OTL logfile created on: 2014-09-28 03:27:00 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Chrisso\Downloads
 Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17280)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,74 Gb Total Physical Memory | 0,36 Gb Available Physical Memory | 12,98% Memory free
6,94 Gb Paging File | 3,77 Gb Available in Paging File | 54,28% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 100,00 Gb Total Space | 1,99 Gb Free Space | 1,99% Space Free | Partition Type: NTFS
Drive D: | 117,87 Gb Total Space | 8,38 Gb Free Space | 7,11% Space Free | Partition Type: NTFS
Drive G: | 600,01 Gb Total Space | 465,60 Gb Free Space | 77,60% Space Free | Partition Type: NTFS
Drive H: | 98,62 Gb Total Space | 80,63 Gb Free Space | 81,76% Space Free | Partition Type: NTFS
 
Computer Name: AS | User Name: Chrisso | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2014-09-28 03:23:39 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Chrisso\Downloads\OTL.exe
PRC - [2014-09-28 03:05:26 | 001,100,288 | ---- | M] (Farbar) -- C:\Users\Chrisso\Downloads\FRST (1).exe
PRC - [2014-09-13 02:52:04 | 036,414,624 | ---- | M] (Dropbox, Inc.) -- C:\Users\Chrisso\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2014-09-11 19:24:08 | 000,916,480 | ---- | M] (FranmoSoftware) -- C:\Program Files\Odkurzacz\odkurzacz.exe
PRC - [2014-08-25 11:42:20 | 003,242,000 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2014\avgidsagent.exe
PRC - [2014-08-25 11:40:08 | 000,846,864 | ---- | M] (AVG Technologies CZ, s.r.o.) -- c:\Program Files\AVG\AVG2014\avgrsx.exe
PRC - [2014-08-25 11:39:18 | 000,643,088 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2014\avgcsrvx.exe
PRC - [2014-08-25 11:39:12 | 000,838,160 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2014\avgnsx.exe
PRC - [2014-08-25 11:38:58 | 000,289,328 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2014\avgwdsvc.exe
PRC - [2014-08-25 11:37:18 | 005,188,112 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2014\avgui.exe
PRC - [2014-08-25 11:31:58 | 000,657,936 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG2014\avgemcx.exe
PRC - [2014-07-24 16:05:42 | 000,156,312 | ---- | M] () -- C:\Program Files\Livedrive\VSSService.exe
PRC - [2014-07-24 16:04:02 | 001,842,840 | ---- | M] (Livedrive Internet Ltd) -- C:\Program Files\Livedrive\Livedrive.exe
PRC - [2014-07-14 18:21:46 | 001,390,176 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
PRC - [2014-07-14 18:21:06 | 001,767,520 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
PRC - [2014-04-05 06:14:38 | 000,064,384 | ---- | M] (Google) -- C:\Users\Chrisso\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
PRC - [2013-12-06 16:47:44 | 020,203,904 | ---- | M] (Google) -- C:\Program Files\Google\Drive\googledrivesync.exe
PRC - [2013-12-06 15:03:45 | 002,151,744 | ---- | M] (IObit) -- C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
PRC - [2013-10-07 09:42:26 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) -- C:\Windows\System32\NLSSRV32.EXE
PRC - [2013-08-02 02:52:57 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
PRC - [2013-06-26 19:23:04 | 000,207,528 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2013-06-26 19:23:00 | 000,523,944 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2013-01-23 13:29:48 | 000,150,264 | ---- | M] () -- C:\Program Files\Lexmark Pro200-S500 Series\ezprint.exe
PRC - [2013-01-23 13:29:47 | 000,772,712 | ---- | M] () -- C:\Program Files\Lexmark Pro200-S500 Series\lxebmon.exe
PRC - [2012-11-23 04:48:41 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2012-08-03 11:38:54 | 000,740,736 | ---- | M] (ASUS Cloud Corporation) -- C:\Program Files\ASUS\ASUS WebStorage\3.0.143.296\AsusWSPanel.exe
PRC - [2012-05-30 03:44:44 | 000,830,464 | ---- | M] (ActMask Co.,Ltd - http://www.all2pdf.com) -- C:\Windows\System32\PrintDisp.exe
PRC - [2012-01-20 10:00:54 | 000,077,824 | ---- | M] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) -- C:\Windows\System32\PrintCtrl.exe
PRC - [2011-09-21 13:57:50 | 001,690,624 | ---- | M] (e-Kiosk S.A.) -- C:\Program Files\e-Kiosk Reader\eGazetaST.exe
PRC - [2011-02-25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010-08-19 10:52:14 | 000,241,664 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\ProgramData\DatacardService\DCSHelper.exe
PRC - [2010-08-19 10:52:04 | 000,229,376 | ---- | M] () -- C:\ProgramData\DatacardService\DCService.exe
PRC - [2010-07-30 02:13:48 | 003,058,304 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe
PRC - [2010-07-13 02:34:46 | 000,906,648 | ---- | M] (Sony Corporation) -- C:\Program Files\Sony\Reader\Data\bin\launcher\Reader Library Launcher.exe
PRC - [2010-06-30 00:31:56 | 001,241,520 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files\EeePC\HotkeyService\HotkeyService.exe
PRC - [2010-06-23 12:07:12 | 000,049,072 | ---- | M] (AsusTek Computer Inc.) -- C:\Program Files\ASUS\USBChargeSetting\iSeriesCharge.exe
PRC - [2010-06-12 06:56:42 | 000,976,872 | ---- | M] (AsusTek Computer Inc.) -- C:\Program Files\ASUS\LiveUpdate\LiveUpdate.exe
PRC - [2010-06-10 22:12:06 | 000,414,384 | ---- | M] () -- C:\Program Files\ASUS\Eee Docking\Eee Docking.exe
PRC - [2010-05-29 01:41:36 | 000,445,344 | ---- | M] (ASUS) -- C:\Program Files\EeePC\CapsHook\CapsHook.exe
PRC - [2010-05-21 22:42:48 | 002,839,840 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
PRC - [2010-05-21 22:42:48 | 000,828,704 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
PRC - [2010-05-21 22:42:48 | 000,652,576 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
PRC - [2010-04-15 19:34:00 | 000,383,792 | ---- | M] (syncables, LLC) -- C:\Program Files\syncables\syncables desktop\syncablesMAPI.exe
PRC - [2010-04-15 19:34:00 | 000,370,480 | ---- | M] (syncables, LLC) -- C:\Program Files\syncables\syncables desktop\syncables.exe
PRC - [2010-04-15 19:34:00 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\syncables\syncables desktop\jre\bin\javaw.exe
PRC - [2010-04-14 14:56:01 | 000,598,696 | ---- | M] ( ) -- C:\Windows\System32\lxebcoms.exe
PRC - [2010-04-03 02:45:20 | 000,407,552 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files\EeePC\SHE\SuperHybridEngine.exe
PRC - [2010-03-10 15:26:48 | 000,189,728 | ---- | M] (Protexis Inc.) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
PRC - [2009-12-31 14:13:52 | 000,110,592 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Users\Chrisso\AppData\Roaming\blueconnect\ouc.exe
PRC - [2009-12-23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
PRC - [2009-11-19 15:44:14 | 000,083,240 | ---- | M] (Synaptics Incorporated) -- C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe
PRC - [2009-09-11 20:41:02 | 000,100,328 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files\EeePC\HotkeyService\HotKeyMon.exe
PRC - [2009-08-19 02:35:56 | 000,219,136 | ---- | M] () -- C:\Windows\System32\AsusService.exe
PRC - [2009-06-05 04:03:32 | 000,186,904 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2009-06-05 04:03:06 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2008-09-24 15:32:48 | 000,935,208 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
PRC - [2007-05-18 01:05:34 | 000,037,392 | R--- | M] (Mindjet) -- C:\Program Files\Mindjet\MindManager 7\MmReminderService.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2014-09-28 02:29:28 | 000,043,008 | ---- | M] () -- c:\users\chrisso\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmptzv9c7.dll
