blue Soleil\BsMobileCS.exe -- (BsMobileCS)
SRV - [2009-02-05 14:43:26 | 000,068,136 | ---- | M] () [Auto | Running] -- C:\Program Files\Gigabyte\EasySaver\essvr.exe -- (ES lite Service)
SRV - [2007-09-20 10:51:46 | 000,853,288 | ---- | M] (Nero AG) [Auto | Running] -- D:\Nero 8\Nero 8\Nero BackItUp\NBService.exe -- (Nero BackItUp Scheduler 3)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\pccsmcfd.sys -- (pccsmcfd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\gMouPS2.sys -- (gMouPS2)
DRV - File not found [Kernel | On_Demand | Unknown] -- C:\Users\Kuba\AppData\Local\Temp\aftcaaog.sys -- (aftcaaog)
DRV - [2013-06-30 12:35:27 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\gdrv.sys -- (gdrv)
DRV - [2013-06-28 07:50:03 | 000,770,344 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2013-06-28 07:50:03 | 000,369,584 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2013-06-28 07:50:03 | 000,175,176 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2013-06-24 22:24:06 | 001,077,776 | ---- | M] (<Turtle Entertainment>) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\ESLWireACD.sys -- (ESLWireAC)
DRV - [2013-05-09 10:59:10 | 000,061,680 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr2.sys -- (aswRdr)
DRV - [2013-05-09 10:59:10 | 000,056,080 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2013-05-09 10:59:10 | 000,049,376 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2013-05-09 10:59:09 | 000,066,336 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2013-05-09 10:59:08 | 000,029,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2013-04-03 09:58:16 | 000,181,912 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudmdm.sys -- (ssudmdm)
DRV - [2013-04-03 09:58:16 | 000,083,864 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudbus.sys -- (dg_ssudbus)
DRV - [2012-11-05 21:23:34 | 000,026,912 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\PPFlt.sys -- (PrivacyProtectorMP)
DRV - [2012-11-05 21:23:34 | 000,026,912 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\PPFlt.sys -- (Passthru)
DRV - [2012-10-03 00:26:46 | 000,042,040 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LGSHidFilt.Sys -- (LGSHidFilt)
DRV - [2012-03-05 16:04:30 | 000,045,184 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Stopped] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\aoddriver2.sys -- (AODDriver4.1)
DRV - [2012-03-05 16:04:30 | 000,045,184 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\aoddriver2.sys -- (AODDriver4.01)
DRV - [2011-10-26 05:03:48 | 008,853,504 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2011-10-26 05:03:48 | 008,853,504 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
DRV - [2011-10-26 03:21:36 | 000,264,192 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
DRV - [2011-06-22 15:38:26 | 000,024,504 | ---- | M] (Turtle Entertainment GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ESLvnic.sys -- (ESLvnic1)
DRV - [2011-04-26 23:08:26 | 000,004,096 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\bbcap.sys -- (bbcap)
DRV - [2011-03-22 10:14:22 | 000,176,776 | ---- | M] (Webroot Software, Inc. (www.webroot.com)) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\ssidrv.sys -- (ssidrv)
DRV - [2011-03-22 10:14:22 | 000,029,832 | ---- | M] (Webroot Software, Inc. (www.webroot.com)) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\ssfs0bbc.sys -- (ssfs0bbc)
DRV - [2011-03-22 10:14:22 | 000,023,176 | ---- | M] (Webroot Software, Inc. (www.webroot.com)) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sshrmd.sys -- (sshrmd)
DRV - [2011-02-09 22:01:13 | 000,218,688 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2010-11-20 14:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010-11-20 14:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010-11-20 14:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010-11-20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010-11-20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010-11-20 11:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010-11-20 11:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010-03-18 20:50:12 | 000,189,528 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\haP17v2k.sys -- (hap17v2k)
