Dwar32.exe, samsio.exe zżera 100% procka

**Posty:** 540 · przez **Lijke** 08 Mar 2014, 11:56

1 3 logi z otl 4 z gmera,

Kod: Zaznacz wszystko: OTL logfile created on: 2014-03-08 10:37:38 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Lodzia\Downloads 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 0,87 Gb Available Physical Memory | 43,69% Memory free 4,00 Gb Paging File | 2,26 Gb Available in Paging File | 56,50% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 244,14 Gb Total Space | 135,50 Gb Free Space | 55,50% Space Free | Partition Type: NTFS Drive D: | 221,61 Gb Total Space | 220,81 Gb Free Space | 99,63% Space Free | Partition Type: NTFS Drive J: | 5,12 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Computer Name: LODZIA-PC | User Name: Lodzia | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2014-03-08 10:36:27 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Lodzia\Downloads\OTL_[www.programosy.pl].exe PRC - [2014-03-02 03:35:27 | 000,859,464 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe PRC - [2014-02-18 15:56:57 | 004,961,280 | ---- | M] (CipSoft GmbH) -- C:\Program Files (x86)\Tibia\Tibia.exe PRC - [2014-02-08 17:18:26 | 000,411,936 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2014-02-01 00:59:10 | 000,066,872 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2013-12-21 07:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2013-12-10 03:22:32 | 002,279,712 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe PRC - [2013-12-10 03:21:14 | 001,494,304 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe PRC - [2013-10-23 23:39:14 | 001,017,224 | ---- | M] (Flux Software LLC) -- C:\Users\Lodzia\AppData\Local\FluxSoftware\Flux\flux.exe PRC - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2014-03-02 03:35:25 | 000,394,568 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\ppgooglenaclpluginchrome.dll MOD - [2014-03-02 03:35:24 | 013,632,840 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\PepperFlash\pepflashplayer.dll MOD - [2014-03-02 03:35:23 | 004,061,000 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\pdf.dll MOD - [2014-03-02 03:35:20 | 000,716,616 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\libglesv2.dll MOD - [2014-03-02 03:35:19 | 000,100,168 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\libegl.dll MOD - [2014-03-02 03:35:17 | 001,647,432 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\ffmpegsumo.dll MOD - [2014-03-02 03:35:15 | 000,051,016 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\chrome_elf.dll MOD - [2014-02-11 20:29:20 | 000,093,696 | ---- | M] () -- C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2014-01-16 01:42:12 | 000,289,256 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe -- (McComponentHostService) SRV:[b]64bit:[/b] - [2013-12-10 03:20:28 | 015,129,376 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe -- (NvStreamSvc) SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2014-02-21 16:41:31 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2014-02-18 17:54:04 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2014-02-15 14:03:18 | 000,118,896 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2014-02-08 17:18:26 | 000,411,936 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2014-02-01 00:59:10 | 000,066,872 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2013-12-21 07:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2013-12-10 03:21:14 | 001,494,304 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService) SRV - [2012-01-05 16:42:34 | 000,075,624 | ---- | M] (Alcohol Soft Development Team) [Auto | Stopped] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe -- (AxAutoMntSrv) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2014-03-02 20:32:14 | 000,386,680 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2014-02-11 19:07:18 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV:[b]64bit:[/b] - [2013-12-05 09:42:30 | 000,039,200 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible) DRV:[b]64bit:[/b] - [2010-11-21 04:25:00 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010-11-21 04:24:15 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2010-11-21 04:24:15 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-11-21 04:24:15 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc) DRV:[b]64bit:[/b] - [2010-11-21 04:24:15 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2010-11-21 04:24:14 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 01:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice) DRV:[b]64bit:[/b] - [2009-06-10 21:35:42 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-3339302824-2973478899-564961981-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com IE - HKU\S-1-5-21-3339302824-2973478899-564961981-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKU\S-1-5-21-3339302824-2973478899-564961981-1001\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-3339302824-2973478899-564961981-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-3339302824-2973478899-564961981-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3339302824-2973478899-564961981-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <-loopback>;*.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledAddons: YoutubeDownloader%40PeterOlayev.com:2.2.7 FF - prefs.js..extensions.enabledAddons: %7B42e50651-9669-456e-9081-d5a836274274%7D:1.0.1 FF - prefs.js..extensions.enabledAddons: quick_start%40gmail.com:3.1.4 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:27.0.1 FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll () FF - HKLM\Software\MozillaPlugins\@mcafee.com/McAfeeMssPlugin: C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\quick_start@gmail.com: C:\Users\Lodzia\AppData\Roaming\Mozilla\Firefox\Profiles\g28s8dwk.default\extensions\quick_start@gmail.com [2014-03-06 22:20:22 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2014-01-24 17:37:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Lodzia\AppData\Roaming\Mozilla\Extensions [2014-03-07 20:56:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Lodzia\AppData\Roaming\Mozilla\Firefox\Profiles\g28s8dwk.default\extensions [2014-03-06 22:20:22 | 000,000,000 | ---D | M] ("Quick Start") -- C:\Users\Lodzia\AppData\Roaming\Mozilla\Firefox\Profiles\g28s8dwk.default\extensions\quick_start@gmail.com [2014-02-25 14:02:54 | 000,072,975 | ---- | M] () (No name found) -- C:\Users\Lodzia\AppData\Roaming\Mozilla\Firefox\Profiles\g28s8dwk.default\extensions\YoutubeDownloader@PeterOlayev.com.xpi [2014-02-27 13:32:05 | 000,008,049 | ---- | M] () (No name found) -- C:\Users\Lodzia\AppData\Roaming\Mozilla\Firefox\Profiles\g28s8dwk.default\extensions\{42e50651-9669-456e-9081-d5a836274274}.xpi [2014-02-15 14:03:11 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions [2014-02-15 14:03:18 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}, CHR - homepage: http://www.google.com/ CHR - plugin: Error reading preferences file CHR - Extension: Dokumenty Google = C:\Users\Lodzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\ CHR - Extension: Dysk Google = C:\Users\Lodzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: YouTube = C:\Users\Lodzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\ CHR - Extension: McAfee Security Scan+ = C:\Users\Lodzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh\3.8.141.12_0\ CHR - Extension: Szukaj w Google = C:\Users\Lodzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: AdBlock = C:\Users\Lodzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.18_0\ CHR - Extension: ProxMate - Proxy on steroids! = C:\Users\Lodzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifalmiidchkjjmkkbkoaibpmoeichmki\3.1.8_0\ CHR - Extension: FVD Downloader = C:\Users\Lodzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp\5.7.2_0\ CHR - Extension: Google Wallet = C:\Users\Lodzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\ CHR - Extension: Gmail = C:\Users\Lodzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\ O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3339302824-2973478899-564961981-1001..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd) O4 - HKU\S-1-5-21-3339302824-2973478899-564961981-1001..\Run: [dwar32.exe] C:\Users\Lodzia\AppData\Roaming\Micorsoft\mySQL\dwar32.exe () O4 - HKU\S-1-5-21-3339302824-2973478899-564961981-1001..\Run: [f.lux] C:\Users\Lodzia\AppData\Local\FluxSoftware\Flux\flux.exe (Flux Software LLC) O4 - HKU\S-1-5-21-3339302824-2973478899-564961981-1001..\Run: [samsIO.exe] C:\Users\Lodzia\AppData\Roaming\Micorsoft\SQL\samsIO.exe () O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 91.232.90.18 91.232.90.19 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{88CD7138-C26B-4D19-8957-4DD5C27F74DF}: DhcpNameServer = 91.232.90.18 91.232.90.19 O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2011-11-10 14:42:24 | 000,000,046 | R--- | M] () - J:\autorun.inf -- [ UDF ] O33 - MountPoints2\{20f802e9-8ddd-11e3-b9a4-6cf0491647a6}\Shell - "" = AutoRun O33 - MountPoints2\{20f802e9-8ddd-11e3-b9a4-6cf0491647a6}\Shell\AutoRun\command - "" = F:\Startme.exe O33 - MountPoints2\{70ed23e7-9238-11e3-b91f-6cf0491647a6}\Shell - "" = AutoRun O33 - MountPoints2\{70ed23e7-9238-11e3-b91f-6cf0491647a6}\Shell\AutoRun\command - "" = J:\install.exe -- [2011-06-10 22:14:22 | 000,378,880 | R--- | M] (Install.exe) O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2014-03-06 15:25:03 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\Diablo III [2014-03-05 14:58:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III [2014-03-05 14:54:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Diablo III [2014-03-02 20:43:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alcohol 120% [2014-03-02 20:43:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Alcohol Soft [2014-03-02 20:32:14 | 000,386,680 | ---- | C] (Duplex Secure Ltd.) -- C:\Windows\SysNative\drivers\sptd.sys [2014-03-02 20:30:53 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\sweet-page [2014-03-02 19:40:54 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\e-academy Inc [2014-03-02 19:40:54 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\e-academy Inc [2014-02-28 15:07:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guitar Pro 5 [2014-02-28 15:07:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Guitar Pro 5 [2014-02-28 15:00:52 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\Guitar Pro 6 [2014-02-28 15:00:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Guitar Pro 6 [2014-02-28 15:00:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guitar Pro 6 [2014-02-28 15:00:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Guitar Pro 6 [2014-02-24 21:01:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dziobas Rar Player [2014-02-24 21:01:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Dziobas Rar Player [2014-02-22 14:40:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies [2014-02-22 14:39:48 | 000,599,840 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvStreaming.exe [2014-02-22 14:35:12 | 031,432,480 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll [2014-02-22 14:35:12 | 023,683,360 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll [2014-02-22 14:35:12 | 015,740,232 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll [2014-02-22 14:35:12 | 011,589,272 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll [2014-02-22 14:35:12 | 009,690,424 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll [2014-02-22 14:35:11 | 017,715,784 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll [2014-02-22 14:35:11 | 011,636,176 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll [2014-02-22 14:35:11 | 009,728,064 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll [2014-02-22 14:35:11 | 003,142,432 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll [2014-02-22 14:35:11 | 002,956,576 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll [2014-02-22 14:35:11 | 002,782,496 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll [2014-02-22 14:35:11 | 002,410,784 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll [2014-02-22 14:35:11 | 001,885,472 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6433489.dll [2014-02-22 14:35:11 | 001,515,296 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6433489.dll [2014-02-22 14:35:11 | 000,892,192 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFR64.dll [2014-02-22 14:35:11 | 000,875,296 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvFBC64.dll [2014-02-22 14:35:11 | 000,863,520 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFR.dll [2014-02-22 14:35:11 | 000,844,576 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvFBC.dll [2014-02-22 14:35:10 | 025,256,224 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll [2014-02-22 14:35:10 | 017,560,352 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll [2014-02-19 17:31:26 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux [2014-02-19 17:31:24 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\FluxSoftware [2014-02-18 18:42:59 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\FileZilla [2014-02-18 18:42:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client [2014-02-18 18:42:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FileZilla FTP Client [2014-02-18 18:26:31 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Desktop\strona [2014-02-18 18:14:36 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Desktop\New folder (2) [2014-02-18 18:02:18 | 000,000,000 | ---D | C] -- C:\ProgramData\FLEXnet [2014-02-18 17:56:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2014-02-18 17:56:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour [2014-02-18 17:55:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe [2014-02-18 17:55:10 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\spool [2014-02-18 17:54:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Macrovision Shared [2014-02-18 17:53:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe [2014-02-18 17:39:26 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\gtk-2.0 [2014-02-18 17:39:25 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\.thumbnails [2014-02-18 17:37:25 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\fontconfig [2014-02-18 17:37:23 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\gegl-0.2 [2014-02-18 17:37:23 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\.gimp-2.8 [2014-02-18 17:36:41 | 000,000,000 | ---D | C] -- C:\Program Files\GIMP 2 [2014-02-18 17:26:35 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\profil [2014-02-18 17:06:15 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Desktop\New folder [2014-02-18 17:02:11 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\gamestuff [2014-02-18 17:00:08 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\azubu [2014-02-18 16:58:51 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\lolnexus [2014-02-18 16:57:21 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\programosy [2014-02-18 16:56:00 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\wikipedia [2014-02-18 16:55:06 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\w3schools [2014-02-18 16:53:11 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\poczta [2014-02-18 16:52:54 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Teleport Pro [2014-02-18 16:52:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Teleport Pro [2014-02-18 16:52:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Teleport Pro [2014-02-17 17:44:00 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\Micorsoft [2014-02-17 17:43:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XenoBot [2014-02-17 17:01:09 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ [2014-02-17 17:01:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++ [2014-02-17 17:01:08 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\Notepad++ [2014-02-17 17:01:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Notepad++ [2014-02-17 16:21:35 | 000,000,000 | ---D | C] -- C:\AdwCleaner [2014-02-16 20:16:49 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt [2014-02-16 19:45:56 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\XenoBot [2014-02-16 19:45:56 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\MSDrvCfg [2014-02-16 19:45:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\XenoBot [2014-02-16 19:15:14 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\Fiddler2 [2014-02-16 19:14:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Fiddler2 [2014-02-16 19:14:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RedBot Pro [2014-02-16 15:23:14 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Desktop\death note [2014-02-15 14:03:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2014-02-14 02:29:48 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Portable Devices [2014-02-14 02:29:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Portable Devices [2014-02-14 02:29:48 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player [2014-02-14 02:29:48 | 000,000,000 | ---D | C] -- C:\Program Files\DVD Maker [2014-02-14 02:29:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Media Player [2014-02-14 02:29:46 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\LogFiles [2014-02-14 02:29:46 | 000,000,000 | ---D | C] -- C:\Windows\ehome [2014-02-12 20:39:08 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\Blizzard [2014-02-12 20:12:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone [2014-02-12 20:12:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Hearthstone [2014-02-12 20:10:49 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\Blizzard Entertainment [2014-02-12 20:10:41 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\Battle.net [2014-02-12 20:10:41 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\Battle.net [2014-02-12 20:10:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard Entertainment [2014-02-12 20:10:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Blizzard Entertainment [2014-02-12 20:10:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net [2014-02-12 20:08:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Battle.net [2014-02-12 19:04:54 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\Opera [2014-02-12 19:01:47 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\Opera Software [2014-02-12 19:01:46 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\Opera Software [2014-02-12 19:01:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Opera [2014-02-12 14:28:00 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\amcompat.tlb [2014-02-12 14:28:00 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\amcompat.tlb [2014-02-12 14:27:55 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdxm.tlb [2014-02-12 14:27:55 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdxm.tlb [2014-02-12 14:27:54 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwmp.dll [2014-02-12 14:27:53 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDShextAutoplay.exe [2014-02-12 14:27:52 | 000,630,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\evr.dll [2014-02-12 14:27:52 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdmlog.dll [2014-02-12 14:27:51 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpshell.dll [2014-02-12 14:27:50 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\evr.dll [2014-02-12 14:27:50 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\logagent.exe [2014-02-12 14:27:50 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdmlog.dll [2014-02-12 14:27:50 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WPDShextAutoplay.exe [2014-02-12 14:27:49 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpshell.dll [2014-02-12 14:27:48 | 000,653,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MP4SDECD.DLL [2014-02-12 14:27:48 | 000,415,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MP4SDECD.DLL [2014-02-12 14:27:48 | 000,241,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MPG4DECD.DLL [2014-02-12 14:27:48 | 000,241,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MP43DECD.DLL [2014-02-12 14:27:48 | 000,225,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RESAMPLEDMO.DLL [2014-02-12 14:27:48 | 000,224,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MPG4DECD.DLL [2014-02-12 14:27:48 | 000,223,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MP43DECD.DLL [2014-02-12 14:27:48 | 000,220,672 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\SysWow64\l3codecp.acm [2014-02-12 14:27:48 | 000,182,272 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\SysNative\l3codecp.acm [2014-02-12 14:27:48 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdmps.dll [2014-02-12 14:27:48 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MP3DMOD.DLL [2014-02-12 14:27:48 | 000,081,408 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\SysNative\l3codeca.acm [2014-02-12 14:27:48 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MP3DMOD.DLL [2014-02-12 14:27:48 | 000,064,000 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\SysWow64\l3codeca.acm [2014-02-12 14:27:48 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwmp.dll [2014-02-12 14:27:48 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sysprepMCE.dll [2014-02-12 14:27:47 | 000,495,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drmmgrtn.dll [2014-02-12 14:27:47 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iTVData.dll [2014-02-12 14:27:47 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WmpDui.dll [2014-02-12 14:27:47 | 000,170,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WmpDui.dll [2014-02-12 14:27:46 | 000,345,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MediaMetadataHandler.dll [2014-02-12 14:27:46 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsPbdaCoInst.dll [2014-02-12 14:27:45 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceConnectApi.dll [2014-02-12 14:27:44 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msnetobj.dll [2014-02-12 14:27:44 | 000,323,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\unregmp2.exe [2014-02-12 14:27:44 | 000,278,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\unregmp2.exe [2014-02-12 14:27:44 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RESAMPLEDMO.DLL [2014-02-12 14:27:44 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\logagent.exe [2014-02-12 14:27:42 | 000,402,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drmmgrtn.dll [2014-02-12 14:27:42 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iTVData.dll [2014-02-12 14:27:42 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdmps.dll [2014-02-12 14:27:42 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LAPRXY.DLL [2014-02-12 14:27:41 | 000,641,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msscp.dll [2014-02-12 14:27:41 | 000,211,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmidx.dll [2014-02-12 14:27:41 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDShServiceObj.dll [2014-02-12 14:27:41 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpcm.dll [2014-02-12 14:27:41 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdxm.ocx [2014-02-12 14:27:41 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxmasf.dll [2014-02-12 14:27:41 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdxm.ocx [2014-02-12 14:27:41 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxmasf.dll [2014-02-12 14:27:40 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MediaMetadataHandler.dll [2014-02-12 14:27:39 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rrinstaller.exe [2014-02-12 14:27:39 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfpmp.exe [2014-02-12 14:27:38 | 000,265,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msnetobj.dll [2014-02-12 14:27:38 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcsrchPH.dll [2014-02-12 14:27:38 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceConnectApi.dll [2014-02-12 14:27:37 | 001,200,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drmv2clt.dll [2014-02-12 14:27:37 | 000,840,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\blackbox.dll [2014-02-12 14:27:37 | 000,781,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmsdk.dll [2014-02-12 14:27:37 | 000,636,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmdev.dll [2014-02-12 14:27:37 | 000,527,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmnet.dll [2014-02-12 14:27:37 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfps.dll [2014-02-12 14:27:37 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmcodecdspps.dll [2014-02-12 14:27:36 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpd_ci.dll [2014-02-12 14:27:36 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpdwcn.dll [2014-02-12 14:27:36 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wpdwcn.dll [2014-02-12 14:27:36 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceClassExtension.dll [2014-02-12 14:27:36 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceClassExtension.dll [2014-02-12 14:27:36 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\LAPRXY.DLL [2014-02-12 14:27:35 | 000,675,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DXPTaskRingtone.dll [2014-02-12 14:27:35 | 000,630,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DXPTaskRingtone.dll [2014-02-12 14:27:35 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msscp.dll [2014-02-12 14:27:35 | 000,350,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WPDSp.dll [2014-02-12 14:27:35 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mswmdm.dll [2014-02-12 14:27:35 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cewmdm.dll [2014-02-12 14:27:35 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceWMDRM.dll [2014-02-12 14:27:35 | 000,169,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceWiaCompat.dll [2014-02-12 14:27:35 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmidx.dll [2014-02-12 14:27:35 | 000,138,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceWiaCompat.dll [2014-02-12 14:27:34 | 000,605,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpeffects.dll [2014-02-12 14:27:34 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfds.dll [2014-02-12 14:27:34 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpsrcwp.dll [2014-02-12 14:27:34 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\COLORCNV.DLL [2014-02-12 14:27:34 | 000,184,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmvdspa.dll [2014-02-12 14:27:34 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfvdsp.dll [2014-02-12 14:27:34 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpcm.dll [2014-02-12 14:27:31 | 000,571,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mspbda.dll [2014-02-12 14:27:31 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll [2014-02-12 14:27:31 | 000,430,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfplat.dll [2014-02-12 14:27:31 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfplat.dll [2014-02-12 14:27:31 | 000,297,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMASF.DLL [2014-02-12 14:27:31 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rrinstaller.exe [2014-02-12 14:27:31 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfpmp.exe [2014-02-12 14:27:29 | 000,758,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceApi.dll [2014-02-12 14:27:29 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceTypes.dll [2014-02-12 14:27:28 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfreadwrite.dll [2014-02-12 14:27:28 | 000,240,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MFPlay.dll [2014-02-12 14:27:28 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfreadwrite.dll [2014-02-12 14:27:28 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MFPlay.dll [2014-02-12 14:27:28 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfAACEnc.dll [2014-02-12 14:27:28 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfAACEnc.dll [2014-02-12 14:27:26 | 000,986,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drmv2clt.dll [2014-02-12 14:27:26 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\blackbox.dll [2014-02-12 14:27:26 | 000,507,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmdev.dll [2014-02-12 14:27:26 | 000,436,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmnet.dll [2014-02-12 14:27:26 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfh264enc.dll [2014-02-12 14:27:26 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfh264enc.dll [2014-02-12 14:27:26 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfdvdec.dll [2014-02-12 14:27:26 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfdvdec.dll [2014-02-12 14:27:26 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfmjpegdec.dll [2014-02-12 14:27:26 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfmjpegdec.dll [2014-02-12 14:27:25 | 000,616,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmsdk.dll [2014-02-12 14:27:25 | 000,154,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VIDRESZR.DLL [2014-02-12 14:27:25 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpps.dll [2014-02-12 14:27:23 | 001,955,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVENCOD.DLL [2014-02-12 14:27:23 | 001,888,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL [2014-02-12 14:27:23 | 001,619,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL [2014-02-12 14:27:23 | 001,568,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVENCOD.DLL [2014-02-12 14:27:23 | 000,666,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVSDECD.DLL [2014-02-12 14:27:23 | 000,664,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVXENCD.DLL [2014-02-12 14:27:23 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVXENCD.DLL [2014-02-12 14:27:23 | 000,541,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVSDECD.DLL [2014-02-12 14:27:23 | 000,447,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVSENCD.DLL [2014-02-12 14:27:23 | 000,358,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVSENCD.DLL [2014-02-12 14:27:23 | 000,352,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpeffects.dll [2014-02-12 