OTL logfile created on: 2014-04-04 18:15:00 - Run 4 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\grzegorz\Desktop\fixitpc\OTL nowszy 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16750) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 1,77 Gb Available Physical Memory | 44,29% Memory free 8,00 Gb Paging File | 5,12 Gb Available in Paging File | 63,99% Paging File free Paging file location(s): C:\pagefile.sys 0 0 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 107,31 Gb Total Space | 13,71 Gb Free Space | 12,78% Space Free | Partition Type: NTFS Drive D: | 175,78 Gb Total Space | 10,32 Gb Free Space | 5,87% Space Free | Partition Type: NTFS Drive E: | 182,57 Gb Total Space | 37,74 Gb Free Space | 20,67% Space Free | Partition Type: NTFS Computer Name: GRZEGORZ-PC | User Name: grzegorz | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2014-04-04 18:12:39 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\grzegorz\Desktop\fixitpc\OTL nowszy\OTL.exe PRC - [2014-04-02 13:19:51 | 001,380,704 | ---- | M] () -- C:\Program Files (x86)\Opera\20.0.1387.91\opera_crashreporter.exe PRC - [2014-04-02 13:19:50 | 046,143,840 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\20.0.1387.91\opera.exe PRC - [2014-03-07 19:21:54 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2012-01-18 08:44:52 | 000,450,848 | ---- | M] (Logitech Inc.) -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe PRC - [2009-10-05 17:36:46 | 000,036,864 | ---- | M] () -- C:\Program Files (x86)\MagicTune Premium\GammaTray.exe PRC - [2009-01-16 12:12:28 | 000,221,184 | ---- | M] () -- C:\Windows\system\cm106eye.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2014-04-02 13:19:53 | 000,908,640 | ---- | M] () -- C:\Program Files (x86)\Opera\20.0.1387.91\libglesv2.dll MOD - [2014-04-02 13:19:53 | 000,108,896 | ---- | M] () -- C:\Program Files (x86)\Opera\20.0.1387.91\libegl.dll MOD - [2014-04-02 13:19:52 | 000,895,328 | ---- | M] () -- C:\Program Files (x86)\Opera\20.0.1387.91\ffmpegsumo.dll MOD - [2014-04-02 13:19:51 | 001,380,704 | ---- | M] () -- C:\Program Files (x86)\Opera\20.0.1387.91\opera_crashreporter.exe MOD - [2014-03-12 14:00:26 | 016,276,872 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll MOD - [2009-10-05 17:36:46 | 000,036,864 | ---- | M] () -- C:\Program Files (x86)\MagicTune Premium\GammaTray.exe MOD - [2009-01-16 12:12:28 | 000,221,184 | ---- | M] () -- C:\Windows\system\cm106eye.exe MOD - [2006-09-13 07:08:00 | 000,491,520 | ---- | M] () -- C:\Windows\system\cmau106.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2013-12-06 22:52:10 | 000,239,616 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2013-12-06 16:06:06 | 000,344,064 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service) SRV:[b]64bit:[/b] - [2013-05-27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2010-12-28 10:00:34 | 001,296,728 | ---- | M] (www.BitComet.com) [On_Demand | Stopped] -- C:\Program Files\BitComet\tools\BitCometService.exe -- (BITCOMET_HELPER_SERVICE) SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - File not found [Auto | Stopped] -- C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe -- (avgwd) SRV - File not found [Auto | Stopped] -- C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe -- (AVGIDSAgent) SRV - [2014-03-12 14:00:26 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2014-03-07 19:21:54 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2013-12-18 20:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2013-09-11 21:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2013-02-04 18:43:22 | 000,155,824 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion) SRV - [2012-11-19 18:03:24 | 000,489,256 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2012-07-13 14:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [On_Demand | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012-01-18 08:44:52 | 000,450,848 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe -- (UMVPFSrv) SRV - [2011-12-09 14:39:52 | 000,135,584 | ---- | M] (Futuremark Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe -- (Futuremark SystemInfo Service) SRV - [2011-10-14 00:52:36 | 000,136,616 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\AMD\OverDrive\AODAssist.exe -- (AODService) SRV - [2010-10-12 16:28:28 | 000,186,368 | ---- | M] (MAGIX AG) [Disabled | Stopped] -- C:\Program Files (x86)\MAGIX\PC_Check_Tuning_2011_Download_Version\MXSAS.exe -- (MAGIX StartUp Analyze Service) SRV - [2010-02-19 14:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2007-05-31 18:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm) SRV - [2007-05-31 18:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2014-01-23 05:21:06 | 000,206,080 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudmdm.sys -- (ssudmdm) DRV:[b]64bit:[/b] - [2014-01-23 05:21:06 | 000,108,800 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssudbus.sys -- (dg_ssudbus) DRV:[b]64bit:[/b] - [2013-12-06 23:52:14 | 013,207,552 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2013-12-06 22:21:44 | 000,626,176 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2013-11-25 22:47:22 | 000,196,376 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgidsha.sys -- (AVGIDSHA) DRV:[b]64bit:[/b] - [2013-11-25 22:47:20 | 000,243,480 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgidsdrivera.sys -- (AVGIDSDriver) DRV:[b]64bit:[/b] - [2013-11-25 22:47:20 | 000,150,808 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgdiska.sys -- (Avgdiska) DRV:[b]64bit:[/b] - [2013-11-01 00:00:18 | 000,212,280 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (Avgldx64) DRV:[b]64bit:[/b] - [2013-10-31 23:49:46 | 000,294,712 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgloga.sys -- (Avgloga) DRV:[b]64bit:[/b] - [2013-10-01 01:52:08 | 000,123,704 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (Avgmfx64) DRV:[b]64bit:[/b] - [2013-09-24 16:53:50 | 000,094,208 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService) DRV:[b]64bit:[/b] - [2013-09-19 23:05:02 | 000,059,648 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Stopped] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.2.0) DRV:[b]64bit:[/b] - [2013-09-19 23:05:02 | 000,059,648 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.01) DRV:[b]64bit:[/b] - [2013-09-10 01:43:02 | 000,031,544 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (Avgrkx64) DRV:[b]64bit:[/b] - [2013-08-01 17:07:06 | 000,251,192 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (Avgtdia) DRV:[b]64bit:[/b] - [2013-07-21 20:07:13 | 000,027,760 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc) DRV:[b]64bit:[/b] - [2013-07-21 20:07:13 | 000,014,448 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt) DRV:[b]64bit:[/b] - [2013-02-12 06:12:06 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx) DRV:[b]64bit:[/b] - [2012-11-29 12:50:06 | 000,073,552 | ---- | M] (Dataram, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RAMDiskVE.sys -- (RAMDiskVE) DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2012-01-18 08:44:36 | 004,865,568 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvuvc64.sys -- (LVUVC64) DRV:[b]64bit:[/b] - [2012-01-18 08:44:28 | 000,351,136 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (LVRS64) DRV:[b]64bit:[/b] - [2011-12-25 09:52:20 | 000,530,488 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2011-09-22 08:45:28 | 000,030,080 | ---- | M] (REALiX(tm)) [Kernel | System | Running] -- C:\Program Files\HWiNFO64\HWiNFO64A.SYS -- (HWiNFO32) DRV:[b]64bit:[/b] - [2011-09-21 11:25:54 | 000,021,992 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz135_x64.sys -- (cpuz135) DRV:[b]64bit:[/b] - [2011-08-23 22:57:24 | 000,565,352 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2010-11-29 05:50:38 | 000,044,672 | R--- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter) DRV:[b]64bit:[/b] - [2010-11-20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-11-20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010-11-20 13:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV:[b]64bit:[/b] - [2010-08-12 12:24:30 | 001,310,720 | ---- | M] (C-Media Electronics Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CM10664.sys -- (USBMULCD) DRV:[b]64bit:[/b] - [2010-06-17 06:15:36 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie64.sys -- (AtiPcie) DRV:[b]64bit:[/b] - [2010-04-27 16:57:20 | 000,016,200 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmVirHid.sys -- (WmVirHid) DRV:[b]64bit:[/b] - [2010-04-27 16:57:14 | 000,036,936 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmHidLo.sys -- (WmHidLo) DRV:[b]64bit:[/b] - [2010-04-27 16:57:12 | 000,026,440 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmBEnum.sys -- (WmBEnum) DRV:[b]64bit:[/b] - [2010-04-27 14:03:12 | 000,077,512 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmXlCore.sys -- (WmXlCore) DRV:[b]64bit:[/b] - [2010-04-27 14:02:42 | 000,043,976 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmFilter.sys -- (WmFilter) DRV:[b]64bit:[/b] - [2010-02-18 10:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64) DRV:[b]64bit:[/b] - [2009-09-23 