MOD - [2014-09-28 02:27:49 | 001,153,024 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\_ssl.pyd
MOD - [2014-09-28 02:27:49 | 000,811,008 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\wx._windows_.pyd
MOD - [2014-09-28 02:27:49 | 000,805,888 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\wx._gdi_.pyd
MOD - [2014-09-28 02:27:49 | 000,711,680 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\_hashlib.pyd
MOD - [2014-09-28 02:27:49 | 000,110,080 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\pywintypes27.dll
MOD - [2014-09-28 02:27:49 | 000,087,040 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\_ctypes.pyd
MOD - [2014-09-28 02:27:49 | 000,070,656 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\wx._html2.pyd
MOD - [2014-09-28 02:27:49 | 000,035,840 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\win32process.pyd
MOD - [2014-09-28 02:27:49 | 000,026,624 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\_multiprocessing.pyd
MOD - [2014-09-28 02:27:49 | 000,024,064 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\win32pipe.pyd
MOD - [2014-09-28 02:27:48 | 001,175,040 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\wx._core_.pyd
MOD - [2014-09-28 02:27:48 | 001,062,400 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\wx._controls_.pyd
MOD - [2014-09-28 02:27:48 | 000,735,232 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\wx._misc_.pyd
MOD - [2014-09-28 02:27:48 | 000,686,080 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\unicodedata.pyd
MOD - [2014-09-28 02:27:48 | 000,557,056 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\pysqlite2._sqlite.pyd
MOD - [2014-09-28 02:27:48 | 000,521,680 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\windows._lib_cacheinvalidation.pyd
MOD - [2014-09-28 02:27:48 | 000,364,544 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\pythoncom27.dll
MOD - [2014-09-28 02:27:48 | 000,320,512 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\win32com.shell.shell.pyd
MOD - [2014-09-28 02:27:48 | 000,128,512 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\_elementtree.pyd
MOD - [2014-09-28 02:27:48 | 000,127,488 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\pyexpat.pyd
MOD - [2014-09-28 02:27:48 | 000,122,368 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\wx._wizard.pyd
MOD - [2014-09-28 02:27:48 | 000,119,808 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\win32file.pyd
MOD - [2014-09-28 02:27:48 | 000,108,544 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\win32security.pyd
MOD - [2014-09-28 02:27:48 | 000,098,816 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\win32api.pyd
MOD - [2014-09-28 02:27:48 | 000,044,032 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\_socket.pyd
MOD - [2014-09-28 02:27:48 | 000,038,912 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\win32inet.pyd
MOD - [2014-09-28 02:27:48 | 000,025,600 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\win32pdh.pyd
MOD - [2014-09-28 02:27:48 | 000,022,528 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\win32ts.pyd
MOD - [2014-09-28 02:27:48 | 000,018,432 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\win32event.pyd
MOD - [2014-09-28 02:27:48 | 000,017,408 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\win32profile.pyd
MOD - [2014-09-28 02:27:48 | 000,011,264 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\win32crypt.pyd
MOD - [2014-09-28 02:27:48 | 000,010,240 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Temp\_MEI59442\select.pyd
MOD - [2014-09-13 02:20:58 | 003,610,624 | ---- | M] () -- C:\Users\Chrisso\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll
MOD - [2014-09-12 02:04:35 | 001,669,632 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\d941c7e0001a4d98e39785da42b57341\Microsoft.VisualBasic.ni.dll
MOD - [2014-09-12 02:03:20 | 001,051,136 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\ef19f3d0c255664d453183a254330b56\System.Management.ni.dll
MOD - [2014-09-12 01:55:14 | 002,297,344 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\af8fbf8264223a599b742984ceeb2b35\System.Core.ni.dll
MOD - [2014-09-11 19:24:21 | 001,840,640 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\5dfbb403257456f8ac25042ba9fdc5cc\System.Web.Services.ni.dll
MOD - [2014-09-11 19:23:36 | 000,628,224 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\72a294f179cce915536cc397c7c8bc30\System.EnterpriseServices.ni.dll
MOD - [2014-09-11 19:23:32 | 000,627,200 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\e0a1d8355d2d8b99cff51b9df27c8097\System.Transactions.ni.dll
MOD - [2014-09-11 19:23:26 | 006,638,592 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\5350f2e8c21ce0ac7846636f8e3843ab\System.Data.ni.dll
MOD - [2014-09-11 19:23:06 | 001,117,184 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\cfcb2452402700a5a28c1f1752516049\System.DirectoryServices.ni.dll
MOD - [2014-09-11 19:21:31 | 012,435,968 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\3f2952ec748f60fbb5deacfc4db0a2a3\System.Windows.Forms.ni.dll
MOD - [2014-09-11 19:21:05 | 001,593,344 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\8b7f86e5a6f0aa23f4b25dfeeaa6b318\System.Drawing.ni.dll
MOD - [2014-09-11 19:20:54 | 000,025,600 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\0483c93466914f3fbd5b44454b0c8a98\Accessibility.ni.dll
MOD - [2014-09-11 19:20:37 | 005,467,648 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\3fad44f7fd9f6c117eb02265ab63f80d\System.Xml.ni.dll
MOD - [2014-09-11 19:20:22 | 000,978,432 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\5bf56d6064af88d8812a3f78e0dfd376\System.Configuration.ni.dll
MOD - [2014-09-11 19:17:50 | 007,989,760 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System\95854f4f1f37b8eab1b1e3d7103b48ef\System.ni.dll
MOD - [2014-09-11 18:26:41 | 011,497,984 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
MOD - [2014-07-24 16:05:40 | 000,068,760 | ---- | M] () -- C:\Program Files\Livedrive\Native.dll
MOD - [2014-07-24 15:58:30 | 000,816,128 | ---- | M] () -- C:\Program Files\Livedrive\Localisation.dll
MOD - [2014-04-02 03:58:03 | 000,390,472 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Google\Chrome\Application\34.0.1847.116\ppGoogleNaClPluginChrome.dll
MOD - [2014-04-02 03:57:59 | 004,081,480 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Google\Chrome\Application\34.0.1847.116\pdf.dll
MOD - [2014-04-02 03:57:54 | 000,674,632 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Google\Chrome\Application\34.0.1847.116\libglesv2.dll
MOD - [2014-04-02 03:57:53 | 000,093,000 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Google\Chrome\Application\34.0.1847.116\libegl.dll
MOD - [2014-04-02 03:57:52 | 001,647,432 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Google\Chrome\Application\34.0.1847.116\ffmpegsumo.dll
MOD - [2014-04-02 03:57:49 | 000,065,352 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\Google\Chrome\Application\34.0.1847.116\chrome_elf.dll
MOD - [2014-03-21 00:49:19 | 002,952,704 | ---- | M] () -- C:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2014-03-04 07:57:21 | 000,261,632 | ---- | M] () -- C:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
MOD - [2013-09-05 01:14:10 | 004,300,456 | ---- | M] () -- C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2013-08-23 21:01:44 | 025,100,288 | ---- | M] () -- C:\Users\Chrisso\AppData\Roaming\Dropbox\bin\libcef.dll
