OTL logfile created on: 2013-11-22 23:43:46 - Run 3
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Ja\Documents\Antywirusy
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 0,77 Gb Available Physical Memory | 38,70% Memory free
4,24 Gb Paging File | 2,86 Gb Available in Paging File | 67,40% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 232,88 Gb Total Space | 75,82 Gb Free Space | 32,56% Space Free | Partition Type: NTFS
Drive J: | 7,40 Gb Total Space | 7,40 Gb Free Space | 99,98% Space Free | Partition Type: FAT32
Drive M: | 931,51 Gb Total Space | 249,24 Gb Free Space | 26,76% Space Free | Partition Type: NTFS
 
Computer Name: JA-PC | User Name: Ja | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2013-11-16 13:32:05 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2013-07-20 16:48:53 | 000,024,064 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Time\TimeServer.exe
PRC - [2013-07-20 16:48:53 | 000,010,752 | ---- | M] (Microsoft) -- C:\ProgramData\Microsoft\Windows\Time\Time-svc.exe
PRC - [2013-07-20 16:48:53 | 000,010,240 | ---- | M] (Microsoft) -- C:\ProgramData\Microsoft\Windows\Time\WindowsTime.exe
PRC - [2013-05-10 08:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013-05-03 17:56:11 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Ja\Documents\Antywirusy\OTL.exe
PRC - [2012-06-11 18:19:36 | 000,468,992 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
PRC - [2012-06-11 18:19:02 | 000,217,600 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
PRC - [2011-04-08 06:48:36 | 000,095,232 | ---- | M] () -- C:\Program Files\Unlocker\Unlocker.exe
PRC - [2009-04-11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009-04-11 07:27:28 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe
PRC - [2009-04-11 07:27:20 | 000,088,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
PRC - [2008-01-21 03:24:56 | 000,485,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mspaint.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2013-11-16 13:32:04 | 003,363,952 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2013-11-12 09:14:05 | 012,434,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\73d9bc894522543b561a0342dac87c06\System.Windows.Forms.ni.dll
MOD - [2013-08-15 10:42:17 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\c0df7e124d8d5e2821fd7d3921d404f7\System.Drawing.ni.dll
MOD - [2013-08-15 10:40:07 | 007,977,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\d7153acb7b6ccb5a6a886d6f0ab732b1\System.ni.dll
MOD - [2013-07-20 16:48:53 | 002,382,083 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Time\numpy.linalg.lapack_lite.pyd
MOD - [2013-07-20 16:48:53 | 002,222,455 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Time\numpy.core._dotblas.pyd
MOD - [2013-07-20 16:48:53 | 001,311,275 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Time\numpy.core.multiarray.pyd
MOD - [2013-07-20 16:48:53 | 000,577,536 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Time\pyopencl._cl.pyd
MOD - [2013-07-20 16:48:53 | 000,515,437 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Time\numpy.random.mtrand.pyd
MOD - [2013-07-20 16:48:53 | 000,410,432 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Time\numpy.core.umath.pyd
MOD - [2013-07-20 16:48:53 | 000,174,793 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Time\numpy.core.scalarmath.pyd
MOD - [2013-07-20 16:48:53 | 000,046,383 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Time\numpy.fft.fftpack_lite.pyd
MOD - [2013-07-20 16:48:53 | 000,041,019 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Time\numpy.lib._compiled_base.pyd
MOD - [2013-07-20 16:48:53 | 000,024,064 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Time\TimeServer.exe
MOD - [2013-07-20 16:48:53 | 000,009,728 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Time\select.pyd
MOD - [2013-07-20 16:48:52 | 000,285,184 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Time\_hashlib.pyd
MOD - [2013-07-20 16:48:52 | 000,219,648 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Time\boost_python-vc90-mt-1_48.dll
MOD - [2013-07-20 16:48:52 | 000,074,240 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Time\_ctypes.pyd
MOD - [2013-07-20 16:48:52 | 000,040,960 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Time\_socket.pyd
MOD - [2013-07-11 15:27:00 | 011,497,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\6a938df70a8b7996a3890b4f34c83906\mscorlib.ni.dll
MOD - [2013-07-11 14:37:36 | 014,416,896 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\cf58670896c5313b9b52f026f4455a5d\mscorlib.ni.dll
MOD - [2013-03-25 09:57:28 | 000,153,088 | ---- | M] () -- C:\Windows\System32\WSCM32.dll
MOD - [2012-06-11 17:24:32 | 000,037,376 | ---- | M] () -- C:\Windows\System32\atitmpxx.dll
MOD - [2011-04-08 06:48:36 | 000,095,232 | ---- | M] () -- C:\Program Files\Unlocker\Unlocker.exe
MOD - [2010-07-04 22:32:38 | 000,010,752 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerCOM.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2013-10-10 20:56:29 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013-08-14 14:19:22 | 000,039,056 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe -- (RealNetworks Downloader Resolver Service)