12:11:00 | 000,027,616 | ---- | M] (MAGIX) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\disksec.sys -- (DiskSec) DRV:[b]64bit:[/b] - [2009-08-13 23:10:18 | 000,073,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-04-14 18:27:34 | 000,208,672 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService) DRV:[b]64bit:[/b] - [2009-02-11 12:25:02 | 000,006,784 | ---- | M] (SweetLow) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hidusbf.sys -- (hidusbf) DRV - [2011-10-14 00:50:52 | 000,055,936 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Program Files (x86)\AMD\OverDrive\amd64\AODDriver2.sys -- (AODDriver4.1) DRV - [2011-01-05 20:06:56 | 000,011,888 | ---- | M] (MSI) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Setup Files\Ms7599v1F0\NTIOLib_X64.sys -- (NTIOLib_1_0_6) DRV - [2010-10-21 19:37:36 | 000,014,136 | ---- | M] (MSI) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys -- (NTIOLib_1_0_4) DRV - [2010-05-09 19:44:40 | 000,033,592 | ---- | M] (Your Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\MSI\Live Update 5\msibios64_100507.sys -- (MSI_MSIBIOS_010507) DRV - [2010-04-22 15:33:36 | 000,014,336 | ---- | M] (Samsung Electronics, Inc. ) [Kernel | System | Stopped] -- C:\Windows\SysWOW64\drivers\MTiCtwl.sys -- (MagicTune) DRV - [2010-04-21 11:25:54 | 000,014,136 | ---- | M] (MSI) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\MSI\BIOS Code Unlocked Technology\NTIOLib_X64.sys -- (NTIOLib_1_0_2) DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) DRV - [2005-04-04 12:36:52 | 000,009,887 | ---- | M] (Ken Kato) [Kernel | On_Demand | Stopped] -- C:\Virtual Floppy Drive\vfd.sys -- (VirtualFD) DRV - [2002-01-12 17:30:34 | 000,003,567 | ---- | M] (Beyond Logic http://www.beyondlogic.org) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\PortTalk.sys -- (PortTalk) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3990852856-1956993013-1042417060-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/ IE - HKU\S-1-5-21-3990852856-1956993013-1042417060-1001\..\SearchScopes,DefaultScope = {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} IE - HKU\S-1-5-21-3990852856-1956993013-1042417060-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR IE - HKU\S-1-5-21-3990852856-1956993013-1042417060-1001\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = https://isearch.avg.com/search?cid={828B99D2-85E0-4BAB-8EFC-721C6AFE3B60}&mid=84516ae2fd6c47d08c4abd2b2b993ca0-5b7541b455c9f6844024dfae844bfe8fa91870cf&lang=pl&ds=AVG&pr=fr&d=2012-07-11 14:41:35&v=12.2.5.32&sap=dsp&q={searchTerms} IE - HKU\S-1-5-21-3990852856-1956993013-1042417060-1001\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}: "URL" = http://www.daemon-search.com/search?q={searchTerms} IE - HKU\S-1-5-21-3990852856-1956993013-1042417060-1001\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = http://mystart.incredibar.com/mb201/?search={searchTerms}&loc=IB_DS&a=6R8RQQvEKY&i=26 IE - HKU\S-1-5-21-3990852856-1956993013-1042417060-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3990852856-1956993013-1042417060-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 192.168.1.99.:8889 IE - HKU\S-1-5-21-3990852856-1956993013-1042417060-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "AutoConfigURL" = 192.168.1.99.8889 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "https://autoclubrevolution.com/en/index" FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:31.0a1 FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll () FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\grzegorz\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\grzegorz\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\grzegorz\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) 64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\PROGRAM FILES\IB UPDATER\FIREFOX FF - HKEY_LOCAL_MACHINE\software\mozilla\Nightly 31.0a1\extensions\\Components: C:\Program Files (x86)\Nightly\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Nightly 31.0a1\extensions\\Plugins: C:\Program Files (x86)\Nightly\plugins [2013-03-16 11:32:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\grzegorz\AppData\Roaming\mozilla\Extensions [2013-03-01 20:29:36 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2013-02-20 19:07:11 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2013-02-20 19:07:11 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2012-11-08 20:01:43 | 000,003,572 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Conduit (Enabled) CHR - default_search_provider: search_url = http://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&cui=UN30726969413208226&ctid=CT3176921 CHR - default_search_provider: suggest_url = CHR - homepage: http://search.conduit.com/?CUI=UN30726969413208226&ctid=CT3176921&SearchSource=48 CHR - plugin: Shockwave Flash (Enabled) = C:\Users\grzegorz\AppData\Local\Google\Chrome\Application\21.0.1180.79\PepperFlash\pepflashplayer.