Logi kontrolnie

[AragornXT]

OTL:

Kod: Zaznacz wszystko

OTL logfile created on: 2012-06-28 15:19:58 - Run 1
OTL by OldTimer - Version 3.2.53.0     Folder = C:\Users\alex\Desktop\Komputer\Antywirus
64bit- Professional  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

3,91 Gb Total Physical Memory | 2,50 Gb Available Physical Memory | 63,93% Memory free
7,82 Gb Paging File | 6,04 Gb Available in Paging File | 77,24% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 58,57 Gb Total Space | 3,00 Gb Free Space | 5,12% Space Free | Partition Type: NTFS
Drive E: | 50,00 Gb Total Space | 45,03 Gb Free Space | 90,06% Space Free | Partition Type: NTFS
Drive J: | 100,00 Gb Total Space | 93,48 Gb Free Space | 93,48% Space Free | Partition Type: NTFS
Drive K: | 100,00 Gb Total Space | 85,69 Gb Free Space | 85,69% Space Free | Partition Type: NTFS
Drive L: | 157,19 Gb Total Space | 111,30 Gb Free Space | 70,81% Space Free | Partition Type: NTFS

Computer Name: ALEX-KOMPUTER | User Name: alex | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 90 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2012-06-28 15:17:06 | 000,596,992 | ---- | M] (OldTimer Tools) -- C:\Users\alex\Desktop\Komputer\Antywirus\OTL.exe
PRC - [2012-06-16 23:53:03 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2012-05-24 20:39:22 | 027,112,840 | ---- | M] (Dropbox, Inc.) -- C:\Users\alex\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2012-04-12 05:27:08 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) -- C:\Windows\SysWOW64\NLSSRV32.EXE
PRC - [2012-04-04 23:28:59 | 000,742,264 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe
PRC - [2012-03-31 04:38:14 | 003,521,424 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
PRC - [2012-01-03 16:31:34 | 001,391,272 | ---- | M] (Ask) -- C:\Program Files (x86)\Ask.com\Updater\Updater.exe
PRC - [2011-08-07 18:42:48 | 002,875,461 | ---- | M] (Informer Technologies, Inc.) -- C:\Program Files (x86)\Software Informer\softinfo.exe
PRC - [2011-07-13 10:37:53 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2011-06-24 13:52:26 | 000,160,768 | ---- | M] (Micro-Star International Co., Ltd.) -- C:\Program Files (x86)\S-Bar\MSIService.exe
PRC - [2011-06-06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011-04-21 07:53:48 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2011-04-21 07:53:33 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2011-04-08 08:01:00 | 002,009,704 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011-02-02 14:08:16 | 000,018,656 | ---- | M] () -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
PRC - [2011-01-17 18:01:46 | 011,322,880 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
PRC - [2011-01-17 18:01:46 | 011,314,688 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2012-06-16 23:53:03 | 002,042,848 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2011-07-13 17:26:04 | 000,985,088 | ---- | M] () -- C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
MOD - [2011-07-13 17:26:04 | 000,170,496 | ---- | M] () -- C:\Program Files (x86)\OpenOffice.org 3\program\libxslt.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - [2012-05-12 20:38:40 | 001,431,888 | ---- | M] (Flexera Software, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
SRV:[b]64bit:[/b] - [2012-04-12 05:27:02 | 000,204,296 | ---- | M] (Nitro PDF Software) [Auto | Running] -- C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe -- (NitroDriverReadSpool2)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2012-06-24 00:21:45 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-06-16 23:53:03 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-04-12 05:27:08 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\Windows\SysWOW64\NLSSRV32.EXE -- (nlsX86cc)
SRV - [2011-07-13 17:27:56 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2011-07-13 10:37:53 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011-06-29 15:59:18 | 000,155,344 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe -- (Sony Ericsson PCCompanion)
SRV - [2011-06-24 13:52:26 | 000,160,768 | ---- | M] (Micro-Star International Co., Ltd.) [Auto | Running] -- C:\Program Files (x86)\S-Bar\MSIService.exe -- (Micro Star SCM)
SRV - [2011-06-06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011-04-21 07:53:48 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011-04-08 08:01:00 | 002,009,704 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011-02-02 14:08:16 | 000,018,656 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe -- (Autodesk Content Service)
SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010-02-19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - [2012-03-31 14:35:54 | 000,564,792 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:[b]64bit:[/b] - [2012-02-17 23:24:47 | 000,034,032 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\seehcri.sys -- (seehcri)
DRV:[b]64bit:[/b] - [2012-02-17 23:24:19 | 000,027,176 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc)
DRV:[b]64bit:[/b] - [2012-02-17 23:24:19 | 000,013,352 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt)
DRV:[b]64bit:[/b] - [2011-07-13 10:37:55 | 000,123,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:[b]64bit:[/b] - [2011-07-13 10:37:55 | 000,088,288 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:[b]64bit:[/b] - [2011-07-13 01:34:18 | 000,032,344 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBfilt64.sys -- (MBfilt)
DRV:[b]64bit:[/b] - [2011-07-13 01:27:49 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel(R)
DRV:[b]64bit:[/b] - [2011-07-13 01:27:27 | 012,273,408 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2011-06-10 06:34:52 | 000,539,240 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2011-06-02 07:47:22 | 000,177,640 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdm.sys -- (ssadmdm)
DRV:[b]64bit:[/b] - [2011-06-02 07:47:22 | 000,157,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM)
DRV:[b]64bit:[/b] - [2011-06-02 07:47:22 | 000,146,920 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadserd.sys -- (ssadserd) SAMSUNG Android USB Diagnostic Serial Port (WDM)
DRV:[b]64bit:[/b] - [2011-06-02 07:47:22 | 000,016,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter)
DRV:[b]64bit:[/b] - [2011-04-08 08:01:00 | 000,025,960 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
DRV:[b]64bit:[/b] - [2011-03-15 18:09:16 | 000,311,400 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtsuvstor.sys -- (RSUSBVSTOR)
DRV:[b]64bit:[/b] - [2011-03-11 08:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2011-03-11 08:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2010-12-21 07:55:02 | 000,172,104 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdm.sys -- (sscdmdm)
DRV:[b]64bit:[/b] - [2010-12-21 07:55:02 | 000,136,264 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)
DRV:[b]64bit:[/b] - [2010-12-21 07:55:02 | 000,036,328 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadadb.sys -- (androidusb)
DRV:[b]64bit:[/b] - [2010-12-21 07:55:02 | 000,019,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV:[b]64bit:[/b] - [2010-10-19 23:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) Intel(R)
DRV:[b]64bit:[/b] - [2010-03-31 14:30:58 | 000,117,248 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbmdm.sys -- (hwdatacard)
DRV:[b]64bit:[/b] - [2010-03-31 14:30:58 | 000,114,304 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbdev.sys -- (hwusbdev)
DRV:[b]64bit:[/b] - [2009-10-05 16:34:00 | 001,542,656 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2008-05-16 13:33:06 | 000,158,760 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016mdm.sys -- (s0016mdm)
DRV:[b]64bit:[/b] - [2008-05-16 13:33:06 | 000,151,592 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016unic.sys -- (s0016unic) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM)
DRV:[b]64bit:[/b] - [2008-05-16 13:33:06 | 000,137,256 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016mgmt.sys -- (s0016mgmt) Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM)
DRV:[b]64bit:[/b] - [2008-05-16 13:33:06 | 000,136,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016obex.sys -- (s0016obex)
DRV:[b]64bit:[/b] - [2008-05-16 13:33:06 | 000,034,344 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016nd5.sys -- (s0016nd5) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS)
DRV:[b]64bit:[/b] - [2008-05-16 13:33:04 | 000,019,496 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016mdfl.sys -- (s0016mdfl)
DRV:[b]64bit:[/b] - [2008-05-16 13:32:56 | 000,115,240 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016bus.sys -- (s0016bus) Sony Ericsson Device 0016 driver (WDM)
DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1&cf=d9f13a17-357e-11e1-9117-6c626d317bd3
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{776D17D3-1DA0-4981-AE90-A01FDEF5D2A3}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-2527288125-292897534-329591378-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?l=dis&o=15003
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=d9f13a17-357e-11e1-9117-6c626d317bd3&q={searchTerms}
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1000\..\SearchScopes\{51E07AB4-2A97-4BD7-A2C5-B0C87F9FB8E2}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=SPC2&o=15000&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=PV&apn_dtid=YYYYYYYYPL&apn_uid=25a69775-a36a-41db-8327-4f66d9a7f6ae&apn_sauid=16C4F0C3-262D-463A-BF68-94F80F8C4363
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1000\..\SearchScopes\{776D17D3-1DA0-4981-AE90-A01FDEF5D2A3}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

IE - HKU\S-1-5-21-2527288125-292897534-329591378-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1001\..\SearchScopes\{776D17D3-1DA0-4981-AE90-A01FDEF5D2A3}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.ask.com/?l=dis&o=15003"
FF - prefs.js..keyword.URL: "http://www.google.com/search?q="
FF - user.js - File not found

FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_262.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@wolfram.com/Mathematica: C:\Program Files (x86)\Common Files\Wolfram Research\Browser\8.0.1.2063897\npmathplugin.dll (Wolfram Research, Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\alex\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-06-16 23:53:03 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012-05-11 21:59:43 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2012-05-12 15:29:56 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-06-16 23:53:03 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012-05-11 21:59:43 | 000,000,000 | ---D | M]

[2011-07-13 01:42:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\alex\AppData\Roaming\mozilla\Extensions
[2012-06-18 19:56:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions
[2012-03-15 18:15:45 | 000,000,000 | ---D | M] (Ghostery) -- C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions\firefox@ghostery.com
[2012-06-12 23:51:19 | 000,001,074 | ---- | M] () -- C:\Users\alex\AppData\Roaming\Mozilla\Firefox\Profiles\y61ym9mu.default\searchplugins\katalog-biblioteki-umk.xml
[2012-01-02 22:18:11 | 000,000,792 | ---- | M] () -- C:\Users\alex\AppData\Roaming\Mozilla\Firefox\Profiles\y61ym9mu.default\searchplugins\startsear.xml
[2012-03-18 13:21:30 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2012-06-18 19:56:27 | 000,015,162 | ---- | M] () (No name found) -- C:\USERS\ALEX\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\Y61YM9MU.DEFAULT\EXTENSIONS\{988DA70D-B78D-44A1-A9C7-ED11832A9E2E}.XPI
[2012-01-05 20:51:34 | 000,634,964 | ---- | M] () (No name found) -- C:\USERS\ALEX\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\Y61YM9MU.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2012-05-21 00:22:40 | 000,042,336 | ---- | M] () (No name found) -- C:\USERS\ALEX\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\Y61YM9MU.DEFAULT\EXTENSIONS\{E968FC70-8F95-4AB9-9E79-304DE2A71EE1}.XPI
[2012-06-16 23:53:03 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012-03-06 01:46:15 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2011-10-03 11:14:54 | 000,083,456 | ---- | M] (vShare.tv ) -- C:\Program Files (x86)\mozilla firefox\plugins\npvsharetvplg.dll
[2012-02-13 22:16:00 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml
[2012-02-13 22:16:00 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml
[2012-02-13 22:16:00 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml
[2012-02-13 22:16:00 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml
[2012-02-13 22:16:00 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-02-13 22:16:00 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml

[color=#E56717]========== Chrome  ==========[/color]

CHR - default_search_provider: Web Search (Enabled)
CHR - default_search_provider: search_url = http://startsear.ch/?aff=1&src=sp&cf=d9f13a17-357e-11e1-9117-6c626d317bd3&q={searchTerms}
CHR - default_search_provider: suggest_url =
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\19.0.1084.56\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U26 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\19.0.1084.56\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\19.0.1084.56\pdf.dll
CHR - plugin: Winamp Application Detector (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.69\npGoogleUpdate3.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: Sopcast Toolbar = C:\Users\alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaodiijipkjcmlclfmdmcoakmloobh\7.14.1.0_0\
CHR - Extension: Angry Birds = C:\Users\alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0\
CHR - Extension: vshare plugin = C:\Users\alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj\1.3_0\
CHR - Extension: MixCloud Downloader = C:\Users\alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjfpmaaidpgbklpnffchmlmfpjboahej\0.14_0\

O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (IE5BarLauncherBHO Class) - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll (VShare Inc.)
O2 - BHO: (Sopcast Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll (VShare Inc.)
O3 - HKLM\..\Toolbar: (Sopcast Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKU\S-1-5-21-2527288125-292897534-329591378-1000\..\Toolbar\WebBrowser: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll (VShare Inc.)
O3 - HKU\S-1-5-21-2527288125-292897534-329591378-1000\..\Toolbar\WebBrowser: (Sopcast Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKU\S-1-5-21-2527288125-292897534-329591378-1001\..\Toolbar\WebBrowser: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll (VShare Inc.)
O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files (x86)\Ask.com\Updater\Updater.exe (Ask)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [BEWINTERNET-PL-IEWSessionManager] "C:\Program Files (x86)\OrangeBS\BEWInternet-PL-IEW\SessionManager\SessionManager.exe" File not found
O4 - HKLM..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKLM..\Run: [S-Bar] C:\Program Files (x86)\S-Bar\S-Bar.exe (MSI)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1000..\Run: [AdobeBridge]  File not found
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1000..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1000..\Run: [fsm]  File not found
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1000..\Run: [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe (Samsung)
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1000..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1000..\Run: [Software Informer] C:\Program Files (x86)\Software Informer\softinfo.exe (Informer Technologies, Inc.)
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1000..\Run: [uTorrent] C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1001..\Run: [AQQ] C:\PROGRA~2\WapSter\WAPSTE~1\AQQ.exe File not found
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1001..\Run: [Facebook Update] C:\Users\alex\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1001..\Run: [fsm]  File not found
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1001..\Run: [IPLA!] C:\Program Files (x86)\ipla\ipla.exe (Redefine Sp z o.o.)
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1001..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1001..\Run: [Software Informer] C:\Program Files (x86)\Software Informer\softinfo.exe (Informer Technologies, Inc.)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1001..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - Startup: C:\Users\alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\alex\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O4 - Startup: C:\Users\alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:[b]64bit:[/b] - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000 File not found
O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O16:[b]64bit:[/b] - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3B4002A4-6818-4AB8-B1C2-9FA4C614123A}: DhcpNameServer = 8.8.8.8 8.8.4.4
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ms-itss - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Filter\text/xml - No CLSID value found
O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012-05-12 20:21:22 | 000,000,000 | ---D | M] - L:\AutoCadx64 -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

[color=#E56717]========== Files/Folders - Created Within 90 Days ==========[/color]