SRV - [2013-07-20 16:48:53 | 000,010,752 | ---- | M] (Microsoft) [Auto | Running] -- C:\ProgramData\Microsoft\Windows\Time\Time-svc.exe -- (Time)
SRV - [2013-05-10 08:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012-07-13 12:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012-06-11 18:19:02 | 000,217,600 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2008-09-30 11:48:28 | 000,935,208 | ---- | M] (Nero AG) [Disabled | Stopped] -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2008-01-21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - [2013-04-24 14:01:17 | 000,466,008 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2012-12-24 19:20:50 | 000,315,480 | ---- | M] (EldoS Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\CBFS\cbfs4.sys -- (cbfs4-0)
DRV - [2012-04-11 09:45:08 | 000,595,200 | ---- | M] (Sigma Designs, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\qpavstrm.sys -- (qpavstrm)
DRV - [2012-03-02 16:03:00 | 000,025,216 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbmodem.sys -- (USBModem)
DRV - [2012-03-02 16:03:00 | 000,020,864 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbdiag.sys -- (UsbDiag)
DRV - [2012-03-02 16:03:00 | 000,013,056 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\lgusbbus.sys -- (usbbus)
DRV - [2011-05-25 05:25:48 | 007,800,832 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
DRV - [2011-05-25 03:25:20 | 000,245,760 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
DRV - [2011-03-30 19:46:24 | 000,097,808 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AtihdLH3.sys -- (AtiHDAudioService)
DRV - [2010-07-04 20:51:26 | 000,004,096 | ---- | M] () [Kernel | Unavailable | Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5)
DRV - [2010-05-12 03:23:04 | 000,016,896 | ---- | M] (Danish Wireless Design A/S) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\FlashUSB.sys -- (FlashUSB)
DRV - [2009-10-21 04:27:42 | 001,102,848 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV - [2009-09-02 04:09:24 | 000,176,128 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2009-08-04 09:28:18 | 000,011,296 | ---- | M] () [Kernel | System | Running] -- C:\Windows\System32\drivers\AsIO.sys -- (AsIO)
DRV - [2009-07-06 09:48:02 | 000,011,448 | ---- | M] () [Kernel | System | Running] -- C:\Windows\System32\drivers\AsUpIO.sys -- (AsUpIO)
DRV - [2007-08-11 16:06:56 | 000,071,539 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\StMp3Rec.sys -- (StMp3Rec)
DRV - [2006-10-18 06:44:48 | 000,007,680 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ASACPI.sys -- (MTsensor)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-21-70149214-1339082029-3386996294-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://arkowcy.pl/
IE - HKU\S-1-5-21-70149214-1339082029-3386996294-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-70149214-1339082029-3386996294-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-70149214-1339082029-3386996294-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.startup.homepage: "http://www.arkowcy.pl/"
FF - prefs.js..extensions.enabledAddons: %7Bbb6bc1bb-f824-4702-90cd-35e2fb24f25d%7D:1.5.2
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:25.0.1
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Web Player Plug-In,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.3.51: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.3.51: C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-10-12 23:57:57 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-10-12 23:57:57 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013-11-16 13:32:01 | 000,000,000 | ---D | M]
 
[2013-02-10 20:30:06 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ja\AppData\Roaming\mozilla\Extensions
[2013-11-06 04:25:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Ja\AppData\Roaming\mozilla\Firefox\Profiles\vi5gcxb9.default-1367527049380\extensions
[2013-11-06 04:25:13 | 000,000,000 | ---D | M] (Cookies Manager+) -- C:\Users\Ja\AppData\Roaming\mozilla\Firefox\Profiles\vi5gcxb9.default-1367527049380\extensions\{bb6bc1bb-f824-4702-90cd-35e2fb24f25d}
[2013-05-30 08:38:28 | 000,010,043 | ---- | M] () (No name found) -- C:\Users\Ja\AppData\Roaming\mozilla\firefox\profiles\vi5gcxb9.default-1367527049380\extensions\IplextoALL@ALLPlayer.org.xpi
[2013-11-16 13:32:00 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2013-11-16 13:32:06 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013-10-12 23:57:23 | 000,124,504 | ---- | M] (RealPlayer) -- C:\Program Files\mozilla firefox\plugins\nprpplugin.dll
 
O1 HOSTS File: ([2012-09-25 19:22:33 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKU\S-1-5-21-70149214-1339082029-3386996294-1000..\Run: [ChomikBox] C:\Program Files\ChomikBox\chomikbox.exe ( )
O4 - HKU\S-1-5-21-70149214-1339082029-3386996294-1000..\Run: [Screen Saver Pro 3.1] C:\Users\Ja\AppData\Roaming\ScreenSaverPro.scr ()
O4 - HKU\S-1-5-21-70149214-1339082029-3386996294-1000..\Run: [uTorrent] C:\Users\Ja\Desktop\Programy\Programy\utorrent.exe (BitTorrent Inc.)