DRV - [2010-03-18 20:50:04 | 000,162,904 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\haP16v2k.sys -- (hap16v2k)
DRV - [2010-03-18 20:49:56 | 000,798,808 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ha10kx2k.sys -- (ha10kx2k)
DRV - [2010-03-18 20:45:42 | 000,092,760 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\emupia2k.sys -- (emupia)
DRV - [2010-03-18 20:45:28 | 000,157,272 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctsfm2k.sys -- (ctsfm2k)
DRV - [2010-03-18 20:45:20 | 000,014,424 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctprxy2k.sys -- (ctprxy2k)
DRV - [2010-03-18 20:45:12 | 000,127,576 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctoss2k.sys -- (ossrv)
DRV - [2010-03-18 20:40:48 | 000,347,144 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ctdvda2k.sys -- (ctdvda2k)
DRV - [2010-03-18 20:40:40 | 000,528,472 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctaud2k.sys -- (ctaud2k)
DRV - [2010-03-18 20:40:32 | 000,511,064 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctac32k.sys -- (ctac32k)
DRV - [2010-03-18 20:39:36 | 000,100,952 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTERFXFX.sys -- (CTERFXFX.SYS)
DRV - [2010-03-18 20:39:36 | 000,100,952 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTERFXFX.sys -- (CTERFXFX)
DRV - [2010-03-18 20:39:28 | 000,566,360 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CTSBLFX.sys -- (CTSBLFX.SYS)
DRV - [2010-03-18 20:39:28 | 000,566,360 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTSBLFX.sys -- (CTSBLFX)
DRV - [2010-03-18 20:39:18 | 000,555,096 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CTAUDFX.sys -- (CTAUDFX.SYS)
DRV - [2010-03-18 20:39:18 | 000,555,096 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CTAUDFX.sys -- (CTAUDFX)
DRV - [2010-03-18 20:39:10 | 000,099,416 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\COMMONFX.sys -- (COMMONFX.SYS)
DRV - [2010-03-18 20:39:10 | 000,099,416 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\COMMONFX.sys -- (COMMONFX)
DRV - [2010-02-18 10:18:22 | 000,037,944 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\amdiox86.sys -- (amdiox86)
DRV - [2009-11-24 03:37:18 | 000,014,856 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LGVirHid.sys -- (LGVirHid)
DRV - [2009-11-24 03:37:08 | 000,019,720 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LGBusEnum.sys -- (LGBusEnum)
DRV - [2009-07-14 01:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | System | Running] -- C:\Windows\System32\drivers\serial.sys -- (Serial)
DRV - [2009-01-08 03:20:04 | 000,031,880 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VCommMgr.sys -- (VcommMgr)
DRV - [2009-01-08 00:39:36 | 000,020,744 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\BtHidBus.sys -- (BtHidBus)
DRV - [2009-01-03 17:40:12 | 000,039,304 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\btcusb.sys -- (Btcsrusb)
DRV - [2008-12-25 11:30:22 | 000,155,808 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RtHDMIV.sys -- (RTHDMIAzAudService)
DRV - [2008-12-07 13:44:54 | 000,030,088 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\btnetBus.sys -- (btnetBUs)
DRV - [2008-07-02 15:58:48 | 000,026,248 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IvtBtBus.sys -- (IvtBtBUs)
DRV - [2008-01-21 20:27:50 | 000,014,856 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VComm.sys -- (VComm)
DRV - [2006-11-22 14:41:18 | 000,022,416 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- D:\Blue Soleil\device\Win2k\BTNetFilter.sys -- (BTNetFilter)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search bar = 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\..\URLSearchHook: {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\Windows\System32\dvmurl.dll (DeviceVM Inc.)
