Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-08-2013 03
Ran by PiT (administrator) on PIT-ALLIANZ on 31-08-2013 14:51:37
Running from C:\Users\PiT\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Polish
Internet Explorer Version 9
Boot Mode: Safe Mode (minimal)

==================== Processes (Whitelisted) =================


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2226280 2011-06-03] (Realtek Semiconductor)
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [361984 2011-03-21] (Alcor Micro Corp.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2785064 2011-05-05] (Synaptics Incorporated)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-05-02] (Intel(R) Corporation)
HKLM\...\Run: [SynAsusAcpi] - C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [97064 2011-05-05] (Synaptics Incorporated)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [10372368 2011-03-30] (Intel Corporation)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4156 2010-04-17] ()
HKLM\...\Run: [Setwallpaper] - c:\programdata\SetWallpaper.cmd [x]
HKLM\...\Run: [SC-Print A Msgsrv] - C:\Program Files\SC-Print A\Msgsrv.exe [73216 2008-06-06] ()
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [689488 2008-03-10] (CANON INC.)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2114376 2008-03-17] (CANON INC.)
HKLM\...\Run: [COMODO Internet Security] - C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1502424 2013-07-08] (COMODO)
HKCU\...\Run: [Gadu-Gadu] - C:\Program Files (x86)\Gadu-Gadu\gg.exe [2127296 2008-03-20] (Gadu-Gadu S.A.)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Users\PiT\Deamon Tools\DAEMON Tools Lite\DTLite.exe [3481408 2012-02-13] (DT Soft Ltd)
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [18705664 2013-01-08] (Skype Technologies S.A.)
HKCU\...\Policies\Explorer: [NoDriveAutoRun] 0
MountPoints2: {00b3651c-de1d-11e1-b0e6-ac72891f01d4} - F:\_AUTORUN\AUTORUN.EXE
MountPoints2: {02a3fe7f-c543-11e1-ad97-ac72891f01d4} - F:\AutoRun.exe
MountPoints2: {61439bfd-7f2a-11e1-9c6d-ac72891f01d4} - F:\AutoRun.exe
MountPoints2: {61439c0a-7f2a-11e1-9c6d-ac72891f01d4} - F:\AutoRun.exe
MountPoints2: {6f79de55-7bf9-11e1-b0d8-ac72891f01d4} - G:\_AUTORUN\AUTORUN.EXE
HKLM-x32\...\Run: [Nuance PDF Reader-reminder] - C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe [328992 2008-11-03] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [ASUSPRP] - C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2018032 2011-04-01] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] - C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe [731472 2011-02-23] (ecareme)
HKLM-x32\...\Run: [SonicMasterTray] - C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus)
HKLM-x32\...\Run: [ATKOSD2] - C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] - C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] - C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] ()
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [87336 2010-02-03] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdatePSTShortCut] - C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe [222504 2010-11-25] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateLBPShortCut] - C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] - C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DataCardMonitor] - C:\Program Files (x86)\blueconnect\DataCardMonitor.exe [253952 2012-04-07] (Huawei Technologies Co., Ltd.)
HKLM-x32\...\Run: [HTC Sync Loader] - C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe [651264 2012-04-17] ()
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-08-27] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776 2012-09-09] (Apple Inc.)
HKLM-x32\...\Run: [vProt] - C:\Program Files (x86)\AVG Secure Search\vprot.exe [2314416 2013-08-16] ()
HKLM-x32\...\Run: [CitrixReceiver] - "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citrix\Receiver Updater.lnk" [x]
HKLM-x32\...\Run: [ConnectionCenter] - C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [383544 2012-12-14] (Citrix Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKU\UpdatusUser\...\Run: [ISUSPM] - C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-06] (Acresso Corporation)
HKU\UpdatusUser\...\Run: [AVG-Secure-Search-Update_JUNE2013_TB] - C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe [1266712 2013-06-03] (AVG Secure Search)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [226920 2011-06-09] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll,C:\PROGRA~2\Citrix\ICACLI~1\RSHook.dll [226920 2011-06-09] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.allianz.pl/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1&cf=70ca2aee-80c5-11e1-9c6d-ac72891f01d4
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox
SearchScopes: HKLM-x32 - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&ptr=100&q={searchTerms}&crg=3.1010006.10029&barid={35BE6E95-D90E-11E2-9E5B-AC72891F01D4}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&ptr=100&q={searchTerms}&crg=3.1010006.10029&barid={35BE6E95-D90E-11E2-9E5B-AC72891F01D4}
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://startsear.ch/?aff=1&src=sp&cf=70ca2aee-80c5-11e1-9c6d-ac72891f01d4&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://startsear.ch/?aff=1&src=sp&cf=70ca2aee-80c5-11e1-9c6d-ac72891f01d4&q={searchTerms}
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://isearch.avg.com/search?cid={7E5930E4-EBB1-49A6-9A63-A683A1AEE519}&mid=7e9d340a130447d0ab347d3bcffbe827-8571e3e234560c40da5c9799ebc049020ce2a85c&lang=pl&ds=xn011&pr=sa&d=2012-10-23 12:41:20&v=15.2.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = http://mystart.incredibar.com/mb139/?search={searchTerms}&loc=IB_DS&a=6R8BqtjwnZ&i=26
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?src=6&ptr=100&q={searchTerms}&crg=3.1010006.10029&barid={35BE6E95-D90E-11E2-9E5B-AC72891F01D4}
BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\Partner64.dll (Google Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: IE5BarLauncherBHO Class - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll (VShare Inc.)