[2012-06-28 15:16:30 | 000,000,000 | ---D | C] -- C:\Users\alex\Desktop\Komputer
[2012-06-26 19:37:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Valve
[2012-06-26 19:22:35 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6
[2012-06-26 19:22:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6
[2012-06-26 19:20:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Counter-Strike 1.6
[2012-06-24 22:31:12 | 000,000,000 | ---D | C] -- C:\Users\alex\Documents\Version Cue
[2012-06-23 13:30:19 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\sda
[2012-06-23 13:29:39 | 009,888,360 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysWow64\RtsUVStoricon.dll
[2012-06-23 13:29:39 | 000,311,400 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\drivers\rtsuvstor.sys
[2012-06-23 13:29:39 | 000,017,512 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\drivers\diskperf64.sys
[2012-06-20 21:37:44 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Local\TempDIR
[2012-06-20 19:42:50 | 000,000,000 | ---D | C] -- C:\Users\alex\Desktop\Nauka
[2012-06-19 23:52:54 | 000,000,000 | ---D | C] -- C:\Users\alex\Desktop\Telefon
[2012-06-19 16:45:30 | 000,000,000 | ---D | C] -- C:\Users\alex\Desktop\Fotografia
[2012-06-18 19:56:58 | 000,000,000 | ---D | C] -- C:\Users\alex\Desktop\Junskee
[2012-06-18 18:56:13 | 000,000,000 | ---D | C] -- C:\Users\alex\.pdfsam
[2012-06-18 18:48:04 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PDF Split And Merge
[2012-06-18 18:48:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\pdfsam
[2012-06-18 18:31:48 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\CAD-KAS
[2012-06-18 18:31:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Editor 3.3
[2012-06-11 15:38:45 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Local\Macromedia
[2012-05-29 16:33:26 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Local\Mathematica
[2012-05-29 16:33:25 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\Mathematica
[2012-05-29 16:30:25 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wolfram Research
[2012-05-29 16:30:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wolfram Research
[2012-05-29 16:30:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ResearchSoft
[2012-05-29 16:30:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Mathematica
[2012-05-29 16:30:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wolfram Mathematica
[2012-05-29 16:26:43 | 000,465,936 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysNative\mltcpip64.mlp
[2012-05-29 16:26:43 | 000,369,680 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysWow64\ml32i3.dll
[2012-05-29 16:26:43 | 000,335,888 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysWow64\mltcpip32.mlp
[2012-05-29 16:26:43 | 000,260,112 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysWow64\ml32i2.dll
[2012-05-29 16:26:43 | 000,253,968 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysWow64\ml32i1.dll
[2012-05-29 16:26:43 | 000,167,952 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysWow64\mlmodule32.dll
[2012-05-29 16:26:43 | 000,103,440 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysNative\mltcp64.mlp
[2012-05-29 16:26:43 | 000,099,344 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysNative\mlshm64.mlp
[2012-05-29 16:26:43 | 000,093,712 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysWow64\mltcp32.mlp
[2012-05-29 16:26:43 | 000,088,080 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysWow64\mlshm32.mlp
[2012-05-29 16:26:43 | 000,079,376 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysWow64\mlmap32.mlp
[2012-05-29 16:26:42 | 000,436,240 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysNative\ml64i3.dll
[2012-05-29 16:26:42 | 000,302,608 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysNative\ml64i2.dll
[2012-05-29 16:26:42 | 000,203,792 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysNative\mlmodule64.dll
[2012-05-29 16:24:50 | 000,000,000 | ---D | C] -- C:\Program Files\Wolfram Research
[2012-05-26 19:10:56 | 000,000,000 | ---D | C] -- C:\Users\alex\Desktop\Studia
[2012-05-26 18:33:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinSCP
[2012-05-26 18:33:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinSCP
[2012-05-26 17:38:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\INTERsoft
[2012-05-26 17:38:01 | 000,000,000 | ---D | C] -- C:\INTER
[2012-05-26 17:32:49 | 000,327,168 | ---- | C] (InstallShield Software Corporation) -- C:\Windows\IsUn0415.exe
[2012-05-15 22:37:04 | 000,000,000 | ---D | C] -- C:\Users\alex\Documents\Origin User Files
[2012-05-15 22:23:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OriginLab
[2012-05-15 22:22:54 | 002,199,552 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\PdfDll32.dll
[2012-05-15 22:22:54 | 001,433,600 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LTDic14n.dll
[2012-05-15 22:22:54 | 001,122,304 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\ltimg14n.dll
[2012-05-15 22:22:54 | 000,434,176 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\ltkrn14n.dll
[2012-05-15 22:22:54 | 000,262,144 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LTDIS14n.dll
[2012-05-15 22:22:54 | 000,253,952 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LTEml14n.dll
[2012-05-15 22:22:54 | 000,241,664 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\ltefx14n.dll
[2012-05-15 22:22:54 | 000,221,184 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\Lvkrn14n.dll
[2012-05-15 22:22:54 | 000,155,648 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LTSGM14n.dll
[2012-05-15 22:22:54 | 000,155,648 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\ltfil14n.dll
[2012-05-15 22:22:54 | 000,098,304 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LtTtf14n.Dll
[2012-05-15 22:22:54 | 000,094,208 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\ltdoc14n.dll
[2012-05-15 22:22:53 | 001,703,936 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LTCLR14n.dll
[2012-05-15 22:22:53 | 001,637,520 | ---- | C] (Codejock Software) -- C:\Windows\SysWow64\LPUIT05N.dll
[2012-05-15 22:22:53 | 001,396,736 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\ltann14n.dll
[2012-05-15 22:22:53 | 000,703,632 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPRES05N.DLL
[2012-05-15 22:22:53 | 000,642,192 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPUIR05r.dll
[2012-05-15 22:22:53 | 000,507,024 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LtAct14n.dll
[2012-05-15 22:22:53 | 000,228,496 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LpPdf05n.dll
[2012-05-15 22:22:53 | 000,224,400 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPKRN05N.DLL
[2012-05-15 22:22:53 | 000,142,480 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\ltact.dll
[2012-05-15 22:22:53 | 000,138,384 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LpHTM05n.dll
[2012-05-15 22:22:53 | 000,138,384 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LpEmf05n.dll
[2012-05-15 22:22:53 | 000,113,808 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPWSE05n.exe
[2012-05-15 22:22:53 | 000,109,712 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LpRTF05n.dll
[2012-05-15 22:22:53 | 000,106,680 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPUID05n.dll
[2012-05-15 22:22:53 | 000,085,136 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPINS05N.dll
[2012-05-15 22:22:53 | 000,072,848 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LpTxt05n.dll
[2012-05-15 22:22:53 | 000,056,464 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPUNI05N.dll
[2012-05-15 22:22:53 | 000,056,464 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPRPC05u.dll
[2012-05-15 22:22:53 | 000,052,368 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPEML05N.DLL
[2012-05-15 22:22:53 | 000,048,272 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPRNT05N.DLL
[2012-05-15 22:22:53 | 000,038,032 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPUMD05n.dll
[2012-05-15 22:22:53 | 000,035,984 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPPMN05u.DLL
[2012-05-15 22:22:52 | 000,695,440 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPDLG05N.DLL
[2012-05-15 22:22:52 | 000,364,544 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LFCMP14n.dll
[2012-05-15 22:22:52 | 000,146,576 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LpDoc05n.dll
[2012-05-15 22:22:52 | 000,139,264 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\lfpdf14n.dll
[2012-05-15 22:22:52 | 000,089,232 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPCPN05N.dll
[2012-05-15 22:22:52 | 000,086,016 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\lffax14n.dll
[2012-05-15 22:22:52 | 000,077,898 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\lfjb214n.dll
[2012-05-15 22:22:52 | 000,068,752 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\Lpdrv05n.DLL
[2012-05-15 22:22:52 | 000,032,768 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\Lfwmf14n.dll
[2012-05-15 22:20:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OriginLab
[2012-05-13 01:09:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys
[2012-05-13 01:09:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lavalys
[2012-05-12 21:02:24 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Local\cache
[2012-05-12 20:42:52 | 000,000,000 | ---D | C] -- C:\Users\alex\Documents\Inventor Server x64 AutoCAD 2012 Language Pack - English
[2012-05-12 20:38:40 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Macrovision Shared
[2012-05-12 20:38:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
[2012-05-12 20:36:36 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Autodesk Shared
[2012-05-12 20:36:36 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Local\Autodesk
[2012-05-12 20:36:36 | 000,000,000 | ---D | C] -- C:\Program Files\Autodesk
[2012-05-12 20:36:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Autodesk
[2012-05-12 20:35:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Autodesk Shared
[2012-05-12 18:40:01 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\Autodesk
[2012-05-12 18:40:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Autodesk
[2012-05-12 15:32:22 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\Thunderbird
[2012-05-12 15:32:22 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Local\Thunderbird
[2012-05-12 15:29:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Thunderbird
[2012-05-11 21:59:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QT Lite
[2012-05-11 21:59:42 | 000,090,112 | ---- | C] (Apple Inc.) -- C:\Windows\SysWow64\QuickTimeVR.qtx
[2012-05-11 21:59:42 | 000,057,344 | ---- | C] (Apple Inc.) -- C:\Windows\SysWow64\QuickTime.qts
[2012-05-11 21:59:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2012-05-11 21:59:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QT Lite
[2012-05-07 15:28:54 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\Nitro PDF
[2012-05-07 15:28:30 | 000,029,712 | ---- | C] (Nitro PDF Software) -- C:\Windows\SysNative\nitrolocalmon2.dll
[2012-05-07 15:28:30 | 000,017,928 | ---- | C] (Nitro PDF Software) -- C:\Windows\SysNative\nitrolocalui2.dll
[2012-05-07 15:28:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Nitro PDF
[2012-05-07 15:28:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Nitro PDF
[2012-05-07 15:28:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nitro PDF
[2012-05-07 15:28:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nitro PDF
[2012-05-06 18:48:40 | 000,000,000 | ---D | C] -- C:\Program Files\Recuva
[2012-05-06 18:20:00 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\GHISLER
[2012-05-06 16:44:21 | 000,426,184 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012-05-03 20:28:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2012-05-03 20:28:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2012-05-02 22:22:12 | 000,000,000 | ---D | C] -- C:\Users\alex\Documents\SelfMV
[2012-05-02 22:20:29 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\Temp
[2012-05-02 22:20:07 | 000,000,000 | ---D | C] -- C:\Temp
[2012-05-02 22:03:00 | 001,917,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01005.dll
[2012-05-02 22:03:00 | 001,917,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdfCoInstaller01005.dll
[2012-05-02 22:03:00 | 000,177,640 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadmdm.sys
[2012-05-02 22:03:00 | 000,157,672 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadbus.sys
[2012-05-02 22:03:00 | 000,036,328 | ---- | C] (Google Inc) -- C:\Windows\SysNative\drivers\ssadadb.sys
[2012-05-02 22:03:00 | 000,016,872 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadmdfl.sys
[2012-05-02 22:03:00 | 000,013,800 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadwhnt.sys
[2012-05-02 22:03:00 | 000,013,288 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadcmnt.sys
[2012-05-02 22:03:00 | 000,013,288 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadcm.sys
[2012-05-02 22:02:59 | 000,146,920 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadserd.sys
[2012-05-02 22:01:56 | 000,172,104 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\sscdmdm.sys
[2012-05-02 22:01:56 | 000,136,264 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\sscdbus.sys
[2012-05-02 22:01:56 | 000,019,016 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\sscdmdfl.sys
[2012-05-02 22:01:56 | 000,015,944 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\sscdwhnt.sys
[2012-05-02 22:01:56 | 000,015,944 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\sscdwh.sys
[2012-05-02 22:01:56 | 000,015,432 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\sscdcmnt.sys
[2012-05-02 22:01:56 | 000,015,432 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\sscdcm.sys
[2012-05-02 21:46:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2012-04-28 11:32:30 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Local\Samsung
[2012-04-28 11:31:42 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\Samsung
[2012-04-28 11:31:33 | 000,000,000 | ---D | C] -- C:\Users\alex\Documents\samsung
[2012-04-27 22:23:29 | 000,013,800 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadwh.sys
[2012-04-27 22:21:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
[2012-04-27 22:21:44 | 004,659,712 | ---- | C] (Dmitry Streblechenko) -- C:\Windows\SysWow64\Redemption.dll
[2012-04-27 22:21:36 | 000,821,824 | ---- | C] (Devguru Co., Ltd.) -- C:\Windows\SysWow64\dgderapi.dll
[2012-04-27 22:21:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MarkAny
[2012-04-27 22:20:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Samsung
[2012-04-27 22:20:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Samsung
[2012-04-27 22:19:19 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Local\Downloaded Installations
[2012-04-21 20:16:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ask.com
[2012-04-21 20:16:08 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Local\APN
[2012-04-19 15:12:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Teleport Pro
[2012-04-19 15:12:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Teleport Pro
[2012-04-12 05:27:08 | 000,069,640 | ---- | C] (Nalpeiron Ltd.) -- C:\Windows\SysWow64\NLSSRV32.EXE
[2012-03-31 20:48:06 | 000,000,000 | ---D | C] -- C:\Users\alex\Documents\MATLAB
[2012-03-31 20:47:51 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\MathWorks
[2012-03-31 20:44:47 | 001,077,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSCOMCTL.OCX
[2012-03-31 20:44:47 | 000,407,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSHFLXGD.OCX
[2012-03-31 20:44:47 | 000,203,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RICHTX32.OCX
[2012-03-31 14:51:32 | 000,000,000 | ---D | C] -- C:\Program Files\MATLAB
[2012-03-31 14:35:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
[2012-03-31 14:35:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Lite
[2012-03-31 14:33:36 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\DAEMON Tools Lite
[2012-03-31 14:33:34 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2012-03-31 14:18:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Alcohol Soft
[2012-03-31 14:04:25 | 000,564,792 | ---- | C] (Duplex Secure Ltd.) -- C:\Windows\SysNative\drivers\sptd.sys
[2012-03-31 14:03:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Franzis

[color=#E56717]========== Files - Modified Within 90 Days ==========[/color]

[2012-06-28 15:21:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012-06-28 15:12:01 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012-06-28 14:34:47 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-06-28 14:06:02 | 000,000,924 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2527288125-292897534-329591378-1000UA.job
[2012-06-28 14:06:00 | 000,000,902 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2527288125-292897534-329591378-1000Core.job
[2012-06-28 11:12:00 | 000,001,040 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012-06-28 10:06:13 | 000,018,656 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012-06-28 10:06:13 | 000,018,656 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012-06-28 08:00:53 | 3148,419,072 | -HS- | M] () -- C:\hiberfil.sys
[2012-06-28 00:38:07 | 001,674,538 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012-06-28 00:38:07 | 000,742,088 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2012-06-28 00:38:07 | 000,655,904 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012-06-28 00:38:07 | 000,156,760 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2012-06-28 00:38:07 | 000,122,638 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012-06-24 12:50:53 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2012-06-24 00:21:45 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012-06-24 00:21:45 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012-06-18 18:31:42 | 000,075,776 | ---- | M] () -- C:\Windows\cadkasdeinst01e.exe
[2012-06-14 10:42:25 | 000,001,347 | ---- | M] () -- C:\Users\alex\Desktop\MATLAB.lnk
[2012-06-12 12:13:30 | 000,002,340 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2012-06-10 12:12:46 | 000,001,010 | ---- | M] () -- C:\Users\alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2012-05-31 15:22:36 | 000,001,069 | ---- | M] () -- C:\Users\alex\Desktop\Wolfram Mathematica 8.lnk
[2012-05-30 21:08:12 | 005,759,352 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012-05-30 00:47:54 | 000,002,340 | ---- | M] () -- C:\Users\alex\Desktop\Google Chrome.lnk
[2012-05-29 16:36:53 | 000,007,605 | ---- | M] () -- C:\Users\alex\AppData\Local\Resmon.ResmonCfg
[2012-05-26 18:33:56 | 000,000,600 | ---- | M] () -- C:\Users\alex\AppData\Roaming\winscp.rnd
[2012-05-26 17:38:26 | 000,001,628 | ---- | M] () -- C:\Users\Public\Desktop\IntelliCAD Standard 3.3 EDU.lnk
[2012-05-13 01:09:34 | 000,001,122 | ---- | M] () -- C:\Users\alex\Desktop\EVEREST Ultimate Edition.lnk
[2012-05-12 20:58:06 | 000,002,102 | ---- | M] () -- C:\Users\Public\Desktop\AutoCAD 2012 - English.lnk
[2012-05-12 20:44:04 | 000,002,069 | ---- | M] () -- C:\Users\Public\Desktop\Inventor Fusion 2012.lnk
[2012-05-12 20:39:15 | 000,000,153 | ---- | M] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2012-05-12 20:33:23 | 001,650,804 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012-05-12 15:29:58 | 000,002,086 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
[2012-05-07 15:34:09 | 000,002,059 | ---- | M] () -- C:\Users\Public\Desktop\Nitro Pro 7.lnk
[2012-05-02 22:07:28 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ssadadb_01005.Wdf
[2012-05-02 21:46:54 | 000,002,212 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2012-04-28 15:28:33 | 000,000,443 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.ics
[2012-04-27 23:01:27 | 000,001,953 | ---- | M] () -- C:\Users\Public\Desktop\Samsung Kies.lnk
[2012-04-21 20:16:22 | 000,000,991 | ---- | M] () -- C:\Users\alex\Desktop\SopCast.lnk
[2012-04-19 15:17:56 | 000,000,103 | ---- | M] () -- C:\Windows\pro.INI
[2012-04-19 15:13:52 | 000,005,287 | ---- | M] () -- C:\Users\alex\Documents\lodz.tpp
[2012-04-12 05:27:08 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) -- C:\Windows\SysWow64\NLSSRV32.EXE
[2012-04-12 05:26:26 | 000,017,928 | ---- | M] (Nitro PDF Software) -- C:\Windows\SysNative\nitrolocalui2.dll
[2012-04-11 22:55:10 | 000,029,712 | ---- | M] (Nitro PDF Software) -- C:\Windows\SysNative\nitrolocalmon2.dll
[2012-04-04 23:29:00 | 000,000,943 | ---- | M] () -- C:\Users\Public\Desktop\µTorrent.lnk
[2012-03-31 14:36:35 | 000,001,950 | ---- | M] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2012-03-31 14:35:54 | 000,564,792 | ---- | M] (Duplex Secure Ltd.) -- C:\Windows\SysNative\drivers\sptd.sys