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\${searchCLSID}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{33A741D2-286E-41B2-9925-0254093B0519}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
IE - HKCU\..\SearchScopes\{3D781FFD-4CE5-440B-9B24-58876CBECE52}: "URL" = http://www.google.com/custom?q={searchTerms}&sa.x=0&sa.y=0&safe=active&client=pub-3794288947762788&forid=1&channel=1975384696&ie=UTF-8&oe=UTF-8&hl=en&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF%3BLBGC%3A336699%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFORID%3A1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultthis.engineName: ""
FF - prefs.js..browser.search.param.yahoo-fr: ""
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0
FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=937811&p="
FF - prefs.js..network.proxy.backup.ftp: ""
FF - prefs.js..network.proxy.backup.ftp_port: 0
FF - prefs.js..network.proxy.backup.socks: ""
FF - prefs.js..network.proxy.backup.socks_port: 0
FF - prefs.js..network.proxy.backup.ssl: ""
FF - prefs.js..network.proxy.backup.ssl_port: 0
FF - prefs.js..network.proxy.ftp: "95.140.196.34:3128"
FF - prefs.js..network.proxy.http: "95.140.196.34:3128"
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.socks: "95.140.196.34:3128"
FF - prefs.js..network.proxy.ssl: "95.140.196.34:3128"
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: D:\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: D:\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Kuba\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: D:\Avast\WebRep\FF [2013-06-16 20:16:50 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013-01-30 22:18:48 | 000,000,000 | ---D | M]
 
[2011-01-16 18:09:42 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kuba\AppData\Roaming\mozilla\Extensions
[2012-10-23 21:12:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kuba\AppData\Roaming\mozilla\Firefox\Profiles\ff86cwig.default\extensions
[2013-06-14 21:32:32 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2013-05-17 18:41:13 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2013-05-17 18:41:13 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Kuba\AppData\Local\Google\Chrome\Application\12.0.742.100\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Java Deployment Toolkit 6.0.220.4 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U22 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.0.60129.0\npctrl.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = D:\MICROS~1\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = D:\MICROS~1\Office14\NPSPWRAP.DLL
CHR - plugin: Chrome NaCl (Disabled) = C:\Users\Kuba\AppData\Local\Google\Chrome\Application\12.0.742.100\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Kuba\AppData\Local\Google\Chrome\Application\12.0.742.100\pdf.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Kuba\AppData\Local\Google\Update\1.3.21.57\npGoogleUpdate3.dll
CHR - plugin: Veetle TV Player (Enabled) = D:\Veetle\Player\npvlc.dll
CHR - plugin: Veetle TV Core (Enabled) = D:\Veetle\plugins\npVeetle.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
 
O1 HOSTS File: ([2012-09-01 21:25:01 | 000,000,909 | ---- | M]) - C:\Windows\System32\drivers\etc\HOSTS
O1 - Hosts: 127.0.0.1 genuine.microsoft.com
O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com
O1 - Hosts: 127.0.0.1 sls.microsoft.com
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Microsoft Office 2010\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Microsoft Office 2010\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Avast\aswWebRepIE.dll (AVAST Software)
O4 - HKLM..\Run: [avast] D:\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [KiesTrayAgent] D:\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKLM..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.)
O4 - HKLM..\Run: [RiccoVPN]  File not found
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [] D:\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (Samsung)
O4 - HKCU..\Run: [Creative Software Update] C:\Program Files\Creative\Shared Files\Software Update\AutoUpdate.exe (Creative Technology Ltd)
O4 - HKCU..\Run: [CreativeTaskScheduler] C:\Program Files\Creative\Shared Files\CTSched.exe (Creative Technology Ltd)
O4 - HKCU..\Run: [DAEMON Tools Lite] D:\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [GG] C:\Users\Kuba\AppData\Local\GG\Application\gghub.exe (GG Network S.A.)
