OTL logfile created on: 2010-07-24 23:11:34 - Run 3
OTL by OldTimer - Version 3.2.9.1     Folder = C:\Users\Gruby\Desktop
64bit- Enterprise Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 37,00% Memory free
4,00 Gb Paging File | 2,00 Gb Available in Paging File | 61,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 24,41 Gb Total Space | 2,27 Gb Free Space | 9,30% Space Free | Partition Type: NTFS
Drive D: | 97,66 Gb Total Space | 34,61 Gb Free Space | 35,44% Space Free | Partition Type: NTFS
Drive E: | 50,72 Gb Total Space | 9,59 Gb Free Space | 18,90% Space Free | Partition Type: NTFS
Drive F: | 95,93 Gb Total Space | 43,25 Gb Free Space | 45,09% Space Free | Partition Type: NTFS
Drive G: | 197,03 Gb Total Space | 18,97 Gb Free Space | 9,63% Space Free | Partition Type: NTFS
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: GRUBY-PC
Current User Name: Gruby
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: All users
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2010-07-24 22:51:06 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Gruby\Desktop\OTL.exe
PRC - [2010-07-19 22:59:01 | 000,365,248 | ---- | M] (F-Secure Corporation) -- C:\Program Files (x86)\F-Secure\Anti-Virus\fsav32.exe
PRC - [2010-07-19 22:58:36 | 000,057,000 | ---- | M] (F-Secure Corporation) -- C:\Program Files (x86)\F-Secure\ORSP Client\fsorsp.exe
PRC - [2010-06-30 14:52:22 | 000,836,464 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe
PRC - [2010-06-10 21:03:08 | 000,144,176 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2010-06-10 15:45:14 | 000,187,056 | ---- | M] (F-Secure Corporation) -- C:\Program Files (x86)\F-Secure\Common\FSMA32.EXE
PRC - [2010-06-10 15:45:12 | 000,199,344 | ---- | M] (F-Secure Corporation) -- C:\Program Files (x86)\F-Secure\Common\FSM32.EXE
PRC - [2010-06-10 15:45:12 | 000,088,752 | ---- | M] (F-Secure Corporation) -- C:\Program Files (x86)\F-Secure\Common\FSHDLL32.EXE
PRC - [2010-06-10 15:43:46 | 000,709,808 | ---- | M] (F-Secure Corporation) -- C:\Program Files (x86)\F-Secure\Anti-Virus\fssm32.exe
PRC - [2010-06-10 15:43:46 | 000,498,352 | ---- | M] (F-Secure Corporation) -- C:\Program Files (x86)\F-Secure\Anti-Virus\fsgk32.exe
PRC - [2010-06-10 15:43:46 | 000,219,824 | ---- | M] (F-Secure Corporation) -- C:\Program Files (x86)\F-Secure\Anti-Virus\fsgk32st.exe
PRC - [2010-05-28 13:04:52 | 000,911,920 | ---- | M] (Secunia) -- C:\Program Files (x86)\Secunia\PSI\psi.exe
PRC - [2010-04-03 16:59:00 | 000,240,232 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2010-03-30 22:37:05 | 000,862,208 | ---- | M] (Murray Hurps Corp Pty Ltd) -- C:\Program Files (x86)\Ad Muncher\AdMunch.exe
PRC - [2009-11-03 23:06:50 | 000,649,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2010-07-24 22:51:06 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Gruby\Desktop\OTL.exe
MOD - [2010-06-10 15:45:00 | 000,330,416 | ---- | M] (F-Secure Corporation) -- c:\Program Files (x86)\F-Secure\HIPS\fshook32.dll
MOD - [2009-07-14 03:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx
MOD - [2009-07-14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV:[b]64bit:[/b] - [2009-07-14 09:08:04 | 000,019,456 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\SysNative\wlms\wlms.exe -- (WLMS)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:56 | 000,195,072 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\umrdp.dll -- (UmRdpService)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:54 | 000,017,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\StorSvc.dll -- (StorSvc)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:53 | 001,361,920 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\PeerDistSvc.dll -- (PeerDistSvc)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:08 | 000,451,072 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\inetsrv\iisw3adm.dll -- (WAS)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:08 | 000,451,072 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\inetsrv\iisw3adm.dll -- (W3SVC)
SRV:[b]64bit:[/b] - [2009-07-14 03:40:24 | 000,689,152 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\cscsvc.dll -- (CscService)
SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,065,536 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysNative\inetsrv\apphostsvc.dll -- (AppHostSvc)
SRV - [2010-07-19 22:58:36 | 000,057,000 | ---- | M] (F-Secure Corporation) [On_Demand | Running] -- C:\Program Files (x86)\F-Secure\ORSP Client\fsorsp.exe -- (FSORSPClient)
SRV - [2010-06-10 21:03:08 | 000,144,176 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2010-06-10 15:45:14 | 000,187,056 | ---- | M] (F-Secure Corporation) [Auto | Running] -- C:\Program Files (x86)\F-Secure\Common\FSMA32.EXE -- (FSMA)
SRV - [2010-06-10 15:44:38 | 000,857,264 | ---- | M] (F-Secure Corporation) [On_Demand | Running] -- C:\Program Files (x86)\F-Secure\FWES\Program\fsdfwd.exe -- (FSDFWD)
SRV - [2010-06-10 15:43:46 | 000,219,824 | ---- | M] (F-Secure Corporation) [Auto | Running] -- C:\Program Files (x86)\F-Secure\Anti-Virus\fsgk32st.exe -- (F-Secure Gatekeeper Handler Starter)
SRV - [2010-04-03 16:59:00 | 000,240,232 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2010-03-18 14:27:14 | 000,138,576 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_64)
SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009-07-16 18:04:16 | 000,316,664 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2009-07-14 03:15:31 | 000,396,288 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (WAS)
SRV - [2009-07-14 03:15:31 | 000,396,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (W3SVC)
SRV - [2009-07-14 03:14:53 | 000,061,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\apphostsvc.dll -- (AppHostSvc)
SRV - [2007-05-31 17:11:54 | 000,443,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007-05-31 17:11:46 | 000,225,672 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MTiCtwl.sys -- (MagicTune)
DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\ewusbmdm.sys -- (hwdatacard)
DRV:[b]64bit:[/b] - [2010-07-24 23:04:36 | 000,828,912 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:[b]64bit:[/b] - [2010-06-10 15:44:38 | 000,093,744 | ---- | M] (F-Secure Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\fsdfw.sys -- (FSFW)
DRV:[b]64bit:[/b] - [2010-06-10 15:44:22 | 000,044,624 | ---- | M] (F-Secure Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\fses.sys -- (FSES)
DRV:[b]64bit:[/b] - [2010-05-28 13:04:52 | 000,017,456 | ---- | M] (Secunia) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\psi_mf.sys -- (PSI)
DRV:[b]64bit:[/b] - [2010-03-14 18:33:13 | 000,034,032 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\seehcri.sys -- (seehcri)
DRV:[b]64bit:[/b] - [2010-03-14 18:33:13 | 000,027,176 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc)
DRV:[b]64bit:[/b] - [2010-03-14 18:33:13 | 000,013,352 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt)
DRV:[b]64bit:[/b] - [2010-01-12 16:19:10 | 000,142,848 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ArcHlp.sys -- (archlp)
DRV:[b]64bit:[/b] - [2009-12-17 15:58:04 | 000,145,360 | ---- | M] (Sun Microsystems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV:[b]64bit:[/b] - [2009-10-03 14:01:16 | 000,062,088 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RAMDiskVE.sys -- (RAMDiskVE)
DRV:[b]64bit:[/b] - [2009-07-29 10:21:58 | 000,717,312 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netr7364.sys -- (netr7364)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,200,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmbus.sys -- (vmbus)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,046,672 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\vmstorfl.sys -- (storflt)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,034,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\storvsc.sys -- (storvsc)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-07-14 02:09:02 | 000,120,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\irda.sys -- (irda)
DRV:[b]64bit:[/b] - [2009-07-14 01:42:58 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vms3cap.sys -- (s3cap)
DRV:[b]64bit:[/b] - [2009-07-14 01:42:44 | 000,021,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VMBusHID.sys -- (VMBusHID)
DRV:[b]64bit:[/b] - [2009-07-14 01:24:27 | 000,514,048 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\csc.sys -- (CSC)
DRV:[b]64bit:[/b] - [2009-06-10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009-05-23 01:08:37 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone)
DRV:[b]64bit:[/b] - [2009-05-18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:[b]64bit:[/b] - [2008-09-26 19:06:24 | 000,045,320 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\uimx64.sys -- (UimBus)
DRV:[b]64bit:[/b] - [2008-07-22 07:42:58 | 000,060,416 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rtnic64.sys -- (RTL8023x64)
DRV:[b]64bit:[/b] - [2008-05-16 11:33:06 | 000,158,760 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016mdm.sys -- (s0016mdm)
DRV:[b]64bit:[/b] - [2008-05-16 11:33:06 | 000,151,592 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016unic.sys -- (s0016unic) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM)
DRV:[b]64bit:[/b] - [2008-05-16 11:33:06 | 000,137,256 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016mgmt.sys -- (s0016mgmt) Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM)
DRV:[b]64bit:[/b] - [2008-05-16 11:33:06 | 000,136,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016obex.sys -- (s0016obex)
DRV:[b]64bit:[/b] - [2008-05-16 11:33:06 | 000,034,344 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016nd5.sys -- (s0016nd5) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS)
DRV:[b]64bit:[/b] - [2008-05-16 11:33:04 | 000,019,496 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016mdfl.sys -- (s0016mdfl)
DRV:[b]64bit:[/b] - [2008-05-16 11:32:56 | 000,115,240 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016bus.sys -- (s0016bus) Sony Ericsson Device 0016 driver (WDM)
DRV:[b]64bit:[/b] - [2008-02-13 17:20:16 | 000,017,920 | ---- | M] (A4Tech Co.,Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Amusbx64.sys -- (Amusbprt)
DRV:[b]64bit:[/b] - [2008-01-19 06:28:36 | 000,033,792 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\irstusb.sys -- (STIrUsb)
DRV:[b]64bit:[/b] - [2007-10-15 12:37:22 | 000,012,288 | ---- | M] ((Standard mouse types)) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\Amfltx64.sys -- (Amfilter)
DRV:[b]64bit:[/b] - [2007-04-24 09:33:30 | 000,123,656 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s125obex.sys -- (s125obex)
DRV:[b]64bit:[/b] - [2007-04-24 09:33:28 | 000,126,216 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s125mgmt.sys -- (s125mgmt) Sony Ericsson Device 125 USB WMC Device Management Drivers (WDM)
DRV:[b]64bit:[/b] - [2007-04-24 09:33:26 | 000,144,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s125mdm.sys -- (s125mdm)
DRV:[b]64bit:[/b] - [2007-04-24 09:33:24 | 000,019,720 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s125mdfl.sys -- (s125mdfl)
DRV:[b]64bit:[/b] - [2007-04-24 09:33:14 | 000,108,296 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s125bus.sys -- (s125bus) Sony Ericsson Device 125 driver (WDM)
DRV:[b]64bit:[/b] - [2007-04-17 11:51:50 | 000,014,112 | ---- | M] (InterVideo) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\regi.sys -- (regi)
DRV:[b]64bit:[/b] - [2007-04-03 14:57:40 | 000,130,824 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s116unic.sys -- (s116unic) Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (WDM)
DRV:[b]64bit:[/b] - [2007-04-03 14:57:40 | 000,123,656 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s116obex.sys -- (s116obex)
DRV:[b]64bit:[/b] - [2007-04-03 14:57:38 | 000,126,216 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s116mgmt.sys -- (s116mgmt) Sony Ericsson Device 116  USB WMC Device Management Drivers (WDM)
DRV:[b]64bit:[/b] - [2007-04-03 14:57:38 | 000,031,496 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s116nd5.sys -- (s116nd5) Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (NDIS)
DRV:[b]64bit:[/b] - [2007-04-03 14:57:36 | 000,144,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s116mdm.sys -- (s116mdm)
DRV:[b]64bit:[/b] - [2007-04-03 14:57:36 | 000,019,720 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s116mdfl.sys -- (s116mdfl)
DRV:[b]64bit:[/b] - [2007-04-03 14:57:34 | 000,108,296 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s116bus.sys -- (s116bus) Sony Ericsson Device 116 driver (WDM)
DRV:[b]64bit:[/b] - [2005-03-29 02:30:38 | 000,008,192 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor)
DRV - [2010-07-19 22:58:14 | 000,190,120 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files (x86)\F-Secure\Anti-Virus\minifilter\fsgk.sys -- (F-Secure Gatekeeper)
DRV - [2010-06-10 15:45:00 | 000,059,920 | ---- | M] (F-Secure Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\F-Secure\HIPS\drivers\fshs.sys -- (F-Secure HIPS)
DRV - [2010-06-10 15:43:48 | 000,039,856 | ---- | M] () [Kernel | Disabled | Stopped] -- C:\Program Files (x86)\F-Secure\Anti-Virus\win2k\fsfilter.sys -- (F-Secure Filter)
DRV - [2010-06-10 15:43:48 | 000,025,264 | ---- | M] () [Kernel | Disabled | Stopped] -- C:\Program Files (x86)\F-Secure\Anti-Virus\win2k\fsrec.sys -- (F-Secure Recognizer)
DRV - [2010-06-10 15:43:46 | 000,014,904 | ---- | M] () [Kernel | System | Running] -- C:\Program Files (x86)\F-Secure\Anti-Virus\minifilter\fsvista.sys -- (fsvista)
DRV - [2007-02-07 20:27:46 | 000,014,104 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | Boot | Running] -- C:\Windows\SysWOW64\speedfan.sys -- (speedfan)
DRV - [2006-08-28 17:12:04 | 000,013,312 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\MTictwl.sys -- (MagicTune)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-3259964720-2008863683-70999163-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3259964720-2008863683-70999163-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultenginename: "Secure Search"
FF - prefs.js..browser.search.selectedEngine: "Secure Search"
FF - prefs.js..extensions.enabledItems: {3ED591BC-7CC7-495B-A526-B2431356EDC1}:2.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}:5.0.21
FF - prefs.js..extensions.enabledItems: litmus-ff@f-secure.com:1.10
FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?fr=mcafee&p="
 
FF - HKLM\software\mozilla\Firefox\Extensions\\{3ED591BC-7CC7-495B-A526-B2431356EDC1}: C:\Program Files (x86)\Ad Muncher\FirefoxExtension_2.0 [2010-03-30 22:37:05 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\litmus-ff@f-secure.com: C:\Program Files (x86)\F-Secure\NRS\litmus-ff@f-secure.com [2010-07-19 22:58:40 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.4\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010-07-04 09:21:53 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.4\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010-07-04 09:21:52 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2010-07-20 19:19:50 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
FF - HKLM\software\mozilla\SeaMonkey\Extensions\\{3ED591BC-7CC7-495B-A526-B2431356EDC1}: C:\Program Files (x86)\Ad Muncher\FirefoxExtension_2.0 [2010-03-30 22:37:05 | 000,000,000 | ---D | M]
 
[2010-05-27 06:59:17 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\mozilla\Extensions
[2010-05-27 06:59:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Gruby\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2010-07-18 21:18:44 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\mozilla\Firefox\Profiles\hla633v9.default\extensions
[2010-06-27 10:33:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2010-06-27 10:33:22 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}
[2010-04-16 06:53:28 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010-04-16 06:53:11 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
 
O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:[b]64bit:[/b] - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Browsing Protection Class) - {C6867EB7-8350-4856-877F-93CF8AE3DC9C} - C:\Program Files (x86)\F-Secure\NRS\iescript\baselitmus.dll (F-Secure Corporation)
O2 - BHO: (no name) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Browsing Protection Toolbar) - {265EEE8E-3228-44D3-AEA5-F7FDF5860049} - C:\Program Files (x86)\F-Secure\NRS\iescript\baselitmus.dll (F-Secure Corporation)
O3 - HKU\S-1-5-21-3259964720-2008863683-70999163-1001\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Ad Muncher] C:\Program Files (x86)\Ad Muncher\AdMunch.exe (Murray Hurps Corp Pty Ltd)
O4 - HKLM..\Run: [F-Secure Manager] C:\Program Files (x86)\F-Secure\Common\FSM32.EXE (F-Secure Corporation)
O4 - HKLM..\Run: [F-Secure TNB] C:\Program Files (x86)\F-Secure\FSGUI\TNBUtil.exe (F-Secure Corporation)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-3259964720-2008863683-70999163-1001..\Run: [OfficeSyncProcess] C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10:[b]64bit:[/b] - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\Program Files (x86)\F-Secure\FSPS\program\FSLSP.DLL (F-Secure Corporation)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_21-windows-i586.cab (Java Plug-in 1.5.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{453b2f07-3e78-11df-a32b-00248c531108}\Shell - "" = AutoRun
O33 - MountPoints2\{453b2f07-3e78-11df-a32b-00248c531108}\Shell\AutoRun\command - "" = I:\AutoRun.exe -- File not found
O33 - MountPoints2\{453b2f17-3e78-11df-a32b-00248c531108}\Shell - "" = AutoRun
O33 - MountPoints2\{453b2f17-3e78-11df-a32b-00248c531108}\Shell\AutoRun\command - "" = I:\AutoRun.exe -- File not found
O33 - MountPoints2\{453b2f6b-3e78-11df-a32b-00248c531108}\Shell - "" = AutoRun
O33 - MountPoints2\{453b2f6b-3e78-11df-a32b-00248c531108}\Shell\AutoRun\command - "" = I:\AutoRun.exe -- File not found
O33 - MountPoints2\{a72f7ab3-3aad-11df-b892-00116760b6e8}\Shell - "" = AutoRun
O33 - MountPoints2\{a72f7ab3-3aad-11df-b892-00116760b6e8}\Shell\AutoRun\command - "" = I:\AutoRun.exe -- File not found
O33 - MountPoints2\{a72f7abc-3aad-11df-b892-00116760b6e8}\Shell - "" = AutoRun
O33 - MountPoints2\{a72f7abc-3aad-11df-b892-00116760b6e8}\Shell\AutoRun\command - "" = I:\AutoRun.exe -- File not found
O33 - MountPoints2\{e8ca43f5-19a5-11df-895c-00248c531108}\Shell - "" = AutoRun
O33 - MountPoints2\{e8ca43f5-19a5-11df-895c-00248c531108}\Shell\AutoRun\command - "" = J:\Autorun.exe -- File not found
O33 - MountPoints2\I\Shell - "" = AutoRun
O33 - MountPoints2\I\Shell\AutoRun\command - "" = I:\AutoRun.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2010-07-24 23:02:56 | 001,056,240 | ---- | C] (Duplex Secure Ltd.) -- C:\Users\Gruby\Desktop\SPTDinst-v169-x64.exe
[2010-07-24 22:51:04 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Users\Gruby\Desktop\OTL.exe
[2010-07-24 09:07:15 | 000,000,000 | ---D | C] -- C:\Users\Gruby\AppData\Local\LAG
[2010-07-24 09:07:15 | 000,000,000 | ---D | C] -- C:\ProgramData\LAG
[2010-07-24 09:06:20 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\AGEIA
[2010-07-23 16:33:28 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2010-07-23 16:33:27 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2010-07-23 16:33:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes
[2010-07-21 19:06:43 | 000,000,000 | ---D | C] -- C:\Users\Gruby\Desktop\archpr
[2010-07-21 19:02:31 | 000,000,000 | ---D | C] -- C:\Users\Gruby\Desktop\crark33
[2010-07-19 23:03:57 | 000,000,000 | ---D | C] -- C:\Users\Gruby\AppData\Roaming\F-Secure
[2010-07-19 22:56:25 | 000,044,624 | ---- | C] (F-Secure Corporation) -- C:\Windows\SysNative\drivers\fses.sys
[2010-07-19 22:56:24 | 000,093,744 | ---- | C] (F-Secure Corporation) -- C:\Windows\SysNative\drivers\fsdfw.sys
[2010-07-19 22:56:23 | 000,572,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcp50.dll
[2010-07-19 22:55:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\F-Secure
[2010-07-19 22:53:44 | 000,000,000 | ---D | C] -- C:\ProgramData\fssg
[2010-07-19 22:52:45 | 000,000,000 | ---D | C] -- C:\ProgramData\f-secure
[2010-07-19 22:44:09 | 060,306,376 | ---- | C] (COMODO) -- C:\Users\Gruby\Desktop\cisfree_installer_x64.exe
[2010-07-19 00:42:08 | 000,000,000 | ---D | C] -- C:\Users\Gruby\AppData\Roaming\Panda Security
[2010-07-19 00:41:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Panda Security
[2010-07-19 00:41:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Panda Security
[2010-07-18 21:43:28 | 000,000,000 | ---D | C] -- C:\Users\Gruby\AppData\Local\MediaMonkey
[2010-07-18 21:43:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MediaMonkey
[2010-07-18 19:12:32 | 000,000,000 | ---D | C] -- C:\Users\Gruby\AppData\Roaming\CyberLink
[2010-07-18 19:10:40 | 000,000,000 | ---D | C] -- C:\ProgramData\CyberLink
[2010-07-18 13:12:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Gadu-Gadu 10
[2010-07-16 23:00:35 | 000,000,000 | ---D | C] -- C:\Users\Gruby\AppData\Roaming\InstallShield
[2010-07-16 22:34:26 | 000,000,000 | ---D | C] -- C:\Users\Gruby\Documents\ArcSoft
[2010-07-16 22:29:28 | 000,000,000 | ---D | C] -- C:\Users\Gruby\AppData\Roaming\ArcSoft
[2010-07-16 22:29:05 | 000,000,000 | ---D | C] -- C:\ProgramData\ArcSoft
[2010-07-16 22:28:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ArcSoft
[2010-07-16 22:15:08 | 000,000,000 | ---D | C] -- C:\Users\Gruby\AppData\Roaming\Media Player Classic
[2010-07-16 22:15:02 | 000,000,000 | ---D | C] -- C:\Program Files\MPC HomeCinema (x64)
[2010-07-15 06:51:04 | 009,367,776 | ---- | C] (Avanquest Software                                          ) -- C:\Users\Gruby\Desktop\ACM_ENU_Free_Web.exe
[2010-07-14 21:56:24 | 000,000,000 | ---D | C] -- C:\Users\Gruby\Desktop\Nowy folder (2)
[2010-07-14 02:42:19 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll
[2010-07-12 18:28:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2010-07-07 23:17:49 | 000,000,000 | RH-D | C] -- C:\Users\Gruby\AppData\Roaming\SecuROM
[2010-07-07 23:17:07 | 000,178,800 | ---- | C] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt_x64.dll
[2010-07-07 23:14:16 | 000,000,000 | -H-D | C] -- C:\ProgramData\{0691F710-1ECA-4B5A-9727-25554F1BFDC6}
[2010-07-07 17:12:26 | 000,000,000 | ---D | C] -- C:\Users\Gruby\Desktop\miniSzablon
[2010-07-07 07:39:42 | 000,000,000 | ---D | C] -- C:\Users\Gruby\Desktop\Nowy folder
[2010-07-05 18:06:10 | 000,000,000 | ---D | C] -- C:\Users\Gruby\AppData\Roaming\Help
[2010-07-05 18:06:10 | 000,000,000 | ---D | C] -- C:\Users\Gruby\AppData\Local\Help
[2010-07-05 17:23:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SpeedFan
[2010-07-05 00:53:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Futuremark Shared
[2010-07-05 00:53:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Futuremark
[2010-07-05 00:43:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD
[2010-07-04 09:14:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Secunia
[2010-06-27 19:50:17 | 000,000,000 | ---D | C] -- C:\Users\Gruby\.thumbnails
[2010-06-27 19:45:33 | 000,000,000 | ---D | C] -- C:\Users\Gruby\.gimp-2.2
[2010-06-27 10:33:22 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2010-06-27 10:33:22 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2010-06-27 10:33:22 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2010-06-27 10:32:55 | 000,000,000 | ---D | C] -- C:\Users\Gruby\AppData\Local\Sun
[2010-06-26 13:31:05 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2010-06-25 17:30:54 | 000,000,000 | --SD | C] -- C:\Users\Gruby\Documents\Passwords Database
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2010-07-24 23:07:05 | 000,001,042 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010-07-24 23:06:59 | 000,011,568 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010-07-24 23:06:59 | 000,011,568 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010-07-24 23:06:57 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010-07-24 23:06:54 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010-07-24 23:06:45 | 1609,961,472 | -HS- | M] () -- C:\hiberfil.sys
[2010-07-24 23:05:21 | 003,670,016 | ---- | M] () -- C:\Users\Gruby\NTUSER.DAT
[2010-07-24 23:04:47 | 001,839,755 | -H-- | M] () -- C:\Users\Gruby\AppData\Local\IconCache.db
[2010-07-24 23:04:36 | 000,828,912 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys
[2010-07-24 23:02:57 | 001,056,240 | ---- | M] (Duplex Secure Ltd.) -- C:\Users\Gruby\Desktop\SPTDinst-v169-x64.exe
[2010-07-24 22:51:06 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Gruby\Desktop\OTL.exe
[2010-07-24 22:33:01 | 000,001,046 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010-07-24 22:26:01 | 000,001,058 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3259964720-2008863683-70999163-1001UA.job
[2010-07-24 19:26:03 | 000,001,006 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3259964720-2008863683-70999163-1001Core.job
[2010-07-24 01:04:34 | 000,000,201 | ---- | M] () -- C:\Users\Gruby\Desktop\Lead and Gold Gangs of the Wild West.url
[2010-07-23 20:21:27 | 000,000,199 | ---- | M] () -- C:\Users\Gruby\Desktop\Alien Swarm.url
[2010-07-23 18:29:34 | 001,658,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010-07-23 18:29:34 | 000,739,974 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2010-07-23 18:29:34 | 000,653,902 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010-07-23 18:29:34 | 000,149,182 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2010-07-23 18:29:34 | 000,117,642 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010-07-23 16:33:37 | 000,002,429 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2010-07-21 23:51:20 | 030,768,840 | ---- | M] () -- C:\Users\Gruby\Desktop\free.zip
[2010-07-21 19:10:38 | 000,001,142 | ---- | M] () -- C:\Windows\ARCHPR.INI
[2010-07-21 19:06:30 | 001,607,158 | ---- | M] () -- C:\Users\Gruby\Desktop\archpr.zip
[2010-07-21 19:02:04 | 000,465,167 | ---- | M] () -- C:\Users\Gruby\Desktop\crark33.rar
[2010-07-21 12:45:52 | 000,002,432 | ---- | M] () -- C:\Users\Gruby\AppData\Local\Tempbm4376.html
[2010-07-21 00:00:52 | 000,026,623 | ---- | M] () -- C:\Users\Gruby\Desktop\Platoon_(NAPiSY-106480).NS.zip
[2010-07-20 23:58:12 | 000,027,262 | ---- | M] () -- C:\Users\Gruby\Desktop\platoon.(1986).pol.1cd.(3136907).zip
[2010-07-20 19:27:26 | 000,002,397 | ---- | M] () -- C:\Users\Gruby\Desktop\Google Chrome.lnk
[2010-07-20 19:19:51 | 000,001,989 | ---- | M] () -- C:\Users\Gruby\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Thunderbird.lnk
[2010-07-20 19:19:51 | 000,001,965 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
[2010-07-19 23:17:57 | 000,041,624 | ---- | M] () -- C:\Windows\SysWow64\drivers\fsbts.sys
[2010-07-19 22:56:53 | 000,001,111 | ---- | M] () -- C:\Users\Public\Desktop\F-Secure Internet Security 2011 Beta.lnk
[2010-07-19 22:56:25 | 001,678,266 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010-07-19 22:49:52 | 060,306,376 | ---- | M] (COMODO) -- C:\Users\Gruby\Desktop\cisfree_installer_x64.exe
[2010-07-19 22:41:43 | 000,365,800 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010-07-19 00:32:35 | 000,000,232 | ---- | M] () -- C:\Users\Gruby\Desktop\AV_Voice_Changer_Software_Diamond_v4.0.51_by_ViRiLiTY.zip
[2010-07-18 21:43:33 | 000,000,933 | ---- | M] () -- C:\Users\Public\Desktop\MediaMonkey.lnk
[2010-07-18 21:21:42 | 000,090,992 | ---- | M] () -- C:\Users\Gruby\AppData\Local\GDIPFONTCACHEV1.DAT
[2010-07-18 19:08:39 | 000,505,392 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcp71.dll
[2010-07-18 13:13:05 | 000,000,992 | ---- | M] () -- C:\Users\Public\Desktop\OpenFM.lnk
[2010-07-18 13:13:05 | 000,000,963 | ---- | M] () -- C:\Users\Public\Desktop\Gadu-Gadu 10.lnk
[2010-07-16 23:19:54 | 000,001,987 | ---- | M] () -- C:\Users\Public\Desktop\TotalMedia Theatre 3.lnk
[2010-07-16 20:42:17 | 000,002,828 | -HS- | M] () -- C:\ProgramData\KGyGaAvL.sys
[2010-07-15 06:51:22 | 009,367,776 | ---- | M] (Avanquest Software                                          ) -- C:\Users\Gruby\Desktop\ACM_ENU_Free_Web.exe
[2010-07-14 17:44:09 | 000,001,103 | ---- | M] () -- C:\Users\Gruby\Application Data\Microsoft\Internet Explorer\Quick Launch\Uruchom AQQ.lnk
[2010-07-14 17:44:09 | 000,001,079 | ---- | M] () -- C:\Users\Gruby\Desktop\AQQ.lnk
[2010-07-13 23:25:57 | 000,000,611 | ---- | M] () -- C:\CPUCooL.lnk
[2010-07-12 18:30:22 | 000,002,244 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2010-07-09 00:07:30 | 000,000,967 | ---- | M] () -- C:\Users\Gruby\Desktop\CCleaner.lnk
[2010-07-07 23:17:07 | 000,178,800 | ---- | M] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt_x64.dll
[2010-07-07 22:34:32 | 000,003,364 | ---- | M] () -- C:\Windows\SysWow64\ealregsnapshot1.reg
[2010-07-07 20:24:12 | 000,000,614 | ---- | M] () -- C:\Windows\win.ini
[2010-07-07 17:15:10 | 000,100,348 | ---- | M] () -- C:\Users\Gruby\Documents\DSC00176.JPG
[2010-07-07 07:59:25 | 000,002,432 | ---- | M] () -- C:\Users\Gruby\AppData\Local\TempYt5044.html
[2010-07-07 07:58:26 | 000,002,432 | ---- | M] () -- C:\Users\Gruby\AppData\Local\TempcE2656.html
[2010-07-07 07:58:26 | 000,002,089 | ---- | M] () -- C:\Users\Gruby\AppData\Local\Tempbg2656.html
[2010-07-06 16:58:26 | 000,002,432 | ---- | M] () -- C:\Users\Gruby\AppData\Local\TempfF5012.html
[2010-07-06 08:23:16 | 000,002,432 | ---- | M] () -- C:\Users\Gruby\AppData\Local\TempSY1316.html
[2010-07-06 00:03:12 | 046,942,904 | ---- | M] () -- C:\Users\Gruby\Desktop\735vcnt7.exe
[2010-07-05 19:17:42 | 000,072,704 | ---- | M] () -- C:\Users\Gruby\Desktop\artur.xls
[2010-07-05 18:32:11 | 000,062,976 | ---- | M] () -- C:\Users\Gruby\Desktop\artur1.xls
[2010-07-05 17:23:27 | 000,000,045 | ---- | M] () -- C:\Windows\SysWow64\initdebug.nfo
[2010-07-05 07:57:29 | 000,002,432 | ---- | M] () -- C:\Users\Gruby\AppData\Local\Tempoyl500.html
[2010-07-05 00:54:39 | 000,002,012 | ---- | M] () -- C:\Users\Public\Desktop\3DMark05.lnk
[2010-07-04 09:21:54 | 000,001,923 | ---- | M] () -- C:\Users\Gruby\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010-07-04 09:21:54 | 000,001,899 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010-07-03 15:53:36 | 000,023,479 | ---- | M] () -- C:\Users\Gruby\Desktop\urlfilter_www.Portal24h.pl_28czerwiec2010.rar
[2010-07-01 17:35:40 | 000,000,817 | ---- | M] () -- C:\Users\Gruby\Application Data\Microsoft\Internet Explorer\Quick Launch\Opera.lnk
[2010-07-01 12:09:10 | 000,000,000 | ---- | M] () -- C:\Users\Gruby\Documents\29062010396.jpg
[2010-07-01 12:09:09 | 000,309,316 | ---- | M] () -- C:\Users\Gruby\Documents\29062010386.jpg
[2010-07-01 12:09:06 | 000,000,000 | ---- | M] () -- C:\Users\Gruby\Documents\29062010397.jpg
[2010-07-01 12:08:57 | 000,359,028 | ---- | M] () -- C:\Users\Gruby\Documents\29062010382.jpg
[2010-07-01 12:08:52 | 000,339,304 | ---- | M] () -- C:\Users\Gruby\Documents\29062010380.jpg
[2010-07-01 12:08:46 | 000,263,791 | ---- | M] () -- C:\Users\Gruby\Documents\29062010379.jpg
[2010-07-01 10:30:55 | 000,002,432 | ---- | M] () -- C:\Users\Gruby\AppData\Local\TempAc5480.html
[2010-07-01 07:22:06 | 000,002,432 | ---- | M] () -- C:\Users\Gruby\AppData\Local\TempdI1232.html
[2010-06-30 10:32:36 | 000,002,432 | ---- | M] () -- C:\Users\Gruby\AppData\Local\Tempuu5756.html
[2010-06-29 22:28:52 | 000,000,106 | ---- | M] () -- C:\Users\Gruby\Desktop\start.bat
[2010-06-29 19:26:14 | 007,804,009 | ---- | M] () -- C:\Users\Gruby\Desktop\mani_admin_plugin_v1_2U_orange.zip
[2010-06-29 17:33:47 | 000,002,432 | ---- | M] () -- C:\Users\Gruby\AppData\Local\TempdL3768.html
[2010-06-29 11:03:56 | 000,002,432 | ---- | M] () -- C:\Users\Gruby\AppData\Local\TempEH2568.html
[2010-06-27 20:00:18 | 000,000,000 | ---- | M] () -- C:\Users\Gruby\.gtk-bookmarks
[2010-06-27 19:47:49 | 000,650,095 | ---- | M] () -- C:\Users\Gruby\.fonts.cache-1
[2010-06-26 09:25:42 | 000,002,432 | ---- | M] () -- C:\Users\Gruby\AppData\Local\TempGf4788.html
[2010-06-26 07:32:45 | 000,010,240 | ---- | M] () -- C:\Users\Gruby\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2010-07-24 23:04:36 | 000,828,912 | ---- | C] () -- C:\Windows\SysNative\drivers\sptd.sys
[2010-07-24 01:04:33 | 000,000,201 | ---- | C] () -- C:\Users\Gruby\Desktop\Lead and Gold Gangs of the Wild West.url
[2010-07-23 20:21:27 | 000,000,199 | ---- | C] () -- C:\Users\Gruby\Desktop\Alien Swarm.url
[2010-07-23 16:33:37 | 000,002,429 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2010-07-21 23:49:29 | 030,768,840 | ---- | C] () -- C:\Users\Gruby\Desktop\free.zip
[2010-07-21 19:07:28 | 000,001,142 | ---- | C] () -- C:\Windows\ARCHPR.INI
[2010-07-21 19:06:30 | 001,607,158 | ---- | C] () -- C:\Users\Gruby\Desktop\archpr.zip
[2010-07-21 19:02:04 | 000,465,167 | ---- | C] () -- C:\Users\Gruby\Desktop\crark33.rar
[2010-07-21 12:43:11 | 000,002,432 | ---- | C] () -- C:\Users\Gruby\AppData\Local\Tempbm4376.html
[2010-07-21 00:00:52 | 000,026,623 | ---- | C] () -- C:\Users\Gruby\Desktop\Platoon_(NAPiSY-106480).NS.zip
[2010-07-20 23:58:12 | 000,027,262 | ---- | C] () -- C:\Users\Gruby\Desktop\platoon.(1986).pol.1cd.(3136907).zip
[2010-07-20 19:21:09 | 000,001,058 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3259964720-2008863683-70999163-1001UA.job
[2010-07-20 19:21:08 | 000,001,006 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3259964720-2008863683-70999163-1001Core.job
[2010-07-19 22:56:53 | 000,001,111 | ---- | C] () -- C:\Users\Public\Desktop\F-Secure Internet Security 2011 Beta.lnk
[2010-07-19 22:56:45 | 000,041,624 | ---- | C] () -- C:\Windows\SysWow64\drivers\fsbts.sys
[2010-07-19 00:32:34 | 000,000,232 | ---- | C] () -- C:\Users\Gruby\Desktop\AV_Voice_Changer_Software_Diamond_v4.0.51_by_ViRiLiTY.zip
[2010-07-18 21:43:33 | 000,000,933 | ---- | C] () -- C:\Users\Public\Desktop\MediaMonkey.lnk
[2010-07-18 17:21:42 | 000,142,848 | ---- | C] () -- C:\Windows\SysNative\drivers\ArcHlp.sys
[2010-07-18 17:21:42 | 000,007,426 | ---- | C] () -- C:\Windows\SysNative\drivers\win7_64logo.cat
[2010-07-18 17:21:42 | 000,002,239 | ---- | C] () -- C:\Windows\SysNative\drivers\win7Logo.inf
[2010-07-18 13:13:05 | 000,000,992 | ---- | C] () -- C:\Users\Public\Desktop\OpenFM.lnk
[2010-07-18 13:13:05 | 000,000,963 | ---- | C] () -- C:\Users\Public\Desktop\Gadu-Gadu 10.lnk
[2010-07-16 23:19:54 | 000,001,987 | ---- | C] () -- C:\Users\Public\Desktop\TotalMedia Theatre 3.lnk
[2010-07-13 23:25:57 | 000,000,611 | ---- | C] () -- C:\CPUCooL.lnk
[2010-07-12 18:30:22 | 000,002,244 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2010-07-12 18:28:52 | 000,001,046 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010-07-12 18:28:50 | 000,001,042 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010-07-09 20:25:06 | 000,030,720 | ---- | C] () -- C:\Windows\ssui.exe
[2010-07-07 20:24:10 | 000,032,768 | ---- | C] () -- C:\Windows\DelCDSP.exe
[2010-07-07 20:24:05 | 000,170,008 | ---- | C] () -- C:\Windows\SYNTHESOFT.HLP
[2010-07-07 20:24:05 | 000,066,560 | ---- | C] () -- C:\Windows\PKCREGD.EXE
[2010-07-07 17:15:07 | 000,100,348 | ---- | C] () -- C:\Users\Gruby\Documents\DSC00176.JPG
[2010-07-07 07:58:42 | 000,002,432 | ---- | C] () -- C:\Users\Gruby\AppData\Local\TempYt5044.html
[2010-07-07 07:57:46 | 000,002,432 | ---- | C] () -- C:\Users\Gruby\AppData\Local\TempcE2656.html
[2010-07-07 07:57:46 | 000,002,089 | ---- | C] () -- C:\Users\Gruby\AppData\Local\Tempbg2656.html
[2010-07-06 16:52:58 | 000,002,432 | ---- | C] () -- C:\Users\Gruby\AppData\Local\TempfF5012.html
[2010-07-06 08:22:22 | 000,002,432 | ---- | C] () -- C:\Users\Gruby\AppData\Local\TempSY1316.html
[2010-07-05 23:58:44 | 046,942,904 | ---- | C] () -- C:\Users\Gruby\Desktop\735vcnt7.exe
[2010-07-05 18:32:11 | 000,062,976 | ---- | C] () -- C:\Users\Gruby\Desktop\artur1.xls
[2010-07-05 18:29:59 | 000,072,704 | ---- | C] () -- C:\Users\Gruby\Desktop\artur.xls
[2010-07-05 18:16:52 | 000,071,168 | ---- | C] () -- C:\Users\Gruby\Desktop\Cennik(Oskar_dziala).xls
[2010-07-05 17:23:27 | 000,000,045 | ---- | C] () -- C:\Windows\SysWow64\initdebug.nfo
[2010-07-05 07:56:37 | 000,002,432 | ---- | C] () -- C:\Users\Gruby\AppData\Local\Tempoyl500.html
[2010-07-05 00:54:39 | 000,002,012 | ---- | C] () -- C:\Users\Public\Desktop\3DMark05.lnk
[2010-07-03 15:53:35 | 000,023,479 | ---- | C] () -- C:\Users\Gruby\Desktop\urlfilter_www.Portal24h.pl_28czerwiec2010.rar
[2010-07-01 12:09:10 | 000,000,000 | ---- | C] () -- C:\Users\Gruby\Documents\29062010396.jpg
[2010-07-01 12:09:06 | 000,000,000 | ---- | C] () -- C:\Users\Gruby\Documents\29062010397.jpg
[2010-07-01 12:08:46 | 000,309,316 | ---- | C] () -- C:\Users\Gruby\Documents\29062010386.jpg
[2010-07-01 12:08:32 | 000,359,028 | ---- | C] () -- C:\Users\Gruby\Documents\29062010382.jpg
[2010-07-01 12:08:28 | 000,339,304 | ---- | C] () -- C:\Users\Gruby\Documents\29062010380.jpg
[2010-07-01 12:08:25 | 000,263,791 | ---- | C] () -- C:\Users\Gruby\Documents\29062010379.jpg
[2010-07-01 10:30:19 | 000,002,432 | ---- | C] () -- C:\Users\Gruby\AppData\Local\TempAc5480.html
[2010-07-01 06:52:06 | 000,002,432 | ---- | C] () -- C:\Users\Gruby\AppData\Local\TempdI1232.html
[2010-06-30 10:22:13 | 000,002,432 | ---- | C] () -- C:\Users\Gruby\AppData\Local\Tempuu5756.html
[2010-06-29 22:28:52 | 000,000,106 | ---- | C] () -- C:\Users\Gruby\Desktop\start.bat
[2010-06-29 19:18:27 | 007,804,009 | ---- | C] () -- C:\Users\Gruby\Desktop\mani_admin_plugin_v1_2U_orange.zip
[2010-06-29 17:32:56 | 000,002,432 | ---- | C] () -- C:\Users\Gruby\AppData\Local\TempdL3768.html
[2010-06-29 11:02:57 | 000,002,432 | ---- | C] () -- C:\Users\Gruby\AppData\Local\TempEH2568.html
[2010-06-27 19:50:08 | 000,000,000 | ---- | C] () -- C:\Users\Gruby\.gtk-bookmarks
[2010-06-27 19:47:49 | 000,650,095 | ---- | C] () -- C:\Users\Gruby\.fonts.cache-1
[2010-06-26 09:25:14 | 000,002,432 | ---- | C] () -- C:\Users\Gruby\AppData\Local\TempGf4788.html
[2010-04-11 11:02:43 | 000,013,312 | ---- | C] () -- C:\Windows\SysWow64\drivers\MTictwl.sys
[2010-03-23 20:33:04 | 000,032,768 | ---- | C] () -- C:\Windows\SysWow64\Amhooker.dll
[2010-03-01 20:08:51 | 001,678,266 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010-02-01 17:30:34 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
[2009-07-14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009-07-13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009-02-17 02:36:58 | 000,067,584 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2008-12-07 14:08:06 | 000,795,648 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2008-12-07 14:08:04 | 000,130,048 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2008-09-12 16:21:02 | 000,000,547 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll.manifest
[2008-04-22 16:03:16 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2008-04-22 16:03:16 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll
[2008-04-22 16:03:16 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll
[2008-04-22 16:03:16 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll
[2008-04-22 16:03:16 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll
[2008-04-22 16:03:16 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll
[2008-04-22 16:03:14 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2008-04-22 16:03:14 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll
[2008-04-22 16:03:14 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll
[2007-12-28 09:22:04 | 000,010,296 | ---- | C] () -- C:\Windows\SysWow64\drivers\ASUSHWIO.SYS
[2007-09-04 12:56:10 | 000,164,352 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2007-02-05 21:05:26 | 000,000,038 | ---- | C] () -- C:\Windows\AviSplitter.INI
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-06-24 14:18:08 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\BESTplayer
[2010-03-10 08:37:46 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\BSplayer Pro
[2010-02-06 17:20:07 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\e-Deklaracje.A1909296681C7ACEFE45687D3A64758C8659BF46.1
[2010-03-01 20:46:19 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\EurekaLog
[2010-07-19 23:03:57 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\F-Secure
[2010-07-23 18:46:24 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\foobar2000
[2010-04-13 20:42:58 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\Gadu-Gadu 10
[2010-02-01 20:21:00 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\GHISLER
[2010-07-19 23:23:42 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\HLSW
[2010-02-16 20:40:39 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\ipla
[2010-07-22 19:00:15 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\MyPhoneExplorer
[2010-02-14 11:27:09 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\Nvu
[2010-03-06 22:22:55 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\OpenFM
[2010-05-03 22:45:57 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\Opera
[2010-07-19 00:42:08 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\Panda Security
[2010-06-20 20:57:49 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\PremeforWindows7
[2010-06-21 18:31:59 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\Promixis
[2010-04-25 12:24:49 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\Red Chair Software
[2010-04-25 12:05:43 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\rockbox.org
[2010-05-27 06:59:15 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\Thunderbird
[2010-06-28 22:09:59 | 000,000,000 | ---D | M] -- C:\Users\Gruby\AppData\Roaming\TS3Client
[2010-06-21 16:21:31 | 000,005,818 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 229 bytes -> C:\ProgramData\TEMP:8FF81EB0
@Alternate Data Stream - 172 bytes -> C:\ProgramData\TEMP:319E7F0B
< End of report >