14:27:23 | 000,292,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VIDRESZR.DLL [2014-02-12 14:27:23 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\COLORCNV.DLL [2014-02-12 14:27:23 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmvdspa.dll [2014-02-12 14:27:23 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfvdsp.dll [2014-02-12 14:27:22 | 003,207,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mf.dll [2014-02-12 14:27:22 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpmde.dll [2014-02-12 14:27:22 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfds.dll [2014-02-12 14:27:22 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpsrcwp.dll [2014-02-12 14:27:14 | 000,435,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceStatus.dll [2014-02-12 14:27:14 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceStatus.dll [2014-02-12 14:27:13 | 002,543,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpdshext.dll [2014-02-12 14:27:13 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmerror.dll [2014-02-12 14:27:13 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmerror.dll [2014-02-12 14:27:13 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mferror.dll [2014-02-12 14:27:13 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mferror.dll [2014-02-12 14:27:13 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\asferror.dll [2014-02-12 14:27:13 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\asferror.dll [2014-02-12 14:27:11 | 004,120,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf.dll [2014-02-12 14:27:11 | 001,024,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll [2014-02-12 14:27:11 | 001,009,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcmde.dll [2014-02-12 14:27:10 | 001,575,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMSPDMOE.DLL [2014-02-12 14:27:10 | 001,325,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMSPDMOE.DLL [2014-02-12 14:27:10 | 001,232,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMADMOD.DLL [2014-02-12 14:27:10 | 001,153,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMADMOE.DLL [2014-02-12 14:27:10 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMADMOD.DLL [2014-02-12 14:27:10 | 000,812,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMADMOE.DLL [2014-02-12 14:27:10 | 000,609,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MFWMAAEC.DLL [2014-02-12 14:27:10 | 000,484,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MFWMAAEC.DLL [2014-02-12 14:27:10 | 000,431,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDSp.dll [2014-02-12 14:27:10 | 000,397,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mswmdm.dll [2014-02-12 14:27:10 | 000,358,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpdxm.dll [2014-02-12 14:27:10 | 000,254,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cewmdm.dll [2014-02-12 14:27:10 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceWMDRM.dll [2014-02-12 14:27:09 | 000,481,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpps.dll [2014-02-12 14:27:08 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfps.dll [2014-02-12 14:27:08 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmcodecdspps.dll [2014-02-12 14:27:03 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpdxm.dll [2014-02-12 14:27:02 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL [2014-02-12 14:27:02 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL [2014-02-12 14:27:01 | 001,243,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMNetMgr.dll [2014-02-12 14:27:01 | 001,003,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMNetMgr.dll [2014-02-12 14:27:00 | 002,072,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPEncEn.dll [2014-02-12 14:26:59 | 014,633,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll [2014-02-12 14:26:59 | 003,027,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVCORE.DLL [2014-02-12 14:26:58 | 011,410,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll [2014-02-12 14:26:58 | 001,624,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPEncEn.dll [2014-02-12 14:18:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Windows Genuine Advantage [2014-02-12 14:15:31 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\AdbDriverInstaller [2014-02-12 14:12:41 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\DriverToolkit [2014-02-12 14:12:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DriverToolkit [2014-02-12 14:07:51 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\Filedrop [2014-02-11 19:15:06 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\Skyrim [2014-02-11 19:15:06 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\My Games [2014-02-11 19:14:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razor 1911 [2014-02-11 19:13:55 | 000,530,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_6.dll [2014-02-11 19:13:55 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_6.dll [2014-02-11 19:13:55 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_6.dll [2014-02-11 19:13:55 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_6.dll [2014-02-11 19:13:55 | 000,078,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_4.dll [2014-02-11 19:13:55 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_4.dll [2014-02-11 19:13:55 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_7.dll [2014-02-11 19:13:55 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_7.dll [2014-02-11 19:13:54 | 000,517,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_5.dll [2014-02-11 19:13:54 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_5.dll [2014-02-11 19:13:51 | 002,582,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_42.dll [2014-02-11 19:13:51 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_42.dll [2014-02-11 19:13:51 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_5.dll [2014-02-11 19:13:51 | 000,176,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_5.dll [2014-02-11 19:13:50 | 005,554,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_42.dll [2014-02-11 19:13:50 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_42.dll [2014-02-11 19:13:50 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll [2014-02-11 19:13:50 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_41.dll [2014-02-11 19:13:50 | 002,475,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_42.dll [2014-02-11 19:13:50 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll [2014-02-11 19:13:50 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_42.dll [2014-02-11 19:13:50 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_41.dll [2014-02-11 19:13:50 | 000,523,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_42.dll [2014-02-11 19:13:50 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll [2014-02-11 19:13:50 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_42.dll [2014-02-11 19:13:50 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_41.dll [2014-02-11 19:13:50 | 000,285,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_42.dll [2014-02-11 19:13:50 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_42.dll [2014-02-11 19:13:49 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll [2014-02-11 19:13:49 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll [2014-02-11 19:13:49 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll [2014-02-11 19:13:49 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll [2014-02-11 19:13:49 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll [2014-02-11 19:13:49 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll [2014-02-11 19:13:49 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll [2014-02-11 19:13:49 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_4.dll [2014-02-11 19:13:49 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll [2014-02-11 19:13:49 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll [2014-02-11 19:13:49 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_4.dll [2014-02-11 19:13:49 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll [2014-02-11 19:13:49 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll [2014-02-11 19:13:49 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll [2014-02-11 19:13:49 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll [2014-02-11 19:13:49 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll [2014-02-11 19:13:49 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll [2014-02-11 19:13:49 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_6.dll [2014-02-11 19:13:48 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_2.dll [2014-02-11 19:13:48 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll [2014-02-11 19:13:48 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll [2014-02-11 19:13:48 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_1.dll [2014-02-11 19:13:48 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll [2014-02-11 19:13:48 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll [2014-02-11 19:13:47 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll [2014-02-11 19:13:47 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll [2014-02-11 19:13:47 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll [2014-02-11 19:13:47 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll [2014-02-11 19:13:47 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll [2014-02-11 19:13:47 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_2.dll [2014-02-11 19:13:47 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_2.dll [2014-02-11 19:13:47 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll [2014-02-11 19:13:47 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll [2014-02-11 19:13:46 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll [2014-02-11 19:13:46 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll [2014-02-11 19:13:46 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll [2014-02-11 19:13:46 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll [2014-02-11 19:13:46 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll [2014-02-11 19:13:46 | 000,489,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_0.dll [2014-02-11 19:13:46 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_0.dll [2014-02-11 19:13:46 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll [2014-02-11 19:13:46 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll [2014-02-11 19:13:46 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_0.dll [2014-02-11 19:13:46 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll [2014-02-11 19:13:46 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_0.dll [2014-02-11 19:13:46 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll [2014-02-11 19:13:46 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll [2014-02-11 19:13:45 | 004,910,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_37.dll [2014-02-11 19:13:45 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_37.dll [2014-02-11 19:13:45 | 001,860,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_37.dll [2014-02-11 19:13:45 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_37.dll [2014-02-11 19:13:45 | 000,529,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_37.dll [2014-02-11 19:13:45 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_36.dll [2014-02-11 19:13:45 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_37.dll [2014-02-11 19:13:45 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_36.dll [2014-02-11 19:13:45 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_10.dll [2014-02-11 19:13:45 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_10.dll [2014-02-11 19:13:45 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_3.dll [2014-02-11 19:13:45 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_3.dll [2014-02-11 19:13:44 | 005,081,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_36.dll [2014-02-11 19:13:44 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_36.dll [2014-02-11 19:13:44 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_36.dll [2014-02-11 19:13:44 | 001,985,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_35.dll [2014-02-11 19:13:44 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_36.dll [2014-02-11 19:13:44 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_35.dll [2014-02-11 19:13:44 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_35.dll [2014-02-11 19:13:44 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_35.dll [2014-02-11 19:13:44 | 000,411,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_9.dll [2014-02-11 19:13:44 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_9.dll [2014-02-11 19:13:43 | 005,073,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_35.dll [2014-02-11 19:13:43 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_35.dll [2014-02-11 19:13:43 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_8.dll [2014-02-11 19:13:43 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_8.dll [2014-02-11 19:13:43 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_2.dll [2014-02-11 19:13:43 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_2.dll [2014-02-11 19:09:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\The Elder Scrolls V Skyrim [2014-02-11 19:08:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite [2014-02-11 19:07:18 | 000,283,064 | ---- | C] (Disc Soft Ltd) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys [2014-02-11 19:07:14 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\DAEMON Tools Lite [2014-02-11 19:07:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Lite [2014-02-11 19:06:47 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite [2014-02-11 16:30:00 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\CRE [2014-02-11 16:29:02 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\uTorrent [2014-02-11 13:14:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus [2014-02-11 13:14:25 | 000,000,000 | ---D | C] -- C:\Program Files\McAfee Security Scan [3 C:\Users\Lodzia\AppData\Local\*.tmp files -> C:\Users\Lodzia\AppData\Local\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2014-03-08 10:35:00 | 000,000,932 | ---- | M] () -- C:\Windows\tasks\SaveSenseLiveUpdateTaskMachineUA.job [2014-03-08 10:30:30 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2014-03-08 09:41:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2014-03-08 06:30:00 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2014-03-07 21:05:39 | 000,019,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2014-03-07 21:05:39 | 000,019,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2014-03-07 21:04:11 | 000,778,150 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2014-03-07 21:04:11 | 000,651,450 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2014-03-07 21:04:11 | 000,120,382 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2014-03-07 20:58:24 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2014-03-07 20:56:50 | 000,001,316 | ---- | M] () -- C:\Users\Lodzia\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2014-03-07 20:56:50 | 000,001,168 | ---- | M] () -- C:\Users\Lodzia\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [2014-03-07 20:56:50 | 000,001,049 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2014-03-07 20:56:50 | 000,000,929 | ---- | M] () -- C:\Users\Lodzia\Application Data\Microsoft\Internet Explorer\Quick Launch\Opera.lnk [2014-03-07 20:56:50 | 000,000,905 | ---- | M] () -- C:\Users\Public\Desktop\Opera.lnk [2014-03-07 20:56:49 | 000,001,292 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2014-03-05 15:57:30 | 000,002,019 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk [2014-03-05 15:48:04 | 000,050,935 | ---- | M] () -- C:\Users\Lodzia\Desktop\umowa_sprzedazy_motocykla (1).pdf [2014-03-05 15:28:17 | 000,000,000 | ---- | M] () -- C:\Users\Lodzia\AppData\Local\{E3FF3ACA-1B3A-4A7E-8C5B-99565AA7D43D} [2014-03-05 14:58:32 | 000,001,128 | ---- | M] () -- C:\Users\Public\Desktop\Diablo III.lnk [2014-03-04 23:13:23 | 000,185,538 | ---- | M] () -- C:\Users\Lodzia\Desktop\bingo.JPG [2014-03-02 20:45:12 | 000,000,000 | ---- | M] () -- C:\Users\Lodzia\AppData\Local\{BCC4D689-72B4-40B1-9DD4-595C85C74378} [2014-03-02 20:43:23 | 000,001,180 | ---- | M] () -- C:\Users\Public\Desktop\Alcohol 120%.lnk [2014-03-02 20:39:00 | 000,000,000 | ---- | M] () -- C:\Users\Lodzia\AppData\Local\{FD20D787-EBF0-4291-8212-171603B6B64C} [2014-03-02 20:32:14 | 000,386,680 | ---- | M] (Duplex Secure Ltd.) -- C:\Windows\SysNative\drivers\sptd.sys [2014-03-02 20:30:35 | 000,000,045 | ---- | M] () -- C:\Users\Lodzia\AppData\Roaming\WB.CFG [2014-03-02 19:40:55 | 000,003,147 | ---- | M] () -- C:\Users\Lodzia\Desktop\Shortcut to SecureDownloadManager.exe.lnk [2014-03-01 20:17:24 | 000,103,736 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe [2014-03-01 00:35:03 | 002,199,112 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2014-02-28 15:12:35 | 000,693,429 | ---- | M] () -- C:\Users\Lodzia\Desktop\TheGodsMustBeCrazytab.pdf [2014-02-28 15:07:05 | 000,000,932 | ---- | M] () -- C:\Users\Lodzia\Desktop\Guitar Pro 5.lnk [2014-02-28 15:00:36 | 000,001,064 | ---- | M] () -- C:\Users\Lodzia\Application Data\Microsoft\Internet Explorer\Quick Launch\Guitar Pro 6.lnk [2014-02-28 15:00:36 | 000,001,040 | ---- | M] () -- C:\Users\Public\Desktop\Guitar Pro 6.lnk [2014-02-25 19:30:05 | 002,284,793 | ---- | M] () -- C:\Users\Lodzia\Desktop\Hearthstone_Screenshot_2.25.2014.19.30.04.png [2014-02-24 21:01:10 | 000,001,102 | ---- | M] () -- C:\Users\Public\Desktop\Dziobas Rar Player.lnk [2014-02-21 16:41:31 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2014-02-21 16:41:30 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2014-02-19 14:22:51 | 000,000,998 | ---- | M] () -- C:\Users\Public\Desktop\XenoBot.lnk [2014-02-18 17:50:13 | 000,148,633 | ---- | M] () -- C:\Users\Lodzia\Documents\ask.tpp [2014-02-18 17:44:36 | 000,132,129 | ---- | M] () -- C:\Users\Lodzia\Desktop\111.png [2014-02-18 17:39:26 | 000,000,978 | ---- | M] () -- C:\Users\Lodzia\AppData\Local\recently-used.xbel [2014-02-18 17:27:24 | 000,013,916 | ---- | M] () -- C:\Users\Lodzia\Documents\profil.tpp [2014-02-18 17:26:14 | 000,003,621 | ---- | M] () -- C:\Users\Lodzia\Documents\google.tpp [2014-02-18 17:02:30 | 000,009,338 | ---- | M] () -- C:\Users\Lodzia\Documents\gamestuff.tpp [2014-02-18 17:01:58 | 000,021,358 | ---- | M] () -- C:\Users\Lodzia\Documents\azubu.tpp [2014-02-18 16:59:02 | 000,017,907 | ---- | M] () -- C:\Users\Lodzia\Documents\lolnexus.tpp [2014-02-18 16:58:06 | 000,258,638 | ---- | M] () -- C:\Users\Lodzia\Documents\programosy.tpp [2014-02-18 16:56:02 | 000,024,110 | ---- | M] () -- C:\Users\Lodzia\Documents\wikipedia.tpp [2014-02-18 16:55:18 | 000,022,181 | ---- | M] () -- C:\Users\Lodzia\Documents\w3schools.tpp [2014-02-18 16:53:17 | 000,009,125 | ---- | M] () -- C:\Users\Lodzia\Documents\poczta.tpp [2014-02-14 07:16:33 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2014-02-12 20:12:22 | 000,001,183 | ---- | M] () -- C:\Users\Public\Desktop\Hearthstone.lnk [2014-02-12 20:10:38 | 000,000,657 | ---- | M] () -- C:\Users\Public\Desktop\Battle.net.lnk [2014-02-11 19:08:15 | 000,001,950 | ---- | M] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk [2014-02-11 19:07:18 | 000,283,064 | ---- | M] (Disc Soft Ltd) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys [2014-02-11 16:29:45 | 000,000,853 | ---- | M] () -- C:\Users\Lodzia\Desktop\µTorrent.lnk [2014-02-11 16:29:45 | 000,000,833 | ---- | M] () -- C:\Users\Lodzia\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk [2014-02-11 13:14:28 | 000,001,931 | ---- | M] () -- C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk [2014-02-11 13:14:28 | 000,001,931 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2014-02-08 19:34:51 | 031,432,480 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll [2014-02-08 19:34:51 | 025,256,224 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll [2014-02-08 19:34:51 | 023,683,360 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll [2014-02-08 19:34:51 | 018,257,576 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll [2014-02-08 19:34:51 | 017,715,784 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll [2014-02-08 19:34:51 | 017,560,352 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll [2014-02-08 19:34:51 | 015,740,232 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll [2014-02-08 19:34:51 | 014,669,032 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll [2014-02-08 19:34:51 | 011,636,176 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll [2014-02-08 19:34:51 | 011,589,272 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll [2014-02-08 19:34:51 | 009,728,064 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll [2014-02-08 19:34:51 | 009,690,424 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll [2014-02-08 19:34:51 | 003,142,432 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll [2014-02-08 19:34:51 | 003,090,184 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll [2014-02-08 19:34:51 | 002,956,576 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll [2014-02-08 19:34:51 | 002,782,496 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll [2014-02-08 19:34:51 | 002,713,728 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll [2014-02-08 19:34:51 | 002,410,784 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll [2014-02-08 19:34:51 | 001,885,472 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6433489.dll [2014-02-08 19:34:51 | 001,515,296 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6433489.dll [2014-02-08 19:34:51 | 000,892,192 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFR64.dll [2014-02-08 19:34:51 | 000,875,296 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\NvFBC64.dll [2014-02-08 19:34:51 | 000,863,520 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFR.dll [2014-02-08 19:34:51 | 000,844,576 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvFBC.dll [2014-02-08 19:34:51 | 000,061,216 | ---- | M] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll [2014-02-08 19:34:51 | 000,053,024 | ---- | M] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll [2014-02-08 19:34:51 | 000,024,544 | ---- | M] () -- C:\Windows\SysNative\nvinfo.pb [2014-02-08 18:42:36 | 006,712,608 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcpl.dll [2014-02-08 18:42:36 | 003,498,272 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvc64.dll [2014-02-08 18:42:32 | 000,386,336 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvmctray.dll [2014-02-08 18:42:32 | 000,063,776 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvshext.dll [2014-02-08 17:18:30 | 000,599,840 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvStreaming.exe [3 C:\Users\Lodzia\AppData\Local\*.tmp files -> C:\Users\Lodzia\AppData\Local\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2014-03-05 15:57:30 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk [2014-03-05 15:57:30 | 000,002,019 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk [2014-03-05 15:48:00 | 000,050,935 | ---- | C] () -- C:\Users\Lodzia\Desktop\umowa_sprzedazy_motocykla (1).pdf [2014-03-05 15:28:17 | 000,000,000 | ---- | C] () -- C:\Users\Lodzia\AppData\Local\{E3FF3ACA-1B3A-4A7E-8C5B-99565AA7D43D} [2014-03-05 14:58:32 | 000,001,128 | ---- | C] () -- C:\Users\Public\Desktop\Diablo III.lnk [2014-03-04 23:13:23 | 000,185,538 | ---- | C] () -- C:\Users\Lodzia\Desktop\bingo.JPG [2014-03-02 20:44:48 | 000,000,000 | ---- | C] () -- C:\Users\Lodzia\AppData\Local\{BCC4D689-72B4-40B1-9DD4-595C85C74378} [2014-03-02 20:43:23 | 000,001,180 | ---- | C] () -- C:\Users\Public\Desktop\Alcohol 120%.lnk [2014-03-02 20:39:00 | 000,000,000 | ---- | C] () -- C:\Users\Lodzia\AppData\Local\{FD20D787-EBF0-4291-8212-171603B6B64C} [2014-03-02 20:30:37 | 000,000,932 | ---- | C] () -- C:\Windows\tasks\SaveSenseLiveUpdateTaskMachineUA.job [2014-03-02 20:30:35 | 000,000,045 | ---- | C] () -- C:\Users\Lodzia\AppData\Roaming\WB.CFG [2014-03-02 19:40:55 | 000,003,147 | ---- | C] () -- C:\Users\Lodzia\Desktop\Shortcut to SecureDownloadManager.exe.lnk [2014-02-28 15:12:33 | 000,693,429 | ---- | C] () -- C:\Users\Lodzia\Desktop\TheGodsMustBeCrazytab.pdf [2014-02-28 15:07:05 | 000,000,932 | ---- | C] () -- C:\Users\Lodzia\Desktop\Guitar Pro 5.lnk [2014-02-28 15:00:36 | 000,001,064 | ---- | C] () -- C:\Users\Lodzia\Application Data\Microsoft\Internet Explorer\Quick Launch\Guitar Pro 6.lnk [2014-02-28 15:00:36 | 000,001,040 | ---- | C] () -- C:\Users\Public\Desktop\Guitar Pro 6.lnk [2014-02-25 19:30:05 | 002,284,793 | ---- | C] () -- C:\Users\Lodzia\Desktop\Hearthstone_Screenshot_2.25.2014.19.30.04.png [2014-02-24 21:01:10 | 000,001,102 | ---- | C] () -- C:\Users\Public\Desktop\Dziobas Rar Player.lnk [2014-02-23 14:50:25 | 000,103,736 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2014-02-18 17:57:21 | 000,000,866 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS3.lnk [2014-02-18 17:56:18 | 000,000,920 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Stock Photos CS3.lnk [2014-02-18 17:55:47 | 000,001,403 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit 2.lnk [2014-02-18 17:55:41 | 000,000,903 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS3.lnk [2014-02-18 17:54:49 | 000,000,840 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS3.lnk [2014-02-18 17:48:18 | 000,148,633 | ---- | C] () -- C:\Users\Lodzia\Documents\ask.tpp [2014-02-18 17:39:26 | 000,000,978 | ---- | C] () -- C:\Users\Lodzia\AppData\Local\recently-used.xbel [2014-02-18 17:39:18 | 000,132,129 | ---- | C] () -- C:\Users\Lodzia\Desktop\111.png [2014-02-18 17:37:12 | 000,000,894 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk [2014-02-18 17:26:33 | 000,013,916 | ---- | C] () -- C:\Users\Lodzia\Documents\profil.tpp [2014-02-18 17:25:19 | 000,003,621 | ---- | C] () -- C:\Users\Lodzia\Documents\google.tpp [2014-02-18 17:02:09 | 000,009,338 | ---- | C] () -- C:\Users\Lodzia\Documents\gamestuff.tpp [2014-02-18 17:00:07 | 000,021,358 | ---- | C] () -- C:\Users\Lodzia\Documents\azubu.tpp [2014-02-18 16:58:34 | 000,017,907 | ---- | C] () -- C:\Users\Lodzia\Documents\lolnexus.tpp [2014-02-18 16:57:18 | 000,258,638 | ---- | C] () -- C:\Users\Lodzia\Documents\programosy.tpp [2014-02-18 16:55:58 | 000,024,110 | ---- | C] () -- C:\Users\Lodzia\Documents\wikipedia.tpp [2014-02-18 16:55:04 | 000,022,181 | ---- | C] () -- C:\Users\Lodzia\Documents\w3schools.tpp [2014-02-18 16:53:10 | 000,009,125 | ---- | C] () -- C:\Users\Lodzia\Documents\poczta.tpp [2014-02-17 17:43:59 | 000,000,998 | ---- | C] () -- C:\Users\Public\Desktop\XenoBot.lnk [2014-02-14 07:16:47 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk [2014-02-14 07:16:35 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk [2014-02-14 07:16:33 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2014-02-14 07:16:27 | 000,001,547 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk [2014-02-12 20:12:22 | 000,001,183 | ---- | C] () -- C:\Users\Public\Desktop\Hearthstone.lnk [2014-02-12 20:10:38 | 000,000,657 | ---- | C] () -- C:\Users\Public\Desktop\Battle.net.lnk [2014-02-12 19:04:39 | 000,000,929 | ---- | C] () -- C:\Users\Lodzia\Application Data\Microsoft\Internet Explorer\Quick Launch\Opera.lnk [2014-02-12 19:04:39 | 000,000,917 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk [2014-02-12 19:04:39 | 000,000,905 | ---- | C] () -- C:\Users\Public\Desktop\Opera.lnk [2014-02-12 14:27:01 | 000,316,640 | ---- | C] () -- C:\Windows\WMSysPr9.prx [2014-02-11 19:08:15 | 000,001,950 | ---- | C] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk [2014-02-11 16:29:45 | 000,000,853 | ---- | C] () -- C:\Users\Lodzia\Desktop\µTorrent.lnk [2014-02-11 16:29:45 | 000,000,833 | ---- | C] () -- C:\Users\Lodzia\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk [2014-02-01 00:38:30 | 000,066,872 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2014-02-01 00:38:26 | 000,000,331 | ---- | C] () -- C:\Windows\game.ini [2014-01-23 22:27:34 | 000,763,706 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 06:00:09 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2010-11-21 04:24:20 | 014,174,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2010-11-21 04:24:28 | 012,872,192 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 04:24:46 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2014-02-12 14:15:31 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\AdbDriverInstaller [2014-02-25 18:30:27 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Battle.net [2014-02-11 19:08:46 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\DAEMON Tools Lite [2014-03-02 19:40:54 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\e-academy Inc [2014-02-12 14:07:51 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Filedrop [2014-03-03 21:47:26 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\FileZilla [2014-03-03 21:09:39 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\foobar2000 [2014-02-28 15:00:56 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Guitar Pro 6 [2014-01-24 11:35:35 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\LolClient [2014-02-19 14:22:52 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Micorsoft [2014-02-16 19:45:56 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\MSDrvCfg [2014-02-17 17:01:48 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Notepad++ [2014-02-12 19:04:54 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Opera [2014-02-12 19:01:46 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Opera Software [2014-01-23 22:35:19 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Riot Games [2014-02-04 22:15:15 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Sony [2014-03-02 20:30:53 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\sweet-page [2014-01-23 22:19:25 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Tibia [2014-01-24 20:11:38 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Tibiacast [2014-03-07 16:48:50 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\TS3Client [2014-03-07 20:50:22 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\uTorrent [color=#E56717]========== Purity Check ==========[/color] < End of report >