BHO-x32: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\Partner.dll (Google Inc.)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.5.0.2\AVG Secure Search_toolbar.dll (AVG Secure Search)
BHO-x32: WinZip Courier BHO - {A8FB70FA-0FDF-4601-9DC4-BFA1B357204F} - C:\PROGRA~2\WINZIP~1\wzwmcie.dll (WinZip Computing, S.L.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
BHO-x32: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - VShareToolBar - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll (VShare Inc.)
Toolbar: HKLM-x32 - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.5.0.2\AVG Secure Search_toolbar.dll (AVG Secure Search)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: msdaipp - No CLSID Value - 
Handler-x32: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files (x86)\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
Handler-x32: msdaipp - No CLSID Value - 
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\15.5.0\ViProtocol.dll (AVG Secure Search)
Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -  No File
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll (Citrix Systems, Inc.)
Winsock: Catalog5 09  File Not found ()
Tcpip\Parameters: [DhcpNameServer] 194.204.152.34 194.204.159.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.pl/
CHR RestoreOnStartup: "hxxp://www.google.pl/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll No File
CHR Plugin: (WinZip Courier) - C:\Users\PiT\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilckobikkmajlmhhdenkhonjkoaneclk\3.5.0_0\wzwmcgc.dll (WinZip Computing, S.L.)
CHR Plugin: (vShare.tv plug-in) - C:\Users\PiT\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj\1.3_0\chvsharetvplg.dll (vShare.tv )
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll No File
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Zeon Plus) - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Extension: (YouTube) - C:\Users\PiT\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\PiT\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (WinZip Courier) - C:\Users\PiT\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilckobikkmajlmhhdenkhonjkoaneclk\3.5.0_0
CHR Extension: (vshare plugin) - C:\Users\PiT\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj\1.3_0
CHR Extension: (AVG Secure Search) - C:\Users\PiT\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\15.5.0.2_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\PiT\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\Users\PiT\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [ilckobikkmajlmhhdenkhonjkoaneclk] - C:\Program Files (x86)\WinZip Courier\wzwmcgc.crx
CHR HKLM-x32\...\Chrome\Extension: [kpionmjnkbpcdpcflammlgllecmejgjj] - C:\Program Files (x86)\vShare.tv plugin\vshareplg.crx
CHR HKLM-x32\...\Chrome\Extension: [lmnbjancbmdnoekhdccahmhjfmibmfeo] - C:\ProgramData\Coolyou\lmnbjancbmdnoekhdccahmhjfmibmfeo.crx
CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG Secure Search\ChromeExt\15.5.0.2\avg.crx

==================== Services (Whitelisted) =================

S2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6199520 2013-07-08] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [158936 2013-06-18] (COMODO)
S2 DCService.exe; C:\ProgramData\DatacardService\DCService.exe [229376 2010-08-19] ()
S2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2095808 2013-08-01] ()
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-05-02] ()
S2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [625304 2012-09-28] (Pandora.TV)
S2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [88576 2011-09-15] ()
S3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [249856 2011-02-15] ()
S2 Splashtop MDES; C:\ASUS.SYS\SIONExportService.exe [338208 2011-05-11] (Splashtop Inc.)
S2 vToolbarUpdater15.5.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe [1643184 2013-08-16] (AVG Secure Search)

==================== Drivers (Whitelisted) ====================

R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-08-16] (AVG Technologies)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2013-06-18] (COMODO)
S1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [708632 2013-07-08] (COMODO)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-04-02] (DT Soft Ltd)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
S2 sxuptp; C:\Windows\System32\DRIVERS\sxuptp.sys [288792 2008-07-01] (silex technology, Inc.)
S2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-17] ()
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [250368 2010-04-07] (Huawei Technologies Co., Ltd.)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-31 14:50 - 2013-08-31 14:47 - 00377856 _____ C:\Users\PiT\Desktop\404qyt37.exe
2013-08-31 14:50 - 2013-08-31 14:46 - 01589756 _____ (Farbar) C:\Users\PiT\Desktop\FRST64.exe
2013-08-30 21:58 - 2013-08-30 21:58 - 00117608 _____ C:\Users\PiT\Desktop\OTL.Txt
2013-08-30 21:58 - 2013-08-30 21:58 - 00089442 _____ C:\Users\PiT\Desktop\Extras.Txt