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2012-06-24 12:50:53 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2012-06-18 18:31:42 | 000,075,776 | ---- | C] () -- C:\Windows\cadkasdeinst01e.exe
[2012-05-30 00:47:54 | 000,002,340 | ---- | C] () -- C:\Users\alex\Desktop\Google Chrome.lnk
[2012-05-29 16:36:53 | 000,007,605 | ---- | C] () -- C:\Users\alex\AppData\Local\Resmon.ResmonCfg
[2012-05-29 16:33:21 | 000,001,069 | ---- | C] () -- C:\Users\alex\Desktop\Wolfram Mathematica 8.lnk
[2012-05-26 18:33:44 | 000,000,600 | ---- | C] () -- C:\Users\alex\AppData\Roaming\winscp.rnd
[2012-05-26 17:38:26 | 000,001,628 | ---- | C] () -- C:\Users\Public\Desktop\IntelliCAD Standard 3.3 EDU.lnk
[2012-05-22 19:40:21 | 000,001,347 | ---- | C] () -- C:\Users\alex\Desktop\MATLAB.lnk
[2012-05-15 22:22:54 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\ltserial.dll
[2012-05-13 01:09:34 | 000,001,122 | ---- | C] () -- C:\Users\alex\Desktop\EVEREST Ultimate Edition.lnk
[2012-05-12 20:44:04 | 000,002,069 | ---- | C] () -- C:\Users\Public\Desktop\Inventor Fusion 2012.lnk
[2012-05-12 20:39:15 | 000,000,153 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2012-05-12 20:38:24 | 000,002,102 | ---- | C] () -- C:\Users\Public\Desktop\AutoCAD 2012 - English.lnk
[2012-05-12 20:31:30 | 001,650,804 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012-05-12 15:29:57 | 000,002,098 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
[2012-05-12 15:29:57 | 000,002,086 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
[2012-05-07 15:34:09 | 000,002,557 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro Pro 7.lnk
[2012-05-07 15:34:09 | 000,002,059 | ---- | C] () -- C:\Users\Public\Desktop\Nitro Pro 7.lnk
[2012-05-06 18:20:00 | 000,000,545 | ---- | C] () -- C:\Windows\UC.PIF
[2012-05-06 18:20:00 | 000,000,545 | ---- | C] () -- C:\Windows\RAR.PIF
[2012-05-06 18:20:00 | 000,000,545 | ---- | C] () -- C:\Windows\PKZIP.PIF
[2012-05-06 18:20:00 | 000,000,545 | ---- | C] () -- C:\Windows\PKUNZIP.PIF
[2012-05-06 18:20:00 | 000,000,545 | ---- | C] () -- C:\Windows\NOCLOSE.PIF
[2012-05-06 18:20:00 | 000,000,545 | ---- | C] () -- C:\Windows\LHA.PIF
[2012-05-06 18:20:00 | 000,000,545 | ---- | C] () -- C:\Windows\ARJ.PIF
[2012-05-06 16:44:22 | 000,000,930 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012-05-02 22:07:28 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ssadadb_01005.Wdf
[2012-05-02 21:46:54 | 000,002,212 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2012-04-27 23:01:27 | 000,001,953 | ---- | C] () -- C:\Users\Public\Desktop\Samsung Kies.lnk
[2012-04-21 20:16:22 | 000,000,991 | ---- | C] () -- C:\Users\alex\Desktop\SopCast.lnk
[2012-04-19 15:17:23 | 000,000,103 | ---- | C] () -- C:\Windows\pro.INI
[2012-04-19 15:13:44 | 000,005,287 | ---- | C] () -- C:\Users\alex\Documents\lodz.tpp
[2012-04-04 23:29:00 | 000,000,943 | ---- | C] () -- C:\Users\Public\Desktop\µTorrent.lnk
[2012-03-31 14:36:35 | 000,001,950 | ---- | C] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2012-03-28 22:11:08 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2012-03-28 22:11:06 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2012-03-28 22:11:06 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2012-03-28 22:11:06 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2012-03-28 22:11:06 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2012-01-30 19:53:03 | 000,001,024 | ---- | C] () -- C:\Windows\SysWow64\encryptpdf.dat
[2012-01-28 23:44:48 | 000,003,584 | ---- | C] () -- C:\Users\alex\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-01-28 22:52:13 | 000,000,412 | ---- | C] () -- C:\Windows\ODBC.INI
[2011-10-19 12:53:09 | 000,083,229 | ---- | C] () -- C:\Users\alex\neostrada_990696156611.pdf
[2011-10-19 10:19:00 | 000,001,131 | ---- | C] () -- C:\Users\alex\umk.cer
[2011-10-19 10:18:38 | 000,024,706 | ---- | C] () -- C:\Users\alex\vista.htm
[2011-09-03 22:32:20 | 003,097,252 | ---- | C] () -- C:\Users\alex\GE620_Polish.pdf
[2011-08-11 23:44:20 | 000,000,411 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2011-08-11 23:44:20 | 000,000,034 | ---- | C] () -- C:\Windows\SysWow64\BD7030.DAT
[2011-01-27 08:55:20 | 000,960,940 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin
[2011-01-27 08:55:20 | 000,213,332 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin
[2011-01-27 08:55:20 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin

[color=#E56717]========== LOP Check ==========[/color]

[2011-07-13 10:49:38 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\.wtw
[2011-09-03 21:34:00 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\Ashampoo
[2012-05-29 16:15:40 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\Autodesk
[2012-05-15 13:47:55 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\BESTplayer
[2012-06-18 18:31:48 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\CAD-KAS
[2012-03-31 14:45:30 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\DAEMON Tools Lite
[2012-05-07 15:31:48 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\Downloaded Installations
[2012-06-28 09:59:22 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\Dropbox
[2012-06-28 01:23:12 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\foobar2000
[2012-05-06 18:20:00 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\GHISLER
[2012-03-12 19:59:28 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\ipla
[2012-06-18 18:17:54 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\Nitro PDF
[2012-02-18 00:04:19 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\Notepad++
[2011-07-13 17:38:15 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\OpenOffice.org
[2012-04-28 11:31:42 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\Samsung
[2012-06-28 10:00:08 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\Software Informer
[2011-07-27 19:32:14 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\Sony
[2012-05-02 23:00:02 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\Temp
[2012-05-12 15:32:22 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\Thunderbird
[2012-06-28 15:23:18 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\uTorrent
[2012-06-06 15:58:07 | 000,000,000 | ---D | M] -- C:\Users\Gość\AppData\Roaming\ipla
[2012-06-06 15:57:59 | 000,000,000 | ---D | M] -- C:\Users\Gość\AppData\Roaming\Software Informer
[2012-06-28 14:06:00 | 000,000,902 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2527288125-292897534-329591378-1000Core.job
[2012-06-28 14:06:02 | 000,000,924 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2527288125-292897534-329591378-1000UA.job
[2012-06-06 15:46:54 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

[color=#E56717]========== Purity Check ==========[/color]



< End of report >


Extras:

Kod: Zaznacz wszystko

OTL Extras logfile created on: 2012-06-28 15:19:58 - Run 1
OTL by OldTimer - Version 3.2.53.0     Folder = C:\Users\alex\Desktop\Komputer\Antywirus
64bit- Professional  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

3,91 Gb Total Physical Memory | 2,50 Gb Available Physical Memory | 63,93% Memory free
7,82 Gb Paging File | 6,04 Gb Available in Paging File | 77,24% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 58,57 Gb Total Space | 3,00 Gb Free Space | 5,12% Space Free | Partition Type: NTFS
Drive E: | 50,00 Gb Total Space | 45,03 Gb Free Space | 90,06% Space Free | Partition Type: NTFS
Drive J: | 100,00 Gb Total Space | 93,48 Gb Free Space | 93,48% Space Free | Partition Type: NTFS
Drive K: | 100,00 Gb Total Space | 85,69 Gb Free Space | 85,69% Space Free | Partition Type: NTFS
Drive L: | 157,19 Gb Total Space | 111,30 Gb Free Space | 70,81% Space Free | Partition Type: NTFS

Computer Name: ALEX-KOMPUTER | User Name: alex | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 90 Days

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]


[color=#E56717]========== File Associations ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.scr [@ = Icad.load.scr] -- Reg Error: Key error. File not found

[HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1001\SOFTWARE\Classes\<extension>]
.scr [@ = Icad.load.scr] -- Reg Error: Key error. File not found

[color=#E56717]========== Shell Spawning ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- E:\Program Files (x86)\After Effects\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- E:\Program Files (x86)\After Effects\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[color=#E56717]========== Security Center Settings ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

[color=#E56717]========== Firewall Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[color=#E56717]========== Authorized Applications List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

[color=#E56717]========== Vista Active Application Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0B5F1A60-D02F-497A-95E6-FE5B0215A806}" = dir=in | app=c:\users\alex\appdata\local\facebook\video\skype\facebookvideocalling.exe |
"{1D4C6670-78CF-4458-8304-14F784373C6D}" = protocol=17 | dir=in | app=c:\windows\syswow64\muzapp.exe |
"{497B26D6-E7C0-4AA8-9E5F-E36519A8A0CE}" = protocol=6 | dir=in | app=c:\program files (x86)\veetle\player\veetlenet.exe |
"{54C51B0D-7E9D-42FC-8A17-F3AE8A633DC3}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{59A4E84F-5022-4F83-A1E8-621FFF88606E}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 |
"{62930973-4CE8-40DF-9658-91F1E9F63E2E}" = protocol=17 | dir=in | app=c:\program files (x86)\sony ericsson\update service\update service.exe |
"{634A161A-5D0D-4755-AD64-9F3581F7E52A}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{7049324E-38DB-42C5-8A54-47B7D1060A09}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{7E8CDB3E-DF49-4F88-9C3D-25D194D2195C}" = protocol=58 | dir=in | app=system |
"{7F8705A7-C394-4AC7-9E99-FB7E8413E7F6}" = protocol=6 | dir=in | app=c:\program files (x86)\sony ericsson\update service\update service.exe |
"{84859118-8DFB-45B7-A6E0-5F54341B71CE}" = protocol=6 | dir=in | app=c:\program files\k2t\wtw\wtw.exe |
"{86D51A14-8786-46F3-93F4-F5A9CF931A49}" = protocol=17 | dir=in | app=c:\program files\k2t\wtw\wtw.exe |
"{C6753764-8A8D-4332-A279-4BE69C71F049}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{DC624FA7-D850-44F9-BAAC-51747BA546B4}" = protocol=6 | dir=in | app=c:\program files (x86)\sony ericsson\update engine\sony ericsson update engine.exe |
"{DECF1D6C-4B4A-4FD7-BEC9-EE308563E230}" = protocol=6 | dir=in | app=c:\windows\syswow64\muzapp.exe |
"{E08442B5-17E3-4C53-B5CF-95566074E33E}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{F2EEBAAF-812C-4658-936D-0D5D5916779A}" = protocol=17 | dir=in | app=c:\program files (x86)\sony ericsson\update engine\sony ericsson update engine.exe |
"{F302B0A3-D987-4DE4-9168-7CE629E2A210}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{FD8F7BA0-48F5-49A1-9144-1588895F21E9}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"TCP Query User{9BB64DF7-2756-41F9-A24F-0ECAEDBDFC0F}C:\program files (x86)\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"TCP Query User{9EE60719-6250-4F8B-A116-549BD0A1952D}C:\program files (x86)\shoutcast\sc_serv.exe" = protocol=6 | dir=in | app=c:\program files (x86)\shoutcast\sc_serv.exe |
"TCP Query User{D1965123-0A85-4FE2-B1E9-894DA9DCB2F0}C:\program files (x86)\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files (x86)\google\google earth\client\googleearth.exe |
"TCP Query User{E6691124-BF44-4144-909F-529AA86E3538}C:\program files (x86)\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files (x86)\google\google earth\plugin\geplugin.exe |
"UDP Query User{39C97729-304D-4E78-AC01-593799DFCABF}C:\program files (x86)\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"UDP Query User{565E42BC-2B5C-417C-B6D8-7186F753DF87}C:\program files (x86)\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files (x86)\google\google earth\plugin\geplugin.exe |
"UDP Query User{A198BB79-A3A6-4FCC-B174-4306FFC481C6}C:\program files (x86)\shoutcast\sc_serv.exe" = protocol=17 | dir=in | app=c:\program files (x86)\shoutcast\sc_serv.exe |
"UDP Query User{B9F165E7-4B78-44E0-9CE6-EEE570E04AD2}C:\program files (x86)\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files (x86)\google\google earth\client\googleearth.exe |

[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1DF5019A-68B5-4ba1-8E59-E185C7B7FF11}" = Komunikator WTW 0.9.10.3377
"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64
"{2078180F-0C60-11E0-8A9C-0013D3D69929}" = MSVCRT Redists
"{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition)
"{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1" = Media Player Classic - Home Cinema v1.5.2.3456 x64
"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5783F2D7-A001-0409-0102-0060B0CE6BBA}" = AutoCAD 2012 - English
"{5783F2D7-A001-0409-1102-0060B0CE6BBA}" = AutoCAD 2012 Language Pack - English
"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{8E5DA9A6-7A9F-3A6F-BC5C-D6CBCA6A29C7}" = Microsoft .NET Framework 4 Extended PLK Language Pack
"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64
"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64
"{A49402DD-2781-3782-B0CF-52BDA349E3F3}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 268.12
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 268.12
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.0.22
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64
"{C9608300-11F5-11E0-A64B-0013D3D69929}" = MSVCRT Redists
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{E552C39C-C70E-464F-9733-8311331BDD90}" = Autodesk Inventor Fusion plug-in language pack for AutoCAD 2012
"{EAB3AC1A-68FF-486B-9C6B-E48EBB4B05CC}" = Autodesk Inventor Fusion plug-in for AutoCAD 2012
"{EFA0B23D-4474-4962-B443-C806EB5ED29C}" = Nitro Pro 7
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FFF5619F-6669-4EC5-A85E-9994F70A9E5D}" = Autodesk Inventor Fusion 2012
"{FFF7F80F-929E-497F-A112-B070DE816128}" = Autodesk Inventor Fusion 2012 Language Pack
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit
"AutoCAD 2012 - English" = AutoCAD 2012 - English
"Autodesk Inventor Fusion 2012" = Autodesk Inventor Fusion 2012
"Autodesk Inventor Fusion plug-in for AutoCAD 2012" = Autodesk Inventor Fusion plug-in for AutoCAD 2012
"A-WIN-Extras 8.0.1 2063897_is1" = Mathematica Extras 8.0 (2063897)
"Matlab R2012a" = MATLAB R2012a
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended
"M-WIN-L 8.0.1 2063990_is1" = Wolfram Mathematica 8 (M-WIN-L 8.0.1 2063990)
"Recuva" = Recuva
"WinRAR archiver" = WinRAR 4.01 (64-bitowy)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0046FA01-C5B9-4985-BACB-398DC480FC05}" = Adobe Photoshop CS3
"{00ED627E-F3DC-455E-ACA6-E6B6D917DFC1}" = S-Bar
"{0141D498-16DA-4221-A529-1D7A64BE8B05}" = OpenOffice.org 3.3
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3
"{086F9A69-CD39-4893-A9FB-D3A0634CE3F7}" = Autodesk Content Service
"{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{28E82311-8616-11E1-BEB0-B8AC6F97B88E}" = Google Earth
"{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{51846830-E7B2-4218-8968-B77F0FF475B8}" = Adobe Color EU Extra Settings
"{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3
"{62BBB2F0-E220-4821-A564-730807D2C34D}" = Realtek USB 2.0 Reader Driver
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{65420DC9-306E-4371-905F-F4DC3B418E52}" = Autodesk Material Library Base Resolution Image Library 2012
"{662CFD19-EA80-4EFE-A0D8-EE10EFEB3C83}" = Livestream Procaster
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6ABE0BEE-D572-4FE8-B434-9E72A289431B}" = Adobe Fonts All
"{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{7CAC6A44-C3DE-4153-ACA6-7524602C789E}" = Facebook Video Calling 1.2.0.159
"{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3
"{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}" = Adobe Type Support
"{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}" = Autodesk Material Library 2012
"{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{94DE7548-E449-4F7D-804F-0C5CDC3A1E6A}" = EasyFace2
"{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}" = FARO LS 1.1.406.58
"{95655ED4-7CA5-46DF-907F-7144877A32E5}" = Adobe Color NA Recommended Settings
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3
"{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}" = Adobe CMaps
"{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific
"{A912021A-FEDD-4DA3-8DB4-245EBDA84778}" = OriginPro 8
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}" = PDF Settings
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.0)
"{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0
"{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}" = Adobe Default Language CS3
"{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2
"{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D1BB4446-AE9C-4256-9A7F-4D46604D2462}" = Adobe Setup
"{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}" = Adobe PDF Library Files
"{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}" = GTA San Andreas
"{D7452A01-9BF9-4FFD-8B2E-650F713AE099}" = Origin8
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DA1B174B-4297-467C-9EF8-0AB8D4D5171E}" = Adobe After Effects CS5
"{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}" = Adobe Color Common Settings
"{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}" = Adobe Color JA Extra Settings
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3
"{e7394a0f-3f80-45b1-87fc-abcd51893246}" = Python 2.6.4
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony Ericsson PC Companion 2.02.015
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FDB3B167-F4FA-461D-976F-286304A57B2A}" = Adobe AIR
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe_2ac78060bc5856b0c1cf873bb919b58" = Adobe Photoshop CS3
"Ashampoo Burning Studio Elements_is1" = Ashampoo Burning Studio Elements 10.0.9
"ASIO4ALL" = ASIO4ALL
"Audacity_is1" = Audacity 1.2.6
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"Counter-Strike 1.6" = Counter-Strike 1.6
"DAEMON Tools Lite" = DAEMON Tools Lite
"Drumaxx" = Drumaxx
"EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.50
"FL Studio 9.6" = FL Studio 9.6
"foobar2000" = foobar2000 v1.1.7
"Foxit PDF Editor" = Foxit PDF Editor
"Google Chrome" = Google Chrome
"Hardcore" = Hardcore
"IL Download Manager" = IL Download Manager
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"INTERsoft IntelliCAD Standard Edition v.3.3" = INTERsoft IntelliCAD Standard Edition v.3.3
"ipla" = ipla 2.3.5
"LastFM_is1" = Last.fm 1.5.4.27091
"Mobile Partner" = Mobile Partner
"Mozilla Firefox 13.0.1 (x86 pl)" = Mozilla Firefox 13.0.1 (x86 pl)
"Mozilla Thunderbird 12.0.1 (x86 pl)" = Mozilla Thunderbird 12.0.1 (x86 pl)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Notepad++" = Notepad++
"Omnius for SE" = Omnius for SE v0.33
"PoiZone" = PoiZone
"qt7lite_is1" = QT Lite 2.8.0
"Sakura" = Sakura
"Sawer" = Sawer
"SCDNAS" = SHOUTcast DNAS (remove only)
"SciDAVis" = SciDAVis 0.2.4
"SecureW2 EAP Suite" = SecureW2 EAP Suite 1.1.3 for Windows
"Software Informer_is1" = Software Informer 1.1
"SopCast" = SopCast 3.5.0
"Totalcmd" = Total Commander (Remove or Repair)
"Toxic Biohazard" = Toxic Biohazard
"Ultimate Unlocker" = D-Ultimate Unlocker
"Update Engine" = Sony Ericsson Update Engine
"Update Service" = Sony Ericsson Update Service
"uTorrent" = µTorrent
"Veetle TV" = Veetle TV
"vShare.tv plugin" = vShare.tv plugin 1.3
"Winamp" = Winamp
"winscp3_is1" = WinSCP 4.2.1 beta

