nutz utworzono 4 marca 2012 utworzono 4 marca 2012 (edytowane) Witam. Z uwagi na to, że to mój pierwszy post, chciałbym się przywitać. Od wczoraj (ok. 20:00) mam problemy z explorer.exe. Mianowicie usuwam jakikolwiek plik, on dalej stoi na miejscu, ale podczas ponownej próby usunięcia, wyskakuje monit, że pliku nie ma w danej lokalizacji (jakoś tak ;p). Tak samo z kopiowaniem/przenoszeniem pliku. Nie pojawia się on na pulpicie, ale w Eksploratorze jest. Reset explorer.exe coś daje, ale po 2-3 minutach problem znowu występuje. Korzystałem z tego tutoriala: [url="http://www.forumpc.pl/index.php?showtopic=151776"]http://www.forumpc.p...howtopic=151776[/url] [b][u]I Explorer.exe sie uruchomi i problem częściowo zniknie (tj. ikony na pulpicie pokażą się etc.) Wtedy wiemy że przyczyną takiej systuacji najprawdopodobnej jest wirus.[/u][/b] Komputer był 4 razy skanowany mbam'em, znalazł trochę wirusów (injectory, asterisk key etc.). Nie mam żadnego błędu związanego z explorer.exe, w rejestrze także jest wszystko OK. Załączam logi z OTL: OTL.txt [log] OTL logfile created on: 2012-03-04 15:15:21 - Run 1 OTL by OldTimer - Version 3.2.35.0 Folder = C:\Users\Paweł\Desktop 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 7,98 Gb Total Physical Memory | 6,30 Gb Available Physical Memory | 78,96% Memory free 15,97 Gb Paging File | 14,25 Gb Available in Paging File | 89,28% Paging File free Paging file location(s): c:\pagefile.sys 0 0 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 292,87 Gb Total Space | 243,80 Gb Free Space | 83,25% Space Free | Partition Type: NTFS Drive D: | 292,97 Gb Total Space | 201,62 Gb Free Space | 68,82% Space Free | Partition Type: NTFS Drive E: | 345,57 Gb Total Space | 344,15 Gb Free Space | 99,59% Space Free | Partition Type: NTFS Computer Name: 1337MACHINE | User Name: Paweł | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: Off | File Age = 60 Days [color=#E56717]========== Processes (All) ==========[/color] PRC - [2012-03-04 14:09:58 | 000,585,216 | ---- | M] (OldTimer Tools) -- C:\Users\Paweł\Desktop\OTL.exe PRC - [2012-02-19 21:18:00 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2012-01-30 21:15:34 | 000,218,624 | ---- | M] () -- C:\ProgramData\Multimedia mobilNET\OnlineUpdate\ouc.exe PRC - [2012-01-29 23:06:03 | 000,949,104 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe PRC - [2012-01-19 12:47:20 | 003,027,840 | ---- | M] (TeamViewer GmbH) -- D:\TeamViewer\Version7\TeamViewer_Service.exe PRC - [2012-01-13 14:53:18 | 000,652,360 | ---- | M] (Malwarebytes Corporation) -- D:\Malwarebytes' Anti-Malware\mbamservice.exe PRC - [2011-10-15 09:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe PRC - [2011-10-15 00:54:40 | 000,381,248 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2011-08-19 09:26:50 | 000,450,848 | ---- | M] (Logitech Inc.) -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe PRC - [2011-07-04 18:45:30 | 013,374,048 | ---- | M] (GG Network S.A.) -- D:\Gadu-Gadu 10\gg.exe PRC - [2011-06-02 10:35:08 | 002,265,416 | ---- | M] (Gainward Co.) -- D:\EXPERTool\TBPANEL.exe PRC - [2010-11-16 14:37:30 | 000,230,912 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\ProgramData\DataCardService\DCSHelper.exe PRC - [2010-10-05 21:04:12 | 002,655,768 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe PRC - [2010-10-05 21:04:08 | 000,325,656 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe PRC - [2009-07-14 02:14:31 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rundll32.exe [color=#E56717]========== Modules (All) ==========[/color] MOD - [2012-03-04 14:09:58 | 000,585,216 | ---- | M] (OldTimer Tools) -- C:\Users\Paweł\Desktop\OTL.exe MOD - [2012-02-14 23:58:14 | 000,094,208 | ---- | M] (Dropbox, Inc.) -- C:\Users\Paweł\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll MOD - [2012-01-29 23:06:03 | 014,306,160 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.dll MOD - [2012-01-29 23:06:03 | 000,949,104 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe MOD - [2012-01-22 23:26:40 | 001,792,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\iertutil.dll MOD - [2012-01-22 23:26:40 | 001,127,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wininet.dll MOD - [2012-01-22 23:26:40 | 001,103,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\urlmon.dll MOD - [2012-01-22 21:20:37 | 000,632,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcr80.dll MOD - [2012-01-22 21:20:37 | 000,554,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcp80.dll MOD - [2011-12-30 06:29:14 | 000,499,712 | ---- | M] (Microsoft Corporation) -- C:\Users\Paweł\AppData\Roaming\Dropbox\bin\MSVCP71.dll MOD - [2011-11-30 19:06:18 | 008,527,008 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll MOD - [2011-11-17 06:38:39 | 001,292,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll MOD - [2011-10-15 09:53:00 | 002,458,432 | ---- | M] (NVIDIA Corporation) -- C:\Windows\SysWOW64\nvapi.dll MOD - [2011-08-27 05:26:27 | 000,571,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll MOD - [2011-08-27 05:26:27 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleacc.dll MOD - [2011-07-16 05:26:00 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\AppPatch\acwow64.dll MOD - [2011-07-16 05:24:22 | 001,114,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll MOD - [2011-07-16 05:24:22 | 000,272,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll MOD - [2011-07-04 18:46:24 | 004,514,400 | ---- | M] (GG Network S.A.) -- D:\Gadu-Gadu 10\ggsip.dll MOD - [2011-07-04 18:46:20 | 000,217,696 | ---- | M] () -- D:\Gadu-Gadu 10\gglog.dll MOD - [2011-07-04 18:46:18 | 000,123,488 | ---- | M] () -- D:\Gadu-Gadu 10\ggipcradioproxy.dll MOD - [2011-07-04 18:46:16 | 000,017,504 | ---- | M] () -- D:\Gadu-Gadu 10\ggipc.dll MOD - [2011-07-04 18:46:12 | 000,027,744 | ---- | M] () -- D:\Gadu-Gadu 10\ggcrypto.dll MOD - [2011-07-04 18:46:10 | 000,356,960 | ---- | M] () -- D:\Gadu-Gadu 10\ggcommon.dll MOD - [2011-07-04 18:45:36 | 000,815,712 | ---- | M] (GG Network