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Users\grzegorz\AppData\Local\Google\Chrome\Application\25.0.1364.172\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_271.dll CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\grzegorz\AppData\Local\Google\Chrome\Application\25.0.1364.172\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\grzegorz\AppData\Local\Google\Chrome\Application\25.0.1364.172\pdf.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll CHR - plugin: AVG SiteSafety plugin (Enabled) = C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\11.2.0\\npsitesafety.dll CHR - plugin: Java(TM) Platform SE 6 U33 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll CHR - plugin: Java Deployment Toolkit 6.0.330.3 (Enabled) = C:\Windows\SysWOW64\npdeployJava1.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll CHR - plugin: Unity Player (Enabled) = C:\Users\grzegorz\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll CHR - plugin: Google Update (Enabled) = C:\Users\grzegorz\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - Extension: New tab for Chrome\u2122 = C:\Users\grzegorz\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg\1.0.0_0\ O1 HOSTS File: ([2012-01-05 20:44:29 | 000,001,755 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 activate.adobe.com O1 - Hosts: 127.0.0.1 practivate.adobe.com O1 - Hosts: 127.0.0.1 ereg.adobe.com O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com O1 - Hosts: 127.0.0.1 wip3.adobe.com O1 - Hosts: 127.0.0.1 3dns-3.adobe.com O1 - Hosts: 127.0.0.1 3dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com O1 - Hosts: 127.0.0.1 activate-sea.adobe.com O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com O1 - Hosts: 127.0.0.1 practivate.adobe.com O1 - Hosts: 127.0.0.1 ereg.adobe.com O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com O1 - Hosts: 127.0.0.1 wip3.adobe.com O1 - Hosts: 127.0.0.1 3dns-3.adobe.com O1 - Hosts: 127.0.0.1 3dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com O1 - Hosts: 127.0.0.1 activate-sea.adobe.com O1 - Hosts: 2 more lines... O2:[b]64bit:[/b] - BHO: (SteadyVideoBHO Class) - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet) O2 - BHO: (SteadyVideoBHO Class) - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3:[b]64bit:[/b] - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3 - HKLM\..\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O3:[b]64bit:[/b] - HKU\S-1-5-21-3990852856-1956993013-1042417060-1001\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3 - HKU\S-1-5-21-3990852856-1956993013-1042417060-1001\..\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) O4:[b]64bit:[/b] - HKLM..\Run: [Cm106Sound] C:\Windows\Syswow64\cm106.dll (C-Media Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3990852856-1956993013-1042417060-1001..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - Startup: C:\Users\grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Powiadomienia monitorowania tuszu - HP Deskjet 1050 J410 series.lnk = File not found O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutorun = 0 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutorun = 0 O7 - HKU\S-1-5-21-3990852856-1956993013-1042417060-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-3990852856-1956993013-1042417060-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2 O7 - HKU\S-1-5-21-3990852856-1956993013-1042417060-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1 O8:[b]64bit:[/b] - Extra context menu item: &P&obierz &za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 File not found O8:[b]64bit:[/b] - Extra context menu item: Pobierz wszystko za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: &P&obierz &za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Pobierz wszystko za pomocą BitComet - C:\Program Files\BitComet\BitComet.exe (www.BitComet.com) O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1B93B31D-9A9D-40C1-800F-5871634E57D5}: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4173A9AC-858D-4860-9B4D-6DB9337212DB}: NameServer = 8.8.8.8,213.199.225.14 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CB150BE6-2E3E-4B8D-B9B9-04A66F2BC5FD}: DhcpNameServer = 192.168.0.1 O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18:[b]64bit:[/b] - Protocol\Filter\video/mp4 {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) O18:[b]64bit:[/b] - Protocol\Filter\video/x-flv {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O18 - Protocol\Filter\video/mp4 {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) O18 - Protocol\Filter\video/x-flv {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKU\S-1-5-21-3990852856-1956993013-1042417060-1001 Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKU\S-1-5-21-3990852856-1956993013-1042417060-1001 Winlogon: Shell - ("C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe") - C:\Windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe (Microsoft Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O27:[b]64bit:[/b] - HKLM IFEO\AvastSvc.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\AvastUI.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\avcenter.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\avconfig.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\avgnt.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\avgrsx.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\avguard.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\avp.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\avscan.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\bdagent.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\blindman.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\ccuac.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\ComboFix.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\egui.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\hijackthis.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\instup.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\keyscrambler.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\mbam.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\mbamgui.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\mbampt.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\mbamscheduler.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\mbamservice.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\MpCmdRun.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\MSASCui.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\MsMpEng.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\msseces.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\rstrui.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\SDFiles.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\SDMain.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\SDWinSec.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\spybotsd.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\wireshark.exe: Debugger - nqij.exe File not found O27:[b]64bit:[/b] - HKLM IFEO\zlclient.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\AvastSvc.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\AvastUI.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\avcenter.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\avconfig.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\avgnt.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\avgrsx.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\avguard.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\avp.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\avscan.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\bdagent.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\blindman.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\ccuac.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\ComboFix.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\egui.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\hijackthis.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\instup.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\keyscrambler.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\mbam.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\mbamgui.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\mbampt.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\mbamscheduler.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\mbamservice.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\MpCmdRun.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\MSASCui.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\MsMpEng.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\msseces.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\rstrui.