Zamulający komputer, przeglądarka

**Posty:** 2 · przez **ManXer** 25 Wrz 2012, 17:55

Witam. Czasem komputer poważnie się zacina przy filmach na YouTubie lub jakimkolwiek flashu, często jest też tak że przeskakuje z karty na kartę i jest tylko białe tło lub jest to samo co na poprzedniej karcie. Nic nie daje zmiana przeglądarki.
Dodam jeszcze że na logu jest pokazane że mam 0,05GB wolnego miejsca na C:\, ale aktualnie mam wolne 31GB i nic to nie zmienia.

**Posty:** 18165 · przez **wojtas** 26 Wrz 2012, 20:34

znasz?

C:\dag213.exe

Uruchom OTL i w sekcji własne opcje skanowania / skrypt wklej:

:OTL
O4 - HKU\S-1-5-21-1795605532-3804845324-3923751414-1000..\Run: [ASRockXTU] File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

:Commands
[emptytemp]

Kliknij wykonaj skrypt. I potwierdź reset komputera .

Użyj AdwCleaner i kliknij w nim Delete (w przypadku Visty/Windows7 uruchom z prawokliku jako Administrator)
Pokaż raport z niego

Następnie uruchamiasz OTL z opcją skanuj. Pokazujesz nowy log OTL.txt oraz raport z czyszczenia (zawartość notatnika, która otworzyła się po restarcie).

**Posty:** 2 · przez **ManXer** 26 Wrz 2012, 22:26

dag213 to był plik z TES: Daggerfall, w razie czego skasowałem.

09262012_220140.txt:

Kod: Zaznacz wszystko: All processes killed ========== OTL ========== Registry value HKEY_USERS\S-1-5-21-1795605532-3804845324-3923751414-1000\Software\Microsoft\Windows\CurrentVersion\Run\\ASRockXTU deleted successfully. Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully. Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Mikolaj ->Temp folder emptied: 6610882 bytes ->Temporary Internet Files folder emptied: 7458975 bytes ->Java cache emptied: 13032886 bytes ->Google Chrome cache emptied: 270392799 bytes ->Opera cache emptied: 0 bytes ->Flash cache emptied: 3241 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 63 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 107552 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 65542 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50534 bytes RecycleBin emptied: 260000 bytes Total Files Cleaned = 284,00 mb OTL by OldTimer - Version 3.2.68.0 log created on 09262012_220140 Files\Folders moved on Reboot... C:\Users\Mikolaj\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. File\Folder C:\Windows\temp\hsperfdata_MIKOLAJ-PC$\3232 not found! PendingFileRenameOperations files... Registry entries deleted on Reboot...

AdwCleaner[S1]

Kod: Zaznacz wszystko: # AdwCleaner v2.003 - Logfile created 09/26/2012 at 22:08:09 # Updated 23/09/2012 by Xplode # Operating system : Windows 7 Home Premium Service Pack 1 (64 bits) # User : Mikolaj - MIKOLAJ-PC # Boot Mode : Normal # Running from : C:\Users\Mikolaj\Downloads\adwcleaner.exe # Option [Delete] ***** [Services] ***** Stopped & Deleted : RelevantKnowledge ***** [Files / Folders] ***** Deleted on reboot : C:\Program Files (x86)\RelevantKnowledge Folder Deleted : C:\ProgramData\APN Folder Deleted : C:\ProgramData\Ask Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge Folder Deleted : C:\Users\Mikolaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkndcbhcgphcfkkddanakjiepeknbgle Folder Deleted : C:\Users\Mikolaj\AppData\Roaming\pdfforge ***** [Registry] ***** Key Deleted : HKCU\Software\Conduit Key Deleted : HKCU\Software\Softonic Key Deleted : HKLM\Software\Conduit Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\mkndcbhcgphcfkkddanakjiepeknbgle Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D08D9F98-1C78-4704-87E6-368B0023D831} ***** [Internet Browsers] ***** -\\ Internet Explorer v9.0.8112.16421 Restored : [HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Restored : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Restored : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Restored : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope] -\\ Google Chrome v21.0.1180.89 File : C:\Users\Mikolaj\AppData\Local\Google\Chrome\User Data\Default\Preferences Deleted [l.18] : urls_to_restore_on_startup = [ "hxxp://www.google.com/", "hxxp://isearch.avg.com/?cid={AE739B06-BED6-47A3-9B28-CE9CEEF61DDE}&mid=d4a64788f7ee47d0b483d16c6456fcdf-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=en&ds=qw011&pr=sa&d=2012-06-29 12:17:24&v=11.1.0.12&sap=hp" ] Deleted [l.2662] : urls_to_restore_on_startup = [ "hxxp://www.google.com/", "hxxp://isearch.avg.com/?cid={AE739B06-BED6-47A3-9B28-CE9CEEF61DDE}&mid=d4a64788f7ee47d0b483d16c6456fcdf-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=en&ds=qw011&pr=sa&d=2012-06-29 12:17:24&v=11.1.0.12&sap=hp" ] -\\ Opera v11.61.1250.0 File : C:\Users\Mikolaj\AppData\Roaming\Opera\Opera\operaprefs.ini [OK] File is clean. ************************* AdwCleaner[S1].txt - [2473 octets] - [26/09/2012 22:08:09] ########## EOF - C:\AdwCleaner[S1].txt - [2533 octets] ##########