S.A.) -- D:\Gadu-Gadu 10\networkdao.dll MOD - [2011-07-04 18:45:30 | 013,374,048 | ---- | M] (GG Network S.A.) -- D:\Gadu-Gadu 10\gg.exe MOD - [2011-06-02 10:35:08 | 002,265,416 | ---- | M] (Gainward Co.) -- D:\EXPERTool\TBPANEL.exe MOD - [2011-05-24 11:40:05 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll MOD - [2011-05-24 11:39:38 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll MOD - [2011-04-16 04:04:30 | 014,749,696 | ---- | M] () -- D:\Gadu-Gadu 10\QtWebKit4.dll MOD - [2011-03-03 06:38:01 | 000,270,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dnsapi.dll MOD - [2011-02-17 10:00:46 | 000,327,680 | ---- | M] ([url="http://hunspell.sourceforge.net/"]http://hunspell.sourceforge.net/[/url]) -- D:\Gadu-Gadu 10\libhunspell.dll MOD - [2011-02-17 10:00:44 | 000,640,000 | ---- | M] (Microsoft Corporation) -- D:\Gadu-Gadu 10\dbghelp.dll MOD - [2011-02-17 10:00:44 | 000,319,488 | ---- | M] (The cURL library, [url="http://curl.haxx.se/"]http://curl.haxx.se/[/url]) -- D:\Gadu-Gadu 10\libcurl.dll MOD - [2011-02-17 10:00:28 | 001,781,760 | ---- | M] () -- D:\Gadu-Gadu 10\QtScript4.dll MOD - [2011-02-17 10:00:28 | 000,393,216 | ---- | M] () -- D:\Gadu-Gadu 10\QtXml4.dll MOD - [2011-02-17 10:00:28 | 000,327,680 | ---- | M] () -- D:\Gadu-Gadu 10\QtSvg4.dll MOD - [2011-02-17 10:00:26 | 001,044,480 | ---- | M] () -- D:\Gadu-Gadu 10\QtNetwork4.dll MOD - [2011-02-17 10:00:24 | 009,097,216 | ---- | M] () -- D:\Gadu-Gadu 10\QtGui4.dll MOD - [2011-02-17 10:00:24 | 002,560,000 | ---- | M] () -- D:\Gadu-Gadu 10\QtCore4.dll MOD - [2011-02-17 09:59:40 | 000,311,296 | ---- | M] () -- D:\Gadu-Gadu 10\imageformats\qtiff4.dll MOD - [2011-02-17 09:59:40 | 000,274,432 | ---- | M] () -- D:\Gadu-Gadu 10\imageformats\qmng4.dll MOD - [2011-02-17 09:59:40 | 000,143,360 | ---- | M] () -- D:\Gadu-Gadu 10\imageformats\qjpeg4.dll MOD - [2011-02-17 09:59:40 | 000,027,648 | ---- | M] () -- D:\Gadu-Gadu 10\imageformats\qgif4.dll MOD - [2011-02-17 09:59:40 | 000,018,944 | ---- | M] () -- D:\Gadu-Gadu 10\imageformats\qsvg4.dll MOD - [2011-02-17 09:59:32 | 001,163,264 | ---- | M] (The OpenSSL Project, [url="http://www.openssl.org/"]http://www.openssl.org/[/url]) -- D:\Gadu-Gadu 10\libeay32.dll MOD - [2011-02-17 09:59:32 | 000,253,952 | ---- | M] (The OpenSSL Project, [url="http://www.openssl.org/"]http://www.openssl.org/[/url]) -- D:\Gadu-Gadu 10\ssleay32.dll MOD - [2011-02-17 09:59:32 | 000,059,904 | ---- | M] () -- D:\Gadu-Gadu 10\zlib1.dll MOD - [2010-11-21 04:25:15 | 000,172,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll MOD - [2010-11-21 04:25:14 | 000,653,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_50916076bcb9a742\msvcr90.dll MOD - [2010-11-21 04:24:43 | 000,481,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mscms.dll MOD - [2010-11-21 04:24:33 | 001,010,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\WindowsCodecs.dll MOD - [2010-11-21 04:24:33 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\credssp.dll MOD - [2010-11-21 04:24:32 | 000,172,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wintrust.dll MOD - [2010-11-21 04:24:32 | 000,103,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\IPHLPAPI.DLL MOD - [2010-11-21 04:24:28 | 000,640,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll MOD - [2010-11-21 04:24:26 | 001,128,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll MOD - [2010-11-21 04:24:25 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll MOD - [2010-11-21 04:24:20 | 000,833,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll MOD - [2010-11-21 04:24:16 | 000,626,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll MOD - [2010-11-21 04:24:16 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll MOD - [2010-11-21 04:24:16 | 000,194,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winmm.dll MOD - [2010-11-21 04:24:16 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll MOD - [2010-11-21 04:24:16 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srvcli.dll MOD - [2010-11-21 04:24:16 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\userenv.dll MOD - [2010-11-21 04:24:16 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll MOD - [2010-11-21 04:24:15 | 000,224,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\schannel.dll MOD - [2010-11-21 04:24:14 | 000,311,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll MOD - [2010-11-21 04:24:14 | 000,295,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll MOD - [2010-11-21 04:24:14 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\RpcRtRemote.dll MOD - [2010-11-21 04:24:11 | 000,663,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll MOD - [2010-11-21 04:24:09 | 001,624,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll MOD - [2010-11-21 04:24:09 | 000,854,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dbghelp.dll MOD - [2010-11-21 04:24:09 | 000,530,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\comctl32.dll MOD - [2010-11-21 04:24:09 | 000,232,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mswsock.dll MOD - [2010-11-21 04:24:09 | 000,155,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imagehlp.dll MOD - [2010-11-21 04:24:08 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll MOD - [2010-11-21 04:24:08 | 000,320,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv MOD - [2010-11-21 04:24:08 | 000,216,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\FWPUCLNT.DLL MOD - [2010-11-21 04:24:07 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll MOD - [2010-11-21 04:24:03 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll MOD - [2010-11-21 04:24:02 | 012,872,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll MOD - [2010-11-21 04:24:02 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cscapi.dll MOD - [2010-11-21 04:24:02 | 000,030,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msdmo.dll MOD - [2010-11-21 04:24:01 | 001,414,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll MOD - [2010-11-21 04:24:01 | 