MOD - [2013-01-23 13:29:48 | 000,150,264 | ---- | M] () -- C:\Program Files\Lexmark Pro200-S500 Series\ezprint.exe
MOD - [2013-01-23 13:29:47 | 000,772,712 | ---- | M] () -- C:\Program Files\Lexmark Pro200-S500 Series\lxebmon.exe
MOD - [2012-12-18 11:03:12 | 000,167,936 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\System.Xml.resources\2.0.0.0_pl_b77a5c561934e089\System.Xml.resources.dll
MOD - [2011-09-05 09:19:00 | 000,028,672 | ---- | M] () -- C:\Program Files\ASUS\ASUS WebStorage\3.0.143.296\AxInterop.ShockwaveFlashObjects.dll
MOD - [2011-07-28 16:20:34 | 000,270,336 | ---- | M] () -- C:\Program Files\Livedrive\AlphaFS.dll
MOD - [2010-11-13 04:39:55 | 000,425,984 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_pl_b77a5c561934e089\System.Windows.Forms.resources.dll
MOD - [2010-11-13 04:39:47 | 000,311,296 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll
MOD - [2010-07-23 04:10:22 | 000,010,856 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\coprocmanager\detoured.dll
MOD - [2010-07-13 02:29:42 | 000,143,360 | ---- | M] () -- C:\Program Files\Sony\Reader\Data\bin\launcher\connectionDetector.dll
MOD - [2010-07-13 02:28:42 | 000,856,064 | ---- | M] () -- C:\Program Files\Sony\Reader\Data\bin\launcher\fsk.dll
MOD - [2010-07-13 02:26:12 | 000,018,432 | ---- | M] () -- C:\Program Files\Sony\Reader\Data\bin\launcher\FskNetInterface.dll
MOD - [2010-07-13 02:25:56 | 000,008,704 | ---- | M] () -- C:\Program Files\Sony\Reader\Data\bin\launcher\FskTimeHardware.dll
MOD - [2010-07-13 02:25:50 | 000,028,160 | ---- | M] () -- C:\Program Files\Sony\Reader\Data\bin\launcher\ticket.dll
MOD - [2010-07-13 02:25:42 | 000,011,776 | ---- | M] () -- C:\Program Files\Sony\Reader\Data\bin\launcher\ebookDeviceNotifier.dll
MOD - [2010-07-13 02:22:36 | 000,020,480 | ---- | M] () -- C:\Program Files\Sony\Reader\Data\bin\FskinLocalize.dll
MOD - [2010-07-13 02:22:02 | 000,009,728 | ---- | M] () -- C:\Program Files\Sony\Reader\Data\bin\FskPower.dll
MOD - [2010-07-13 02:16:16 | 000,118,784 | ---- | M] () -- C:\Program Files\Sony\Reader\Data\bin\FskDocumentViewer.dll
MOD - [2010-07-13 02:15:58 | 000,010,240 | ---- | M] () -- C:\Program Files\Sony\Reader\Data\bin\FskMobileMediaDevice.dll
MOD - [2010-07-13 02:15:52 | 000,233,472 | ---- | M] () -- C:\Program Files\Sony\Reader\Data\bin\Fskin.dll
MOD - [2010-07-13 02:13:42 | 000,033,792 | ---- | M] () -- C:\Program Files\Sony\Reader\Data\bin\FskMediaPlayers.dll
MOD - [2010-07-13 02:10:56 | 000,172,032 | ---- | M] () -- C:\Program Files\Sony\Reader\Data\bin\launcher\USBDetector.dll
MOD - [2010-06-10 22:12:06 | 000,414,384 | ---- | M] () -- C:\Program Files\ASUS\Eee Docking\Eee Docking.exe
MOD - [2010-05-21 22:42:58 | 000,132,384 | ---- | M] () -- C:\Program Files\WIDCOMM\Bluetooth Software\BTKeyInd.dll
MOD - [2010-04-05 05:56:07 | 000,716,954 | ---- | M] () -- C:\Program Files\Lexmark Pro200-S500 Series\epwizard.dll
MOD - [2010-04-05 05:55:15 | 000,159,890 | ---- | M] () -- C:\Program Files\Lexmark Pro200-S500 Series\customui.dll
MOD - [2010-04-05 05:55:04 | 000,061,604 | ---- | M] () -- C:\Program Files\Lexmark Pro200-S500 Series\epfunct.dll
MOD - [2010-04-05 05:54:59 | 000,123,033 | ---- | M] () -- C:\Program Files\Lexmark Pro200-S500 Series\eputil.dll
MOD - [2010-04-05 05:54:52 | 000,143,502 | ---- | M] () -- C:\Program Files\Lexmark Pro200-S500 Series\imagutil.dll
MOD - [2010-04-02 22:23:36 | 000,815,104 | ---- | M] () -- C:\Program Files\Sony\Reader\Data\bin\FskSecurity.dll
MOD - [2010-04-02 21:44:16 | 000,086,016 | ---- | M] () -- C:\Program Files\Sony\Reader\Data\bin\launcher\ebookUsb.dll
MOD - [2010-04-01 12:24:28 | 001,159,168 | ---- | M] () -- C:\Program Files\Lexmark Pro200-S500 Series\lxebdrs.dll
MOD - [2010-04-01 12:23:27 | 000,389,120 | ---- | M] () -- C:\Program Files\Lexmark Pro200-S500 Series\lxebscw.dll
MOD - [2009-06-23 06:11:11 | 000,094,208 | ---- | M] () -- C:\Program Files\Lexmark Pro200-S500 Series\epoemdll.dll
MOD - [2009-06-23 06:10:44 | 000,049,152 | ---- | M] () -- C:\Program Files\Lexmark Pro200-S500 Series\epstring.dll
MOD - [2009-06-23 06:09:46 | 002,203,648 | ---- | M] () -- C:\Program Files\Lexmark Pro200-S500 Series\epwizres.dll
MOD - [2009-05-27 07:16:50 | 000,192,512 | ---- | M] () -- C:\Windows\System32\spool\drivers\w32x86\3\lxebdatr.dll
MOD - [2009-04-07 14:25:27 | 000,409,600 | ---- | M] () -- C:\Program Files\Lexmark Pro200-S500 Series\iptk.dll
MOD - [2009-03-10 00:43:49 | 000,155,648 | ---- | M] () -- C:\Program Files\Lexmark Pro200-S500 Series\lxebcaps.dll
MOD - [2009-03-02 09:25:47 | 000,151,552 | ---- | M] () -- C:\Program Files\Lexmark Pro200-S500 Series\lxebptp.dll
MOD - [2007-05-18 01:05:50 | 000,116,240 | R--- | M] () -- C:\Program Files\Mindjet\MindManager 7\zlib.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - File not found [Auto | Stopped] -- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.1.9\ToolbarUpdater.exe -- (vToolbarUpdater18.1.9)
SRV - File not found [On_Demand | Stopped] -- C:\Program Files\Nitro\Pro 9\NitroPDFDriverService9.exe -- (NitroDriverReadSpool9)
SRV - File not found [Auto | Stopped] -- F:\Program Files\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe -- (ABBYY.Licensing.PDFTransformer.Classic.3.0)
SRV - [2014-09-18 23:18:50 | 000,114,288 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014-09-01 00:37:11 | 000,262,320 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014-08-25 11:42:20 | 003,242,000 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2014\avgidsagent.exe -- (AVGIDSAgent)
SRV - [2014-08-25 11:38:58 | 000,289,328 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG2014\avgwdsvc.exe -- (avgwd)
SRV - [2014-08-18 23:36:05 | 000,108,032 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\windows\System32\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV - [2014-07-24 16:05:42 | 000,156,312 | ---- | M] () [Auto | Running] -- C:\Program Files\Livedrive\VSSService.exe -- (LivedriveVSSService)
SRV - [2014-07-14 18:21:46 | 001,390,176 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
SRV - [2014-07-14 18:21:06 | 001,767,520 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
SRV - [2014-05-01 09:49:58 | 000,022,016 | ---- | M] (Apache Software Foundation) [On_Demand | Stopped] -- d:\wamp\bin\apache\apache2.4.9\bin\httpd.exe -- (wampapache)
SRV - [2014-05-01 09:06:12 | 010,959,360 | ---- | M] () [On_Demand | Stopped] -- d:\wamp\bin\mysql\mysql5.6.17\bin\mysqld.exe -- (wampmysqld)
SRV - [2013-12-06 15:03:45 | 002,151,744 | ---- | M] (IObit) [Auto | Running] -- C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe -- (LiveUpdateSvc)
SRV - [2013-10-23 09:15:08 | 000,172,192 | R--- | M] (Skype Technologies) [On_Demand | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013-10-07 09:42:26 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\Windows\System32\NLSSRV32.EXE -- (nlsX86cc)
SRV - [2013-06-26 19:23:04 | 000,207,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2013-06-26 19:23:00 | 000,523,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2013-05-27 06:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2013-02-25 13:37:30 | 000,101,376 | ---- | M] (Freemake) [On_Demand | Stopped] -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe -- (Freemake Improver)
SRV - [2013-02-25 13:37:30 | 000,009,216 | ---- | M] (Ellora Assets Corp.) [On_Demand | Stopped] -- C:\Program Files\Freemake\CaptureLib\CaptureLibService.exe -- (FreemakeVideoCapture)