O4 - HKU\S-1-5-21-70149214-1339082029-3386996294-1000..\Run: [Wntktg] C:\Users\Ja\AppData\Roaming\Microsoft\Wntktg.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: CDRAutoRun = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\S-1-5-21-70149214-1339082029-3386996294-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKU\S-1-5-21-70149214-1339082029-3386996294-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: CDRAutoRun = 0
O15 - HKU\.DEFAULT\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: clonewarsadventures.com ([]* in )
O15 - HKU\S-1-5-19\..Trusted Domains: freerealms.com ([]* in )
O15 - HKU\S-1-5-19\..Trusted Domains: soe.com ([]* in )
O15 - HKU\S-1-5-19\..Trusted Domains: sony.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: clonewarsadventures.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: freerealms.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: soe.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: sony.com ([]* in )
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 217.172.224.160 89.231.1.206
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A1F89EFB-5321-40CD-844D-3F544AD7575C}: DhcpNameServer = 217.172.224.160 89.231.1.206
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\Userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: TaskMan - (C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-11609\fjpdqz.exe) -  File not found
O24 - Desktop WallPaper: C:\Users\Ja\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\Ja\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [1980-03-28 06:28:48 | 000,000,225 | -HS- | M] () - J:\AUTORUN.INF -- [ FAT32 ]
O32 - AutoRun File - [1980-03-28 06:28:48 | 000,000,225 | -HS- | M] () - J:\AUTORUN.INF -- [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk /p \??\L:)
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2013-11-22 22:16:25 | 000,000,000 | ---D | C] -- C:\Users\Ja\AppData\Local\VirtualStore
[2013-11-22 22:12:01 | 000,000,000 | ---D | C] -- C:\_OTL
[2013-11-22 19:55:58 | 000,000,000 | ---D | C] -- C:\UsbFix
[2013-11-19 20:27:29 | 000,000,000 | ---D | C] -- C:\8426133ca3ddf73974f4b73c0f
[2013-11-16 13:32:00 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013-11-13 02:09:51 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2013-11-13 02:09:50 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2013-11-13 02:09:50 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2013-11-13 02:09:50 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2013-11-13 02:09:49 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2013-11-13 02:09:48 | 001,806,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2013-11-13 02:09:48 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2013-11-13 02:09:47 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2013-11-13 02:03:14 | 000,596,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FWPUCLNT.DLL
[2013-11-12 07:39:08 | 002,050,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2013-11-12 07:39:03 | 000,006,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbd.sys
[2013-11-12 07:38:57 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll
[2013-11-12 07:38:51 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
[2013-11-12 07:35:20 | 001,069,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2013-11-12 07:35:19 | 001,172,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2013-11-12 07:35:19 | 000,486,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2013-11-12 07:35:18 | 001,029,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
[2013-11-12 07:35:18 | 000,683,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2013-11-12 07:35:18 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2013-11-12 07:35:18 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
[2013-11-12 07:35:18 | 000,160,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2013-11-12 07:35:12 | 000,293,376 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2013-11-12 07:35:12 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2013-11-12 07:34:13 | 000,025,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidparse.sys