000,442,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntshrui.dll MOD - [2010-11-21 04:24:01 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\nlaapi.dll MOD - [2010-11-21 04:24:00 | 000,562,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\AppPatch\AcLayers.dll MOD - [2010-11-21 04:24:00 | 000,172,032 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wdmaud.drv MOD - [2010-11-21 04:23:59 | 001,154,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\crypt32.dll MOD - [2010-11-21 04:23:55 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll MOD - [2010-11-21 04:23:55 | 000,206,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ws2_32.dll MOD - [2010-11-21 04:23:55 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\AudioSes.dll MOD - [2010-11-21 04:23:51 | 001,667,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll MOD - [2010-11-21 04:23:51 | 000,213,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\MMDevAPI.dll MOD - [2010-11-21 04:23:48 | 000,485,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll MOD - [2010-11-21 04:23:48 | 000,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll MOD - [2010-11-21 04:23:48 | 000,034,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msasn1.dll MOD - [2010-11-16 14:37:30 | 000,230,912 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\ProgramData\DataCardService\DCSHelper.exe MOD - [2010-01-09 21:21:18 | 000,061,824 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft Office\Office14\MSOHEVI.DLL MOD - [2009-12-22 01:54:00 | 008,146,944 | ---- | M] (C-Media Corporation) -- C:\Windows\SysWOW64\CM108.dll MOD - [2009-07-14 02:17:54 | 000,242,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rsaenh.dll MOD - [2009-07-14 02:16:20 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wsock32.dll MOD - [2009-07-14 02:16:20 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wship6.dll MOD - [2009-07-14 02:16:20 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\WSHTCPIP.DLL MOD - [2009-07-14 02:16:19 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winrnr.dll MOD - [2009-07-14 02:16:19 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winnsi.dll MOD - [2009-07-14 02:16:17 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll MOD - [2009-07-14 02:16:17 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll MOD - [2009-07-14 02:16:15 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll MOD - [2009-07-14 02:16:15 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\slc.dll MOD - [2009-07-14 02:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll MOD - [2009-07-14 02:16:13 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\SensApi.dll MOD - [2009-07-14 02:16:12 | 000,145,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\powrprof.dll MOD - [2009-07-14 02:16:12 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\pnrpnsp.dll MOD - [2009-07-14 02:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll MOD - [2009-07-14 02:16:12 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\perfos.dll MOD - [2009-07-14 02:16:12 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rasadhlp.dll MOD - [2009-07-14 02:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll MOD - [2009-07-14 02:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll MOD - [2009-07-14 02:16:11 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\nsi.dll MOD - [2009-07-14 02:16:02 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\NapiNSP.dll MOD - [2009-07-14 02:15:50 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll MOD - [2009-07-14 02:15:44 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msimg32.dll MOD - [2009-07-14 02:15:43 | 000,828,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll MOD - [2009-07-14 02:15:42 | 000,072,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msacm32.dll MOD - [2009-07-14 02:15:41 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mpr.dll MOD - [2009-07-14 02:15:40 | 000,177,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mlang.dll MOD - [2009-07-14 02:15:40 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\midimap.dll MOD - [2009-07-14 02:15:36 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\linkinfo.dll MOD - [2009-07-14 02:15:35 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ksuser.dll MOD - [2009-07-14 02:15:19 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\es.dll MOD - [2009-07-14 02:15:14 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\EhStorShell.dll MOD - [2009-07-14 02:15:13 | 000,453,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dsound.dll MOD - [2009-07-14 02:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dwmapi.dll MOD - [2009-07-14 02:15:10 | 000,531,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ddraw.dll MOD - [2009-07-14 02:15:10 | 000,066,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devenum.dll MOD - [2009-07-14 02:15:09 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dciman32.dll MOD - [2009-07-14 02:15:07 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptsp.dll MOD - [2009-07-14 02:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll MOD - [2009-07-14 02:15:03 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll MOD - [2009-07-14 02:14:58 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\avrt.dll MOD - [2009-07-14 02:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll MOD - [2009-07-14 02:14:31 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rundll32.exe MOD - [2009-07-14 02:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx MOD - [2009-07-14 02:14:08 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msacm32.drv MOD - [2009-07-14 02:11:24 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll MOD - [2009-07-14 02:11:23 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll MOD - [2009-07-14 02:09:00 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\normaliz.dll MOD - [2009-07-14 02:07:19 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt40.dll MOD - [2007-07-18 22:33:54 