OTL:
http://www.wklej.org/id/665545/
Extras:
http://www.wklej.org/id/665548/
GMER:
http://www.wklej.org/id/665552/
Z góry dzięki za wszelką pomoc!
Aktualizacje na programosy.pl:
Chromium • Kaspersky Rescue Disk • Vim • Microsoft OneNote • Draco Organizer • UserBenchMark • VDownloader • WebCatalog • SmartFTP
-
- Ogłoszenie:
Niemożność zalogowania się do origin - infekcja?
7 posty(ów) • Strona 1 z 1
Niemożność zalogowania się do origin - infekcja?
przez ziooMuś 10 Sty 2012, 21:40
OTL:
http://www.wklej.org/id/665545/
Extras:
http://www.wklej.org/id/665548/
GMER:
http://www.wklej.org/id/665552/
Z góry dzięki za wszelką pomoc!
Grafika to moja pasja 
-
ziooMuś - ~user
- Posty: 659
- Dołączenie: 06 Maj 2007, 17:04
- Miejscowość: Płock
- Pochwały: 20
Niemożność zalogowania się do origin - infekcja?
przez wojtas 10 Sty 2012, 22:41
log z Gmera robiony w nieodpowiednich warunkach :
działają te pliki, czy wszystkie programy emulujące odinstalowałeś i potem reset?
odinstaluj : QuickStores-Toolbar 1.1.0, Spybot - Search & Destroy
Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:
Kliknij wykonaj skrypt. I potwierdź reset komputera .
Użyj >Ad-Remover i kliknij w nim Clean (uruchom z prawokliku "jako Administrator)
Pokaż raport z niego
Następnie uruchamiasz OTL z opcją skanuj. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia (zawartość notatnika, która otworzy się po restarcie).
DRV - [2011-01-30 17:59:34 | 000,278,984 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2011-01-30 17:59:34 | 000,025,416 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
działają te pliki, czy wszystkie programy emulujące odinstalowałeś i potem reset?
odinstaluj : QuickStores-Toolbar 1.1.0, Spybot - Search & Destroy
Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:
:OTL
FF - prefs.js..browser.search.defaultenginename: "Web Search..."
FF - prefs.js..keyword.URL: "http://vshare.toolbarhome.com/search.aspx?srch=ku&q="
[2010-12-22 22:34:13 | 000,001,583 | ---- | M] () -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\j20f3zz9.default\searchplugins\web-search.xml
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found
O33 - MountPoints2\{0724dc8b-8465-11e0-9c9f-00ff01000001}\Shell\AutoRun\command - "" = SYSTEM\S-1-5-21-1482476501-1644491937-682003330-1013\system32.exe
O33 - MountPoints2\{0724dc8b-8465-11e0-9c9f-00ff01000001}\Shell\open\command - "" = SYSTEM\S-1-5-21-1482476501-1644491937-682003330-1013\system32.exe
[2011-12-25 15:25:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\AVG2012
[2011-12-25 15:17:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\AVG2012
[2011-12-25 15:16:59 | 000,000,000 | ---D | C] -- C:\Program Files\AVG
[2011-12-25 15:27:15 | 000,000,000 | -H-D | C] -- C:\$AVG
[2012-01-10 20:24:53 | 000,000,326 | ---- | M] () -- C:\WINDOWS\tasks\GlaryInitialize.job
[2011-09-19 19:51:07 | 000,000,010 | -HS- | C] () -- C:\Documents and Settings\Administrator\Dane aplikacji\date
[2011-09-19 19:51:07 | 000,000,002 | -HS- | C] () -- C:\Documents and Settings\Administrator\Dane aplikacji\evf6
[2011-12-25 15:25:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\AVG2012
:Commands
[resethosts]
[emptytemp]
[emptyflash]
Kliknij wykonaj skrypt. I potwierdź reset komputera .
Użyj >Ad-Remover i kliknij w nim Clean (uruchom z prawokliku "jako Administrator)
Pokaż raport z niego
Następnie uruchamiasz OTL z opcją skanuj. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia (zawartość notatnika, która otworzy się po restarcie).
-
wojtas - *mod
- Posty: 18165
- Dołączenie: 13 Sty 2006, 16:00
- Miejscowość: Krzeszyce
- Pochwały: 1656
Niemożność zalogowania się do origin - infekcja?
przez ziooMuś 10 Sty 2012, 22:59
Usunąłem wszystko co miałem, postępowałem według tych instrukcji na forum krok po kroku, nie wiem skąd to się mogło wziąć...
Raport z czyszczenia:
Program z Twojego linku nie działa, files not found, nie wiem czy dawać raport z OTLa znów czy podrzucisz działający link? Dzięki za pomoc.
Raport z czyszczenia:
- Kod: Zaznacz wszystko
All processes killed
========== OTL ==========
Prefs.js: "Web Search..." removed from browser.search.defaultenginename
Prefs.js: "http://vshare.toolbarhome.com/search.aspx?srch=ku&q=" removed from keyword.URL
C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\j20f3zz9.default\searchplugins\web-search.xml moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0724dc8b-8465-11e0-9c9f-00ff01000001}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0724dc8b-8465-11e0-9c9f-00ff01000001}\ not found.
File SYSTEM\S-1-5-21-1482476501-1644491937-682003330-1013\system32.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0724dc8b-8465-11e0-9c9f-00ff01000001}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0724dc8b-8465-11e0-9c9f-00ff01000001}\ not found.
File SYSTEM\S-1-5-21-1482476501-1644491937-682003330-1013\system32.exe not found.
C:\Documents and Settings\Administrator\Dane aplikacji\AVG2012\cfgall folder moved successfully.
C:\Documents and Settings\Administrator\Dane aplikacji\AVG2012 folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\AVG2012\scanlogs folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\AVG2012\log folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\AVG2012\IDS\quarantine folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\AVG2012\IDS\config folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\AVG2012\IDS folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\AVG2012\cfgall folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\AVG2012\Cfg folder moved successfully.
C:\Documents and Settings\All Users\Dane aplikacji\AVG2012 folder moved successfully.
C:\Program Files\AVG\AVG2012\awacs\speedtest\component folder moved successfully.
C:\Program Files\AVG\AVG2012\awacs\speedtest folder moved successfully.
C:\Program Files\AVG\AVG2012\awacs folder moved successfully.
C:\Program Files\AVG\AVG2012 folder moved successfully.
C:\Program Files\AVG folder moved successfully.
C:\$AVG\$VAULT folder moved successfully.
C:\$AVG folder moved successfully.
C:\WINDOWS\tasks\GlaryInitialize.job moved successfully.
C:\Documents and Settings\Administrator\Dane aplikacji\date moved successfully.
C:\Documents and Settings\Administrator\Dane aplikacji\evf6 moved successfully.
Folder C:\Documents and Settings\Administrator\Dane aplikacji\AVG2012\ not found.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
[EMPTYTEMP]
User: Administrator
->Temp folder emptied: 81262231 bytes
->Temporary Internet Files folder emptied: 7218270 bytes
->Java cache emptied: 8053380 bytes
->FireFox cache emptied: 101923206 bytes
->Google Chrome cache emptied: 7658688 bytes
->Opera cache emptied: 27101894 bytes
->Flash cache emptied: 11210 bytes
User: All Users
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 41620 bytes
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 41620 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1339662 bytes
%systemroot%\System32 .tmp files removed: 1621588 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 114792 bytes
RecycleBin emptied: 4730899529 bytes
Total Files Cleaned = 4 737,00 mb
[EMPTYFLASH]
User: Administrator
->Flash cache emptied: 0 bytes
User: All Users
User: Default User
->Flash cache emptied: 0 bytes
User: LocalService
User: NetworkService
User: UpdatusUser
->Flash cache emptied: 0 bytes
Total Flash Files Cleaned = 0,00 mb
OTL by OldTimer - Version 3.2.31.0 log created on 01102012_215356
Files\Folders moved on Reboot...
Registry entries deleted on Reboot...
Program z Twojego linku nie działa, files not found, nie wiem czy dawać raport z OTLa znów czy podrzucisz działający link? Dzięki za pomoc.
Grafika to moja pasja
-
ziooMuś - ~user
- Posty: 659
- Dołączenie: 06 Maj 2007, 17:04
- Miejscowość: Płock
- Pochwały: 20
-
Niemożność zalogowania się do origin - infekcja?
przez wojtas 10 Sty 2012, 23:22
http://security-domain.be/download/AD-Remover.html tu masz
-
wojtas - *mod
- Posty: 18165
- Dołączenie: 13 Sty 2006, 16:00
- Miejscowość: Krzeszyce
- Pochwały: 1656
-
Niemożność zalogowania się do origin - infekcja?
przez ziooMuś 11 Sty 2012, 00:16
Raport z czyszczenia:
OTL:
Extras:
Wojtas, solidny bowdown dla Ciebie plus duże piwo przy okazji, Origin po 3 tygodniach próby właśnie się włączył, aż nie wierzę. Może jeszcze napiszesz mi czym to mogło być mniej więcej spowodowane?
- Kod: Zaznacz wszystko
======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 =======
Updated by TeamXscript on 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
website: http://www.teamxscript.org
C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Launched at 23:05:11 on 10/01/2012, Normal boot
Microsoft Windows XP Professional Dodatek Service Pack 3 (X86)
Administrator@MICHA-0SYKH35PG ( )
============== ACTION(S) ==============
Folder deleted: C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\FireFox\Profiles\j20f3zz9.default\extensions\vshare@toolbar
(!) -- Temporary files deleted.
-- File opened: C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\FireFox\Profiles\j20f3zz9.default\Prefs.js --
Line deleted: user_pref("extensions.enabledItems", "{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.10,jqs@sun.com:1.0,...
Line deleted: user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"jqs@sun.com\":{...