OTL.txt

Kod: Zaznacz wszystko: OTL logfile created on: 2012-09-26 22:13:35 - Run 2 OTL by OldTimer - Version 3.2.68.0 Folder = C:\Users\Mikolaj\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 7,98 Gb Total Physical Memory | 5,17 Gb Available Physical Memory | 64,75% Memory free 15,95 Gb Paging File | 12,58 Gb Available in Paging File | 78,87% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 120,00 Gb Total Space | 25,19 Gb Free Space | 21,00% Space Free | Partition Type: NTFS Drive D: | 345,66 Gb Total Space | 41,98 Gb Free Space | 12,14% Space Free | Partition Type: NTFS Drive E: | 422,63 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Drive F: | 1,70 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS Drive H: | 581,94 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Drive I: | 422,63 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: MIKOLAJ-PC | User Name: Mikolaj | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-09-25 15:29:35 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Mikolaj\Downloads\OTL.exe PRC - [2012-09-25 15:19:47 | 003,618,952 | ---- | M] (GG Network S.A.) -- C:\Users\Mikolaj\AppData\Local\GG\Application\ggdrive\ggdrive.exe PRC - [2012-09-25 15:19:47 | 000,153,736 | ---- | M] (GG Network S.A.) -- C:\Users\Mikolaj\AppData\Local\GG\Application\ggapp.exe PRC - [2012-09-23 11:34:28 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2012-08-28 22:47:29 | 003,519,936 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe PRC - [2012-08-16 14:03:11 | 001,353,080 | ---- | M] (Valve Corporation) -- D:\Program Files (x86)\Steam\Steam.exe PRC - [2012-07-31 19:07:53 | 000,949,104 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\Opera.exe PRC - [2012-07-31 12:38:29 | 000,195,256 | ---- | M] () -- C:\Users\Mikolaj\AppData\Roaming\DRPSu\DrvUpdater.exe PRC - [2012-07-30 18:52:15 | 005,019,360 | ---- | M] (FNet Co., Ltd.) -- C:\Program Files (x86)\XFastUSB\XFastUsb.exe PRC - [2012-07-30 18:46:47 | 000,895,376 | ---- | M] (BitTorrent, Inc.) -- C:\Users\Mikolaj\Downloads\uTorrent.exe PRC - [2012-07-25 12:57:08 | 029,357,952 | ---- | M] (SlimWare Utilities, Inc.) -- C:\Program Files (x86)\SlimDrivers\SlimDrivers.exe PRC - [2012-07-19 11:56:02 | 003,381,384 | ---- | M] (GG Network S.A.) -- C:\Users\Mikolaj\AppData\Local\GG\Application\gghub.exe PRC - [2012-06-27 13:01:14 | 000,096,768 | ---- | M] (Freemake) -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe PRC - [2012-06-22 10:32:12 | 000,625,816 | ---- | M] (Pandora.TV) -- C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe PRC - [2012-05-31 15:00:22 | 000,445,624 | ---- | M] (Sony) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe PRC - [2012-04-30 11:57:42 | 000,067,072 | ---- | M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe PRC - [2012-04-03 20:45:36 | 002,121,216 | ---- | M] () -- C:\Program Files (x86)\screenSHU\screenSHU.exe PRC - [2011-04-24 23:15:02 | 000,202,296 | ---- | M] (Kaspersky Lab ZAO) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe PRC - [2011-03-02 17:20:58 | 000,224,256 | ---- | M] () -- C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe PRC - [2010-05-25 14:28:58 | 000,263,600 | ---- | M] (Tonec Inc.) -- C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe PRC - [2009-01-30 00:20:49 | 000,057,344 | ---- | M] (SlySoft, Inc.) -- C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe PRC - [2007-05-28 18:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-09-26 22:12:24 | 000,057,344 | ---- | M] () -- C:\Users\Mikolaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj\1.0.0_0\npFreemake.dll MOD - [2012-09-25 15:19:47 | 001,945,600 | ---- | M] () -- C:\Users\Mikolaj\AppData\Local\GG\Application\xulrunner\mozjs.dll MOD - [2012-09-10 16:11:52 | 000,589,312 | ---- | M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\PhoneUpdate.dll MOD - [2012-09-07 23:42:41 | 020,317,008 | ---- | M] () -- D:\Program Files (x86)\Steam\bin\libcef.dll MOD - [2012-09-07 23:42:38 | 000,902,480 | ---- | M] () -- D:\Program Files (x86)\Steam\bin\chromehtml.dll MOD - [2012-09-07 23:42:36 | 000,123,232 | ---- | M] () -- D:\Program Files (x86)\Steam\bin\avutil-51.dll MOD - [2012-09-07 23:42:34 | 000,190,816 | ---- | M] () -- D:\Program Files (x86)\Steam\bin\avformat-53.dll MOD - [2012-09-07 23:42:32 | 001,099,616 | ---- | M] () -- D:\Program Files (x86)\Steam\bin\avcodec-53.dll MOD - [2012-08-30 04:58:45 | 000,442,392 | ---- | M] () -- C:\Users\Mikolaj\AppData\Local\Google\Chrome\Application\21.0.1180.89\ppGoogleNaClPluginChrome.dll MOD - [2012-08-30 04:58:44 | 012,237,336 | ---- | M] () -- C:\Users\Mikolaj\AppData\Local\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll MOD - [2012-08-30 04:58:42 | 003,997,720 | ---- | M] () -- C:\Users\Mikolaj\AppData\Local\Google\Chrome\Application\21.0.1180.89\pdf.dll MOD - [2012-08-30 04:57:27 | 000,526,872 | ---- | M] () -- C:\Users\Mikolaj\AppData\Local\Google\Chrome\Application\21.0.1180.89\libglesv2.dll MOD - [2012-08-30 04:57:26 | 000,104,984 | ---- | M] () -- C:\Users\Mikolaj\AppData\Local\Google\Chrome\Application\21.0.1180.89\libegl.dll MOD - [2012-08-30 04:57:15 | 000,144,424 | ---- | M] () -- C:\Users\Mikolaj\AppData\Local\Google\Chrome\Application\21.0.1180.89\avutil-51.dll MOD - [2012-08-30 04:57:13 | 000,266,792 | ---- | M] () -- C:\Users\Mikolaj\AppData\Local\Google\Chrome\Application\21.0.1180.89\avformat-54.dll MOD - [2012-08-30 04:57:12 | 002,480,680 | ---- | M] () -- C:\Users\Mikolaj\AppData\Local\Google\Chrome\Application\21.0.1180.89\avcodec-54.dll MOD - [2012-07-31 12:38:29 | 000,195,256 | ---- | M] () -- C:\Users\Mikolaj\AppData\Roaming\DRPSu\DrvUpdater.exe MOD - [2012-07-19 11:56:02 | 000,135,168 | ---- | M] () -- C:\Users\Mikolaj\AppData\Local\GG\Application\ggdrive\zlib1.dll MOD - [2012-05-30 20:06:48 | 000,087,912 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll MOD - [2012-05-30 20:06:30 | 001,242,512 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll MOD - [2012-05-24 11:50:32 | 000,203,776 | ---- | M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\MExplorer.dll MOD - [2012-04-30 11:57:42 | 000,067,072 | ---- | M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe MOD - [2012-04-30 11:57:42 | 000,039,936 | ---- | M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\TMonitorAPI.dll MOD - [2012-04-03 20:45:36 | 002,121,216 | ---- | M] () -- C:\Program Files (x86)\screenSHU\screenSHU.exe MOD - [2012-02-02 19:26:52 | 000,043,008 | ---- | M] () -- C:\Program Files (x86)\screenSHU\libgcc_s_dw2-1.dll MOD - [2012-02-02 19:26:52 | 000,011,362 | ---- | M] () -- C:\Program Files (x86)\screenSHU\mingwm10.dll MOD - [2011-07-07 14:54:36 | 000,233,984 | ---- | M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\Report.dll MOD - [2011-04-24 23:13:30 | 007,008,656 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\QtGui4.dll MOD - [2011-04-24 23:13:28 | 000,192,912 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\QtSql4.dll MOD - [2011-04-24 23:13:26 | 001,270,160 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\QtScript4.dll MOD - [2011-04-24 23:13:26 | 000,758,160 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\QtNetwork4.dll MOD - [2011-04-24 23:13:24 | 002,118,032 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\QtCore4.dll MOD - [2011-04-24 23:13:24 | 002,089,360 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\QtDeclarative4.dll MOD - [2011-04-20 19:56:28 | 000,025,088 | ---- | M] () -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\imageformats\qgif4.dll MOD - [2010-01-11 16:44:54 | 000,053,248 | ---- | M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\VObject.dll [color=#E56717]========== Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2012-09-16 14:25:14 | 000,415,232 | ---- | M] (Tanuki Software, Ltd.) [Auto | Running] -- C:\Program Files\i2p\I2Psvc.exe -- (i2p) SRV:[b]64bit:[/b] - [2012-06-17 09:52:14 | 000,098,576 | ---- | M] (SANDBOXIE L.T.D) [Auto | Running] -- C:\Program Files\Sandboxie\SbieSvc.exe -- (SbieSvc) SRV:[b]64bit:[/b] - [2011-10-19 16:19:30 | 000,395,136 | R--- | M] (cFos Software GmbH) [Auto | Running] -- C:\Program Files\ASRock\XFast LAN\spd.exe -- (cFosSpeedS) SRV:[b]64bit:[/b] - [2011-05-24 23:03:38 | 000,204,288 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2012-09-23 11:34:28 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2012-06-27 13:01:14 | 000,096,768 | ---- | M] (Freemake) [Auto | Running] -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe -- (Freemake Improver) SRV - [2012-06-22 