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\Users\Paweł\AppData\Roaming\Dropbox\bin\MSVCR71.dll MOD - [1998-10-31 10:55:56 | 000,005,120 | ---- | M] () -- D:\EXPERTool\TBMANAGE.DLL [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2010-12-22 14:22:52 | 000,027,760 | ---- | M] (VIA Technologies, Inc.) [Auto | Running] -- C:\Windows\SysNative\ViakaraokeSrv.exe -- (VIAKaraokeService) SRV:[b]64bit:[/b] - [2010-11-11 14:36:38 | 000,282,616 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe -- (NisSrv) SRV:[b]64bit:[/b] - [2010-11-11 14:36:38 | 000,012,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc) SRV:[b]64bit:[/b] - [2010-04-06 16:30:38 | 000,031,272 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\AppleChargerSrv.exe -- (AppleChargerSrv) SRV:[b]64bit:[/b] - [2009-07-14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2012-02-23 15:33:29 | 000,489,256 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2012-02-19 21:18:00 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2012-02-08 00:12:04 | 000,097,552 | ---- | M] (SANDBOXIE L.T.D) [Auto | Running] -- D:\Sandboxie\SbieSvc.exe -- (SbieSvc) SRV - [2012-01-30 21:15:34 | 000,218,624 | ---- | M] () [Auto | Stopped] -- C:\Program Files (x86)\Multimedia mobilNET\UpdateDog\ouc.exe -- (Multimedia mobilNET. RunOuc) SRV - [2012-01-19 12:47:20 | 003,027,840 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- D:\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7) SRV - [2012-01-13 14:53:18 | 000,652,360 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- D:\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2011-11-14 10:16:38 | 001,039,360 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] -- C:\Users\PAWE~1\AppData\Local\Temp\7zS4B12\hpslpsvc64.dll -- (HPSLPSVC) SRV - [2011-10-15 09:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService) SRV - [2011-10-15 00:54:40 | 000,381,248 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2011-08-19 09:26:50 | 000,450,848 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe -- (UMVPFSrv) SRV - [2010-10-05 21:04:12 | 002,655,768 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe -- (UNS) Intel® SRV - [2010-10-05 21:04:08 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe -- (LMS) Intel® SRV - [2010-03-18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010-02-19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2009-06-10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2012-01-30 21:15:34 | 000,421,376 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbwwan.sys -- (ewusbmbb) DRV:[b]64bit:[/b] - [2012-01-30 21:15:34 | 000,221,312 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbmdm.sys -- (hwdatacard) DRV:[b]64bit:[/b] - [2012-01-30 21:15:34 | 000,117,248 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ew_hwusbdev.sys -- (ew_hwusbdev) DRV:[b]64bit:[/b] - [2012-01-30 21:15:34 | 000,086,016 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ew_jubusenum.sys -- (huawei_enumerator) DRV:[b]64bit:[/b] - [2011-12-17 08:38:09 | 000,867,064 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2011-12-10 15:24:08 | 000,023,152 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector) DRV:[b]64bit:[/b] - [2011-09-21 10:25:54 | 000,021,992 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz135_x64.sys -- (cpuz135) DRV:[b]64bit:[/b] - [2011-08-19 09:27:30 | 004,869,024 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvuvc64.sys -- (LVUVC64) Logitech Webcam 200(UVC) DRV:[b]64bit:[/b] - [2011-08-19 09:27:30 | 000,351,136 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (LVRS64) DRV:[b]64bit:[/b] - [2011-07-08 00:21:28 | 000,174,184 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA) DRV:[b]64bit:[/b] - [2011-03-23 03:20:58 | 000,077,936 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C) DRV:[b]64bit:[/b] - [2011-01-10 18:16:08 | 000,021,104 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\AppleCharger.sys -- (AppleCharger) DRV:[b]64bit:[/b] - [2010-12-22 14:22:44 | 002,156,656 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService) DRV:[b]64bit:[/b] - [2010-11-21 04:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD) DRV:[b]64bit:[/b] - [2010-11-21 04:23:47 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2010-10-24 21:25:38 | 000,072,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv) DRV:[b]64bit:[/b] - [2010-09-21 09:59:38 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) Intel® DRV:[b]64bit:[/b] - [2009-12-22 01:54:00 | 001,308,160 | ---- | M] (C-Media Electronics Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CM10864.sys -- (USBPNPA) DRV:[b]64bit:[/b] - [2009-07-14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 02:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:[b]64bit:[/b] - [2009-07-14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-06-10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV - [2012-02-08 00:12:02 | 000,161,432 | ---- | M] (SANDBOXIE L.T.D) [Kernel | On_Demand | Running] -- D:\Sandboxie\SbieDrv.sys -- (SbieDrv) DRV - [2010-05-27 01:43:00 | 000,014,648 | ---- | M] () [Kernel | On_Demand | Stopped] -- D:\MSI Afterburner\RTCore64.sys -- (RTCore64) DRV - [2009-07-14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) DRV - [2007-03-16 10:11:20 | 000,015,648 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysWOW64\drivers\TBPanelx64.sys -- (Cardex) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = [url="http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC"]http://www.bing.com/...ms}&FORM=IE8SRC[/url] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = [url="http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC"]http://www.bing.com/...ms}&FORM=IE8SRC[/url] IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = [url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"]http://www.bing.com/...Box&FORM=IE8SRC[/url] IE - HKU\S-1-5-21-2076870112-2381720548-2427631625-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "http://www.google.pl/" FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKEY_LOCAL_MACHINE\software\mozilla\Aurora 