2013-08-22 11:32 - 2013-08-23 15:25 - 00000000 ____D C:\Users\PiT\Desktop\Skany
2013-08-22 11:23 - 2012-11-21 08:40 - 00000000 ____D C:\Users\PiT\Downloads\AKY_ALL_010600_0
2013-08-22 11:22 - 2013-08-22 11:23 - 12325384 _____ C:\Users\PiT\Downloads\AKY_ALL_010600_0_tcm3-74781.exe
2013-08-22 11:15 - 2013-08-22 11:15 - 05539072 _____ (TeamViewer GmbH) C:\Users\PiT\Downloads\TeamViewer_Setup_pl-ckq (2).exe
2013-08-18 10:51 - 2013-08-18 11:02 - 00000000 ____D C:\Users\PiT\Desktop\zdjęcia Aparat 2013 wszystkie
2013-08-10 19:07 - 2013-08-10 19:07 - 00028105 _____ C:\Users\PiT\Downloads\[isoHunt] How.to.Train.Your.Dragon.2.DVDRIP[Jaybob].torrent
2013-08-10 19:06 - 2013-08-10 19:06 - 00028516 _____ C:\Users\PiT\Downloads\[isoHunt] D4792E6016428597D193F33B0E3D2B574E21A994.torrent
2013-08-10 19:06 - 2013-08-10 19:06 - 00028055 _____ C:\Users\PiT\Downloads\[isoHunt] DC8D60E31FE6C030191658355E3A496AEEC200B2.torrent
2013-08-10 19:05 - 2013-08-10 19:05 - 00028202 _____ C:\Users\PiT\Downloads\[isoHunt] National.Treasure.3.Jaybob.DVDRip.torrent
2013-08-07 15:56 - 2013-08-08 11:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-08-07 15:30 - 2013-08-07 15:30 - 00069115 _____ C:\Users\PiT\Downloads\[isoHunt] the wolverine 2013 HQ DVD RIP (Screener).torrent
2013-08-07 11:42 - 2013-08-07 11:42 - 00301632 _____ C:\Windows\Minidump\080713-19905-01.dmp
2013-08-07 11:35 - 2013-08-07 11:36 - 00000000 ____D C:\Users\PiT\iphone
2013-08-06 11:05 - 2013-08-06 11:05 - 01067192 _____ (Solid State Networks) C:\Users\PiT\Downloads\install_flashplayer11x32axau_mssd_aaa_aih.exe
2013-08-05 15:37 - 2013-08-05 15:38 - 05488440 _____ (TeamViewer GmbH) C:\Users\PiT\Downloads\TeamViewer_Setup_pl-ckq.exe
2013-08-05 15:37 - 2013-08-05 15:38 - 05488440 _____ (TeamViewer GmbH) C:\Users\PiT\Downloads\TeamViewer_Setup_pl-ckq (1).exe
2013-08-03 11:10 - 2013-08-03 11:10 - 00029096 _____ C:\Users\PiT\Downloads\[isoHunt] download (15).torrent
2013-08-03 11:09 - 2013-08-03 11:09 - 00028890 _____ C:\Users\PiT\Downloads\[isoHunt] 5913178.torrent
2013-08-03 11:08 - 2013-08-03 11:08 - 00008370 _____ C:\Users\PiT\Downloads\[isoHunt] 5975975.torrent
2013-08-03 11:03 - 2013-08-03 11:03 - 00029257 _____ C:\Users\PiT\Downloads\[isoHunt] Dexter S08E04 HDTV x264-EVOLVE[ettv].torrent
2013-08-03 11:03 - 2013-08-03 11:03 - 00027029 _____ C:\Users\PiT\Downloads\[isoHunt] Dexter S08E05 HDTV x264-ASAP[ettv].torrent
2013-08-03 11:02 - 2013-08-03 11:02 - 00028110 _____ C:\Users\PiT\Downloads\[isoHunt] Dexter S08E03 HDTV x264-ASAP[ettv].torrent
2013-08-03 11:01 - 2013-08-03 11:01 - 00007600 _____ C:\Users\PiT\Downloads\[isoHunt] Dexter.S08E02.720p.HDTV.x264-IMMERSE [PublicHD].torrent
2013-08-01 23:20 - 2013-08-01 23:20 - 00034939 _____ C:\Users\PiT\Downloads\[isoHunt] True Blood S06E07 In the Evening WEB-DL x264-FU[ettv].torrent
2013-08-01 23:19 - 2013-08-01 23:19 - 00019247 _____ C:\Users\PiT\Downloads\[isoHunt] True.Blood.S06E07.HDTV.x264-2HD.[eztv].torrent

==================== One Month Modified Files and Folders =======

2013-08-31 14:51 - 2013-08-31 14:51 - 00000000 ____D C:\FRST
2013-08-31 14:47 - 2013-08-31 14:50 - 00377856 _____ C:\Users\PiT\Desktop\404qyt37.exe
2013-08-31 14:46 - 2013-08-31 14:50 - 01589756 _____ (Farbar) C:\Users\PiT\Desktop\FRST64.exe
2013-08-30 21:58 - 2013-08-30 21:58 - 00117608 _____ C:\Users\PiT\Desktop\OTL.Txt
2013-08-30 21:58 - 2013-08-30 21:58 - 00089442 _____ C:\Users\PiT\Desktop\Extras.Txt
2013-08-30 21:49 - 2011-02-19 07:31 - 00709558 _____ C:\Windows\system32\perfh015.dat
2013-08-30 21:49 - 2011-02-19 07:31 - 00138976 _____ C:\Windows\system32\perfc015.dat
2013-08-30 21:49 - 2009-07-14 07:13 - 01580692 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-30 21:41 - 2011-09-27 05:54 - 00000012 ____H C:\dvmexp.idx
2013-08-30 21:41 - 2011-09-27 05:35 - 00000000 ____D C:\ProgramData\NVIDIA
2013-08-30 21:38 - 2009-07-14 06:51 - 00166139 _____ C:\Windows\setupact.log
2013-08-30 21:37 - 2013-03-09 11:31 - 01474832 _____ C:\Windows\system32\Drivers\sfi.dat
2013-08-30 16:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-08-30 14:13 - 2009-07-14 06:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-30 14:13 - 2009-07-14 06:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-30 14:08 - 2011-09-27 05:22 - 02093915 _____ C:\Windows\WindowsUpdate.log
2013-08-30 13:19 - 2012-03-07 19:00 - 00000000 ____D C:\Users\PiT
2013-08-30 13:18 - 2013-03-09 11:32 - 00000000 ____D C:\Windows\System32\Tasks\COMODO
2013-08-30 13:18 - 2011-09-27 05:50 - 00000000 ____D C:\ProgramData\P4G
2013-08-30 13:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-08-30 13:18 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2013-08-30 10:18 - 2012-06-04 20:35 - 00301056 ___SH C:\Users\PiT\Desktop\Thumbs.db
2013-08-30 07:02 - 2012-03-15 23:52 - 00000000 ____D C:\Users\PiT\AppData\Local\Htc
2013-08-23 15:25 - 2013-08-22 11:32 - 00000000 ____D C:\Users\PiT\Desktop\Skany