Kod: Zaznacz wszystko: OTL logfile created on: 2014-03-08 10:37:38 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Lodzia\Downloads 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 0,87 Gb Available Physical Memory | 43,69% Memory free 4,00 Gb Paging File | 2,26 Gb Available in Paging File | 56,50% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 244,14 Gb Total Space | 135,50 Gb Free Space | 55,50% Space Free | Partition Type: NTFS Drive D: | 221,61 Gb Total Space | 220,81 Gb Free Space | 99,63% Space Free | Partition Type: NTFS Drive J: | 5,12 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Computer Name: LODZIA-PC | User Name: Lodzia | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2014-03-08 10:36:27 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Lodzia\Downloads\OTL_[www.programosy.pl].exe PRC - [2014-03-02 03:35:27 | 000,859,464 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe PRC - [2014-02-18 15:56:57 | 004,961,280 | ---- | M] (CipSoft GmbH) -- C:\Program Files (x86)\Tibia\Tibia.exe PRC - [2014-02-08 17:18:26 | 000,411,936 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2014-02-01 00:59:10 | 000,066,872 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2013-12-21 07:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2013-12-10 03:22:32 | 002,279,712 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe PRC - [2013-12-10 03:21:14 | 001,494,304 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe PRC - [2013-10-23 23:39:14 | 001,017,224 | ---- | M] (Flux Software LLC) -- C:\Users\Lodzia\AppData\Local\FluxSoftware\Flux\flux.exe PRC - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2014-03-02 03:35:25 | 000,394,568 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\ppgooglenaclpluginchrome.dll MOD - [2014-03-02 03:35:24 | 013,632,840 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\PepperFlash\pepflashplayer.dll MOD - [2014-03-02 03:35:23 | 004,061,000 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\pdf.dll MOD - [2014-03-02 03:35:20 | 000,716,616 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\libglesv2.dll MOD - [2014-03-02 03:35:19 | 000,100,168 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\libegl.dll MOD - [2014-03-02 03:35:17 | 001,647,432 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\ffmpegsumo.dll MOD - [2014-03-02 03:35:15 | 000,051,016 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\chrome_elf.dll MOD - [2014-02-11 20:29:20 | 000,093,696 | ---- | M] () -- C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2014-01-16 01:42:12 | 000,289,256 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe -- (McComponentHostService) SRV:[b]64bit:[/b] - [2013-12-10 03:20:28 | 015,129,376 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe -- (NvStreamSvc) SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2014-02-21 16:41:31 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2014-02-18 17:54:04 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2014-02-15 14:03:18 | 000,118,896 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2014-02-08 17:18:26 | 000,411,936 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2014-02-01 00:59:10 | 000,066,872 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2013-12-21 07:04:16 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2013-12-10 03:21:14 | 001,494,304 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService) SRV - [2012-01-05 16:42:34 | 000,075,624 | ---- | M] (Alcohol Soft Development Team) [Auto | Stopped] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe -- (AxAutoMntSrv) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009-12-23 22:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2014-03-02 20:32:14 | 000,386,680 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2014-02-11 19:07:18 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV:[b]64bit:[/b] - [2013-12-05 09:42:30 | 000,039,200 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible) DRV:[b]64bit:[/b] - [2010-11-21 04:25:00 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010-11-21 04:24:15 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2010-11-21 04:24:15 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-11-21 04:24:15 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc) DRV:[b]64bit:[/b] - [2010-11-21 04:24:15 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2010-11-21 04:24:14 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 01:39:20 | 000,023,040 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WSDPrint.sys -- (WSDPrintDevice) DRV:[b]64bit:[/b] - [2009-06-10 21:35:42 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-3339302824-2973478899-564961981-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com IE - HKU\S-1-5-21-3339302824-2973478899-564961981-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com IE - HKU\S-1-5-21-3339302824-2973478899-564961981-1001\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-3339302824-2973478899-564961981-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-3339302824-2973478899-564961981-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-3339302824-2973478899-564961981-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <-loopback>;*.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..extensions.enabledAddons: YoutubeDownloader%40PeterOlayev.com:2.2.7 FF - prefs.js..extensions.enabledAddons: %7B42e50651-9669-456e-9081-d5a836274274%7D:1.0.1 FF - prefs.js..extensions.enabledAddons: quick_start%40gmail.com:3.1.4 FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:27.0.1 FF - user.js - File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll () FF - HKLM\Software\MozillaPlugins\@mcafee.com/McAfeeMssPlugin: C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\quick_start@gmail.com: C:\Users\Lodzia\AppData\Roaming\Mozilla\Firefox\Profiles\g28s8dwk.default\extensions\quick_start@gmail.com [2014-03-06 22:20:22 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 27.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2014-01-24 17:37:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Lodzia\AppData\Roaming\Mozilla\Extensions [2014-03-07 20:56:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Lodzia\AppData\Roaming\Mozilla\Firefox\Profiles\g28s8dwk.default\extensions [2014-03-06 22:20:22 | 000,000,000 | ---D | M] ("Quick Start") -- C:\Users\Lodzia\AppData\Roaming\Mozilla\Firefox\Profiles\g28s8dwk.default\extensions\quick_start@gmail.com [2014-02-25 14:02:54 | 000,072,975 | ---- | M] () (No name found) -- C:\Users\Lodzia\AppData\Roaming\Mozilla\Firefox\Profiles\g28s8dwk.default\extensions\YoutubeDownloader@PeterOlayev.com.xpi [2014-02-27 13:32:05 | 000,008,049 | ---- | M] () (No name found) -- C:\Users\Lodzia\AppData\Roaming\Mozilla\Firefox\Profiles\g28s8dwk.default\extensions\{42e50651-9669-456e-9081-d5a836274274}.xpi [2014-02-15 14:03:11 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions [2014-02-15 14:03:18 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [color=#E56717]========== Chrome ==========[/color] CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}, CHR - homepage: http://www.google.com/ CHR - plugin: Error reading preferences file CHR - Extension: Dokumenty Google = C:\Users\Lodzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\ CHR - Extension: Dysk Google = C:\Users\Lodzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\ CHR - Extension: YouTube = C:\Users\Lodzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\ CHR - Extension: McAfee Security Scan+ = C:\Users\Lodzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh\3.8.141.12_0\ CHR - Extension: Szukaj w Google = C:\Users\Lodzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\ CHR - Extension: AdBlock = C:\Users\Lodzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.18_0\ CHR - Extension: ProxMate - Proxy on steroids! = C:\Users\Lodzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifalmiidchkjjmkkbkoaibpmoeichmki\3.1.8_0\ CHR - Extension: FVD Downloader = C:\Users\Lodzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp\5.7.2_0\ CHR - Extension: Google Wallet = C:\Users\Lodzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\ CHR - Extension: Gmail = C:\Users\Lodzia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\ O1 HOSTS File: ([2009-06-10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-3339302824-2973478899-564961981-1001..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd) O4 - HKU\S-1-5-21-3339302824-2973478899-564961981-1001..\Run: [dwar32.exe] C:\Users\Lodzia\AppData\Roaming\Micorsoft\mySQL\dwar32.exe () O4 - HKU\S-1-5-21-3339302824-2973478899-564961981-1001..\Run: [f.lux] C:\Users\Lodzia\AppData\Local\FluxSoftware\Flux\flux.exe (Flux Software LLC) O4 - HKU\S-1-5-21-3339302824-2973478899-564961981-1001..\Run: [samsIO.exe] C:\Users\Lodzia\AppData\Roaming\Micorsoft\SQL\samsIO.exe () O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 91.232.90.18 91.232.90.19 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{88CD7138-C26B-4D19-8957-4DD5C27F74DF}: DhcpNameServer = 91.232.90.18 91.232.90.19 O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2011-11-10 14:42:24 | 000,000,046 | R--- | M] () - J:\autorun.inf -- [ UDF ] O33 - MountPoints2\{20f802e9-8ddd-11e3-b9a4-6cf0491647a6}\Shell - "" = AutoRun O33 - MountPoints2\{20f802e9-8ddd-11e3-b9a4-6cf0491647a6}\Shell\AutoRun\command - "" = F:\Startme.exe O33 - MountPoints2\{70ed23e7-9238-11e3-b91f-6cf0491647a6}\Shell - "" = AutoRun O33 - MountPoints2\{70ed23e7-9238-11e3-b91f-6cf0491647a6}\Shell\AutoRun\command - "" = J:\install.exe -- [2011-06-10 22:14:22 | 000,378,880 | R--- | M] (Install.exe) O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2014-03-06 15:25:03 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\Diablo III [2014-03-05 14:58:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III [2014-03-05 14:54:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Diablo III [2014-03-02 20:43:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alcohol 120% [2014-03-02 20:43:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Alcohol Soft [2014-03-02 20:32:14 | 000,386,680 | ---- | C] (Duplex Secure Ltd.) -- C:\Windows\SysNative\drivers\sptd.sys [2014-03-02 20:30:53 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\sweet-page [2014-03-02 19:40:54 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\e-academy Inc [2014-03-02 19:40:54 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\e-academy Inc [2014-02-28 15:07:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guitar Pro 5 [2014-02-28 15:07:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Guitar Pro 5 [2014-02-28 15:00:52 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\Guitar Pro 6 [2014-02-28 15:00:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Guitar Pro 6 [2014-02-28 15:00:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guitar Pro 6 [2014-02-28 15:00:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Guitar Pro 6 [2014-02-24 21:01:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dziobas Rar Player [2014-02-24 21:01:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Dziobas Rar Player [2014-02-22 14:40:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies [2014-02-22 14:39:48 | 000,599,840 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvStreaming.exe [2014-02-22 14:35:12 | 031,432,480 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll [2014-02-22 14:35:12 | 023,683,360 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll [2014-02-22 14:35:12 | 015,740,232 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll [2014-02-22 14:35:12 | 011,589,272 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll [2014-02-22 14:35:12 | 009,690,424 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll [2014-02-22 14:35:11 | 017,715,784 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll [2014-02-22 14:35:11 | 011,636,176 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll [2014-02-22 14:35:11 | 009,728,064 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll [2014-02-22 14:35:11 | 003,142,432 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll [2014-02-22 14:35:11 | 002,956,576 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll [2014-02-22 14:35:11 | 002,782,496 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll [2014-02-22 14:35:11 | 002,410,784 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll [2014-02-22 14:35:11 | 001,885,472 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6433489.dll [2014-02-22 14:35:11 | 001,515,296 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6433489.dll [2014-02-22 14:35:11 | 000,892,192 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFR64.dll [2014-02-22 14:35:11 | 000,875,296 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NvFBC64.dll [2014-02-22 14:35:11 | 000,863,520 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFR.dll [2014-02-22 14:35:11 | 000,844,576 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvFBC.dll [2014-02-22 14:35:10 | 025,256,224 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll [2014-02-22 14:35:10 | 017,560,352 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll [2014-02-19 17:31:26 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flux [2014-02-19 17:31:24 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\FluxSoftware [2014-02-18 18:42:59 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\FileZilla [2014-02-18 18:42:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client [2014-02-18 18:42:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FileZilla FTP Client [2014-02-18 18:26:31 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Desktop\strona [2014-02-18 18:14:36 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Desktop\New folder (2) [2014-02-18 18:02:18 | 000,000,000 | ---D | C] -- C:\ProgramData\FLEXnet [2014-02-18 17:56:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2014-02-18 17:56:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour [2014-02-18 17:55:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe [2014-02-18 17:55:10 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\spool [2014-02-18 17:54:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Macrovision Shared [2014-02-18 17:53:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe [2014-02-18 17:39:26 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\gtk-2.0 [2014-02-18 17:39:25 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\.thumbnails [2014-02-18 17:37:25 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\fontconfig [2014-02-18 17:37:23 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\gegl-0.2 [2014-02-18 17:37:23 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\.gimp-2.8 [2014-02-18 17:36:41 | 000,000,000 | ---D | C] -- C:\Program Files\GIMP 2 [2014-02-18 17:26:35 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\profil [2014-02-18 17:06:15 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Desktop\New folder [2014-02-18 17:02:11 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\gamestuff [2014-02-18 17:00:08 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\azubu [2014-02-18 16:58:51 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\lolnexus [2014-02-18 16:57:21 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\programosy [2014-02-18 16:56:00 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\wikipedia [2014-02-18 16:55:06 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\w3schools [2014-02-18 16:53:11 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\poczta [2014-02-18 16:52:54 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Teleport Pro [2014-02-18 16:52:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Teleport Pro [2014-02-18 16:52:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Teleport Pro [2014-02-17 17:44:00 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\Micorsoft [2014-02-17 17:43:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XenoBot [2014-02-17 17:01:09 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ [2014-02-17 17:01:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++ [2014-02-17 17:01:08 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\Notepad++ [2014-02-17 17:01:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Notepad++ [2014-02-17 16:21:35 | 000,000,000 | ---D | C] -- C:\AdwCleaner [2014-02-16 20:16:49 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt [2014-02-16 19:45:56 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\XenoBot [2014-02-16 19:45:56 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\MSDrvCfg [2014-02-16 19:45:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\XenoBot [2014-02-16 19:15:14 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\Fiddler2 [2014-02-16 19:14:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Fiddler2 [2014-02-16 19:14:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RedBot Pro [2014-02-16 15:23:14 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Desktop\death note [2014-02-15 14:03:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2014-02-14 02:29:48 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Portable Devices [2014-02-14 02:29:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Portable Devices [2014-02-14 02:29:48 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Media Player [2014-02-14 02:29:48 | 000,000,000 | ---D | C] -- C:\Program Files\DVD Maker [2014-02-14 02:29:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Media Player [2014-02-14 02:29:46 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\LogFiles [2014-02-14 02:29:46 | 000,000,000 | ---D | C] -- C:\Windows\ehome [2014-02-12 20:39:08 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\Blizzard [2014-02-12 20:12:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone [2014-02-12 20:12:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Hearthstone [2014-02-12 20:10:49 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\Blizzard Entertainment [2014-02-12 20:10:41 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\Battle.net [2014-02-12 20:10:41 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\Battle.net [2014-02-12 20:10:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard Entertainment [2014-02-12 20:10:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Blizzard Entertainment [2014-02-12 20:10:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net [2014-02-12 20:08:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Battle.net [2014-02-12 19:04:54 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\Opera [2014-02-12 19:01:47 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\Opera Software [2014-02-12 19:01:46 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\Opera Software [2014-02-12 19:01:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Opera [2014-02-12 14:28:00 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\amcompat.tlb [2014-02-12 14:28:00 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\amcompat.tlb [2014-02-12 14:27:55 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdxm.tlb [2014-02-12 14:27:55 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdxm.tlb [2014-02-12 14:27:54 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwmp.dll [2014-02-12 14:27:53 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDShextAutoplay.exe [2014-02-12 14:27:52 | 000,630,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\evr.dll [2014-02-12 14:27:52 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdmlog.dll [2014-02-12 14:27:51 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpshell.dll [2014-02-12 14:27:50 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\evr.dll [2014-02-12 14:27:50 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\logagent.exe [2014-02-12 14:27:50 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdmlog.dll [2014-02-12 14:27:50 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WPDShextAutoplay.exe [2014-02-12 14:27:49 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpshell.dll [2014-02-12 14:27:48 | 000,653,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MP4SDECD.DLL [2014-02-12 14:27:48 | 000,415,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MP4SDECD.DLL [2014-02-12 14:27:48 | 000,241,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MPG4DECD.DLL [2014-02-12 14:27:48 | 000,241,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MP43DECD.DLL [2014-02-12 14:27:48 | 000,225,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RESAMPLEDMO.DLL [2014-02-12 14:27:48 | 000,224,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MPG4DECD.DLL [2014-02-12 14:27:48 | 000,223,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MP43DECD.DLL [2014-02-12 14:27:48 | 000,220,672 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\SysWow64\l3codecp.acm [2014-02-12 14:27:48 | 000,182,272 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\SysNative\l3codecp.acm [2014-02-12 14:27:48 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdmps.dll [2014-02-12 14:27:48 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MP3DMOD.DLL [2014-02-12 14:27:48 | 000,081,408 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\SysNative\l3codeca.acm [2014-02-12 14:27:48 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MP3DMOD.DLL [2014-02-12 14:27:48 | 000,064,000 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\SysWow64\l3codeca.acm [2014-02-12 14:27:48 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwmp.dll [2014-02-12 14:27:48 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sysprepMCE.dll [2014-02-12 14:27:47 | 000,495,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drmmgrtn.dll [2014-02-12 14:27:47 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iTVData.dll [2014-02-12 14:27:47 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WmpDui.dll [2014-02-12 14:27:47 | 000,170,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WmpDui.dll [2014-02-12 14:27:46 | 000,345,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MediaMetadataHandler.dll [2014-02-12 14:27:46 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MsPbdaCoInst.dll [2014-02-12 14:27:45 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceConnectApi.dll [2014-02-12 14:27:44 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msnetobj.dll [2014-02-12 14:27:44 | 000,323,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\unregmp2.exe [2014-02-12 14:27:44 | 000,278,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\unregmp2.exe [2014-02-12 14:27:44 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RESAMPLEDMO.DLL [2014-02-12 14:27:44 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\logagent.exe [2014-02-12 14:27:42 | 000,402,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drmmgrtn.dll [2014-02-12 14:27:42 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iTVData.dll [2014-02-12 14:27:42 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdmps.dll [2014-02-12 14:27:42 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LAPRXY.DLL [2014-02-12 14:27:41 | 000,641,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msscp.dll [2014-02-12 14:27:41 | 000,211,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmidx.dll [2014-02-12 14:27:41 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDShServiceObj.dll [2014-02-12 14:27:41 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpcm.dll [2014-02-12 14:27:41 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdxm.ocx [2014-02-12 14:27:41 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxmasf.dll [2014-02-12 14:27:41 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdxm.ocx [2014-02-12 14:27:41 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxmasf.dll [2014-02-12 14:27:40 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MediaMetadataHandler.dll [2014-02-12 14:27:39 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rrinstaller.exe [2014-02-12 14:27:39 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfpmp.exe [2014-02-12 14:27:38 | 000,265,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msnetobj.dll [2014-02-12 14:27:38 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcsrchPH.dll [2014-02-12 14:27:38 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceConnectApi.dll [2014-02-12 14:27:37 | 001,200,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drmv2clt.dll [2014-02-12 14:27:37 | 000,840,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\blackbox.dll [2014-02-12 14:27:37 | 000,781,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmsdk.dll [2014-02-12 14:27:37 | 000,636,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmdev.dll [2014-02-12 14:27:37 | 000,527,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmnet.dll [2014-02-12 14:27:37 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfps.dll [2014-02-12 14:27:37 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmcodecdspps.dll [2014-02-12 14:27:36 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpd_ci.dll [2014-02-12 14:27:36 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpdwcn.dll [2014-02-12 14:27:36 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wpdwcn.dll [2014-02-12 14:27:36 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceClassExtension.dll [2014-02-12 14:27:36 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceClassExtension.dll [2014-02-12 14:27:36 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\LAPRXY.DLL [2014-02-12 14:27:35 | 000,675,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DXPTaskRingtone.dll [2014-02-12 14:27:35 | 000,630,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DXPTaskRingtone.dll [2014-02-12 14:27:35 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msscp.dll [2014-02-12 14:27:35 | 000,350,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WPDSp.dll [2014-02-12 14:27:35 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mswmdm.dll [2014-02-12 14:27:35 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cewmdm.dll [2014-02-12 14:27:35 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceWMDRM.dll [2014-02-12 14:27:35 | 000,169,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceWiaCompat.dll [2014-02-12 14:27:35 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmidx.dll [2014-02-12 14:27:35 | 000,138,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceWiaCompat.dll [2014-02-12 14:27:34 | 000,605,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpeffects.dll [2014-02-12 14:27:34 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfds.dll [2014-02-12 14:27:34 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpsrcwp.dll [2014-02-12 14:27:34 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\COLORCNV.DLL [2014-02-12 14:27:34 | 000,184,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmvdspa.dll [2014-02-12 14:27:34 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfvdsp.dll [2014-02-12 14:27:34 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpcm.dll [2014-02-12 14:27:31 | 000,571,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mspbda.dll [2014-02-12 14:27:31 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll [2014-02-12 14:27:31 | 000,430,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfplat.dll [2014-02-12 14:27:31 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfplat.dll [2014-02-12 14:27:31 | 000,297,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMASF.DLL [2014-02-12 14:27:31 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rrinstaller.exe [2014-02-12 14:27:31 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfpmp.exe [2014-02-12 14:27:29 | 000,758,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceApi.dll [2014-02-12 14:27:29 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceTypes.dll [2014-02-12 14:27:28 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfreadwrite.dll [2014-02-12 14:27:28 | 000,240,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MFPlay.dll [2014-02-12 14:27:28 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfreadwrite.dll [2014-02-12 14:27:28 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MFPlay.dll [2014-02-12 14:27:28 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfAACEnc.dll [2014-02-12 14:27:28 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfAACEnc.dll [2014-02-12 14:27:26 | 000,986,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drmv2clt.dll [2014-02-12 14:27:26 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\blackbox.dll [2014-02-12 14:27:26 | 000,507,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmdev.dll [2014-02-12 14:27:26 | 000,436,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmnet.dll [2014-02-12 14:27:26 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfh264enc.dll [2014-02-12 14:27:26 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfh264enc.dll [2014-02-12 14:27:26 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfdvdec.dll [2014-02-12 14:27:26 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfdvdec.dll [2014-02-12 14:27:26 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfmjpegdec.dll [2014-02-12 14:27:26 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfmjpegdec.dll [2014-02-12 14:27:25 | 000,616,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmsdk.dll [2014-02-12 14:27:25 | 000,154,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VIDRESZR.DLL [2014-02-12 14:27:25 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpps.dll [2014-02-12 14:27:23 | 001,955,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVENCOD.DLL [2014-02-12 14:27:23 | 001,888,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL [2014-02-12 14:27:23 | 001,619,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL [2014-02-12 14:27:23 | 001,568,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVENCOD.DLL [2014-02-12 14:27:23 | 000,666,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVSDECD.DLL [2014-02-12 14:27:23 | 000,664,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVXENCD.DLL [2014-02-12 14:27:23 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVXENCD.DLL [2014-02-12 14:27:23 | 000,541,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVSDECD.DLL [2014-02-12 14:27:23 | 000,447,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVSENCD.DLL [2014-02-12 14:27:23 | 000,358,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVSENCD.DLL [2014-02-12 14:27:23 | 000,352,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpeffects.dll [2014-02-12 14:27:23 | 000,292,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VIDRESZR.DLL [2014-02-12 14:27:23 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\COLORCNV.DLL [2014-02-12 14:27:23 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmvdspa.dll [2014-02-12 14:27:23 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfvdsp.dll [2014-02-12 14:27:22 | 003,207,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mf.dll [2014-02-12 14:27:22 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpmde.dll [2014-02-12 14:27:22 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfds.dll [2014-02-12 14:27:22 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpsrcwp.dll [2014-02-12 14:27:14 | 000,435,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceStatus.dll [2014-02-12 14:27:14 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceStatus.dll [2014-02-12 14:27:13 | 002,543,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpdshext.dll [2014-02-12 14:27:13 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmerror.dll [2014-02-12 14:27:13 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmerror.dll [2014-02-12 14:27:13 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mferror.dll [2014-02-12 14:27:13 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mferror.dll [2014-02-12 14:27:13 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\asferror.dll [2014-02-12 14:27:13 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\asferror.dll [2014-02-12 14:27:11 | 004,120,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf.dll [2014-02-12 14:27:11 | 001,024,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll [2014-02-12 14:27:11 | 001,009,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcmde.dll [2014-02-12 14:27:10 | 001,575,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMSPDMOE.DLL [2014-02-12 14:27:10 | 001,325,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMSPDMOE.DLL [2014-02-12 14:27:10 | 001,232,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMADMOD.DLL [2014-02-12 14:27:10 | 001,153,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMADMOE.DLL [2014-02-12 14:27:10 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMADMOD.DLL [2014-02-12 14:27:10 | 000,812,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMADMOE.DLL [2014-02-12 14:27:10 | 000,609,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MFWMAAEC.DLL [2014-02-12 14:27:10 | 000,484,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MFWMAAEC.DLL [2014-02-12 14:27:10 | 000,431,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDSp.dll [2014-02-12 14:27:10 | 000,397,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mswmdm.dll [2014-02-12 14:27:10 | 000,358,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpdxm.dll [2014-02-12 14:27:10 | 000,254,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cewmdm.dll [2014-02-12 14:27:10 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceWMDRM.dll [2014-02-12 14:27:09 | 000,481,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpps.dll [2014-02-12 14:27:08 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfps.dll [2014-02-12 14:27:08 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmcodecdspps.dll [2014-02-12 14:27:03 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpdxm.dll [2014-02-12 14:27:02 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL [2014-02-12 14:27:02 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL [2014-02-12 14:27:01 | 001,243,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMNetMgr.dll [2014-02-12 14:27:01 | 001,003,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMNetMgr.dll [2014-02-12 14:27:00 | 002,072,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPEncEn.dll [2014-02-12 14:26:59 | 014,633,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll [2014-02-12 14:26:59 | 003,027,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVCORE.DLL [2014-02-12 14:26:58 | 011,410,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll [2014-02-12 14:26:58 | 001,624,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPEncEn.dll [2014-02-12 14:18:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Windows Genuine Advantage [2014-02-12 14:15:31 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\AdbDriverInstaller [2014-02-12 14:12:41 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\DriverToolkit [2014-02-12 14:12:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DriverToolkit [2014-02-12 14:07:51 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\Filedrop [2014-02-11 19:15:06 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\Skyrim [2014-02-11 19:15:06 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\Documents\My Games [2014-02-11 19:14:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razor 1911 [2014-02-11 19:13:55 | 000,530,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_6.dll [2014-02-11 19:13:55 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_6.dll [2014-02-11 19:13:55 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_6.dll [2014-02-11 19:13:55 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_6.dll [2014-02-11 19:13:55 | 000,078,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_4.dll [2014-02-11 19:13:55 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_4.dll [2014-02-11 19:13:55 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_7.dll [2014-02-11 19:13:55 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_7.dll [2014-02-11 19:13:54 | 000,517,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_5.dll [2014-02-11 19:13:54 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_5.dll [2014-02-11 19:13:51 | 002,582,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_42.dll [2014-02-11 19:13:51 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_42.dll [2014-02-11 19:13:51 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_5.dll [2014-02-11 19:13:51 | 000,176,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_5.dll [2014-02-11 19:13:50 | 005,554,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_42.dll [2014-02-11 19:13:50 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_42.dll [2014-02-11 19:13:50 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll [2014-02-11 19:13:50 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_41.dll [2014-02-11 19:13:50 | 002,475,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_42.dll [2014-02-11 19:13:50 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll [2014-02-11 19:13:50 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_42.dll [2014-02-11 19:13:50 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_41.dll [2014-02-11 19:13:50 | 000,523,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_42.dll [2014-02-11 19:13:50 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll [2014-02-11 19:13:50 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_42.dll [2014-02-11 19:13:50 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_41.dll [2014-02-11 19:13:50 | 000,285,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_42.dll [2014-02-11 19:13:50 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_42.dll [2014-02-11 19:13:49 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll [2014-02-11 19:13:49 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll [2014-02-11 19:13:49 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll [2014-02-11 19:13:49 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll [2014-02-11 19:13:49 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll [2014-02-11 19:13:49 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll [2014-02-11 19:13:49 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll [2014-02-11 19:13:49 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_4.dll [2014-02-11 19:13:49 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll [2014-02-11 19:13:49 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll [2014-02-11 19:13:49 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_4.dll [2014-02-11 19:13:49 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll [2014-02-11 19:13:49 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll [2014-02-11 19:13:49 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll [2014-02-11 19:13:49 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll [2014-02-11 19:13:49 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll [2014-02-11 19:13:49 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll [2014-02-11 19:13:49 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_6.dll [2014-02-11 19:13:48 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_2.dll [2014-02-11 19:13:48 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll [2014-02-11 19:13:48 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll [2014-02-11 19:13:48 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_1.dll [2014-02-11 19:13:48 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll [2014-02-11 19:13:48 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll [2014-02-11 19:13:47 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll [2014-02-11 19:13:47 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll [2014-02-11 19:13:47 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll [2014-02-11 19:13:47 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll [2014-02-11 19:13:47 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll [2014-02-11 19:13:47 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_2.dll [2014-02-11 19:13:47 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_2.dll [2014-02-11 19:13:47 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll [2014-02-11 19:13:47 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll [2014-02-11 19:13:46 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll [2014-02-11 19:13:46 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll [2014-02-11 19:13:46 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll [2014-02-11 19:13:46 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll [2014-02-11 19:13:46 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll [2014-02-11 19:13:46 | 000,489,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_0.dll [2014-02-11 19:13:46 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_0.dll [2014-02-11 19:13:46 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll [2014-02-11 19:13:46 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll [2014-02-11 19:13:46 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_0.dll [2014-02-11 19:13:46 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll [2014-02-11 19:13:46 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_0.dll [2014-02-11 19:13:46 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll [2014-02-11 19:13:46 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll [2014-02-11 19:13:45 | 004,910,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_37.dll [2014-02-11 19:13:45 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_37.dll [2014-02-11 19:13:45 | 001,860,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_37.dll [2014-02-11 19:13:45 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_37.dll [2014-02-11 19:13:45 | 000,529,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_37.dll [2014-02-11 19:13:45 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_36.dll [2014-02-11 19:13:45 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_37.dll [2014-02-11 19:13:45 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_36.dll [2014-02-11 19:13:45 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_10.dll [2014-02-11 19:13:45 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_10.dll [2014-02-11 19:13:45 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_3.dll [2014-02-11 19:13:45 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_3.dll [2014-02-11 19:13:44 | 005,081,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_36.dll [2014-02-11 19:13:44 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_36.dll [2014-02-11 19:13:44 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_36.dll [2014-02-11 19:13:44 | 001,985,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_35.dll [2014-02-11 19:13:44 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_36.dll [2014-02-11 19:13:44 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_35.dll [2014-02-11 19:13:44 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_35.dll [2014-02-11 19:13:44 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_35.dll [2014-02-11 19:13:44 | 000,411,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_9.dll [2014-02-11 19:13:44 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_9.dll [2014-02-11 19:13:43 | 005,073,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_35.dll [2014-02-11 19:13:43 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_35.dll [2014-02-11 19:13:43 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_8.dll [2014-02-11 19:13:43 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_8.dll [2014-02-11 19:13:43 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_2.dll [2014-02-11 19:13:43 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_2.dll [2014-02-11 19:09:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\The Elder Scrolls V Skyrim [2014-02-11 19:08:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite [2014-02-11 19:07:18 | 000,283,064 | ---- | C] (Disc Soft Ltd) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys [2014-02-11 19:07:14 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\DAEMON Tools Lite [2014-02-11 19:07:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Lite [2014-02-11 19:06:47 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite [2014-02-11 16:30:00 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Local\CRE [2014-02-11 16:29:02 | 000,000,000 | ---D | C] -- C:\Users\Lodzia\AppData\Roaming\uTorrent [2014-02-11 13:14:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus [2014-02-11 13:14:25 | 000,000,000 | ---D | C] -- C:\Program Files\McAfee Security Scan [3 C:\Users\Lodzia\AppData\Local\*.tmp files -> C:\Users\Lodzia\AppData\Local\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2014-03-08 10:35:00 | 000,000,932 | ---- | M] () -- C:\Windows\tasks\SaveSenseLiveUpdateTaskMachineUA.job [2014-03-08 10:30:30 | 000,001,048 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2014-03-08 09:41:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2014-03-08 06:30:00 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2014-03-07 21:05:39 | 000,019,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2014-03-07 21:05:39 | 000,019,920 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2014-03-07 21:04:11 | 000,778,150 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2014-03-07 21:04:11 | 000,651,450 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2014-03-07 21:04:11 | 000,120,382 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2014-03-07 20:58:24 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2014-03-07 20:56:50 | 000,001,316 | ---- | M] () -- C:\Users\Lodzia\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk [2014-03-07 20:56:50 | 000,001,168 | ---- | M] () -- C:\Users\Lodzia\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk [2014-03-07 20:56:50 | 000,001,049 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2014-03-07 20:56:50 | 000,000,929 | ---- | M] () -- C:\Users\Lodzia\Application Data\Microsoft\Internet Explorer\Quick Launch\Opera.lnk [2014-03-07 20:56:50 | 000,000,905 | ---- | M] () -- C:\Users\Public\Desktop\Opera.lnk [2014-03-07 20:56:49 | 000,001,292 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk [2014-03-05 15:57:30 | 000,002,019 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk [2014-03-05 15:48:04 | 000,050,935 | ---- | M] () -- C:\Users\Lodzia\Desktop\umowa_sprzedazy_motocykla (1).pdf [2014-03-05 15:28:17 | 000,000,000 | ---- | M] () -- C:\Users\Lodzia\AppData\Local\{E3FF3ACA-1B3A-4A7E-8C5B-99565AA7D43D} [2014-03-05 14:58:32 | 000,001,128 | ---- | M] () -- C:\Users\Public\Desktop\Diablo III.lnk [2014-03-04 23:13:23 | 000,185,538 | ---- | M] () -- C:\Users\Lodzia\Desktop\bingo.JPG [2014-03-02 20:45:12 | 000,000,000 | ---- | M] () -- C:\Users\Lodzia\AppData\Local\{BCC4D689-72B4-40B1-9DD4-595C85C74378} [2014-03-02 20:43:23 | 000,001,180 | ---- | M] () -- C:\Users\Public\Desktop\Alcohol 120%.lnk [2014-03-02 20:39:00 | 000,000,000 | ---- | M] () -- C:\Users\Lodzia\AppData\Local\{FD20D787-EBF0-4291-8212-171603B6B64C} [2014-03-02 20:32:14 | 000,386,680 | ---- | M] (Duplex Secure Ltd.) -- C:\Windows\SysNative\drivers\sptd.sys [2014-03-02 20:30:35 | 000,000,045 | ---- | M] () -- C:\Users\Lodzia\AppData\Roaming\WB.CFG [2014-03-02 19:40:55 | 000,003,147 | ---- | M] () -- C:\Users\Lodzia\Desktop\Shortcut to SecureDownloadManager.exe.lnk [2014-03-01 20:17:24 | 000,103,736 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe [2014-03-01 00:35:03 | 002,199,112 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2014-02-28 15:12:35 | 000,693,429 | ---- | M] () -- C:\Users\Lodzia\Desktop\TheGodsMustBeCrazytab.pdf [2014-02-28 15:07:05 | 000,000,932 | ---- | M] () -- C:\Users\Lodzia\Desktop\Guitar Pro 5.lnk [2014-02-28 15:00:36 | 000,001,064 | ---- | M] () -- C:\Users\Lodzia\Application Data\Microsoft\Internet Explorer\Quick Launch\Guitar Pro 6.lnk [2014-02-28 15:00:36 | 000,001,040 | ---- | M] () -- C:\Users\Public\Desktop\Guitar Pro 6.lnk [2014-02-25 19:30:05 | 002,284,793 | ---- | M] () -- C:\Users\Lodzia\Desktop\Hearthstone_Screenshot_2.25.2014.19.30.04.png [2014-02-24 21:01:10 | 000,001,102 | ---- | M] () -- C:\Users\Public\Desktop\Dziobas Rar Player.lnk [2014-02-21 16:41:31 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2014-02-21 16:41:30 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2014-02-19 14:22:51 | 000,000,998 | ---- | M] () -- C:\Users\Public\Desktop\XenoBot.lnk [2014-02-18 17:50:13 | 000,148,633 | ---- | M] () -- C:\Users\Lodzia\Documents\ask.tpp [2014-02-18 17:44:36 | 000,132,129 | ---- | M] () -- C:\Users\Lodzia\Desktop\111.png [2014-02-18 17:39:26 | 000,000,978 | ---- | M] () -- C:\Users\Lodzia\AppData\Local\recently-used.xbel [2014-02-18 17:27:24 | 000,013,916 | ---- | M] () -- C:\Users\Lodzia\Documents\profil.tpp [2014-02-18 17:26:14 | 000,003,621 | ---- | M] () -- C:\Users\Lodzia\Documents\google.tpp [2014-02-18 17:02:30 | 000,009,338 | ---- | M] () -- C:\Users\Lodzia\Documents\gamestuff.tpp [2014-02-18 17:01:58 | 000,021,358 | ---- | M] () -- C:\Users\Lodzia\Documents\azubu.tpp [2014-02-18 16:59:02 | 000,017,907 | ---- | M] () -- C:\Users\Lodzia\Documents\lolnexus.tpp [2014-02-18 16:58:06 | 000,258,638 | ---- | M] () -- C:\Users\Lodzia\Documents\programosy.tpp [2014-02-18 16:56:02 | 000,024,110 | ---- | M] () -- C:\Users\Lodzia\Documents\wikipedia.tpp [2014-02-18 16:55:18 | 000,022,181 | ---- | M] () -- C:\Users\Lodzia\Documents\w3schools.tpp [2014-02-18 16:53:17 | 000,009,125 | ---- | M] () -- C:\Users\Lodzia\Documents\poczta.tpp [2014-02-14 07:16:33 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2014-02-12 20:12:22 | 000,001,183 | ---- | M] () -- C:\Users\Public\Desktop\Hearthstone.lnk [2014-02-12 20:10:38 | 000,000,657 | ---- | M] () -- C:\Users\Public\Desktop\Battle.net.lnk [2014-02-11 19:08:15 | 000,001,950 | ---- | M] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk [2014-02-11 19:07:18 | 000,283,064 | ---- | M] (Disc Soft Ltd) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys [2014-02-11 16:29:45 | 000,000,853 | ---- | M] () -- C:\Users\Lodzia\Desktop\µTorrent.lnk [2014-02-11 16:29:45 | 000,000,833 | ---- | M] () -- C:\Users\Lodzia\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk [2014-02-11 13:14:28 | 000,001,931 | ---- | M] () -- C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk [2014-02-11 13:14:28 | 000,001,931 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2014-02-08 19:34:51 | 031,432,480 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll [2014-02-08 19:34:51 | 025,256,224 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll [2014-02-08 19:34:51 | 023,683,360 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll [2014-02-08 19:34:51 | 018,257,576 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvwgf2umx.dll [2014-02-08 19:34:51 | 017,715,784 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll [2014-02-08 19:34:51 | 017,560,352 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll [2014-02-08 19:34:51 | 015,740,232 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll [2014-02-08 19:34:51 | 014,669,032 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvd3dum.dll [2014-02-08 19:34:51 | 011,636,176 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll [2014-02-08 19:34:51 | 011,589,272 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvopencl.dll [2014-02-08 19:34:51 | 009,728,064 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll [2014-02-08 19:34:51 | 009,690,424 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll [2014-02-08 19:34:51 | 003,142,432 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll [2014-02-08 19:34:51 | 003,090,184 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvapi64.dll [2014-02-08 19:34:51 | 002,956,576 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll [2014-02-08 19:34:51 | 002,782,496 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll [2014-02-08 19:34:51 | 002,713,728 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvapi.dll [2014-02-08 19:34:51 | 002,410,784 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll [2014-02-08 19:34:51 | 001,885,472 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco6433489.dll [2014-02-08 19:34:51 | 001,515,296 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispgenco6433489.dll [2014-02-08 19:34:51 | 000,892,192 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\NvIFR64.dll [2014-02-08 19:34:51 | 000,875,296 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\NvFBC64.dll [2014-02-08 19:34:51 | 000,863,520 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvIFR.dll [2014-02-08 19:34:51 | 000,844,576 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\NvFBC.dll [2014-02-08 19:34:51 | 000,061,216 | ---- | M] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll [2014-02-08 19:34:51 | 000,053,024 | ---- | M] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll [2014-02-08 19:34:51 | 000,024,544 | ---- | M] () -- C:\Windows\SysNative\nvinfo.pb [2014-02-08 18:42:36 | 006,712,608 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcpl.dll [2014-02-08 18:42:36 | 003,498,272 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvsvc64.dll [2014-02-08 18:42:32 | 000,386,336 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvmctray.dll [2014-02-08 18:42:32 | 000,063,776 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysNative\nvshext.dll [2014-02-08 17:18:30 | 000,599,840 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvStreaming.exe [3 C:\Users\Lodzia\AppData\Local\*.tmp files -> C:\Users\Lodzia\AppData\Local\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2014-03-05 15:57:30 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk [2014-03-05 15:57:30 | 000,002,019 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk [2014-03-05 15:48:00 | 000,050,935 | ---- | C] () -- C:\Users\Lodzia\Desktop\umowa_sprzedazy_motocykla (1).pdf [2014-03-05 15:28:17 | 000,000,000 | ---- | C] () -- C:\Users\Lodzia\AppData\Local\{E3FF3ACA-1B3A-4A7E-8C5B-99565AA7D43D} [2014-03-05 14:58:32 | 000,001,128 | ---- | C] () -- C:\Users\Public\Desktop\Diablo III.lnk [2014-03-04 23:13:23 | 000,185,538 | ---- | C] () -- C:\Users\Lodzia\Desktop\bingo.JPG [2014-03-02 20:44:48 | 000,000,000 | ---- | C] () -- C:\Users\Lodzia\AppData\Local\{BCC4D689-72B4-40B1-9DD4-595C85C74378} [2014-03-02 20:43:23 | 000,001,180 | ---- | C] () -- C:\Users\Public\Desktop\Alcohol 120%.lnk [2014-03-02 20:39:00 | 000,000,000 | ---- | C] () -- C:\Users\Lodzia\AppData\Local\{FD20D787-EBF0-4291-8212-171603B6B64C} [2014-03-02 20:30:37 | 000,000,932 | ---- | C] () -- C:\Windows\tasks\SaveSenseLiveUpdateTaskMachineUA.job [2014-03-02 20:30:35 | 000,000,045 | ---- | C] () -- C:\Users\Lodzia\AppData\Roaming\WB.CFG [2014-03-02 19:40:55 | 000,003,147 | ---- | C] () -- C:\Users\Lodzia\Desktop\Shortcut to SecureDownloadManager.exe.lnk [2014-02-28 15:12:33 | 000,693,429 | ---- | C] () -- C:\Users\Lodzia\Desktop\TheGodsMustBeCrazytab.pdf [2014-02-28 15:07:05 | 000,000,932 | ---- | C] () -- C:\Users\Lodzia\Desktop\Guitar Pro 5.lnk [2014-02-28 15:00:36 | 000,001,064 | ---- | C] () -- C:\Users\Lodzia\Application Data\Microsoft\Internet Explorer\Quick Launch\Guitar Pro 6.lnk [2014-02-28 15:00:36 | 000,001,040 | ---- | C] () -- C:\Users\Public\Desktop\Guitar Pro 6.lnk [2014-02-25 19:30:05 | 002,284,793 | ---- | C] () -- C:\Users\Lodzia\Desktop\Hearthstone_Screenshot_2.25.2014.19.30.04.png [2014-02-24 21:01:10 | 000,001,102 | ---- | C] () -- C:\Users\Public\Desktop\Dziobas Rar Player.lnk [2014-02-23 14:50:25 | 000,103,736 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2014-02-18 17:57:21 | 000,000,866 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS3.lnk [2014-02-18 17:56:18 | 000,000,920 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Stock Photos CS3.lnk [2014-02-18 17:55:47 | 000,001,403 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit 2.lnk [2014-02-18 17:55:41 | 000,000,903 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS3.lnk [2014-02-18 17:54:49 | 000,000,840 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS3.lnk [2014-02-18 17:48:18 | 000,148,633 | ---- | C] () -- C:\Users\Lodzia\Documents\ask.tpp [2014-02-18 17:39:26 | 000,000,978 | ---- | C] () -- C:\Users\Lodzia\AppData\Local\recently-used.xbel [2014-02-18 17:39:18 | 000,132,129 | ---- | C] () -- C:\Users\Lodzia\Desktop\111.png [2014-02-18 17:37:12 | 000,000,894 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk [2014-02-18 17:26:33 | 000,013,916 | ---- | C] () -- C:\Users\Lodzia\Documents\profil.tpp [2014-02-18 17:25:19 | 000,003,621 | ---- | C] () -- C:\Users\Lodzia\Documents\google.tpp [2014-02-18 17:02:09 | 000,009,338 | ---- | C] () -- C:\Users\Lodzia\Documents\gamestuff.tpp [2014-02-18 17:00:07 | 000,021,358 | ---- | C] () -- C:\Users\Lodzia\Documents\azubu.tpp [2014-02-18 16:58:34 | 000,017,907 | ---- | C] () -- C:\Users\Lodzia\Documents\lolnexus.tpp [2014-02-18 16:57:18 | 000,258,638 | ---- | C] () -- C:\Users\Lodzia\Documents\programosy.tpp [2014-02-18 16:55:58 | 000,024,110 | ---- | C] () -- C:\Users\Lodzia\Documents\wikipedia.tpp [2014-02-18 16:55:04 | 000,022,181 | ---- | C] () -- C:\Users\Lodzia\Documents\w3schools.tpp [2014-02-18 16:53:10 | 000,009,125 | ---- | C] () -- C:\Users\Lodzia\Documents\poczta.tpp [2014-02-17 17:43:59 | 000,000,998 | ---- | C] () -- C:\Users\Public\Desktop\XenoBot.lnk [2014-02-14 07:16:47 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk [2014-02-14 07:16:35 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk [2014-02-14 07:16:33 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2014-02-14 07:16:27 | 000,001,547 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk [2014-02-12 20:12:22 | 000,001,183 | ---- | C] () -- C:\Users\Public\Desktop\Hearthstone.lnk [2014-02-12 20:10:38 | 000,000,657 | ---- | C] () -- C:\Users\Public\Desktop\Battle.net.lnk [2014-02-12 19:04:39 | 000,000,929 | ---- | C] () -- C:\Users\Lodzia\Application Data\Microsoft\Internet Explorer\Quick Launch\Opera.lnk [2014-02-12 19:04:39 | 000,000,917 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk [2014-02-12 19:04:39 | 000,000,905 | ---- | C] () -- C:\Users\Public\Desktop\Opera.lnk [2014-02-12 14:27:01 | 000,316,640 | ---- | C] () -- C:\Windows\WMSysPr9.prx [2014-02-11 19:08:15 | 000,001,950 | ---- | C] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk [2014-02-11 16:29:45 | 000,000,853 | ---- | C] () -- C:\Users\Lodzia\Desktop\µTorrent.lnk [2014-02-11 16:29:45 | 000,000,833 | ---- | C] () -- C:\Users\Lodzia\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk [2014-02-01 00:38:30 | 000,066,872 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2014-02-01 00:38:26 | 000,000,331 | ---- | C] () -- C:\Windows\game.ini [2014-01-23 22:27:34 | 000,763,706 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 06:00:09 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2010-11-21 04:24:20 | 014,174,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2010-11-21 04:24:28 | 012,872,192 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 04:24:46 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2014-02-12 14:15:31 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\AdbDriverInstaller [2014-02-25 18:30:27 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Battle.net [2014-02-11 19:08:46 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\DAEMON Tools Lite [2014-03-02 19:40:54 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\e-academy Inc [2014-02-12 14:07:51 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Filedrop [2014-03-03 21:47:26 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\FileZilla [2014-03-03 21:09:39 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\foobar2000 [2014-02-28 15:00:56 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Guitar Pro 6 [2014-01-24 11:35:35 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\LolClient [2014-02-19 14:22:52 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Micorsoft [2014-02-16 19:45:56 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\MSDrvCfg [2014-02-17 17:01:48 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Notepad++ [2014-02-12 19:04:54 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Opera [2014-02-12 19:01:46 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Opera Software [2014-01-23 22:35:19 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Riot Games [2014-02-04 22:15:15 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Sony [2014-03-02 20:30:53 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\sweet-page [2014-01-23 22:19:25 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Tibia [2014-01-24 20:11:38 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Tibiacast [2014-03-07 16:48:50 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\TS3Client [2014-03-07 20:50:22 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\uTorrent [color=#E56717]========== Purity Check ==========[/color] < End of report >

Kod: Zaznacz wszystko: OTL Extras logfile created on: 2014-03-08 10:37:38 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Lodzia\Downloads 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 0,87 Gb Available Physical Memory | 43,69% Memory free 4,00 Gb Paging File | 2,26 Gb Available in Paging File | 56,50% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 244,14 Gb Total Space | 135,50 Gb Free Space | 55,50% Space Free | Partition Type: NTFS Drive D: | 221,61 Gb Total Space | 220,81 Gb Free Space | 99,63% Space Free | Partition Type: NTFS Drive J: | 5,12 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Computer Name: LODZIA-PC | User Name: Lodzia | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) [HKEY_USERS\S-1-5-21-3339302824-2973478899-564961981-1001\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML] -- Reg Error: Key error. File not found [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- "C:\Windows\system32\rundll32.exe" "C:\Windows\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 61 01 DA 5A 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{2462DB64-2080-438C-84F5-1FBEF830E360}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe | "{45AA7E3A-9BD1-48E7-BFB5-768812E45B52}" = lport=139 | protocol=6 | dir=in | app=system | "{5164897A-3910-457E-BBAA-0DECFD81DE5A}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{5D3FBC82-855F-4235-8815-89F8B975D081}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{67F3CF0C-9B80-4E3B-98F1-8D7F9FEE4476}" = lport=138 | protocol=17 | dir=in | app=system | "{67FFAFB1-41C4-4D61-9431-4C4EC8014A8B}" = rport=139 | protocol=6 | dir=out | app=system | "{6B9AFC3C-BF07-4889-822C-B0649E08AD05}" = lport=137 | protocol=17 | dir=in | app=system | "{80C5D0C6-978A-4C93-A7B4-6C201B80E414}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{83D46636-B3CB-45C3-B8C5-7D7752618F36}" = lport=445 | protocol=6 | dir=in | app=system | "{B86C32AD-7516-45DA-B3EF-E6992E38EC75}" = rport=138 | protocol=17 | dir=out | app=system | "{BBF07715-91FE-46DB-9D1F-11B81CC1629F}" = lport=443 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe | "{BE56A850-180E-4CF8-866D-053676B0232C}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | "{C72B1A1D-F969-4C89-B8CD-BF83D3FFD9BE}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{CBB238E5-6C3F-43F9-9B47-D9CFDCC6A6D1}" = rport=137 | protocol=17 | dir=out | app=system | "{D7D80DE1-4FE8-4A1C-811C-4CEC486B1B54}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | "{DAE70611-AD32-4C4D-ADA6-789FE964D7DE}" = lport=47987 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe | "{E70C7043-21CD-4578-9A6F-DAE2B593F4D4}" = rport=445 | protocol=6 | dir=out | app=system | "{F450552D-6EC0-4B83-905D-E86CB17CF3E0}" = lport=80 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{113475CC-26B7-4063-A5F3-D765BA551BE4}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2717\agent.exe | "{1C1684E1-F9C7-42C7-88C3-805A9317DEB3}" = protocol=17 | dir=in | app=c:\users\lodzia\appdata\roaming\utorrent\utorrent.exe | "{1E7AD763-BD3C-4CC0-929F-8543D48E7134}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | "{270DD52F-0934-4D54-9D30-A2AFC5A8D77D}" = protocol=6 | dir=in | app=c:\program files (x86)\activision\call of duty 4 - modern warfare\iw3mp.exe | "{2931114B-05F4-4B3A-AC88-9FEAF51AE94E}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2717\agent.exe | "{37CD7741-1B07-49A4-B03F-2A1FD3CAB70F}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2380\agent.exe | "{3A7CFD98-3E8F-4F61-B4B3-15E0362DAB72}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{4DBB0E83-0349-4362-97EF-23285690D69E}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | "{56AA35FD-6D9D-404C-95CB-BF9C37BBBC17}" = protocol=6 | dir=in | app=c:\users\lodzia\appdata\roaming\utorrent\utorrent.exe | "{6DAB9611-2FCB-4A65-834A-FFA9EA9BEF8C}" = protocol=17 | dir=in | app=d:\battle.net\battle.net.exe | "{771F8DB0-D794-4335-BBBB-9AEE96B30032}" = protocol=6 | dir=in | app=c:\program files (x86)\hearthstone\hearthstone.exe | "{79B96640-4D96-45C7-9177-79C62D680179}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | "{7FF8D806-A8EF-466C-8389-FBE1B97C3DD0}" = protocol=6 | dir=in | app=d:\battle.net\battle.net.exe | "{845466B5-F1D9-45BE-BBBC-D0AB95EA71AF}" = protocol=6 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe | "{8B18CBB1-772E-4D71-9EF5-A07B4FE6B159}" = protocol=17 | dir=in | app=c:\program files (x86)\hearthstone\hearthstone.exe | "{A47B66FA-DB5A-4BEB-8637-5FB426B5AA4E}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{AD22F8D6-CFF3-495C-A78A-7318A3C3DED3}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{B066BCE1-CFF3-46C4-BB1C-E60CE8EEC1FB}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2680\agent.exe | "{C449E127-0919-48B8-8F37-894DF17C8260}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2717\agent.exe | "{CF52708C-AB0B-4582-A3E5-7B80C0E2E909}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | "{D463EF59-110A-4787-A6FE-8C6E05FCD0BF}" = protocol=17 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe | "{D832558B-A960-455E-90B6-6308F7208381}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{DD5AD1C2-B7D6-4494-80EE-F62F94D55CAC}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2717\agent.exe | "{DF53E807-C07C-496A-80B6-CCA2A987F1C3}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2680\agent.exe | "{E56F0A94-8C1C-4E7E-BA72-7312174F28F8}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2689\agent.exe | "{EC79FD34-BE8B-4D6E-80CA-12A167E76434}" = protocol=6 | dir=in | app=c:\program files (x86)\fiddler2\fiddler.exe | "{EE76D64C-11FB-4AB1-88F6-16A1318E7F9A}" = protocol=17 | dir=in | app=c:\program files (x86)\activision\call of duty 4 - modern warfare\iw3mp.exe | "{FDD2F1B2-D915-4E7A-A26C-6E7A7DB96E9E}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2380\agent.exe | "{FF25E87D-CDC2-4239-BDCD-F58683D3F434}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2689\agent.exe | "TCP Query User{D8A5DE30-99FA-49D9-82DD-26F8BBEC7CE8}C:\program files (x86)\counter-strike 1.6 nonsteam\hl.exe" = protocol=6 | dir=in | app=c:\program files (x86)\counter-strike 1.6 nonsteam\hl.exe | "TCP Query User{E49DDCDD-72E5-4DB0-AA7B-3E2E01A3DAF3}C:\program files (x86)\filedrop\filedrop.exe" = protocol=6 | dir=in | app=c:\program files (x86)\filedrop\filedrop.exe | "UDP Query User{12BD9140-AB14-48FC-AB16-FA3D678F3052}C:\program files (x86)\counter-strike 1.6 nonsteam\hl.exe" = protocol=17 | dir=in | app=c:\program files (x86)\counter-strike 1.6 nonsteam\hl.exe | "UDP Query User{E363C915-4146-4A58-8135-388D7859B3E0}C:\program files (x86)\filedrop\filedrop.exe" = protocol=17 | dir=in | app=c:\program files (x86)\filedrop\filedrop.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64) "{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Driver 334.89 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 334.89 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 334.89 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 1.8.1 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller Driver 334.89 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 9.13.1220 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 10.11.15 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.LEDVisualizer" = NVIDIA LED Visualizer 1.0 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamC" = GeForce Experience NvStream Client Components "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv" = SHIELD Streaming "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Network.Service" = NVIDIA Network Service "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core" = NVIDIA Update Core "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver" = NVIDIA Virtual Audio 1.2.19 "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "FindRight" = FindRight "GIMP-2_is1" = GIMP 2.8.10 "McAfee Security Scan" = McAfee Security Scan Plus "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3 "{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting "{094F33A8-7DE1-4631-AD59-D2967A8F2EF8}" = Tibiacast "{14A487F2-1259-4E6C-AE3C-3C888DDBCB60}_is1" = Guitar Pro 6 Demo "{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin "{293D5729-7C01-4FA4-A4DE-BB6A1587BBB9}" = PDF Settings "{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3 "{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3 "{5DE67937-45D5-45E4-923C-0B7F7EC929A7}" = League of Legends "{6179A7D2-A668-4F1D-BC9A-DCC6A10C7871}" = Adobe Color NA Extra Settings "{6ABE0BEE-D572-4FE8-B434-9E72A289431B}" = Adobe Fonts All "{6D12B99F-EAAA-49D8-8E2F-74FA7459CCB2}" = Adobe Asset Services CS3 "{78EFD06D-7583-42F1-9E77-671D8782EB70}" = Adobe Photoshop CS3 "{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3 "{80407BA7-7763-4395-AB98-5233F1B34E65}" = NVIDIA PhysX "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3 "{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}" = Adobe Type Support "{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3 "{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3 "{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}" = Adobe CMaps "{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC76BA86-7AD7-1045-7B44-AB0000000001}" = Adobe Reader XI (11.0.06) - Polish "{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0 "{B798AB02-C334-44AE-872B-A988677CB957}_is1" = XenoBot Cracked 3.5.0 (10.35) by Tibia-Bot.pl "{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}" = Adobe Default Language CS3 "{BD087F50-46B2-43E4-BD73-5DB3DC20B47C}" = Adobe Color EU Recommended Settings "{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2 "{CBF4DADD-974D-49C8-BC83-C6F31554001E}" = Adobe Setup "{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client "{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}" = Adobe PDF Library Files "{D92B72E2-C854-4738-8ED6-4C3661CC17AE}" = Adobe Color JA Extra Settings "{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}" = Adobe Color Common Settings "{E040B65B-8683-4228-8C33-D44A141E40EA}" = Secure Download Manager "{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM) "{E5EC3E84-F3D6-4ECB-9486-69FCF11694B3}" = Opera 9.20 "{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3 "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "Adobe Flash Player ActiveX" = Adobe Flash Player 12 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 12 Plugin "Adobe_678cd98c8365a5647f9a2e539d120a8" = Adobe Photoshop CS3 "Battle.net" = Battle.net "DAEMON Tools Lite" = DAEMON Tools Lite "Diablo III" = Diablo III "Dziobas Rar Player_is1" = Dziobas Rar Player 0.009.52 "FileZilla Client" = FileZilla Client 3.7.4.1 "foobar2000" = foobar2000 v1.3.1 "Google Chrome" = Google Chrome "Guitar Pro 5_is1" = Guitar Pro 5.2 "Hearthstone" = Hearthstone "InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch "InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM) "League of Legends 3.0.1" = League of Legends "Mozilla Firefox 27.0.1 (x86 pl)" = Mozilla Firefox 27.0.1 (x86 pl) "MozillaMaintenanceService" = Mozilla Maintenance Service "Notepad++" = Notepad++ "NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver "sweet-page uninstaller" = sweet-page uninstaller "TeamSpeak 3 Client" = TeamSpeak 3 Client "Teleport Pro" = Teleport Pro "Tibia_is1" = Tibia "WinRAR archiver" = WinRAR 5.00 (32-bitowy) [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-3339302824-2973478899-564961981-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Counter-Strike 1.6 NonSteam v50" = Counter-Strike 1.6 NonSteam "Flux" = f.lux "uTorrent" = µTorrent [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2014-03-05 02:07:18 | Computer Name = Lodzia-PC | Source = WinMgmt | ID = 10 Description = Error - 2014-03-05 02:11:39 | Computer Name = Lodzia-PC | Source = WinMgmt | ID = 10 Description = Error - 2014-03-05 10:27:41 | Computer Name = Lodzia-PC | Source = WinMgmt | ID = 10 Description = Error - 2014-03-05 10:31:11 | Computer Name = Lodzia-PC | Source = WinMgmt | ID = 10 Description = Error - 2014-03-06 02:30:02 | Computer Name = Lodzia-PC | Source = WinMgmt | ID = 10 Description = Error - 2014-03-06 02:36:21 | Computer Name = Lodzia-PC | Source = WinMgmt | ID = 10 Description = Error - 2014-03-06 08:56:14 | Computer Name = Lodzia-PC | Source = WinMgmt | ID = 10 Description = Error - 2014-03-07 02:34:11 | Computer Name = Lodzia-PC | Source = WinMgmt | ID = 10 Description = Error - 2014-03-07 09:16:19 | Computer Name = Lodzia-PC | Source = WinMgmt | ID = 10 Description = Error - 2014-03-07 16:00:09 | Computer Name = Lodzia-PC | Source = WinMgmt | ID = 10 Description = [ System Events ] Error - 2014-03-06 02:30:15 | Computer Name = Lodzia-PC | Source = DCOM | ID = 10016 Description = Error - 2014-03-06 02:35:43 | Computer Name = Lodzia-PC | Source = DCOM | ID = 10016 Description = Error - 2014-03-06 08:48:19 | Computer Name = Lodzia-PC | Source = DCOM | ID = 10016 Description = Error - 2014-03-06 08:50:35 | Computer Name = Lodzia-PC | Source = DCOM | ID = 10016 Description = Error - 2014-03-06 08:53:19 | Computer Name = Lodzia-PC | Source = DCOM | ID = 10016 Description = Error - 2014-03-06 08:55:34 | Computer Name = Lodzia-PC | Source = DCOM | ID = 10016 Description = Error - 2014-03-07 02:33:34 | Computer Name = Lodzia-PC | Source = DCOM | ID = 10016 Description = Error - 2014-03-07 09:16:34 | Computer Name = Lodzia-PC | Source = DCOM | ID = 10016 Description = Error - 2014-03-07 09:17:00 | Computer Name = Lodzia-PC | Source = DCOM | ID = 10010 Description = Error - 2014-03-07 16:00:16 | Computer Name = Lodzia-PC | Source = DCOM | ID = 10016 Description = < End of report >

Kod: Zaznacz wszystko: ComboFix 14-03-05.01 - Lodzia 2014-03-08 10:49:34.1.2 - x64 Microsoft Windows 7 Professional N 6.1.7601.1.1250.48.1033.18.2046.1230 [GMT 1:00] Uruchomiony z: c:\users\Lodzia\Downloads\ComboFix.exe SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Utworzono nowy punkt przywracania . . ((((((((((((((((((((((((((((((((((((((( Usunięto ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Lodzia\AppData\Local\Microsoft\Windows\Temporary Internet Files\tempPlayer . . ((((((((((((((((((((((((( Pliki utworzone od 2014-02-08 do 2014-03-08 ))))))))))))))))))))))))))))))) . . 2014-03-08 09:53 . 2014-03-08 09:53 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-03-05 14:28 . 2014-03-05 14:28 0 ---ha-w- c:\users\Lodzia\AppData\Local\BIT9B68.tmp 2014-03-05 13:54 . 2014-03-06 14:24 -------- d-----w- c:\program files (x86)\Diablo III 2014-03-02 19:45 . 2014-03-02 19:45 0 ---ha-w- c:\users\Lodzia\AppData\Local\BITE812.tmp 2014-03-02 19:43 . 2014-03-02 19:43 -------- d-----w- c:\program files (x86)\Alcohol Soft 2014-03-02 19:39 . 2014-03-02 19:39 0 ---ha-w- c:\users\Lodzia\AppData\Local\BITDAE3.tmp 2014-03-02 19:30 . 2014-03-02 19:30 -------- d-----w- c:\users\Lodzia\AppData\Roaming\sweet-page 2014-03-02 18:40 . 2014-03-02 18:40 -------- d-----w- c:\users\Lodzia\AppData\Roaming\e-academy Inc 2014-03-02 18:40 . 2014-03-02 18:40 -------- d-----w- c:\users\Lodzia\AppData\Local\e-academy Inc 2014-02-28 14:07 . 2014-02-28 14:07 -------- d-----w- c:\program files (x86)\Guitar Pro 5 2014-02-28 14:00 . 2014-02-28 14:00 -------- d-----w- c:\users\Lodzia\AppData\Roaming\Guitar Pro 6 2014-02-28 14:00 . 2014-02-28 14:00 -------- d-----w- c:\programdata\Guitar Pro 6 2014-02-28 14:00 . 2014-02-28 14:00 -------- d-----w- c:\program files (x86)\Guitar Pro 6 2014-02-24 20:01 . 2014-02-24 20:01 -------- d-----w- c:\program files (x86)\Dziobas Rar Player 2014-02-23 13:50 . 2014-03-01 19:17 103736 ----a-w- c:\windows\SysWow64\PnkBstrB.exe 2014-02-22 13:40 . 2014-02-22 13:40 -------- d-----w- c:\program files (x86)\AGEIA Technologies 2014-02-22 13:39 . 2014-02-08 16:18 599840 ----a-w- c:\windows\SysWow64\nvStreaming.exe 2014-02-19 16:31 . 2014-02-19 16:31 -------- d-----w- c:\users\Lodzia\AppData\Local\FluxSoftware 2014-02-18 17:42 . 2014-03-03 20:47 -------- d-----w- c:\users\Lodzia\AppData\Roaming\FileZilla 2014-02-18 17:42 . 2014-02-18 17:42 -------- d-----w- c:\program files (x86)\FileZilla FTP Client 2014-02-18 17:02 . 2014-02-18 17:02 -------- d-----w- c:\programdata\FLEXnet 2014-02-18 16:56 . 2014-02-18 16:56 -------- d-----w- c:\program files (x86)\Bonjour 2014-02-18 16:55 . 2014-02-18 16:55 -------- d-----w- c:\windows\SysWow64\spool 2014-02-18 16:54 . 2014-02-18 16:54 -------- d-----w- c:\program files (x86)\Common Files\Macrovision Shared 2014-02-18 16:53 . 2014-03-05 14:57 -------- d-----w- c:\program files (x86)\Common Files\Adobe 2014-02-18 16:39 . 2014-02-18 16:39 -------- d-----w- c:\users\Lodzia\AppData\Local\gtk-2.0 2014-02-18 16:39 . 2014-02-18 16:39 -------- d-----w- c:\users\Lodzia\.thumbnails 2014-02-18 16:37 . 2014-02-18 16:37 -------- d-----w- c:\users\Lodzia\AppData\Local\fontconfig 2014-02-18 16:37 . 2014-02-18 16:41 -------- d-----w- c:\users\Lodzia\.gimp-2.8 2014-02-18 16:37 . 2014-02-18 16:37 -------- d-----w- c:\users\Lodzia\AppData\Local\gegl-0.2 2014-02-18 16:36 . 2014-02-18 16:37 -------- d-----w- c:\program files\GIMP 2 2014-02-18 15:52 . 2014-02-18 15:52 -------- d-----w- c:\program files (x86)\Teleport Pro 2014-02-17 16:44 . 2014-02-19 13:22 -------- d-----w- c:\users\Lodzia\AppData\Roaming\Micorsoft 2014-02-17 16:01 . 2014-02-17 16:01 -------- d-----w- c:\users\Lodzia\AppData\Roaming\Notepad++ 2014-02-17 16:01 . 2014-02-17 16:01 -------- d-----w- c:\program files (x86)\Notepad++ 2014-02-17 15:21 . 2014-03-07 19:56 -------- d-----w- C:\AdwCleaner 2014-02-16 19:16 . 2014-02-16 19:16 -------- d-----w- c:\windows\system32\appmgmt 2014-02-16 18:45 . 2014-02-16 18:45 -------- d-----w- c:\users\Lodzia\AppData\Roaming\MSDrvCfg 2014-02-16 18:45 . 2014-02-19 13:22 -------- d-----w- c:\program files (x86)\XenoBot 2014-02-16 18:14 . 2014-02-16 19:16 -------- d-----w- c:\program files (x86)\Fiddler2 2014-02-16 18:14 . 2014-02-16 19:16 -------- d-----w- c:\program files (x86)\RedBot Pro 2014-02-14 01:29 . 2014-02-14 01:29 -------- d-----w- c:\program files\Windows Portable Devices 2014-02-14 01:29 . 2014-02-14 01:29 -------- d-----w- c:\program files\Windows Media Player 2014-02-14 01:29 . 2014-02-14 01:29 -------- d-----w- c:\program files\DVD Maker 2014-02-14 01:29 . 2014-02-14 01:29 -------- d-----w- c:\program files (x86)\Windows Portable Devices 2014-02-14 01:29 . 2014-02-14 01:29 -------- d-----w- c:\windows\ehome 2014-02-14 01:29 . 2014-02-14 01:29 -------- d-----w- c:\windows\SysWow64\LogFiles 2014-02-14 01:29 . 2014-02-14 01:29 -------- d-----w- c:\users\Default\AppData\Roaming\Media Center Programs 2014-02-14 01:29 . 2014-02-14 01:29 -------- d-----r- c:\users\Public\Recorded TV 2014-02-12 19:39 . 2014-02-12 19:39 -------- d-----w- c:\users\Lodzia\AppData\Local\Blizzard 2014-02-12 19:12 . 2014-02-12 19:39 -------- d-----w- c:\program files (x86)\Hearthstone 2014-02-12 19:10 . 2014-02-12 19:10 -------- d-----w- c:\users\Lodzia\AppData\Local\Blizzard Entertainment 2014-02-12 19:10 . 2014-03-07 19:51 -------- d-----w- c:\users\Lodzia\AppData\Local\Battle.net 2014-02-12 19:10 . 2014-02-25 17:30 -------- d-----w- c:\users\Lodzia\AppData\Roaming\Battle.net 2014-02-12 19:10 . 2014-03-05 13:58 -------- d-----w- c:\program files (x86)\Common Files\Blizzard Entertainment 2014-02-12 19:10 . 2014-02-12 19:10 -------- d-----w- c:\programdata\Blizzard Entertainment 2014-02-12 19:08 . 2014-02-12 19:08 -------- d-----w- c:\programdata\Battle.net 2014-02-12 18:01 . 2014-02-12 18:01 -------- d-----w- c:\users\Lodzia\AppData\Local\Opera Software 2014-02-12 18:01 . 2014-02-12 18:01 -------- d-----w- c:\users\Lodzia\AppData\Roaming\Opera Software 2014-02-12 18:01 . 2014-02-12 18:04 -------- d-----w- c:\program files (x86)\Opera 2014-02-12 13:28 . 2009-07-13 21:04 18432 ----a-w- c:\windows\SysWow64\amcompat.tlb 2014-02-12 13:28 . 2009-07-13 20:49 18432 ----a-w- c:\windows\system32\amcompat.tlb 2014-02-12 13:26 . 2010-11-20 13:27 14633472 ----a-w- c:\windows\system32\wmp.dll 2014-02-12 13:26 . 2010-11-20 13:27 3027968 ----a-w- c:\windows\system32\WMVCORE.DLL 2014-02-12 13:26 . 2010-11-20 12:21 1624064 ----a-w- c:\windows\SysWow64\WMPEncEn.dll 2014-02-12 13:15 . 2014-02-12 13:15 -------- d-----w- c:\users\Lodzia\AppData\Roaming\AdbDriverInstaller 2014-02-12 13:12 . 2014-02-12 13:12 -------- d-----w- c:\users\Lodzia\AppData\Local\DriverToolkit 2014-02-12 13:12 . 2014-02-12 13:13 -------- d-----w- c:\program files (x86)\DriverToolkit 2014-02-12 13:07 . 2014-02-12 13:07 -------- d-----w- c:\users\Lodzia\AppData\Roaming\Filedrop 2014-02-11 18:15 . 2014-02-11 18:15 -------- d-----w- c:\users\Lodzia\AppData\Local\Skyrim 2014-02-11 18:09 . 2014-02-11 18:15 -------- d-----w- c:\program files (x86)\The Elder Scrolls V Skyrim 2014-02-11 18:07 . 2014-02-11 18:07 283064 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys 2014-02-11 18:07 . 2014-02-11 18:08 -------- d-----w- c:\users\Lodzia\AppData\Roaming\DAEMON Tools Lite 2014-02-11 18:07 . 2014-02-11 18:07 -------- d-----w- c:\program files (x86)\DAEMON Tools Lite 2014-02-11 18:06 . 2014-02-11 18:08 -------- d-----w- c:\programdata\DAEMON Tools Lite 2014-02-11 15:30 . 2014-02-11 15:30 -------- d-----w- c:\users\Lodzia\AppData\Local\CRE 2014-02-11 15:29 . 2014-03-07 19:50 -------- d-----w- c:\users\Lodzia\AppData\Roaming\uTorrent 2014-02-11 12:14 . 2014-02-11 12:14 -------- d-----w- c:\program files\McAfee Security Scan . . . (((((((((((((((((((((((((((((((((((((((( Sekcja Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-02-21 15:41 . 2014-01-25 12:05 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2014-02-21 15:41 . 2014-01-25 12:05 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2014-02-08 18:34 . 2014-01-23 21:29 61216 ----a-w- c:\windows\system32\OpenCL.dll 2014-02-08 18:34 . 2014-01-23 21:29 53024 ----a-w- c:\windows\SysWow64\OpenCL.dll 2014-02-08 18:34 . 2014-01-23 21:22 3090184 ----a-w- c:\windows\system32\nvapi64.dll 2014-02-08 18:34 . 2014-01-23 21:22 2713728 ----a-w- c:\windows\SysWow64\nvapi.dll 2014-02-08 18:34 . 2009-07-13 21:59 18257576 ----a-w- c:\windows\system32\nvwgf2umx.dll 2014-02-08 18:34 . 2009-06-10 20:37 14669032 ----a-w- c:\windows\SysWow64\nvd3dum.dll 2014-02-08 17:42 . 2014-01-23 21:29 6712608 ----a-w- c:\windows\system32\nvcpl.dll 2014-02-08 17:42 . 2014-01-23 21:29 3498272 ----a-w- c:\windows\system32\nvsvc64.dll 2014-02-08 17:42 . 2014-01-23 21:29 923936 ----a-w- c:\windows\system32\nvvsvc.exe 2014-02-08 17:42 . 2014-01-23 21:29 63776 ----a-w- c:\windows\system32\nvshext.dll 2014-02-08 17:42 . 2014-01-23 21:29 386336 ----a-w- c:\windows\system32\nvmctray.dll 2014-01-31 23:59 . 2014-01-31 23:38 66872 ----a-w- c:\windows\SysWow64\PnkBstrA.exe 2013-12-19 20:33 . 2014-01-23 21:22 1884448 ----a-w- c:\windows\system32\nvdispco6433221.dll 2013-12-19 20:33 . 2014-01-23 21:22 1511712 ----a-w- c:\windows\system32\nvdispgenco6433221.dll 2013-12-19 18:53 . 2014-01-23 21:29 2559776 ----a-w- c:\windows\system32\nvsvcr.dll 2013-12-10 02:15 . 2014-01-23 21:32 982232 ----a-w- c:\windows\SysWow64\nvspcap.dll 2013-12-10 02:14 . 2014-01-23 21:32 1100248 ----a-w- c:\windows\system32\nvspcap64.dll . . ((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-10-28 3675352] "samsIO.exe"="c:\users\Lodzia\AppData\Roaming\Micorsoft\SQL\samsIO.exe" [2014-01-30 448512] "dwar32.exe"="c:\users\Lodzia\AppData\Roaming\Micorsoft\mySQL\dwar32.exe" [2014-02-19 507904] "f.lux"="c:\users\Lodzia\AppData\Local\FluxSoftware\Flux\flux.exe" [2013-10-23 1017224] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.8.141\SSScheduler.exe [2014-1-16 329944] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "mixer1"=wdmaud.drv . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x] R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\3.8.141\McCHSvc.exe;c:\program files\McAfee Security Scan\3.8.141\McCHSvc.exe [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] R4 sptd;sptd;c:\windows\System32\Drivers\sptd.sys;c:\windows\SYSNATIVE\Drivers\sptd.sys [x] S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x] S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x] S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x] S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2014-03-04 13:32 1150280 ----a-w- c:\program files (x86)\Google\Chrome\Application\33.0.1750.146\Installer\chrmstp.exe . Zawartość folderu 'Zaplanowane zadania' . 2014-03-08 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-25 15:41] . 2014-03-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-01-23 21:04] . 2014-03-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-01-23 21:04] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2013-12-10 2279712] . ------- Skan uzupełniający ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.com mStart Page = hxxp://www.google.com mDefault_Search_URL = hxxp://www.google.com mDefault_Page_URL = hxxp://www.google.com mLocal Page = c:\windows\SysWOW64\blank.htm mSearch Page = hxxp://www.google.com uInternet Settings,ProxyOverride = <-loopback>;*.local TCP: DhcpNameServer = 91.232.90.18 91.232.90.19 FF - ProfilePath - c:\users\Lodzia\AppData\Roaming\Mozilla\Firefox\Profiles\g28s8dwk.default\ . . --------------------- ZABLOKOWANE KLUCZE REJESTRU --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_70_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_70_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_70_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_70_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_70.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.12" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_70.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_70.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_70.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Czas ukończenia: 2014-03-08 10:54:47 ComboFix-quarantined-files.txt 2014-03-08 09:54 . Przed: 152 729 399 296 bytes free Po: 152 832 520 192 bytes free . - - End Of File - - 8B76A9FD830AE170EA52D322EAD15A85 A36C5E4F47E84449FF07ED3517B43A31

**Posty:** 4765 · przez **ordynat** 08 Mar 2014, 13:48

1) Odinstaluj:
"sweet-page uninstaller" = sweet-page uninstaller

2) Uruchom OTL i w oknie Własne opcje skanowania/Skrypt wklej to:

:OTL
[2014-03-02 20:30:53 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\sweet-page
O4 - HKU\S-1-5-21-3339302824-2973478899-564961981-1001..\Run: [samsIO.exe] C:\Users\Lodzia\AppData\Roaming\Micorsoft\SQL\samsIO.exe ()
O4 - HKU\S-1-5-21-3339302824-2973478899-564961981-1001..\Run: [dwar32.exe] C:\Users\Lodzia\AppData\Roaming\Micorsoft\mySQL\dwar32.exe ()
[2014-02-19 14:22:52 | 000,000,000 | ---D | M] -- C:\Users\Lodzia\AppData\Roaming\Micorsoft

:Reg
[HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"=-
[HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"=-
[HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"=-
[HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"=-
[HKEY_USERS\S-1-5-21-3339302824-2973478899-564961981-1001\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"=-

:Commands
[emptytemp]

Kliknij w Wykonaj Skrypt. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.
Następnie uruchom OTL ponownie, tym razem kliknij Skanuj.
Pokaż nowy log OTL.txt oraz raport z usuwania Skryptem.
.

Autor postu otrzymał pochwałę

**Posty:** 540 · przez **Lijke** 08 Mar 2014, 15:54

Kod: Zaznacz wszystko: All processes killed ========== OTL ========== C:\Users\Lodzia\AppData\Roaming\sweet-page\images folder moved successfully. C:\Users\Lodzia\AppData\Roaming\sweet-page folder moved successfully. Registry value HKEY_USERS\S-1-5-21-3339302824-2973478899-564961981-1001\Software\Microsoft\Windows\CurrentVersion\Run\\samsIO.exe deleted successfully. C:\Users\Lodzia\AppData\Roaming\Micorsoft\SQL\samsIO.exe moved successfully. Registry value HKEY_USERS\S-1-5-21-3339302824-2973478899-564961981-1001\Software\Microsoft\Windows\CurrentVersion\Run\\dwar32.exe deleted successfully. C:\Users\Lodzia\AppData\Roaming\Micorsoft\mySQL\dwar32.exe moved successfully. C:\Users\Lodzia\AppData\Roaming\Micorsoft\SQL folder moved successfully. C:\Users\Lodzia\AppData\Roaming\Micorsoft\mySQL folder moved successfully. C:\Users\Lodzia\AppData\Roaming\Micorsoft folder moved successfully. ========== REGISTRY ========== Registry key HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes not found. Registry key HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes not found. Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope deleted successfully. Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope deleted successfully. Registry value HKEY_USERS\S-1-5-21-3339302824-2973478899-564961981-1001\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Lodzia ->Temp folder emptied: 28546 bytes ->Temporary Internet Files folder emptied: 12369001 bytes ->FireFox cache emptied: 147523167 bytes ->Google Chrome cache emptied: 348824352 bytes ->Flash cache emptied: 14798 bytes User: Public ->Temp folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 0 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 9935515 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 495,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 03082014_144410 Files\Folders moved on Reboot... C:\Users\Lodzia\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. PendingFileRenameOperations files... Registry entries deleted on Reboot...

Po restarcie jak bede miec czas wrzucę nowy otl

**Posty:** 4765 · przez **ordynat** 09 Mar 2014, 18:13

Dwar32.exe, samsio.exe zżera 100% procka

Dwar32.exe, samsio.exe zżera 100% procka

Dwar32.exe, samsio.exe zżera 100% procka

Dwar32.exe, samsio.exe zżera 100% procka

Dwar32.exe, samsio.exe zżera 100% procka

Kto jest na forum