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\SDFiles.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\SDMain.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\SDWinSec.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\spybotsd.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\wireshark.exe: Debugger - nqij.exe File not found O27 - HKLM IFEO\zlclient.exe: Debugger - nqij.exe File not found O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2014-04-04 18:06:12 | 000,000,000 | ---D | C] -- C:\FRST [2014-04-04 09:35:05 | 000,000,000 | ---D | C] -- C:\Users\grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center [2014-04-04 09:34:13 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI [2014-04-04 09:14:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center [2014-04-04 09:08:25 | 000,000,000 | ---D | C] -- C:\AMD [2014-04-04 08:33:20 | 000,000,000 | ---D | C] -- C:\Windows\Migration [2014-04-04 06:58:18 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2014-04-03 19:57:59 | 000,000,000 | -HSD | C] -- C:\Windows\SysWow64\Windows Services [2014-04-03 19:57:25 | 000,000,000 | RHSD | C] -- C:\Users\grzegorz\tla51h49917jc [2014-04-02 20:20:28 | 000,000,000 | ---D | C] -- C:\Users\grzegorz\AppData\Roaming\com.rovio.AngryBirdsBreakfast2 [2014-04-02 20:20:24 | 000,000,000 | ---D | C] -- C:\Users\grzegorz\AppData\Roaming\Angry Birds Breakfast 2 [2014-04-02 20:20:17 | 000,000,000 | ---D | C] -- C:\Users\grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Angry Birds Breakfast 2 [2014-04-02 20:16:30 | 000,000,000 | ---D | C] -- C:\Users\grzegorz\AppData\Local\OpenFM [2014-03-31 13:30:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG [2014-03-25 21:20:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nightly [2014-03-23 22:07:47 | 000,000,000 | ---D | C] -- C:\Users\grzegorz\AppData\Local\bitComposer [2014-03-23 17:40:03 | 000,000,000 | ---D | C] -- C:\Users\grzegorz\AppData\Local\GHISLER [2014-03-23 13:45:03 | 000,000,000 | ---D | C] -- C:\ProgramData\YTD Video Downloader [2014-03-22 16:38:58 | 000,000,000 | ---D | C] -- C:\Users\grzegorz\Desktop\driver [2014-03-22 16:16:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR [2014-03-22 16:16:35 | 000,000,000 | ---D | C] -- C:\Users\grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR [2014-03-22 16:16:18 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR [2014-03-19 13:09:08 | 000,663,552 | ---- | C] (MAGIX AG) -- C:\Windows\SysWow64\mgxoschk.dll [2014-03-15 13:51:48 | 000,000,000 | ---D | C] -- C:\Users\grzegorz\Documents\SelfMV [2014-03-09 18:59:06 | 000,000,000 | ---D | C] -- C:\Users\grzegorz\AppData\Local\Opera Software [2014-03-09 18:59:01 | 000,000,000 | ---D | C] -- C:\Users\grzegorz\AppData\Roaming\Opera Software [4 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [1 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2014-04-04 17:30:29 | 000,034,545 | ---- | M] () -- C:\Users\grzegorz\Desktop\przywracanie systemu.png [2014-04-04 17:11:07 | 000,115,963 | ---- | M] () -- C:\Users\grzegorz\Desktop\ikony.png [2014-04-04 16:04:13 | 000,020,576 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2014-04-04 16:04:13 | 000,020,576 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2014-04-04 16:02:56 | 001,679,338 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2014-04-04 16:02:56 | 000,743,770 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2014-04-04 16:02:56 | 000,657,174 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2014-04-04 16:02:56 | 000,157,252 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2014-04-04 16:02:56 | 000,122,986 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2014-04-04 15:56:54 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2014-04-04 15:56:51 | 3220,578,304 | -HS- | M] () -- C:\hiberfil.sys [2014-04-04 09:18:34 | 000,000,282 | ---- | M] () -- C:\Windows\tasks\MSIAfterburner.job [2014-04-04 08:35:20 | 001,650,976 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2014-04-03 20:21:02 | 000,001,070 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3990852856-1956993013-1042417060-1001UA.job [2014-04-03 20:20:55 | 000,001,018 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3990852856-1956993013-1042417060-1001Core.job [2014-04-03 20:00:36 | 000,000,224 | ---- | M] () -- C:\Windows\SysWow64\idp2.cfg [2014-04-03 20:00:00 | 000,000,728 | ---- | M] () -- C:\Users\grzegorz\AppData\Roaming\msconfig.ini [2014-04-03 19:59:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2014-04-03 15:19:02 | 000,291,760 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr [2014-04-03 15:19:02 | 000,291,760 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe [2014-04-03 15:16:33 | 000,291,488 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0 [2014-04-03 12:22:46 | 000,001,984 | ---- | M] () -- C:\Users\grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Powiadomienia monitorowania tuszu - HP Deskjet 1050 J410 series.lnk [2014-04-02 20:20:25 | 000,001,158 | ---- | M] () -- C:\Users\grzegorz\Desktop\Angry Birds Breakfast 2.lnk [2014-03-23 17:48:47 | 000,129,220 | -H-- | M] () -- C:\treeinfo.wc [2014-03-16 05:22:12 | 000,813,423 | ---- | M] () -- C:\Users\grzegorz\Desktop\R3hab & NERVO & Ummet Ozcan - Revolution (Lyrics)-dzwonek.mp3 [2014-03-15 20:29:36 | 003,558,288 | ---- | M] () -- C:\Users\grzegorz\Desktop\R3hab & NERVO & Ummet Ozcan - Revolution (Lyrics).mp3 [2014-03-15 13:51:45 | 000,001,997 | ---- | M] () -- C:\Users\grzegorz\Application Data\Microsoft\Internet Explorer\Quick Launch\Samsung Kies 3.lnk [2014-03-12 14:00:26 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2014-03-12 14:00:26 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2014-03-07 19:21:54 | 000,076,888 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe [4 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ] [1 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2014-04-04 17:30:29 | 000,034,545 | ---- | C] () -- C:\Users\grzegorz\Desktop\przywracanie systemu.png [2014-04-04 17:11:06 | 000,115,963 | ---- | C] () -- C:\Users\grzegorz\Desktop\ikony.png [2014-04-04 08:41:52 | 000,000,282 | ---- | C] () -- C:\Windows\tasks\MSIAfterburner.job [2014-04-03 20:00:36 | 000,000,224 | ---- | C] () -- C:\Windows\SysWow64\idp2.cfg [2014-04-03 19:58:29 | 000,000,728 | ---- | C] () -- C:\Users\grzegorz\AppData\Roaming\msconfig.ini [2014-04-02 20:20:25 | 000,001,158 | ---- | C] () -- C:\Users\grzegorz\Desktop\Angry Birds Breakfast 2.lnk [2014-04-02 20:16:30 | 000,001,200 | ---- | C] () -- C:\Users\grzegorz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenFM.lnk [2014-03-23 17:48:47 | 000,129,220 | -H-- | C] () -- C:\treeinfo.wc [2014-03-22 09:02:18 | 000,813,423 | ---- | C] () -- C:\Users\grzegorz\Desktop\R3hab & NERVO & Ummet Ozcan - Revolution (Lyrics)-dzwonek.mp3 [2014-03-22 09:02:17 | 003,558,288 | ---- | C] () -- C:\Users\grzegorz\Desktop\R3hab & NERVO & Ummet Ozcan - Revolution (Lyrics).mp3 [2014-03-15 13:51:45 | 000,001,997 | ---- | C] () -- C:\Users\grzegorz\Application Data\Microsoft\Internet Explorer\Quick Launch\Samsung Kies 3.lnk [2014-03-09 18:58:52 | 000,001,133 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 20.lnk [2014-01-23 19:31:12 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe [2013-11-16 22:16:16 | 000,000,041 | ---- | C] () -- C:\Users\grzegorz\AppData\Local\Sirocco-3.0.1.3.INI [2013-08-31 01:47:50 | 000,995,342 | ---- | C] () -- C:\Windows\SysWow64\amdocl_as32.exe [2013-08-31 01:47:50 | 000,798,734 | ---- | C] () -- C:\Windows\SysWow64\amdocl_ld32.exe [2013-08-30 19:53:48 | 000,038,912 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll [2013-08-12 14:22:44 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini [2013-04-10 17:18:08 | 000,143,360 | ---- | C] () -- C:\Windows\Vmix106.dll [2013-04-10 17:17:50 | 000,000,276 | ---- | C] () -- C:\Windows\Cm106.ini.cfl [2013-04-10 17:17:43 | 000,002,395 | ---- | C] () -- C:\Windows\Cm106.ini.cfg [2013-04-10 17:17:43 | 000,001,523 | ---- | C] () -- C:\Windows\Cm106.ini.imi [2013-02-13 11:03:49 | 000,707,504 | ---- | C] () -- C:\Users\grzegorz\AppData\Local\unins000.exe [2012-12-05 15:37:53 | 000,000,036 | ---- | C] () -- C:\Windows\avgui.INI [2012-12-02 19:35:42 | 000,000,640 | RHS- | C] () -- C:\Users\grzegorz\ntuser.pol [2012-11-28 15:17:18 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll [2012-11-28 15:17:18 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll [2012-11-28 15:17:18 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll [2012-11-28 15:17:18 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll [2012-10-02 18:48:21 | 000,000,000 | ---- | C] () -- C:\Windows\Viewer.INI [2012-06-05 09:20:24 | 000,291,760 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2012-06-05 09:20:15 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2012-02-19 17:09:15 | 000,011,761 | ---- | C] () -- C:\Users\grzegorz\AppData\Local\unins000.msg [2012-02-19 17:09:14 | 000,004,166 | ---- | C] () -- C:\Users\grzegorz\AppData\Local\unins000.dat [2012-01-25 11:09:59 | 000,003,584 | ---- | C] () -- C:\Users\grzegorz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-12-16 18:43:19 | 000,007,668 | ---- | C] () -- C:\Users\grzegorz\AppData\Local\Resmon.ResmonCfg [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2013-07-26 04:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2013-07-26 03:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2012-12-09 16:25:37 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\TuneUp Software [2012-12-09 16:25:37 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\TuneUp Software [2014-04-02 20:20:25 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\Angry Birds Breakfast 2 [2013-11-27 13:59:54 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\AVG [2013-12-27 12:42:17 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\AVG2014 [2014-04-04 08:45:32 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\BitComet [2014-04-02 20:20:28 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\com.rovio.AngryBirdsBreakfast2 [2011-12-29 23:46:19 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\CometPlayer [2013-03-15 19:19:01 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\DAEMON Tools Lite [2014-02-23 17:18:20 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\e-Deklaracje [2012-02-19 17:29:30 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1 [2013-03-01 19:55:30 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\ExpressFiles [2012-02-24 10:14:28 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\Gadu-Gadu 10 [2014-04-04 16:59:14 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\GG [2012-04-06 11:59:06 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\GHISLER [2013-03-01 11:20:27 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\IObit [2011-12-14 17:29:31 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\Leadertech [2011-12-29 14:04:05 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\MAGIX [2013-11-03 21:06:43 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\Milestone [2012-01-15 08:03:30 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\MSI [2013-02-06 08:43:49 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\Multiscreen [2012-02-03 13:10:18 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\Need for Speed World [2014-04-02 20:16:36 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\OpenFM [2011-12-14 17:40:23 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\Opera [2014-03-09 18:59:01 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\Opera Software [2013-10-04 22:55:10 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\Origin [2011-12-30 19:10:09 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\River Past G5 [2014-01-13 12:26:10 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\Rovio [2014-04-02 20:20:27 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\Rovio Entertainment Ltd [2014-03-15 13:51:38 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\Samsung [2013-07-20 20:39:26 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\Sony [2012-01-07 16:49:38 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1 [2014-01-08 16:13:05 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\tigerplayer [2013-12-04 00:07:17 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\TS3Client [2012-12-03 20:21:33 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\TuneUp Software [2013-04-17 23:47:26 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\Unity [2014-01-28 22:02:47 | 000,000,000 | ---D | M] -- C:\Users\grzegorz\AppData\Roaming\Warner Bros. Interactive Entertainment [2014-01-21 17:46:32 | 000,000,000 | ---D | M] -- C:\Users\Nikodem\AppData\Roaming\AVG2014 [2014-01-21 17:54:50 | 000,000,000 | ---D | M] -- C:\Users\Nikodem\AppData\Roaming\Opera [2014-01-25 11:16:40 | 000,000,000 | ---D | M] -- C:\Users\Nikodem\AppData\Roaming\Rovio [2012-12-09 16:25:37 | 000,000,000 | ---D | M] -- C:\Users\Nikodem\AppData\Roaming\TuneUp Software [2014-01-21 18:02:33 | 000,000,000 | ---D | M] -- C:\Users\Nikodem\AppData\Roaming\Unity [2014-02-08 18:19:30 | 000,000,000 | ---D | M] -- C:\Users\Nikodem\AppData\Roaming\Warner Bros. Interactive Entertainment [2014-03-14 21:13:13 | 000,000,000 | ---D | M] -- C:\Users\pirat.grzegorz-PC\AppData\Roaming\AVG2014 [2014-03-14 21:30:44 | 000,000,000 | ---D | M] -- C:\Users\pirat.grzegorz-PC\AppData\Roaming\Milestone [2014-03-14 21:14:45 | 000,000,000 | ---D | M] -- C:\Users\pirat.grzegorz-PC\AppData\Roaming\Opera Software [2012-12-09 16:25:37 | 000,000,000 | ---D | M] -- C:\Users\pirat.grzegorz-PC\AppData\Roaming\TuneUp Software [color=#E56717]========== Purity Check ==========[/color] < End of report >