O4 - HKCU..\Run: [KiesPreload] D:\Samsung\Kies\Kies.exe (Samsung)
O4 - Startup: C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Rejestracja produktu.lnk = C:\Program Files\Logitech Gaming Software\EReg\eReg.exe (Leader Technologies/Logitech)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - D:\Microsoft Office 2010\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Wyslij przez wiadomosc(&M)... - D:\Blue Soleil\TransSend\IE\tssms.htm ()
O8 - Extra context menu item: Wyślij &do programu OneNote - D:\Microsoft Office 2010\Office14\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: Wyślij przez Bluetooth - D:\Blue Soleil\TransSend\IE\tsinfo.htm ()
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Microsoft Office 2010\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Microsoft Office 2010\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - D:\Microsoft Office 2010\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - D:\Microsoft Office 2010\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab (Java Plug-in 10.25.2)
O16 - DPF: {CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab (Java Plug-in 1.7.0_25)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab (Java Plug-in 1.7.0_25)
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} http://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab (Creative Software AutoUpdate Support Package 2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 86.63.129.29 86.63.129.30
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4F24CA9C-A5BA-4D03-B47C-AA8D678FB61F}: DhcpNameServer = 86.63.129.29 86.63.129.30
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - D:\Microsoft Office 2010\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2012-10-29 21:50:21 | 000,000,075 | R--- | M] () - I:\Autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2008-11-15 11:52:50 | 000,161,088 | R--- | M] (Take-Two Interactive Software, Inc.) - J:\Autorun.exe -- [ UDF ]
O32 - AutoRun File - [2008-10-11 19:03:48 | 000,000,054 | R--- | M] () - J:\Autorun.inf -- [ UDF ]
O32 - AutoRun File - [2008-11-09 03:32:49 | 000,000,041 | R--- | M] () - K:\Autorun.inf -- [ UDF ]
O33 - MountPoints2\{6ef6dcf6-11ad-11e1-9323-00ff01000001}\Shell - "" = AutoRun
O33 - MountPoints2\{6ef6dcf6-11ad-11e1-9323-00ff01000001}\Shell\AutoRun\command - "" = J:\Autorun.exe -- [2008-11-15 11:52:50 | 000,161,088 | R--- | M] (Take-Two Interactive Software, Inc.)
O33 - MountPoints2\{af7dd28e-f675-11e0-be4b-00ff01000001}\Shell - "" = AutoRun
O33 - MountPoints2\{af7dd28e-f675-11e0-be4b-00ff01000001}\Shell\AutoRun\command - "" = I:\Setup.exe -- [2012-10-29 22:46:05 | 001,720,254 | R--- | M] (EA Games                                                    )
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2013-06-29 16:11:20 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\NativeFus_Log
[2013-06-28 23:21:22 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\Oracle
[2013-06-28 23:20:14 | 000,263,592 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2013-06-28 23:20:10 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2013-06-28 23:20:10 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2013-06-28 23:20:10 | 000,094,632 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2013-06-15 13:03:27 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\CrashDump
[2013-06-14 23:40:07 | 000,000,000 | ---D | C] -- C:\Users\Kuba\Desktop\screeny
[2013-06-14 22:19:11 | 000,000,000 | ---D | C] -- C:\Users\Kuba\Desktop\pzu
[2013-06-08 14:21:55 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Local\Unity
[2013-06-08 13:59:23 | 000,000,000 | --SD | C] -- C:\Users\Kuba\GG dysk
[2013-06-08 13:47:00 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Local\GG
[2013-06-08 13:46:48 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\GG
[2013-06-08 13:46:48 | 000,000,000 | ---D | C] -- C:\ProgramData\GG
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2013-06-30 12:58:02 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013-06-30 12:58:02 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013-06-30 12:39:49 | 000,749,852 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2013-06-30 12:39:49 | 000,655,914 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013-06-30 12:39:49 | 000,158,344 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2013-06-30 12:39:49 | 000,124,654 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013-06-30 12:35:45 | 000,005,982 | ---- | M] () -- C:\Windows\System32\LOCALSERVICE.INI