2013-08-22 11:23 - 2013-08-22 11:22 - 12325384 _____ C:\Users\PiT\Downloads\AKY_ALL_010600_0_tcm3-74781.exe
2013-08-22 11:23 - 2012-03-29 10:55 - 00000930 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-22 11:15 - 2013-08-22 11:15 - 05539072 _____ (TeamViewer GmbH) C:\Users\PiT\Downloads\TeamViewer_Setup_pl-ckq (2).exe
2013-08-22 11:01 - 2011-04-01 10:58 - 00001062 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-22 10:42 - 2013-06-03 08:09 - 00000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2013-08-22 10:42 - 2012-03-07 19:01 - 00045056 _____ C:\Windows\system32\acovcnt.exe
2013-08-22 10:42 - 2011-04-01 10:58 - 00001058 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-22 10:42 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-22 08:06 - 2012-08-16 13:05 - 00000000 ____D C:\Users\PiT\AppData\Roaming\Skype
2013-08-21 13:46 - 2013-01-29 10:28 - 00000000 ____D C:\Users\PiT\Desktop\CUK
2013-08-21 11:23 - 2012-03-29 10:55 - 00003868 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-21 11:23 - 2012-03-29 10:54 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-21 11:23 - 2012-03-08 12:49 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-20 15:50 - 2013-02-12 14:01 - 00000000 ____D C:\Users\PiT\Desktop\bogaty-albo-biedny
2013-08-20 10:18 - 2012-03-15 15:37 - 00000000 ____D C:\Users\PiT\AppData\Local\Adobe
2013-08-18 11:02 - 2013-08-18 10:51 - 00000000 ____D C:\Users\PiT\Desktop\zdjęcia Aparat 2013 wszystkie
2013-08-16 10:14 - 2011-09-27 05:52 - 00001931 _____ C:\Windows\system32\ServiceFilter.ini
2013-08-16 10:13 - 2012-10-23 12:41 - 00045856 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2013-08-16 10:13 - 2012-10-23 12:41 - 00000000 ____D C:\Program Files (x86)\AVG Secure Search
2013-08-12 08:06 - 2012-12-12 21:04 - 00000000 ____D C:\Users\PiT\Desktop\Różne
2013-08-11 22:33 - 2012-03-08 23:17 - 00000000 ____D C:\Users\PiT\AppData\Roaming\uTorrent
2013-08-10 19:07 - 2013-08-10 19:07 - 00028105 _____ C:\Users\PiT\Downloads\[isoHunt] How.to.Train.Your.Dragon.2.DVDRIP[Jaybob].torrent
2013-08-10 19:06 - 2013-08-10 19:06 - 00028516 _____ C:\Users\PiT\Downloads\[isoHunt] D4792E6016428597D193F33B0E3D2B574E21A994.torrent
2013-08-10 19:06 - 2013-08-10 19:06 - 00028055 _____ C:\Users\PiT\Downloads\[isoHunt] DC8D60E31FE6C030191658355E3A496AEEC200B2.torrent
2013-08-10 19:05 - 2013-08-10 19:05 - 00028202 _____ C:\Users\PiT\Downloads\[isoHunt] National.Treasure.3.Jaybob.DVDRip.torrent
2013-08-09 07:57 - 2012-10-16 13:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-08 11:37 - 2013-08-07 15:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-08-07 15:30 - 2013-08-07 15:30 - 00069115 _____ C:\Users\PiT\Downloads\[isoHunt] the wolverine 2013 HQ DVD RIP (Screener).torrent
2013-08-07 11:42 - 2013-08-07 11:42 - 00301632 _____ C:\Windows\Minidump\080713-19905-01.dmp
2013-08-07 11:42 - 2013-04-16 16:30 - 00000000 ____D C:\Windows\Minidump
2013-08-07 11:42 - 2013-04-16 16:29 - 544245530 _____ C:\Windows\MEMORY.DMP
2013-08-07 11:36 - 2013-08-07 11:35 - 00000000 ____D C:\Users\PiT\iphone
2013-08-06 11:05 - 2013-08-06 11:05 - 01067192 _____ (Solid State Networks) C:\Users\PiT\Downloads\install_flashplayer11x32axau_mssd_aaa_aih.exe
2013-08-05 15:38 - 2013-08-05 15:37 - 05488440 _____ (TeamViewer GmbH) C:\Users\PiT\Downloads\TeamViewer_Setup_pl-ckq.exe
2013-08-05 15:38 - 2013-08-05 15:37 - 05488440 _____ (TeamViewer GmbH) C:\Users\PiT\Downloads\TeamViewer_Setup_pl-ckq (1).exe
2013-08-03 11:10 - 2013-08-03 11:10 - 00029096 _____ C:\Users\PiT\Downloads\[isoHunt] download (15).torrent
2013-08-03 11:09 - 2013-08-03 11:09 - 00028890 _____ C:\Users\PiT\Downloads\[isoHunt] 5913178.torrent
2013-08-03 11:08 - 2013-08-03 11:08 - 00008370 _____ C:\Users\PiT\Downloads\[isoHunt] 5975975.torrent
2013-08-03 11:03 - 2013-08-03 11:03 - 00029257 _____ C:\Users\PiT\Downloads\[isoHunt] Dexter S08E04 HDTV x264-EVOLVE[ettv].torrent
2013-08-03 11:03 - 2013-08-03 11:03 - 00027029 _____ C:\Users\PiT\Downloads\[isoHunt] Dexter S08E05 HDTV x264-ASAP[ettv].torrent
2013-08-03 11:02 - 2013-08-03 11:02 - 00028110 _____ C:\Users\PiT\Downloads\[isoHunt] Dexter S08E03 HDTV x264-ASAP[ettv].torrent
2013-08-03 11:01 - 2013-08-03 11:01 - 00007600 _____ C:\Users\PiT\Downloads\[isoHunt] Dexter.S08E02.720p.HDTV.x264-IMMERSE [PublicHD].torrent
2013-08-02 11:55 - 2013-06-24 23:20 - 00057096 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll
2013-08-02 11:55 - 2013-06-24 23:20 - 00048392 _____ (COMODO CA Limited) C:\Windows\SysWOW64\certsentry.dll
2013-08-02 11:55 - 2013-03-10 09:15 - 00000000 ____D C:\Program Files (x86)\Comodo
2013-08-01 23:20 - 2013-08-01 23:20 - 00034939 _____ C:\Users\PiT\Downloads\[isoHunt] True Blood S06E07 In the Evening WEB-DL x264-FU[ettv].torrent
2013-08-01 23:19 - 2013-08-01 23:19 - 00019247 _____ C:\Users\PiT\Downloads\[isoHunt] True.Blood.S06E07.HDTV.x264-2HD.[eztv].torrent

Files to move or delete:
====================
C:\Users\PiT\AppData\Local\Temp\ala3jfma.dll
C:\Users\PiT\AppData\Local\Temp\AskSLib.dll