11.0a2\extensions\\Components: D:\Aurora\components [2012-01-22 21:21:08 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Aurora 11.0a2\extensions\\Plugins: D:\Aurora\plugins FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Components: D:\Mozilla Firefox\components [2012-01-22 21:21:08 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Plugins: D:\Mozilla Firefox\plugins [2011-12-08 20:39:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Paweł\AppData\Roaming\mozilla\Extensions [2012-02-27 21:23:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Paweł\AppData\Roaming\mozilla\Firefox\Profiles\six4hfbl.default\extensions [2012-02-27 21:23:17 | 000,000,000 | ---D | M] (Battlefield Play4Free) -- C:\Users\Paweł\AppData\Roaming\mozilla\Firefox\Profiles\six4hfbl.default\extensions\battlefieldplay4free@ea.com File not found (No name found) -- C:\USERS\PAWEĹ‚\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SIX4HFBL.DEFAULT\EXTENSIONS\BATTLEFIELDPLAY4FREE@EA.COM File not found (No name found) -- C:\USERS\PAWEĹ‚\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SIX4HFBL.DEFAULT\EXTENSIONS\TESTPILOT@LABS.MOZILLA.COM.XPI O1 HOSTS File: ([2012-01-02 20:33:54 | 000,001,395 | RHS- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O1 - Hosts: 69.72.252.254 www.google-analytics.com. O1 - Hosts: 69.72.252.254 ad-emea.doubleclick.net. O1 - Hosts: 69.72.252.254 www.statcounter.com. O1 - Hosts: 184.95.41.155 www.google-analytics.com. O1 - Hosts: 184.95.41.155 ad-emea.doubleclick.net. O1 - Hosts: 184.95.41.155 www.statcounter.com. O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) O4:[b]64bit:[/b] - HKLM..\Run: [Cm108Sound] C:\Windows\Syswow64\cm108.dll (C-Media Corporation) O4:[b]64bit:[/b] - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation) O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-2076870112-2381720548-2427631625-1001..\Run: [GAINWARD] D:\EXPERTool\TBPanel.exe (Gainward Co.) O4 - HKU\S-1-5-21-2076870112-2381720548-2427631625-1002..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-21-2076870112-2381720548-2427631625-1002..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - Startup: C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Xfire.lnk = D:\Xfire\Xfire.exe (Xfire Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O13[b]64bit:[/b] - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} [url="http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab"]http://java.sun.com/...indows-i586.cab[/url] (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} [url="http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab"]http://java.sun.com/...indows-i586.cab[/url] (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [url="http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab"]http://java.sun.com/...indows-i586.cab[/url] (Java Plug-in 1.6.0_29) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} [url="http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab"]http://fpdownload2.m...ash/swflash.cab[/url] (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 217.172.224.160 89.228.7.226 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8437B91C-1505-43BA-921F-655E92A08CF2}: DhcpNameServer = 217.172.224.160 89.228.7.226 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C58654B4-3FB0-4198-BD04-6624FEC09F3D}: NameServer = 89.108.195.21 217.17.34.10 O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{8a474b77-4b7e-11e1-9cab-50e5492e94c5}\Shell - "" = AutoRun O33 - MountPoints2\{8a474b77-4b7e-11e1-9cab-50e5492e94c5}\Shell\AutoRun\command - "" = G:\AutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* MsConfig:64bit - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^DFX.lnk - D:\DFX\DFX.exe - () MsConfig:64bit - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Kaspersky Security Scan.lnk - - File not found MsConfig:64bit - StartUpFolder: C:^Users^Paweł^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk - C:\Users\PAWE~1\AppData\Roaming\Dropbox\bin\Dropbox.exe - (Dropbox, Inc.) MsConfig:64bit - StartUpFolder: C:^Users^Paweł^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Rejestracja produktu.lnk - D:\Logitech\Ereg\eReg.exe - (Leader Technologies/Logitech) MsConfig:64bit - StartUpFolder: C:^Users^Paweł^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe - () MsConfig:64bit - StartUpReg: [b]Adobe ARM[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) MsConfig:64bit - StartUpReg: [b]Adobe Reader Speed Launcher[/b] - hkey= - key= - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) MsConfig:64bit - StartUpReg: [b]AdobeAAMUpdater-1.0[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated) MsConfig:64bit - StartUpReg: [b]AdobeCS5.5ServiceManager[/b] - hkey= - key= - File not found MsConfig:64bit - StartUpReg: [b]ALLUpdate[/b] - hkey= - key= - C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe () MsConfig:64bit - StartUpReg: [b]APSDaemon[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) MsConfig:64bit - StartUpReg: [b]LWS[/b] - hkey= - key= - D:\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.) MsConfig:64bit - StartUpReg: [b]Malwarebytes' Anti-Malware[/b] - hkey= - key= - D:\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) MsConfig:64bit - StartUpReg: [b]Malwarebytes' Anti-Malware (reboot)[/b] - hkey= - key= - D:\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation) MsConfig:64bit - StartUpReg: [b]QuickTime Task[/b] - hkey= - key= - C:\Program Files (x86)\QuickTime\QTTask.exe (Apple Inc.) MsConfig:64bit - StartUpReg: [b]SandboxieControl[/b] - hkey= - key= - D:\Sandboxie\SbieCtrl.exe (SANDBOXIE L.T.D) MsConfig:64bit - StartUpReg: [b]Steam[/b] - hkey= - key= - D:\Steam\steam.exe (Valve Corporation) MsConfig:64bit - StartUpReg: [b]SunJavaUpdateSched[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) MsConfig:64bit - StartUpReg: [b]SwitchBoard[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated) MsConfig:64bit - State: "startup" - Reg Error: Key