[2013-11-12 03:14:18 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2013-11-12 03:14:16 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2013-11-12 03:14:15 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2013-11-12 03:14:15 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2013-11-12 03:14:15 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2013-11-12 03:14:15 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2013-11-12 03:14:10 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2013-11-12 03:14:10 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2013-11-12 03:14:10 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2013-11-12 03:14:08 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2013-11-12 03:14:08 | 000,434,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2013-11-12 03:14:08 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2013-11-12 03:14:08 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2013-11-12 03:14:08 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2013-11-12 03:14:04 | 000,353,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2013-11-12 03:13:56 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2013-11-12 03:13:56 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2013-11-12 03:13:55 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2013-11-12 03:13:55 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2013-11-12 03:13:51 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2013-11-12 03:13:51 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2013-11-12 03:13:51 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2013-11-12 03:13:50 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2013-11-12 03:13:49 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2013-11-12 03:13:49 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2013-11-12 03:13:47 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2013-11-12 03:13:47 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2013-11-12 03:13:47 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2013-11-12 03:13:46 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2013-11-12 01:31:49 | 000,000,000 | ---D | C] -- C:\Program Files\Internet Explorer
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2013-11-22 23:39:58 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013-11-22 23:39:50 | 000,004,192 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013-11-22 23:39:50 | 000,004,192 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013-11-22 23:39:45 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013-11-22 23:34:27 | 000,001,036 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013-11-22 22:56:14 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013-11-22 22:05:55 | 000,711,974 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2013-11-22 22:05:55 | 000,631,942 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013-11-22 22:05:55 | 000,149,960 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2013-11-22 22:05:55 | 000,118,568 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013-11-22 20:49:42 | 336,208,205 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2013-11-19 22:38:49 | 000,000,179 | ---- | M] () -- C:\Windows\IFOLDER.INI
[2013-11-19 22:38:49 | 000,000,109 | ---- | M] () -- C:\Windows\TSNV_I2C.INI
[2013-11-19 20:42:07 | 000,000,031 | ---- | M] () -- C:\Windows\CYVH8PL.INI
[2013-11-12 09:09:25 | 000,272,048 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013-11-12 03:14:45 | 000,008,798 | ---- | M] () -- C:\Windows\System32\icrav03.rat
[2013-11-12 03:14:45 | 000,001,988 | ---- | M] () -- C:\Windows\System32\ticrf.rat
[2013-11-12 03:14:18 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2013-11-12 03:14:16 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2013-11-12 03:14:15 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2013-11-12 03:14:15 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2013-11-12 03:14:15 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2013-11-12 03:14:15 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2013-11-12 03:14:10 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2013-11-12 03:14:10 | 000,353,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2013-11-12 03:14:10 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2013-11-12 03:14:08 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2013-11-12 03:14:08 | 000,434,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2013-11-12 03:14:08 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2013-11-12 03:14:08 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2013-11-12 03:14:08 | 000,072,822 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2013-11-12 03:14:08 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2013-11-12 03:14:04 | 000,353,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2013-11-12 03:13:56 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2013-11-12 03:13:56 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2013-11-12 03:13:55 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2013-11-12 03:13:55 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2013-11-12 03:13:51 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2013-11-12 03:13:51 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2013-11-12 03:13:51 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2013-11-12 03:13:50 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2013-11-12 03:13:49 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2013-11-12 03:13:49 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2013-11-12 03:13:47 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2013-11-12 03:13:47 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2013-11-12 03:13:47 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2013-11-12 03:13:46 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2013-11-11 05:50:18 | 000,230,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2013-11-08 23:16:03 | 000,000,000 | ---- | M] () -- C:\END
[2013-11-08 05:26:21 | 000,029,794 | ---- | M] () -- C:\Users\Ja\.recently-used.xbel
[2013-11-06 17:27:02 | 000,205,312 | -HS- | M] () -- C:\Users\Ja\AppData\Roaming\temp.bin
[2013-11-06 17:27:02 | 000,205,312 | -HS- | M] () -- C:\Users\Ja\AppData\Roaming\ScreenSaverPro.scr
[2013-11-04 10:49:48 | 000,064,000 | ---- | M] () -- C:\Users\Ja\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013-11-03 14:39:27 | 000,003,656 | -HS- | M] () -- C:\Windows\System32\Spis treści programu OneNote.onetoc2
[2013-10-31 03:13:25 | 000,014,679 | -HS- | M] () -- C:\Users\Ja\Documents\Folder.jpg
[2013-10-31 03:13:25 | 000,014,679 | -HS- | M] () -- C:\Users\Ja\Documents\AlbumArt_{9F5D4EBC-E1A5-44DD-946F-5BA650B80616}_Large.jpg
[2013-10-31 03:13:21 | 000,003,492 | -HS- | M] () -- C:\Users\Ja\Documents\AlbumArtSmall.jpg
[2013-10-31 03:13:21 | 000,003,492 | -HS- | M] () -- C:\Users\Ja\Documents\AlbumArt_{9F5D4EBC-E1A5-44DD-946F-5BA650B80616}_Small.jpg
[2013-10-31 03:09:05 | 000,009,417 | -HS- | M] () -- C:\Users\Ja\Documents\AlbumArt_{91096480-F577-4747-B08E-C6FA983BC09A}_Large.jpg
[2013-10-31 03:09:04 | 000,002,302 | -HS- | M] () -- C:\Users\Ja\Documents\AlbumArt_{91096480-F577-4747-B08E-C6FA983BC09A}_Small.jpg
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2013-11-22 21:49:02 | 000,205,312 | -HS- | C] () -- C:\Users\Ja\AppData\Roaming\temp.bin
[2013-11-22 21:49:02 | 000,205,312 | -HS- | C] () -- C:\Users\Ja\AppData\Roaming\ScreenSaverPro.scr
[2013-11-22 20:49:42 | 336,208,205 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2013-11-13 02:03:14 | 000,218,228 | ---- | C] () -- C:\Windows\System32\WFP.TMF
[2013-11-12 03:14:08 | 000,072,822 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2013-11-09 02:45:56 | 000,217,176 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2013-11-08 23:16:03 | 000,000,000 | ---- | C] () -- C:\END
[2013-11-08 05:26:21 | 000,029,794 | ---- | C] () -- C:\Users\Ja\.recently-used.xbel
[2013-11-03 14:39:26 | 000,003,656 | -HS- | C] () -- C:\Windows\System32\Spis treści programu OneNote.onetoc2
[2013-10-31 03:13:26 | 000,014,679 | -HS- | C] () -- C:\Users\Ja\Documents\AlbumArt_{9F5D4EBC-E1A5-44DD-946F-5BA650B80616}_Large.jpg
[2013-10-31 03:13:26 | 000,003,492 | -HS- | C] () -- C:\Users\Ja\Documents\AlbumArt_{9F5D4EBC-E1A5-44DD-946F-5BA650B80616}_Small.jpg
[2013-10-31 03:09:06 | 000,014,679 | -HS- | C] () -- C:\Users\Ja\Documents\Folder.jpg
[2013-10-31 03:09:06 | 000,009,417 | -HS- | C] () -- C:\Users\Ja\Documents\AlbumArt_{91096480-F577-4747-B08E-C6FA983BC09A}_Large.jpg
[2013-10-31 03:09:06 | 000,003,492 | -HS- | C] () -- C:\Users\Ja\Documents\AlbumArtSmall.jpg
[2013-10-31 03:09:06 | 000,002,302 | -HS- | C] () -- C:\Users\Ja\Documents\AlbumArt_{91096480-F577-4747-B08E-C6FA983BC09A}_Small.jpg
[2013-09-16 22:45:47 | 000,000,179 | ---- | C] () -- C:\Windows\IFOLDER.INI
[2013-09-06 14:03:29 | 000,039,302 | ---- | C] () -- C:\Windows\TSCTVMSG.INI
[2013-08-30 03:25:59 | 000,112,640 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2013-08-30 01:50:38 | 000,153,088 | ---- | C] () -- C:\Windows\System32\WSCM32.dll
[2013-08-19 07:04:27 | 000,216,064 | ---- | C] ( ) -- C:\Windows\System32\lagarith.dll
[2013-08-19 07:04:26 | 000,650,752 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2013-08-19 07:04:26 | 000,243,200 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2013-04-10 19:06:58 | 000,000,118 | ---- | C] () -- C:\Windows\System32\MRT.INI
[2013-03-07 09:48:32 | 000,016,384 | ---- | C] () -- C:\Windows\Launcher.exe
[2013-03-06 12:05:34 | 000,022,323 | ---- | C] () -- C:\Windows\TSCTVFMO.INI
[2013-03-06 12:04:36 | 000,000,025 | ---- | C] () -- C:\Windows\TSCFM.INI
[2013-03-06 11:22:52 | 000,000,109 | ---- | C] () -- C:\Windows\TSNV_I2C.INI
[2013-03-06 11:16:52 | 000,000,031 | ---- | C] () -- C:\Windows\CYVH8PL.INI
[2013-03-06 10:57:01 | 000,441,080 | ---- | C] () -- C:\Windows\System32\drivers\qpvidfwusb.bin
[2013-03-06 10:57:01 | 000,351,496 | ---- | C] () -- C:\Windows\System32\drivers\qpaudfw.bin
[2013-01-16 13:59:15 | 000,053,248 | ---- | C] () -- C:\Windows\System32\CommonDL.dll
[2013-01-16 13:59:15 | 000,002,413 | ---- | C] () -- C:\Windows\System32\lgAxconfig.ini
[2012-12-29 17:24:27 | 000,000,147 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2012-11-26 09:11:19 | 000,000,359 | ---- | C] () -- C:\Windows\dvdtoaviconverter.ini
[2012-11-26 08:43:34 | 000,000,001 | ---- | C] () -- C:\Windows\System32\SysDVDtoavi.dat
[2012-11-25 20:55:58 | 000,000,266 | RHS- | C] () -- C:\Users\Ja\ntuser.pol
[2012-11-02 00:47:30 | 000,004,416 | ---- | C] () -- C:\Windows\System32\HideMyIpSRV.ini
[2012-11-02 00:47:30 | 000,002,664 | ---- | C] () -- C:\Windows\System32\HideMyIpSRVOff.ini
[2012-06-11 12:50:42 | 000,159,232 | ---- | C] () -- C:\Windows\System32\clinfo.exe
[2012-05-29 12:18:16 | 000,000,004 | ---- | C] () -- C:\Windows\System32\proc-1037709799.bin
[2012-05-28 16:50:22 | 000,011,448 | ---- | C] () -- C:\Windows\System32\drivers\AsUpIO.sys
[2012-05-28 16:50:21 | 000,024,576 | ---- | C] () -- C:\Windows\System32\AsIO.dll
[2012-05-28 16:50:21 | 000,011,296 | ---- | C] () -- C:\Windows\System32\drivers\AsIO.sys
[2012-05-17 20:15:25 | 000,000,552 | ---- | C] () -- C:\Users\Ja\AppData\Local\d3d8caps.dat
[2012-05-12 01:08:42 | 000,064,000 | ---- | C] () -- C:\Users\Ja\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-04-12 20:30:10 | 000,637,743 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2012-02-16 15:56:28 | 000,000,025 | ---- | C] () -- C:\Windows\System32\Option.ini
[2012-02-14 09:08:22 | 000,000,036 | ---- | C] () -- C:\Windows\DTLite.INI
[2012-01-07 13:35:05 | 000,000,000 | ---- | C] () -- C:\Users\Ja\AppData\Local\{81EC0003-839F-42E9-BE19-B68593F57BEE}
[2011-07-25 15:26:53 | 000,002,708 | ---- | C] () -- C:\Users\Ja\AppData\Local\d3d9caps.dat
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2006-11-02 13:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012-06-08 18:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009-04-11 07:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009-04-11 07:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2011-09-07 10:51:05 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\AnvSoft
[2013-07-10 05:13:30 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\AVI ReComp
[2013-05-20 23:23:57 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\CAE_Report_Generator
[2012-04-30 14:49:59 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\GanymedeNet
[2013-11-08 05:26:21 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\gtk-2.0
[2013-04-15 14:27:35 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\ipla
[2011-12-28 01:21:18 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\Philips Device Manager
[2011-07-27 15:29:33 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\RDRM
[2012-05-05 17:43:46 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\Sony Online Entertainment
[2013-09-29 12:41:53 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\TS3Client
[2013-11-22 23:40:47 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\uTorrent
[2013-08-30 01:52:14 | 000,000,000 | ---D | M] -- C:\Users\Ja\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 95 bytes -> C:\ProgramData\TEMP:538DC028
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:373E1720

< End of report >