Line deleted: user_pref("extensions.vshare@toolbar.update.enabled", false);
Line deleted: user_pref("vshare.install.date", "1292976000000");
Line deleted: user_pref("vshare.install.dumpFileCount", 0);
Line deleted: user_pref("vshare.install.dumpFileDisabled", false);
Line deleted: user_pref("vshare.install.finished", "1.0.2");
Line deleted: user_pref("vshare.install.guid", "{e93c0441-b492-4082-91aa-8d0e608c8dd4}");
Line deleted: user_pref("vshare.install.isDisabled", false);
Line deleted: user_pref("vshare.install.isHidden", true);
Line deleted: user_pref("vshare.install.istoolbarhp", true);
Line deleted: user_pref("vshare.install.istoolbarsearch", true);
Line deleted: user_pref("vshare.install.laststatreq", "1323043200000");
Line deleted: user_pref("vshare.install.newtab", true);
Line deleted: user_pref("vshare.install.overlayVersion", 1);
Line deleted: user_pref("vshare.install.userHPSettings", "hxxp://www.google.pl/");
Line deleted: user_pref("vshare.install.userSPSettings", "Google");
-- File closed --
Key deleted: HKLM\Software\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
============== ADDITIONNAL SCAN ==============
**** Mozilla Firefox Version [8.0.1 (pl)] ****
HKLM_MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf (x)
HKLM_MozillaPlugins\@ganymede/GanymedeNetPlugin,version=1.0 (x)
HKLM_MozillaPlugins\@pandonetworks.com/PandoWebPlugin (x)
HKLM_MozillaPlugins\Adobe Reader (x)
HKCU_MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf (x)
HKCU_MozillaPlugins\pandonetworks.com/PandoWebPlugin (x)
Searchplugins\allegro-pl.xml (hxxp://www.allegro.pl/search.php?string={searchTerms}&sourceid=Mozilla-search)
Searchplugins\fbc-pl.xml (hxxp://fbc.pionier.net.pl/owoc/results)
Searchplugins\merlin-pl.xml (hxxp://www.merlin.com.pl/frontend/search?sourceid=Mozilla-search&fraza={searchTerms}&skad=crhhxmkohb)
Searchplugins\pwn-pl.xml (hxxp://encyklopedia.pwn.pl/szukaj.php?co={searchTerms})
Searchplugins\wikipedia-pl.xml (hxxp://pl.wikipedia.org/wiki/Specjalna:Szukaj)
Searchplugins\wp-pl.xml (hxxp://szukaj.wp.pl/szukaj.html?z=T&r=T&szukaj={searchTerms})
Components\browsercomps.dll (Mozilla Foundation)
Extensions\quickstores@quickstores.de (QuickStores-Toolbar)
HKCU_Extensions|mozilla_cc@internetdownloadmanager.com - C:\Documents and Settings\Administrator\Dane aplikacji\IDM\idmmzcc5
-- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\FireFox\Profiles\j20f3zz9.default --
Prefs.js - browser.download.lastDir, C:\\Documents and Settings\\Administrator\\Pulpit
Prefs.js - browser.search.defaultenginename,
Prefs.js - browser.search.selectedEngine, Google
Prefs.js - browser.startup.homepage, hxxp://www.google.pl/
Prefs.js - browser.startup.homepage_override.buildID, 20111120135848
Prefs.js - browser.startup.homepage_override.mstone, rv:8.0.1
========================================
**** Google Chrome Version [16.0.912.75] ****
-- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default --
Preferences - default_search_provider: "Google" (Enabled: true) (?)
Preferences - homepage: hxxp://www.gazeta.pl/0,0.html?p=108
Preferences - homepage_is_newtabpage: true
Plugin - Pando Web Plugin (Enabled: true) (C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll)
Plugin - Veetle TV Player (Enabled: true) (C:\Program Files\Veetle\Player\npvlc.dll)
Plugin - Veetle TV Core (Enabled: true) (C:\Program Files\Veetle\plugins\npVeetle.dll)
Plugin - PDF-XChange Viewer (Enabled: true) (D:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll)
Plugin - "Pando Web Plugin" (Enabled: true)
Plugin - "Veetle TV Player" (Enabled: true)
Plugin - "Veetle TV Core" (Enabled: true)
Plugin - "PDF-XChange Viewer" (Enabled: true)
========================================
**** Internet Explorer Version [8.0.6001.18702] ****
HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKLM_Toolbar|{10EDB994-47F8-43F7-AE96-F2EA63E9F90F} (x)
HKCU_ElevationPolicy\{1902485B-CE75-42C1-BA2D-57E660793D9A} - D:\Program Files\Internet Download Manager\IEMonitor.exe (Tonec Inc.)
HKCU_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files\Veetle\Player\vtl_hfs.exe (?)
HKCU_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files\Veetle\Player\player.exe (?)
HKCU_ElevationPolicy\{E0A900DF-9611-4446-86BD-4B1D47E7DB2A} - C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\14.0.835.202\chrome_launcher.exe (x)
HKCU_ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4} - D:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.)
HKCU_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files\Veetle\Player\vtl_hfax.exe (?)
HKLM_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files\Veetle\Player\vtl_hfs.exe (?)
HKLM_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files\Veetle\Player\player.exe (?)
HKLM_ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4} - D:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.)
HKLM_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files\Veetle\Player\vtl_hfax.exe (?)
HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
BHO\{0055C089-8582-441B-A0BF-17B458C2A3A8} - "IDM integration (IDMIEHlprObj Class)" (D:\Program Files\Internet Download Manager\IDMIECC.dll)
========================================
C:\Program Files\Ad-Remover\Quarantine: 12 File(s)
C:\Program Files\Ad-Remover\Backup: 14 File(s)
C:\Ad-Report-CLEAN[1].txt - 10/01/2012 23:05:20 (2047 Byte(s))
End at: 23:05:47, 10/01/2012
============== E.O.F ==============
OTL:
- Kod: Zaznacz wszystko
OTL logfile created on: 2012-01-10 23:12:50 - Run 3
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Administrator\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
3,25 Gb Total Physical Memory | 2,38 Gb Available Physical Memory | 73,27% Memory free
5,09 Gb Paging File | 4,28 Gb Available in Paging File | 84,21% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 127,99 Gb Total Space | 60,91 Gb Free Space | 47,59% Space Free | Partition Type: NTFS
Drive D: | 337,77 Gb Total Space | 10,51 Gb Free Space | 3,11% Space Free | Partition Type: NTFS
Computer Name: MICHA-0SYKH35PG | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2012-01-10 16:10:02 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Pulpit\OTL.exe
PRC - [2011-12-22 21:45:46 | 010,234,880 | ---- | M] (Creative Team S.A.) -- C:\Program Files\WapSter\WapSter AQQ\AQQ.exe
PRC - [2011-12-07 17:11:07 | 000,949,104 | ---- | M] (Opera Software) -- C:\Program Files\Realtek\Opera\opera.exe
PRC - [2011-11-07 20:27:02 | 028,846,216 | ---- | M] (Electronic Arts) -- C:\Program Files\Origin\Origin.exe
PRC - [2011-10-20 12:58:40 | 002,497,352 | ---- | M] (COMODO) -- D:\Program Files\COMODO\COMODO Internet Security\cfp.exe
PRC - [2011-10-08 05:50:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011-10-07 18:47:13 | 001,883,328 | ---- | M] (COMODO) -- D:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
PRC - [2011-06-05 10:16:20 | 002,011,136 | ---- | M] () -- D:\Program Files\foobar2000\foobar2000.exe
PRC - [2010-10-27 20:21:54 | 001,155,072 | ---- | M] (Last.fm) -- C:\Program Files\Last.fm\LastFM.exe
PRC - [2010-06-18 10:54:54 | 002,181,744 | ---- | M] (Gainward Co.) -- C:\Program Files\EXPERTool\TBPANEL.exe
PRC - [2009-12-11 13:59:16 | 000,059,936 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Program Files\Realtek\Audio\Drivers\AzMixerSel.exe
PRC - [2008-04-14 21:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-07-24 10:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) -- C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
[color=#E56717]========== Modules (No Company Name) ==========[/color]
MOD - [2011-12-09 19:25:48 | 001,182,720 | ---- | M] () -- C:\Program Files\WapSter\WapSter AQQ\System\Shared\Plugins\GGNet.dll
MOD - [2011-11-14 14:58:10 | 008,527,008 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
MOD - [2011-11-09 13:18:20 | 000,983,552 | ---- | M] () -- C:\Program Files\WapSter\WapSter AQQ\System\Shared\Plugins\SMS.dll
MOD - [2011-11-04 23:39:00 | 016,827,392 | R--- | M] () -- C:\Program Files\Origin\QtWebKit4.dll
MOD - [2011-11-04 23:18:14 | 000,312,320 | R--- | M] () -- C:\Program Files\Origin\imageformats\qtiff4.dll
MOD - [2011-11-04 23:18:14 | 000,264,192 | R--- | M] () -- C:\Program Files\Origin\imageformats\qmng4.dll
MOD - [2011-11-04 23:18:14 | 000,211,456 | R--- | M] () -- C:\Program Files\Origin\imageformats\qjpeg4.dll
MOD - [2011-11-04 23:18:12 | 000,172,544 | R--- | M] () -- C:\Program Files\Origin\codecs\qjpcodecs4.dll
MOD - [2011-11-04 23:18:12 | 000,158,208 | R--- | M] () -- C:\Program Files\Origin\codecs\qtwcodecs4.dll
MOD - [2011-11-04 23:18:12 | 000,143,872 | R--- | M] () -- C:\Program Files\Origin\codecs\qcncodecs4.dll
MOD - [2011-11-04 23:18:12 | 000,079,872 | R--- | M] () -- C:\Program Files\Origin\codecs\qkrcodecs4.dll
MOD - [2011-11-04 23:18:12 | 000,032,256 | R--- | M] () -- C:\Program Files\Origin\imageformats\qico4.dll
MOD - [2011-11-04 23:18:12 | 000,028,672 | R--- | M] () -- C:\Program Files\Origin\imageformats\qgif4.dll
MOD - [2011-11-04 23:16:30 | 000,327,680 | R--- | M] () -- C:\Program Files\Origin\phonon4.dll
MOD - [2011-11-04 23:16:26 | 000,413,184 | R--- | M] () -- C:\Program Files\Origin\QtXml4.dll
MOD - [2011-11-04 23:16:24 | 001,152,512 | R--- | M] () -- C:\Program Files\Origin\QtNetwork4.dll
MOD - [2011-11-04 23:16:22 | 009,440,256 | R--- | M] () -- C:\Program Files\Origin\QtGui4.dll
MOD - [2011-11-04 23:16:20 | 002,694,144 | R--- | M] () -- C:\Program Files\Origin\QtCore4.dll
MOD - [2011-06-05 10:16:20 | 002,011,136 | ---- | M] () -- D:\Program Files\foobar2000\foobar2000.exe
MOD - [2011-06-05 10:14:24 | 001,128,960 | ---- | M] () -- D:\Program Files\foobar2000\components\foo_ui_std.dll
MOD - [2011-06-05 10:14:24 | 000,364,544 | ---- | M] () -- D:\Program Files\foobar2000\components\foo_albumlist.dll
MOD - [2011-06-05 10:14:22 | 000,275,456 | ---- | M] () -- D:\Program Files\foobar2000\components\foo_dsp_std.dll
MOD - [2011-06-05 10:14:20 | 000,299,008 | ---- | M] () -- D:\Program Files\foobar2000\components\foo_cdda.dll
MOD - [2011-06-05 10:13:58 | 001,431,040 | ---- | M] () -- D:\Program Files\foobar2000\components\foo_input_std.dll
MOD - [2011-06-05 10:13:54 | 000,282,624 | ---- | M] () -- D:\Program Files\foobar2000\components\foo_rgscan.dll
MOD - [2011-06-05 10:13:50 | 000,479,744 | ---- | M] () -- D:\Program Files\foobar2000\components\foo_converter.dll
MOD - [2011-06-05 10:13:14 | 000,237,568 | ---- | M] () -- D:\Program Files\foobar2000\components\foo_freedb2.dll
MOD - [2011-06-05 10:13:12 | 000,274,432 | ---- | M] () -- D:\Program Files\foobar2000\components\foo_fileops.dll
MOD - [2011-06-05 10:12:42 | 000,148,480 | ---- | M] () -- D:\Program Files\foobar2000\shared.dll
MOD - [2010-10-27 20:23:04 | 000,106,496 | ---- | M] () -- C:\Program Files\Last.fm\srv_rtaudioplayback.dll
MOD - [2010-10-27 20:22:52 | 000,057,344 | ---- | M] () -- C:\Program Files\Last.fm\ext_messengernotify.dll
MOD - [2010-10-27 20:22:42 | 000,058,880 | ---- | M] () -- C:\Program Files\Last.fm\ext_skypenotify.dll
MOD - [2010-10-27 20:22:08 | 000,147,456 | ---- | M] () -- C:\Program Files\Last.fm\srv_madtranscode.dll
MOD - [2010-10-27 20:22:00 | 000,028,160 | ---- | M] () -- C:\Program Files\Last.fm\srv_httpinput.dll
MOD - [2010-10-27 20:19:28 | 000,372,736 | ---- | M] () -- C:\Program Files\Last.fm\LastFmFingerprint1.dll
MOD - [2010-10-27 20:19:06 | 000,025,088 | ---- | M] () -- C:\Program Files\Last.fm\breakpad.dll
MOD - [2010-10-27 20:18:50 | 000,180,224 | ---- | M] () -- C:\Program Files\Last.fm\Moose1.dll
MOD - [2010-10-27 20:18:34 | 000,540,672 | ---- | M] () -- C:\Program Files\Last.fm\LastFmTools1.dll
MOD - [2010-10-27 20:13:52 | 001,382,507 | ---- | M] () -- C:\Program Files\Last.fm\libfftw3f-3.dll
MOD - [2010-10-27 20:13:52 | 000,074,240 | ---- | M] () -- C:\Program Files\Last.fm\zlibwapi.dll
MOD - [2010-08-25 10:41:20 | 000,304,640 | ---- | M] () -- C:\Program Files\WapSter\WapSter AQQ\System\Shared\Plugins\Contact.dll
MOD - [2010-04-30 16:49:24 | 000,327,168 | ---- | M] () -- D:\Program Files\foobar2000\components\foo_uie_biography.dll
MOD - [2010-04-29 17:01:08 | 000,315,392 | ---- | M] () -- D:\Program Files\foobar2000\components\foo_uie_esplaylist.dll
MOD - [2010-04-03 18:39:02 | 000,443,392 | ---- | M] () -- D:\Program Files\foobar2000\components\foo_uie_elplaylist.dll