10:32:12 | 000,625,816 | ---- | M] (Pandora.TV) [Auto | Running] -- C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe -- (PanService) SRV - [2012-01-25 17:40:56 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2012-01-18 14:38:28 | 000,155,320 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion) SRV - [2011-04-24 23:15:02 | 000,202,296 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe -- (AVP) SRV - [2011-03-02 17:20:58 | 000,224,256 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe -- (DirMngr) SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2007-05-28 18:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) [Auto | Running] -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2012-09-26 22:09:55 | 000,015,712 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SWDUMon.sys -- (SWDUMon) DRV:[b]64bit:[/b] - [2012-09-25 15:24:07 | 000,564,824 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2012-09-18 18:55:24 | 000,032,320 | ---- | M] (FNet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\FNETTBOH_305.SYS -- (FNETTBOH_305) DRV:[b]64bit:[/b] - [2012-08-22 00:21:37 | 000,034,032 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\seehcri.sys -- (seehcri) DRV:[b]64bit:[/b] - [2012-08-08 22:49:14 | 000,027,760 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc) DRV:[b]64bit:[/b] - [2012-08-08 22:49:14 | 000,014,448 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt) DRV:[b]64bit:[/b] - [2012-08-02 02:23:14 | 000,158,944 | ---- | M] (Tonec Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\idmwfp.sys -- (IDMWFP) DRV:[b]64bit:[/b] - [2012-07-30 20:42:46 | 000,615,728 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\Windows\SysNative\drivers\klif.sys -- (KLIF) DRV:[b]64bit:[/b] - [2012-07-30 18:52:15 | 000,015,936 | ---- | M] (FNet Co., Ltd.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\FNETURPX.SYS -- (FNETURPX) DRV:[b]64bit:[/b] - [2012-06-17 09:52:12 | 000,166,576 | ---- | M] (SANDBOXIE L.T.D) [Kernel | On_Demand | Running] -- C:\Program Files\Sandboxie\SbieDrv.sys -- (SbieDrv) DRV:[b]64bit:[/b] - [2012-06-05 16:03:52 | 000,147,288 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp) DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2012-01-13 12:52:38 | 000,031,016 | ---- | M] (ASRock Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AsrRamDisk.sys -- (AsrRamDisk) DRV:[b]64bit:[/b] - [2011-09-22 10:49:56 | 000,056,600 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) DRV:[b]64bit:[/b] - [2011-09-08 17:40:24 | 000,508,520 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rtlh64.sys -- (RTL8169) DRV:[b]64bit:[/b] - [2011-08-17 09:58:16 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd) DRV:[b]64bit:[/b] - [2011-07-29 13:54:56 | 000,016,776 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\epmntdrv.sys -- (epmntdrv) DRV:[b]64bit:[/b] - [2011-07-29 13:54:56 | 000,009,096 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\EuGdiDrv.sys -- (EuGdiDrv) DRV:[b]64bit:[/b] - [2011-07-04 15:19:34 | 001,632,128 | ---- | M] (cFos Software GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\cfosspeed6.sys -- (cFosSpeed) DRV:[b]64bit:[/b] - [2011-06-16 19:10:20 | 000,310,576 | ---- | M] (Marvell Semiconductor, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mv91xx.sys -- (mv91xx) DRV:[b]64bit:[/b] - [2011-05-25 00:26:56 | 009,359,872 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag) DRV:[b]64bit:[/b] - [2011-05-24 22:25:42 | 000,309,760 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:[b]64bit:[/b] - [2011-03-30 14:46:44 | 000,114,704 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService) DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2011-03-10 18:36:24 | 000,029,488 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\klim6.sys -- (KLIM6) DRV:[b]64bit:[/b] - [2011-03-04 13:23:28 | 000,011,864 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\kl2.sys -- (kl2) DRV:[b]64bit:[/b] - [2011-03-04 13:23:24 | 000,460,888 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\kl1.sys -- (KL1) DRV:[b]64bit:[/b] - [2011-02-08 15:30:52 | 000,064,512 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronXHCI.sys -- (EtronXHCI) DRV:[b]64bit:[/b] - [2011-02-08 15:30:52 | 000,039,936 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronHub3.sys -- (EtronHub3) DRV:[b]64bit:[/b] - [2010-11-21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2010-06-23 17:10:56 | 000,344,680 | ---- | M] (Realtek ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2009-11-02 20:27:10 | 000,022,544 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\klmouflt.sys -- (klmouflt) DRV:[b]64bit:[/b] - [2009-09-21 01:43:52 | 000,161,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ss_mdm.sys -- (ss_mdm) DRV:[b]64bit:[/b] - [2009-09-21 01:43:52 | 000,127,488 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ss_bus.sys -- (ss_bus) DRV:[b]64bit:[/b] - [2009-09-21 01:43:52 | 000,018,944 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ss_mdfl.sys -- (ss_mdfl) DRV:[b]64bit:[/b] - [2009-08-13 22:10:18 | 000,073,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-05-18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV:[b]64bit:[/b] - [2009-02-17 19:11:25 | 000,031,400 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO) DRV:[b]64bit:[/b] - [2007-02-16 02:57:06 | 000,040,648 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ElbyCDFL.sys -- (ElbyCDFL) DRV - [2011-07-29 13:54:56 | 000,014,216 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\epmntdrv.sys -- (epmntdrv) DRV - [2011-07-29 13:54:56 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\EuGdiDrv.sys -- (EuGdiDrv) DRV - [2010-01-29 11:40:16 | 000,115,600 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys -- (ISODrive) DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) DRV - [2007-02-16 02:57:06 | 000,040,648 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\ElbyCDFL.sys -- (ElbyCDFL) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.132.0: C:\Program Files (x86)\Battlelog Web Plugins\1.132.0\npesnlaunch.dll (ESN Social Software AB) FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Mikolaj\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Mikolaj\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtualKeyboard@kaspersky.ru: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\FFExt\virtualKeyboard@kaspersky.ru [2012-07-31 13:03:22 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\linkfilter@kaspersky.ru: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\FFExt\linkfilter@kaspersky.ru [2012-07-31 13:03:22 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fmconverter@gmail.com: C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ [2012-08-04 19:03:00 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\Mikolaj\AppData\Roaming\IDM\idmmzcc5 [2012-08-28 22:46:54 | 000,000,000 | ---D | M] [2012-07-30 22:06:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mikolaj\AppData\Roaming\mozilla\Extensions [color=#E56717]========== Chrome ==========[/color] CHR - homepage: http://www.google.com/ CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}, CHR - homepage: http://www.google.com/ CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Mikolaj\AppData\Local\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Mikolaj\AppData\Local\Google\Chrome\Application\21.0.1180.89\gcswf32.dll CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Mikolaj\AppData\Local\Google\Chrome\Application\21.0.1180.89\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Mikolaj\AppData\Local\Google\Chrome\Application\21.0.1180.89\pdf.dll CHR - plugin: ESN Launch Mozilla Plugin (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\1.132.0\npesnlaunch.dll CHR - plugin: ESN Sonar API (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll CHR - plugin: Foxit Reader Plugin for Mozilla (Enabled) = C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll CHR - plugin: Java(TM) Platform SE 7 U7 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll CHR - plugin: Java Deployment Toolkit 7.0.70.11 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: Google Update (Enabled) = C:\Users\Mikolaj\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll CHR - Extension: YouTube = C:\Users\Mikolaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Facebook Colour Changer = C:\Users\Mikolaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpllmoilcakpgbeodibeifcfnndoheam\1.3.1_0\ CHR - Extension: Szukaj w Google = C:\Users\Mikolaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ CHR - Extension: Kaspersky URL Advisor = C:\Users\Mikolaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.0.477_0\ CHR - Extension: Facebook for Chrome = C:\Users\Mikolaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdalhedleemkkdjddjgfjmcnbpejpapp\5.0.3_0\ CHR - Extension: AdBlock = C:\Users\Mikolaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.5.45_0\ CHR - Extension: Klawiatura wirtualna = C:\Users\Mikolaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.0.477_0\ CHR - Extension: Freemake Video Converter = C:\Users\Mikolaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj\1.0.0_0\ CHR - Extension: Facebook Notifications = C:\Users\Mikolaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmameahlembdcigphohgiodcgjomcgeo\1.27_0\ CHR - Extension: Gmail = C:\Users\Mikolaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ CHR - Extension: Anti-Banner = C:\Users\Mikolaj\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\12.0.0.374_0\ O1 HOSTS File: ([2012-07-30 18:40:14 | 000,000,864 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 validation.sls.microsoft.com O2:[b]64bit:[/b] - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.) O2:[b]64bit:[/b] - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\x64\ievkbd.dll (Kaspersky Lab ZAO) O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2:[b]64bit:[/b] - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2:[b]64bit:[/b] - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\x64\klwtbbho.dll (Kaspersky Lab ZAO) O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.) O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\ievkbd.dll (Kaspersky Lab ZAO) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtbbho.dll (Kaspersky Lab ZAO) O4:[b]64bit:[/b] - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:[b]64bit:[/b] - HKLM..\Run: [XboxStat] C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe (Microsoft Corporation) O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [AVP] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe (Kaspersky Lab ZAO) O4 - HKLM..\Run: [CloneCDTray] C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe (SlySoft, Inc.) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [XFastUSB] C:\Program Files (x86)\XFastUSB\XFastUsb.exe (FNet Co., Ltd.) O4 - HKCU..\Run: [DrvUpdater] C:\Users\Mikolaj\AppData\Roaming\DRPSu\DrvUpdater.exe () O4 - HKCU..\Run: [GG] C:\Users\Mikolaj\AppData\Local\GG\Application\gghub.exe (GG Network S.A.) O4 - HKCU..\Run: [IDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.) O4 - HKCU..\Run: [screenSHU] C:\Program Files (x86)\screenSHU\screenSHU.exe () O4 - HKCU..\Run: [Sony PC Companion] C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe (Sony) O4 - HKCU..\Run: [Steam] D:\Program Files (x86)\Steam\steam.exe (Valve Corporation) O4 - HKCU..\Run: [uTorrent] C:\Users\Mikolaj\Downloads\uTorrent.exe (BitTorrent, Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8:[b]64bit:[/b] - Extra context menu item: Ściągnij przez IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm () O8:[b]64bit:[/b] - Extra context menu item: Ściągnij wszystkie linki przez IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm () O8 - Extra context menu item: Ściągnij przez IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm () O8 - Extra context menu item: Ściągnij wszystkie linki przez IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm () O9:[b]64bit:[/b] - Extra Button: &Virtual Keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\x64\ievkbd.dll (Kaspersky Lab ZAO) O9:[b]64bit:[/b] - Extra Button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\x64\klwtbbho.dll (Kaspersky Lab ZAO) O9 - Extra Button: &Virtual Keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\ievkbd.dll (Kaspersky Lab ZAO) O9 - Extra Button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtbbho.dll (Kaspersky Lab ZAO) O10:[b]64bit:[/b] - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1CCE95B5-3DD0-4EAB-8BDA-55A74D413885}: DhcpNameServer = 192.168.0.1 O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - Winlogon\Notify\klogon: DllName - (%SystemRoot%\System32\klogon.dll) - C:\Windows\SysNative\klogon.dll (Kaspersky Lab ZAO) O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2000-05-11 12:13:12 | 000,000,046 | R--- | M] () - E:\AUTORUN.INF -- [ CDFS ] O32 - AutoRun File - [2002-11-25 03:28:38 | 000,024,576 | R--- | M] () - F:\AutoRunMorrowind.exe -- [ CDFS ] O32 - AutoRun File - [2005-03-03 00:39:08 | 000,025,600 | R--- | M] (Cezary Noweta) - F:\autorun.exe -- [ CDFS ] O32 - AutoRun File - [2005-03-02 22:47:12 | 000,000,157 | R--- | M] () - F:\autorun.inf -- [ CDFS ] O32 - AutoRun File - [2000-05-11 12:13:12 | 000,000,046 | R--- | M] () - H:\AUTORUN.INF -- [ CDFS ] O32 - AutoRun File - [2000-05-11 12:13:12 | 000,000,046 | R--- | M] () - I:\AUTORUN.INF -- [ CDFS ] O33 - MountPoints2\{63c1280d-e9ef-11e1-b457-005056c00008}\Shell - "" = AutoRun O33 - MountPoints2\{63c1280d-e9ef-11e1-b457-005056c00008}\Shell\AutoRun\command - "" = L:\.\KANAUST.exe O33 - MountPoints2\{63c1280d-e9ef-11e1-b457-005056c00008}\Shell\dxinst\command - "" = L:\.\dxsetup.exe O33 - MountPoints2\{d299c00a-ec49-11e1-96a1-005056c00008}\Shell - "" = AutoRun O33 - MountPoints2\{d299c00a-ec49-11e1-96a1-005056c00008}\Shell\AutoRun\command - "" = O:\Startme.exe O33 - MountPoints2\{e1552392-da63-11e1-88f4-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{e1552392-da63-11e1-88f4-806e6f6e6963}\Shell\AutoRun\command - "" = F:\AutoRunMorrowind.exe -- [2002-11-25 03:28:38 | 000,024,576 | R--- | M] () O33 - MountPoints2\{e1552392-da63-11e1-88f4-806e6f6e6963}\Shell\install\command - "" = F:\setup.exe -- [2002-12-02 16:33:00 | 000,107,512 | R--- | M] (InstallShield Software Corporation) O33 - MountPoints2\{f11d4444-eab0-11e1-8395-005056c00008}\Shell - "" = AutoRun O33 - MountPoints2\{f11d4444-eab0-11e1-8395-005056c00008}\Shell\AutoRun\command - "" = O:\Startme.exe O33 - MountPoints2\{fe7b5063-f1c9-11e1-9b66-005056c00008}\Shell - "" = AutoRun O33 - MountPoints2\{fe7b5063-f1c9-11e1-9b66-005056c00008}\Shell\AutoRun\command - "" = O:\Startme.exe O33 - MountPoints2\{fe7b506a-f1c9-11e1-9b66-005056c00008}\Shell - "" = AutoRun O33 - MountPoints2\{fe7b506a-f1c9-11e1-9b66-005056c00008}\Shell\AutoRun\command - "" = O:\Startme.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-09-26 22:13:21 | 000,000,000 | ---D | C] -- C:\Windows\LastGood [2012-09-26 22:07:18 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\Desktop\otl [2012-09-26 22:01:40 | 000,000,000 | ---D | C] -- C:\_OTL [2012-09-26 17:59:47 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\jv16 PowerTools 2012 [2012-09-26 17:59:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\jv16 PowerTools 2012 [2012-09-23 01:09:31 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2012-09-23 01:09:31 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll [2012-09-23 01:09:31 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll [2012-09-23 01:09:31 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2012-09-23 01:09:31 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2012-09-23 01:09:31 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2012-09-23 01:09:31 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2012-09-23 01:09:31 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2012-09-23 01:09:30 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2012-09-23 01:09:30 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2012-09-23 01:09:30 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2012-09-23 01:09:30 | 000,729,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2012-09-23 01:09:29 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2012-09-23 01:09:29 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2012-09-23 01:09:29 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2012-09-23 00:51:44 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\AppData\Local\PunkBuster [2012-09-23 00:51:42 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\Documents\Battlefield 3 [2012-09-23 00:50:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Battlelog Web Plugins [2012-09-23 00:49:16 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Logs [2012-09-23 00:49:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3 [2012-09-22 23:11:06 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\AppData\Local\{534D0C8C-65A6-4ADB-9B52-F5E0B5F8297F} [2012-09-21 07:11:43 | 000,064,512 | ---- | C] (Etron