C:\Users\PiT\AppData\Local\Temp\AVGInstaller.exe
C:\Users\PiT\AppData\Local\Temp\biclient.exe
C:\Users\PiT\AppData\Local\Temp\bundlesweetimsetup.exe
C:\Users\PiT\AppData\Local\Temp\chutil.dll
C:\Users\PiT\AppData\Local\Temp\COMAP.EXE
C:\Users\PiT\AppData\Local\Temp\FCTBSetup.exe
C:\Users\PiT\AppData\Local\Temp\GenericUninstall.exe
C:\Users\PiT\AppData\Local\Temp\htmlayout.dll
C:\Users\PiT\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe
C:\Users\PiT\AppData\Local\Temp\jre-6u37-windows-i586-iftw.exe
C:\Users\PiT\AppData\Local\Temp\jre-6u39-windows-i586-iftw.exe
C:\Users\PiT\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\PiT\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\PiT\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\PiT\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\PiT\AppData\Local\Temp\mgsqlite3.dll
C:\Users\PiT\AppData\Local\Temp\mojeFundusze_PRO_Install.exe
C:\Users\PiT\AppData\Local\Temp\MSETUP4.EXE
C:\Users\PiT\AppData\Local\Temp\Norton_Download_Manager.exe
C:\Users\PiT\AppData\Local\Temp\NOSEventMessages.dll
C:\Users\PiT\AppData\Local\Temp\OptimizerPro.exe
C:\Users\PiT\AppData\Local\Temp\pen-drive-data-recovery-demo.exe
C:\Users\PiT\AppData\Local\Temp\PIPInstaller_PTV_.exe
C:\Users\PiT\AppData\Local\Temp\setup_3.2.10.exe
C:\Users\PiT\AppData\Local\Temp\setup_3.2.20.exe
C:\Users\PiT\AppData\Local\Temp\SweetIESetup.exe
C:\Users\PiT\AppData\Local\Temp\SweetIMSetup.exe
C:\Users\PiT\AppData\Local\Temp\Tsu-15FC.dll
C:\Users\PiT\AppData\Local\Temp\uttEAE9.tmp.exe
C:\Users\PiT\AppData\Local\Temp\VistaCookiesCollector.exe
C:\Users\PiT\AppData\Local\Temp\WSSetup.exe
C:\Users\PiT\AppData\Local\Temp\_is8077.exe
C:\Users\PiT\AppData\Local\Temp\_is95BB.exe
C:\Users\PiT\AppData\Local\Temp\_isD1A.exe
C:\Users\PiT\AppData\Local\Temp\{BD25037E-F00D-4CA6-BEC3-9831360F4E5D}\InstallFlashPlayer.exe
C:\Users\PiT\AppData\Local\Temp\{AE891E49-55C7-A961-9F98-51FAAAA5EF34}\Setup.exe
C:\Users\PiT\AppData\Local\Temp\{AE891E49-55C7-A961-9F98-51FAAAA5EF34}\_Setup.dll
C:\Users\PiT\AppData\Local\Temp\{AE891E49-55C7-A961-9F98-51FAAAA5EF34}\_Setupx.dll
C:\Users\PiT\AppData\Local\Temp\{AE891E49-55C7-A961-9F98-51FAAAA5EF34}\Addons\coolyou_setup.exe
C:\Users\PiT\AppData\Local\Temp\{AE891E49-55C7-A961-9F98-51FAAAA5EF34}\Addons\incredibar_install.exe
C:\Users\PiT\AppData\Local\Temp\{8E9B682F-4856-4068-9308-1BDD77EB7A36}\{38ADB9A6-798C-11D6-A855-00105A80791C}\netinst.dll
C:\Users\PiT\AppData\Local\Temp\{8DBDD731-6493-451D-B744-63777ADFFAE3}\ISBEW64.exe
C:\Users\PiT\AppData\Local\Temp\{8DBDD731-6493-451D-B744-63777ADFFAE3}\ISBEWI64.exe
C:\Users\PiT\AppData\Local\Temp\{8DBDD731-6493-451D-B744-63777ADFFAE3}\ISBEWX64.exe
C:\Users\PiT\AppData\Local\Temp\{8DBDD731-6493-451D-B744-63777ADFFAE3}\ISRT.dll
C:\Users\PiT\AppData\Local\Temp\{8DBDD731-6493-451D-B744-63777ADFFAE3}\setup.exe
C:\Users\PiT\AppData\Local\Temp\{8DBDD731-6493-451D-B744-63777ADFFAE3}\_isres_0x0404.dll
C:\Users\PiT\AppData\Local\Temp\{8DBDD731-6493-451D-B744-63777ADFFAE3}\_isres_0x0407.dll
C:\Users\PiT\AppData\Local\Temp\{8DBDD731-6493-451D-B744-63777ADFFAE3}\_isres_0x0409.dll
C:\Users\PiT\AppData\Local\Temp\{8DBDD731-6493-451D-B744-63777ADFFAE3}\_isres_0x040a.dll
C:\Users\PiT\AppData\Local\Temp\{8DBDD731-6493-451D-B744-63777ADFFAE3}\_isres_0x040c.dll
C:\Users\PiT\AppData\Local\Temp\{8DBDD731-6493-451D-B744-63777ADFFAE3}\_isres_0x0410.dll
C:\Users\PiT\AppData\Local\Temp\{8DBDD731-6493-451D-B744-63777ADFFAE3}\_isres_0x0411.dll
C:\Users\PiT\AppData\Local\Temp\{8DBDD731-6493-451D-B744-63777ADFFAE3}\_isres_0x0416.dll
C:\Users\PiT\AppData\Local\Temp\{8DBDD731-6493-451D-B744-63777ADFFAE3}\_isuser_0x0404.dll
C:\Users\PiT\AppData\Local\Temp\{8DBDD731-6493-451D-B744-63777ADFFAE3}\_isuser_0x0407.dll
C:\Users\PiT\AppData\Local\Temp\{8DBDD731-6493-451D-B744-63777ADFFAE3}\_isuser_0x0409.dll
C:\Users\PiT\AppData\Local\Temp\{8DBDD731-6493-451D-B744-63777ADFFAE3}\_isuser_0x040a.dll
C:\Users\PiT\AppData\Local\Temp\{8DBDD731-6493-451D-B744-63777ADFFAE3}\_isuser_0x040c.dll
C:\Users\PiT\AppData\Local\Temp\{8DBDD731-6493-451D-B744-63777ADFFAE3}\_isuser_0x0410.dll
C:\Users\PiT\AppData\Local\Temp\{8DBDD731-6493-451D-B744-63777ADFFAE3}\_isuser_0x0411.dll
C:\Users\PiT\AppData\Local\Temp\{8DBDD731-6493-451D-B744-63777ADFFAE3}\_isuser_0x0416.dll
C:\Users\PiT\AppData\Local\Temp\{85AAE7E8-42FD-48DE-A92A-A750E29EC0BC}\{b53018b3-1b31-47a5-ad4f-6eb7086d6008}\vcredist_x64.exe
C:\Users\PiT\AppData\Local\Temp\{85AAE7E8-42FD-48DE-A92A-A750E29EC0BC}\{26ECEF94-14F8-461F-97D6-11DCE98CEDD4}\HTCDriver.exe
C:\Users\PiT\AppData\Local\Temp\{85AAE7E8-42FD-48DE-A92A-A750E29EC0BC}\{06C3E79F-FB43-405B-9BA8-DF726B4C18EC}\AdobeAIRInstaller.exe
C:\Users\PiT\AppData\Local\Temp\{7B7500E8-C22A-45F5-AA51-4CAEAC812502}\ISBEW64.exe
C:\Users\PiT\AppData\Local\Temp\{6952C6AB-6B5B-4502-82EE-551D69383DF6}\ISSetup.dll
C:\Users\PiT\AppData\Local\Temp\{6952C6AB-6B5B-4502-82EE-551D69383DF6}\_Setup.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\GoogleCrashHandler.exe