MOD - [2010-03-21 00:43:13 | 001,595,392 | ---- | M] () -- D:\Program Files\foobar2000\components\foo_ui_columns.dll
MOD - [2010-03-14 19:51:58 | 000,077,876 | ---- | M] () -- D:\Program Files\foobar2000\zlib1.dll
MOD - [2010-02-28 03:59:14 | 000,689,664 | ---- | M] () -- D:\Program Files\foobar2000\components\foo_uie_wsh_panel_mod.dll
MOD - [2010-02-05 16:26:56 | 000,070,144 | ---- | M] () -- D:\Program Files\foobar2000\components\foo_ui_hacks.dll
MOD - [2010-01-30 02:41:12 | 004,254,560 | ---- | M] () -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2009-12-22 18:12:56 | 000,460,288 | ---- | M] () -- D:\Program Files\foobar2000\components\foo_uie_lyrics2.dll
MOD - [2009-12-09 17:16:12 | 000,356,352 | ---- | M] () -- D:\Program Files\foobar2000\components\foo_uie_panel_splitter.dll
MOD - [2009-04-29 13:09:32 | 000,176,128 | ---- | M] () -- D:\Program Files\foobar2000\components\foo_playcount.dll
MOD - [2008-05-17 20:02:12 | 000,241,664 | ---- | M] () -- D:\Program Files\foobar2000\components\foo_uie_vis_channel_spectrum.dll
MOD - [2008-04-16 16:42:30 | 000,376,832 | ---- | M] () -- C:\Program Files\Last.fm\QtNetwork4.dll
MOD - [2008-04-16 16:42:16 | 000,524,288 | ---- | M] () -- C:\Program Files\Last.fm\QtSql4.dll
MOD - [2008-04-16 16:42:02 | 006,701,056 | ---- | M] () -- C:\Program Files\Last.fm\QtGui4.dll
MOD - [2008-04-16 16:36:38 | 000,376,832 | ---- | M] () -- C:\Program Files\Last.fm\QtXml4.dll
MOD - [2008-04-16 16:36:34 | 001,654,784 | ---- | M] () -- C:\Program Files\Last.fm\QtCore4.dll
MOD - [2008-04-02 13:26:50 | 000,233,472 | ---- | M] () -- C:\Program Files\Last.fm\imageformats\qmng4.dll
MOD - [2008-04-02 13:26:34 | 000,021,504 | ---- | M] () -- C:\Program Files\Last.fm\imageformats\qgif4.dll
MOD - [2008-04-02 13:26:28 | 000,135,168 | ---- | M] () -- C:\Program Files\Last.fm\imageformats\qjpeg4.dll
MOD - [1998-10-31 09:55:56 | 000,005,120 | ---- | M] () -- C:\Program Files\EXPERTool\TBMANAGE.DLL
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV - [2011-10-08 05:50:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011-10-07 18:47:13 | 001,883,328 | ---- | M] (COMODO) [Auto | Running] -- D:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (cmdAgent)
SRV - [2011-06-29 14:59:18 | 000,155,344 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe -- (Sony Ericsson PCCompanion)
SRV - [2010-10-27 17:00:30 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010-03-25 10:25:22 | 030,969,208 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2007-07-24 10:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Running] -- C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - [2011-10-27 02:25:40 | 000,136,808 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdm.sys -- (ssadmdm)
DRV - [2011-10-27 02:25:40 | 000,121,064 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM)
DRV - [2011-10-27 02:25:40 | 000,114,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadserd.sys -- (ssadserd) SAMSUNG Android USB Diagnostic Serial Port (WDM)
DRV - [2011-10-27 02:25:40 | 000,030,312 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadadb.sys -- (androidusb)
DRV - [2011-10-27 02:25:40 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter)
DRV - [2011-10-10 19:19:31 | 000,025,512 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ggsemc.sys -- (ggsemc)
DRV - [2011-10-10 19:19:31 | 000,013,224 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ggflt.sys -- (ggflt)
DRV - [2011-10-07 18:48:02 | 000,097,760 | ---- | M] (COMODO) [Kernel | Boot | Running] -- C:\WINDOWS\System32\DRIVERS\inspect.sys -- (Inspect)
DRV - [2011-10-07 18:48:01 | 000,031,704 | ---- | M] (COMODO) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\cmdhlp.sys -- (cmdHlp)
DRV - [2011-10-07 18:48:00 | 000,492,768 | ---- | M] (COMODO) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\cmdGuard.sys -- (cmdGuard)
DRV - [2011-07-08 00:21:30 | 000,119,656 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvhda32.sys -- (NVHDA)
DRV - [2011-07-06 16:14:42 | 000,101,616 | ---- | M] (Tonec Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\idmtdi.sys -- (IDMTDI)
DRV - [2011-04-18 11:10:56 | 000,812,448 | ---- | M] (<Turtle Entertainment>) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\ESLWireACD.sys -- (ESLWireAC)
DRV - [2011-01-30 17:59:34 | 000,278,984 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2011-01-30 17:59:34 | 000,025,416 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2010-12-08 11:53:18 | 000,024,504 | ---- | M] (Turtle Entertainment GmbH) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ESLvnic.sys -- (ESLvnic1)
DRV - [2010-09-29 13:29:14 | 000,015,232 | ---- | M] (Corechip Semiconductor, Inc. Co Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\qf97usb.sys -- (QF97USB)
DRV - [2010-07-06 03:13:10 | 000,234,392 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2009-10-21 10:22:32 | 001,425,280 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV - [2009-04-30 22:56:32 | 000,495,768 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LV561AV.SYS -- (PID_0928) Logitech QuickCam Express(PID_0928)
DRV - [2009-03-25 16:48:00 | 000,114,728 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mdm.sys -- (s1018mdm)
DRV - [2009-03-25 16:48:00 | 000,109,864 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018unic.sys -- (s1018unic) Sony Ericsson Device 1018 USB Ethernet Emulation (WDM)
DRV - [2009-03-25 16:48:00 | 000,106,208 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mgmt.sys -- (s1018mgmt) Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM)
DRV - [2009-03-25 16:48:00 | 000,104,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018obex.sys -- (s1018obex)
DRV - [2009-03-25 16:48:00 | 000,026,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018nd5.sys -- (s1018nd5) Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS)
DRV - [2009-03-25 16:48:00 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mdfl.sys -- (s1018mdfl)
DRV - [2008-11-04 10:52:38 | 000,086,696 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018bus.sys -- (s1018bus) Sony Ericsson Device 1018 driver (WDM)
DRV - [2008-05-16 11:33:12 | 000,089,256 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s0016bus.sys -- (s0016bus) Sony Ericsson Device 0016 driver (WDM)
DRV - [2007-03-16 09:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\TBPanel.sys -- (TBPanel)
DRV - [2007-03-16 09:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\TBPanel.sys -- (Cardex)
DRV - [2007-01-04 12:48:04 | 000,104,344 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\e4usbaw.sys -- (e4usbaw)
DRV - [2007-01-04 12:47:48 | 000,069,656 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\e4ldr.sys -- (E4LOADER) General Purpose USB Driver (e4ldr.sys)
DRV - [2005-12-22 20:45:40 | 000,019,712 | ---- | M] (myWIFIzone.com) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\myWIFIzone.sys -- (myWIFIzone)
DRV - [2005-11-03 09:52:38 | 000,035,200 | ---- | M] (Saitek) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SaiBus.sys -- (SaiNtBus)
DRV - [2005-11-03 09:52:34 | 000,013,824 | ---- | M] (Saitek) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SaiMini.sys -- (SaiMini)
DRV - [2005-08-18 00:00:00 | 000,007,168 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt -- (EverestDriver)
DRV - [2005-08-08 13:44:04 | 000,006,640 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MouseCap.sys -- (MouseCap)
DRV - [2005-08-06 14:13:12 | 000,009,661 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Moufiltr.sys -- (Moufiltr)
DRV - [2004-08-13 03:56:20 | 000,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2002-09-16 16:14:32 | 000,004,228 | ---- | M] (PowerQuest Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\PQNTDRV.sys -- (PQNTDrv)
DRV - [2001-10-10 09:37:14 | 000,025,434 | ---- | M] (D-Link Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\DLKRTL.SYS -- (DFE528TX)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search bar = http://search.msn.com/spbasic.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1390067357-1085031214-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1390067357-1085031214-725345543-500\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
IE - HKU\S-1-5-21-1390067357-1085031214-725345543-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1390067357-1085031214-725345543-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
[color=#E56717]========== FireFox ==========[/color]
FF - prefs.js..browser.search.defaultenginename: ""
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.pl/"
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: D:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF - HKLM\Software\MozillaPlugins\@ganymede/GanymedeNetPlugin,version=1.0: C:\Program Files\Ganymede\Plugins\npganymedenet.dll ( )
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: D:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Components: D:\Program Files\Mozilla Firefox\components [2011-05-31 21:14:13 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins [2011-06-21 11:54:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-12-05 20:45:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-12-05 20:45:30 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Documents and Settings\Administrator\Dane aplikacji\IDM\idmmzcc5 [2011-09-26 21:44:40 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Documents and Settings\Administrator\Dane aplikacji\IDM\idmmzcc5 [2011-09-26 21:44:40 | 000,000,000 | ---D | M]
[2010-09-26 08:13:09 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Extensions
[2012-01-10 23:05:38 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\j20f3zz9.default\extensions
[2010-10-03 12:46:40 | 000,000,000 | ---D | M] (United States English Spellchecker) -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\j20f3zz9.default\extensions\en-US@dictionaries.addons.mozilla.org
[2011-12-05 20:45:32 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011-12-04 22:27:50 | 000,000,000 | ---D | M] (QuickStores-Toolbar) -- C:\Program Files\Mozilla Firefox\extensions\quickstores@quickstores.de
() (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\J20F3ZZ9.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2010-09-30 18:37:58 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011-12-05 20:45:28 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2010-09-15 03:50:38 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011-12-05 20:45:26 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2011-12-05 20:45:26 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2011-12-05 20:45:26 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2011-12-05 20:45:26 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2011-12-05 20:45:26 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2011-12-05 20:45:26 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
[color=#E56717]========== Chrome ==========[/color]
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\16.0.912.63\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Java Deployment Toolkit 6.0.220.4 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U22 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\16.0.912.63\pdf.dll
CHR - plugin: Google Gears 0.5.33.0 (Enabled) = C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\16.0.912.63\gears.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Update\1.2.183.39\npGoogleOneClick8.dll
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: Veetle TV Player (Enabled) = C:\Program Files\Veetle\Player\npvlc.dll
CHR - plugin: Veetle TV Core (Enabled) = C:\Program Files\Veetle\plugins\npVeetle.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: PDF-XChange Viewer (Enabled) = D:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.2_0\
CHR - Extension: YouTube = C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2_0\
CHR - Extension: Szukaj w Google = C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.16_0\
CHR - Extension: Gmail = C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.4_0\
O1 HOSTS File: ([2012-01-10 21:53:58 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - D:\Program Files\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (no name) - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - No CLSID value found.
O4 - HKLM..\Run: [AzMixerSel] C:\Program Files\Realtek\Audio\Drivers\AzMixerSel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [COMODO Internet Security] D:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\nvmctray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe ()
O4 - HKU\S-1-5-21-1390067357-1085031214-725345543-500..\Run: [GAINWARD] C:\Program Files\EXPERTool\TBPanel.exe (Gainward Co.)
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 91 00 00 00 [binary data]
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 91 00 00 00 [binary data]
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1390067357-1085031214-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1390067357-1085031214-725345543-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Ściągnij przez IDM - D:\Program Files\Internet Download Manager\IEExt.htm ()
O8 - Extra context menu item: Ściągnij wszystkie linki przez IDM - D:\Program Files\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: Wyślij &do programu OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Notatki połączone programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{722F4B46-1077-4AD1-9B33-3E40D844DB1E}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8DE05ADB-FF2C-42E0-A68B-F0B5079AA3AA}: DhcpNameServer = 192.168.1.254
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010-09-26 03:20:18 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2011-08-24 06:53:21 | 008,958,304 | R--- | M] (Electronic Arts) - E:\AutoRun.exe -- [ UDF ]
O32 - AutoRun File - [2011-09-07 02:00:07 | 000,000,000 | R--D | M] - E:\Autorun -- [ UDF ]
O32 - AutoRun File - [2011-09-07 01:08:12 | 000,032,783 | R--- | M] () - E:\Autorun.ico -- [ UDF ]
O32 - AutoRun File - [2011-09-07 02:00:07 | 000,000,132 | R--- | M] () - E:\autorun.inf -- [ UDF ]
O33 - MountPoints2\{199e3d72-a657-11e0-9cf6-00ff01000001}\Shell\AutoRun\command - "" = M:\urDrive.exe
O33 - MountPoints2\{1f89c67c-f0b0-11df-9ace-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{1f89c67c-f0b0-11df-9ace-806d6172696f}\Shell\AutoRun\command - "" = E:\AutoRun.exe -- [2011-08-24 06:53:21 | 008,958,304 | R--- | M] (Electronic Arts)
O33 - MountPoints2\{28024e98-0073-11e0-9b00-4d6564696130}\Shell - "" = Autorun
O33 - MountPoints2\{28024e98-0073-11e0-9b00-4d6564696130}\Shell\AutoRun\command - "" = F:\Install_Nokia_Ovi_Suite.exe
O33 - MountPoints2\{afae24b0-0856-11e0-9b18-4d6564696130}\Shell - "" = AutoRun
O33 - MountPoints2\{afae24b0-0856-11e0-9b18-4d6564696130}\Shell\AutoRun\command - "" = G:\Startme.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2012-01-10 23:05:10 | 000,000,000 | ---D | C] -- C:\Program Files\Ad-Remover
[2012-01-10 23:03:53 | 001,327,512 | ---- | C] (C_XX) -- C:\Documents and Settings\Administrator\Pulpit\AD-R.rar
[2012-01-10 21:53:56 | 000,000,000 | ---D | C] -- C:\_OTL
[2012-01-10 18:51:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Origin
[2012-01-10 18:51:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Origin
[2012-01-10 18:51:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Origin
[2012-01-10 18:51:17 | 000,000,000 | ---D | C] -- C:\Program Files\Origin Games
[2012-01-10 18:51:06 | 000,000,000 | ---D | C] -- C:\Program Files\Origin
[2012-01-10 16:17:40 | 000,592,952 | ---- | C] (Duplex Secure Ltd.) -- C:\Documents and Settings\Administrator\Pulpit\SPTDinst-v179-x86.exe
[2012-01-10 16:10:01 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Pulpit\OTL.exe
[2012-01-07 23:23:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit\Wzgórze Ya-Pa 3 - Ja Mam To Co Ty
[2012-01-01 16:02:34 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Administrator\Recent
[2011-12-30 20:20:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit\Projekt Nasłuch - Nieznani Sprawcy LP
[2011-12-28 15:47:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\InterActual
[2011-12-28 15:47:03 | 000,000,000 | ---D | C] -- C:\Program Files\InterActual
[2011-12-28 00:50:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Debugging Tools for Windows (x86)
[2011-12-28 00:50:23 | 000,000,000 | ---D | C] -- C:\Program Files\Debugging Tools for Windows (x86)
[2011-12-27 23:27:23 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2011-12-27 23:27:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy
[2011-12-26 21:21:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit\Diox & 2sty - Wstaje Nowy Dzień (Blendtape) 2011
[2011-12-25 15:19:08 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Common Files
[2011-12-25 15:15:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\MFAData
[2011-12-23 13:41:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit\Bezimienni 4- Co mnie nie zabije to mnie wzmocni
[2011-12-23 13:41:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit\Małpa - Acapelle
[2011-12-23 13:41:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit\Jimson_and_MeHow-Miedzy_Slowami-Bootleg-PL-2006-BG
[2011-12-23 13:41:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit\Mic - Analogowa miłość [2011]
[2011-12-20 23:58:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit\Jimson - Ucieczka z Wesołego Miasteczka (EP 2011)
[2011-12-19 20:08:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\Skyrim
[2010-12-30 16:06:47 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\Administrator\Dane aplikacji\pcouffin.sys
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2012-01-10 23:07:21 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-01-10 23:05:10 | 000,001,554 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\AD-R.lnk
[2012-01-10 23:04:15 | 001,327,512 | ---- | M] (C_XX) -- C:\Documents and Settings\Administrator\Pulpit\AD-R.rar
[2012-01-10 21:53:58 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\Hosts
[2012-01-10 21:26:29 | 000,001,112 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1390067357-1085031214-725345543-500Core.job
[2012-01-10 21:16:00 | 000,001,164 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1390067357-1085031214-725345543-500UA.job
[2012-01-10 20:23:52 | 070,729,080 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Brudne Serca.rar
[2012-01-10 18:51:20 | 000,000,654 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Origin.lnk
[2012-01-10 16:17:46 | 000,592,952 | ---- | M] (Duplex Secure Ltd.) -- C:\Documents and Settings\Administrator\Pulpit\SPTDinst-v179-x86.exe
[2012-01-10 16:10:38 | 000,000,072 | ---- | M] () -- C:\Documents and Settings\Administrator\defogger_reenable
[2012-01-10 16:10:22 | 000,050,477 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Defogger.exe
[2012-01-10 16:10:02 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Pulpit\OTL.exe
[2012-01-10 16:09:44 | 000,302,592 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\xlwo9hsk.exe
[2012-01-08 23:55:03 | 270,910,887 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Firma_-_Nasza_Bron_To_Nasza_Pasja-3CD-PL-2011-WGM.rar
[2012-01-08 19:35:47 | 000,039,203 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\sprawozdanie spraw dzian 6 kl.odt
[2012-01-08 13:56:44 | 003,921,242 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\karwan_2sty_i_kot-track_ogolny_(prod._morte).mp3
[2012-01-08 13:43:11 | 015,920,753 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\pykpyk.rar
[2012-01-07 23:35:06 | 005,309,430 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\15 - Inez Foxx - Let Me Down Easy ['Hold It Down'].mp3
[2012-01-07 23:23:18 | 106,461,394 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Wzgorze_Ya-Pa_3_-_Ja_Mam_To_Co_Ty.rar
[2012-01-07 18:56:35 | 000,000,072 | ---- | M] () -- C:\Documents and Settings\Administrator\Moje dokumenty\eq.feq
[2012-01-05 15:27:50 | 004,888,240 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012-01-04 21:59:31 | 000,069,415 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\sudniowka copy.png
[2012-01-03 15:55:48 | 001,707,366 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\VirtualDub-1.9.11.zip
[2012-01-01 17:55:27 | 000,079,360 | ---- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-12-31 13:28:01 | 010,638,682 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\WIZJA LOKALNA Warszawa (Siejek,Klasiik,3-6,Muflon,Solar,Pjentak,Danny,Plejer,Wiciu,Rin) prod. Zbylu.mp3
[2011-12-31 03:06:29 | 012,132,417 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Laikike1+-+Level+Up+3+(+Prod.+Bob+Air+).mp3
[2011-12-28 15:49:29 | 000,000,000 | ---- | M] () -- C:\WINDOWS\iPlayer.INI
[2011-12-26 16:01:38 | 000,531,250 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2011-12-26 16:01:38 | 000,474,388 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011-12-26 16:01:38 | 000,093,334 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2011-12-26 16:01:38 | 000,076,428 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011-12-24 23:07:27 | 000,035,678 | ---- | M] () -- C:\Documents and Settings\Administrator\Moje dokumenty\cc_20111224_230725.reg
[2011-12-24 22:00:10 | 010,200,401 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Smarki Smark-Miliony (prod. Quiz).mp3
[2011-12-23 23:29:20 | 004,584,491 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Malverde Market.mp3
[2011-12-20 23:13:50 | 075,653,926 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\tapeta.psd
[2011-12-19 22:06:54 | 000,526,781 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\zioomus.rar
[2011-12-19 16:59:11 | 003,902,263 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Bartek - Miłość Jest Dopiero Po Grze (feat_ VNM, DJ Uzik) prod _b_____b_-[www_2conv_com].mp3
[2011-12-19 15:50:59 | 000,002,262 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2012-01-10 23:05:10 | 000,001,554 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\AD-R.lnk
[2012-01-10 19:41:04 | 070,729,080 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Brudne Serca.rar
[2012-01-10 18:51:20 | 000,000,654 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Origin.lnk
[2012-01-10 16:10:30 | 000,000,072 | ---- | C] () -- C:\Documents and Settings\Administrator\defogger_reenable
[2012-01-10 16:10:22 | 000,050,477 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Defogger.exe
[2012-01-10 16:09:44 | 000,302,592 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\xlwo9hsk.exe
[2012-01-08 21:17:30 | 270,910,887 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Firma_-_Nasza_Bron_To_Nasza_Pasja-3CD-PL-2011-WGM.rar
[2012-01-08 13:55:35 | 003,921,242 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\karwan_2sty_i_kot-track_ogolny_(prod._morte).mp3
[2012-01-08 13:37:06 | 015,920,753 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\pykpyk.rar
[2012-01-07 23:34:12 | 005,309,430 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\15 - Inez Foxx - Let Me Down Easy ['Hold It Down'].mp3
[2012-01-07 22:45:05 | 106,461,394 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Wzgorze_Ya-Pa_3_-_Ja_Mam_To_Co_Ty.rar
[2012-01-07 18:56:35 | 000,000,072 | ---- | C] () -- C:\Documents and Settings\Administrator\Moje dokumenty\eq.feq
[2012-01-07 11:20:03 | 000,039,203 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\sprawozdanie spraw dzian 6 kl.odt
[2012-01-04 21:56:34 | 000,069,415 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\sudniowka copy.png
[2012-01-03 15:55:48 | 001,707,366 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\VirtualDub-1.9.11.zip
[2011-12-31 13:24:18 | 010,638,682 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\WIZJA LOKALNA Warszawa (Siejek,Klasiik,3-6,Muflon,Solar,Pjentak,Danny,Plejer,Wiciu,Rin) prod. Zbylu.mp3
[2011-12-31 03:06:15 | 012,132,417 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Laikike1+-+Level+Up+3+(+Prod.+Bob+Air+).mp3
[2011-12-28 15:49:29 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI
[2011-12-24 23:07:26 | 000,035,678 | ---- | C] () -- C:\Documents and Settings\Administrator\Moje dokumenty\cc_20111224_230725.reg
[2011-12-24 21:59:11 | 010,200,401 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Smarki Smark-Miliony (prod. Quiz).mp3
[2011-12-23 23:27:49 | 004,584,491 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Malverde Market.mp3
[2011-12-20 23:13:45 | 075,653,926 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\tapeta.psd
[2011-12-19 22:06:31 | 000,526,781 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\zioomus.rar
[2011-12-19 16:46:17 | 003,902,263 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Bartek - Miłość Jest Dopiero Po Grze (feat_ VNM, DJ Uzik) prod _b_____b_-[www_2conv_com].mp3
[2011-11-29 16:38:18 | 000,030,568 | ---- | C] () -- C:\WINDOWS\MusiccityDownload.exe
[2011-11-29 16:38:12 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\cis-2.4.dll
[2011-11-29 16:38:12 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\issacapi_bs-2.3.dll
[2011-11-29 16:38:12 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\issacapi_pe-2.3.dll
[2011-11-29 16:38:12 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\issacapi_se-2.3.dll
[2011-09-28 15:45:22 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\nY.exe
[2011-08-06 18:48:06 | 002,130,002 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data
[2011-07-18 17:17:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2011-07-18 17:17:36 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2011-07-18 17:17:36 | 000,233,765 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2011-07-18 17:17:36 | 000,000,003 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2011-06-01 12:15:56 | 000,905,290 | ---- | C] () -- C:\WINDOWS\System32\libmmd.dll
[2011-05-24 22:44:26 | 000,059,904 | ---- | C] () -- C:\WINDOWS\System32\OVDecode.dll
[2011-04-18 19:01:07 | 000,002,828 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\KGyGaAvL.sys
[2011-04-18 19:01:07 | 000,000,088 | RHS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\5AED3C1180.sys
[2011-04-09 17:55:28 | 000,179,261 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
[2011-04-06 15:48:54 | 000,200,245 | ---- | C] () -- C:\WINDOWS\Angry Birds Uninstaller.exe
[2011-01-30 17:59:34 | 000,278,984 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2011-01-30 17:59:34 | 000,025,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2011-01-19 17:58:56 | 003,621,144 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2010-12-30 17:21:43 | 000,000,307 | ---- | C] () -- C:\WINDOWS\game.ini
[2010-12-30 16:25:17 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010-12-30 16:07:12 | 000,001,189 | ---- | C] () -- C:\Documents and Settings\Administrator\Dane aplikacji\vso_ts_preview.xml
[2010-12-30 16:06:47 | 000,087,608 | ---- | C] () -- C:\Documents and Settings\Administrator\Dane aplikacji\inst.exe
[2010-12-30 16:06:47 | 000,007,887 | ---- | C] () -- C:\Documents and Settings\Administrator\Dane aplikacji\pcouffin.cat
[2010-12-30 16:06:47 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\Administrator\Dane aplikacji\pcouffin.inf
[2010-12-27 00:27:09 | 000,231,056 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTConvEQ.dat
[2010-12-27 00:27:09 | 000,030,856 | ---- | C] () -- C:\WINDOWS\System32\drivers\RtPCEE3.DAT
[2010-12-27 00:27:09 | 000,001,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\RtHdatEx.dat
[2010-12-27 00:27:09 | 000,000,712 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTEQEX0.dat
[2010-12-27 00:27:09 | 000,000,520 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTEQEX3.dat
[2010-12-27 00:27:09 | 000,000,520 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTEQEX2.dat
[2010-12-27 00:27:09 | 000,000,520 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTEQEX1.dat
[2010-12-27 00:27:09 | 000,000,176 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTHDAEQ1.dat
[2010-12-27 00:27:09 | 000,000,176 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTHDAEQ0.dat
[2010-12-27 00:27:09 | 000,000,024 | ---- | C] () -- C:\WINDOWS\System32\drivers\rtkhdaud.dat
[2010-12-05 00:08:38 | 004,146,230 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-S-1-5-21-1390067357-1085031214-725345543-500-0.dat
[2010-12-03 11:30:16 | 001,042,062 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\WPFFontCache_v0400-System.dat
[2010-10-28 20:46:46 | 000,000,355 | ---- | C] () -- C:\WINDOWS\pdf2word.INI
[2010-10-05 15:25:14 | 000,000,462 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2010-10-05 15:25:14 | 000,000,030 | ---- | C] () -- C:\WINDOWS\System32\brss01a.ini
[2010-10-05 15:25:14 | 000,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI
[2010-10-05 15:21:47 | 000,000,050 | ---- | C] () -- C:\WINDOWS\System32\bridf05a.dat
[2010-10-03 09:27:59 | 000,079,360 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-10-03 09:26:49 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010-09-29 16:07:55 | 000,049,152 | R--- | C] () -- C:\WINDOWS\DAOD.exe
[2010-09-29 16:07:47 | 000,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys
[2010-09-29 16:07:40 | 000,036,873 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2010-09-29 16:07:39 | 000,010,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2010-09-27 18:49:51 | 000,000,169 | ---- | C] () -- C:\WINDOWS\adidsl.ini
[2010-09-27 18:49:51 | 000,000,021 | ---- | C] () -- C:\WINDOWS\Fast800.ini
[2010-09-27 18:49:47 | 000,253,008 | ---- | C] () -- C:\WINDOWS\adirasx64.exe
[2010-09-27 18:49:47 | 000,194,128 | ---- | C] () -- C:\WINDOWS\adiras.exe
[2010-09-27 18:49:47 | 000,127,456 | ---- | C] () -- C:\WINDOWS\System32\IPDETECT.EXE
[2010-09-27 18:49:46 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\coclassfast.dll
[2010-09-27 18:49:46 | 000,176,128 | ---- | C] () -- C:\WINDOWS\autoclk.exe
[2010-09-27 18:49:46 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9P2.BIN
[2010-09-27 18:49:46 | 000,046,892 | ---- | C] () -- C:\WINDOWS\System32\ADADIX16.DLL
[2010-09-27 18:49:46 | 000,024,576 | ---- | C] () -- C:\WINDOWS\enddisk32.exe
[2010-09-27 18:49:42 | 000,152,308 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4I2.BIN
[2010-09-27 18:49:42 | 000,152,306 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4I1.BIN
[2010-09-27 18:49:42 | 000,152,306 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4I0.BIN
[2010-09-27 18:49:42 | 000,152,146 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4P2.BIN
[2010-09-27 18:49:42 | 000,152,145 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4P1.BIN
[2010-09-27 18:49:42 | 000,152,145 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4P0.BIN
[2010-09-27 18:49:42 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9P1.BIN
[2010-09-27 18:49:42 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9P0.BIN
[2010-09-27 18:49:42 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9I2.BIN
[2010-09-27 18:49:42 | 000,152,036 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4D2.BIN
[2010-09-27 18:49:42 | 000,152,034 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4D1.BIN
[2010-09-27 18:49:42 | 000,152,034 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4D0.BIN
[2010-09-27 18:49:42 | 000,022,395 | ---- | C] () -- C:\WINDOWS\System32\drivers\fpga.bin
[2010-09-27 18:49:41 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9I1.BIN
[2010-09-27 18:49:41 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9I0.BIN
[2010-09-26 04:07:13 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010-09-26 04:06:27 | 004,888,240 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010-09-26 03:36:18 | 000,028,672 | R--- | C] () -- C:\WINDOWS\System32\adinst32.dll
[2010-09-26 03:36:17 | 000,000,990 | ---- | C] () -- C:\WINDOWS\adiras.ini
[2010-09-26 03:35:46 | 000,000,030 | ---- | C] () -- C:\WINDOWS\TextSpy.ini
[2010-09-26 03:21:28 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010-09-26 03:18:28 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010-09-25 22:27:01 | 000,001,769 | ---- | C] () -- C:\WINDOWS\Language_trs.ini
[2010-09-25 21:47:13 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\win_63300.exe
[2010-09-25 21:43:22 | 000,285,192 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2010-09-25 21:43:21 | 000,285,192 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2010-09-25 21:43:20 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2010-06-21 04:38:36 | 000,007,282 | ---- | C] () -- C:\WINDOWS\cadx2.ini
[2010-01-12 05:35:44 | 000,080,416 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2009-04-30 22:39:36 | 000,082,289 | ---- | C] () -- C:\WINDOWS\System32\lvcoinst.ini
[2007-12-15 14:55:30 | 005,423,104 | ---- | C] () -- C:\WINDOWS\System32\tlpsplib10.dll
[2005-08-08 13:44:04 | 000,006,640 | ---- | C] () -- C:\WINDOWS\System32\drivers\MouseCap.sys
[2004-08-02 13:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2001-10-26 18:30:20 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2001-10-26 17:15:16 | 000,531,250 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat
[2001-10-26 17:15:16 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat
[2001-10-26 17:15:16 | 000,093,334 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat
[2001-10-26 17:15:16 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat
[2001-08-23 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001-08-23 14:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001-08-17 22:30:24 | 000,474,388 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2001-08-17 22:30:24 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2001-08-17 22:30:24 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2001-08-17 22:30:22 | 000,076,428 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2001-08-17 22:15:38 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2001-07-21 23:36:48 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2001-07-21 23:36:04 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2001-07-21 23:24:16 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[color=#E56717]========== LOP Check ==========[/color]
[2011-12-06 15:44:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\2K Sports
[2010-12-30 16:49:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Ashampoo
[2011-01-06 19:16:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Auslogics
[2011-12-17 12:47:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Cool Record Edit Pro
[2010-10-12 17:24:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\DAEMON Tools Lite
[2011-12-07 17:57:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\DAEMON Tools Pro
[2011-10-02 08:50:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\DMCache
[2011-09-18 20:07:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\EAC
[2010-11-03 11:50:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\ESET
[2011-11-01 12:28:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\EurekaLog
[2012-01-10 23:08:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\foobar2000
[2011-05-23 20:47:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\FreeAudioPack
[2011-05-23 20:51:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\FreeCDRipper
[2010-09-25 21:57:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Gadu-Gadu
[2011-05-16 12:11:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\GameRanger
[2011-07-22 22:30:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\GanymedeNet
[2011-03-11 13:43:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Get from YouTube
[2011-06-16 20:37:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\GlarySoft
[2011-12-24 23:02:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\IDM
[2011-12-31 02:39:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\ipla
[2011-03-28 18:18:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\KVIrc4
[2010-10-12 17:31:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Leadertech
[2011-03-31 18:47:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\LolClient
[2011-12-18 22:56:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Mp3tag
[2011-03-09 14:29:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Mumble
[2011-03-08 19:05:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\MyPhoneExplorer
[2010-10-11 17:26:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\OpenOffice.org
[2011-09-19 19:37:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Opera
[2012-01-10 23:09:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Origin
[2011-11-06 18:06:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\pl-soft
[2011-04-06 15:49:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Rovio
[2011-04-15 16:16:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\runic games
[2011-12-09 23:21:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Samsung
[2011-05-03 19:31:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Sony
[2010-12-15 15:37:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Sony Setup
[2011-10-31 22:59:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Sports Interactive
[2011-12-11 17:31:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\The Creative Assembly
[2011-03-18 12:44:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\TuneUp Software
[2011-02-16 18:43:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\Vso
[2010-12-30 16:27:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\WinAVI
[2010-12-30 16:48:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ashampoo
[2011-07-30 16:56:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Avanquest
[2010-12-15 15:38:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\BVRP Software
[2011-06-18 16:21:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Codemasters
[2011-12-25 15:19:08 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Common Files
[2010-10-12 17:21:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2011-12-07 17:52:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Pro
[2011-06-18 16:22:01 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DSS
[2011-03-31 16:03:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\e-file
[2011-12-24 19:54:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts
[2011-02-15 14:48:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESL Wire
[2011-04-22 20:42:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla
[2010-10-15 18:34:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\KONAMI
[2010-09-28 15:41:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Last.fm
[2012-01-02 15:16:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MFAData
[2012-01-10 23:09:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Origin
[2011-03-08 18:54:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PageshotsPro
[2011-03-31 18:04:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PMB Files
[2011-04-22 20:42:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RDRM
[2011-11-15 17:38:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\regid.1986-12.com.adobe
[2011-12-09 23:19:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Samsung
[2011-05-03 19:31:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sony
[2010-11-15 00:20:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Sports Interactive
[2011-03-18 12:50:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TuneUp Software
[2011-03-18 12:43:37 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
[2010-11-30 22:45:39 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[color=#E56717]========== Purity Check ==========[/color]
< End of report >
Extras:
- Kod: Zaznacz wszystko
OTL Extras logfile created on: 2012-01-10 23:12:50 - Run 3
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Administrator\Pulpit
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
3,25 Gb Total Physical Memory | 2,38 Gb Available Physical Memory | 73,27% Memory free
5,09 Gb Paging File | 4,28 Gb Available in Paging File | 84,21% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 127,99 Gb Total Space | 60,91 Gb Free Space | 47,59% Space Free | Partition Type: NTFS
Drive D: | 337,77 Gb Total Space | 10,51 Gb Free Space | 3,11% Space Free | Partition Type: NTFS
Computer Name: MICHA-0SYKH35PG | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
[color=#E56717]========== File Associations ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
[HKEY_USERS\S-1-5-21-1390067357-1085031214-725345543-500\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
[color=#E56717]========== Shell Spawning ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- D:\Program Files\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[color=#E56717]========== Security Center Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusOverride" = 0
"FirewallOverride" = 0
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
[color=#E56717]========== System Restore Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
[color=#E56717]========== Firewall Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"56399:TCP" = 56399:TCP:*:Enabled:Pando Media Booster
"56399:UDP" = 56399:UDP:*:Enabled:Pando Media Booster
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"56399:TCP" = 56399:TCP:*:Enabled:Pando Media Booster
"56399:UDP" = 56399:UDP:*:Enabled:Pando Media Booster
"8396:TCP" = 8396:TCP:*:Enabled:League of Legends Launcher
"8396:UDP" = 8396:UDP:*:Enabled:League of Legends Launcher
"6955:TCP" = 6955:TCP:*:Enabled:League of Legends Launcher
"6955:UDP" = 6955:UDP:*:Enabled:League of Legends Launcher
"6974:TCP" = 6974:TCP:*:Enabled:League of Legends Launcher
"6974:UDP" = 6974:UDP:*:Enabled:League of Legends Launcher
"6884:TCP" = 6884:TCP:*:Enabled:League of Legends Launcher
"6884:UDP" = 6884:UDP:*:Enabled:League of Legends Launcher
"8397:TCP" = 8397:TCP:*:Enabled:League of Legends Launcher
"8397:UDP" = 8397:UDP:*:Enabled:League of Legends Launcher
"6881:TCP" = 6881:TCP:*:Enabled:League of Legends Launcher
"6881:UDP" = 6881:UDP:*:Enabled:League of Legends Launcher
"8398:TCP" = 8398:TCP:*:Enabled:League of Legends Launcher
"8398:UDP" = 8398:UDP:*:Enabled:League of Legends Launcher
"6951:TCP" = 6951:TCP:*:Enabled:League of Legends Launcher
"6951:UDP" = 6951:UDP:*:Enabled:League of Legends Launcher
[color=#E56717]========== Authorized Applications List ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\Pando Networks\Media Booster\PMB.exe" = C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\KONAMI\Pro Evolution Soccer 2011\pes2011.exe" = C:\Program Files\KONAMI\Pro Evolution Soccer 2011\pes2011.exe:*:Enabled:Pro Evolution Soccer 2011 -- (Konami Digital Entertainment Co., Ltd.)
"C:\Program Files\WapSter\WapSter AQQ\AQQ.exe" = C:\Program Files\WapSter\WapSter AQQ\AQQ.exe:*:Enabled:Uruchom AQQ -- (Creative Team S.A.)
"C:\Program Files\Sports Interactive\Football Manager 2011\fm.exe" = C:\Program Files\Sports Interactive\Football Manager 2011\fm.exe:*:Enabled:Football Manager 2011 -- (Sports Interactive)
"D:\Program Files\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe" = D:\Program Files\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV -- (Sony DADC Austria AG)
"C:\Program Files\Realtek\Opera\opera.exe" = C:\Program Files\Realtek\Opera\opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software)
"C:\Program Files\EslWire\wire.exe" = C:\Program Files\EslWire\wire.exe:*:Enabled:ESL Wire Client -- (Turtle Entertainment GmbH)
"C:\Program Files\Pando Networks\Media Booster\PMB.exe" = C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()
"D:\Riot Games\League of Legends\air\LolClient.exe" = D:\Riot Games\League of Legends\air\LolClient.exe:*:Enabled:League of Legends Lobby
"D:\Riot Games\League of Legends\game\League of Legends.exe" = D:\Riot Games\League of Legends\game\League of Legends.exe:*:Enabled:League of Legends Game Client
"C:\Program Files\Valve\Steam\SteamApps\elmerro152\counter-strike\hl.exe" = C:\Program Files\Valve\Steam\SteamApps\elmerro152\counter-strike\hl.exe:*:Enabled:Counter-Strike
"D:\Program Files\Codemasters\DiRT 3\dirt3_game.exe" = D:\Program Files\Codemasters\DiRT 3\dirt3_game.exe:*:Enabled:DiRT 3
"C:\Program Files\Valve\Steam\SteamApps\zioomus365\condition zero\hl.exe" = C:\Program Files\Valve\Steam\SteamApps\zioomus365\condition zero\hl.exe:*:Enabled:Counter-Strike: Condition Zero
"D:\Games\Mass Effect\Binaries\MassEffect.exe" = D:\Games\Mass Effect\Binaries\MassEffect.exe:*:Enabled:Mass Effect Game -- (BioWare)
"D:\Games\Mass Effect\MassEffectLauncher.exe" = D:\Games\Mass Effect\MassEffectLauncher.exe:*:Enabled:Mass Effect Launcher -- (BioWare)
"D:\Games\Mass Effect 2\Binaries\MassEffect2.exe" = D:\Games\Mass Effect 2\Binaries\MassEffect2.exe:*:Enabled:Mass Effect 2 Gra -- (BioWare)
"D:\Games\Mass Effect 2\MassEffect2Launcher.exe" = D:\Games\Mass Effect 2\MassEffect2Launcher.exe:*:Enabled:Mass Effect 2 Program startowy -- (BioWare)
"C:\Program Files\Sony Ericsson\Update Service\Update Service.exe" = C:\Program Files\Sony Ericsson\Update Service\Update Service.exe:*:Enabled:Update Service -- ()
"C:\Program Files\Valve\Steam\SteamApps\zioomus365\counter-strike\hl.exe" = C:\Program Files\Valve\Steam\SteamApps\zioomus365\counter-strike\hl.exe:*:Enabled:Counter-Strike
"D:\Program Files\2K Sports\NBA 2K12\nba2k12.exe" = D:\Program Files\2K Sports\NBA 2K12\nba2k12.exe:*:Enabled:NBA 2K12 -- (2K Sports)
"C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe" = C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe:*:Enabled:Daemonu.exe -- (NVIDIA Corporation)
"C:\WINDOWS\system32\muzapp.exe" = C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player -- (Musiccity Co.Ltd.)
"C:\Program Files\Microsoft Office\Office14\GROOVE.EXE" = C:\Program Files\Microsoft Office\Office14\GROOVE.EXE:*:Enabled:Microsoft SharePoint Workspace -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE" = C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE:*:Enabled:Microsoft OneNote -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
"C:\Program Files\AVG\AVG2012\avgmfapx.exe" = C:\Program Files\AVG\AVG2012\avgmfapx.exe:*:Enabled:Instalator AVG
"C:\Program Files\Valve\Steam\SteamApps\common\spiral knights\java_vm\bin\javaw.exe" = C:\Program Files\Valve\Steam\SteamApps\common\spiral knights\java_vm\bin\javaw.exe:*:Enabled:Spiral Knights
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"_{7F05E704-30A6-421A-97A7-8EEB1C7FF010}" = CorelDRAW(R) Graphics Suite X4
"_{CE2DA11A-917F-4CF5-AB55-755EC115DD10}" = CorelDRAW(R) Graphics Suite X4 - Windows Shell Extension
"{0046FA01-C5B9-4985-BACB-398DC480FC05}" = Adobe Photoshop CS3
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3
"{04E9B02B-4F85-4B73-B865-27B9B8B35877}" = NBA 2K12
"{053BE69E-4EFE-3621-3613-30080CD26070}" = Catalyst Control Center Graphics Previews Common
"{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Windows Live ID Sign-in Assistant
"{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}" = PlayStation(R)Store
"{0FC860E5-3F77-4708-962C-20E274A854F4}_is1" = Drzewo Genealogiczne
"{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{19A492A0-888F-44A0-9B21-D91700763F62}" = Catalyst Control Center - Branding
"{1B0FBB9A-995D-47cd-87CD-13E68B676E4F}" = Mass Effect
"{1DA75811-6C2C-ABFA-7DBF-9B9EDAA005E3}" = ATI Catalyst Install Manager
"{1EE88B84-7BE5-4FB5-8DEA-B81D5409D62E}" = Opera 11.00
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{236BB7C4-4419-42FD-0415-1E257A25E34D}" = Adobe Photoshop CS2
"{24D7346D-D4B4-45E8-98EA-75EC14B42DD8}" = Adobe ExtendScript Toolkit 2
"{26A24AE4-039D-4CA4-87B4-2F83216021FF}" = Java(TM) 6 Update 22
"{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime
"{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3
"{2D37F6AE-D201-4580-B91A-6BF9BB93ED2D}" = The Sims™ 2 Double Deluxe
"{300A2961-B2B5-4889-9CB9-5C2A570D08AD}" = Debugging Tools for Windows (x86)
"{350C97C2-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{361693F2-A153-4359-A4CB-A1B9FF2AA5E6}" = A4tech USB Mouse Quality Testing Program V6.0
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3FEA6CD1-EA13-4CE7-A74E-A74A4A0A7B5C}" = FIFA 11
"{402B9DFC-F6DB-4FF7-B01C-7B97D8C45114}" = myWIFIzone
"{434D0FA0-1558-4D8E-AC3D-BD1000008200}" = DiRT 3
"{44A27085-0616-4181-A0C3-81C7ECA17F73}" = CorelDRAW Graphics Suite X4
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}" = SAGEM F@st 800-840
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{51846830-E7B2-4218-8968-B77F0FF475B8}" = Adobe Color EU Extra Settings
"{5454083B-1308-4485-BF17-1110000D8301}" = Grand Theft Auto IV
"{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3
"{553255F3-78FD-40F1-A6F8-6882140265FE}" = Apple Application Support
"{579BA58C-F33D-4970-9953-B94B43768AC3}" = Grand Theft Auto IV
"{58B785A2-D2CA-40AA-AE89-FCC49326CDC4}" = OpenOffice.org 3.2
"{590F4980-1C17-EF89-E0C8-1D5866385DD5}" = CCC Help English
"{5B6D2707-8C04-47B5-B8E6-8D170ED6F998}_is1" = 6klasa wersja 1.0
"{5ECA5B22-4073-8A6D-2E7E-8F4C39FC4309}" = Catalyst Control Center InstallProxy
"{6224EC98-7FD6-42E1-8303-4F2EBAD7CC2D}_is1" = CD Ripper Freeware
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{64C1FA9A-FA94-4B6E-B3E4-8573738E4AD1}" = Adobe Setup
"{670A2206-F20A-490C-8C13-25EA88BF8E53}_is1" = e-pity 2010
"{6834B8AE-D23B-4B26-A919-6515844CF2BA}" = CorelDRAW Graphics Suite X4 - Lang PL
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6ABE0BEE-D572-4FE8-B434-9E72A289431B}" = Adobe Fonts All
"{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PartitionMagic
"{6D4AC5A4-4CF9-4F90-8111-B9B53CE257BF}" = Adobe Color Common Settings
"{6D592E30-11EC-11E0-859C-0013D3D69929}" = Vegas Pro 10.0
"{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3
"{7032B400-11EC-11E0-A9BF-0013D3D69929}" = MSVCRT Redists
"{7234061E-3D70-2682-F47B-75A5D2F83685}" = Catalyst Control Center
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{75D84EF7-0D8C-4e70-B3FA-7B42A5D4E0EB}" = Mass Effect 2
"{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}" = Avanquest update
"{789289CA-F73A-4A16-A331-54D498CE069F}" = Ventrilo
"{7F05E704-30A6-421A-97A7-8EEB1C7FF010}" = CorelDRAW Graphics SUite X4 - ICA
"{7F05E704-30A6-421A-97A7-8EEB1C7FF012}" = CorelDRAW Graphics Suite X4 - Capture
"{7F05E704-30A6-421A-97A7-8EEB1C7FF013}" = CorelDRAW Graphics Suite X4 - Draw
"{7F05E704-30A6-421A-97A7-8EEB1C7FF014}" = CorelDRAW Graphics Suite X4 - PP
"{7F05E704-30A6-421A-97A7-8EEB1C7FF016}" = CorelDRAW Graphics Suite X4 - Content
"{7F05E704-30A6-421A-97A7-8EEB1C7FF017}" = CorelDRAW Graphics Suite X4 - Filters
"{7F05E704-30A6-421A-97A7-8EEB1C7FF019}" = CorelDRAW Graphics Suite X4 - FontNav
"{7F6D7FD9-648D-4DD9-BB6E-3990C675ECA4}" = NVIDIA PhysX
"{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3
"{836BCDB0-D232-42D6-A641-140653A163F1}" = SR9600 driver for XP
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3
"{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}" = Adobe Type Support
"{90140000-0010-0415-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Polish) 14
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2010
"{90140000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2010
"{90140000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2010
"{90140000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2010
"{90140000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2010
"{90140000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2010
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2010
"{90140000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2010
"{90140000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2010
"{90140000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2010
"{90140000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2010
"{90140000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2010
"{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3
"{918A9082-6287-4D25-9002-5E5D5E4971CB}" = League of Legends
"{92C04338-6792-4904-A2D0-83072BE4F7F6}" = Krzyzowka
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{95655ED4-7CA5-46DF-907F-7144877A32E5}" = Adobe Color NA Recommended Settings
"{967FB80D-56BD-42EF-A942-9E8C78F984A4}" = Saitek SST Programming Software
"{9773450C-E2F3-46C3-9464-1D7EDE5EFB63}" = Pro Evolution Soccer 2011
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B3D7519-F678-49A4-B7D9-A7F56471C6EC}" = SR9600 Driver
"{9B97EC91-B3FD-4BFF-88FC-5345A26AC2E7}" = Adobe Illustrator CS5
"{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3
"{9D0798D0-AF6C-4E62-94B1-AEBF1A43E00A}" = CorelDRAW Graphics Suite X4 - IPM
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1" = PDF-Viewer
"{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}" = Adobe CMaps
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{A9D8B322-D05B-4FC6-9B9D-6296BFA13039}" = QF9700 For winXP-2003
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}" = PDF Settings
"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.7
"{AEB9948B-4FF2-47C9-990E-47014492A0FE}" = MSXML 6.0 Parser
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 285.58
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 285.58
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView" = NVIDIA nView 135.95
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Oprogramowanie systemu PhysX 9.11.0621
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 1.5.20
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Sterownik dźwięku HD 1.2.24.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0
"{B3C02EC1-A7B0-4987-9A43-8789426AAA7D}" = Adobe Setup
"{B61D21B6-469D-4423-B161-62DB20B8A70E}" = Visual Basic for Applications (R) Core - English
"{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}" = PlayStation(R)Network Downloader
"{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}" = Adobe Default Language CS3
"{BB9AC6BF-71B6-42A4-9689-C17D9F44E79A}" = Brother MFL-Pro Suite
"{BF439B41-0252-48DE-8B8B-0430CB26A181}" = CorelDRAW Graphics Suite X4 - VBA
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C13A8E73-7E98-4295-BA94-6931701CD1F9}" = Topaz Vivacity
"{C61177FD-37C4-4C5F-BE6C-E04A8AC399B6}" = EclipseCrossword
"{C9C13822-A638-4331-99A3-4498A5901693}" = Media Go
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE2DA11A-917F-4CF5-AB55-755EC115DD10}" = CorelDRAW(R) Graphics Suite X4 - Windows Shell Extension
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D1BB4446-AE9C-4256-9A7F-4D46604D2462}" = Adobe Setup
"{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}" = Adobe PDF Library Files
"{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.4.8 Game
"{D7739941-59D4-F971-A68B-0318CFBE02D6}" = ccc-utility
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1" = ConvertXtoDVD 4.0.12.327
"{DB81779E-7CC5-4630-BCFC-754004956444}" = Visual Basic for Applications (R) Core
"{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}" = Adobe Color JA Extra Settings
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1" = Auslogics Disk Defrag
"{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony Ericsson PC Companion 2.01.217
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{FD8E178D-8B4E-42DA-B434-EFF270329B1C}" = COMODO Internet Security
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"035418B874CAB0BD4649A09B2D468D9544E77435" = Pakiet sterowników systemu Windows - Corechip Semiconductor, Inc. (QF97USB) Net (09/21/2010 1.00.0921.0)
"7-Zip" = 7-Zip 9.20
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0415-1E257A25E34D}" = Adobe Photoshop CS2
"Adobe_2ac78060bc5856b0c1cf873bb919b58" = Adobe Photoshop CS3
"Adobe_3e054d2218e7aa282c2369d939e58ff" = Adobe ExtendScript Toolkit 2
"Adobe_6c8e2cb4fd241c55406016127a6ab2e" = Adobe Color Common Settings
"Ad-Remover" = Ad-Remover par C_XX
"Album Art Downloader XUI" = Album Art Downloader XUI 0.41
"Angry Birds" = Angry Birds
"AQQ" = WapSter AQQ
"Ashampoo Burning Studio 10_is1" = Ashampoo Burning Studio 10.0.4
"Audacity_is1" = Audacity 1.2.6
"CCleaner" = CCleaner
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"Cool Edit Pro 2.1" = Cool Edit Pro 2.1
"Cool Record Edit Pro" = Cool Record Edit Pro
"Deluxe Ski Jump 4_is1" = Deluxe Ski Jump 4 Beta-1
"Driver Cleaner" = Driver Cleaner 3
"Dziobas Rar Player_is1" = Dziobas Rar Player 0.009.52
"ESL Wire_is1" = ESL Wire 1.9.7
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.50
"Exact Audio Copy" = Exact Audio Copy 1.0beta2
"ffdshow_is1" = ffdshow v1.1.3631 [2010-11-15]
"FL Studio 9" = FL Studio 9
"foobar2000" = foobar2000 v1.1.7
"Football Manager 2011" = Football Manager 2011
"Football Manager 2012_is1" = Football Manager 2012
"Fotosizer" = Fotosizer 1.31
"Fraps" = Fraps (remove only)
"Free Mp3 Wma Converter_is1" = Free Mp3 Wma Converter V 1.95
"Gadu-Gadu" = Gadu-Gadu 7.7
"GameDesire-Pool & Snooker" = GameDesire-Pool & Snooker
"GFWL_{434D0FA0-1558-4D8E-AC3D-BD1000008200}" = DiRT 3
"Glary Utilities_is1" = Glary Utilities 2.34.0.1190
"Gordon's Gate Flash Driver" = Gordon's Gate Flash Driver 2.2.0.3
"Hardcore" = Hardcore
"ie8" = Windows Internet Explorer 8
"IL Download Manager" = IL Download Manager
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platforma Menedżera urządzeń
"InstallShield_{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PowerQuest PartitionMagic 8.0
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"InterActual Player" = InterActual Player
"Internet Download Manager" = Internet Download Manager
"ipla" = ipla 2.3.5
"IrfanView" = IrfanView (remove only)
"JDownloader" = JDownloader
"KLiteCodecPack_is1" = K-Lite Codec Pack 6.2.0 (Basic)
"KVIrc" = KVIrc
"LastFM_is1" = Last.fm 1.5.4.27091
"Łatka polonizacyjna GTA IV v0.98" = Łatka polonizacyjna GTA IV v0.98
"Mafia II_is1" = Mafia II
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware wersja 1.60.0.1800
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"mIRC" = mIRC
"Mozilla Firefox (3.6.17)" = Mozilla Firefox (3.6.17)
"Mozilla Firefox 8.0.1 (x86 pl)" = Mozilla Firefox 8.0.1 (x86 pl)
"Mp3tag" = Mp3tag v2.49
"MPE" = MyPhoneExplorer
"Mumble" = Mumble and Murmur
"MySSID_is1" = EXPERTool 7.10
"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"OpenAL" = OpenAL
"Opera 11.60.1185" = Opera 11.60
"Origin" = Origin
"PageshotsPro_is1" = PageshotsPro 1.0.0
"phgram_60_is1" = Profesor Henry 6.0 Gramatyka
"Pity Format 2010_is1" = Pity Format 2010
"PoiZone" = PoiZone
"Prof60_Rozum_is1" = Profesor Henry 6.0 Rozumienie ze słuchu i konwersacje
"PSP 84 v1.1" = PSP 84 v1.1
"Saints Row The Third_is1" = Saints Row The Third
"Sawer" = Sawer
"slow_12_60_is1" = Profesor Henry 6.0 Słownictwo poziom 1 i 2
"slow_34_60_is1" = Profesor Henry 6.0 Słownictwo poziom 3 i 4
"Sony Ericsson Themes Creator" = Sony Ericsson Themes Creator 4.16.2.6
"SopCast" = SopCast 3.2.9
"Szkoła podstawowa klasa 5 - DZIEŃ DOBRY HISTORIO!" = Szkoła podstawowa klasa 5 - DZIEŃ DOBRY HISTORIO!
"Toxic Biohazard" = Toxic Biohazard
"Unlocker" = Unlocker 1.9.1
"Update Service" = Sony Ericsson Update Service
"Veetle TV" = Veetle TV 0.9.18
"VeryPDF PDF2Word v3.0_is1" = VeryPDF PDF2Word v3.0
"Virtual DJ Pro Full - Atomix Productions" = Virtual DJ Pro Full - Atomix Productions
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"WinAVI Video Converter" = WinAVI Video Converter
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"WinRAR archiver" = Archiwizator WinRAR
"ZillaTube" = ZillaTube 4.8
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
[HKEY_USERS\S-1-5-21-1390067357-1085031214-725345543-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"477233b55d082a86" = Company of Heroes Online Launcher (THQ)
"Flash Video Downloader 2.4" = Flash Video Downloader 2.4
"GameRanger" = GameRanger
"Google Chrome" = Google Chrome
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
[ Application Events ]
Error - 2012-01-05 15:58:54 | Computer Name = MICHA-0SYKH35PG | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd foobar2000.exe, wersja 1.1.7.0, moduł powodujący
błąd foo_uie_vis_channel_spectrum.dll, wersja 0.0.0.0, adres błędu 0x00016be6.
Error - 2012-01-05 18:20:59 | Computer Name = MICHA-0SYKH35PG | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd foobar2000.exe, wersja 1.1.7.0, moduł powodujący
błąd foo_uie_vis_channel_spectrum.dll, wersja 0.0.0.0, adres błędu 0x00016be6.
Error - 2012-01-06 10:26:46 | Computer Name = MICHA-0SYKH35PG | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd foobar2000.exe, wersja 1.1.7.0, moduł powodujący
błąd foo_uie_vis_channel_spectrum.dll, wersja 0.0.0.0, adres błędu 0x00016be6.
Error - 2012-01-07 13:57:57 | Computer Name = MICHA-0SYKH35PG | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd foobar2000.exe, wersja 1.1.7.0, moduł powodujący
błąd foo_uie_vis_channel_spectrum.dll, wersja 0.0.0.0, adres błędu 0x00016be6.
Error - 2012-01-07 19:55:39 | Computer Name = MICHA-0SYKH35PG | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd foobar2000.exe, wersja 1.1.7.0, moduł powodujący
błąd foo_uie_vis_channel_spectrum.dll, wersja 0.0.0.0, adres błędu 0x00016be6.
Error - 2012-01-08 14:59:19 | Computer Name = MICHA-0SYKH35PG | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd foobar2000.exe, wersja 1.1.7.0, moduł powodujący
błąd foo_uie_vis_channel_spectrum.dll, wersja 0.0.0.0, adres błędu 0x00016be6.
Error - 2012-01-09 14:18:33 | Computer Name = MICHA-0SYKH35PG | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd wmplayer.exe, wersja 9.0.0.4503, moduł powodujący
błąd ntdll.dll, wersja 5.1.2600.5512, adres błędu 0x0001b1fa.
Error - 2012-01-09 15:07:18 | Computer Name = MICHA-0SYKH35PG | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd foobar2000.exe, wersja 1.1.7.0, moduł powodujący
błąd foo_uie_vis_channel_spectrum.dll, wersja 0.0.0.0, adres błędu 0x00016be6.
Error - 2012-01-09 18:43:48 | Computer Name = MICHA-0SYKH35PG | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd foobar2000.exe, wersja 1.1.7.0, moduł powodujący
błąd foo_uie_vis_channel_spectrum.dll, wersja 0.0.0.0, adres błędu 0x00016be6.
Error - 2012-01-10 15:23:46 | Computer Name = MICHA-0SYKH35PG | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd chrome.exe, wersja 16.0.912.75, moduł powodujący
błąd kernel32.dll, wersja 5.1.2600.5512, adres błędu 0x00012aeb.
[ System Events ]
Error - 2012-01-10 15:25:06 | Computer Name = MICHA-0SYKH35PG | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi General Purpose USB Driver (e4ldr.sys)
z powodu następującego błędu: %%1058
Error - 2012-01-10 16:53:57 | Computer Name = MICHA-0SYKH35PG | Source = Service Control Manager | ID = 7034
Description = Usługa BrSplService niespodziewanie zakończyła pracę. Wystąpiło to
razy: 1.
Error - 2012-01-10 16:53:57 | Computer Name = MICHA-0SYKH35PG | Source = Service Control Manager | ID = 7034
Description = Usługa COMODO Internet Security Helper Service niespodziewanie zakończyła
pracę. Wystąpiło to razy: 1.
Error - 2012-01-10 16:53:57 | Computer Name = MICHA-0SYKH35PG | Source = Service Control Manager | ID = 7034
Description = Usługa ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## niespodziewanie
zakończyła pracę. Wystąpiło to razy: 1.
Error - 2012-01-10 16:53:57 | Computer Name = MICHA-0SYKH35PG | Source = Service Control Manager | ID = 7034
Description = Usługa NVIDIA Driver Helper Service niespodziewanie zakończyła pracę.
Wystąpiło to razy: 1.
Error - 2012-01-10 16:53:57 | Computer Name = MICHA-0SYKH35PG | Source = Service Control Manager | ID = 7034
Description = Usługa Protexis Licensing V2 niespodziewanie zakończyła pracę. Wystąpiło
to razy: 1.
Error - 2012-01-10 16:53:57 | Computer Name = MICHA-0SYKH35PG | Source = Service Control Manager | ID = 7034
Description = Usługa Java Quick Starter niespodziewanie zakończyła pracę. Wystąpiło
to razy: 1.
Error - 2012-01-10 16:55:30 | Computer Name = MICHA-0SYKH35PG | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi General Purpose USB Driver (e4ldr.sys)
z powodu następującego błędu: %%1058
Error - 2012-01-10 17:58:01 | Computer Name = MICHA-0SYKH35PG | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi General Purpose USB Driver (e4ldr.sys)
z powodu następującego błędu: %%1058
Error - 2012-01-10 18:07:36 | Computer Name = MICHA-0SYKH35PG | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi General Purpose USB Driver (e4ldr.sys)
z powodu następującego błędu: %%1058
< End of report >
Wojtas, solidny bowdown dla Ciebie plus duże piwo przy okazji, Origin po 3 tygodniach próby właśnie się włączył, aż nie wierzę. Może jeszcze napiszesz mi czym to mogło być mniej więcej spowodowane?
Grafika to moja pasja
-
ziooMuś - ~user
- Posty: 659
- Dołączenie: 06 Maj 2007, 17:04
- Miejscowość: Płock
- Pochwały: 20
-
Niemożność zalogowania się do origin - infekcja?
przez wojtas 11 Sty 2012, 00:54
najprawdopodobniej:
czyli dodane przez Spybota ? linki aby nie można było wejść, do tego było trochę smieci
O1 - Hosts: 127.0.0.1 ci-main.loginregistration.eadm.ea.com
O1 - Hosts: 127.0.0.1 motd.dm.origin.com
O1 - Hosts: 127.0.0.1 store.origin.com
O1 - Hosts: 127.0.0.1 drh.img.digitalriver.com
O1 - Hosts: 127.0.0.1 drh2.img.digitalriver.com
O1 - Hosts: 127.0.0.1 drh1.img.digitalriver.com
O1 - Hosts: 127.0.0.1 eaeacom.112.2o7.net
O1 - Hosts: 127.0.0.1 b.scorecardresearch.com
O1 - Hosts: 127.0.0.1 heartbeat.dm.origin.com
O1 - Hosts: 127.0.0.1 web.dm.origin.com
O1 - Hosts: 127.0.0.1 loginregistration.dm.origin.com
O1 - Hosts: 127.0.0.1 friends.dm.origin.com:443
O1 - Hosts: 127.0.0.1 avatar.dm.origin.com:443
O1 - Hosts: 127.0.0.1 ecommerce.dm.origin.com
O1 - Hosts: 127.0.0.1 gosredirector.ea.com
O1 - Hosts: 127.0.0.1 blazeserver.blazeemu.org
O1 - Hosts: 127.0.0.1 gosgvaprod-qos01.ea.com
O1 - Hosts: 127.0.0.1 gosiadprod-qos01.ea.com
O1 - Hosts: 127.0.0.1 gossjcprod-qos01.ea.com
O1 - Hosts: 127.0.0.1 demangler.ea.com
O1 - Hosts: 127.0.0.1 vmp.tools.gos.ea.com
czyli dodane przez Spybota ? linki aby nie można było wejść, do tego było trochę smieci
-
wojtas - *mod
- Posty: 18165
- Dołączenie: 13 Sty 2006, 16:00
- Miejscowość: Krzeszyce
- Pochwały: 1656
-
Niemożność zalogowania się do origin - infekcja?
przez ziooMuś 11 Sty 2012, 01:18
Ale Spybot był instalowany w trakcie problemów, czyli jak go nie było to też nie działało...
Grafika to moja pasja
-
ziooMuś - ~user
- Posty: 659
- Dołączenie: 06 Maj 2007, 17:04
- Miejscowość: Płock
- Pochwały: 20
-
7 posty(ów) • Strona 1 z 1
Kto jest na forum
Użytkownicy przeglądający to forum: Brak zarejestrowanych użytkowników oraz 3 gości