Technology Inc) -- C:\Windows\SysNative\drivers\EtronXHCI.sys [2012-09-20 18:39:04 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Diablo II Singleplayer Enhancement Mod v1.6 [2012-09-20 18:36:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlugY, The Survival Kit [2012-09-20 18:27:38 | 000,094,208 | ---- | C] (Blizzard Entertainment) -- C:\Windows\DIIUnin.exe [2012-09-20 18:27:38 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Diablo II [2012-09-20 18:27:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo II [2012-09-16 14:25:37 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\AppData\Roaming\I2P [2012-09-16 14:25:19 | 000,000,000 | ---D | C] -- C:\ProgramData\i2p [2012-09-16 14:25:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I2P [2012-09-16 14:25:12 | 000,000,000 | ---D | C] -- C:\Program Files\i2p [2012-09-15 12:52:43 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\workspace [2012-09-15 12:51:26 | 001,034,216 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\npDeployJava1.dll [2012-09-15 12:51:26 | 000,916,456 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\deployJava1.dll [2012-09-15 12:51:26 | 000,289,768 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe [2012-09-15 12:51:23 | 000,189,416 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe [2012-09-15 12:51:23 | 000,188,904 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\java.exe [2012-09-15 12:51:23 | 000,108,008 | ---- | C] (Oracle Corporation) -- C:\Windows\SysNative\WindowsAccessBridge-64.dll [2012-09-15 12:50:52 | 000,000,000 | ---D | C] -- C:\Program Files\Java [2012-09-14 22:00:34 | 000,000,000 | ---D | C] -- C:\Stratagus [2012-09-13 18:03:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft [2012-09-12 22:05:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Cleaner 3 [2012-09-12 22:05:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Driver Cleaner [2012-09-12 18:07:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++ [2012-09-12 18:07:57 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\AppData\Roaming\Notepad++ [2012-09-12 18:07:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Notepad++ [2012-09-12 18:06:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2012-09-12 18:05:55 | 000,246,760 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe [2012-09-12 18:05:51 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe [2012-09-12 18:05:51 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe [2012-09-12 18:05:51 | 000,095,208 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2012-09-12 18:05:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java [2012-09-12 17:21:49 | 000,466,456 | ---- | C] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll [2012-09-12 17:21:49 | 000,444,952 | ---- | C] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll [2012-09-12 17:21:49 | 000,122,904 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll [2012-09-12 17:21:49 | 000,109,080 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll [2012-09-12 17:21:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenAL [2012-09-12 15:10:41 | 000,574,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll [2012-09-12 15:10:41 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\RNDISMP.sys [2012-09-12 15:10:40 | 000,376,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys [2012-09-12 15:10:40 | 000,288,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS [2012-09-11 22:50:58 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\AppData\Local\SlimWare Utilities Inc [2012-09-11 22:50:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SlimDrivers [2012-09-11 22:50:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SlimDrivers [2012-09-11 22:50:53 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Downloaded Installers [2012-09-11 20:40:26 | 000,000,000 | -HSD | C] -- C:\ProgramData\DSS [2012-09-11 20:40:17 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\Documents\FIFA 13 [2012-09-11 20:40:12 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\Documents\FIFA 13 Demo [2012-09-11 19:57:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 13 Demo [2012-09-11 19:57:53 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Common Files\EAInstaller [2012-09-10 21:59:58 | 000,000,000 | ---D | C] -- C:\ProgramData\YTD Video Downloader [2012-09-10 21:59:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader [2012-09-10 21:59:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GreenTree Applications [2012-09-10 21:56:07 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\AppData\Roaming\Apple Computer [2012-09-10 21:56:07 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\AppData\Local\Apple Computer [2012-09-10 21:56:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes [2012-09-10 21:55:56 | 000,126,312 | ---- | C] (GEAR Software Inc.) -- C:\Windows\SysNative\GEARAspi64.dll [2012-09-10 21:55:56 | 000,107,368 | ---- | C] (GEAR Software Inc.) -- C:\Windows\SysWow64\GEARAspi.dll [2012-09-10 21:55:56 | 000,034,152 | ---- | C] (GEAR Software Inc.) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys [2012-09-10 21:55:36 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes [2012-09-10 21:55:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes [2012-09-10 21:55:36 | 000,000,000 | ---D | C] -- C:\Program Files\iPod [2012-09-10 21:55:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer [2012-09-10 21:55:36 | 000,000,000 | ---D | C] -- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001} [2012-09-10 21:54:46 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\AppData\Local\Apple [2012-09-10 21:54:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update [2012-09-10 21:54:29 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple [2012-09-10 21:54:20 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour [2012-09-10 21:54:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour [2012-09-10 21:54:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2012-09-10 21:54:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple [2012-09-10 17:28:02 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\AppData\Roaming\ATI [2012-09-10 17:28:02 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\AppData\Local\ATI [2012-09-10 17:28:02 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI [2012-09-10 17:27:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD APP [2012-09-10 17:27:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center [2012-09-10 17:27:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ATI Technologies [2012-09-10 17:26:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies [2012-09-10 17:26:49 | 000,000,000 | ---D | C] -- C:\Program Files\ATI [2012-09-10 17:26:29 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies [2012-09-10 17:26:11 | 023,336,960 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\atio6axx.dll [2012-09-10 17:26:11 | 017,940,992 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysWow64\atioglxx.dll [2012-09-10 17:26:11 | 009,359,872 | ---- | C] (ATI Technologies Inc.) -- C:\Windows\SysNative\drivers\atikmdag.sys [2012-09-10 17:26:11 | 005,486,592 | ---- | C] (ATI Technologies Inc. ) -- C:\Windows\SysNative\atiumd64.dll [2012-09-10 17:26:11 | 003,810,816 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiumd6a.dll [2012-09-10 17:26:11 | 001,828,864 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atiumdmv.dll [2012-09-10 17:26:11 | 001,113,088 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiumd6v.dll [2012-09-10 17:26:11 | 000,485,376 | ---- | C] (AMD) -- C:\Windows\SysNative\atieclxx.exe [2012-09-10 17:26:11 | 000,462,848 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\ATIDEMGX.dll [2012-09-10 17:26:11 | 000,423,424 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\SysNative\atipdl64.dll [2012-09-10 17:26:11 | 000,356,352 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\SysWow64\atipdlxx.dll [2012-09-10 17:26:11 | 000,309,760 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\drivers\atikmpag.sys [2012-09-10 17:26:11 | 000,278,528 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\SysWow64\Oemdspif.dll [2012-09-10 17:26:11 | 000,204,288 | ---- | C] (AMD) -- C:\Windows\SysNative\atiesrxx.exe [2012-09-10 17:26:11 | 000,120,320 | ---- | C] (AMD) -- C:\Windows\SysNative\atitmm64.dll [2012-09-10 17:26:11 | 000,114,704 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\AtihdW76.sys [2012-09-10 17:26:11 | 000,059,392 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\SysNative\atiedu64.dll [2012-09-10 17:26:11 | 000,053,760 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atimpc64.dll [2012-09-10 17:26:11 | 000,053,760 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\amdpcom64.dll [2012-09-10 17:26:11 | 000,052,736 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atimpc32.dll [2012-09-10 17:26:11 | 000,052,736 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\amdpcom32.dll [2012-09-10 17:26:11 | 000,051,200 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\aticalrt64.dll [2012-09-10 17:26:11 | 000,046,080 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysWow64\aticalrt.dll [2012-09-10 17:26:11 | 000,039,936 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atig6txx.dll [2012-09-10 17:26:11 | 000,038,912 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiu9p64.dll [2012-09-10 17:26:11 | 000,032,768 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atigktxx.dll [2012-09-10 17:26:11 | 000,016,384 | ---- | C] (AMD) -- C:\Windows\SysNative\atimuixx.dll [2012-09-10 17:26:11 | 000,014,848 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atig6pxx.dll [2012-09-10 17:26:11 | 000,012,800 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysWow64\atiglpxx.dll [2012-09-10 17:26:11 | 000,012,800 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\SysNative\atiglpxx.dll [2012-09-10 17:26:10 | 008,489,472 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\aticaldd64.dll [2012-09-10 17:26:10 | 006,847,488 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysWow64\aticaldd.dll [2012-09-10 17:26:10 | 000,366,592 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\atiadlxx.dll [2012-09-10 17:26:10 | 000,262,144 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysWow64\atiadlxy.dll [2012-09-10 17:26:10 | 000,151,552 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\SysNative\atiapfxx.exe [2012-09-10 17:26:10 | 000,053,248 | ---- | C] (ATI Technologies Inc.) -- C:\Windows\SysNative\drivers\ati2erec.dll [2012-09-10 17:26:10 | 000,044,544 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysNative\aticalcl64.dll [2012-09-10 17:26:10 | 000,044,032 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\SysWow64\aticalcl.dll [2012-09-10 17:26:10 | 000,043,520 | ---- | C] (ATI Technologies, Inc.) -- C:\Windows\SysWow64\ati2edxx.dll [2012-09-10 16:46:31 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z [2012-09-10 16:46:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\GPU-Z [2012-09-10 16:40:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys [2012-09-10 16:40:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Lavalys [2012-09-09 13:27:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bethesda Softworks [2012-09-09 13:27:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bethesda Softworks [2012-09-09 12:15:31 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\URTTEMP [2012-09-09 11:03:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AllePomocnik [2012-09-09 11:03:01 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\Documents\AllePomocnik [2012-09-09 11:02:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AllePomocnik [2012-09-04 20:45:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\THQ [2012-09-04 14:53:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight [2012-09-04 13:48:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts [2012-09-03 11:28:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight [2012-09-03 11:27:56 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Synchronization Services [2012-09-03 11:27:56 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft SQL Server Compact Edition [2012-09-03 11:27:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Synchronization Services [2012-09-03 11:27:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2010 Express [2012-09-03 11:26:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 10.0 [2012-09-03 11:26:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Merge Modules [2012-09-03 11:26:23 | 000,000,000 | ---D | C] -- C:\Windows\symbols [2012-09-03 11:26:23 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 10.0 [2012-09-03 11:26:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft SDKs [2012-09-03 11:26:23 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Help Viewer [2012-09-03 10:32:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2012-09-02 22:09:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator [2012-09-02 22:09:05 | 000,662,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCOMCT2.OCX [2012-09-02 22:09:05 | 000,137,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSMAPI32.OCX [2012-09-02 22:09:05 | 000,096,768 | ---- | C] (pdfforge GbR) -- C:\Windows\SysNative\pdfcmon.dll [2012-09-02 22:09:04 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSMPIDE.DLL [2012-09-02 22:09:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PDFCreator [2012-09-01 22:48:19 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\Documents\Square Enix [2012-09-01 22:18:48 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\AppData\Local\DOSBox [2012-09-01 22:18:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DOSBox-0.74 [2012-09-01 22:18:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DOSBox-0.74 [2012-08-30 17:49:00 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\AppData\Roaming\ImgBurn [2012-08-30 17:33:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn [2012-08-30 17:33:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ImgBurn [2012-08-30 17:27:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyToISO [2012-08-30 17:27:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AnyToISO [2012-08-30 17:22:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BurnAware Free [2012-08-30 17:22:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BurnAware Free [2012-08-29 21:08:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony [2012-08-29 21:08:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony [2012-08-29 21:08:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sony [2012-08-29 20:57:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Android Commander [2012-08-29 20:57:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Android Commander [2012-08-29 00:45:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Phyxion.net [2012-08-29 00:45:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Phyxion.net [2012-08-28 22:46:52 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\AppData\Roaming\IDM [2012-08-28 22:46:48 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager [2012-08-28 22:46:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager [2012-08-28 22:46:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Internet Download Manager [2012-08-28 12:29:51 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\AppData\Local\Fallout3 [2012-08-28 12:24:58 | 000,000,000 | ---D | C] -- C:\Users\Mikolaj\AppData\Roaming\InstallShield Installation Information [1 C:\Users\Mikolaj\AppData\Local\*.tmp files -> C:\Users\Mikolaj\AppData\Local\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-09-26 22:15:42 | 001,691,650 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012-09-26 22:15:42 | 000,747,486 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2012-09-26 22:15:42 | 000,660,852 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012-09-26 22:15:42 | 000,160,078 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2012-09-26 22:15:42 | 000,125,042 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2012-09-26 22:12:40 | 000,000,414 | ---- | M] () -- C:\Windows\tasks\SlimDrivers Startup.job [2012-09-26 22:09:55 | 000,015,712 | ---- | M] () -- C:\Windows\SysNative\drivers\SWDUMon.sys [2012-09-26 22:09:36 | 000,000,022 | ---- | M] () -- C:\Windows\S.dirmngr [2012-09-26 22:09:29 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-09-26 22:09:22 | 2128,642,047 | -HS- | M] () -- C:\hiberfil.sys [2012-09-26 22:06:38 | 000,021,072 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012-09-26 22:06:38 | 000,021,072 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012-09-26 21:22:00 | 000,001,066 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1795605532-3804845324-3923751414-1000UA.job [2012-09-26 21:17:27 | 000,281,520 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr [2012-09-26 21:17:27 | 000,281,520 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe [2012-09-26 21:17:08 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0 [2012-09-26 18:00:12 | 000,000,086 | ---- | M] () -- C:\Users\Mikolaj\Desktop\Dokonaj zakupu jv16 PowerTools.url [2012-09-26 17:59:52 | 000,000,022 | -HS- | M] () -- C:\Users\Mikolaj\AppData\Roaming\Windows1569_SettingsRepository.bin [2012-09-26 17:59:52 | 000,000,022 | -HS- | M] () -- C:\Windows\90C7D912BE2316.sys [2012-09-26 17:59:47 | 000,001,893 | ---- | M] () -- C:\Users\Mikolaj\Desktop\jv16 PowerTools 2012.lnk [2012-09-25 15:24:07 | 000,564,824 | ---- | M] (Duplex Secure Ltd.) -- C:\Windows\SysNative\drivers\sptd.sys [2012-09-25 15:16:58 | 000,000,202 | ---- | M] () -- C:\Users\Mikolaj\defogger_reenable [2012-09-23 14:42:49 | 000,001,293 | ---- | M] () -- C:\Users\Public\Desktop\YTD Video Downloader.lnk [2012-09-23 14:22:01 | 000,001,014 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1795605532-3804845324-3923751414-1000Core.job [2012-09-23 11:34:28 | 000,076,888 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe [2012-09-23 00:49:09 | 000,000,716 | ---- | M] () -- C:\Users\Public\Desktop\Battlefield 3.lnk [2012-09-20 18:39:04 | 000,000,858 | ---- | M] () -- C:\Users\Mikolaj\Desktop\Shortcut Paremeters README.lnk [2012-09-20 18:39:04 | 000,000,777 | ---- | M] () -- C:\Users\Mikolaj\Desktop\Cube Crafting Item Save Note.lnk [2012-09-20 18:36:49 | 000,000,928 | ---- | M] () -- C:\Users\Mikolaj\Desktop\PlugY, The Survival Kit.lnk [2012-09-20 18:34:18 | 000,040,902 | ---- | M] () -- C:\Windows\DIIUnin.dat [2012-09-20 18:32:56 | 000,000,814 | ---- | M] () -- C:\Users\Mikolaj\Desktop\Diablo II - Lord of Destruction.lnk [2012-09-20 18:27:38 | 000,094,208 | ---- | M] (Blizzard Entertainment) -- C:\Windows\DIIUnin.exe [2012-09-20 18:27:38 | 000,002,829 | ---- | M] () -- C:\Windows\DIIUnin.pif [2012-09-18 19:02:37 | 002,058,377 | ---- | M] () -- C:\Users\Mikolaj\Documents\skan.rtf [2012-09-18 18:56:57 | 000,152,587 | ---- | M] () -- C:\Users\Mikolaj\Desktop\skaner.jpg [2012-09-18 18:55:24 | 000,032,320 | ---- | M] (FNet Co., Ltd.) -- C:\Windows\SysNative\drivers\FNETTBOH_305.SYS [2012-09-18 18:29:43 | 000,014,184 | ---- | M] () -- C:\Users\Mikolaj\koszulka.jpg [2012-09-17 19:49:27 | 000,048,776 | ---- | M] () -- C:\Users\Mikolaj\steam3.jpg [2012-09-17 19:46:21 | 000,038,266 | ---- | M] () -- C:\Users\Mikolaj\steam2.jpg [2012-09-17 19:45:13 | 000,016,896 | ---- | M] () -- C:\Users\Mikolaj\STEAM.jpg [2012-09-16 18:11:11 | 000,000,890 | ---- | M] () -- C:\Users\Public\Desktop\Nexus Mod Manager.lnk [2012-09-15 12:51:19 | 000,108,008 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\WindowsAccessBridge-64.dll [2012-09-15 12:51:18 | 001,034,216 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\npDeployJava1.dll [2012-09-15 12:51:18 | 000,916,456 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\deployJava1.dll [2012-09-15 12:51:18 | 000,289,768 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe [2012-09-15 12:51:18 | 000,189,416 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe [2012-09-15 12:51:18 | 000,188,904 | ---- | M] (Oracle Corporation) -- C:\Windows\SysNative\java.exe [2012-09-14 14:39:54 | 000,001,142 | ---- | M] () -- C:\Users\Public\Desktop\The Elder Scrolls III - Morrowind Złota Edycja.lnk [2012-09-13 18:03:47 | 000,000,938 | ---- | M] () -- C:\Users\Public\Desktop\World of Warcraft.lnk [2012-09-12 22:24:11 | 681,611,943 | ---- | M] () -- C:\Windows\MEMORY.DMP [2012-09-12 22:06:46 | 000,013,441 | ---- | M] () -- C:\Users\Mikolaj\Desktop\USBDeview.exe — skrót.lnk [2012-09-12 22:05:06 | 000,001,967 | ---- | M] () -- C:\Users\Mikolaj\Application Data\Microsoft\Internet Explorer\Quick Launch\Driver Cleaner 3.lnk [2012-09-12 22:05:06 | 000,001,943 | ---- | M] () -- C:\Users\Mikolaj\Desktop\Driver Cleaner 3.lnk [2012-09-12 18:07:58 | 000,001,061 | ---- | M] () -- C:\Users\Mikolaj\Desktop\Notepad++.lnk [2012-09-12 18:05:49 | 000,821,736 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\npDeployJava1.dll [2012-09-12 18:05:49 | 000,746,984 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\deployJava1.dll [2012-09-12 18:05:49 | 000,246,760 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe [2012-09-12 18:05:49 | 000,174,056 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe [2012-09-12 18:05:49 | 000,174,056 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe [2012-09-12 18:05:49 | 000,095,208 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2012-09-12 17:21:49 | 000,466,456 | ---- | M] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll [2012-09-12 17:21:49 | 000,444,952 | ---- | M] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll [2012-09-12 17:21:49 | 000,122,904 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll [2012-09-12 17:21:49 | 000,109,080 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll [2012-09-11 22:50:55 | 000,002,467 | ---- | M] () -- C:\Users\Public\Desktop\SlimDrivers.lnk [2012-09-11 19:57:57 | 000,001,312 | ---- | M] () -- C:\Users\Public\Desktop\FIFA 13 Demo.lnk [2012-09-10 22:04:11 | 022,579,123 | ---- | M] () -- C:\Users\Mikolaj\Documents\Firma - Mo faya.flv [2012-09-10 21:56:04 | 000,001,783 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk [2012-09-10 16:46:31 | 000,000,967 | ---- | M] () -- C:\Users\Mikolaj\Desktop\TechPowerUp GPU-Z.lnk [2012-09-10 16:40:56 | 000,001,106 | ---- | M] () -- C:\Users\Mikolaj\Desktop\EVEREST Home Edition.lnk [2012-09-09 13:27:41 | 000,002,206 | ---- | M] () -- C:\Users\Public\Desktop\Daggerfall.lnk [2012-09-09 12:15:51 | 001,715,826 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2012-09-09 12:08:55 | 000,669,184 | ---- | M] () -- C:\Windows\SysWow64\pbsvc.exe [2012-09-09 11:42:22 | 000,005,686 | ---- | M] () -- C:\Users\Mikolaj\AppData\Local\recently-used.xbel [2012-09-09 11:03:02 | 000,000,987 | ---- | M] () -- C:\Users\Mikolaj\Desktop\AllePomocnik.lnk [2012-09-08 00:01:38 | 000,000,186 | ---- | M] () -- C:\Users\Mikolaj\Desktop\Home.url [2012-09-05 15:47:53 | 000,000,221 | ---- | M] () -- C:\Users\Mikolaj\Desktop\Tribes Ascend.url [2012-09-04 19:16:08 | 000,212,618 | ---- | M] () -- C:\Users\Mikolaj\Documents\origin.jpg [2012-09-04 19:15:18 | 000,212,618 | ---- | M] () -- C:\Users\Mikolaj\origin1.jpg [2012-09-04 14:23:51 | 000,001,330 | ---- | M] () -- C:\Windows\Sandboxie.ini [2012-09-03 11:05:59 | 000,001,919 | ---- | M] () -- C:\Users\Mikolaj\Desktop\chrome.exe — skrót.lnk [2012-09-02 22:22:49 | 000,002,245 | ---- | M] () -- C:\Users\Mikolaj\Documents\minecraft.rtf [2012-09-02 22:10:35 | 000,026,100 | ---- | M] () -- C:\Users\Mikolaj\Documents\MINECRAFT_DODATKI.pdf [2012-09-02 22:09:08 | 000,001,204 | ---- | M] () -- C:\Users\Public\Desktop\PDFArchitect.lnk [2012-09-02 22:09:08 | 000,001,035 | ---- | M] () -- C:\Users\Public\Desktop\PDFCreator.lnk [2012-09-02 22:06:27 | 000,001,750 | ---- | M] () -- C:\Users\Mikolaj\Documents\minecraft2.rtf [2012-09-02 18:07:08 | 000,000,222 | ---- | M] () -- C:\Users\Mikolaj\Desktop\Creation Kit.url [2012-09-02 15:41:51 | 000,000,329 | ---- | M] () -- C:\Users\Mikolaj\AppData\Roaming\burnaware.ini [2012-09-01 22:18:13 | 000,001,922 | ---- | M] () -- C:\Users\Public\Desktop\DOSBox 0.74.lnk [2012-09-01 19:17:05 | 000,000,470 | ---- | M] () -- C:\Dysk lokalny (C) — skrót.lnk [2012-08-31 15:14:12 | 000,000,600 | ---- | M] () -- C:\Users\Mikolaj\AppData\Roaming\winscp.rnd [2012-08-30 17:33:13 | 000,001,869 | ---- | M] () -- C:\Users\Public\Desktop\ImgBurn.lnk [2012-08-30 17:22:52 | 000,001,058 | ---- | M] () -- C:\Users\Public\Desktop\BurnAware Free.lnk [2012-08-29 23:02:27 | 000,001,322 | ---- | M] () -- C:\Users\Mikolaj\Desktop\Wordpad.lnk [2012-08-29 21:08:42 | 000,002,102 | ---- | M] () -- C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk [1 C:\Users\Mikolaj\AppData\Local\*.tmp files -> C:\Users\Mikolaj\AppData\Local\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-09-26 18:00:12 | 000,000,086 | ---- | C] () -- C:\Users\Mikolaj\Desktop\Dokonaj zakupu jv16 PowerTools.url [2012-09-26 17:59:52 | 000,000,022 | -HS- | C] () -- C:\Users\Mikolaj\AppData\Roaming\Windows1569_SettingsRepository.bin [2012-09-26 17:59:52 | 000,000,022 | -HS- | C] () -- C:\Windows\90C7D912BE2316.sys [2012-09-26 17:59:47 | 000,001,893 | ---- | C] () -- C:\Users\Mikolaj\Desktop\jv16 PowerTools 2012.lnk [2012-09-25 15:16:58 | 000,000,202 | ---- | C] () -- C:\Users\Mikolaj\defogger_reenable [2012-09-23 00:51:47 | 000,281,520 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.xtr [2012-09-23 00:49:09 | 000,000,716 | ---- | C] () -- C:\Users\Public\Desktop\Battlefield 3.lnk [2012-09-20 18:39:04 | 000,000,858 | ---- | C] () -- C:\Users\Mikolaj\Desktop\Shortcut Paremeters README.lnk [2012-09-20 18:39:04 | 000,000,777 | ---- | C] () -- C:\Users\Mikolaj\Desktop\Cube Crafting Item Save Note.lnk [2012-09-20 18:36:49 | 000,000,928 | ---- | C] () -- C:\Users\Mikolaj\Desktop\PlugY, The Survival Kit.lnk [2012-09-20 18:32:56 | 000,000,814 | ---- | C] () -- C:\Users\Mikolaj\Desktop\Diablo II - Lord of Destruction.lnk [2012-09-20 18:27:39 | 000,040,902 | ---- | C] () -- C:\Windows\DIIUnin.dat [2012-09-20 18:27:38 | 000,002,829 | ---- | C] () -- C:\Windows\DIIUnin.pif [2012-09-18 19:02:37 | 002,058,377 | ---- | C] () -- C:\Users\Mikolaj\Documents\skan.rtf [2012-09-18 18:55:39 | 000,152,587 | ---- | C] () -- C:\Users\Mikolaj\Desktop\skaner.jpg [2012-09-18 18:29:43 | 000,014,184 | ---- | C] () -- C:\Users\Mikolaj\koszulka.jpg [2012-09-17 19:49:27 | 000,048,776 | ---- | C] () -- C:\Users\Mikolaj\steam3.jpg [2012-09-17 19:46:21 | 000,038,266 | ---- | C] () -- C:\Users\Mikolaj\steam2.jpg [2012-09-17 19:45:13 | 000,016,896 | ---- | C] () -- C:\Users\Mikolaj\STEAM.jpg [2012-09-14 14:39:54 | 000,001,142 | ---- | C] () -- C:\Users\Public\Desktop\The Elder Scrolls III - Morrowind Złota Edycja.lnk [2012-09-13 18:03:45 | 000,000,938 | ---- | C] () -- C:\Users\Public\Desktop\World of Warcraft.lnk [2012-09-12 22:24:11 | 681,611,943 | ---- | C] () -- C:\Windows\MEMORY.DMP [2012-09-12 22:06:46 | 000,013,441 | ---- | C] () -- C:\Users\Mikolaj\Desktop\USBDeview.exe — skrót.lnk [2012-09-12 22:05:06 | 000,001,967 | ---- | C] () -- C:\Users\Mikolaj\Application Data\Microsoft\Internet Explorer\Quick Launch\Driver Cleaner 3.lnk [2012-09-12 22:05:06 | 000,001,943 | ---- | C] () -- C:\Users\Mikolaj\Desktop\Driver Cleaner 3.lnk [2012-09-12 18:07:58 | 000,001,061 | ---- | C] () -- C:\Users\Mikolaj\Desktop\Notepad++.lnk [2012-09-11 22:51:04 | 000,000,414 | ---- | C] () -- C:\Windows\tasks\SlimDrivers Startup.job [2012-09-11 22:51:00 | 000,015,712 | ---- | C] () -- C:\Windows\SysNative\drivers\SWDUMon.sys [2012-09-11 22:50:55 | 000,002,467 | ---- | C] () -- C:\Users\Public\Desktop\SlimDrivers.lnk [2012-09-11 19:57:57 | 000,001,312 | ---- | C] () -- C:\Users\Public\Desktop\FIFA 13 Demo.lnk [2012-09-10 22:00:16 | 022,579,123 | ---- | C] () -- C:\Users\Mikolaj\Documents\Firma - Mo faya.flv [2012-09-10 21:59:16 | 000,001,293 | ---- | C] () -- C:\Users\Public\Desktop\YTD Video Downloader.lnk [2012-09-10 21:56:04 | 000,001,783 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk [2012-09-10 21:54:46 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk [2012-09-10 17:26:11 | 001,127,552 | ---- | C] () -- C:\Windows\SysWow64\atiumdva.cap [2012-09-10 17:26:11 | 001,127,552 | ---- | C] () -- C:\Windows\SysNative\atiumd6a.cap [2012-09-10 17:26:11 | 000,233,765 | ---- | C] () -- C:\Windows\SysNative\atiicdxx.dat [2012-09-10 17:26:11 | 000,032,635 | ---- | C] () -- C:\Windows\atiogl.xml [2012-09-10 17:26:10 | 000,166,624 | ---- | C] () -- C:\Windows\SysNative\atiapfxx.blb [2012-09-10 16:46:31 | 000,000,967 | ---- | C] () -- C:\Users\Mikolaj\Desktop\TechPowerUp GPU-Z.lnk [2012-09-10 16:40:56 | 000,001,106 | ---- | C] () -- C:\Users\Mikolaj\Desktop\EVEREST Home Edition.lnk [2012-09-10 14:54:44 | 000,000,022 | ---- | C] () -- C:\Windows\S.dirmngr [2012-09-09 13:27:41 | 000,002,206 | ---- | C] () -- C:\Users\Public\Desktop\Daggerfall.lnk [2012-09-09 11:42:22 | 000,005,686 | ---- | C] () -- C:\Users\Mikolaj\AppData\Local\recently-used.xbel [2012-09-09 11:03:02 | 000,000,987 | ---- | C] () -- C:\Users\Mikolaj\Desktop\AllePomocnik.lnk [2012-09-08 00:01:38 | 000,000,186 | ---- | C] () -- C:\Users\Mikolaj\Desktop\Home.url [2012-09-05 15:47:53 | 000,000,221 | ---- | C] () -- C:\Users\Mikolaj\Desktop\Tribes Ascend.url [2012-09-04 19:16:08 | 000,212,618 | ---- | C] () -- C:\Users\Mikolaj\Documents\origin.jpg [2012-09-04 19:15:18 | 000,212,618 | ---- | C] () -- C:\Users\Mikolaj\origin1.jpg [2012-09-04 13:49:37 | 000,281,520 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2012-09-04 13:49:37 | 000,280,904 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.ex0 [2012-09-04 13:49:31 | 000,669,184 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe [2012-09-04 13:49:31 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2012-09-03 10:33:36 | 000,001,919 | ---- | C] () -- C:\Users\Mikolaj\Desktop\chrome.exe — skrót.lnk [2012-09-02 22:10:35 | 000,026,100 | ---- | C] () -- C:\Users\Mikolaj\Documents\MINECRAFT_DODATKI.pdf [2012-09-02 22:09:08 | 000,001,204 | ---- | C] () -- C:\Users\Public\Desktop\PDFArchitect.lnk [2012-09-02 22:09:08 | 000,001,035 | ---- | C] () -- C:\Users\Public\Desktop\PDFCreator.lnk [2012-09-02 22:06:27 | 000,001,750 | ---- | C] () -- C:\Users\Mikolaj\Documents\minecraft2.rtf [2012-09-02 21:56:03 | 000,002,245 | ---- | C] () -- C:\Users\Mikolaj\Documents\minecraft.rtf [2012-09-02 18:07:08 | 000,000,222 | ---- | C] () -- C:\Users\Mikolaj\Desktop\Creation Kit.url [2012-09-01 22:18:13 | 000,001,922 | ---- | C] () -- C:\Users\Public\Desktop\DOSBox 0.74.lnk [2012-09-01 19:17:05 | 000,000,470 | ---- | C] () -- C:\Dysk lokalny (C) — skrót.lnk [2012-08-30 17:33:23 | 000,000,329 | ---- | C] () -- C:\Users\Mikolaj\AppData\Roaming\burnaware.ini [2012-08-30 17:33:13 | 000,001,881 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk [2012-08-30 17:33:13 | 000,001,869 | ---- | C] () -- C:\Users\Public\Desktop\ImgBurn.lnk [2012-08-30 17:22:52 | 000,001,058 | ---- | C] () -- C:\Users\Public\Desktop\BurnAware Free.lnk [2012-08-29 23:02:27 | 000,001,322 | ---- | C] () -- C:\Users\Mikolaj\Desktop\Wordpad.lnk [2012-08-29 21:08:42 | 000,002,102 | ---- | C] () -- C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk [2012-08-23 14:08:40 | 001,145,382 | ---- | C] () -- C:\Users\Mikolaj\AppData\Local\Tempmusic.ogg [2012-08-19 17:20:18 | 000,020,480 | ---- | C] () -- C:\Windows\SysWow64\H@tKeysH@@k.DLL [2012-08-19 01:12:12 | 000,000,116 | ---- | C] () -- C:\Windows\wininit.ini [2012-08-19 01:10:16 | 000,010,240 | ---- | C] () -- C:\Windows\SysWow64\vidx16.dll [2012-08-12 00:36:47 | 000,083,456 | ---- | C] () -- C:\Windows\ImageSearchDLL.dll [2012-08-11 21:55:34 | 000,000,115 | ---- | C] () -- C:\Windows\SysWow64\getfiles.ini [2012-08-09 13:19:43 | 000,000,600 | ---- | C] () -- C:\Users\Mikolaj\AppData\Roaming\winscp.rnd [2012-08-09 13:17:38 | 000,000,600 | ---- | C] () -- C:\Users\Mikolaj\AppData\Local\PUTTY.RND [2012-08-08 20:55:41 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI [2012-08-07 20:33:31 | 001,715,826 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2012-08-06 22:01:52 | 000,016,384 | ---- | C] () -- C:\Windows\d3dx.dat [2012-08-06 15:05:35 | 000,001,330 | ---- | C] () -- C:\Windows\Sandboxie.ini [2012-08-01 21:37:44 | 000,000,041 | -HS- | C] () -- C:\ProgramData\.zreglib [2012-07-30 20:51:15 | 000,017,408 | ---- | C] () -- C:\Users\Mikolaj\AppData\Local\WebpageIcons.db [2012-07-30 20:11:46 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2012-07-30 20:05:54 | 002,469,760 | ---- | C] () -- C:\Windows\SysWow64\BootMan.exe [2012-07-30 20:05:54 | 000,086,408 | ---- | C] () -- C:\Windows\SysWow64\setupempdrv03.exe [2012-07-30 20:05:54 | 000,019,840 | ---- | C] () -- C:\Windows\SysWow64\EuEpmGdi.dll [2012-07-30 20:05:54 | 000,014,216 | ---- | C] () -- C:\Windows\SysWow64\epmntdrv.sys [2012-07-30 20:05:54 | 000,008,456 | ---- | C] () -- C:\Windows\SysWow64\EuGdiDrv.sys [2012-07-30 18:50:10 | 000,000,003 | ---- | C] () -- C:\Users\Mikolaj\AppData\Local\user_data.ini [2011-09-19 09:07:46 | 000,015,360 | ---- | C] () -- C:\Windows\SysWow64\bdmjpeg.dll [2011-09-19 09:07:32 | 000,058,368 | ---- | C] () -- C:\Windows\SysWow64\bdmpegv.dll [2011-05-24 23:44:26 | 000,059,904 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll [2011-04-09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2011-03-17 17:51:46 | 000,003,929 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat [color=#E56717]========== ZeroAccess Check ==========[/color] [2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2012-06-09 07:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2012-06-09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 24 bytes -> C:\Windows:5EFC5D27BF2C1291 < End of report >

**Posty:** 18165 · przez **wojtas** 30 Wrz 2012, 16:40

*Uruchom OTL z opcji sprzątanie.
* wykonaj optymalizację Windowsa ( instrukcja dla Windowsa XP, lecz w innych systemach jest podobnie )
* zrób pełny skan Malwarebytes Anti-Malware (zaktualizuj, gdy coś znajdzie pokaż raport, i usuń wszystko za pomocą tego programu )
* Skasuj stan przywracania systemu

to tyle