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\GoogleUpdate.exe
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdate.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\GoopdateBho.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_ar.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_bg.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_bn.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_ca.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_cs.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_da.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_de.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_el.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_en-GB.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_en.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_es-419.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_es.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_et.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_fa.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_fi.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_fil.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_fr.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_gu.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_hi.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_hr.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_hu.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_id.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_is.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_it.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_iw.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_ja.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_kn.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_ko.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_lt.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_lv.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_ml.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_mr.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_ms.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_nl.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_no.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_or.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_pl.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_pt-BR.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_pt-PT.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_ro.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_ru.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_sk.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_sl.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_sr.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_sv.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_ta.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_te.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_th.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_tr.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_uk.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_ur.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_vi.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_zh-CN.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\goopdateres_zh-TW.dll
C:\Users\PiT\AppData\Local\Temp\{68390F33-613E-490A-A62B-E0EAE86C9566}\npGoogleOneClick8.dll
C:\Users\PiT\AppData\Local\Temp\{62D8D20B-ED2B-49F5-864E-50BF75DB1E42}\{673E2CB8-8306-4F99-9DF9-6492C2F57072}\difxapi.dll
C:\Users\PiT\AppData\Local\Temp\{34B01229-410E-4605-89C4-1C1B063E1960}\ISSetup.dll
C:\Users\PiT\AppData\Local\Temp\{34B01229-410E-4605-89C4-1C1B063E1960}\_Setup.dll
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\ISBEW64.exe
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\ISBEWI64.exe
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\ISBEWX64.exe
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\ISRT.dll
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\setup.exe
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\_isres_0x0404.dll
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\_isres_0x0407.dll
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\_isres_0x0409.dll
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\_isres_0x040a.dll
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\_isres_0x040c.dll
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\_isres_0x0410.dll
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\_isres_0x0411.dll
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\_isres_0x0412.dll
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\_isres_0x0416.dll
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\_isuser_0x0404.dll
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\_isuser_0x0407.dll
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\_isuser_0x0409.dll
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\_isuser_0x040a.dll
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\_isuser_0x040c.dll
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\_isuser_0x0410.dll
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\_isuser_0x0411.dll
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\_isuser_0x0412.dll
C:\Users\PiT\AppData\Local\Temp\{27484D77-DD0B-4972-A491-3F846BDBD361}\_isuser_0x0416.dll
C:\Users\PiT\AppData\Local\Temp\{1D6D0300-BBFA-4012-BDC1-9135CE21B566}\ISSetup.dll
C:\Users\PiT\AppData\Local\Temp\{1D6D0300-BBFA-4012-BDC1-9135CE21B566}\_Setup.dll
C:\Users\PiT\AppData\Local\Temp\{1C90A0C8-0CAE-4CF7-B73A-B85A0F623C53}\ISBEW64.exe
C:\Users\PiT\AppData\Local\Temp\{1BDD72E6-6425-45A0-8BEE-2617F107F7E6}\{38ADB9A6-798C-11D6-A855-00105A80791C}\netinst.dll
C:\Users\PiT\AppData\Local\Temp\VSD7F4F.tmp\setup.exe
C:\Users\PiT\AppData\Local\Temp\VSD739C.tmp\setup.exe
C:\Users\PiT\AppData\Local\Temp\VSD4E23.tmp\setup.exe
C:\Users\PiT\AppData\Local\Temp\UTPSDLL\GdiPlus.dll
C:\Users\PiT\AppData\Local\Temp\UTPSDLL\mfc40u.dll
C:\Users\PiT\AppData\Local\Temp\UTPSDLL\mfc71.dll
C:\Users\PiT\AppData\Local\Temp\UTPSDLL\MFC71u.dll
C:\Users\PiT\AppData\Local\Temp\UTPSDLL\msvcp60.dll
C:\Users\PiT\AppData\Local\Temp\UTPSDLL\msvcp71.dll
C:\Users\PiT\AppData\Local\Temp\UTPSDLL\msvcr71.dll
C:\Users\PiT\AppData\Local\Temp\tmp8157\QtraxSetup.exe
C:\Users\PiT\AppData\Local\Temp\Temp1_SopCast-3.5.0.zip\Setup-SopCast-3.5.0-2012-3-2.exe
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version8\TeamViewer.exe
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version8\TeamViewer_.exe
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version8\TeamViewer_Desktop.exe
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version8\TeamViewer_Resource_en.dll
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version8\TeamViewer_Resource_pl.dll
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version8\TeamViewer_Service.exe
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version8\TeamViewer_StaticRes.dll
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version8\tv_w32.dll
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version8\tv_w32.exe
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version8\tv_x64.dll
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version8\tv_x64.exe
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version8\uninstall.exe
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version8\x64\Teamviewer_PrintProcessor.dll
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version8\outlook\TeamViewerMeetingAddIn.dll
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version7\TeamViewer.exe
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version7\TeamViewer_.exe
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version7\TeamViewer_Desktop.exe
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version7\TeamViewer_Resource_en.dll
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version7\TeamViewer_Resource_pl.dll
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version7\TeamViewer_Service.exe
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version7\TeamViewer_StaticRes.dll
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version7\tv_w32.dll
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version7\tv_w32.exe
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version7\tv_x64.dll
C:\Users\PiT\AppData\Local\Temp\TeamViewer\Version7\tv_x64.exe
C:\Users\PiT\AppData\Local\Temp\SymCCISFB1.1.6\SymCCIS.dll
C:\Users\PiT\AppData\Local\Temp\SymCCISFB1.1.6\SymCCISExe.exe
C:\Users\PiT\AppData\Local\Temp\Rar$EXa0.871\64-bit\netscan.exe
C:\Users\PiT\AppData\Local\Temp\Rar$EXa0.871\32-bit\netscan.exe
C:\Users\PiT\AppData\Local\Temp\nss3BCD.tmp\distribution.dll
C:\Users\PiT\AppData\Local\Temp\nss3BCD.tmp\DragonPlugin.dll
C:\Users\PiT\AppData\Local\Temp\nss3BCD.tmp\System.dll
C:\Users\PiT\AppData\Local\Temp\nsn9A12.tmp\distribution.dll
C:\Users\PiT\AppData\Local\Temp\nsn9A12.tmp\DragonPlugin.dll
C:\Users\PiT\AppData\Local\Temp\nsn9A12.tmp\NSIS_SkinCrafter_Plugin.dll
C:\Users\PiT\AppData\Local\Temp\nsn9A12.tmp\SecureDNSPlugin.dll
C:\Users\PiT\AppData\Local\Temp\nsn9A12.tmp\SkinCrafter.dll
C:\Users\PiT\AppData\Local\Temp\nsn9A12.tmp\System.dll
C:\Users\PiT\AppData\Local\Temp\mProjector3175261488\mPlayer.3.1.1k.dll
C:\Users\PiT\AppData\Local\Temp\MozUpdater-8\updater.exe
C:\Users\PiT\AppData\Local\Temp\MozUpdater-7\updater.exe
C:\Users\PiT\AppData\Local\Temp\MozUpdater-6\updater.exe
C:\Users\PiT\AppData\Local\Temp\MozUpdater-5\updater.exe
C:\Users\PiT\AppData\Local\Temp\MozUpdater-4\updater.exe
C:\Users\PiT\AppData\Local\Temp\MozUpdater-3\updater.exe
C:\Users\PiT\AppData\Local\Temp\MozUpdater-2\updater.exe
C:\Users\PiT\AppData\Local\Temp\MozUpdater-1\updater.exe
C:\Users\PiT\AppData\Local\Temp\MozUpdater\updater.exe
C:\Users\PiT\AppData\Local\Temp\isp6242.tmp\Setup.dll
C:\Users\PiT\AppData\Local\Temp\is1890775716\220010_Setup.EXE
C:\Users\PiT\AppData\Local\Temp\is1890775716\2477048_Setup.EXE
C:\Users\PiT\AppData\Local\Temp\is1890775716\2587431_Setup.EXE
C:\Users\PiT\AppData\Local\Temp\is1890775716\273613_Setup.EXE
C:\Users\PiT\AppData\Local\Temp\is1890775716\295594_Setup.EXE
C:\Users\PiT\AppData\Local\Temp\is1890775716\68614222_Setup.EXE
C:\Users\PiT\AppData\Local\Temp\is1890775716\QtraxInstaller.exe
C:\Users\PiT\AppData\Local\Temp\IM_F94C.tmp\ActionEngine.dll
C:\Users\PiT\AppData\Local\Temp\IMInstaller\IncrediMail\sqlite3.dll
C:\Users\PiT\AppData\Local\Temp\fla4F96.tmp\HDIOnAIR.exe
C:\Users\PiT\AppData\Local\Temp\D28B.dir\InstallFlashPlayer.exe
C:\Users\PiT\AppData\Local\Temp\chomikbox.tmp\chomikbox.exe
C:\Users\PiT\AppData\Local\Temp\chomikbox.tmp\chomikbox1conf.exe
C:\Users\PiT\AppData\Local\Temp\chomikbox.tmp\configurator.exe
C:\Users\PiT\AppData\Local\Temp\chomikbox.tmp\crashsender.exe
C:\Users\PiT\AppData\Local\Temp\chomikbox.tmp\installer.exe
C:\Users\PiT\AppData\Local\Temp\chomikbox.tmp\installeru.exe
C:\Users\PiT\AppData\Local\Temp\avg_a09828\avg-secure-search-installer.exe
C:\Users\PiT\AppData\Local\Temp\avg_a09828\ProgFiles\AVG Secure Search\GenericWndApi.dll
C:\Users\PiT\AppData\Local\Temp\avg_a09828\ProgFiles\AVG Secure Search\lip.exe
C:\Users\PiT\AppData\Local\Temp\avg_a09828\ProgFiles\AVG Secure Search\PostInstall.exe
C:\Users\PiT\AppData\Local\Temp\avg_a09828\ProgFiles\AVG Secure Search\ROC_ssl.exe
C:\Users\PiT\AppData\Local\Temp\avg_a09828\ProgFiles\AVG Secure Search\Uninstall.exe
C:\Users\PiT\AppData\Local\Temp\avg_a09828\ProgFiles\AVG Secure Search\vprot.exe
C:\Users\PiT\AppData\Local\Temp\avg_a09828\ProgFiles\AVG Secure Search\13.2.0.3\AVG Secure Search_toolbar.dll
C:\Users\PiT\AppData\Local\Temp\avg_a09828\ConfigFiles\avguidx.dll
C:\Users\PiT\AppData\Local\Temp\avg_a09828\ConfigFiles\MachineIdCreator.exe
C:\Users\PiT\AppData\Local\Temp\avg_a09828\CommonFiles\AVG Secure Search\avgdttbx.dll
C:\Users\PiT\AppData\Local\Temp\avg_a09828\CommonFiles\AVG Secure Search\DriverInstaller.exe
C:\Users\PiT\AppData\Local\Temp\avg_a09828\CommonFiles\AVG Secure Search\DriverInstaller_64.exe
C:\Users\PiT\AppData\Local\Temp\avg_a09828\CommonFiles\AVG Secure Search\npsitesafety.dll
C:\Users\PiT\AppData\Local\Temp\avg_a09828\CommonFiles\AVG Secure Search\ScriptHelper.exe
C:\Users\PiT\AppData\Local\Temp\avg_a09828\CommonFiles\AVG Secure Search\SiteSafety.dll
C:\Users\PiT\AppData\Local\Temp\avg_a09828\CommonFiles\AVG Secure Search\ToolbarUpdater.exe
C:\Users\PiT\AppData\Local\Temp\avg_a09828\CommonFiles\AVG Secure Search\ViProtocol.dll
C:\Users\PiT\AppData\Local\Temp\A016.dir\InstallFlashPlayer.exe
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\GoogleEarth.exe
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemyext.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\earthps.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\geplugin.exe
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\ge_expat.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\googleearth_free.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\icudt.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGAttrs.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGCore.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGExportCommon.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGGfx.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGMath.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGOpt.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGSg.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\IGUtils.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\msvcp100.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\msvcr100.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\npgeplugin.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\plugin_ax.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\QtCore4.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\QtGui4.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\QtNetwork4.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\QtWebKit4.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\imageformats\qgif4.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\imageformats\qjpeg4.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\optimizations\IGOptExtension.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\D3DCompiler_43.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\d3dx9_43.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\IGAttrs.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\IGGfx.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\IGSg.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\libEGL.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogles20\libGLESv2.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogl\IGAttrs.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogl\IGGfx.dll
C:\Users\PiT\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\alchemy\ogl\IGSg.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-22 13:24

==================== End Of Log ============================