SRV - [2012-01-20 10:00:54 | 000,077,824 | ---- | M] (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) [Auto | Running] -- C:\Windows\System32\PrintCtrl.exe -- (Printer Control)
SRV - [2011-11-10 15:17:31 | 000,167,264 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe -- (AVG Security Toolbar Service)
SRV - [2010-12-19 21:40:22 | 000,597,760 | ---- | M] (Sandler Consulting) [On_Demand | Stopped] -- C:\Windows\System32\T37FSPSuppEmail.exe -- (T37FSPSuppEmail)
SRV - [2010-11-20 22:00:36 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2010-08-19 10:52:04 | 000,229,376 | ---- | M] () [Auto | Running] -- C:\ProgramData\DatacardService\DCService.exe -- (DCService.exe)
SRV - [2010-05-21 22:42:48 | 000,652,576 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins)
SRV - [2010-04-14 14:56:01 | 000,598,696 | ---- | M] ( ) [Auto | Running] -- C:\Windows\System32\lxebcoms.exe -- (lxeb_device)
SRV - [2010-04-14 14:55:54 | 000,193,192 | ---- | M] () [Auto | Stopped] -- C:\windows\System32\spool\DRIVERS\W32X86\3\\lxebserv.exe -- (lxebCATSCustConnectService)
SRV - [2010-04-02 22:34:12 | 000,073,728 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe -- (Sony SCSI Helper Service)
SRV - [2010-03-10 15:26:48 | 000,189,728 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
SRV - [2010-02-19 14:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009-12-23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2009-08-19 02:35:56 | 000,219,136 | ---- | M] () [Auto | Running] -- C:\Windows\System32\AsusService.exe -- (AsusService)
SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009-06-05 04:03:06 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON)
SRV - [2008-09-24 15:32:48 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ewusbdev.sys -- (hwusbdev)
DRV - File not found [Kernel | System | Stopped] --  -- (ASPI32)
DRV - File not found [Kernel | On_Demand | Unknown] --  -- (a5awdvd3)
DRV - [2014-08-07 17:16:50 | 000,042,784 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtpx86.sys -- (avgtp)
DRV - [2014-08-06 10:49:48 | 000,098,584 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\System32\drivers\avgmfx86.sys -- (Avgmfx86)
DRV - [2014-07-21 21:03:22 | 000,200,984 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\System32\drivers\avgidsdriverx.sys -- (AVGIDSDriver)
DRV - [2014-06-30 12:43:12 | 000,121,624 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\System32\drivers\avgdiskx.sys -- (Avgdiskx)
DRV - [2014-06-17 16:22:02 | 000,188,696 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\System32\drivers\avgldx86.sys -- (Avgldx86)
DRV - [2014-06-17 16:21:22 | 000,197,400 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgtdix.sys -- (Avgtdix)
DRV - [2014-06-17 16:18:00 | 000,241,944 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\System32\drivers\avglogx.sys -- (Avglogx)
DRV - [2014-06-17 16:17:58 | 000,147,736 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\System32\drivers\avgidshx.sys -- (AVGIDSHX)
DRV - [2014-06-17 16:06:22 | 000,027,416 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\System32\drivers\avgrkx86.sys -- (Avgrkx86)
DRV - [2014-06-17 16:06:20 | 000,021,272 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\System32\drivers\avgidsshimx.sys -- (AVGIDSShim)
DRV - [2013-06-26 19:23:04 | 000,020,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftvollh.sys -- (Sftvol)
DRV - [2013-06-26 19:23:00 | 000,197,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftplaylh.sys -- (Sftplay)
DRV - [2013-06-26 19:23:00 | 000,024,232 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\Sftredirlh.sys -- (Sftredir)
DRV - [2013-06-26 19:22:58 | 000,583,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftfslh.sys -- (Sftfs)
DRV - [2013-06-21 02:07:52 | 000,181,912 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudmdm.sys -- (ssudmdm)
DRV - [2013-06-21 02:07:52 | 000,084,248 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudbus.sys -- (dg_ssudbus)
DRV - [2013-03-24 03:38:56 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2012-11-10 10:50:32 | 000,299,144 | ---- | M] (EldoS Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\cbfs3.sys -- (cbfs3)
DRV - [2011-02-11 23:23:34 | 000,035,088 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\npf.sys -- (npf)
DRV - [2010-11-20 12:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010-11-20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010-11-19 00:06:52 | 000,231,248 | ---- | M] (TrueCrypt Foundation) [Kernel | System | Running] -- C:\Windows\System32\drivers\truecrypt.sys -- (truecrypt)
DRV - [2010-07-23 04:10:39 | 000,068,200 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2010-07-23 04:10:29 | 000,019,656 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\nvpciflt.sys -- (nvpciflt)
DRV - [2010-07-23 04:10:27 | 010,913,672 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2010-05-20 12:02:32 | 000,013,224 | ---- | M] (ASUSTek Computer Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\AiDriver.sys -- (AiDriver)
DRV - [2010-05-10 11:28:15 | 000,068,208 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\L1C62x86.sys -- (L1C)
DRV - [2010-04-09 15:24:12 | 000,063,616 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ew_jubusenum.sys -- (huawei_enumerator)
DRV - [2010-03-31 03:40:20 | 000,011,520 | ---- | M] () [Kernel | System | Running] -- C:\Windows\System32\drivers\AsUpIO.sys -- (AsUpIO)
DRV - [2010-03-25 10:08:38 | 000,105,984 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2010-03-20 11:56:04 | 000,101,504 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - [2010-01-22 13:21:48 | 000,139,648 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV - [2010-01-22 13:21:46 | 000,059,904 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nusb3hub.sys -- (nusb3hub)
DRV - [2009-07-20 11:29:40 | 000,013,880 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr)
DRV - [2009-07-14 02:18:07 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV - [2009-07-14 01:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp)
DRV - [2009-07-14 00:02:46 | 001,096,704 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2002-04-08 17:20:00 | 000,073,728 | ---- | M] (Rainbow Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\SENTINEL.SYS -- (Sentinel)
DRV - [2002-04-08 17:20:00 | 000,020,032 | ---- | M] (Rainbow Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\SNTNLUSB.SYS -- (Sntnlusb)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.bing.com/search?q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/search?q={searchTerms}
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://eeepc.asus.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://eeepc.asus.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\..\SearchScopes,DefaultScope = 
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..extensions.enabledAddons: %7Bd57c9ff1-6389-48fc-b770-f78bd89b6e8a%7D:1.47
FF - prefs.js..extensions.enabledAddons: sendtoreader-addon%40sendtoreader.com:1.6
FF - prefs.js..extensions.enabledAddons: %7B317B5128-0B0B-49b2-B2DB-1E7560E16C74%7D:2.8.15
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:32.0.2
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF32_14_0_0_179.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nitropdf.com/NitroPDF: C:\Program Files\Nitro\Pro 9\npnitromozilla.dll File not found
FF - HKLM\Software\MozillaPlugins\@nitropdf.com/NitroPDF.PrevVerNPR:  File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@sony.com/eBookLibrary: C:\Program Files\Sony\Reader\Data\bin\npebldetectmoz.dll (Sony Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF - HKCU\Software\MozillaPlugins\@citrixonline.com/appdetectorplugin: C:\Users\Chrisso\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Chrisso\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\Chrisso\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Chrisso\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Chrisso\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmdownloader@gmail.com: C:\Program Files\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\ [2013-03-10 19:47:27 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\ytfmdownloader@gmail.com: C:\Program Files\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\ [2013-03-10 19:47:27 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 32.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 32.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 32.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 32.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
 
[2011-03-12 20:54:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chrisso\AppData\Roaming\mozilla\Extensions
[2011-03-12 20:54:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chrisso\AppData\Roaming\mozilla\Extensions\celtx@celtx.com
[2011-08-04 01:11:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chrisso\AppData\Roaming\mozilla\Firefox\extensions
[2011-08-04 01:11:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chrisso\AppData\Roaming\mozilla\Firefox\extensions\{62760FD6-B943-48C9-AB09-F99C6FE96088}
[2014-09-05 13:17:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Chrisso\AppData\Roaming\mozilla\Firefox\Profiles\qalucvku.default\extensions
[2014-09-05 13:17:05 | 000,000,000 | ---D | M] (SeoQuake) -- C:\Users\Chrisso\AppData\Roaming\mozilla\Firefox\Profiles\qalucvku.default\extensions\{317B5128-0B0B-49b2-B2DB-1E7560E16C74}
[2014-06-05 00:49:57 | 000,203,751 | ---- | M] () (No name found) -- C:\Users\Chrisso\AppData\Roaming\mozilla\firefox\profiles\qalucvku.default\extensions\jid0-GokC6R49cBZciOKniufAR4QKFWc@jetpack.xpi
[2014-06-11 16:36:44 | 000,497,087 | ---- | M] () (No name found) -- C:\Users\Chrisso\AppData\Roaming\mozilla\firefox\profiles\qalucvku.default\extensions\jid1-aY61q9iadjWyYg@jetpack.xpi
[2014-06-02 18:59:03 | 000,022,648 | ---- | M] () (No name found) -- C:\Users\Chrisso\AppData\Roaming\mozilla\firefox\profiles\qalucvku.default\extensions\sendtoreader-addon@sendtoreader.com.xpi
[2014-06-01 01:22:57 | 000,150,579 | ---- | M] () (No name found) -- C:\Users\Chrisso\AppData\Roaming\mozilla\firefox\profiles\qalucvku.default\extensions\{d57c9ff1-6389-48fc-b770-f78bd89b6e8a}.xpi
[2014-09-18 23:17:02 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2014-09-18 23:18:59 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://www.onet.pl/
CHR - plugin: Error reading preferences file
CHR - Extension: Dysk Google = C:\Users\Chrisso\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: Mindjet = C:\Users\Chrisso\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgpkinhfhnglbhoeoeooekalejbhbhgl\0.1.6_0\
CHR - Extension: Kindle Cloud Launcher = C:\Users\Chrisso\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabgeinondjemaplkkcifnplhcbeeiob\0.12_0\
CHR - Extension: Adblock Plus = C:\Users\Chrisso\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.8.5_0\
CHR - Extension: Video download helper = C:\Users\Chrisso\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbkchnicaiglcjpgbmpfmoafckkomdcm\1.1.6.2_0\
CHR - Extension: Realm of the Mad God = C:\Users\Chrisso\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhjfmaldpppkmjjgkmadddbanpabfflp\1.0.0.3_0\
CHR - Extension: Realm of the Mad God = C:\Users\Chrisso\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhjfmaldpppkmjjgkmadddbanpabfflp\1.0.0.3_0\~
CHR - Extension: Lucidchart Schematy - Desktop = C:\Users\Chrisso\AppData\Local\Google\Chrome\User Data\Default\Extensions\djejicklhojeokkfmdelnempiecmdomj\1.92.15_0\
CHR - Extension: Springpad = C:\Users\Chrisso\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkmopoamfjnmppabeaphohombnjcjgla\6_0\
CHR - Extension: Eurosport.com = C:\Users\Chrisso\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdgbgdcalebljdefaifebkkdcemjlaai\3.0.3_0\
CHR - Extension: TinEye Reverse Image Search = C:\Users\Chrisso\AppData\Local\Google\Chrome\User Data\Default\Extensions\haebnnbpedcbhciplfhjjkbafijpncjl\1.1.4_0\
CHR - Extension: Symphonical = C:\Users\Chrisso\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcgllakjbbignhambejggdljofdagfja\6.1.10_0\
CHR - Extension: Google Keep – notatki i listy = C:\Users\Chrisso\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki\2.0.14395.1218_0\
CHR - Extension: Send to Kindle (by Klip.me) = C:\Users\Chrisso\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipkfnchcgalnafehpglfbommidgmalan\3.2.5_0\
CHR - Extension: Evernote Web = C:\Users\Chrisso\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbfehkoinhhcknnbdgnnmjhiladcgbol\1.0.8_0\
CHR - Extension: Skype Click to Call = C:\Users\Chrisso\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\7.3.16540.9015_0\
CHR - Extension: Extensions Manager (aka Switcher) = C:\Users\Chrisso\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpleipinonnoibneeejgjnoeekmbopbc\0.2.1.2_0\
CHR - Extension: Save to Pocket = C:\Users\Chrisso\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.9.3_0\
CHR - Extension: Google Wallet = C:\Users\Chrisso\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_1\
CHR - Extension: Push to Kindle = C:\Users\Chrisso\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnaiinchjaonopoejhknmgjingcnaloc\1.0_0\
CHR - Extension: SEO Analysis with Seoptimer = C:\Users\Chrisso\AppData\Local\Google\Chrome\User Data\Default\Extensions\pplbjgemahdghhnelnlihpflpdkkmmgj\0.5_0\
 
O1 HOSTS File: ([2014-06-25 01:12:44 | 000,000,851 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (CmjBrowserHelperObject Object) - {07A11D74-9D25-4fea-A833-8B0D76A5577A} - C:\Program Files\Mindjet\MindManager 7\Mm7InternetExplorer.dll (Mindjet)
O2 - BHO: (ExplorerWnd Helper) - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Lexmark ) - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll ()
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O4 - HKLM..\Run: [ASUS Screen Saver Protector] C:\Windows\AsScrPro.exe (ASUS)
O4 - HKLM..\Run: [ASUSPRP] C:\Program Files\ASUS\APRP\aprp.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [ASUSWebStorage] C:\Program Files\ASUS\ASUS WebStorage\3.0.143.296\AsusWSPanel.exe (ASUS Cloud Corporation)
O4 - HKLM..\Run: [AVG_UI] C:\Program Files\AVG\AVG2014\avgui.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [CapsHook] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Snapfire\Corel Photo Downloader.exe (Corel, Inc.)
O4 - HKLM..\Run: [DataCardMonitor] C:\Program Files\blueconnect\DataCardMonitor.exe (Huawei Technologies Co., Ltd.)
O4 - HKLM..\Run: [Eee Docking] C:\Program Files\ASUS\Eee Docking\Eee Docking.exe ()
O4 - HKLM..\Run: [e-Kiosk] C:\Program Files\e-Kiosk Reader\eGazetaST.exe (e-Kiosk S.A.)
O4 - HKLM..\Run: [EzPrint] C:\Program Files\Lexmark Pro200-S500 Series\ezprint.exe ()
O4 - HKLM..\Run: [HotkeyMon] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [HotkeyService] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4 - HKLM..\Run: [iSeriesCharge] C:\Program Files\ASUS\USBChargeSetting\iSeriesCharge.exe (AsusTek Computer Inc.)
O4 - HKLM..\Run: [LiveUpdate] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [lxebmon.exe] C:\Program Files\Lexmark Pro200-S500 Series\lxebmon.exe ()
O4 - HKLM..\Run: [MDS_Menu] D:\Program Files\CyberLink\MediaShow4\MediaShow4\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [MMReminderService] C:\Program Files\Mindjet\MindManager 7\MmReminderService.exe (Mindjet)
O4 - HKLM..\Run: [OOBESetup] C:\Program Files\asus\OOBERegBackup\OOBERegBackup.exe (ASUSTeK Computer Inc.)
O4 - HKLM..\Run: [PrintDisp] C:\Windows\System32\PrintDisp.exe (ActMask Co.,Ltd - http://www.all2pdf.com)
O4 - HKLM..\Run: [Reader Library Launcher] C:\Program Files\Sony\Reader\Data\bin\launcher\Reader Library Launcher.exe (Sony Corporation)
O4 - HKLM..\Run: [SuperHybridEngine] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [SynAsusAcpi] C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe (Synaptics Incorporated)
O4 - HKCU..\Run: [AdobeBridge]  File not found
O4 - HKCU..\Run: [AlcoholAutomount] C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe (Alcohol Soft Development Team)
O4 - HKCU..\Run: [GoogleDriveSync] C:\Program Files\Google\Drive\googledrivesync.exe (Google)
O4 - HKCU..\Run: [HW_OPENEYE_OUC_blueconnect] C:\Program Files\blueconnect\UpdateDog\ouc.exe (Huawei Technologies Co., Ltd.)
O4 - HKCU..\Run: [Livedrive] C:\Program Files\Livedrive\Livedrive.exe (Livedrive Internet Ltd)
O4 - HKCU..\Run: [Syncables] C:\Program Files\syncables\syncables desktop\syncables.exe (syncables, LLC)
O4 - Startup: C:\Users\Chrisso\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Chrisso\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: check in my books - Reg Error: Value error. File not found
O8 - Extra context menu item: Dodaj link do kolejki BID - D:\Program Files\Bulk Image Downloader\iemenu\iebidlinkqueue.htm ()
O8 - Extra context menu item: Dodaj stronę do kolejki BID - D:\Program Files\Bulk Image Downloader\iemenu\iebidqueue.htm ()
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Otwórz link w BID - D:\Program Files\Bulk Image Downloader\iemenu\iebidlink.htm ()
O8 - Extra context menu item: Otwórz stronę w BID - D:\Program Files\Bulk Image Downloader\iemenu\iebid.htm ()
O8 - Extra context menu item: Otwórz stronę w BID Link Explorer - D:\Program Files\Bulk Image Downloader\iemenu\iebidlinkexplorer.htm ()
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Wyślij &do programu OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error: Key error. File not found
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O9 - Extra Button: Send to Mindjet MindManager - {941E1A34-C6AF-4baa-A973-224F9C3E04BF} - C:\Program Files\Mindjet\MindManager 7\Mm7InternetExplorer.dll (Mindjet)
O9 - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 10.51.2)
O16 - DPF: {CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 1.6.0_39)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 10.51.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 217.113.224.135 217.113.224.36
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E84353BA-75DE-440E-8BD2-D0CC877FF26C}: DhcpNameServer = 217.113.224.135 217.113.224.36
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (c:\windows\system32\nvinit.dll) - C:\Windows\System32\nvinit.dll (NVIDIA Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\System32\CbFsMntNtf3.dll (EldoS Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O22 - SharedTaskScheduler: {5FF49FE8-B332-4CB9-B102-FB6951629E55} - Virtual Storage Mount Notification - C:\Windows\System32\CbFsMntNtf3.dll (EldoS Corporation)
O32 - HKLM CDRom: AutoRun - 0
O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2011-03-03 15:48:52 | 000,000,032 | RH-- | M] () - G:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{1a99d20d-46b5-11e0-993f-74f06dac3950}\Shell - "" = AutoRun
O33 - MountPoints2\{1a99d20d-46b5-11e0-993f-74f06dac3950}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{777c1d0e-9d7f-11e0-b72b-74f06dac3950}\Shell - "" = AutoRun
O33 - MountPoints2\{777c1d0e-9d7f-11e0-b72b-74f06dac3950}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{777c1d22-9d7f-11e0-b72b-74f06dac3950}\Shell - "" = AutoRun
O33 - MountPoints2\{777c1d22-9d7f-11e0-b72b-74f06dac3950}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\H\Shell - "" = AutoRun
O33 - MountPoints2\H\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2014-09-24 23:23:18 | 000,000,000 | ---D | C] -- C:\Users\Chrisso\Desktop\__MACOSX
[2014-09-24 23:23:17 | 000,000,000 | ---D | C] -- C:\Users\Chrisso\Desktop\Pulitzer 1990-2012
[2014-09-24 09:54:10 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\tzres.dll
[2014-09-22 19:51:36 | 000,000,000 | ---D | C] -- C:\Users\Chrisso\Desktop\Różne
[2014-09-18 23:17:00 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2014-09-18 01:42:05 | 000,000,000 | ---D | C] -- C:\Users\Chrisso\Desktop\Prezentacje
[2014-09-15 12:12:59 | 000,000,000 | ---D | C] -- C:\Users\Chrisso\Desktop\JoannaTRUST
[2014-09-11 19:04:26 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2014-09-11 18:49:24 | 000,099,480 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\infocardapi.dll
[2014-09-11 18:49:17 | 000,008,856 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\icardres.dll
[2014-09-11 18:49:10 | 000,619,672 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\icardagt.exe
[2014-09-11 18:49:05 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\TsWpfWrp.exe
[2014-09-11 16:46:47 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iesetup.dll
[2014-09-11 16:46:46 | 002,724,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mshtml.tlb
[2014-09-11 16:46:45 | 000,440,320 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieui.dll
[2014-09-11 16:46:44 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MshtmlDac.dll
[2014-09-11 16:46:43 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jscript9diag.dll
[2014-09-11 16:46:42 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieetwcollectorres.dll
[2014-09-11 16:46:41 | 000,164,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msrating.dll
[2014-09-11 16:46:40 | 000,678,400 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieapfltr.dll
[2014-09-11 16:46:40 | 000,365,056 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dxtmsft.dll
[2014-09-11 16:46:40 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieUnatt.exe
[2014-09-11 16:46:40 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jsproxy.dll
[2014-09-11 16:46:39 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dxtrans.dll
[2014-09-11 16:46:39 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iernonce.dll
[2014-09-11 16:46:37 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\JavaScriptCollectionAgent.dll
[2014-09-11 16:46:36 | 001,068,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\mshtmlmedia.dll
[2014-09-11 16:46:36 | 000,646,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\MsSpellCheckingFacility.exe
[2014-09-11 16:46:36 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieetwcollector.exe
[2014-09-11 16:46:36 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ieetwproxystub.dll
[2014-09-11 16:46:35 | 000,673,792 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ie4uinit.exe
[2014-09-11 16:46:35 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msfeeds.dll
[2014-09-11 16:46:35 | 000,327,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iedkcs32.dll
[2014-09-11 16:46:28 | 004,232,704 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\jscript9.dll
[2014-09-11 16:46:26 | 002,014,208 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\inetcpl.cpl
[2014-09-11 16:41:56 | 002,285,056 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msmpeg2vdec.dll
[2014-09-11 14:17:53 | 000,536,576 | ---- | C] (SQLite Development Team) -- C:\windows\System32\sqlite3.dll
[2014-09-11 14:12:17 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014-09-11 13:18:23 | 000,000,000 | ---D | C] -- C:\FRST
[2014-09-10 13:48:46 | 000,000,000 | ---D | C] -- C:\Users\Chrisso\Desktop\Czcionki
[2014-09-10 09:43:52 | 001,987,584 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\d3d10warp.dll
[2014-09-10 09:43:45 | 000,793,600 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\TSWorkspace.dll
[2014-09-05 02:07:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EasySketchPro
[2014-09-05 02:05:43 | 000,000,000 | ---D | C] -- C:\Program Files\EasySketchPro
[2014-09-01 00:40:20 | 000,000,000 | ---D | C] -- C:\Users\Chrisso\AppData\Local\Adobe
[2014-08-31 02:27:32 | 000,149,440 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\storport.sys
[2014-08-31 02:27:32 | 000,027,072 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\Diskdump.sys
[2014-08-31 02:27:31 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\iologmsg.dll
[2014-08-31 02:26:52 | 000,646,144 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\osk.exe
[2014-08-31 02:26:23 | 001,805,824 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\authui.dll
[2014-08-31 02:26:23 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msihnd.dll
[2014-08-31 02:26:23 | 000,101,824 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\consent.exe
[2014-08-31 02:26:06 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\qedit.dll
[2014-08-31 02:26:04 | 000,187,840 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\FWPKCLNT.SYS
[2014-08-31 02:25:54 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ncrypt.dll
[2014-08-31 02:24:44 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wer.dll
[2014-08-31 02:24:25 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\sspisrv.dll
[2014-08-31 02:14:05 | 000,219,072 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\drivers\dxgmms1.sys
[2014-08-31 02:14:04 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\cdd.dll
[2014-08-31 02:12:22 | 003,969,984 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ntkrnlpa.exe
[2014-08-31 02:12:21 | 003,914,176 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\ntoskrnl.exe
[2014-08-31 02:12:17 | 000,538,112 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\objsel.dll
[2014-08-31 02:12:15 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\cngprovider.dll
[2014-08-31 02:12:15 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\adprovider.dll
[2014-08-31 02:12:15 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\capiprovider.dll
[2014-08-31 02:12:15 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dpapiprovider.dll
[2014-08-31 02:12:15 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\dimsroam.dll
[2014-08-31 02:12:14 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\wincredprovider.dll
[2014-08-31 02:11:29 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msxml6r.dll
[2014-08-31 02:11:28 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\windows\System32\msxml3r.dll
[3 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[3 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[12 C:\Users\Chrisso\Desktop\*.tmp files -> C:\Users\Chrisso\Desktop\*.tmp -> ]
[1 C:\windows\System32\*.tmp files -> C:\windows\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2014-09-28 02:53:05 | 000,000,518 | ---- | M] () -- C:\windows\tasks\G2MUpdateTask-S-1-5-21-3298792027-3563228929-1561543473-1002.job
[2014-09-28 02:38:44 | 000,009,920 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014-09-28 02:38:44 | 000,009,920 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014-09-28 02:26:04 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2014-09-28 02:26:01 | 2206,720,000 | -HS- | M] () -- C:\hiberfil.sys
[2014-09-26 09:59:56 | 000,741,124 | ---- | M] () -- C:\windows\System32\perfh015.dat
[2014-09-26 09:59:56 | 000,654,916 | ---- | M] () -- C:\windows\System32\perfh009.dat
[2014-09-26 09:59:56 | 000,156,408 | ---- | M] () -- C:\windows\System32\perfc015.dat
[2014-09-26 09:59:56 | 000,122,530 | ---- | M] () -- C:\windows\System32\perfc009.dat
[2014-09-24 23:33:54 | 000,032,256 | ---- | M] () -- C:\Users\Chrisso\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2014-09-24 19:54:35 | 000,021,633 | ---- | M] () -- C:\Users\Chrisso\Desktop\7065-26236-invoice-positionly.pdf
[2014-09-18 14:45:40 | 000,001,053 | ---- | M] () -- C:\Users\Chrisso\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2014-09-11 15:42:52 | 000,000,930 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job
[2014-09-09 23:47:10 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\windows\System32\tzres.dll
[2014-09-05 02:07:43 | 000,001,893 | ---- | M] () -- C:\Users\Public\Desktop\EasySketchPro.lnk
[2014-09-03 11:04:07 | 000,000,971 | ---- | M] () -- C:\Users\Public\Desktop\AVG 2014.lnk
[2014-09-01 00:37:10 | 000,699,568 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\System32\FlashPlayerApp.exe
[2014-09-01 00:37:10 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\System32\FlashPlayerCPLApp.cpl
[2014-08-31 01:13:58 | 004,128,040 | ---- | M] () -- C:\windows\System32\FNTCACHE.DAT
[3 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[3 C:\ProgramData\*.tmp files -> C:\ProgramData\*.tmp -> ]
[12 C:\Users\Chrisso\Desktop\*.tmp files -> C:\Users\Chrisso\Desktop\*.tmp -> ]
[1 C:\windows\System32\*.tmp files -> C:\windows\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2014-09-24 19:54:29 | 000,021,633 | ---- | C] () -- C:\Users\Chrisso\Desktop\7065-26236-invoice-positionly.pdf
[2014-09-05 02:07:43 | 000,001,893 | ---- | C] () -- C:\Users\Public\Desktop\EasySketchPro.lnk
[2014-05-04 00:41:03 | 000,002,339 | ---- | C] () -- C:\Users\Chrisso\AppData\Local\recently-used.xbel
[2014-04-29 13:18:43 | 000,000,000 | ---- | C] () -- C:\Program Files\Mozilla Firefoxavg-secure-search.xml
[2014-04-09 01:27:48 | 000,173,457 | ---- | C] () -- C:\Users\Chrisso\.spyglass.properties
[2014-03-11 19:37:28 | 000,007,608 | ---- | C] () -- C:\Users\Chrisso\AppData\Local\Resmon.ResmonCfg
[2014-02-16 23:46:53 | 000,004,774 | -H-- | C] () -- C:\Users\Chrisso\_viminfo
[2014-01-02 22:56:47 | 000,000,088 | RHS- | C] () -- C:\windows\System32\A7BE7327FF.sys
[2014-01-02 22:56:46 | 000,003,922 | -HS- | C] () -- C:\windows\System32\KGyGaAvL.sys
[2013-09-22 19:23:33 | 000,000,173 | ---- | C] () -- C:\Users\Chrisso\AppData\Roaming\WB.CFG
[2013-08-29 21:20:32 | 001,503,232 | ---- | C] () -- C:\windows\System32\ptj.exe
[2013-08-29 21:20:32 | 001,103,360 | ---- | C] () -- C:\windows\System32\cidfont.dll
[2013-08-29 21:20:30 | 004,369,408 | ---- | C] () -- C:\windows\System32\pdftk.exe
[2013-08-29 21:20:30 | 000,235,008 | ---- | C] () -- C:\windows\System32\office.exe
[2013-06-27 13:57:45 | 000,040,960 | ---- | C] () -- C:\windows\System32\lxebvs.dll
[2013-06-27 13:57:41 | 000,442,368 | ---- | C] ( ) -- C:\windows\System32\lxebcoin.dll
[2013-06-27 13:57:35 | 000,086,016 | ---- | C] () -- C:\windows\System32\lxebgcfg.dll
[2013-06-27 13:57:34 | 000,294,912 | ---- | C] () -- C:\windows\System32\lxebcui.dll
[2013-06-27 13:57:34 | 000,110,592 | ---- | C] () -- C:\windows\System32\lxebcuir.dll
[2013-06-27 13:55:12 | 000,364,544 | ---- | C] ( ) -- C:\windows\System32\lxebinpa.dll
[2013-06-27 13:55:12 | 000,356,352 | ---- | C] ( ) -- C:\windows\System32\LXEBhcp.dll
[2013-06-27 13:55:12 | 000,331,776 | ---- | C] () -- C:\windows\System32\LXEBinst.dll
[2013-06-27 13:55:11 | 001,048,576 | ---- | C] ( ) -- C:\windows\System32\lxebserv.dll
[2013-06-27 13:55:11 | 000,847,872 | ---- | C] ( ) -- C:\windows\System32\lxebusb1.dll
[2013-06-27 13:55:11 | 000,643,072 | ---- | C] ( ) -- C:\windows\System32\lxebpmui.dll
[2013-06-27 13:55:11 | 000,577,536 | ---- | C] ( ) -- C:\windows\System32\lxeblmpm.dll
[2013-06-27 13:55:11 | 000,344,064 | ---- | C] ( ) -- C:\windows\System32\lxebiesc.dll
[2013-06-27 13:55:11 | 000,262,144 | ---- | C] () -- C:\windows\System32\lxebinsb.dll
[2013-06-27 13:55:11 | 000,057,344 | ---- | C] () -- C:\windows\System32\lxebjswr.dll
[2013-06-27 13:55:10 | 000,688,128 | ---- | C] ( ) -- C:\windows\System32\lxebhbn3.dll
[2013-06-27 13:55:10 | 000,324,264 | ---- | C] ( ) -- C:\windows\System32\lxebih.exe
[2013-06-27 13:55:10 | 000,323,584 | ---- | C] () -- C:\windows\System32\lxebins.dll
[2013-06-27 13:55:10 | 000,208,896 | ---- | C] () -- C:\windows\System32\lxebgrd.dll
[2013-06-27 13:55:10 | 000,110,592 | ---- | C] () -- C:\windows\System32\lxebinsr.dll
[2013-06-27 13:55:10 | 000,090,112 | ---- | C] () -- C:\windows\System32\lxebcub.dll
[2013-06-27 13:55:10 | 000,036,864 | ---- | C] () -- C:\windows\System32\lxebcur.dll
[2013-06-27 13:55:09 | 000,802,816 | ---- | C] ( ) -- C:\windows\System32\lxebcomc.dll
[2013-06-27 13:55:09 | 000,598,696 | ---- | C] ( ) -- C:\windows\System32\lxebcoms.exe
[2013-06-27 13:55:09 | 000,372,736 | ---- | C] ( ) -- C:\windows\System32\lxebcomm.dll
[2013-06-27 13:55:09 | 000,253,952 | ---- | C] () -- C:\windows\System32\lxebcu.dll
[2013-06-27 13:55:08 | 000,373,416 | ---- | C] ( ) -- C:\windows\System32\lxebcfg.exe
[2013-05-15 21:35:30 | 000,031,432 | ---- | C] () -- C:\windows\System32\XalanMessages_1_10.dll
[2013-03-15 15:43:41 | 000,000,132 | ---- | C] () -- C:\windows\wmssetup.ini
[2013-03-10 01:43:11 | 000,000,046 | ---- | C] () -- C:\windows\System32\DonationCoder_urlsnooper_InstallInfo.dat
[2013-02-03 16:27:49 | 000,000,093 | ---- | C] () -- C:\windows\Cdplayer.ini
[2013-02-03 16:23:06 | 000,000,067 | ---- | C] () -- C:\windows\Apollo Audio DVD Creator.INI
[2013-02-01 01:43:18 | 000,044,544 | ---- | C] () -- C:\windows\System32\GIF89.DLL
[2012-12-30 16:17:47 | 001,391,616 | ---- | C] () -- C:\windows\System32\ActPDF.dll
[2012-12-30 16:17:10 | 000,691,200 | ---- | C] () -- C:\windows\System32\PrintLog.exe
[2011-06-10 01:26:28 | 000,000,016 | ---- | C] () -- C:\Users\Chrisso\AppData\Roaming\{D75486B4-C52F-4B7D-85A5-9AC1EB8D1D80}
[2011-03-06 17:41:23 | 000,000,136 | ---- | C] () -- C:\Users\Chrisso\AppData\Roaming\default.rss
[2011-02-10 21:58:07 | 000,032,256 | ---- | C] () -- C:\Users\Chrisso\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-07-30 02:16:06 | 000,131,984 | ---- | C] () -- C:\ProgramData\FullRemove.exe
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009-07-14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014-06-25 03:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009-07-14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2014-04-30 02:52:29 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\Affilorama
[2010-11-19 23:58:08 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\Asus
[2012-08-18 15:47:00 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\ASUS WebStorage
[2014-03-02 03:40:37 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\Audacity
[2010-12-18 11:27:32 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\AVG
[2013-10-03 11:35:34 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\AVG2014
[2013-08-13 14:30:18 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\Azuon
[2011-02-04 23:18:11 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\BID
[2012-01-15 06:32:05 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\blueconnect
[2013-10-03 21:55:03 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\calibre
[2013-12-15 01:21:45 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\DirectoryListPrintPro
[2013-03-10 01:43:11 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\DonationCoder
[2013-10-08 20:11:36 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\Downloaded Installations
[2014-09-28 02:30:16 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\Dropbox
[2013-07-25 16:18:00 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\e-Deklaracje
[2013-07-25 16:18:00 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1
[2014-01-31 23:16:59 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\e-Kiosk Reader
[2011-08-04 01:11:46 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\eBayDesktopShortcut
[2010-12-22 01:00:56 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\EeeStorageUploader
[2013-10-08 19:49:20 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\FileOpen
[2014-08-27 19:05:50 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\foobar2000
[2013-10-10 12:22:52 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\Foxit Advanced PDF Editor
[2013-10-10 12:23:19 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\Foxit Software
[2014-06-10 12:48:15 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\Free Monitor for Google
[2013-11-21 19:07:07 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\GHISLER
[2011-03-05 19:55:59 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\Greyfirst
[2013-02-08 16:00:16 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\ImgBurn
[2013-10-08 21:22:15 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\IObit
[2012-06-02 00:08:26 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\Jarte
[2010-12-25 20:26:43 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\JGsoft
[2014-07-13 20:36:25 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\KeywordAdvantage
[2014-03-16 00:53:10 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\MAGIX
[2014-08-03 19:46:13 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\MarketSamurai
[2014-07-20 19:44:04 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\MarketSamurai.6E37012E1CBD7F47B14488FCC715944F3EBDCEDC.1
[2013-06-04 00:40:36 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\misterInvestor
[2012-08-07 20:49:43 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\mkvtoolnix
[2013-05-26 22:28:35 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\Mr Capital
[2013-10-08 20:15:08 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\Nitro
[2013-10-08 21:00:59 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\Nitro PDF
[2010-12-17 00:11:27 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\Opera
[2012-08-07 20:23:04 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\PeaZip
[2011-08-04 02:07:16 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\PhotoScape
[2014-07-24 00:50:01 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\Serif
[2013-02-25 18:00:08 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\SoftGrid Client
[2012-12-18 16:40:10 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\Softplicity
[2014-01-10 16:00:08 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2014-08-19 11:58:54 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\TeamViewer
[2012-09-10 21:23:35 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\The Bat!
[2014-02-13 23:09:28 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\Thinstall
[2010-11-18 23:19:00 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\TP
[2014-04-30 02:53:33 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\Traffic Travis v4
[2010-11-20 22:07:34 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\TrueCrypt
[2013-10-03 11:31:34 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\TuneUp Software
[2014-02-05 00:13:00 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\Ulead Systems
[2014-08-27 11:02:00 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\Ultimate Player Radio
[2013-02-28 01:14:45 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\Windows Live Writer
[2014-08-13 00:06:18 | 000,000,000 | ---D | M] -- C:\Users\Chrisso\AppData\Roaming\XnView
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 192 bytes -> C:\Windows:nlsPreferences
@Alternate Data Stream - 143 bytes -> C:\ProgramData\Temp:AB689DEA
@Alternate Data Stream - 131 bytes -> C:\ProgramData\Temp:60002631
@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:0B4227B4

< End of report >