[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

[HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{79A765E1-C399-405B-85AF-466F52E918B0}" = Sopcast Ask Toolbar Updater
"CodeBlocks" = CodeBlocks
"Dropbox" = Dropbox
"pdfsam" = pdfsam

[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

[HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox

[color=#E56717]========== Last 20 Event Log Errors ==========[/color]

[ Application Events ]
Error - 2012-06-27 18:21:00 | Computer Name = alex-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Windows\system32\conhost.exe".
Nie
można odnaleźć zestawu zależnego Microsoft.Windows.SystemCompatible,processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.7600.16823".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2012-06-27 19:21:00 | Computer Name = alex-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Windows\system32\conhost.exe".
Nie
można odnaleźć zestawu zależnego Microsoft.Windows.SystemCompatible,processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.7600.16823".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2012-06-28 03:58:16 | Computer Name = alex-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Windows\system32\conhost.exe".
Nie
można odnaleźć zestawu zależnego Microsoft.Windows.SystemCompatible,processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.7600.16823".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2012-06-28 03:59:12 | Computer Name = alex-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Windows\system32\conhost.exe".
Nie
można odnaleźć zestawu zależnego Microsoft.Windows.SystemCompatible,processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.7600.16823".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2012-06-28 04:00:18 | Computer Name = alex-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Windows\system32\conhost.exe".
Nie
można odnaleźć zestawu zależnego Microsoft.Windows.SystemCompatible,processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.7600.16823".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2012-06-28 04:00:34 | Computer Name = alex-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Windows\system32\conhost.exe".
Nie
można odnaleźć zestawu zależnego Microsoft.Windows.SystemCompatible,processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.7600.16823".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2012-06-28 04:21:00 | Computer Name = alex-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Windows\system32\conhost.exe".
Nie
można odnaleźć zestawu zależnego Microsoft.Windows.SystemCompatible,processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.7600.16823".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2012-06-28 05:21:00 | Computer Name = alex-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Windows\system32\conhost.exe".
Nie
można odnaleźć zestawu zależnego Microsoft.Windows.SystemCompatible,processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.7600.16823".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2012-06-28 07:43:22 | Computer Name = alex-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Windows\system32\conhost.exe".
Nie
można odnaleźć zestawu zależnego Microsoft.Windows.SystemCompatible,processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.7600.16823".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2012-06-28 08:21:00 | Computer Name = alex-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Windows\system32\conhost.exe".
Nie
można odnaleźć zestawu zależnego Microsoft.Windows.SystemCompatible,processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.7600.16823".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

[ System Events ]
Error - 2012-06-20 05:05:01 | Computer Name = alex-Komputer | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 01:56:55 na ?2012-?06-?20 było
nieoczekiwane.

Error - 2012-06-20 06:28:20 | Computer Name = alex-Komputer | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 12:24:50 na ?2012-?06-?20 było
nieoczekiwane.

Error - 2012-06-23 08:07:38 | Computer Name = alex-Komputer | Source = volsnap | ID = 393252
Description = Wykonywanie kopii w tle woluminu C: zostało przerwane, ponieważ nie
można powiększyć magazynu kopii w tle z powodu limitu wprowadzonego przez użytkownika.

Error - 2012-06-24 06:49:47 | Computer Name = alex-Komputer | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 02:04:30 na ?2012-?06-?24 było
nieoczekiwane.

Error - 2012-06-25 09:25:35 | Computer Name = alex-Komputer | Source = Service Control Manager | ID = 7034
Description = Usługa Usługa Google Update (gupdate) niespodziewanie zakończyła pracę.
Wystąpiło to razy: 1.

Error - 2012-06-25 09:26:04 | Computer Name = alex-Komputer | Source = DCOM | ID = 10010
Description =

Error - 2012-06-25 10:03:23 | Computer Name = alex-Komputer | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 16:00:52 na ?2012-?06-?25 było
nieoczekiwane.

Error - 2012-06-27 06:17:36 | Computer Name = alex-Komputer | Source = Service Control Manager | ID = 7034
Description = Usługa Usługa Google Update (gupdate) niespodziewanie zakończyła pracę.
Wystąpiło to razy: 1.

Error - 2012-06-27 06:18:06 | Computer Name = alex-Komputer | Source = DCOM | ID = 10010
Description =

Error - 2012-06-28 05:01:36 | Computer Name = alex-Komputer | Source = Service Control Manager | ID = 7011
Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji
z usługi Wlansvc.


< End of report >


Dodano 28.06.2012 15:00:56:
+ GMER

Kod: Zaznacz wszystko

GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-06-28 16:00:43
Windows 6.1.7600 
Running: 22q1hoed.exe


---- Registry - GMER 1.0.15 ----

Reg   HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\74f06dddc6d3                                         
Reg   HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\74f06dddc6d3@c0cb38e1bd00                            0x1E 0xF5 0x82 0xD0 ...
Reg   HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\74f06dddc6d3@0024834f37c6                            0x47 0xB2 0x43 0x08 ...
Reg   HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\74f06dddc6d3@2013e0bf4628                            0xF2 0xA2 0xA7 0x5C ...
Reg   HKLM\SYSTEM\CurrentControlSet\services\LanmanServer\Linkage@Export                                                  ???j????v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%PROGRAMFILES%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31301|Desc=@FirewallAPI.dll,-31304|EmbedCtxt=@FirewallAPI.dll,-31252|??????????j???;???????????;???????x??????????????????????????? ??????????????3A???????j???????????????????????i???????????????????y???????????????????.???y???;???????????????????????;??%SystemRoot%\System32\drivers\etc?????????????????????$?????????p???v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-31261|Desc=@FirewallAPI.dll,-31264|EmbedCtxt=@FirewallAPI.dll,-31252|????v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-31265|Desc=@FirewallAPI.dll,-31268|EmbedCtxt=@FirewallAPI.dll,-31252|????????y???;?????
Reg   HKLM\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Linkage@Export                                             ???i????????????????????SCSIAdapter?B????????????????j???|?|?????????i??????? L??i????????????????????????????????R??????????????????????????????f??????????????ie???????????6??.7??????????????????????t????????{?{?i??????????1???? ???i??????????d??????????|???????????????????????????s????????????????t????????????????????????????????m??????????%systemroot%\system32\wbem\wmiaprpl.dll??????????????????i???i?i?i?i?i?i?|???????????????~??? ???????}???????????i?,????????????&????????????????????????????????????????????????????????????????????????????}?}?}??l????????????i???{?|?????????f??????????????????????????????????????????????s?????????P??i?????????e????@%SystemRoot%\System32\wlansvc.dll,-257??????????????????????????i?|?|???????i??????p???TDI??????????i????????h?????%SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted???*pnp0100????????????????t??????? ???????????LocalSystem??+????P??i?????????n????@%SystemRoot%\System32\wlansvc.dll,-258???????F??i???????????e??nativewifip?RpcSs?Ndisuio?Eaphost??
Reg   HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04                                   
Reg   HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC                                   
Reg   HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                 C:\Program Files (x86)\DAEMON Tools Lite\
Reg   HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                 0x00 0x00 0x00 0x00 ...
Reg   HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                 0
Reg   HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                              0xCD 0x93 0xCD 0x82 ...
Reg   HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001                           
Reg   HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                        0xA0 0x02 0x00 0x00 ...
Reg   HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                     0x35 0x3A 0xC3 0x04 ...
Reg   HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0                     
Reg   HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                0x9E 0xA9 0xF2 0x66 ...
Reg   HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\74f06dddc6d3 (not active ControlSet)                     
Reg   HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\74f06dddc6d3@c0cb38e1bd00                                0x1E 0xF5 0x82 0xD0 ...
Reg   HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\74f06dddc6d3@0024834f37c6                                0x47 0xB2 0x43 0x08 ...
Reg   HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\74f06dddc6d3@2013e0bf4628                                0xF2 0xA2 0xA7 0x5C ...
Reg   HKLM\SYSTEM\ControlSet002\services\LanmanServer\Linkage@Export                                                      ???l?????q?q???????l?&???l?l????????? ???????l???????????l?0?????????????????????????????????????????k??????????? ???????l?????l???????0???????????????????????l???l???l??(?St???????????????????????l??????????storage\volume??????????????????????????????????? ???????l?????l???????0????????????&???????????????????????? ???????l?????l???????0????????????????????? ???????l???????????l?0?????????????????????????l??????????ksfilter.inf:Microsoft.NTamd64:MSKSSRV:6.1.7600.16385:sw\{96e080c7-143c-11d1-b40f-00a0c9223196}??????l?l?l?????l????????????????????????????? ???????j?????l?????k????????????I??????????6???????????2??????????? ???????l???????????j??????????R???????????????????????????WpdBusEnumRoot?????????l?&??? ???????l???????????l?0???????????????????????????????l????? ???????l?????l???????0????????????&??????????????????????????l???l????? ???????l?????k???????0????????????????????? ???????l???????????l?0?????????????????????k?k?????????k???????????????h?????????????????????????????????????g??????:??????{?????
Reg   HKLM\SYSTEM\ControlSet002\services\LanmanWorkstation\Linkage@Export                                                 ???l?g??{533c5b84-ec70-11d2-9505-00c04f79deaf}\0000?????system32\DRIVERS\athrx.sys???????????????????????????????????k??????????Port_#0001.Hub_#0004????? ??????????????????machine.inf:GENDEV_SYS.NTamd64:Volmgr:6.1.7600.16385:root\volmgr????? ???????j?????l?????j?????????????? ????????????????l??????????????? ???????l??????????????????????N???????d6??%SystemRoot%\system32\srvsvc.dll???????l?&???????????????????????????????????l?l?????????????s??t????????l???3???????????????l?l{8???????????????????????l???????3??6.1.7600.16385???????l?l?????????????n??er???l?l?l??????????????????????????????????????????????????{4d36e96c-e325-11ce-bfc1-08002be10318}\0004??????????k???????e???????j??????s?????>??l?????g????@ksfilter.inf,%msft%;Microsoft?????????????????????s????? ???l??????????????@ksfilter.inf,%mskssrv.devicedesc%;Serwer proxy us?ugi Microsoft Streaming???????l?l?l?l?l?l?l?l?l?l?l???????????8??tt???l?l????????????? ???????j?????l?????j????????????A??????????????l?ls.???l?k?l??????? ???????l???????????h?????????
Reg   HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 (not active ControlSet)               
Reg   HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)               
Reg   HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                     C:\Program Files (x86)\DAEMON Tools Lite\
Reg   HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                     0x00 0x00 0x00 0x00 ...
Reg   HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                     0
Reg   HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                                  0xA3 0x70 0xED 0x23 ...
Reg   HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)       
Reg   HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                            0xA0 0x02 0x00 0x00 ...
Reg   HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                         0x35 0x3A 0xC3 0x04 ...
Reg   HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet) 
Reg   HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                    0x9E 0xA9 0xF2 0x66 ...

---- Files - GMER 1.0.15 ----

File  C:\Users\alex\AppData\Local\Mozilla\Firefox\Profiles\y61ym9mu.default\Cache\A\8F\8C43Fd01                           1781760 bytes

---- EOF - GMER 1.0.15 ----


[defacto19]

Odinstaluj:
BitTorrent
Ask Toolbar
DAEMON Tools

Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1&cf=d9f13a17-357e-11e1-9117-6c626d317bd3
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?l=dis&o=15003
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://startsear.ch/?aff=1&src=sp&cf=d9f13a17-357e-11e1-9117-6c626d317bd3&q={searchTerms}
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1000\..\SearchScopes\{51E07AB4-2A97-4BD7-A2C5-B0C87F9FB8E2}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=SPC2&o=15000&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=PV&apn_dtid=YYYYYYYYPL&apn_uid=25a69775-a36a-41db-8327-4f66d9a7f6ae&apn_sauid=16C4F0C3-262D-463A-BF68-94F80F8C4363
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.ask.com/?l=dis&o=15003"
FF - prefs.js..keyword.URL: "http://www.google.com/search?q="
[2012-06-18 19:56:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions
[2012-03-15 18:15:45 | 000,000,000 | ---D | M] (Ghostery) -- C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions\firefox@ghostery.com
[2012-06-12 23:51:19 | 000,001,074 | ---- | M] () -- C:\Users\alex\AppData\Roaming\Mozilla\Firefox\Profiles\y61ym9mu.default\searchplugins\katalog-biblioteki-umk.xml
[2012-01-02 22:18:11 | 000,000,792 | ---- | M] () -- C:\Users\alex\AppData\Roaming\Mozilla\Firefox\Profiles\y61ym9mu.default\searchplugins\startsear.xml
[2012-06-18 19:56:27 | 000,015,162 | ---- | M] () (No name found) -- C:\USERS\ALEX\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\Y61YM9MU.DEFAULT\EXTENSIONS\{988DA70D-B78D-44A1-A9C7-ED11832A9E2E}.XPI
[2012-01-05 20:51:34 | 000,634,964 | ---- | M] () (No name found) -- C:\USERS\ALEX\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\Y61YM9MU.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2012-05-21 00:22:40 | 000,042,336 | ---- | M] () (No name found) -- C:\USERS\ALEX\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\Y61YM9MU.DEFAULT\EXTENSIONS\{E968FC70-8F95-4AB9-9E79-304DE2A71EE1}.XPI
[2011-10-03 11:14:54 | 000,083,456 | ---- | M] (vShare.tv ) -- C:\Program Files (x86)\mozilla firefox\plugins\npvsharetvplg.dll
O2 - BHO: (IE5BarLauncherBHO Class) - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll (VShare Inc.)
O2 - BHO: (Sopcast Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll (VShare Inc.)
O3 - HKLM\..\Toolbar: (Sopcast Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKU\S-1-5-21-2527288125-292897534-329591378-1000\..\Toolbar\WebBrowser: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll (VShare Inc.)
O3 - HKU\S-1-5-21-2527288125-292897534-329591378-1000\..\Toolbar\WebBrowser: (Sopcast Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKU\S-1-5-21-2527288125-292897534-329591378-1001\..\Toolbar\WebBrowser: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll (VShare Inc.
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files (x86)\Ask.com\Updater\Updater.exe (Ask)
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1000..\Run: [fsm] File not found
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1001..\Run: [AQQ] C:\PROGRA~2\WapSter\WAPSTE~1\AQQ.exe File not found
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1001..\Run: [Facebook Update] C:\Users\alex\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1001..\Run: [fsm] File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1001..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O8:64bit: - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000 File not found
[2012-06-28 15:12:01 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012-06-28 14:06:02 | 000,000,924 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2527288125-292897534-329591378-1000UA.job
[2012-06-28 14:06:00 | 000,000,902 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2527288125-292897534-329591378-1000Core.job
[2012-06-28 11:12:00 | 000,001,040 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

:Commands
[emptytemp]

Kliknij Wykonaj skrypt.Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie. Następnie uruchom OTL ponownie, i kliknij skanuj.
Pokaż nowy log OTL.txt oraz raport z usuwania.

[AragornXT]

Raport:

Kod: Zaznacz wszystko

All processes killed
========== OTL ==========
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKU\S-1-5-21-2527288125-292897534-329591378-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{00000000-6E41-4FD3-8538-502F5495E5FC} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}\ not found.
File C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll not found.
HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1000\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1000\Software\Microsoft\Internet Explorer\SearchScopes\{51E07AB4-2A97-4BD7-A2C5-B0C87F9FB8E2}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{51E07AB4-2A97-4BD7-A2C5-B0C87F9FB8E2}\ not found.
HKU\S-1-5-21-2527288125-292897534-329591378-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!
HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1001\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
HKU\S-1-5-21-2527288125-292897534-329591378-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!
Prefs.js: "Ask.com" removed from browser.search.defaultengine
Prefs.js: "Ask.com" removed from browser.search.defaultenginename
Prefs.js: "Ask.com" removed from browser.search.order.1
Prefs.js: false removed from browser.search.suggest.enabled
Prefs.js: true removed from browser.search.useDBForOrder
Prefs.js: "http://www.ask.com/?l=dis&o=15003" removed from browser.startup.homepage
Prefs.js: "http://www.google.com/search?q=" removed from keyword.URL
C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions\firefox@ghostery.com\resource folder moved successfully.
C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions\firefox@ghostery.com\META-INF folder moved successfully.
C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions\firefox@ghostery.com\defaults\preferences folder moved successfully.
C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions\firefox@ghostery.com\defaults folder moved successfully.
C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions\firefox@ghostery.com\components folder moved successfully.
C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions\firefox@ghostery.com\chrome\locale\ru-RU folder moved successfully.
C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions\firefox@ghostery.com\chrome\locale\ja-JP folder moved successfully.
C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions\firefox@ghostery.com\chrome\locale\fr-FR folder moved successfully.
C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions\firefox@ghostery.com\chrome\locale\es-ES folder moved successfully.
C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions\firefox@ghostery.com\chrome\locale\en-US folder moved successfully.
C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions\firefox@ghostery.com\chrome\locale\de-DE folder moved successfully.
C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions\firefox@ghostery.com\chrome\locale folder moved successfully.
C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions\firefox@ghostery.com\chrome\content\includes folder moved successfully.
C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions\firefox@ghostery.com\chrome\content\images\popup folder moved successfully.
C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions\firefox@ghostery.com\chrome\content\images folder moved successfully.
C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions\firefox@ghostery.com\chrome\content folder moved successfully.
C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions\firefox@ghostery.com\chrome folder moved successfully.
C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions\firefox@ghostery.com folder moved successfully.
C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions folder moved successfully.
Folder C:\Users\alex\AppData\Roaming\mozilla\Firefox\Profiles\y61ym9mu.default\extensions\firefox@ghostery.com\ not found.
C:\Users\alex\AppData\Roaming\Mozilla\Firefox\Profiles\y61ym9mu.default\searchplugins\katalog-biblioteki-umk.xml moved successfully.
C:\Users\alex\AppData\Roaming\Mozilla\Firefox\Profiles\y61ym9mu.default\searchplugins\startsear.xml moved successfully.
File C:\USERS\ALEX\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\Y61YM9MU.DEFAULT\EXTENSIONS\{988DA70D-B78D-44A1-A9C7-ED11832A9E2E}.XPI not found.
File C:\USERS\ALEX\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\Y61YM9MU.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI not found.
File C:\USERS\ALEX\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\Y61YM9MU.DEFAULT\EXTENSIONS\{E968FC70-8F95-4AB9-9E79-304DE2A71EE1}.XPI not found.
C:\Program Files (x86)\mozilla firefox\plugins\npvsharetvplg.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}\ deleted successfully.
C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
File C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}\ deleted successfully.
File C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
File C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll not found.
Registry value HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}\ not found.
File C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll not found.
Registry value HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
File C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll not found.
Registry value HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}\ not found.
File C:\Program Files (x86)\vShare.tv plugin\BarLcher.dll (VShare Inc. not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ApnUpdater not found.
File C:\Program Files (x86)\Ask.com\Updater\Updater.exe not found.
Registry value HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1000\Software\Microsoft\Windows\CurrentVersion\Run\\fsm deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1001\Software\Microsoft\Windows\CurrentVersion\Run\\AQQ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Facebook Update deleted successfully.
C:\Users\alex\AppData\Local\Facebook\Update\FacebookUpdate.exe moved successfully.
Registry value HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1001\Software\Microsoft\Windows\CurrentVersion\Run\\fsm deleted successfully.
Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.
64bit-Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\E&ksport do programu Microsoft Excel\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\E&ksport do programu Microsoft Excel\ not found.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2527288125-292897534-329591378-1000UA.job moved successfully.
C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2527288125-292897534-329591378-1000Core.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: alex
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 80909630 bytes
->Java cache emptied: 11188775 bytes
->FireFox cache emptied: 113173583 bytes
->Google Chrome cache emptied: 253346724 bytes
->Flash cache emptied: 81809 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 56468 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Gość
->Temp folder emptied: 370401 bytes
->Temporary Internet Files folder emptied: 279610 bytes
->FireFox cache emptied: 16804499 bytes
->Google Chrome cache emptied: 7363938 bytes
->Flash cache emptied: 56938 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 137144641 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 67898 bytes
RecycleBin emptied: 74915923 bytes

Total Files Cleaned = 664,00 mb


OTL by OldTimer - Version 3.2.53.0 log created on 06282012_164919

Files\Folders moved on Reboot...
C:\Users\alex\AppData\Local\Mozilla\Firefox\Profiles\y61ym9mu.default\Cache\_CACHE_001_ moved successfully.
C:\Users\alex\AppData\Local\Mozilla\Firefox\Profiles\y61ym9mu.default\Cache\_CACHE_002_ moved successfully.
C:\Users\alex\AppData\Local\Mozilla\Firefox\Profiles\y61ym9mu.default\Cache\_CACHE_003_ moved successfully.
C:\Users\alex\AppData\Local\Mozilla\Firefox\Profiles\y61ym9mu.default\Cache\_CACHE_MAP_ moved successfully.
C:\Users\alex\AppData\Local\Mozilla\Firefox\Profiles\y61ym9mu.default\urlclassifier3.sqlite moved successfully.

PendingFileRenameOperations files...
File C:\Users\alex\AppData\Local\Mozilla\Firefox\Profiles\y61ym9mu.default\Cache\_CACHE_001_ not found!
File C:\Users\alex\AppData\Local\Mozilla\Firefox\Profiles\y61ym9mu.default\Cache\_CACHE_002_ not found!
File C:\Users\alex\AppData\Local\Mozilla\Firefox\Profiles\y61ym9mu.default\Cache\_CACHE_003_ not found!
File C:\Users\alex\AppData\Local\Mozilla\Firefox\Profiles\y61ym9mu.default\Cache\_CACHE_MAP_ not found!
File C:\Users\alex\AppData\Local\Mozilla\Firefox\Profiles\y61ym9mu.default\urlclassifier3.sqlite not found!

Registry entries deleted on Reboot...


zaraz złączę kolejnego loga z OLT

Dodano 28.06.2012 16:16:19:
OTL:

Kod: Zaznacz wszystko

OTL logfile created on: 2012-06-28 16:57:54 - Run 2
OTL by OldTimer - Version 3.2.53.0     Folder = C:\Users\alex\Desktop\Komputer\Antywirus
64bit- Professional  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

3,91 Gb Total Physical Memory | 2,30 Gb Available Physical Memory | 58,90% Memory free
7,82 Gb Paging File | 6,18 Gb Available in Paging File | 79,09% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 58,57 Gb Total Space | 3,93 Gb Free Space | 6,70% Space Free | Partition Type: NTFS
Drive E: | 50,00 Gb Total Space | 45,03 Gb Free Space | 90,06% Space Free | Partition Type: NTFS
Drive J: | 100,00 Gb Total Space | 93,48 Gb Free Space | 93,48% Space Free | Partition Type: NTFS
Drive K: | 100,00 Gb Total Space | 85,69 Gb Free Space | 85,69% Space Free | Partition Type: NTFS
Drive L: | 157,19 Gb Total Space | 111,30 Gb Free Space | 70,81% Space Free | Partition Type: NTFS

Computer Name: ALEX-KOMPUTER | User Name: alex | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 90 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2012-06-28 15:17:06 | 000,596,992 | ---- | M] (OldTimer Tools) -- C:\Users\alex\Desktop\Komputer\Antywirus\OTL.exe
PRC - [2012-06-16 23:53:03 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2012-05-24 20:39:22 | 027,112,840 | ---- | M] (Dropbox, Inc.) -- C:\Users\alex\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2012-04-12 05:27:08 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) -- C:\Windows\SysWOW64\NLSSRV32.EXE
PRC - [2012-03-31 04:38:26 | 000,021,392 | ---- | M] () -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
PRC - [2012-03-31 04:38:14 | 003,521,424 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
PRC - [2011-08-07 18:42:48 | 002,875,461 | ---- | M] (Informer Technologies, Inc.) -- C:\Program Files (x86)\Software Informer\softinfo.exe
PRC - [2011-07-13 10:37:53 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2011-06-24 13:52:26 | 000,160,768 | ---- | M] (Micro-Star International Co., Ltd.) -- C:\Program Files (x86)\S-Bar\MSIService.exe
PRC - [2011-06-06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011-04-21 07:53:48 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2011-04-21 07:53:33 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2011-04-08 08:01:00 | 002,009,704 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011-02-02 14:08:16 | 000,018,656 | ---- | M] () -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
PRC - [2011-01-17 18:01:46 | 011,322,880 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
PRC - [2011-01-17 18:01:46 | 011,314,688 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2012-06-16 23:53:03 | 002,042,848 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
MOD - [2012-05-13 13:57:02 | 000,767,488 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\dc1f0dbf1d3ba856eccec90b62b55d79\System.Runtime.Remoting.ni.dll
MOD - [2012-04-28 11:54:59 | 000,115,137 | ---- | M] () -- C:\Users\alex\AppData\Local\Temp\bd7c47bb-f5c0-417c-a180-ec348d87718a\CliSecureRT.dll
MOD - [2012-03-31 04:38:26 | 000,021,392 | ---- | M] () -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
MOD - [2011-09-03 23:26:52 | 017,629,184 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\7f91eecda3ff7ce478146b6458580c98\PresentationFramework.ni.dll
MOD - [2011-09-03 23:26:42 | 011,057,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\3963e9ce8d44f50e8367e92a8e3e42e6\PresentationCore.ni.dll
MOD - [2011-09-03 23:26:35 | 003,779,072 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\d17606e813f01376bd0def23726ecc62\WindowsBase.ni.dll
MOD - [2011-09-03 23:26:34 | 000,283,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\f5e029e2215c95ab38a1eefef7b32ac9\PresentationFramework.Classic.ni.dll
MOD - [2011-07-17 13:27:35 | 001,159,168 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\6a6f4be744ed5bc5273cbcf0fcf303e3\System.Management.ni.dll
MOD - [2011-07-17 13:24:49 | 001,776,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\035910922f160d304fb834aae41f45a6\System.Xaml.ni.dll
MOD - [2011-07-17 11:56:32 | 013,006,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\17e020ae92d7fab33bcc1c98b25019d0\System.Windows.Forms.ni.dll
MOD - [2011-07-17 11:56:23 | 001,651,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\dd57bc19f5807c6dbe8f88d4a23277f6\System.Drawing.ni.dll
MOD - [2011-07-17 11:56:00 | 005,571,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\e997d0200c25f7db6bd32313d50b729d\System.Xml.ni.dll
MOD - [2011-07-17 11:55:49 | 007,025,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\713647b987b140a17e3c4ffe4c721f85\System.Core.ni.dll
MOD - [2011-07-17 11:55:36 | 009,000,960 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\964da027ebca3b263a05cadb8eaa20a3\System.ni.dll
MOD - [2011-07-17 11:55:27 | 014,415,872 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\246f1a5abb686b9dcdf22d3505b08cea\mscorlib.ni.dll
MOD - [2011-07-13 17:26:04 | 000,985,088 | ---- | M] () -- C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV:[b]64bit:[/b] - [2012-05-12 20:38:40 | 001,431,888 | ---- | M] (Flexera Software, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
SRV:[b]64bit:[/b] - [2012-04-12 05:27:02 | 000,204,296 | ---- | M] (Nitro PDF Software) [Auto | Running] -- C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe -- (NitroDriverReadSpool2)
SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2012-06-24 00:21:45 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012-06-16 23:53:03 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-04-12 05:27:08 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\Windows\SysWOW64\NLSSRV32.EXE -- (nlsX86cc)
SRV - [2011-07-13 17:27:56 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2011-07-13 10:37:53 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011-06-29 15:59:18 | 000,155,344 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe -- (Sony Ericsson PCCompanion)
SRV - [2011-06-24 13:52:26 | 000,160,768 | ---- | M] (Micro-Star International Co., Ltd.) [Auto | Running] -- C:\Program Files (x86)\S-Bar\MSIService.exe -- (Micro Star SCM)
SRV - [2011-06-06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011-04-21 07:53:48 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011-04-08 08:01:00 | 002,009,704 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011-02-02 14:08:16 | 000,018,656 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe -- (Autodesk Content Service)
SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010-02-19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV:[b]64bit:[/b] - [2012-03-31 14:35:54 | 000,564,792 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:[b]64bit:[/b] - [2012-02-17 23:24:47 | 000,034,032 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\seehcri.sys -- (seehcri)
DRV:[b]64bit:[/b] - [2012-02-17 23:24:19 | 000,027,176 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc)
DRV:[b]64bit:[/b] - [2012-02-17 23:24:19 | 000,013,352 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt)
DRV:[b]64bit:[/b] - [2011-07-13 10:37:55 | 000,123,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:[b]64bit:[/b] - [2011-07-13 10:37:55 | 000,088,288 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:[b]64bit:[/b] - [2011-07-13 01:34:18 | 000,032,344 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\MBfilt64.sys -- (MBfilt)
DRV:[b]64bit:[/b] - [2011-07-13 01:27:49 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel(R)
DRV:[b]64bit:[/b] - [2011-07-13 01:27:27 | 012,273,408 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2011-06-10 06:34:52 | 000,539,240 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2011-06-02 07:47:22 | 000,177,640 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdm.sys -- (ssadmdm)
DRV:[b]64bit:[/b] - [2011-06-02 07:47:22 | 000,157,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM)
DRV:[b]64bit:[/b] - [2011-06-02 07:47:22 | 000,146,920 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadserd.sys -- (ssadserd) SAMSUNG Android USB Diagnostic Serial Port (WDM)
DRV:[b]64bit:[/b] - [2011-06-02 07:47:22 | 000,016,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter)
DRV:[b]64bit:[/b] - [2011-04-08 08:01:00 | 000,025,960 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
DRV:[b]64bit:[/b] - [2011-03-15 18:09:16 | 000,311,400 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rtsuvstor.sys -- (RSUSBVSTOR)
DRV:[b]64bit:[/b] - [2011-03-11 08:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2011-03-11 08:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2010-12-21 07:55:02 | 000,172,104 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdm.sys -- (sscdmdm)
DRV:[b]64bit:[/b] - [2010-12-21 07:55:02 | 000,136,264 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)
DRV:[b]64bit:[/b] - [2010-12-21 07:55:02 | 000,036,328 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadadb.sys -- (androidusb)
DRV:[b]64bit:[/b] - [2010-12-21 07:55:02 | 000,019,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV:[b]64bit:[/b] - [2010-10-19 23:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) Intel(R)
DRV:[b]64bit:[/b] - [2010-03-31 14:30:58 | 000,117,248 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbmdm.sys -- (hwdatacard)
DRV:[b]64bit:[/b] - [2010-03-31 14:30:58 | 000,114,304 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbdev.sys -- (hwusbdev)
DRV:[b]64bit:[/b] - [2009-10-05 16:34:00 | 001,542,656 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2008-05-16 13:33:06 | 000,158,760 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016mdm.sys -- (s0016mdm)
DRV:[b]64bit:[/b] - [2008-05-16 13:33:06 | 000,151,592 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016unic.sys -- (s0016unic) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM)
DRV:[b]64bit:[/b] - [2008-05-16 13:33:06 | 000,137,256 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016mgmt.sys -- (s0016mgmt) Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM)
DRV:[b]64bit:[/b] - [2008-05-16 13:33:06 | 000,136,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016obex.sys -- (s0016obex)
DRV:[b]64bit:[/b] - [2008-05-16 13:33:06 | 000,034,344 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016nd5.sys -- (s0016nd5) Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS)
DRV:[b]64bit:[/b] - [2008-05-16 13:33:04 | 000,019,496 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016mdfl.sys -- (s0016mdfl)
DRV:[b]64bit:[/b] - [2008-05-16 13:32:56 | 000,115,240 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s0016bus.sys -- (s0016bus) Sony Ericsson Device 0016 driver (WDM)
DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope =
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{776D17D3-1DA0-4981-AE90-A01FDEF5D2A3}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-2527288125-292897534-329591378-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1000\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1000\..\SearchScopes\{776D17D3-1DA0-4981-AE90-A01FDEF5D2A3}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-2527288125-292897534-329591378-1001\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1001\..\SearchScopes\{776D17D3-1DA0-4981-AE90-A01FDEF5D2A3}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2527288125-292897534-329591378-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" =

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.defaultengine: ""
FF - prefs.js..browser.search.defaultenginename: ""
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.useDBForOrder: ""
FF - prefs.js..browser.startup.homepage: ""
FF - user.js - File not found

FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_262.dll File not found
FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@wolfram.com/Mathematica: C:\Program Files (x86)\Common Files\Wolfram Research\Browser\8.0.1.2063897\npmathplugin.dll (Wolfram Research, Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\alex\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-06-16 23:53:03 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012-06-28 16:49:23 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2012-05-12 15:29:56 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012-06-16 23:53:03 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012-06-28 16:49:23 | 000,000,000 | ---D | M]

[2011-07-13 01:42:11 | 000,000,000 | ---D | M] (No name found) -- C:\Users\alex\AppData\Roaming\mozilla\Extensions
[2012-03-18 13:21:30 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2012-06-16 23:53:03 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012-03-06 01:46:15 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2012-02-13 22:16:00 | 000,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml
[2012-02-13 22:16:00 | 000,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml
[2012-02-13 22:16:00 | 000,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml
[2012-02-13 22:16:00 | 000,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml
[2012-02-13 22:16:00 | 000,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-02-13 22:16:00 | 000,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml

[color=#E56717]========== Chrome  ==========[/color]

CHR - default_search_provider: Web Search (Enabled)
CHR - default_search_provider: search_url = http://startsear.ch/?aff=1&src=sp&cf=d9f13a17-357e-11e1-9117-6c626d317bd3&q={searchTerms}
CHR - default_search_provider: suggest_url =
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\19.0.1084.56\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U26 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\19.0.1084.56\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\19.0.1084.56\pdf.dll
CHR - plugin: Winamp Application Detector (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.69\npGoogleUpdate3.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: Sopcast Toolbar = C:\Users\alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaodiijipkjcmlclfmdmcoakmloobh\7.14.1.0_0\
CHR - Extension: Angry Birds = C:\Users\alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0\
CHR - Extension: vshare plugin = C:\Users\alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj\1.3_0\
CHR - Extension: MixCloud Downloader = C:\Users\alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjfpmaaidpgbklpnffchmlmfpjboahej\0.14_0\

O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O4:[b]64bit:[/b] - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:[b]64bit:[/b] - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [BEWINTERNET-PL-IEWSessionManager] "C:\Program Files (x86)\OrangeBS\BEWInternet-PL-IEW\SessionManager\SessionManager.exe" File not found
O4 - HKLM..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKLM..\Run: [S-Bar] C:\Program Files (x86)\S-Bar\S-Bar.exe (MSI)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1000..\Run: [AdobeBridge]  File not found
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1000..\Run: [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe (Samsung)
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1000..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1000..\Run: [Software Informer] C:\Program Files (x86)\Software Informer\softinfo.exe (Informer Technologies, Inc.)
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1000..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe"  /MINIMIZED File not found
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1001..\Run: [IPLA!] C:\Program Files (x86)\ipla\ipla.exe (Redefine Sp z o.o.)
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1001..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1001..\Run: [Software Informer] C:\Program Files (x86)\Software Informer\softinfo.exe (Informer Technologies, Inc.)
O4 - Startup: C:\Users\alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\alex\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O4 - Startup: C:\Users\alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: Badanie - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O13[b]64bit:[/b] - gopher Prefix: missing
O13 - gopher Prefix: missing
O16:[b]64bit:[/b] - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 8.8.8.8 8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3B4002A4-6818-4AB8-B1C2-9FA4C614123A}: DhcpNameServer = 8.8.8.8 8.8.4.4
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ms-itss - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation)
O18:[b]64bit:[/b] - Protocol\Filter\text/xml - No CLSID value found
O20:[b]64bit:[/b] - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20:[b]64bit:[/b] - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012-05-12 20:21:22 | 000,000,000 | ---D | M] - L:\AutoCadx64 -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

[color=#E56717]========== Files/Folders - Created Within 90 Days ==========[/color]

[2012-06-28 16:49:19 | 000,000,000 | ---D | C] -- C:\_OTL
[2012-06-28 15:16:30 | 000,000,000 | ---D | C] -- C:\Users\alex\Desktop\Komputer
[2012-06-26 19:37:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Valve
[2012-06-26 19:22:35 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6
[2012-06-26 19:22:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Counter-Strike 1.6
[2012-06-26 19:20:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Counter-Strike 1.6
[2012-06-24 22:31:12 | 000,000,000 | ---D | C] -- C:\Users\alex\Documents\Version Cue
[2012-06-23 13:30:19 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\sda
[2012-06-23 13:29:39 | 009,888,360 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysWow64\RtsUVStoricon.dll
[2012-06-23 13:29:39 | 000,311,400 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\drivers\rtsuvstor.sys
[2012-06-23 13:29:39 | 000,017,512 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\drivers\diskperf64.sys
[2012-06-20 21:37:44 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Local\TempDIR
[2012-06-20 19:42:50 | 000,000,000 | ---D | C] -- C:\Users\alex\Desktop\Nauka
[2012-06-19 23:52:54 | 000,000,000 | ---D | C] -- C:\Users\alex\Desktop\Telefon
[2012-06-19 16:45:30 | 000,000,000 | ---D | C] -- C:\Users\alex\Desktop\Fotografia
[2012-06-18 19:56:58 | 000,000,000 | ---D | C] -- C:\Users\alex\Desktop\Junskee
[2012-06-18 18:56:13 | 000,000,000 | ---D | C] -- C:\Users\alex\.pdfsam
[2012-06-18 18:48:04 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PDF Split And Merge
[2012-06-18 18:48:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\pdfsam
[2012-06-18 18:31:48 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\CAD-KAS
[2012-06-18 18:31:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Editor 3.3
[2012-06-11 15:38:45 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Local\Macromedia
[2012-05-29 16:33:26 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Local\Mathematica
[2012-05-29 16:33:25 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\Mathematica
[2012-05-29 16:30:25 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wolfram Research
[2012-05-29 16:30:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wolfram Research
[2012-05-29 16:30:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ResearchSoft
[2012-05-29 16:30:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Mathematica
[2012-05-29 16:30:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wolfram Mathematica
[2012-05-29 16:26:43 | 000,465,936 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysNative\mltcpip64.mlp
[2012-05-29 16:26:43 | 000,369,680 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysWow64\ml32i3.dll
[2012-05-29 16:26:43 | 000,335,888 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysWow64\mltcpip32.mlp
[2012-05-29 16:26:43 | 000,260,112 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysWow64\ml32i2.dll
[2012-05-29 16:26:43 | 000,253,968 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysWow64\ml32i1.dll
[2012-05-29 16:26:43 | 000,167,952 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysWow64\mlmodule32.dll
[2012-05-29 16:26:43 | 000,103,440 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysNative\mltcp64.mlp
[2012-05-29 16:26:43 | 000,099,344 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysNative\mlshm64.mlp
[2012-05-29 16:26:43 | 000,093,712 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysWow64\mltcp32.mlp
[2012-05-29 16:26:43 | 000,088,080 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysWow64\mlshm32.mlp
[2012-05-29 16:26:43 | 000,079,376 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysWow64\mlmap32.mlp
[2012-05-29 16:26:42 | 000,436,240 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysNative\ml64i3.dll
[2012-05-29 16:26:42 | 000,302,608 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysNative\ml64i2.dll
[2012-05-29 16:26:42 | 000,203,792 | ---- | C] (Wolfram Research, Inc.) -- C:\Windows\SysNative\mlmodule64.dll
[2012-05-29 16:24:50 | 000,000,000 | ---D | C] -- C:\Program Files\Wolfram Research
[2012-05-26 19:10:56 | 000,000,000 | ---D | C] -- C:\Users\alex\Desktop\Studia
[2012-05-26 18:33:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinSCP
[2012-05-26 18:33:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinSCP
[2012-05-26 17:38:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\INTERsoft
[2012-05-26 17:38:01 | 000,000,000 | ---D | C] -- C:\INTER
[2012-05-26 17:32:49 | 000,327,168 | ---- | C] (InstallShield Software Corporation) -- C:\Windows\IsUn0415.exe
[2012-05-15 22:37:04 | 000,000,000 | ---D | C] -- C:\Users\alex\Documents\Origin User Files
[2012-05-15 22:23:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OriginLab
[2012-05-15 22:22:54 | 002,199,552 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\PdfDll32.dll
[2012-05-15 22:22:54 | 001,433,600 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LTDic14n.dll
[2012-05-15 22:22:54 | 001,122,304 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\ltimg14n.dll
[2012-05-15 22:22:54 | 000,434,176 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\ltkrn14n.dll
[2012-05-15 22:22:54 | 000,262,144 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LTDIS14n.dll
[2012-05-15 22:22:54 | 000,253,952 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LTEml14n.dll
[2012-05-15 22:22:54 | 000,241,664 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\ltefx14n.dll
[2012-05-15 22:22:54 | 000,221,184 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\Lvkrn14n.dll
[2012-05-15 22:22:54 | 000,155,648 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LTSGM14n.dll
[2012-05-15 22:22:54 | 000,155,648 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\ltfil14n.dll
[2012-05-15 22:22:54 | 000,098,304 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LtTtf14n.Dll
[2012-05-15 22:22:54 | 000,094,208 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\ltdoc14n.dll
[2012-05-15 22:22:53 | 001,703,936 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LTCLR14n.dll
[2012-05-15 22:22:53 | 001,637,520 | ---- | C] (Codejock Software) -- C:\Windows\SysWow64\LPUIT05N.dll
[2012-05-15 22:22:53 | 001,396,736 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\ltann14n.dll
[2012-05-15 22:22:53 | 000,703,632 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPRES05N.DLL
[2012-05-15 22:22:53 | 000,642,192 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPUIR05r.dll
[2012-05-15 22:22:53 | 000,507,024 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LtAct14n.dll
[2012-05-15 22:22:53 | 000,228,496 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LpPdf05n.dll
[2012-05-15 22:22:53 | 000,224,400 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPKRN05N.DLL
[2012-05-15 22:22:53 | 000,142,480 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\ltact.dll
[2012-05-15 22:22:53 | 000,138,384 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LpHTM05n.dll
[2012-05-15 22:22:53 | 000,138,384 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LpEmf05n.dll
[2012-05-15 22:22:53 | 000,113,808 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPWSE05n.exe
[2012-05-15 22:22:53 | 000,109,712 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LpRTF05n.dll
[2012-05-15 22:22:53 | 000,106,680 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPUID05n.dll
[2012-05-15 22:22:53 | 000,085,136 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPINS05N.dll
[2012-05-15 22:22:53 | 000,072,848 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LpTxt05n.dll
[2012-05-15 22:22:53 | 000,056,464 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPUNI05N.dll
[2012-05-15 22:22:53 | 000,056,464 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPRPC05u.dll
[2012-05-15 22:22:53 | 000,052,368 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPEML05N.DLL
[2012-05-15 22:22:53 | 000,048,272 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPRNT05N.DLL
[2012-05-15 22:22:53 | 000,038,032 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPUMD05n.dll
[2012-05-15 22:22:53 | 000,035,984 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPPMN05u.DLL
[2012-05-15 22:22:52 | 000,695,440 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPDLG05N.DLL
[2012-05-15 22:22:52 | 000,364,544 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LFCMP14n.dll
[2012-05-15 22:22:52 | 000,146,576 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LpDoc05n.dll
[2012-05-15 22:22:52 | 000,139,264 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\lfpdf14n.dll
[2012-05-15 22:22:52 | 000,089,232 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\LPCPN05N.dll
[2012-05-15 22:22:52 | 000,086,016 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\lffax14n.dll
[2012-05-15 22:22:52 | 000,077,898 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\lfjb214n.dll
[2012-05-15 22:22:52 | 000,068,752 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\Lpdrv05n.DLL
[2012-05-15 22:22:52 | 000,032,768 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\Lfwmf14n.dll
[2012-05-15 22:20:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OriginLab
[2012-05-13 01:09:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys
[2012-05-13 01:09:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lavalys
[2012-05-12 21:02:24 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Local\cache
[2012-05-12 20:42:52 | 000,000,000 | ---D | C] -- C:\Users\alex\Documents\Inventor Server x64 AutoCAD 2012 Language Pack - English
[2012-05-12 20:38:40 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Macrovision Shared
[2012-05-12 20:38:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
[2012-05-12 20:36:36 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Autodesk Shared
[2012-05-12 20:36:36 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Local\Autodesk
[2012-05-12 20:36:36 | 000,000,000 | ---D | C] -- C:\Program Files\Autodesk
[2012-05-12 20:36:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Autodesk
[2012-05-12 20:35:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Autodesk Shared
[2012-05-12 18:40:01 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\Autodesk
[2012-05-12 18:40:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Autodesk
[2012-05-12 15:32:22 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\Thunderbird
[2012-05-12 15:32:22 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Local\Thunderbird
[2012-05-12 15:29:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Thunderbird
[2012-05-11 21:59:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QT Lite
[2012-05-11 21:59:42 | 000,090,112 | ---- | C] (Apple Inc.) -- C:\Windows\SysWow64\QuickTimeVR.qtx
[2012-05-11 21:59:42 | 000,057,344 | ---- | C] (Apple Inc.) -- C:\Windows\SysWow64\QuickTime.qts
[2012-05-11 21:59:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2012-05-11 21:59:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QT Lite
[2012-05-07 15:28:54 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\Nitro PDF
[2012-05-07 15:28:30 | 000,029,712 | ---- | C] (Nitro PDF Software) -- C:\Windows\SysNative\nitrolocalmon2.dll
[2012-05-07 15:28:30 | 000,017,928 | ---- | C] (Nitro PDF Software) -- C:\Windows\SysNative\nitrolocalui2.dll
[2012-05-07 15:28:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Nitro PDF
[2012-05-07 15:28:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Nitro PDF
[2012-05-07 15:28:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nitro PDF
[2012-05-07 15:28:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nitro PDF
[2012-05-06 18:48:40 | 000,000,000 | ---D | C] -- C:\Program Files\Recuva
[2012-05-06 18:20:00 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\GHISLER
[2012-05-06 16:44:21 | 000,426,184 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012-05-03 20:28:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2012-05-03 20:28:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2012-05-02 22:22:12 | 000,000,000 | ---D | C] -- C:\Users\alex\Documents\SelfMV
[2012-05-02 22:20:29 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\Temp
[2012-05-02 22:20:07 | 000,000,000 | ---D | C] -- C:\Temp
[2012-05-02 22:03:00 | 001,917,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WdfCoInstaller01005.dll
[2012-05-02 22:03:00 | 001,917,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WdfCoInstaller01005.dll
[2012-05-02 22:03:00 | 000,177,640 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadmdm.sys
[2012-05-02 22:03:00 | 000,157,672 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadbus.sys
[2012-05-02 22:03:00 | 000,036,328 | ---- | C] (Google Inc) -- C:\Windows\SysNative\drivers\ssadadb.sys
[2012-05-02 22:03:00 | 000,016,872 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadmdfl.sys
[2012-05-02 22:03:00 | 000,013,800 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadwhnt.sys
[2012-05-02 22:03:00 | 000,013,288 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadcmnt.sys
[2012-05-02 22:03:00 | 000,013,288 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadcm.sys
[2012-05-02 22:02:59 | 000,146,920 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadserd.sys
[2012-05-02 22:01:56 | 000,172,104 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\sscdmdm.sys
[2012-05-02 22:01:56 | 000,136,264 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\sscdbus.sys
[2012-05-02 22:01:56 | 000,019,016 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\sscdmdfl.sys
[2012-05-02 22:01:56 | 000,015,944 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\sscdwhnt.sys
[2012-05-02 22:01:56 | 000,015,944 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\sscdwh.sys
[2012-05-02 22:01:56 | 000,015,432 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\sscdcmnt.sys
[2012-05-02 22:01:56 | 000,015,432 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\sscdcm.sys
[2012-05-02 21:46:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2012-04-28 11:32:30 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Local\Samsung
[2012-04-28 11:31:42 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\Samsung
[2012-04-28 11:31:33 | 000,000,000 | ---D | C] -- C:\Users\alex\Documents\samsung
[2012-04-27 22:23:29 | 000,013,800 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ssadwh.sys
[2012-04-27 22:21:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
[2012-04-27 22:21:44 | 004,659,712 | ---- | C] (Dmitry Streblechenko) -- C:\Windows\SysWow64\Redemption.dll
[2012-04-27 22:21:36 | 000,821,824 | ---- | C] (Devguru Co., Ltd.) -- C:\Windows\SysWow64\dgderapi.dll
[2012-04-27 22:21:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MarkAny
[2012-04-27 22:20:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Samsung
[2012-04-27 22:20:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Samsung
[2012-04-27 22:19:19 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Local\Downloaded Installations
[2012-04-21 20:16:08 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Local\APN
[2012-04-19 15:12:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Teleport Pro
[2012-04-19 15:12:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Teleport Pro
[2012-04-12 05:27:08 | 000,069,640 | ---- | C] (Nalpeiron Ltd.) -- C:\Windows\SysWow64\NLSSRV32.EXE
[2012-03-31 20:48:06 | 000,000,000 | ---D | C] -- C:\Users\alex\Documents\MATLAB
[2012-03-31 20:47:51 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\MathWorks
[2012-03-31 20:44:47 | 001,077,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSCOMCTL.OCX
[2012-03-31 20:44:47 | 000,407,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSHFLXGD.OCX
[2012-03-31 20:44:47 | 000,203,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RICHTX32.OCX
[2012-03-31 14:51:32 | 000,000,000 | ---D | C] -- C:\Program Files\MATLAB
[2012-03-31 14:33:36 | 000,000,000 | ---D | C] -- C:\Users\alex\AppData\Roaming\DAEMON Tools Lite
[2012-03-31 14:33:34 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2012-03-31 14:18:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Alcohol Soft
[2012-03-31 14:04:25 | 000,564,792 | ---- | C] (Duplex Secure Ltd.) -- C:\Windows\SysNative\drivers\sptd.sys
[2012-03-31 14:03:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Franzis

[color=#E56717]========== Files - Modified Within 90 Days ==========[/color]

[2012-06-28 17:01:31 | 000,018,656 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012-06-28 17:01:31 | 000,018,656 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012-06-28 16:52:06 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-06-28 16:52:00 | 3148,419,072 | -HS- | M] () -- C:\hiberfil.sys
[2012-06-28 16:21:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012-06-28 15:51:35 | 001,674,538 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012-06-28 15:51:35 | 000,742,088 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2012-06-28 15:51:35 | 000,655,904 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012-06-28 15:51:35 | 000,156,760 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2012-06-28 15:51:35 | 000,122,638 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012-06-24 12:50:53 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2012-06-24 00:21:45 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012-06-24 00:21:45 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012-06-18 18:31:42 | 000,075,776 | ---- | M] () -- C:\Windows\cadkasdeinst01e.exe
[2012-06-14 10:42:25 | 000,001,347 | ---- | M] () -- C:\Users\alex\Desktop\MATLAB.lnk
[2012-06-12 12:13:30 | 000,002,340 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2012-06-10 12:12:46 | 000,001,010 | ---- | M] () -- C:\Users\alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2012-05-31 15:22:36 | 000,001,069 | ---- | M] () -- C:\Users\alex\Desktop\Wolfram Mathematica 8.lnk
[2012-05-30 21:08:12 | 005,759,352 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012-05-30 00:47:54 | 000,002,340 | ---- | M] () -- C:\Users\alex\Desktop\Google Chrome.lnk
[2012-05-29 16:36:53 | 000,007,605 | ---- | M] () -- C:\Users\alex\AppData\Local\Resmon.ResmonCfg
[2012-05-26 18:33:56 | 000,000,600 | ---- | M] () -- C:\Users\alex\AppData\Roaming\winscp.rnd
[2012-05-26 17:38:26 | 000,001,628 | ---- | M] () -- C:\Users\Public\Desktop\IntelliCAD Standard 3.3 EDU.lnk
[2012-05-13 01:09:34 | 000,001,122 | ---- | M] () -- C:\Users\alex\Desktop\EVEREST Ultimate Edition.lnk
[2012-05-12 20:58:06 | 000,002,102 | ---- | M] () -- C:\Users\Public\Desktop\AutoCAD 2012 - English.lnk
[2012-05-12 20:44:04 | 000,002,069 | ---- | M] () -- C:\Users\Public\Desktop\Inventor Fusion 2012.lnk
[2012-05-12 20:39:15 | 000,000,153 | ---- | M] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2012-05-12 20:33:23 | 001,650,804 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012-05-12 15:29:58 | 000,002,086 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
[2012-05-07 15:34:09 | 000,002,059 | ---- | M] () -- C:\Users\Public\Desktop\Nitro Pro 7.lnk
[2012-05-02 22:07:28 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ssadadb_01005.Wdf
[2012-05-02 21:46:54 | 000,002,212 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2012-04-28 15:28:33 | 000,000,443 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts.ics
[2012-04-27 23:01:27 | 000,001,953 | ---- | M] () -- C:\Users\Public\Desktop\Samsung Kies.lnk
[2012-04-19 15:17:56 | 000,000,103 | ---- | M] () -- C:\Windows\pro.INI
[2012-04-19 15:13:52 | 000,005,287 | ---- | M] () -- C:\Users\alex\Documents\lodz.tpp
[2012-04-12 05:27:08 | 000,069,640 | ---- | M] (Nalpeiron Ltd.) -- C:\Windows\SysWow64\NLSSRV32.EXE
[2012-04-12 05:26:26 | 000,017,928 | ---- | M] (Nitro PDF Software) -- C:\Windows\SysNative\nitrolocalui2.dll
[2012-04-11 22:55:10 | 000,029,712 | ---- | M] (Nitro PDF Software) -- C:\Windows\SysNative\nitrolocalmon2.dll
[2012-03-31 14:35:54 | 000,564,792 | ---- | M] (Duplex Secure Ltd.) -- C:\Windows\SysNative\drivers\sptd.sys

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2012-06-28 16:58:27 | 124,203,285 | ---- | C] () -- C:\Users\alex\Desktop\Desktop.rar
[2012-06-24 12:50:53 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2012-06-18 18:31:42 | 000,075,776 | ---- | C] () -- C:\Windows\cadkasdeinst01e.exe
[2012-05-30 00:47:54 | 000,002,340 | ---- | C] () -- C:\Users\alex\Desktop\Google Chrome.lnk
[2012-05-29 16:36:53 | 000,007,605 | ---- | C] () -- C:\Users\alex\AppData\Local\Resmon.ResmonCfg
[2012-05-29 16:33:21 | 000,001,069 | ---- | C] () -- C:\Users\alex\Desktop\Wolfram Mathematica 8.lnk
[2012-05-26 18:33:44 | 000,000,600 | ---- | C] () -- C:\Users\alex\AppData\Roaming\winscp.rnd
[2012-05-26 17:38:26 | 000,001,628 | ---- | C] () -- C:\Users\Public\Desktop\IntelliCAD Standard 3.3 EDU.lnk
[2012-05-22 19:40:21 | 000,001,347 | ---- | C] () -- C:\Users\alex\Desktop\MATLAB.lnk
[2012-05-15 22:22:54 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\ltserial.dll
[2012-05-13 01:09:34 | 000,001,122 | ---- | C] () -- C:\Users\alex\Desktop\EVEREST Ultimate Edition.lnk
[2012-05-12 20:44:04 | 000,002,069 | ---- | C] () -- C:\Users\Public\Desktop\Inventor Fusion 2012.lnk
[2012-05-12 20:39:15 | 000,000,153 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2012-05-12 20:38:24 | 000,002,102 | ---- | C] () -- C:\Users\Public\Desktop\AutoCAD 2012 - English.lnk
[2012-05-12 20:31:30 | 001,650,804 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012-05-12 15:29:57 | 000,002,098 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
[2012-05-12 15:29:57 | 000,002,086 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
[2012-05-07 15:34:09 | 000,002,557 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro Pro 7.lnk
[2012-05-07 15:34:09 | 000,002,059 | ---- | C] () -- C:\Users\Public\Desktop\Nitro Pro 7.lnk
[2012-05-06 18:20:00 | 000,000,545 | ---- | C] () -- C:\Windows\UC.PIF
[2012-05-06 18:20:00 | 000,000,545 | ---- | C] () -- C:\Windows\RAR.PIF
[2012-05-06 18:20:00 | 000,000,545 | ---- | C] () -- C:\Windows\PKZIP.PIF
[2012-05-06 18:20:00 | 000,000,545 | ---- | C] () -- C:\Windows\PKUNZIP.PIF
[2012-05-06 18:20:00 | 000,000,545 | ---- | C] () -- C:\Windows\NOCLOSE.PIF
[2012-05-06 18:20:00 | 000,000,545 | ---- | C] () -- C:\Windows\LHA.PIF
[2012-05-06 18:20:00 | 000,000,545 | ---- | C] () -- C:\Windows\ARJ.PIF
[2012-05-06 16:44:22 | 000,000,930 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012-05-02 22:07:28 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ssadadb_01005.Wdf
[2012-05-02 21:46:54 | 000,002,212 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2012-04-27 23:01:27 | 000,001,953 | ---- | C] () -- C:\Users\Public\Desktop\Samsung Kies.lnk
[2012-04-19 15:17:23 | 000,000,103 | ---- | C] () -- C:\Windows\pro.INI
[2012-04-19 15:13:44 | 000,005,287 | ---- | C] () -- C:\Users\alex\Documents\lodz.tpp
[2012-03-28 22:11:08 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe
[2012-03-28 22:11:06 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll
[2012-03-28 22:11:06 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2012-03-28 22:11:06 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2012-03-28 22:11:06 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll
[2012-01-30 19:53:03 | 000,001,024 | ---- | C] () -- C:\Windows\SysWow64\encryptpdf.dat
[2012-01-28 23:44:48 | 000,003,584 | ---- | C] () -- C:\Users\alex\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-01-28 22:52:13 | 000,000,412 | ---- | C] () -- C:\Windows\ODBC.INI
[2011-10-19 12:53:09 | 000,083,229 | ---- | C] () -- C:\Users\alex\neostrada_990696156611.pdf
[2011-10-19 10:19:00 | 000,001,131 | ---- | C] () -- C:\Users\alex\umk.cer
[2011-10-19 10:18:38 | 000,024,706 | ---- | C] () -- C:\Users\alex\vista.htm
[2011-09-03 22:32:20 | 003,097,252 | ---- | C] () -- C:\Users\alex\GE620_Polish.pdf
[2011-08-11 23:44:20 | 000,000,411 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2011-08-11 23:44:20 | 000,000,034 | ---- | C] () -- C:\Windows\SysWow64\BD7030.DAT
[2011-01-27 08:55:20 | 000,960,940 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin
[2011-01-27 08:55:20 | 000,213,332 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin
[2011-01-27 08:55:20 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin

[color=#E56717]========== LOP Check ==========[/color]

[2011-07-13 10:49:38 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\.wtw
[2011-09-03 21:34:00 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\Ashampoo
[2012-05-29 16:15:40 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\Autodesk
[2012-05-15 13:47:55 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\BESTplayer
[2012-06-18 18:31:48 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\CAD-KAS
[2012-03-31 14:45:30 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\DAEMON Tools Lite
[2012-05-07 15:31:48 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\Downloaded Installations
[2012-06-28 16:55:16 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\Dropbox
[2012-06-28 01:23:12 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\foobar2000
[2012-05-06 18:20:00 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\GHISLER
[2012-03-12 19:59:28 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\ipla
[2012-06-18 18:17:54 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\Nitro PDF
[2012-02-18 00:04:19 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\Notepad++
[2011-07-13 17:38:15 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\OpenOffice.org
[2012-04-28 11:31:42 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\Samsung
[2012-06-28 16:57:23 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\Software Informer
[2011-07-27 19:32:14 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\Sony
[2012-05-02 23:00:02 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\Temp
[2012-05-12 15:32:22 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\Thunderbird
[2012-06-28 16:44:19 | 000,000,000 | ---D | M] -- C:\Users\alex\AppData\Roaming\uTorrent
[2012-06-06 15:58:07 | 000,000,000 | ---D | M] -- C:\Users\Gość\AppData\Roaming\ipla
[2012-06-06 15:57:59 | 000,000,000 | ---D | M] -- C:\Users\Gość\AppData\Roaming\Software Informer
[2012-06-06 15:46:54 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

[color=#E56717]========== Purity Check ==========[/color]



< End of report >


Extras:

Kod: Zaznacz wszystko

OTL Extras logfile created on: 2012-06-28 16:57:54 - Run 2
OTL by OldTimer - Version 3.2.53.0     Folder = C:\Users\alex\Desktop\Komputer\Antywirus
64bit- Professional  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

3,91 Gb Total Physical Memory | 2,30 Gb Available Physical Memory | 58,90% Memory free
7,82 Gb Paging File | 6,18 Gb Available in Paging File | 79,09% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 58,57 Gb Total Space | 3,93 Gb Free Space | 6,70% Space Free | Partition Type: NTFS
Drive E: | 50,00 Gb Total Space | 45,03 Gb Free Space | 90,06% Space Free | Partition Type: NTFS
Drive J: | 100,00 Gb Total Space | 93,48 Gb Free Space | 93,48% Space Free | Partition Type: NTFS
Drive K: | 100,00 Gb Total Space | 85,69 Gb Free Space | 85,69% Space Free | Partition Type: NTFS
Drive L: | 157,19 Gb Total Space | 111,30 Gb Free Space | 70,81% Space Free | Partition Type: NTFS

Computer Name: ALEX-KOMPUTER | User Name: alex | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 90 Days

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]


[color=#E56717]========== File Associations ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.scr [@ = Icad.load.scr] -- Reg Error: Key error. File not found

[HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1001\SOFTWARE\Classes\<extension>]
.scr [@ = Icad.load.scr] -- Reg Error: Key error. File not found

[color=#E56717]========== Shell Spawning ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- E:\Program Files (x86)\After Effects\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- E:\Program Files (x86)\After Effects\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[color=#E56717]========== Security Center Settings ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

[color=#E56717]========== Firewall Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[color=#E56717]========== Authorized Applications List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

[color=#E56717]========== Vista Active Application Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0B5F1A60-D02F-497A-95E6-FE5B0215A806}" = dir=in | app=c:\users\alex\appdata\local\facebook\video\skype\facebookvideocalling.exe |
"{1D4C6670-78CF-4458-8304-14F784373C6D}" = protocol=17 | dir=in | app=c:\windows\syswow64\muzapp.exe |
"{497B26D6-E7C0-4AA8-9E5F-E36519A8A0CE}" = protocol=6 | dir=in | app=c:\program files (x86)\veetle\player\veetlenet.exe |
"{54C51B0D-7E9D-42FC-8A17-F3AE8A633DC3}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{59A4E84F-5022-4F83-A1E8-621FFF88606E}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 |
"{62930973-4CE8-40DF-9658-91F1E9F63E2E}" = protocol=17 | dir=in | app=c:\program files (x86)\sony ericsson\update service\update service.exe |
"{634A161A-5D0D-4755-AD64-9F3581F7E52A}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{7E8CDB3E-DF49-4F88-9C3D-25D194D2195C}" = protocol=58 | dir=in | app=system |
"{7F8705A7-C394-4AC7-9E99-FB7E8413E7F6}" = protocol=6 | dir=in | app=c:\program files (x86)\sony ericsson\update service\update service.exe |
"{84859118-8DFB-45B7-A6E0-5F54341B71CE}" = protocol=6 | dir=in | app=c:\program files\k2t\wtw\wtw.exe |
"{86D51A14-8786-46F3-93F4-F5A9CF931A49}" = protocol=17 | dir=in | app=c:\program files\k2t\wtw\wtw.exe |
"{C6753764-8A8D-4332-A279-4BE69C71F049}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{DC624FA7-D850-44F9-BAAC-51747BA546B4}" = protocol=6 | dir=in | app=c:\program files (x86)\sony ericsson\update engine\sony ericsson update engine.exe |
"{DECF1D6C-4B4A-4FD7-BEC9-EE308563E230}" = protocol=6 | dir=in | app=c:\windows\syswow64\muzapp.exe |
"{F2EEBAAF-812C-4658-936D-0D5D5916779A}" = protocol=17 | dir=in | app=c:\program files (x86)\sony ericsson\update engine\sony ericsson update engine.exe |
"{F302B0A3-D987-4DE4-9168-7CE629E2A210}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{FD8F7BA0-48F5-49A1-9144-1588895F21E9}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"TCP Query User{9BB64DF7-2756-41F9-A24F-0ECAEDBDFC0F}C:\program files (x86)\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"TCP Query User{9EE60719-6250-4F8B-A116-549BD0A1952D}C:\program files (x86)\shoutcast\sc_serv.exe" = protocol=6 | dir=in | app=c:\program files (x86)\shoutcast\sc_serv.exe |
"TCP Query User{D1965123-0A85-4FE2-B1E9-894DA9DCB2F0}C:\program files (x86)\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files (x86)\google\google earth\client\googleearth.exe |
"TCP Query User{E6691124-BF44-4144-909F-529AA86E3538}C:\program files (x86)\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files (x86)\google\google earth\plugin\geplugin.exe |
"UDP Query User{39C97729-304D-4E78-AC01-593799DFCABF}C:\program files (x86)\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
"UDP Query User{565E42BC-2B5C-417C-B6D8-7186F753DF87}C:\program files (x86)\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files (x86)\google\google earth\plugin\geplugin.exe |
"UDP Query User{A198BB79-A3A6-4FCC-B174-4306FFC481C6}C:\program files (x86)\shoutcast\sc_serv.exe" = protocol=17 | dir=in | app=c:\program files (x86)\shoutcast\sc_serv.exe |
"UDP Query User{B9F165E7-4B78-44E0-9CE6-EEE570E04AD2}C:\program files (x86)\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files (x86)\google\google earth\client\googleearth.exe |

[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1DF5019A-68B5-4ba1-8E59-E185C7B7FF11}" = Komunikator WTW 0.9.10.3377
"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64
"{2078180F-0C60-11E0-8A9C-0013D3D69929}" = MSVCRT Redists
"{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition)
"{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1" = Media Player Classic - Home Cinema v1.5.2.3456 x64
"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5783F2D7-A001-0409-0102-0060B0CE6BBA}" = AutoCAD 2012 - English
"{5783F2D7-A001-0409-1102-0060B0CE6BBA}" = AutoCAD 2012 Language Pack - English
"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{8E5DA9A6-7A9F-3A6F-BC5C-D6CBCA6A29C7}" = Microsoft .NET Framework 4 Extended PLK Language Pack
"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64
"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64
"{A49402DD-2781-3782-B0CF-52BDA349E3F3}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 268.12
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 268.12
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.0.22
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64
"{C9608300-11F5-11E0-A64B-0013D3D69929}" = MSVCRT Redists
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{E552C39C-C70E-464F-9733-8311331BDD90}" = Autodesk Inventor Fusion plug-in language pack for AutoCAD 2012
"{EAB3AC1A-68FF-486B-9C6B-E48EBB4B05CC}" = Autodesk Inventor Fusion plug-in for AutoCAD 2012
"{EFA0B23D-4474-4962-B443-C806EB5ED29C}" = Nitro Pro 7
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FFF5619F-6669-4EC5-A85E-9994F70A9E5D}" = Autodesk Inventor Fusion 2012
"{FFF7F80F-929E-497F-A112-B070DE816128}" = Autodesk Inventor Fusion 2012 Language Pack
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit
"AutoCAD 2012 - English" = AutoCAD 2012 - English
"Autodesk Inventor Fusion 2012" = Autodesk Inventor Fusion 2012
"Autodesk Inventor Fusion plug-in for AutoCAD 2012" = Autodesk Inventor Fusion plug-in for AutoCAD 2012
"A-WIN-Extras 8.0.1 2063897_is1" = Mathematica Extras 8.0 (2063897)
"Matlab R2012a" = MATLAB R2012a
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended
"M-WIN-L 8.0.1 2063990_is1" = Wolfram Mathematica 8 (M-WIN-L 8.0.1 2063990)
"Recuva" = Recuva
"WinRAR archiver" = WinRAR 4.01 (64-bitowy)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0046FA01-C5B9-4985-BACB-398DC480FC05}" = Adobe Photoshop CS3
"{00ED627E-F3DC-455E-ACA6-E6B6D917DFC1}" = S-Bar
"{0141D498-16DA-4221-A529-1D7A64BE8B05}" = OpenOffice.org 3.3
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3
"{086F9A69-CD39-4893-A9FB-D3A0634CE3F7}" = Autodesk Content Service
"{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{28E82311-8616-11E1-BEB0-B8AC6F97B88E}" = Google Earth
"{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{51846830-E7B2-4218-8968-B77F0FF475B8}" = Adobe Color EU Extra Settings
"{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3
"{62BBB2F0-E220-4821-A564-730807D2C34D}" = Realtek USB 2.0 Reader Driver
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{65420DC9-306E-4371-905F-F4DC3B418E52}" = Autodesk Material Library Base Resolution Image Library 2012
"{662CFD19-EA80-4EFE-A0D8-EE10EFEB3C83}" = Livestream Procaster
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6ABE0BEE-D572-4FE8-B434-9E72A289431B}" = Adobe Fonts All
"{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{7CAC6A44-C3DE-4153-ACA6-7524602C789E}" = Facebook Video Calling 1.2.0.159
"{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3
"{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}" = Adobe Type Support
"{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}" = Autodesk Material Library 2012
"{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{94DE7548-E449-4F7D-804F-0C5CDC3A1E6A}" = EasyFace2
"{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}" = FARO LS 1.1.406.58
"{95655ED4-7CA5-46DF-907F-7144877A32E5}" = Adobe Color NA Recommended Settings
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3
"{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}" = Adobe CMaps
"{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific
"{A912021A-FEDD-4DA3-8DB4-245EBDA84778}" = OriginPro 8
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}" = PDF Settings
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.0)
"{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0
"{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}" = Adobe Default Language CS3
"{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2
"{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D1BB4446-AE9C-4256-9A7F-4D46604D2462}" = Adobe Setup
"{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}" = Adobe PDF Library Files
"{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}" = GTA San Andreas
"{D7452A01-9BF9-4FFD-8B2E-650F713AE099}" = Origin8
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DA1B174B-4297-467C-9EF8-0AB8D4D5171E}" = Adobe After Effects CS5
"{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}" = Adobe Color Common Settings
"{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}" = Adobe Color JA Extra Settings
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3
"{e7394a0f-3f80-45b1-87fc-abcd51893246}" = Python 2.6.4
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony Ericsson PC Companion 2.02.015
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FDB3B167-F4FA-461D-976F-286304A57B2A}" = Adobe AIR
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe_2ac78060bc5856b0c1cf873bb919b58" = Adobe Photoshop CS3
"Ashampoo Burning Studio Elements_is1" = Ashampoo Burning Studio Elements 10.0.9
"ASIO4ALL" = ASIO4ALL
"Audacity_is1" = Audacity 1.2.6
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"Counter-Strike 1.6" = Counter-Strike 1.6
"Drumaxx" = Drumaxx
"EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.50
"FL Studio 9.6" = FL Studio 9.6
"foobar2000" = foobar2000 v1.1.7
"Google Chrome" = Google Chrome
"Hardcore" = Hardcore
"IL Download Manager" = IL Download Manager
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"INTERsoft IntelliCAD Standard Edition v.3.3" = INTERsoft IntelliCAD Standard Edition v.3.3
"ipla" = ipla 2.3.5
"LastFM_is1" = Last.fm 1.5.4.27091
"Mobile Partner" = Mobile Partner
"Mozilla Firefox 13.0.1 (x86 pl)" = Mozilla Firefox 13.0.1 (x86 pl)
"Mozilla Thunderbird 12.0.1 (x86 pl)" = Mozilla Thunderbird 12.0.1 (x86 pl)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Notepad++" = Notepad++
"Omnius for SE" = Omnius for SE v0.33
"PoiZone" = PoiZone
"qt7lite_is1" = QT Lite 2.8.0
"Sakura" = Sakura
"Sawer" = Sawer
"SCDNAS" = SHOUTcast DNAS (remove only)
"SciDAVis" = SciDAVis 0.2.4
"SecureW2 EAP Suite" = SecureW2 EAP Suite 1.1.3 for Windows
"Software Informer_is1" = Software Informer 1.1
"Totalcmd" = Total Commander (Remove or Repair)
"Toxic Biohazard" = Toxic Biohazard
"Ultimate Unlocker" = D-Ultimate Unlocker
"Update Engine" = Sony Ericsson Update Engine
"Update Service" = Sony Ericsson Update Service
"Veetle TV" = Veetle TV
"vShare.tv plugin" = vShare.tv plugin 1.3
"Winamp" = Winamp
"winscp3_is1" = WinSCP 4.2.1 beta

[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

[HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"CodeBlocks" = CodeBlocks
"Dropbox" = Dropbox
"pdfsam" = pdfsam

[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]

[HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox

[color=#E56717]========== Last 20 Event Log Errors ==========[/color]

[ Application Events ]
Error - 2012-06-28 07:43:22 | Computer Name = alex-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Windows\system32\conhost.exe".
Nie
można odnaleźć zestawu zależnego Microsoft.Windows.SystemCompatible,processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.7600.16823".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2012-06-28 08:21:00 | Computer Name = alex-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Windows\system32\conhost.exe".
Nie
można odnaleźć zestawu zależnego Microsoft.Windows.SystemCompatible,processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.7600.16823".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2012-06-28 09:21:00 | Computer Name = alex-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Windows\system32\conhost.exe".
Nie
można odnaleźć zestawu zależnego Microsoft.Windows.SystemCompatible,processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.7600.16823".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2012-06-28 10:21:00 | Computer Name = alex-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Windows\system32\conhost.exe".
Nie
można odnaleźć zestawu zależnego Microsoft.Windows.SystemCompatible,processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.7600.16823".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2012-06-28 10:43:57 | Computer Name = alex-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Windows\system32\conhost.exe".
Nie
można odnaleźć zestawu zależnego Microsoft.Windows.SystemCompatible,processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.7600.16823".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2012-06-28 10:44:19 | Computer Name = alex-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Windows\system32\conhost.exe".
Nie
można odnaleźć zestawu zależnego Microsoft.Windows.SystemCompatible,processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.7600.16823".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2012-06-28 10:44:53 | Computer Name = alex-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Windows\system32\conhost.exe".
Nie
można odnaleźć zestawu zależnego Microsoft.Windows.SystemCompatible,processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.7600.16823".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2012-06-28 10:45:00 | Computer Name = alex-Komputer | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: iexplore.exe, wersja: 8.0.7600.16800,
sygnatura czasowa: 0x4db1bf6e  Nazwa modułu powodującego błąd: ole32.dll, wersja:
6.1.7600.16624, sygnatura czasowa: 0x4c297c56  Kod wyjątku: 0xc0000005  Przesunięcie
błędu: 0x0001e0b3  Identyfikator procesu powodującego błąd: 0xe20  Godzina uruchomienia
aplikacji powodującej błąd: 0x01cd553c94a235f5  Ścieżka aplikacji powodującej błąd:
C:\Program Files (x86)\Internet Explorer\iexplore.exe  Ścieżka modułu powodującego
błąd: C:\Windows\syswow64\ole32.dll  Identyfikator raportu: d5c1df5b-c12f-11e1-8c17-fc7f41323a0e

Error - 2012-06-28 10:55:04 | Computer Name = alex-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Windows\system32\conhost.exe".
Nie
można odnaleźć zestawu zależnego Microsoft.Windows.SystemCompatible,processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.7600.16823".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

Error - 2012-06-28 10:55:31 | Computer Name = alex-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Windows\system32\conhost.exe".
Nie
można odnaleźć zestawu zależnego Microsoft.Windows.SystemCompatible,processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.7600.16823".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.

[ System Events ]
Error - 2012-06-20 05:05:01 | Computer Name = alex-Komputer | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 01:56:55 na ?2012-?06-?20 było
nieoczekiwane.

Error - 2012-06-20 06:28:20 | Computer Name = alex-Komputer | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 12:24:50 na ?2012-?06-?20 było
nieoczekiwane.

Error - 2012-06-23 08:07:38 | Computer Name = alex-Komputer | Source = volsnap | ID = 393252
Description = Wykonywanie kopii w tle woluminu C: zostało przerwane, ponieważ nie
można powiększyć magazynu kopii w tle z powodu limitu wprowadzonego przez użytkownika.

Error - 2012-06-24 06:49:47 | Computer Name = alex-Komputer | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 02:04:30 na ?2012-?06-?24 było
nieoczekiwane.

Error - 2012-06-25 09:25:35 | Computer Name = alex-Komputer | Source = Service Control Manager | ID = 7034
Description = Usługa Usługa Google Update (gupdate) niespodziewanie zakończyła pracę.
Wystąpiło to razy: 1.

Error - 2012-06-25 09:26:04 | Computer Name = alex-Komputer | Source = DCOM | ID = 10010
Description =

Error - 2012-06-25 10:03:23 | Computer Name = alex-Komputer | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 16:00:52 na ?2012-?06-?25 było
nieoczekiwane.

Error - 2012-06-27 06:17:36 | Computer Name = alex-Komputer | Source = Service Control Manager | ID = 7034
Description = Usługa Usługa Google Update (gupdate) niespodziewanie zakończyła pracę.
Wystąpiło to razy: 1.

Error - 2012-06-27 06:18:06 | Computer Name = alex-Komputer | Source = DCOM | ID = 10010
Description =

Error - 2012-06-28 05:01:36 | Computer Name = alex-Komputer | Source = Service Control Manager | ID = 7011
Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na odpowiedź transakcji
z usługi Wlansvc.


< End of report >


[defacto19]

Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:

:OTL
MOD - [2012-04-28 11:54:59 | 000,115,137 | ---- | M] () -- C:\Users\alex\AppData\Local\Temp\bd7c47bb-f5c0-417c-a180-ec348d87718a\CliSecureRT.dll
O4 - HKLM..\Run: [BEWINTERNET-PL-IEWSessionManager] "C:\Program Files (x86)\OrangeBS\BEWInternet-PL-IEW\SessionManager\SessionManager.exe" File not found
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1000..\Run: [AdobeBridge] File not found
O4 - HKU\S-1-5-21-2527288125-292897534-329591378-1000..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED File not found

:Commands
[emptytemp]

Kliknij Wykonaj skrypt. Zatwierdź restart komputera. Następnie uruchom OTL ponownie i użyj opcji sprzątanie.


zastosuj AdwCleaner z opcji Delete.
http://general-changelog-team.fr/fr/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner

Dodatkowo Przeczyść dysk i rejestr CCleaner`em
http://www.piriform.com/CCLEANER

[AragornXT]

Kod: Zaznacz wszystko

All processes killed
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\BEWINTERNET-PL-IEWSessionManager deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2527288125-292897534-329591378-1000\Software\Microsoft\Windows\CurrentVersion\Run\\uTorrent deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: alex
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 263505 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 33939220 bytes
->Google Chrome cache emptied: 6872463 bytes
->Flash cache emptied: 1334 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Gość
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 608 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 39,00 mb


OTL by OldTimer - Version 3.2.53.0 log created on 06282012_181912

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...


Dodano 28.06.2012 17:32:54:

Kod: Zaznacz wszystko

# AdwCleaner v1.700 - Logfile created 06/28/2012 at 18:24:45
# Updated 26/06/2012 by Xplode
# Operating system : Windows 7 Professional  (64 bits)
# User : alex - ALEX-KOMPUTER
# Running from : C:\Users\alex\Desktop\Komputer\Antywirus\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Folder Deleted : C:\Users\alex\AppData\Local\APN
Folder Deleted : C:\Users\alex\AppData\Local\TempDir
Folder Deleted : C:\Users\alex\AppData\Local\Temp\AskSearch
Folder Deleted : C:\Users\alex\AppData\Local\Temp\OpenCandy
Folder Deleted : C:\Users\Gość\AppData\LocalLow\AskToolbar
Folder Deleted : C:\Program Files (x86)\RelevantKnowledge
Folder Deleted : C:\Program Files (x86)\vShare.tv plugin

***** [Registry] *****

Key Deleted : HKCU\Software\StartSearch
Key Deleted : HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncher.1
Key Deleted : HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncher
Key Deleted : HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncherBHO.1
Key Deleted : HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncherBHO

***** [Registre - GUID] *****

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3D782BB2-F2A5-11D3-BF4C-000000000000}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{79D60450-56C5-4A8C-9321-6D5BC2A81E5A}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{99C22A61-21BA-4F81-85FF-CDC9EB5DB10B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{BB7256DD-EBA9-480B-8441-A00388C2BEC3}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3D782BB2-F2A5-11D3-BF4C-000000000000}
[x64] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.7600.16385

[OK] Registry is clean.

-\\ Mozilla Firefox v13.0.1 (pl)

Profile name : default
File : C:\Users\alex\AppData\Roaming\Mozilla\Firefox\Profiles\y61ym9mu.default\prefs.js

Deleted : user_pref("vshare.install.fresh", "true");

Profile name : default
File : C:\Users\Gość\AppData\Roaming\Mozilla\Firefox\Profiles\40nc3xw3.default\prefs.js

Deleted : user_pref("browser.search.defaultengine", "Ask.com");
Deleted : user_pref("browser.search.defaultenginename", "Ask.com");
Deleted : user_pref("browser.search.order.1", "Ask.com");
Deleted : user_pref("browser.search.selectedEngine", "Ask.com");
Deleted : user_pref("browser.startup.homepage", "hxxp://www.ask.com/?l=dis&o=15003");
Deleted : user_pref("extensions.asktb.ff-original-keyword-url", "");

-\\ Google Chrome v19.0.1084.56

File : C:\Users\alex\AppData\Local\Google\Chrome\User Data\Default\Preferences

Deleted :       "homepage": "hxxp://startsear.ch/?aff=1&cf=d9f13a17-357e-11e1-9117-6c626d317bd3",
Deleted :          "urls_to_restore_on_startup": [ "hxxp://startsear.ch/?aff=1&cf=d9f13a17-357e-11e1-9117-6c62[...]
Deleted :       "keyword": "startsear.ch",
Deleted :       "name": "Web Search",
Deleted :       "search_url": "hxxp://startsear.ch/?aff=1&src=sp&cf=d9f13a17-357e-11e1-9117-6c626d317bd3&q={se[...]
Deleted :                "description": "vshare.tv plugin",
Deleted :                "name": "vshare plugin",
Deleted :                   "path": "chvsharetvplg.dll",
Deleted :    "homepage": "hxxp://startsear.ch/?aff=1&cf=d9f13a17-357e-11e1-9117-6c626d317bd3",
Deleted :          "name": "Winamp Application Detector",
Deleted :          "name": "Winamp Application Detector"
Deleted :       "urls_to_restore_on_startup": [ "hxxp://startsear.ch/?aff=1&cf=d9f13a17-357e-11e1-9117-6c626d3[...]

File : C:\Users\Gość\AppData\Local\Google\Chrome\User Data\Default\Preferences

Deleted :                "description": "vshare.tv plugin",
Deleted :                "name": "vshare plugin",
Deleted :                   "path": "chvsharetvplg.dll",
Deleted :          "name": "Winamp Application Detector",
Deleted :          "name": "Winamp Application Detector"

*************************

AdwCleaner[S1].txt - [6158 octets] - [28/06/2012 18:24:45]

########## EOF - C:\AdwCleaner[S1].txt - [6286 octets] ##########


[defacto19]

Wszystko pomyślnie się wykonało. To by było wszystko z mojej strony.

Autor postu otrzymał pochwałę