[2013-06-30 12:35:27 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\Windows\gdrv.sys
[2013-06-30 12:35:21 | 000,000,989 | ---- | M] () -- C:\Windows\System32\bscs.ini
[2013-06-30 12:34:46 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013-06-30 12:34:46 | 000,000,031 | ---- | M] () -- C:\Windows\System32\bbcap.err
[2013-06-30 12:34:45 | 2616,057,856 | -HS- | M] () -- C:\hiberfil.sys
[2013-06-30 11:05:32 | 000,032,592 | ---- | M] () -- C:\Windows\System32\BMXStateBkp-{00000003-00000000-00000007-00001102-00000004-20021102}.rfx
[2013-06-30 11:05:32 | 000,032,592 | ---- | M] () -- C:\Windows\System32\BMXState-{00000003-00000000-00000007-00001102-00000004-20021102}.rfx
[2013-06-30 11:05:32 | 000,032,088 | ---- | M] () -- C:\Windows\System32\BMXCtrlState-{00000003-00000000-00000007-00001102-00000004-20021102}.rfx
[2013-06-30 11:05:32 | 000,032,088 | ---- | M] () -- C:\Windows\System32\BMXBkpCtrlState-{00000003-00000000-00000007-00001102-00000004-20021102}.rfx
[2013-06-30 11:05:32 | 000,011,564 | ---- | M] () -- C:\Windows\System32\DVCState-{00000003-00000000-00000007-00001102-00000004-20021102}.rfx
[2013-06-30 11:05:28 | 000,010,112 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013-06-30 11:05:28 | 000,010,112 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013-06-28 23:20:05 | 000,094,632 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2013-06-28 23:20:03 | 000,263,592 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2013-06-28 23:20:03 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2013-06-28 23:20:03 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2013-06-28 23:20:02 | 000,867,240 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll
[2013-06-28 23:20:02 | 000,789,416 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\deployJava1.dll
[2013-06-28 07:50:03 | 000,770,344 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
[2013-06-28 07:50:03 | 000,369,584 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys
[2013-06-28 07:50:03 | 000,175,176 | ---- | M] () -- C:\Windows\System32\drivers\aswVmm.sys
[2013-06-28 07:50:03 | 000,000,175 | ---- | M] () -- C:\Windows\System32\drivers\aswVmm.sys.sum
[2013-06-28 07:50:03 | 000,000,175 | ---- | M] () -- C:\Windows\System32\drivers\aswSP.sys.sum
[2013-06-28 07:50:03 | 000,000,175 | ---- | M] () -- C:\Windows\System32\drivers\aswSnx.sys.sum
[2013-06-27 23:35:46 | 000,000,400 | ---- | M] () -- C:\Windows\System32\REMOTEDEVICE.INI
[2013-06-27 23:34:53 | 000,000,105 | ---- | M] () -- C:\Windows\System32\LOCALDEVICE.INI
[2013-06-26 21:56:02 | 000,005,179 | ---- | M] () -- C:\Windows\System32\SHORTCUT.INI
[2013-06-26 20:40:21 | 000,280,740 | ---- | M] () -- C:\Users\Kuba\Desktop\Bez tytułu.jpg
[2013-06-24 22:24:06 | 001,077,776 | ---- | M] (<Turtle Entertainment>) -- C:\Windows\System32\drivers\ESLWireACD.sys
[2013-06-17 20:28:33 | 000,001,158 | ---- | M] () -- C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Rejestracja produktu.lnk
[2013-06-16 20:16:54 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2013-06-15 00:19:39 | 000,001,080 | ---- | M] () -- C:\Windows\System32\settingsbkup.sfm
[2013-06-15 00:19:39 | 000,001,080 | ---- | M] () -- C:\Windows\System32\settings.sfm
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2013-06-28 07:50:03 | 000,000,175 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys.sum
[2013-06-26 20:17:02 | 000,000,175 | ---- | C] () -- C:\Windows\System32\drivers\aswSP.sys.sum
[2013-06-26 20:17:02 | 000,000,175 | ---- | C] () -- C:\Windows\System32\drivers\aswSnx.sys.sum
[2013-06-17 20:28:33 | 000,001,158 | ---- | C] () -- C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Rejestracja produktu.lnk
[2013-06-08 13:47:03 | 000,001,104 | ---- | C] () -- C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GG.lnk
[2013-04-18 19:07:00 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2013-04-18 19:06:46 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll
[2013-04-18 19:06:46 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll
[2013-04-18 19:06:46 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll
[2013-04-18 19:06:46 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll
[2013-03-30 19:18:57 | 000,175,176 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys
[2013-03-30 19:18:57 | 000,049,376 | ---- | C] () -- C:\Windows\System32\drivers\aswRvrt.sys
[2012-08-19 16:27:42 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2012-06-14 22:26:41 | 000,000,164 | ---- | C] () -- C:\Windows\install.dat
[2012-06-11 13:50:42 | 000,159,232 | ---- | C] () -- C:\Windows\System32\clinfo.exe
[2012-03-20 22:03:45 | 000,000,055 | ---- | C] () -- C:\Windows\Speed Video Converter.INI
[2012-03-20 21:28:05 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2012-02-18 23:23:27 | 000,000,853 | ---- | C] () -- C:\Users\Kuba\.recently-used.xbel
[2012-01-31 16:47:01 | 000,175,616 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2012-01-22 17:12:17 | 000,026,912 | ---- | C] () -- C:\Windows\System32\drivers\PPFlt.sys
[2011-10-26 03:31:36 | 000,204,952 | ---- | C] () -- C:\Windows\System32\ativvsvl.dat
[2011-10-26 03:31:36 | 000,157,144 | ---- | C] () -- C:\Windows\System32\ativvsva.dat
[2011-10-25 22:21:34 | 000,056,832 | ---- | C] () -- C:\Windows\System32\OVDecoder.dll
[2011-09-13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\System32\atipblag.dat
[2011-08-31 21:22:15 | 000,007,597 | ---- | C] () -- C:\Users\Kuba\AppData\Local\Resmon.ResmonCfg
[2011-08-30 16:33:12 | 000,239,869 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2011-08-01 18:16:37 | 000,265,120 | ---- | C] () -- C:\Program Files\Common Files\WireHelpSvc.exe
[2011-03-03 21:06:05 | 000,012,288 | ---- | C] () -- C:\Users\Kuba\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009-07-14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012-06-09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009-07-14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2013-01-26 16:41:47 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\25Assist
[2012-02-18 22:41:49 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Blueberry
[2011-02-09 22:01:50 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\DAEMON Tools Lite
[2012-09-02 11:37:07 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Gadu-Gadu 10
[2013-06-30 12:35:52 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\GG
[2012-07-30 10:05:46 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\GHISLER
[2011-06-30 20:56:21 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\go
[2011-04-02 18:31:42 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\gtk-2.0
[2013-04-27 19:40:25 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\ipla
[2011-04-14 16:03:48 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\IrfanView
[2013-01-24 19:17:13 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Leadertech
[2012-09-14 15:28:33 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\LolClient
[2011-02-20 20:31:24 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\MXSkypeRecorder
[2012-04-11 16:19:03 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Need for Speed World
[2013-02-02 23:25:19 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\OpenCandy
[2011-02-03 21:53:00 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\OpenFM
[2013-06-28 23:21:22 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Oracle
[2012-10-19 21:56:44 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\pokerth
[2011-05-09 17:47:33 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Publish Providers
[2013-05-08 21:44:27 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Samsung
[2011-05-14 22:01:45 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Sony
[2012-04-01 13:25:42 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Sony Creative Software
[2013-03-28 21:37:20 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\TeamViewer
[2013-06-29 00:27:10 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\TS3Client
[2013-02-02 23:26:02 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\TuneUp Software
[2013-06-25 14:37:37 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\uTorrent
[2012-09-05 21:45:41 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\wargaming.net
[2012-03-20 22:44:47 | 000,000,000 | ---D | M] -- C:\Users\Kuba\AppData\Roaming\Xilisoft
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >