OTL logfile created on: 2014-02-10 21:08:40 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Documents and Settings\Ja\Pulpit\CZYSZCZENIE_KOMPA
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,75 Gb Total Physical Memory | 2,18 Gb Available Physical Memory | 79,15% Memory free
4,09 Gb Paging File | 3,51 Gb Available in Paging File | 85,82% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 20,00 Gb Total Space | 4,36 Gb Free Space | 21,79% Space Free | Partition Type: NTFS
Drive D: | 31,42 Gb Total Space | 10,05 Gb Free Space | 32,00% Space Free | Partition Type: FAT32
Drive E: | 23,08 Gb Total Space | 15,74 Gb Free Space | 68,20% Space Free | Partition Type: FAT32
 
Computer Name: JA-04A81E735F20 | User Name: Ja | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2014-02-10 20:13:11 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Ja\Pulpit\CZYSZCZENIE_KOMPA\OTL.exe
PRC - [2014-02-05 16:05:42 | 000,080,160 | ---- | M] () -- C:\Program Files\SecretSauce\updateSecretSauce.exe
PRC - [2014-02-05 15:34:41 | 000,080,160 | ---- | M] () -- C:\Program Files\SecretSauce\bin\utilSecretSauce.exe
PRC - [2014-02-04 14:56:50 | 001,677,648 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
PRC - [2014-02-04 10:37:28 | 000,375,056 | ---- | M] (LogMeIn, Inc.) -- C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe
PRC - [2013-12-28 15:15:13 | 000,499,856 | ---- | M] (Cherished Technololgy LIMITED) -- C:\Documents and Settings\All Users\Dane aplikacji\WPM\wprotectmanager.exe
PRC - [2013-10-18 15:42:35 | 009,545,704 | ---- | M] (TeamSpeak Systems GmbH) -- C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
PRC - [2013-08-07 10:42:31 | 004,466,016 | ---- | M] (TeamViewer GmbH) -- c:\Documents and Settings\Ja\Ustawienia lokalne\Temp\TeamViewer\Version8\TeamViewer_Desktop.exe
PRC - [2013-08-07 10:42:29 | 011,737,952 | ---- | M] (TeamViewer GmbH) -- C:\Documents and Settings\Ja\Ustawienia lokalne\Temp\TeamViewer\Version8\TeamViewer.exe
PRC - [2013-08-07 10:28:08 | 000,195,936 | ---- | M] (TeamViewer GmbH) -- C:\Documents and Settings\Ja\Ustawienia lokalne\Temp\TeamViewer\Version8\tv_w32.exe
PRC - [2013-05-09 09:58:30 | 004,858,968 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2013-05-09 09:58:30 | 000,046,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2012-07-23 10:59:04 | 017,432,576 | ---- | M] (GIGABYTE Technology Co.,Ltd.) -- C:\Program Files\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe
PRC - [2010-01-21 23:47:36 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2001-10-26 16:29:52 | 000,024,064 | ---- | M] (Creative Technology Ltd.) -- C:\WINDOWS\system32\devldr32.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2014-02-10 09:38:17 | 002,264,576 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\14021000\algo.dll
MOD - [2014-02-05 16:05:42 | 000,080,160 | ---- | M] () -- C:\Program Files\SecretSauce\updateSecretSauce.exe
MOD - [2014-02-05 15:34:41 | 000,080,160 | ---- | M] () -- C:\Program Files\SecretSauce\bin\utilSecretSauce.exe
MOD - [2014-01-17 22:31:28 | 002,048,000 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.dll
MOD - [2014-01-17 22:31:27 | 003,149,824 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
MOD - [2014-01-17 22:31:26 | 000,425,984 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll
MOD - [2014-01-17 22:31:21 | 000,303,104 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
MOD - [2014-01-17 22:31:16 | 000,114,688 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
MOD - [2013-10-18 15:42:34 | 000,555,496 | ---- | M] () -- C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
MOD - [2013-10-18 15:42:34 | 000,431,080 | ---- | M] () -- C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
MOD - [2013-10-18 15:42:34 | 000,230,376 | ---- | M] () -- C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win32.dll
MOD - [2013-05-14 17:06:34 | 000,425,984 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_pl_b77a5c561934e089\System.Windows.Forms.resources.dll
MOD - [2013-05-14 17:06:33 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_pl_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll
MOD - [2013-05-14 17:06:31 | 000,311,296 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll
MOD - [2013-04-13 19:05:06 | 011,791,360 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\50ea744ffc3cb7f09b027fd6c5c93b2b\System.Web.ni.dll
MOD - [2013-04-13 19:04:34 | 000,212,992 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\a9e71dda6389403be4db7b567592e3b8\System.ServiceProcess.ni.dll
MOD - [2013-04-13 19:04:12 | 000,997,888 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Management\894d87c08a9a5b5923e7104055a616d2\System.Management.ni.dll
MOD - [2013-04-13 19:01:10 | 000,970,752 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\cb4cb21d14767292e079366a5d3d76cd\System.Configuration.ni.dll
MOD - [2013-04-13 19:00:55 | 000,025,600 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\c2af7cfbb47c077029a2645930b4eeac\Accessibility.ni.dll
MOD - [2013-04-12 20:01:51 | 005,449,728 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\36f3953f24d4f0b767bf172331ad6f3e\System.Xml.ni.dll
MOD - [2013-04-12 20:01:31 | 012,428,800 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\9a254c455892c02355ab0ab0f0727c5b\System.Windows.Forms.ni.dll
MOD - [2013-04-12 20:00:38 | 001,587,200 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\6978f2e90f13bc720d57fa6895c911e2\System.Drawing.ni.dll
MOD - [2013-04-12 19:57:37 | 007,867,392 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\aa7926460a336408c8041330ad90929d\System.ni.dll
MOD - [2013-04-12 19:57:04 | 011,485,184 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\9adb89fa22fd5b4ce433b5aca7fb1b07\mscorlib.ni.dll
MOD - [2012-07-30 15:13:00 | 000,195,584 | ---- | M] () -- C:\Program Files\TeamSpeak 3 Client\imageformats\_old_qjpeg4.dll
MOD - [2012-07-30 15:13:00 | 000,025,600 | ---- | M] () -- C:\Program Files\TeamSpeak 3 Client\imageformats\_old_qgif4.dll
MOD - [2012-04-05 21:53:26 | 000,270,336 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
MOD - [2010-03-16 12:22:12 | 000,014,848 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\AxInterop.WBOCXLib.dll
MOD - [2010-01-21 23:47:36 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
MOD - [2005-10-07 15:05:32 | 000,125,440 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2014-02-06 21:46:55 | 000,146,920 | ---- | M] (SaveSense) [On_Demand | Stopped] -- C:\Program Files\SaveSenseLive\Update\SaveSenseLive.exe -- (savesenselivem)
SRV - [2014-02-06 21:46:55 | 000,146,920 | ---- | M] (SaveSense) [Auto | Stopped] -- C:\Program Files\SaveSenseLive\Update\SaveSenseLive.exe -- (savesenselive)
SRV - [2014-02-05 16:05:42 | 000,080,160 | ---- | M] () [Auto | Running] -- C:\Program Files\SecretSauce\updateSecretSauce.exe -- (Update SecretSauce)
SRV - [2014-02-05 15:34:41 | 000,080,160 | ---- | M] () [Auto | Running] -- C:\Program Files\SecretSauce\bin\utilSecretSauce.exe -- (Util SecretSauce)
SRV - [2014-02-04 14:56:50 | 001,677,648 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2014-02-04 10:37:28 | 000,375,056 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2013-12-28 15:15:13 | 000,499,856 | ---- | M] (Cherished Technololgy LIMITED) [Auto | Running] -- C:\Documents and Settings\All Users\Dane aplikacji\WPM\wprotectmanager.exe -- (Wpm)
SRV - [2013-11-05 20:51:24 | 004,600,264 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\WINDOWS\system32\GameMon.des -- (npggsvc)
SRV - [2013-10-30 20:25:56 | 000,566,696 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013-09-02 18:45:41 | 000,182,184 | ---- | M] (Oracle Corporation) [Disabled | Stopped] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2013-05-09 09:58:30 | 000,046,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2012-09-23 15:28:00 | 001,258,856 | ---- | M] (NVIDIA Corporation) [Disabled | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\xhunter1.sys -- (xhunter1)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\vtany.sys -- (vtany)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\EagleXNt.sys -- (EagleXNt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2014-01-17 09:16:10 | 000,055,360 | ---- | M] (NetFilterSDK.com) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tnetfilter2.sys -- (tnetfilter2)
DRV - [2013-08-30 12:20:09 | 000,022,560 | ---- | M] (REALiX(tm)) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\HWiNFO32.SYS -- (HWiNFO32)
DRV - [2013-08-30 12:15:43 | 000,770,344 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2013-08-30 12:15:43 | 000,369,584 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2013-08-30 12:15:43 | 000,175,176 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2013-07-23 14:27:26 | 000,243,128 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2013-05-09 09:59:10 | 000,056,080 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2013-05-09 09:59:10 | 000,049,376 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2013-05-09 09:59:09 | 000,066,336 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2013-05-09 09:59:09 | 000,049,760 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (AswRdr)
DRV - [2013-05-09 09:59:08 | 000,029,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2013-01-23 15:07:38 | 000,018,304 | ---- | M] (GiliSoft International LLC.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\GiliDisc.sys -- (GiliDisc)
DRV - [2012-04-06 06:16:18 | 007,746,048 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2012-02-23 13:31:22 | 000,099,856 | R--- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AtihdXP3.sys -- (AtiHDAudioService)
DRV - [2010-02-04 10:09:00 | 000,014,504 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv.sys -- (GPCIDrv)
DRV - [2010-01-21 23:47:36 | 000,215,856 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\Si3132r5.sys -- (Si3132r5)
DRV - [2010-01-21 23:47:36 | 000,212,520 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\Si3531.sys -- (Si3531)
DRV - [2010-01-21 23:47:36 | 000,195,072 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Stopped] -- C:\WINDOWS\System32\drivers\Si3114r5.sys -- (Si3114r5)
DRV - [2010-01-21 23:47:36 | 000,074,672 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\si3132.sys -- (Si3132)
DRV - [2010-01-21 23:47:36 | 000,069,248 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\si3124.sys -- (Si3124)
DRV - [2010-01-21 23:47:36 | 000,062,336 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\si3112.sys -- (Si3112)
DRV - [2009-03-25 14:29:52 | 000,130,432 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2009-03-18 16:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2008-04-13 23:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2008-04-13 22:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139)
DRV - [2007-02-27 15:31:10 | 000,171,008 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctusfsyn.sys -- (CTUSFSYN)
DRV - [2006-08-11 14:45:24 | 000,116,224 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv)
DRV - [2006-08-11 14:45:18 | 000,143,872 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctsfm2k.sys -- (ctsfm2k)
DRV - [2004-04-30 17:52:56 | 001,382,912 | ---- | M] (C-Media Inc) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\cmudax.sys -- (cmudax)
DRV - [2004-03-17 15:10:40 | 000,113,664 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\HdAudio.sys -- (HdAudAddService)
DRV - [2001-08-17 19:19:34 | 000,036,480 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sfmanm.sys -- (sfman)
DRV - [2001-08-17 19:19:28 | 000,006,912 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctlfacem.sys -- (emu10k1)
DRV - [2001-08-17 19:19:26 | 000,283,904 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\emu10k1m.sys -- (emu10k)
DRV - [2001-08-17 19:19:20 | 000,003,712 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctljystk.sys -- (ctljystk)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{CB533D38-D65C-4EFC-B456-07AC5F215A58}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
 
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-21-343818398-1708537768-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://aartemis.com/?type=hp&ts=1388240093&from=cor&uid=WDCXWD800BB-00FRA0_WD-WCAJD1279037
IE - HKU\S-1-5-21-343818398-1708537768-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://aartemis.com/?type=hp&ts=1388240093&from=cor&uid=WDCXWD800BB-00FRA0_WD-WCAJD1279037
IE - HKU\S-1-5-21-343818398-1708537768-1801674531-1003\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-21-343818398-1708537768-1801674531-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-343818398-1708537768-1801674531-1003\..\SearchScopes\{CB533D38-D65C-4EFC-B456-07AC5F215A58}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7RLTB_plPL521
IE - HKU\S-1-5-21-343818398-1708537768-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.updaterss.com/SaveSenseLive Update;version=3: C:\Program Files\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll (SaveSense)
FF - HKLM\Software\MozillaPlugins\@tools.updaterss.com/SaveSenseLive Update;version=9: C:\Program Files\SaveSenseLive\Update\1.3.23.0\npGoogleUpdate3.dll (SaveSense)
FF - HKCU\Software\MozillaPlugins\@eximion.com/KalydoPlayer: C:\Documents and Settings\Ja\Dane aplikacji\Kalydo\KalydoPlayer\bin2\npkalydo.dll (Eximion B.V.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
 
 
[2013-10-02 18:37:28 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ja\Dane aplikacji\Mozilla\Extensions
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://aartemis.com/?type=hp&ts=1388240093&from=cor&uid=WDCXWD800BB-00FRA0_WD-WCAJD1279037
CHR - Extension: Apocalypse Th\u00E8me = C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\ffkggadllfepecimcjlfhnfhkdoifkkm\1_0\
CHR - Extension: Google Wallet = C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\
CHR - Extension: Battlefield Play4Free = C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh\1.0.96.0_0\
 
O1 HOSTS File: ([2010-01-21 23:47:36 | 000,000,775 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 127.0.0.1	mpa.one.microsoft.com
O2 - BHO: (SaveSense) - {71e129ff-6c2a-4984-818c-7e2c998b8d99} - C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\SaveSense\SaveSenseIE.dll (SaveSense)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O4 - HKLM..\Run: [4StoryPrePatch] E:\4Story_PL\PrePatch.exe File not found
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd File not found
O4 - HKLM..\Run: [High Definition Audio Property Page Shortcut] C:\WINDOWS\System32\HDAudPropShortcut.exe (Windows (R) Server 2003 DDK provider)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [mobilegeni daemon] C:\Program Files\Mobogenie\DaemonProcess.exe File not found
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKU\S-1-5-21-343818398-1708537768-1801674531-1003..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
O4 - HKU\S-1-5-21-343818398-1708537768-1801674531-1003..\Run: [EADM] "D:\Origin\Origin.exe" -AutoStart File not found
O4 - HKU\S-1-5-21-343818398-1708537768-1801674531-1003..\Run: [Facebook Update] C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKU\S-1-5-21-343818398-1708537768-1801674531-1003..\Run: [GG] C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\GG\Application\gghub.exe (GG Network S.A.)
O4 - HKU\S-1-5-21-343818398-1708537768-1801674531-1003..\Run: [NextLive] C:\Documents and Settings\Ja\Dane aplikacji\newnext.me\nengine.dll (NewNextDotMe)
O4 - HKU\S-1-5-21-343818398-1708537768-1801674531-1003..\Run: [SetDefaultMIDI] MIDIDef.exe File not found
O4 - HKU\S-1-5-21-343818398-1708537768-1801674531-1003..\Run: [Spol] http://www.toya.net.pl/~spol/site/index.htm File not found
O4 - HKU\S-1-5-21-343818398-1708537768-1801674531-1003..\Run: [uTorrent] C:\Documents and Settings\Ja\Dane aplikacji\uTorrent\uTorrent.exe (BitTorrent Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\GIGABYTE OC_GURU.lnk = C:\Program Files\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe (GIGABYTE Technology Co.,Ltd.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-343818398-1708537768-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error: Key error. File not found
O13 - gopher Prefix: missing
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab (Java Plug-in 10.25.2)
O16 - DPF: {C8BC46C7-921C-4102-B67D-F1F7E65FB0BE} https://battlefield.play4free.com/static/updater/BP4FUpdater_1.0.96.0.cab (Battlefield Play4Free Updater)
O16 - DPF: {CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_17-windows-i586.cab (Java Plug-in 10.25.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B49C8D37-F2CA-4443-8C28-3F7BC52E0731}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013-01-23 12:23:57 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{191b45a6-97cd-11e2-bfce-0013d38e9bdc}\Shell - "" = AutoRun
O33 - MountPoints2\{191b45a6-97cd-11e2-bfce-0013d38e9bdc}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{191b45a7-97cd-11e2-bfce-0013d38e9bdc}\Shell - "" = AutoRun
O33 - MountPoints2\{191b45a7-97cd-11e2-bfce-0013d38e9bdc}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{191b45a9-97cd-11e2-bfce-0013d38e9bdc}\Shell - "" = Autorun
O33 - MountPoints2\{191b45a9-97cd-11e2-bfce-0013d38e9bdc}\Shell\AutoRun\command - "" = Nokia_Suite_webinstaller_ALL.exe
O33 - MountPoints2\{3c1bcf76-93bd-11e2-bfc4-0013d38e9bdc}\Shell - "" = AutoRun
O33 - MountPoints2\{3c1bcf76-93bd-11e2-bfc4-0013d38e9bdc}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{3c1bcf79-93bd-11e2-bfc4-0013d38e9bdc}\Shell - "" = AutoRun
O33 - MountPoints2\{3c1bcf79-93bd-11e2-bfc4-0013d38e9bdc}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{3c1bcf7b-93bd-11e2-bfc4-0013d38e9bdc}\Shell - "" = AutoRun
O33 - MountPoints2\{3c1bcf7b-93bd-11e2-bfc4-0013d38e9bdc}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{3c1bcf7e-93bd-11e2-bfc4-0013d38e9bdc}\Shell - "" = AutoRun
O33 - MountPoints2\{3c1bcf7e-93bd-11e2-bfc4-0013d38e9bdc}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{3c1bcf81-93bd-11e2-bfc4-0013d38e9bdc}\Shell - "" = AutoRun
O33 - MountPoints2\{3c1bcf81-93bd-11e2-bfc4-0013d38e9bdc}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2014-02-10 21:16:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Pulpit\Nowy komp
[2014-02-10 21:04:38 | 000,000,000 | ---D | C] -- C:\FRST
[2014-02-10 20:37:41 | 000,000,000 | ---D | C] -- C:\Program Files\TeamViewer
[2014-02-10 19:56:14 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014-02-06 22:14:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\.thumbnails
[2014-02-06 22:12:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\gtk-2.0
[2014-02-06 21:51:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\fontconfig
[2014-02-06 21:51:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\gegl-0.2
[2014-02-06 21:51:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\.gimp-2.8
[2014-02-06 21:48:05 | 000,000,000 | ---D | C] -- C:\Program Files\GIMP 2
[2014-02-06 21:46:58 | 000,000,000 | ---D | C] -- C:\Program Files\SaveSenseLive
[2014-02-06 21:46:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\SaveSenseLive
[2014-02-06 21:46:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\SaveSenseLive
[2014-02-06 21:46:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Dane aplikacji\SaveSense
[2014-02-06 21:46:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Menu Start\Programy\SaveSense
[2014-02-06 21:46:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\SaveSense
[2014-02-05 15:03:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\LogMeIn Hamachi
[2014-02-05 15:03:48 | 000,000,000 | ---D | C] -- C:\Program Files\LogMeIn Hamachi
[2014-02-04 23:17:48 | 004,600,264 | ---- | C] (INCA Internet Co., Ltd.) -- C:\WINDOWS\System32\GameMon.des
[2014-02-04 23:17:24 | 000,004,682 | ---- | C] (INCA Internet Co., Ltd.) -- C:\WINDOWS\System32\npptNT2.sys
[2014-02-04 23:17:13 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\INCA Shared
[2014-02-01 01:55:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\EdgeOfReality
[2014-01-27 23:58:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Counter Strike 1.6 v23.1 [PL] [Fps Booster]
[2014-01-27 23:56:54 | 000,000,000 | ---D | C] -- C:\Program Files\Counter Strike 1.6 v23.1 [PL] [Fps Booster]
[2014-01-20 17:41:35 | 000,055,360 | ---- | C] (NetFilterSDK.com) -- C:\WINDOWS\System32\drivers\tnetfilter2.sys
[2014-01-19 22:32:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\4Story_PL
[2014-01-17 22:09:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Dane aplikacji\0F1F1C2Y1H1P1C0I0T
[2014-01-16 17:05:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Menu Start\Programy\Ubisoft
[2014-01-15 18:28:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Dane aplikacji\Kalydo
[2014-01-14 21:26:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Moje dokumenty\Gameforge Live
[2014-01-14 21:26:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\Gameforge4d
[2014-01-14 21:26:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Gameforge Live
[2014-01-14 21:25:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ja\Moje dokumenty\Downloads
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2014-02-10 21:08:02 | 000,000,990 | ---- | M] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-343818398-1708537768-1801674531-1003UA.job
[2014-02-10 21:08:01 | 000,000,968 | ---- | M] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-343818398-1708537768-1801674531-1003Core.job
[2014-02-10 21:07:03 | 000,001,028 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2014-02-10 20:53:32 | 000,000,912 | ---- | M] () -- C:\WINDOWS\tasks\SaveSenseLiveUpdateTaskMachineUA.job
[2014-02-10 20:46:00 | 000,000,420 | ---- | M] () -- C:\WINDOWS\tasks\At1.job
[2014-02-10 20:44:32 | 000,000,356 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2014-02-10 20:43:40 | 000,001,024 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2014-02-10 20:43:29 | 000,000,908 | ---- | M] () -- C:\WINDOWS\tasks\SaveSenseLiveUpdateTaskMachineCore.job
[2014-02-10 20:43:20 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2014-02-10 19:48:12 | 000,000,456 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{32B19DDD-E025-432C-920C-8DA5F4C3CED3}.job
[2014-02-10 16:32:51 | 000,139,424 | ---- | M] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2014-02-10 16:32:32 | 000,282,104 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.xtr
[2014-02-09 18:38:09 | 000,000,048 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\Google.url
[2014-02-06 22:22:32 | 000,008,303 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\images.jpg
[2014-02-06 22:15:47 | 000,003,108 | ---- | M] () -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\recently-used.xbel
[2014-02-06 22:14:01 | 002,450,541 | ---- | M] () -- C:\Documents and Settings\Ja\Moje dokumenty\Bez nazwy.xcf
[2014-02-06 21:46:57 | 000,000,043 | ---- | M] () -- C:\Documents and Settings\Ja\Dane aplikacji\WB.CFG
[2014-02-06 16:46:01 | 000,000,604 | ---- | M] () -- C:\WINDOWS\System32\settingsbkup.sfm
[2014-02-06 16:46:01 | 000,000,604 | ---- | M] () -- C:\WINDOWS\System32\settings.sfm
[2014-02-05 18:04:16 | 000,000,202 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\Warframe.url
[2014-02-05 15:49:55 | 000,282,104 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.ex0
[2014-01-27 23:58:38 | 000,001,893 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Counter Strike 1.6 v23.1 [PL].lnk
[2014-01-27 20:39:31 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2014-01-17 23:03:06 | 000,002,443 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\GIGABYTE OC_GURU.lnk
[2014-01-17 22:34:45 | 000,194,568 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2014-01-17 22:31:35 | 000,490,284 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2014-01-17 22:31:35 | 000,432,356 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2014-01-17 22:31:35 | 000,083,660 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2014-01-17 22:31:35 | 000,067,312 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2014-01-17 09:16:10 | 000,055,360 | ---- | M] (NetFilterSDK.com) -- C:\WINDOWS\System32\drivers\tnetfilter2.sys
[2014-01-16 20:42:30 | 000,138,904 | ---- | M] () -- C:\Documents and Settings\Ja\Dane aplikacji\PnkBstrK.sys
[2014-01-16 17:05:46 | 000,000,332 | ---- | M] () -- C:\Documents and Settings\Ja\Pulpit\Ghost Recon Online (EU).appref-ms
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2014-02-09 18:38:09 | 000,000,048 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\Google.url
[2014-02-07 21:46:08 | 000,000,068 | ---- | C] () -- C:\Documents and Settings\NetworkService\Dane aplikacji\WB.CFG
[2014-02-06 22:22:30 | 000,008,303 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\images.jpg
[2014-02-06 22:15:47 | 000,003,108 | ---- | C] () -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\recently-used.xbel
[2014-02-06 22:14:01 | 002,450,541 | ---- | C] () -- C:\Documents and Settings\Ja\Moje dokumenty\Bez nazwy.xcf
[2014-02-06 21:51:24 | 000,000,736 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\GIMP 2.lnk
[2014-02-06 21:47:06 | 000,000,912 | ---- | C] () -- C:\WINDOWS\tasks\SaveSenseLiveUpdateTaskMachineUA.job
[2014-02-06 21:47:05 | 000,000,908 | ---- | C] () -- C:\WINDOWS\tasks\SaveSenseLiveUpdateTaskMachineCore.job
[2014-02-06 21:46:57 | 000,000,043 | ---- | C] () -- C:\Documents and Settings\Ja\Dane aplikacji\WB.CFG
[2014-02-06 21:46:53 | 000,000,420 | ---- | C] () -- C:\WINDOWS\tasks\At1.job
[2014-02-05 18:04:16 | 000,000,202 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\Warframe.url
[2014-02-04 23:17:29 | 000,005,174 | ---- | C] () -- C:\WINDOWS\System32\nppt9x.vxd
[2014-01-27 23:58:38 | 000,001,893 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Counter Strike 1.6 v23.1 [PL].lnk
[2014-01-16 17:05:46 | 000,000,332 | ---- | C] () -- C:\Documents and Settings\Ja\Pulpit\Ghost Recon Online (EU).appref-ms
[2014-01-10 00:19:16 | 000,282,104 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2013-10-31 14:55:56 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2013-10-31 14:55:43 | 000,887,724 | R--- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2013-10-31 14:55:43 | 000,601,728 | R--- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2013-10-31 14:55:43 | 000,000,003 | R--- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2013-10-31 14:47:17 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2013-10-09 21:04:43 | 000,000,001 | ---- | C] () -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\llftool.4.30.agreement
[2013-08-30 12:15:45 | 000,000,175 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys.sum
[2013-08-30 12:15:45 | 000,000,175 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswSnx.sys.sum
[2013-08-30 12:15:44 | 000,000,175 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswSP.sys.sum
[2013-08-30 12:15:15 | 000,175,176 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2013-08-30 12:15:13 | 000,049,376 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
[2013-08-30 11:35:45 | 000,000,546 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol
[2013-04-20 08:03:36 | 000,038,560 | ---- | C] () -- C:\WINDOWS\System32\CleanMFT32.exe
[2013-04-12 21:21:55 | 000,139,424 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2013-04-12 21:21:54 | 000,138,904 | ---- | C] () -- C:\Documents and Settings\Ja\Dane aplikacji\PnkBstrK.sys
[2013-04-12 21:21:31 | 000,076,888 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2013-04-12 14:00:22 | 000,120,152 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2013-04-10 16:51:51 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2013-01-31 22:31:49 | 000,012,800 | ---- | C] () -- C:\Documents and Settings\Ja\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013-01-23 15:20:49 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\vuins32.dll
[2013-01-23 15:14:31 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2013-01-23 14:18:20 | 001,101,436 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2013-01-23 14:18:20 | 001,101,436 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2013-01-23 14:18:20 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2013-01-23 14:18:04 | 002,811,988 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data
[2013-01-23 13:12:03 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2013-01-23 13:05:18 | 000,194,568 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013-01-23 12:26:46 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2013-01-23 12:20:37 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2013-04-12 13:56:17 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2010-01-21 23:47:36 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2010-01-21 23:47:36 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2010-01-21 23:47:36 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2013-08-30 12:09:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\AVAST Software
[2013-07-23 14:28:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2013-04-11 19:07:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DatacardService
[2013-12-22 13:33:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts
[2013-07-25 12:29:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2013-01-28 11:48:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\GG
[2013-10-04 11:58:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\LogMeIn
[2013-08-18 12:57:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2013-07-15 20:07:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Orbit
[2013-12-22 13:50:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Origin
[2014-02-06 21:46:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SaveSenseLive
[2013-12-28 15:15:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\WPM
[2014-02-10 16:27:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\.minecraft
[2013-07-27 15:35:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\.minecraftzyczu
[2014-01-17 22:09:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\0F1F1C2Y1H1P1C0I0T
[2013-12-28 15:14:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\aartemis
[2013-08-29 20:15:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Common
[2013-11-06 15:45:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\DAEMON Tools Lite
[2013-07-22 16:37:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\DownLite
[2013-08-29 18:31:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Dwarfs
[2013-07-25 12:30:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Gadu-Gadu 10
[2014-02-10 20:51:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\GG
[2014-01-15 18:28:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Kalydo
[2013-09-15 14:12:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\LolClient
[2013-07-22 17:22:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Mojocraft.net
[2013-03-04 16:36:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Mumble
[2014-02-10 20:44:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\newnext.me
[2013-08-01 18:28:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\OpenFM
[2013-12-11 16:36:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\openvr
[2013-12-22 13:50:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Origin
[2013-09-22 18:09:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Riot Games
[2014-02-06 21:46:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\SaveSense
[2013-09-02 19:11:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\TeamViewer
[2014-02-10 20:51:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\TS3Client
[2013-08-26 22:03:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\ts3overlay
[2013-04-27 16:15:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\Unity
[2014-02-10 20:51:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ja\Dane aplikacji\uTorrent
[2013-08-30 11:06:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Dane aplikacji\ts3overlay
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >