http://obrazki.elektroda.pl/9061728500_1360777304_thumb.jpg http://obrazki.elektroda.pl/9061728500_1360777304.jpg
OTL logfile created on: 2013-02-13 14:47:11 - Run 5
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\janek11\Desktop\Ashampoo Snap 3
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
3.00 Gb Total Physical Memory | 1.38 Gb Available Physical Memory | 45.99% Memory free
6.22 Gb Paging File | 4.64 Gb Available in Paging File | 74.55% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 298.09 Gb Total Space | 161.63 Gb Free Space | 54.22% Space Free | Partition Type: NTFS
Drive E: | 7.39 Gb Total Space | 7.39 Gb Free Space | 99.90% Space Free | Partition Type: FAT32
Drive L: | 465.76 Gb Total Space | 415.01 Gb Free Space | 89.10% Space Free | Partition Type: NTFS
Computer Name: KOMPUTER-DOMOWY | User Name: janek11 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2013-02-13 14:26:37 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\janek11\Desktop\Ashampoo Snap 3\OTL.exe
PRC - [2012-12-18 15:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012-10-02 12:13:44 | 003,064,000 | ---- | M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
PRC - [2012-09-12 17:25:24 | 000,287,824 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\NisSrv.exe
PRC - [2012-09-12 17:25:22 | 000,020,472 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\MsMpEng.exe
PRC - [2012-09-12 17:19:44 | 000,947,176 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2012-07-02 15:15:14 | 000,380,328 | ---- | M] (cFos Software GmbH) -- C:\Program Files\cFosSpeed\spd.exe
PRC - [2012-03-28 23:29:36 | 000,066,560 | ---- | M] (Nalpeiron Ltd.) -- C:\Windows\System32\nlssrv32.exe
PRC - [2012-02-15 04:13:20 | 000,405,504 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
PRC - [2012-02-15 04:12:48 | 000,163,328 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
PRC - [2012-01-18 06:44:52 | 000,450,848 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
PRC - [2011-10-26 03:32:24 | 000,037,280 | ---- | M] (ArcSoft Inc.) -- C:\Program Files\Common Files\ArcSoft\esinter\Bin\eservutil.exe
PRC - [2011-05-24 09:33:30 | 001,840,128 | ---- | M] (MAGIX AG) -- C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
PRC - [2010-11-18 17:26:22 | 000,224,176 | ---- | M] () -- C:\Program Files\Abrosoft\FantaMorph5\FantaUp.exe
PRC - [2010-05-07 18:47:32 | 000,162,648 | ---- | M] (Logitech Inc.) -- C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe
PRC - [2010-03-18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
PRC - [2009-07-20 11:51:52 | 000,935,208 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
PRC - [2009-04-11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009-04-11 07:27:28 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe
PRC - [2008-07-17 13:21:34 | 000,080,392 | ---- | M] () -- C:\Program Files\GIGABYTE\EasySaver\essvr.exe
PRC - [2007-03-06 10:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
[color=#E56717]========== Modules (No Company Name) ==========[/color]
MOD - [2013-02-13 14:03:51 | 012,638,576 | ---- | M] () -- C:\Users\janek11\AppData\Local\Google\Chrome\User Data\PepperFlash\11.6.602.167\pepflashplayer.dll
MOD - [2013-01-26 03:35:06 | 000,460,240 | ---- | M] () -- C:\Users\janek11\AppData\Local\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll
MOD - [2013-01-26 03:35:04 | 004,012,496 | ---- | M] () -- C:\Users\janek11\AppData\Local\Google\Chrome\Application\24.0.1312.57\pdf.dll
MOD - [2013-01-26 03:34:19 | 000,597,968 | ---- | M] () -- C:\Users\janek11\AppData\Local\Google\Chrome\Application\24.0.1312.57\libglesv2.dll
MOD - [2013-01-26 03:34:18 | 000,124,368 | ---- | M] () -- C:\Users\janek11\AppData\Local\Google\Chrome\Application\24.0.1312.57\libegl.dll
MOD - [2013-01-26 03:34:16 | 001,552,848 | ---- | M] () -- C:\Users\janek11\AppData\Local\Google\Chrome\Application\24.0.1312.57\ffmpegsumo.dll
MOD - [2012-02-15 03:11:36 | 000,037,376 | ---- | M] () -- C:\Windows\System32\atitmpxx.dll
[color=#E56717]========== Services (SafeList) ==========[/color]
SRV - File not found [On_Demand | Stopped] -- C:\Program Files\Uniblue\MaxiDisk\service.exe -- (Uniblue.MaxiDiskSvc)
SRV - File not found [Auto | Stopped] -- C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - File not found [Auto | Stopped] -- C:\Program Files\PDF Suite 2012\HelperService.exe -- (PDF Suite 2012 Helper Service)
SRV - File not found [On_Demand | Stopped] -- C:\Program Files\NOS\bin\getPlus_Helper.dll -- (getPlusHelper)
SRV - File not found [On_Demand | Stopped] -- -- (EyelineService)
SRV - [2013-02-09 11:51:04 | 000,251,248 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-12-18 15:28:08 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012-10-02 12:13:44 | 003,064,000 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2012-09-12 17:25:24 | 000,287,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV - [2012-09-12 17:25:22 | 000,020,472 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2012-09-10 17:57:18 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- c:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012-07-02 15:15:14 | 000,380,328 | ---- | M] (cFos Software GmbH) [Auto | Running] -- C:\Program Files\cFosSpeed\spd.exe -- (cFosSpeedS)
SRV - [2012-03-28 23:29:36 | 000,066,560 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\Windows\System32\nlssrv32.exe -- (nlsX86cc)
SRV - [2012-02-15 04:12:48 | 000,163,328 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2012-01-18 06:44:52 | 000,450,848 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe -- (UMVPFSrv)
SRV - [2011-10-26 03:32:24 | 000,037,280 | ---- | M] (ArcSoft Inc.) [Auto | Running] -- C:\Program Files\Common Files\ArcSoft\esinter\Bin\eservutil.exe -- (ADExchange)
SRV - [2011-05-24 09:33:30 | 001,840,128 | ---- | M] (MAGIX AG) [Auto | Running] -- C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe -- (Fabs)
SRV - [2011-04-26 12:54:12 | 002,702,848 | ---- | M] (MAGIX®) [On_Demand | Stopped] -- C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
SRV - [2010-11-18 17:26:22 | 000,224,176 | ---- | M] () [Auto | Running] -- C:\Program Files\Abrosoft\FantaMorph5\FantaUp.exe -- (Abrosoft: Abrosoft FantaMorph update permissions manager. 12810.)
SRV - [2010-10-22 17:04:14 | 000,360,448 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\System32\GSService.exe -- (GSService)
SRV - [2010-05-07 18:47:32 | 000,162,648 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv)
SRV - [2010-03-18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Auto | Running] -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
SRV - [2009-07-20 11:51:52 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2008-07-17 13:21:34 | 000,080,392 | ---- | M] () [Auto | Running] -- C:\Program Files\GIGABYTE\EasySaver\essvr.exe -- (ES lite Service)
SRV - [2008-01-21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007-05-31 15:21:24 | 000,379,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007-05-31 15:21:18 | 000,183,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
SRV - [2007-03-06 10:35:02 | 000,198,168 | ---- | M] (InterVideo Inc.) [Auto | Running] -- C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe -- (Capture Device Service)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - File not found [Kernel | Unavailable | Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - File not found [Kernel | System | Stopped] -- -- (SuperMounter)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (IpInIp)
DRV - [2013-02-13 13:53:14 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\gdrv.sys -- (gdrv)
DRV - [2013-01-26 11:05:59 | 000,007,168 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\utiymzq1.sys -- (utiymzq1)
DRV - [2012-08-30 22:03:50 | 000,099,272 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\NisDrvWFP.sys -- (NisDrv)
DRV - [2012-07-19 22:21:19 | 000,039,016 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tbhsd.sys -- (tbhsd)
DRV - [2012-05-09 14:03:54 | 000,233,096 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\SCRCAMNETDRIVER.sys -- (SCRCAMNETDRIVER)
DRV - [2012-03-14 08:40:02 | 000,169,080 | ---- | M] (ESET) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\eamonm.sys -- (eamonm)
DRV - [2012-03-14 08:40:02 | 000,120,152 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\System32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2012-03-14 08:40:02 | 000,103,112 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\epfwwfpr.sys -- (epfwwfpr)
DRV - [2012-02-15 04:47:12 | 009,182,208 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2012-02-15 04:47:12 | 009,182,208 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
DRV - [2012-02-15 03:12:48 | 000,264,704 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
DRV - [2012-01-18 06:44:52 | 004,332,960 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lvuvc.sys -- (LVUVC)
DRV - [2012-01-18 06:44:28 | 000,312,096 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lvrs.sys -- (LVRS)
DRV - [2012-01-09 12:22:50 | 000,032,672 | ---- | M] (IObit Information Technology) [File_System | Auto | Running] -- C:\Program Files\IObit\Protected Folder\pffilter.sys -- (PfFilter)
DRV - [2012-01-04 15:28:36 | 000,016,128 | ---- | M] (Windows (R) Win 7 DDK provider) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\gtkdrv.sys -- (TrojanKillerDriver)
DRV - [2011-12-05 20:46:56 | 000,083,472 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AtihdLH3.sys -- (AtiHDAudioService)
DRV - [2011-10-28 18:52:42 | 000,163,616 | ---- | M] (Digiarty Software, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\DigiartyVirtualCDBus.sys -- (DigiartyVirtualCDBus)
DRV - [2011-10-23 20:33:03 | 000,024,944 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\GVTDrv.sys -- (GVTDrv)
DRV - [2011-07-01 13:16:40 | 000,026,624 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tap0901.sys -- (tap0901)
DRV - [2010-12-30 14:19:40 | 000,016,640 | ---- | M] (Wondershare) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys -- (Apowersoft_AudioDevice)
DRV - [2010-12-13 14:36:28 | 000,028,648 | ---- | M] (Wondershare Software Co.,Ltd) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\MirDisk.sys -- (MirDisk)
DRV - [2010-12-13 14:36:18 | 000,033,896 | ---- | M] (Wondershare Software Co.,Ltd) [File_System | Boot | Running] -- C:\Windows\System32\drivers\HKDirFlt.sys -- (HKDirFlt)
DRV - [2010-12-02 17:17:50 | 000,013,696 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\avwebcam.sys -- (AVWEBCAM)
DRV - [2010-09-11 08:20:10 | 000,023,608 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\SndTAudio.sys -- (SndTAudio)
DRV - [2010-05-13 09:14:23 | 000,017,408 | ---- | M] (Gili Soft INC.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usedisk.sys -- (usedisk)
DRV - [2010-05-07 18:43:30 | 000,025,824 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LVPr2Mon.sys -- (LVPr2Mon)
DRV - [2010-03-01 10:51:46 | 000,234,800 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\SCRCAMHRDRV.sys -- (SCRCAMHRDRV)
DRV - [2009-10-22 12:54:18 | 000,037,392 | ---- | M] (Kaspersky Lab) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\57577972.sys -- (57577972)
DRV - [2009-10-22 12:54:18 | 000,037,392 | ---- | M] (Kaspersky Lab) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\48463852.sys -- (48463852)
DRV - [2009-10-22 12:54:18 | 000,037,392 | ---- | M] (Kaspersky Lab) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\05754352.sys -- (05754352)
DRV - [2009-09-25 16:59:42 | 000,128,016 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\System32\drivers\57577971.sys -- (57577971)
DRV - [2009-09-25 16:59:42 | 000,128,016 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\System32\drivers\48463851.sys -- (48463851)
DRV - [2009-09-25 16:59:42 | 000,128,016 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\Windows\System32\drivers\05754351.sys -- (05754351)
DRV - [2009-07-14 00:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WINUSB)
DRV - [2009-05-11 14:40:55 | 000,017,488 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\etdrv.sys -- (etdrv)
DRV - [2009-04-28 15:41:46 | 000,140,288 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2009-04-11 05:46:08 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usb8023.sys -- (usb_rndis)
DRV - [2009-02-20 06:17:50 | 000,095,760 | ---- | M] (ATI Research Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV - [2007-06-22 10:59:30 | 000,023,168 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\emAudio.sys -- (emAudio)
DRV - [2007-06-22 10:59:24 | 000,479,232 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\emBDA.sys -- (USB28xxBGA)
DRV - [2007-06-22 10:59:06 | 000,038,656 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\emOEM.sys -- (USB28xxOEM)
DRV - [2005-09-23 22:18:32 | 000,171,520 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\MarvinBus.sys -- (MarvinBus)
DRV - [2005-08-17 06:46:26 | 000,093,872 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdm.sys -- (sscdmdm)
DRV - [2005-08-17 06:46:20 | 000,008,272 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV - [2005-08-17 06:45:00 | 000,058,352 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdbus.sys -- (sscdbus)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://home.microsoft.com/search/search.asp
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://home.microsoft.com/search/lobby/search.asp
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: " URL " = http://www.bing.com/search?q={searchTerms} & FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: " URL " = http://www.google.com/search?q={searchTerms} & rls=com.microsoft:{language}:{referrer:source?} & ie={inputEncoding} & oe={outputEncoding} & sourceid=ie7
IE - HKLM\..\SearchScopes\{6CCAB1E3-ADA5-7183-A8C7-2838A32AD521}: " URL " = http://dts.search-results.com/sr?src=ieb & appid=362 & systemid=406 & sr=0 & q={searchTerms}
IE - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: " ProxyEnable " = 0
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com
IE - HKCU\..\SearchScopes,DefaultScope =
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: " URL " = http://www.bing.com/search?q={searchTerms} & FORM=IE8SRC
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: " URL " = http://www.bing.com/search?q={searchTerms} & FORM=IE8SRC
IE - HKCU\..\SearchScopes\{6CCAB1E3-ADA5-7183-A8C7-2838A32AD521}: " URL " = http://search.babylon.com/?q={searchTerms} & affID=110823 & tt=270912_7a_3912_1 & babsrc=SP_ss & mntrId=6a330e8800000000000000ff6e95397a
IE - HKCU\..\SearchScopes\{A56491D5-5EF2-42AA-8DD8-314138B95A29}: " URL " = http://www.bing.com/search?FORM=UP50DF & PC=UP50 & q={searchTerms} & src=IE-SearchBox
IE - HKCU\..\SearchScopes\{B54861A6-8B72-4335-9797-1D766E2F9C75}: " URL " = http://search.softonic.com/INF00046/tb_v1?q={searchTerms} & SearchSource=4 & cc= & r=531
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: " ProxyEnable " = 0
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..browser.startup.homepage: " http://www.gazeta.pl/0,0.html?p=128 "
FF - prefs.js..extensions.enabledItems: webbooster@iminent.com:1.0.1007.0
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.1
FF - prefs.js..extensions.enabledItems: wrc@avast.com:20110101
FF - prefs.js..browser.search.defaultenginename: " Funmoods "
FF - prefs.js..browser.search.selectedEngine: " Funmoods "
FF - prefs.js..keyword.URL: " http://searchfunmoods.com/?f=1 & a=iron2 & chnl=iron2 & cd=2XzuyEtN2Y1L1QzutDtD0F0FyC0EzyyDtAzyyB0AtD0EzzzztN0D0Tzu0CtByBtBtN1L2XzutBtFtBtFtDtFtAyEyE & cr=2077010955 & q= "
FF - prefs.js..browser.search.param.yahoo-fr: " chr-greentree_ff & ilc=12 & type=616163 "
FF - user.js..browser.search.selectedEngine: " Search the web "
FF - user.js..browser.search.order.1: " Search the web "
FF - user.js..browser.search.defaultenginename: " Search the web "
FF - user.js..keyword.URL: " http://www.browsersafesearch.com?client=mozilla-firefox & cd=UTF-8 & search=1 & q= "
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.13.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.13.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.4: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pages.tvunetworks.com/WebPlayer: File not found
FF - HKLM\Software\MozillaPlugins\@pandasecurity.com/activescan: File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.6.14: c:\program files\real\realplayer\Netscape6\nppl3260.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14: c:\program files\real\realplayer\Netscape6\nprjplug.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.6.14: c:\program files\real\realplayer\Netscape6\nprpplugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@vividas.com/npVividasPlayer: C:\Program Files\Vividas\Player\npVividasPlayer.dll ( )
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.3: C:\Users\janek11\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll ( )
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\janek11\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\janek11\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0153E448-190B-4987-BDE1-F256CADA672F}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2013-02-09 10:50:49 | 000,000,000 | ---D | M]
[2012-11-06 17:28:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\janek11\AppData\Roaming\mozilla\Extensions
[2012-11-06 17:28:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\janek11\AppData\Roaming\mozilla\Firefox\extensions
[2012-11-06 17:28:48 | 000,000,000 | ---D | M] (uTorrentControl2 Community Toolbar) -- C:\Users\janek11\AppData\Roaming\mozilla\Firefox\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
[2013-02-12 19:27:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\janek11\AppData\Roaming\mozilla\Firefox\Profiles\c3p988pq.default\extensions
[2011-03-23 11:32:06 | 000,000,000 | ---D | M] (No name found) -- C:\Users\janek11\AppData\Roaming\mozilla\Firefox\Profiles\c3p988pq.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012-11-06 17:28:39 | 000,000,000 | ---D | M] (cacaoweb) -- C:\Users\janek11\AppData\Roaming\mozilla\Firefox\Profiles\c3p988pq.default\extensions\cacaoweb@cacaoweb.org
[2012-11-11 16:25:29 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\janek11\AppData\Roaming\mozilla\Firefox\Profiles\c3p988pq.default\extensions\ffxtlbr@babylon.com
[2012-11-06 17:28:40 | 000,000,000 | ---D | M] (Funmoods.com) -- C:\Users\janek11\AppData\Roaming\mozilla\Firefox\Profiles\c3p988pq.default\extensions\ffxtlbr@funmoods.com
[2011-03-23 11:32:06 | 000,000,000 | ---D | M] (No name found) -- C:\Users\janek11\AppData\Roaming\mozilla\Firefox\Profiles\c3p988pq.default\extensions\staged-xpis
[2012-11-06 17:28:45 | 000,000,000 | ---D | M] (toolplugin) -- C:\Users\janek11\AppData\Roaming\mozilla\Firefox\Profiles\c3p988pq.default\extensions\welcome@toolmin.com
[2009-03-18 13:40:42 | 000,019,153 | ---- | M] () (No name found) -- C:\Users\janek11\AppData\Roaming\mozilla\firefox\profiles\c3p988pq.default\extensions\staged-xpis\{20a82645-c095-46ed-80e3-08825760534b}\MicrosoftDotNetFrameworkAssistant.xpi
[2012-09-28 11:55:42 | 000,000,783 | ---- | M] () -- C:\Users\janek11\AppData\Roaming\mozilla\firefox\profiles\c3p988pq.default\searchplugins\Funmoods.xml
File not found (No name found) -- C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST5\WEBREP\FF
File not found (No name found) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
File not found (No name found) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}
File not found (No name found) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\WEBBOOSTER@IMINENT.COM
[2013-02-09 10:50:49 | 000,000,000 | ---D | M] (RealPlayer Browser Record Plugin) -- C:\PROGRAMDATA\REAL\REALPLAYER\BROWSERRECORDPLUGIN\FIREFOX\EXT
[color=#E56717]========== Chrome ==========[/color]
CHR - homepage: http://search.reimageplus.com/
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = http://www.google.com/search?q={searchTerms} & rlz=1I7RNRN_pl & ie={inputEncoding} & oe={outputEncoding} & sourceid=ie7
CHR - default_search_provider: suggest_url =
CHR - homepage: http://search.reimageplus.com/
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\janek11\AppData\Local\Google\Chrome\Application\24.0.1312.57\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\janek11\AppData\Local\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\janek11\AppData\Local\Google\Chrome\Application\24.0.1312.57\pdf.dll
CHR - plugin: registryAccess (Enabled) = C:\Users\janek11\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaapoecfpbnohmjikjhpijcnonhhhlh\7.17.0.0_0\background/registryAccess.dll
CHR - plugin: Babylon ToolBar (Enabled) = C:\Users\janek11\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.8_0\BabylonChromeToolBar.dll
CHR - plugin: Skype Click to Call (Enabled) = C:\Users\janek11\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.3.0.11079_0\npSkypeChromePlugin.dll
CHR - plugin: Application Manager (Enabled) = C:\Users\janek11\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph\1.0_0\spext.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Microsoft Windows Media Player Firefox Plugin (Enabled) = C:\Users\janek11\AppData\Roaming\Mozilla\plugins\np-mswmp.dll
CHR - plugin: Photodex Presenter Plugin (Enabled) = C:\Users\janek11\AppData\Roaming\Mozilla\plugins\npPxPlay.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: Java(TM) Platform SE 7 U7 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files\Microsoft\Office Live\npOLW.dll
CHR - plugin: Windows Live Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll
CHR - plugin: RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll
CHR - plugin: RealDownloader Plugin (Enabled) = C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll
CHR - plugin: RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll
CHR - plugin: RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
CHR - plugin: Facebook Plugin (Enabled) = C:\Users\janek11\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll
CHR - plugin: Java Deployment Toolkit 7.0.70.10 (Enabled) = C:\Windows\system32\npDeployJava1.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = c:\program files\real\realplayer\Netscape6\nppl3260.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = c:\program files\real\realplayer\Netscape6\nprjplug.dll
CHR - plugin: RealPlayer Download Plugin (Enabled) = c:\program files\real\realplayer\Netscape6\nprpplugin.dll
CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\janek11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\
CHR - Extension: Search the current site (Wyszukaj w witrynie) = C:\Users\janek11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jliolpcnkmolaaecncdfeofombdekjcp\5_0\
CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\janek11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\
CHR - Extension: Search the current site (Wyszukaj w witrynie) = C:\Users\janek11\AppData\Local\Google\Chrome\User Data\Default\Extensions\jliolpcnkmolaaecncdfeofombdekjcp\5_0\
O1 HOSTS File: ([2013-02-12 13:23:01 | 000,000,855 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (DivX Plus Web Player HTML5 & lt; video & gt; ) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll File not found
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (IVONA Reader) - {8664889D-ED18-4713-918F-E2BB69D8452B} - C:\Program Files\IVONA\IVONA Reader\integr\IR_iexplorer2.dll (IVO Software Sp. z o.o.)
O2 - BHO: (PDF Suite 2012 Helper) - {a938761b-202b-4828-87e4-f21fec37d02d} - Reg Error: Value error. File not found
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (no name) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - No CLSID value found.
O2 - BHO: (no name) - AutorunsDisabled - No CLSID value found.
O3 - HKLM\..\Toolbar: (Magentic Toolbar) - {07C92F45-3193-4FD9-AF54-B1925707C872} - C:\Program Files\magentictb\magenticDx.dll File not found
O3 - HKLM\..\Toolbar: (PDF Suite 2012 Toolbar) - {11aa5c56-b4e2-4b8f-803a-d340415532f3} - Reg Error: Value error. File not found
O3 - HKLM\..\Toolbar: (IVONA Reader) - {8664889D-ED18-4713-918F-E2BB69D8452B} - C:\Program Files\IVONA\IVONA Reader\integr\IR_iexplorer2.dll (IVO Software Sp. z o.o.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Nikon Message Center 2] C:\Program Files\Nikon\Nikon Message Center 2\NkMC2.exe (Nikon Corporation)
O4 - HKCU..\Run: [F-Secure Hoster] C:\Program Files\netia\Wirtualny Dysk\fshoster32.exe (F-Secure Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = Reg Error: Value error. File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Main present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = Reg Error: Value error. File not found
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error: Key error. File not found
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - Reg Error: Value error. File not found
O13 - gopher Prefix: missing
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {FC11A119-C2F7-46F4-9E32-937ABA26816E} file:///D:/CDVIEWER/CdViewer.cab (AMI DicomDir TreeView Control 2.1)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{93BB04F6-6EA8-4559-9497-3A5E847FC292}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D3070459-3125-4F22-B767-245CA07DF06E}: DhcpNameServer = 192.168.1.254
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\Multi: DllName - (C:\Program Files\Stardock\ThinkDesk\Multiplicity\MultiWin32.dll) - C:\Program Files\Stardock\ThinkDesk\Multiplicity\MultiWin32.dll (Stardock)
O21 - SSODL: IconPackager Repair - {1799460C-0BC8-4865-B9DF-4A36CD703FF0} - C:\Program Files\Stardock\Object Desktop\IconPackager\iprepair.dll (Stardock.net, Inc)
O22 - SharedTaskScheduler: {EC654325-1273-C2A9-2B7C-45D29BCE68FB} - Deskscapes - C:\Program Files\Stardock\Object Desktop\DeskScapes3\deskscapes.dll (Stardock Corporation)
O22 - SharedTaskScheduler: {EC654325-1273-C2A9-2B7C-45D29BCE68FD} - Stardock Vista ControlPanel Extension - C:\Program Files\Stardock\Object Desktop\DeskScapes\DesktopControlPanel.dll (Stardock)
O22 - SharedTaskScheduler: {EC654325-1273-C2A9-2B7C-45D29BCE68FF} - StardockDreamController - C:\Program Files\Stardock\Object Desktop\DeskScapes\DreamControl.dll (Stardock)
O24 - Desktop WallPaper: C:\Users\janek11\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\janek11\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O32 - HKLM CDRom: AutoRun - 0
O32 - AutoRun File - [2006-09-18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2013-02-09 08:16:57 | 000,000,000 | ---D | M] - L:\automaoa -- [ NTFS ]
O33 - MountPoints2\{1b11375a-6d86-11df-9d3f-00241d3e330b}\Shell\AutoRun\command - " " = J:\Menu.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (NaBootMir)
O35 - HKLM\..comfile [open] -- " %1 " %*
O35 - HKLM\..exefile [open] -- " %1 " %*
O37 - HKLM\...com [@ = comfile] -- " %1 " %*
O37 - HKLM\...exe [@ = exefile] -- " %1 " %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2013-02-13 13:31:04 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2013-02-13 13:31:03 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2013-02-13 13:31:03 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2013-02-13 13:31:03 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2013-02-13 13:31:02 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2013-02-13 13:31:01 | 001,800,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2013-02-13 13:31:01 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2013-02-13 13:30:58 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2013-02-13 13:26:17 | 002,048,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2013-02-13 13:26:16 | 001,314,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2013-02-13 13:26:14 | 003,602,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2013-02-13 13:26:14 | 003,550,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2013-02-13 10:18:03 | 000,000,000 | ---D | C] -- C:\ProgramData\boost_interprocess
[2013-02-13 09:01:35 | 000,000,000 | ---D | C] -- C:\Users\janek11\Desktop\Nowy folder
[2013-02-13 07:58:09 | 000,000,000 | ---D | C] -- C:\Users\janek11\Desktop\Project
[2013-02-13 07:27:30 | 000,000,000 | ---D | C] -- C:\ProgramData\F-Secure Online Backup
[2013-02-13 07:27:28 | 000,000,000 | ---D | C] -- C:\Users\janek11\AppData\Local\F-Secure Online Backup
[2013-02-13 07:27:24 | 000,000,000 | ---D | C] -- C:\Users\janek11\AppData\Local\F-Secure
[2013-02-13 07:27:04 | 000,000,000 | ---D | C] -- C:\Program Files\netia
[2013-02-12 21:08:11 | 000,000,000 | ---D | C] -- C:\Users\janek11\Doctor Web
[2013-02-12 20:37:31 | 000,021,104 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2013-02-12 14:50:59 | 000,262,560 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2013-02-12 14:50:46 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2013-02-12 14:50:46 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2013-02-12 14:50:46 | 000,094,112 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2013-02-12 13:28:17 | 000,000,000 | ---D | C] -- C:\Windows\TEMP
[2013-02-12 13:12:45 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2013-02-12 09:32:12 | 000,000,000 | ---D | C] -- C:\Users\janek11\Desktop\0000
[2013-02-11 12:03:24 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Security Client
[2013-02-11 08:06:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Anvsoft
[2013-02-10 21:55:46 | 000,000,000 | ---D | C] -- C:\Users\janek11\AppData\Local\{1D94B342-F902-475A-BB25-9F03BDC88034}
[2013-02-10 15:00:19 | 000,000,000 | ---D | C] -- C:\Users\janek11\Desktop\Originals
[2013-02-10 09:45:09 | 000,000,000 | ---D | C] -- C:\Users\janek11\AppData\Local\{1E737583-5A18-4C1E-B422-2F9A05345E23}
[2013-02-10 09:43:37 | 000,000,000 | ---D | C] -- C:\Users\janek11\AppData\Local\{19FADEB9-6DB1-4B08-9D5A-8D9DD02859B4}
[2013-02-10 09:41:31 | 000,000,000 | ---D | C] -- C:\Users\janek11\AppData\Local\{894FB01B-5787-43EF-BA38-21337DD636D7}
[2013-02-09 20:37:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GridinSoft Trojan Killer
[2013-02-09 20:37:52 | 000,000,000 | ---D | C] -- C:\Program Files\GridinSoft Trojan Killer
[2013-02-09 12:24:08 | 000,000,000 | ---D | C] -- C:\Users\janek11\AppData\Local\_NkvMail@
[2013-02-09 12:14:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft Connect
[2013-02-09 12:11:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft Panorama Maker 5
[2013-02-09 12:03:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nikon Message Center 2
[2013-02-09 11:47:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ViewNX 2
[2013-02-08 19:50:41 | 000,000,000 | ---D | C] -- C:\Users\janek11\Documents\Pinnacle
[2013-02-08 18:29:25 | 000,000,000 | ---D | C] -- C:\Users\janek11\temp
[2013-02-08 18:26:00 | 000,000,000 | ---D | C] -- C:\Users\janek11\AppData\Local\Avid
[2013-02-08 18:12:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Avid
[2013-02-08 18:12:39 | 000,000,000 | ---D | C] -- C:\Program Files\Pando Networks
[2013-02-08 17:59:01 | 000,000,000 | ---D | C] -- C:\ProgramData\PCTV Systems
[2013-02-08 09:24:33 | 000,000,000 | ---D | C] -- C:\Program Files\DivX
[2013-02-08 07:22:14 | 000,000,000 | ---D | C] -- C:\Program Files\Red Giant Link
[2013-02-07 21:24:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Nikon
[2013-02-07 19:50:41 | 000,000,000 | ---D | C] -- C:\Users\janek11\AppData\Roaming\Nikon
[2013-02-07 19:50:38 | 000,000,000 | ---D | C] -- C:\Users\janek11\AppData\Local\Nikon
[2013-02-07 17:07:16 | 000,000,000 | ---D | C] -- C:\Program Files\ArcSoft
[2013-02-07 17:03:15 | 000,000,000 | ---D | C] -- C:\Program Files\Nikon
[2013-02-07 17:02:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Ultima_T15
[2013-02-07 17:02:20 | 000,000,000 | ---D | C] -- C:\ProgramData\EnterNHelp
[2013-02-07 16:50:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Link to Nikon
[2013-02-07 09:25:09 | 000,000,000 | ---D | C] -- C:\Users\janek11\Documents\Pobierania MAGIX
[2013-02-06 11:12:30 | 000,000,000 | ---D | C] -- C:\Users\janek11\Documents\AVS4YOU
[2013-02-06 11:03:05 | 000,000,000 | ---D | C] -- C:\ProgramData\AVS4YOU
[2013-02-06 10:59:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU
[2013-02-06 08:38:08 | 000,000,000 | ---D | C] -- C:\Users\janek11\Documents\CyberLink
[2013-02-06 08:36:52 | 000,000,000 | ---D | C] -- C:\Users\janek11\AppData\Roaming\CyberLink
[2013-02-06 08:36:51 | 000,000,000 | ---D | C] -- C:\ProgramData\CyberLink(49)
[2013-02-06 08:30:53 | 000,000,000 | ---D | C] -- C:\Program Files\CyberLink(14)
[2013-02-05 16:00:19 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDirector 11
[2013-02-05 10:49:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
[2013-02-05 10:49:19 | 000,000,000 | ---D | C] -- C:\Users\janek11\AppData\Roaming\Uniblue
[2013-02-03 22:38:16 | 000,000,000 | ---D | C] -- C:\Program Files\CyberLink
[2013-02-03 16:00:31 | 000,000,000 | ---D | C] -- C:\ProgramData\CyberLink
[2013-02-01 22:00:59 | 000,000,000 | ---D | C] -- C:\Users\janek11\AppData\Roaming\SpeedMaxPc
[2013-01-31 12:09:00 | 000,000,000 | ---D | C] -- C:\Users\janek11\Documents\Presentation3D
[2013-01-30 21:56:13 | 000,000,000 | ---D | C] -- C:\Users\janek11\AppData\Roaming\NapiProjekt
[2013-01-30 21:56:02 | 000,000,000 | ---D | C] -- C:\Program Files\NapiProjekt
[2013-01-28 08:05:04 | 000,000,000 | ---D | C] -- C:\Users\janek11\AppData\Roaming\EfficientPIM
[2013-01-27 07:52:55 | 000,000,000 | ---D | C] -- C:\perflogs
[2013-01-23 18:30:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013-01-23 10:42:57 | 000,000,000 | ---D | C] -- C:\Users\janek11\Documents\DVDShow
[2013-01-16 15:31:05 | 000,000,000 | ---D | C] -- C:\rei
[2012-11-09 08:50:04 | 004,367,524 | ---- | C] (SuperLogix.net ) -- C:\Users\janek11\AppData\Roaming\MHPPVD_susetup.exe
[2012-02-19 09:12:50 | 002,371,152 | ---- | C] (DownVision ) -- C:\Users\janek11\AppData\Local\setup.exe
[2011-07-21 10:22:41 | 007,760,687 | ---- | C] (Boraxsoft) -- C:\Users\janek11\AppData\Roaming\SetupGFD.exe
[2011-07-21 10:22:09 | 004,284,535 | ---- | C] (ffdshow ) -- C:\Users\janek11\AppData\Roaming\ffdshow.exe
[2011-07-21 10:22:06 | 000,642,685 | ---- | C] (Xvid team ) -- C:\Users\janek11\AppData\Roaming\xvid.exe
[2011-07-21 10:21:48 | 005,514,668 | ---- | C] (LIGHTNING UK!) -- C:\Users\janek11\AppData\Roaming\Imgburn.exe
[2010-02-21 22:31:50 | 000,047,360 | ---- | C] (VSO Software) -- C:\Users\janek11\AppData\Roaming\pcouffin.sys
[1 C:\Windows\*.tmp files - & gt; C:\Windows\*.tmp - & gt; ]
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2013-02-13 14:50:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013-02-13 14:06:00 | 000,001,036 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013-02-13 14:00:14 | 000,722,124 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2013-02-13 14:00:14 | 000,641,306 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013-02-13 14:00:14 | 000,155,988 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2013-02-13 14:00:14 | 000,123,086 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013-02-13 14:00:00 | 000,001,066 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2127115111-3191764418-1478916674-1001UA.job
[2013-02-13 13:54:18 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013-02-13 13:53:49 | 000,000,322 | ---- | M] () -- C:\Windows\tasks\mdmonitor.job
[2013-02-13 13:53:14 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\Windows\gdrv.sys
[2013-02-13 13:52:27 | 000,003,792 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013-02-13 13:52:27 | 000,003,792 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013-02-13 13:51:03 | 001,970,912 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013-02-13 13:50:50 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013-02-13 13:48:31 | 3219,644,416 | -HS- | M] () -- C:\hiberfil.sys
[2013-02-13 13:48:23 | 000,000,000 | ---- | M] () -- C:\Windows\System32\drivers\lvuvc.hs
[2013-02-13 11:43:21 | 000,002,337 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2013-02-13 10:53:28 | 001,491,772 | ---- | M] () -- C:\Users\janek11\Desktop\Panorama 2.JPG
[2013-02-13 10:35:48 | 001,665,983 | ---- | M] () -- C:\Users\janek11\Desktop\Panorama 1.JPG
[2013-02-13 10:02:57 | 000,000,020 | -H-- | M] () -- C:\ProgramData\PKP_DLet.DAT
[2013-02-13 09:59:14 | 000,010,464 | ---- | M] () -- C:\Users\janek11\Desktop\603165_460233894043091_829880728_a.jpg
[2013-02-12 20:37:40 | 000,000,689 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013-02-12 19:36:01 | 000,000,098 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat
[2013-02-12 18:37:46 | 000,000,349 | ---- | M] () -- C:\Users\Public\Documents\PCLECHAL.INI
[2013-02-12 17:00:00 | 000,001,014 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2127115111-3191764418-1478916674-1001Core.job
[2013-02-12 14:50:31 | 000,094,112 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2013-02-12 14:50:26 | 000,262,560 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2013-02-12 14:50:26 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2013-02-12 14:50:26 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2013-02-12 14:50:25 | 000,861,088 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll
[2013-02-12 14:50:25 | 000,782,240 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\deployJava1.dll
[2013-02-12 13:27:54 | 000,181,064 | ---- | M] (Sysinternals) -- C:\Windows\PSEXESVC.EXE
[2013-02-12 13:23:01 | 000,000,855 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2013-02-12 12:28:28 | 000,000,855 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts_bak_722
[2013-02-12 12:09:52 | 000,000,393 | ---- | M] () -- C:\temp61.bat
[2013-02-12 10:35:57 | 000,053,719 | ---- | M] () -- C:\Users\janek11\Desktop\164675_548308298514539_1020975923_n.jpg
[2013-02-11 21:56:05 | 008,294,454 | ---- | M] () -- C:\2013_02_11_21_56_05.bmp
[2013-02-11 21:54:53 | 008,294,454 | ---- | M] () -- C:\2013_02_11_21_54_52.bmp
[2013-02-11 16:35:32 | 000,224,256 | ---- | M] () -- C:\Users\janek11\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013-02-11 13:27:40 | 000,000,119 | ---- | M] () -- C:\Users\janek11\Desktop\Wirtualna Polska - www.wp.pl.url
[2013-02-11 12:06:27 | 000,002,198 | ---- | M] () -- C:\Windows\epplauncher.mif
[2013-02-11 11:46:43 | 001,721,002 | ---- | M] () -- C:\Users\janek11\Desktop\IEDiag.cab
[2013-02-10 18:07:25 | 000,037,955 | ---- | M] () -- C:\Users\janek11\Desktop\Video call snapshot 8.png
[2013-02-10 18:06:52 | 000,041,046 | ---- | M] () -- C:\Users\janek11\Desktop\Video call snapshot 7.png
[2013-02-10 18:06:43 | 000,037,870 | ---- | M] () -- C:\Users\janek11\Desktop\Video call snapshot 6.png
[2013-02-10 18:05:44 | 000,041,889 | ---- | M] () -- C:\Users\janek11\Desktop\Video call snapshot 5.png
[2013-02-10 15:13:49 | 000,000,020 | ---- | M] () -- C:\ProgramData\PKP_DLes.DAT
[2013-02-10 15:13:45 | 000,000,020 | ---- | M] () -- C:\ProgramData\PKP_DLev.DAT
[2013-02-10 15:02:51 | 000,300,982 | ---- | M] () -- C:\Users\janek11\Desktop\DSCN0045~1.jpg
[2013-02-10 14:32:50 | 024,846,336 | ---- | M] () -- C:\Users\janek11\Desktop\MyDiary.edfx
[2013-02-10 12:40:28 | 000,012,660 | ---- | M] () -- C:\Users\janek11\Desktop\000.jpg
[2013-02-10 12:30:39 | 000,000,444 | ---- | M] () -- C:\Windows\tasks\Wise Care 365 PC Checkup Task.job
[2013-02-09 22:38:18 | 000,000,000 | ---- | M] () -- C:\Users\janek11\Documents\Default.rdp
[2013-02-09 18:00:18 | 000,000,394 | ---- | M] () -- C:\temp994.bat
[2013-02-09 18:00:17 | 000,000,855 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts_bak_423
[2013-02-09 17:13:30 | 000,000,394 | ---- | M] () -- C:\temp617.bat
[2013-02-09 12:11:17 | 000,001,795 | ---- | M] () -- C:\Users\Public\Desktop\Panorama Maker 5.lnk
[2013-02-09 11:51:04 | 000,697,712 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013-02-09 11:51:04 | 000,074,096 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013-02-09 11:50:44 | 015,739,760 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerInstaller.exe
[2013-02-09 11:47:15 | 000,001,912 | ---- | M] () -- C:\Users\Public\Desktop\ViewNX 2.lnk
[2013-02-09 11:44:47 | 000,106,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ATL71.DLL
[2013-02-09 08:36:39 | 000,288,850 | ---- | M] () -- C:\Users\janek11\QQ.jpg
[2013-02-09 07:38:21 | 000,004,178 | ---- | M] () -- C:\Users\janek11\Desktop\myalbum.html
[2013-02-08 11:18:28 | 000,000,344 | ---- | M] () -- C:\Users\janek11\Desktop\3.url
[2013-02-08 11:18:12 | 000,000,344 | ---- | M] () -- C:\Users\janek11\Desktop\2.url
[2013-02-08 11:17:24 | 000,000,342 | ---- | M] () -- C:\Users\janek11\Desktop\1.url
[2013-02-07 21:41:06 | 003,596,369 | ---- | M] () -- C:\Users\janek11\Desktop\DSCN0013.JPG
[2013-02-07 17:04:23 | 000,000,268 | R--- | M] () -- C:\ProgramData\Ambient
[2013-02-07 17:04:23 | 000,000,268 | R--- | M] () -- C:\Users\janek11\AppData\Roaming\Action
[2013-02-07 17:04:23 | 000,000,012 | R--- | M] () -- C:\ProgramData\Automatic Filter
[2013-02-07 17:03:05 | 000,000,268 | R--- | M] () -- C:\ProgramData\Analog Mono
[2013-02-07 17:03:05 | 000,000,268 | R--- | M] () -- C:\Users\janek11\AppData\Roaming\Action Clauses
[2013-02-07 17:03:05 | 000,000,012 | R--- | M] () -- C:\ProgramData\BSD
[2013-02-07 17:03:04 | 000,000,268 | R--- | M] () -- C:\ProgramData\Ambience
[2013-02-07 17:03:04 | 000,000,268 | R--- | M] () -- C:\Users\janek11\AppData\Roaming\AccountTypes
[2013-02-07 17:03:04 | 000,000,012 | R--- | M] () -- C:\ProgramData\Audio Units
[2013-02-07 17:02:24 | 000,000,020 | ---- | M] () -- C:\ProgramData\PKP_DLeo.DAT
[2013-02-07 17:02:20 | 000,000,268 | R--- | M] () -- C:\Users\janek11\AppData\Roaming\Application Support
[2013-02-07 17:02:20 | 000,000,012 | R--- | M] () -- C:\ProgramData\Classical
[2013-02-07 14:03:14 | 346,357,688 | ---- | M] () -- C:\Users\janek11\Desktop\DSCN0008.MOV
[2013-02-05 12:31:22 | 000,001,356 | ---- | M] () -- C:\Users\janek11\AppData\Local\d3d9caps.dat
[2013-02-03 21:13:41 | 000,044,705 | ---- | M] () -- C:\Users\janek11\Desktop\Ashampoo_Snap_2013.02.03_21h13m33s_003_.jpg
[2013-02-03 21:13:12 | 000,046,466 | ---- | M] () -- C:\Users\janek11\Desktop\Ashampoo_Snap_2013.02.03_21h13m05s_002_.jpg
[2013-02-03 21:12:18 | 000,050,478 | ---- | M] () -- C:\Users\janek11\Desktop\Ashampoo_Snap_2013.02.03_21h12m04s_001_.jpg
[2013-02-02 09:15:17 | 000,000,394 | ---- | M] () -- C:\temp360.bat
[2013-02-01 16:12:34 | 000,587,255 | ---- | M] () -- C:\Users\janek11\Desktop\DOLINA KOŚCIELISKA.jpg
[2013-01-31 21:57:30 | 018,921,130 | ---- | M] () -- C:\Users\janek11\Desktop\Mój film.mkvF0000.mkv
[2013-01-30 21:56:13 | 000,000,797 | ---- | M] () -- C:\Users\janek11\Desktop\NapiProjekt.lnk
[2013-01-30 14:07:32 | 000,000,394 | ---- | M] () -- C:\temp507.bat
[2013-01-30 11:53:21 | 000,232,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2013-01-29 17:34:56 | 004,478,047 | ---- | M] () -- C:\Users\janek11\Desktop\0000_(new).mp3
[2013-01-29 14:12:36 | 006,348,173 | ---- | M] () -- C:\Users\janek11\Desktop\CM ETARZ.wma
[2013-01-28 09:23:22 | 001,851,392 | ---- | M] () -- C:\Users\janek11\Documents\My Information.effx
[2013-01-26 11:05:59 | 000,007,168 | ---- | M] () -- C:\Windows\System32\drivers\utiymzq1.sys
[2013-01-26 10:39:21 | 003,684,761 | ---- | M] () -- C:\Users\janek11\Desktop\Ricky King - Exodus_(new).mp3
[2013-01-25 20:20:33 | 000,000,389 | ---- | M] () -- C:\Users\janek11\Desktop\REKLAMOFON.PL
[2013-01-25 18:11:05 | 001,990,365 | ---- | M] () -- C:\Users\janek11\Desktop\HHHHH.wma
[2013-01-25 17:50:55 | 002,797,445 | ---- | M] () -- C:\Users\janek11\Desktop\Jacek_Darabasz-Spanish_Eyes.mp3
[1 C:\Windows\*.tmp files - & gt; C:\Windows\*.tmp - & gt; ]
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2013-02-13 10:53:27 | 001,491,772 | ---- | C] () -- C:\Users\janek11\Desktop\Panorama 2.JPG
[2013-02-13 09:59:14 | 000,010,464 | ---- | C] () -- C:\Users\janek11\Desktop\603165_460233894043091_829880728_a.jpg
[2013-02-13 08:59:21 | 001,665,983 | ---- | C] () -- C:\Users\janek11\Desktop\Panorama 1.JPG
[2013-02-12 20:37:40 | 000,000,689 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013-02-12 19:34:54 | 000,000,098 | ---- | C] () -- C:\Windows\DeleteOnReboot.bat
[2013-02-12 12:09:52 | 000,000,393 | ---- | C] () -- C:\temp61.bat
[2013-02-12 10:35:57 | 000,053,719 | ---- | C] () -- C:\Users\janek11\Desktop\164675_548308298514539_1020975923_n.jpg
[2013-02-11 21:56:05 | 008,294,454 | ---- | C] () -- C:\2013_02_11_21_56_05.bmp
[2013-02-11 21:54:52 | 008,294,454 | ---- | C] () -- C:\2013_02_11_21_54_52.bmp
[2013-02-11 13:20:38 | 000,000,119 | ---- | C] () -- C:\Users\janek11\Desktop\Wirtualna Polska - www.wp.pl.url
[2013-02-11 12:03:44 | 000,001,786 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
[2013-02-11 11:46:43 | 001,721,002 | ---- | C] () -- C:\Users\janek11\Desktop\IEDiag.cab
[2013-02-10 21:40:51 | 003,596,369 | ---- | C] () -- C:\Users\janek11\Desktop\DSCN0013.JPG
[2013-02-10 18:07:25 | 000,037,955 | ---- | C] () -- C:\Users\janek11\Desktop\Video call snapshot 8.png
[2013-02-10 18:06:52 | 000,041,046 | ---- | C] () -- C:\Users\janek11\Desktop\Video call snapshot 7.png
[2013-02-10 18:06:43 | 000,037,870 | ---- | C] () -- C:\Users\janek11\Desktop\Video call snapshot 6.png
[2013-02-10 18:05:44 | 000,041,889 | ---- | C] () -- C:\Users\janek11\Desktop\Video call snapshot 5.png
[2013-02-10 12:40:28 | 000,012,660 | ---- | C] () -- C:\Users\janek11\Desktop\000.jpg
[2013-02-09 22:38:18 | 000,000,000 | ---- | C] () -- C:\Users\janek11\Documents\Default.rdp
[2013-02-09 18:00:18 | 000,000,394 | ---- | C] () -- C:\temp994.bat
[2013-02-09 17:13:30 | 000,000,394 | ---- | C] () -- C:\temp617.bat
[2013-02-09 16:55:34 | 000,001,066 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2127115111-3191764418-1478916674-1001UA.job
[2013-02-09 16:55:34 | 000,001,014 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2127115111-3191764418-1478916674-1001Core.job
[2013-02-09 16:01:09 | 000,001,036 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013-02-09 16:01:08 | 000,001,032 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013-02-09 14:47:24 | 000,300,982 | ---- | C] () -- C:\Users\janek11\Desktop\DSCN0045~1.jpg
[2013-02-09 12:11:17 | 000,001,795 | ---- | C] () -- C:\Users\Public\Desktop\Panorama Maker 5.lnk
[2013-02-09 11:47:15 | 000,001,912 | ---- | C] () -- C:\Users\Public\Desktop\ViewNX 2.lnk
[2013-02-09 08:36:39 | 000,288,850 | ---- | C] () -- C:\Users\janek11\QQ.jpg
[2013-02-09 07:38:21 | 000,004,178 | ---- | C] () -- C:\Users\janek11\Desktop\myalbum.html
[2013-02-08 11:18:12 | 000,000,344 | ---- | C] () -- C:\Users\janek11\Desktop\3.url
[2013-02-08 11:18:12 | 000,000,344 | ---- | C] () -- C:\Users\janek11\Desktop\2.url
[2013-02-08 11:17:24 | 000,000,342 | ---- | C] () -- C:\Users\janek11\Desktop\1.url
[2013-02-07 17:04:23 | 000,000,268 | R--- | C] () -- C:\ProgramData\Ambient
[2013-02-07 17:04:23 | 000,000,268 | R--- | C] () -- C:\Users\janek11\AppData\Roaming\Action
[2013-02-07 17:04:23 | 000,000,020 | ---- | C] () -- C:\ProgramData\PKP_DLes.DAT
[2013-02-07 17:04:23 | 000,000,012 | R--- | C] () -- C:\ProgramData\Automatic Filter
[2013-02-07 17:03:05 | 000,000,268 | R--- | C] () -- C:\ProgramData\Analog Mono
[2013-02-07 17:03:05 | 000,000,268 | R--- | C] () -- C:\Users\janek11\AppData\Roaming\Action Clauses
[2013-02-07 17:03:05 | 000,000,020 | ---- | C] () -- C:\ProgramData\PKP_DLev.DAT
[2013-02-07 17:03:05 | 000,000,012 | R--- | C] () -- C:\ProgramData\BSD
[2013-02-07 17:03:04 | 000,000,268 | R--- | C] () -- C:\ProgramData\Ambience
[2013-02-07 17:03:04 | 000,000,268 | R--- | C] () -- C:\Users\janek11\AppData\Roaming\AccountTypes
[2013-02-07 17:03:04 | 000,000,020 | -H-- | C] () -- C:\ProgramData\PKP_DLet.DAT
[2013-02-07 17:02:20 | 000,000,268 | R--- | C] () -- C:\Users\janek11\AppData\Roaming\Application Support
[2013-02-07 17:02:20 | 000,000,020 | ---- | C] () -- C:\ProgramData\PKP_DLeo.DAT
[2013-02-07 17:02:20 | 000,000,012 | R--- | C] () -- C:\ProgramData\Classical
[2013-02-07 17:02:20 | 000,000,012 | R--- | C] () -- C:\ProgramData\Audio Units
[2013-02-07 14:03:14 | 346,357,688 | ---- | C] () -- C:\Users\janek11\Desktop\DSCN0008.MOV
[2013-02-03 21:13:41 | 000,044,705 | ---- | C] () -- C:\Users\janek11\Desktop\Ashampoo_Snap_2013.02.03_21h13m33s_003_.jpg
[2013-02-03 21:13:12 | 000,046,466 | ---- | C] () -- C:\Users\janek11\Desktop\Ashampoo_Snap_2013.02.03_21h13m05s_002_.jpg
[2013-02-03 21:12:18 | 000,050,478 | ---- | C] () -- C:\Users\janek11\Desktop\Ashampoo_Snap_2013.02.03_21h12m04s_001_.jpg
[2013-02-02 09:15:17 | 000,000,394 | ---- | C] () -- C:\temp360.bat
[2013-02-02 08:28:05 | 001,171,804 | ---- | C] () -- C:\Users\janek11\Desktop\P9260303.JPG
[2013-02-02 08:28:05 | 001,114,118 | ---- | C] () -- C:\Users\janek11\Desktop\P9260302.JPG
[2013-02-01 16:12:34 | 000,587,255 | ---- | C] () -- C:\Users\janek11\Desktop\DOLINA KOŚCIELISKA.jpg
[2013-01-31 21:56:02 | 018,921,130 | ---- | C] () -- C:\Users\janek11\Desktop\Mój film.mkvF0000.mkv
[2013-01-30 21:56:13 | 000,000,797 | ---- | C] () -- C:\Users\janek11\Desktop\NapiProjekt.lnk
[2013-01-30 14:20:54 | 3219,644,416 | -HS- | C] () -- C:\hiberfil.sys
[2013-01-30 14:07:32 | 000,000,394 | ---- | C] () -- C:\temp507.bat
[2013-01-29 17:34:47 | 004,478,047 | ---- | C] () -- C:\Users\janek11\Desktop\0000_(new).mp3
[2013-01-29 14:12:25 | 006,348,173 | ---- | C] () -- C:\Users\janek11\Desktop\CM ETARZ.wma
[2013-01-28 08:18:32 | 001,851,392 | ---- | C] () -- C:\Users\janek11\Documents\My Information.effx
[2013-01-26 11:05:57 | 000,007,168 | ---- | C] () -- C:\Windows\System32\drivers\utiymzq1.sys
[2013-01-26 10:39:09 | 003,684,761 | ---- | C] () -- C:\Users\janek11\Desktop\Ricky King - Exodus_(new).mp3
[2013-01-25 20:20:33 | 000,000,389 | ---- | C] () -- C:\Users\janek11\Desktop\REKLAMOFON.PL
[2013-01-25 18:11:00 | 001,990,365 | ---- | C] () -- C:\Users\janek11\Desktop\HHHHH.wma
[2013-01-23 18:09:17 | 000,000,322 | ---- | C] () -- C:\Windows\tasks\mdmonitor.job
[2013-01-22 09:18:19 | 002,797,445 | ---- | C] () -- C:\Users\janek11\Desktop\Jacek_Darabasz-Spanish_Eyes.mp3
[2012-12-30 07:40:34 | 000,002,560 | ---- | C] () -- C:\Windows\_MSRSTRT.EXE
[2012-12-28 21:17:39 | 000,000,182 | ---- | C] () -- C:\Windows\System32\EBPPORT4.DAT
[2012-12-28 21:16:09 | 000,000,025 | ---- | C] () -- C:\Windows\CDEC66SeriesEuro.ini
[2012-12-18 09:32:54 | 054,369,963 | ---- | C] () -- C:\Users\janek11\AppData\Local\AdobeSetupUtility.zip.aamdownload
[2012-12-18 09:32:54 | 000,000,809 | ---- | C] () -- C:\Users\janek11\AppData\Local\AdobeSetupUtility.zip.aamdownload.aamd
[2012-11-30 18:24:19 | 000,162,301 | ---- | C] () -- C:\Windows\Animated Screensaver Maker Uninstaller.exe
[2012-11-24 20:01:13 | 000,005,042 | ---- | C] () -- C:\ProgramData\rfyearrd.gkz
[2012-11-09 08:57:45 | 000,000,082 | ---- | C] () -- C:\Windows\SuperUtil.ini
[2012-11-01 21:33:56 | 000,031,053 | ---- | C] () -- C:\Windows\System32\EPPICPattern131.dat
[2012-11-01 21:33:56 | 000,027,417 | ---- | C] () -- C:\Windows\System32\EPPICPattern121.dat
[2012-11-01 21:33:56 | 000,021,390 | ---- | C] () -- C:\Windows\System32\EPPICPattern5.dat
[2012-11-01 21:33:56 | 000,011,811 | ---- | C] () -- C:\Windows\System32\EPPICPattern4.dat
[2012-11-01 21:33:56 | 000,004,943 | ---- | C] () -- C:\Windows\System32\EPPICPattern6.dat
[2012-11-01 21:33:56 | 000,001,146 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_DU.dat
[2012-11-01 21:33:56 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_PT.dat
[2012-11-01 21:33:56 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_BP.dat
[2012-11-01 21:33:56 | 000,001,136 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_ES.dat
[2012-11-01 21:33:56 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_FR.dat
[2012-11-01 21:33:56 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_CF.dat
[2012-11-01 21:33:56 | 000,001,120 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_IT.dat
[2012-11-01 21:33:56 | 000,001,107 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_GE.dat
[2012-11-01 21:33:56 | 000,001,104 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_EN.dat
[2012-10-16 09:00:00 | 000,716,813 | ---- | C] () -- C:\Windows\unins000.exe
[2012-10-11 12:30:14 | 004,326,955 | ---- | C] () -- C:\Windows\unins000.dat
[2012-09-15 15:45:02 | 000,000,512 | ---- | C] () -- C:\Windows\MirDetected.bin
[2012-08-27 19:05:26 | 000,001,668 | ---- | C] () -- C:\Windows\System32\ASOROSet.bin
[2012-08-25 15:39:16 | 000,000,916 | ---- | C] () -- C:\Windows\MyHeritage.INI
[2012-08-25 15:37:38 | 000,454,656 | ---- | C] () -- C:\Windows\System32\PaintX.dll
[2012-08-21 21:55:02 | 000,004,979 | ---- | C] () -- C:\ProgramData\mxnhytee.feu
[2012-08-04 21:13:28 | 000,006,400 | ---- | C] () -- C:\ProgramData\NanoRepository.bin.bak
[2012-08-04 21:13:28 | 000,006,400 | ---- | C] () -- C:\ProgramData\NanoRepository.bin
[2012-07-29 15:46:53 | 000,024,736 | ---- | C] () -- C:\Windows\System32\PteVideo.dll
[2012-07-27 08:15:02 | 000,000,095 | ---- | C] () -- C:\Users\janek11\AppData\Local\fusioncache.dat
[2012-07-26 20:40:50 | 000,153,088 | ---- | C] () -- C:\Program Files\UNWISE.EXE
[2012-07-24 21:33:32 | 000,000,000 | ---- | C] () -- C:\ProgramData\0x0304A000.sfl
[2012-07-18 21:28:15 | 000,000,043 | ---- | C] () -- C:\Windows\System32\SPCBOX.ini
[2012-07-12 19:37:25 | 000,001,099 | ---- | C] () -- C:\Users\janek11\AppData\Roaming\ShiftN.ini
[2012-06-20 19:14:56 | 000,047,104 | ---- | C] () -- C:\Windows\AKDeInstall.exe
[2012-06-18 11:45:50 | 000,001,872 | ---- | C] () -- C:\Users\janek11\AppData\Roaming\.ptbt0
[2012-06-11 20:34:51 | 000,000,059 | ---- | C] () -- C:\Windows\DSTransition.INI
[2012-06-07 13:04:54 | 004,176,896 | ---- | C] () -- C:\Windows\System32\LS3Renderer.dll
[2012-05-23 07:31:20 | 000,163,456 | ---- | C] () -- C:\Windows\System32\drivers\vidstub.sys
[2012-05-23 07:19:55 | 000,000,024 | ---- | C] () -- C:\Windows\LogonStudio.ini
[2012-05-23 07:19:03 | 000,187,392 | ---- | C] () -- C:\Windows\System32\JPGUtils.dll
[2012-03-31 17:51:18 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012-03-28 20:37:19 | 000,000,990 | ---- | C] () -- C:\Windows\System32\wstcodx96.dll
[2012-03-05 09:43:11 | 000,000,414 | ---- | C] () -- C:\Users\janek11\AppData\Local\mcset.cfg
[2012-02-27 08:11:06 | 004,073,472 | ---- | C] () -- C:\Windows\System32\ColoristaRenderer.dll
[2012-02-15 03:11:36 | 000,037,376 | ---- | C] () -- C:\Windows\System32\atitmpxx.dll
[2012-02-14 21:05:16 | 000,054,784 | ---- | C] () -- C:\Windows\System32\OVDecode.dll
[2012-01-20 14:10:52 | 000,311,296 | ---- | C] () -- C:\Windows\System32\EMRegSys.dll
[2012-01-18 06:44:00 | 010,920,984 | ---- | C] () -- C:\Windows\System32\LogiDPP.dll
[2012-01-18 06:44:00 | 000,336,408 | ---- | C] () -- C:\Windows\System32\DevManagerCore.dll
[2012-01-18 06:44:00 | 000,104,472 | ---- | C] () -- C:\Windows\System32\LogiDPPApp.exe
[2012-01-10 22:10:08 | 000,601,728 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2011-12-09 10:25:36 | 000,000,225 | ---- | C] () -- C:\Windows\WaterIllusion.ini
[2011-11-20 06:45:08 | 000,231,316 | ---- | C] () -- C:\ProgramData\bdinstall.bin
[2011-11-18 21:26:53 | 000,164,910 | ---- | C] () -- C:\Windows\DP Animation Maker Uninstaller.exe
[2011-11-07 09:51:45 | 000,034,936 | ---- | C] () -- C:\Windows\System32\uninstHelixYUV.exe
[2011-11-07 09:50:22 | 001,357,348 | ---- | C] () -- C:\Users\janek11\AppData\Roaming\MatroskaSplitter.exe
[2011-11-07 09:50:21 | 000,117,723 | ---- | C] () -- C:\Users\janek11\AppData\Roaming\yuvcodecs-1.3.exe
[2011-11-05 13:48:05 | 000,000,104 | ---- | C] () -- C:\Users\janek11\Komputer — skrót.lnk
[2011-11-04 09:20:59 | 000,065,536 | ---- | C] () -- C:\Windows\System32\WebCamLib.dll
[2011-09-12 23:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\System32\atipblag.dat
[2011-08-28 07:38:31 | 000,049,611 | ---- | C] () -- C:\Users\janek11\AppData\Roaming\Debut.dmp
[2011-08-18 20:18:06 | 000,062,014 | ---- | C] () -- C:\Users\janek11\AppData\Roaming\PhotoPad.dmp
[2011-08-12 22:12:09 | 000,000,012 | ---- | C] () -- C:\Windows\bthservsdp.dat
[2011-07-26 05:48:54 | 000,028,418 | ---- | C] () -- C:\Windows\System32\lvcoinst.ini
[2011-07-21 10:22:24 | 005,243,208 | ---- | C] ( ) -- C:\Users\janek11\AppData\Roaming\AvsP.exe
[2011-06-29 08:07:48 | 003,617,280 | ---- | C] () -- C:\Windows\System32\CosmoRenderer.dll
[2011-03-22 13:55:42 | 000,098,304 | ---- | C] () -- C:\Windows\System32\redmonnt.dll
[2011-01-14 17:47:15 | 001,176,634 | ---- | C] () -- C:\Users\janek11\AppData\Roaming\speech.wav
[2011-01-03 11:35:37 | 000,000,266 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2010-09-06 09:15:58 | 000,000,045 | ---- | C] () -- C:\Users\janek11\AppData\Roaming\AVSMediaPlayer.m3u
[2010-03-11 15:55:15 | 000,007,614 | ---- | C] () -- C:\Users\janek11\L1520B.CAT
[2010-02-21 22:47:23 | 000,000,060 | ---- | C] () -- C:\Users\janek11\AppData\Roaming\Printer.ini
[2010-02-21 22:31:50 | 000,087,608 | ---- | C] () -- C:\Users\janek11\AppData\Roaming\inst.exe
[2010-02-21 22:31:50 | 000,007,887 | ---- | C] () -- C:\Users\janek11\AppData\Roaming\pcouffin.cat
[2010-02-21 22:31:50 | 000,001,144 | ---- | C] () -- C:\Users\janek11\AppData\Roaming\pcouffin.inf
[2010-02-12 21:28:28 | 000,000,063 | ---- | C] () -- C:\ProgramData\Ts_infos.ini
[2010-01-28 09:44:29 | 000,024,953 | ---- | C] () -- C:\Users\janek11\AppData\Roaming\UserTile.png
[2009-10-26 22:04:25 | 001,702,400 | -HS- | C] () -- C:\Users\janek11\ehthumbs_vista.db
[2009-10-24 06:03:00 | 000,001,356 | ---- | C] () -- C:\Users\janek11\AppData\Local\d3d9caps.dat
[2009-10-23 09:35:01 | 000,224,256 | ---- | C] () -- C:\Users\janek11\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[color=#E56717]========== ZeroAccess Check ==========[/color]
[2006-11-02 13:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
" " = %SystemRoot%\system32\shell32.dll -- [2012-06-08 18:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
" ThreadingModel " = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
" " = C:\Windows\system32\wbem\fastprox.dll -- [2009-04-11 07:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
" ThreadingModel " = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
" " = C:\Windows\system32\wbem\wbemess.dll -- [2009-04-11 07:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
" ThreadingModel " = Both
[color=#E56717]========== Alternate Data Streams ==========[/color]
@Alternate Data Stream - 64 bytes - & gt; C:\Users\janek11\Desktop\Mój film.mkvF0000.mkv:TOC.WMV
@Alternate Data Stream - 64 bytes - & gt; C:\Users\janek11\Desktop\Jacek_Darabasz-Spanish_Eyes.mp3:TOC.WMV
@Alternate Data Stream - 169 bytes - & gt; C:\ProgramData\TEMP:BFE23423
@Alternate Data Stream - 140 bytes - & gt; C:\ProgramData\TEMP:A31FAD21
@Alternate Data Stream - 134 bytes - & gt; C:\ProgramData\TEMP:7B025EF9
@Alternate Data Stream - 131 bytes - & gt; C:\ProgramData\TEMP:8178B8D6
@Alternate Data Stream - 127 bytes - & gt; C:\ProgramData\TEMP:A5B56640
@Alternate Data Stream - 127 bytes - & gt; C:\ProgramData\TEMP:890CC2F3
@Alternate Data Stream - 126 bytes - & gt; C:\ProgramData\TEMP:FF566C71
@Alternate Data Stream - 120 bytes - & gt; C:\ProgramData\TEMP:9FB286BF
@Alternate Data Stream - 107 bytes - & gt; C:\ProgramData\TEMP:E46BFB16
& lt; End of report & gt;