error. MsConfig:64bit - State: "bootini" - Reg Error: Key error. SafeBootMin:[b]64bit:[/b] AppMgmt - Service SafeBootMin:[b]64bit:[/b] Base - Driver Group SafeBootMin:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] Boot file system - Driver Group SafeBootMin:[b]64bit:[/b] File system - Driver Group SafeBootMin:[b]64bit:[/b] Filter - Driver Group SafeBootMin:[b]64bit:[/b] HelpSvc - Service SafeBootMin:[b]64bit:[/b] MsMpSvc - C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootMin:[b]64bit:[/b] PNP Filter - Driver Group SafeBootMin:[b]64bit:[/b] Primary disk - Driver Group SafeBootMin:[b]64bit:[/b] sacsvr - Service SafeBootMin:[b]64bit:[/b] SCSI Class - Driver Group SafeBootMin:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootMin:[b]64bit:[/b] vmms - Service SafeBootMin:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootMin:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootMin: AppMgmt - Service SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vmms - Service SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet:[b]64bit:[/b] AppMgmt - Service SafeBootNet:[b]64bit:[/b] Base - Driver Group SafeBootNet:[b]64bit:[/b] Boot Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] Boot file system - Driver Group SafeBootNet:[b]64bit:[/b] File system - Driver Group SafeBootNet:[b]64bit:[/b] Filter - Driver Group SafeBootNet:[b]64bit:[/b] HelpSvc - Service SafeBootNet:[b]64bit:[/b] Messenger - Service SafeBootNet:[b]64bit:[/b] MsMpSvc - C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] NDIS Wrapper - Driver Group SafeBootNet:[b]64bit:[/b] NetBIOSGroup - Driver Group SafeBootNet:[b]64bit:[/b] NetDDEGroup - Driver Group SafeBootNet:[b]64bit:[/b] Network - Driver Group SafeBootNet:[b]64bit:[/b] NetworkProvider - Driver Group SafeBootNet:[b]64bit:[/b] PCI Configuration - Driver Group SafeBootNet:[b]64bit:[/b] PNP Filter - Driver Group SafeBootNet:[b]64bit:[/b] PNP_TDI - Driver Group SafeBootNet:[b]64bit:[/b] Primary disk - Driver Group SafeBootNet:[b]64bit:[/b] rdsessmgr - Service SafeBootNet:[b]64bit:[/b] sacsvr - Service SafeBootNet:[b]64bit:[/b] SCSI Class - Driver Group SafeBootNet:[b]64bit:[/b] Streams Drivers - Driver Group SafeBootNet:[b]64bit:[/b] System Bus Extender - Driver Group SafeBootNet:[b]64bit:[/b] TDI - Driver Group SafeBootNet:[b]64bit:[/b] vmms - Service SafeBootNet:[b]64bit:[/b] WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootNet:[b]64bit:[/b] WudfUsbccidDriver - Driver SafeBootNet:[b]64bit:[/b] {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet:[b]64bit:[/b] {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet:[b]64bit:[/b] {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet:[b]64bit:[/b] {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet:[b]64bit:[/b] {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet:[b]64bit:[/b] {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet:[b]64bit:[/b] {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet:[b]64bit:[/b] {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet:[b]64bit:[/b] {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet:[b]64bit:[/b] {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet:[b]64bit:[/b] {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet:[b]64bit:[/b] {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet:[b]64bit:[/b] {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet:[b]64bit:[/b] {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet:[b]64bit:[/b] {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet:[b]64bit:[/b] {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet:[b]64bit:[/b] {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet:[b]64bit:[/b] {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet:[b]64bit:[/b] {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet:[b]64bit:[/b] {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet:[b]64bit:[/b] {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet:[b]64bit:[/b] {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: AppMgmt - Service SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vmms - Service SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices [color=#E56717]========== Files/Folders - Created Within 60 Days ==========[/color] [2012-03-04 14:09:56 | 000,585,216 | ---- | C] (OldTimer Tools) -- C:\Users\Paweł\Desktop\OTL.exe [2012-03-03 19:10:30 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Roaming\IcoFX2X [2012-03-03 19:10:28 | 000,000,000 | ---D | C] -- C:\ProgramData\IcoFX2X [2012-03-03 19:10:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IcoFX 2 [2012-03-03 19:10:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IcoFX 2 [2012-03-03 19:07:02 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Roaming\gtk-2.0 [2012-03-03 18:39:52 | 000,000,000 | ---D | C] -- C:\Users\Paweł\.thumbnails [2012-03-03 18:38:13 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\Documents\gegl-0.0 [2012-03-03 18:38:13 | 000,000,000 | ---D | C] -- C:\Users\Paweł\.gimp-2.6 [2012-02-29 21:45:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation [2012-02-29 21:43:30 | 000,068,928 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll [2012-02-29 21:43:30 | 000,061,248 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll [2012-02-29 21:42:42 | 000,000,000 | ---D | C] -- C:\NVIDIA [2012-02-28 22:00:03 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner [2012-02-26 20:14:22 | 000,000,000 | R--D | C] -- C:\Users\Paweł\Dropbox [2012-02-26 20:13:20 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox [2012-02-26 20:12:56 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Roaming\Dropbox [2012-02-25 22:17:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow x64 [2012-02-25 22:17:00 | 000,000,000 | ---D | C] -- C:\Program Files\ffdshow [2012-02-25 16:57:39 | 000,000,000 | ---D | C] -- C:\Windows\Sun [2012-02-24 22:36:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAXON [2012-02-24 22:26:47 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Roaming\MAXON [2012-02-24 20:13:58 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\Proclub [2012-02-23 15:15:17 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Roaming\capella-software [2012-02-23 15:15:17 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\Documents\capella [2012-02-23 15:14:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Capella Professional [2012-02-23 15:14:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\capella professional [2012-02-23 14:59:30 | 000,000,000 | ---D | C] -- C:\finale [2012-02-23 14:45:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard [2012-02-23 14:45:19 | 000,000,000 | ---D | C] -- C:\Psfonts [2012-02-23 14:45:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Finale 2006 [2012-02-20 17:44:51 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\Shameless [2012-02-19 21:19:38 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Roaming\NVIDIA [2012-02-19 13:55:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImageShack Uploader [2012-02-17 21:37:42 | 000,000,000 | R--D | C] -- C:\Sandbox [2012-02-17 21:37:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie [2012-02-17 18:40:59 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\unreal [2012-02-12 16:27:15 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\cod6 [2012-02-12 16:13:14 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner [2012-02-11 19:00:43 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\Injectory [2012-02-11 18:55:57 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Roaming\Mael [2012-02-11 18:14:03 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\Kidebr Aimbot (v1.3.37) [2012-02-10 20:28:19 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\BubbleFX v1 [2012-01-30 21:16:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Multimedia mobilNET [2012-01-30 21:15:48 | 001,001,472 | ---- | C] (DiBcom SA) -- C:\Windows\SysNative\drivers\mod7700.sys [2012-01-30 21:15:48 | 000,421,376 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbwwan.sys [2012-01-30 21:15:48 | 000,221,312 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbmdm.sys [2012-01-30 21:15:48 | 000,212,992 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_juwwanecm.sys [2012-01-30 21:15:48 | 000,117,248 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_hwusbdev.sys [2012-01-30 21:15:48 | 000,098,816 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_jucdcacm.sys [2012-01-30 21:15:48 | 000,086,016 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_jubusenum.sys [2012-01-30 21:15:48 | 000,069,632 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_jucdcecm.sys [2012-01-30 21:15:48 | 000,032,768 | ---- | C] (Huawei Tech. Co., Ltd.) -- C:\Windows\SysNative\drivers\ewdcsc.sys [2012-01-30 21:15:48 | 000,028,672 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_juextctrl.sys [2012-01-30 21:15:48 | 000,022,016 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_hwupgrade.sys [2012-01-30 21:15:48 | 000,013,952 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_usbenumfilter.sys [2012-01-30 21:14:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Multimedia mobilNET [2012-01-30 21:14:14 | 000,000,000 | ---D | C] -- C:\ProgramData\DataCardService [2012-01-30 21:13:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Multimedia mobilNET [2012-01-29 16:32:58 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\Documents\Podbot by Libre [2012-01-29 16:14:12 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\Documents\csdm-2.1.2 [2012-01-29 16:10:13 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\Documents\AMXX 1.8.1[Windows] - Reksio-CS.pl [2012-01-22 23:21:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0 [2012-01-22 21:21:59 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Local\Apple Computer [2012-01-22 21:21:35 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Roaming\Apple Computer [2012-01-22 21:21:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime [2012-01-22 21:20:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime [2012-01-22 21:20:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer [2012-01-22 21:20:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple [2012-01-22 21:20:25 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Local\Apple [2012-01-22 21:20:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update [2012-01-22 21:20:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2012-01-22 19:26:20 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1986-12.com.adobe [2012-01-22 19:13:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe [2012-01-22 19:11:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR [2012-01-22 12:04:46 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\LOIC [2012-01-21 17:17:35 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\Documents\sourcemod-1.4.1-windows [2012-01-21 16:40:19 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\Documents\cssdm-2.1.4 [2012-01-21 16:40:02 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\Documents\cfg [2012-01-21 16:40:00 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\Documents\addons [2012-01-21 16:35:05 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\Documents\mmsource-1.8.7-windows [2012-01-21 15:18:06 | 004,087,152 | ---- | C] (TeamViewer GmbH) -- C:\Users\Paweł\Desktop\Documents\TeamViewer_Setup_pl.exe [2012-01-19 20:00:34 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Local\Logitech® Webcam Software [2012-01-19 19:58:34 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Local\LogiShrd [2012-01-19 19:48:19 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Roaming\Leadertech [2012-01-19 19:48:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Logitech [2012-01-19 19:47:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\LWS [2012-01-19 19:47:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech [2012-01-19 19:47:43 | 000,000,000 | ---D | C] -- C:\ProgramData\LogiShrd [2012-01-19 19:47:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Logitech [2012-01-19 19:43:33 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\logishrd [2012-01-19 19:43:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\logishrd [2012-01-19 18:56:11 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Roaming\Skype [2012-01-19 18:56:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2012-01-19 18:56:05 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype [2012-01-19 18:56:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype [2012-01-19 07:19:22 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\Airwaves [2012-01-15 18:46:40 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Local\Librus Świadectwa [2012-01-14 18:37:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Magic Bullet Editors 2.0 Vegas [2012-01-14 18:36:01 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\Documents\Magic Bullet v2 [2012-01-14 16:23:36 | 000,021,992 | ---- | C] (CPUID) -- C:\Windows\SysNative\drivers\cpuz135_x64.sys [2012-01-14 16:23:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPU-Z [2012-01-14 16:11:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Świadectwa Gimnazjum [2012-01-14 16:11:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Librus [2012-01-13 21:27:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NewBlue [2012-01-13 21:27:29 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\Dodatki [2012-01-13 19:55:58 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\PlayboyFX v1 [2012-01-07 20:13:18 | 000,000,000 | ---D | C] -- C:\Users\Paweł\Desktop\HLDJ [2012-01-05 20:36:51 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Local\gtk-2.0 [2012-01-05 20:34:38 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Local\gegl-0.1 [2012-01-05 20:34:38 | 000,000,000 | ---D | C] -- C:\Users\Paweł\.gimp-2.7 [2012-01-05 20:34:10 | 000,000,000 | ---D | C] -- C:\Users\Paweł\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gimp-2.7.3 [2012-01-05 20:34:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gimp-2.7.3 [2012-01-04 21:19:44 | 000,000,000 | ---D | C] -- C:\output [2012-01-04 21:17:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape [2012-01-04 21:17:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PhotoScape [color=#E56717]========== Files - Modified Within 60 Days ==========[/color] [2012-03-04 15:15:38 | 003,407,872 | -HS- | M] () -- C:\Users\Paweł\ntuser.dat [2012-03-04 15:07:23 | 000,236,236 | ---- | M] () -- C:\Users\Paweł\Desktop\PIT-37(17)_v1-0E.pdf [2012-03-04 15:02:35 | 000,011,761 | ---- | M] () -- C:\Users\Paweł\AppData\Local\unins000.msg [2012-03-04 15:02:35 | 000,007,376 | ---- | M] () -- C:\Users\Paweł\AppData\Local\unins000.dat [2012-03-04 15:02:30 | 000,707,504 | ---- | M] () -- C:\Users\Paweł\AppData\Local\unins000.exe [2012-03-04 14:09:58 | 000,585,216 | ---- | M] (OldTimer Tools) -- C:\Users\Paweł\Desktop\OTL.exe [2012-03-04 13:50:48 | 000,021,856 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012-03-04 13:50:48 | 000,021,856 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012-03-04 13:37:26 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2012-03-04 13:37:25 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012-03-04 13:35:57 | 2134,450,175 | -HS- | M] () -- C:\hiberfil.sys [2012-03-04 13:19:55 | 003,642,912 | -H-- | M] () -- C:\Users\Paweł\AppData\Local\IconCache.db [2012-03-03 21:39:20 | 000,007,602 | ---- | M] () -- C:\Users\Paweł\AppData\Local\Resmon.ResmonCfg [2012-03-03 19:08:38 | 000,002,089 | ---- | M] () -- C:\Users\Paweł\.recently-used.xbel [2012-03-03 18:56:42 | 000,000,626 | ---- | M] () -- C:\Users\Paweł\Desktop\GIMP 2.6.lnk [2012-03-03 18:54:52 | 000,524,288 | -HS- | M] () -- C:\Users\Paweł\ntuser.dat{bd0a0a6b-6559-11e1-9ba8-50e5492e94c5}.TMContainer00000000000000000002.regtrans-ms [2012-03-03 18:54:52 | 000,524,288 | -HS- | M] () -- C:\Users\Paweł\ntuser.dat{bd0a0a6b-6559-11e1-9ba8-50e5492e94c5}.TMContainer00000000000000000001.regtrans-ms [2012-03-03 18:54:52 | 000,065,536 | -HS- | M] () -- C:\Users\Paweł\ntuser.dat{bd0a0a6b-6559-11e1-9ba8-50e5492e94c5}.TM.blf [2012-03-03 18:14:21 | 000,000,848 | ---- | M] () -- C:\Users\Paweł\AppData\Local\recently-used.xbel [2012-03-02 19:09:05 | 002,718,437 | ---- | M] () -- C:\Users\Paweł\Desktop\Documents\fps.png [2012-03-01 17:38:56 | 001,669,940 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012-03-01 17:38:56 | 000,740,042 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat [2012-03-01 17:38:56 | 000,654,250 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012-03-01 17:38:56 | 000,155,630 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat [2012-03-01 17:38:56 | 000,122,082 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2012-02-29 21:51:15 | 000,000,198 | ---- | M] () -- C:\Users\Paweł\Desktop\Counter-Strike.url [2012-02-29 20:21:24 | 000,042,392 | ---- | M] () -- C:\Windows\SysWow64\xfcodec.dll [2012-02-29 20:21:24 | 000,028,056 | ---- | M] () -- C:\Windows\SysNative\xfcodec64.dll [2012-02-28 22:10:48 | 000,001,073 | ---- | M] () -- C:\Users\Paweł\Desktop\Counter-Strike Movie.lnk [2012-02-28 22:00:03 | 000,000,597 | ---- | M] () -- C:\Users\Paweł\Desktop\MSI Afterburner.lnk [2012-02-28 16:58:45 | 000,209,764 | ---- | M] () -- C:\Users\Paweł\Desktop\Documents\Bez tytułuuu.png [2012-02-27 15:50:28 | 002,242,438 | ---- | M] () -- C:\Users\Paweł\Desktop\Documents\hax.png [2012-02-26 16:03:43 | 000,000,786 | ---- | M] () -- C:\Users\Paweł\Desktop\Documents\MasterServers.vdf [2012-02-26 00:04:23 | 000,008,192 | ---- | M] () -- C:\Users\Paweł\Desktop\Owner's AIW Hack.exe [2012-02-24 20:14:42 | 000,008,287 | ---- | M] () -- C:\Windows\Cm108.ini.imi [2012-02-23 19:00:53 | 004,941,656 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012-02-23 17:48:59 | 000,101,800 | ---- | M] () -- C:\Users\Paweł\AppData\Local\GDIPFONTCACHEV1.DAT [2012-02-23 17:38:48 | 000,278,836 | ---- | M] () -- C:\Users\Paweł\Desktop\Documents\peterxdddd.png [2012-02-23 14:44:57 | 000,000,403 | ---- | M] () -- C:\Windows\winiini.fin [2012-02-19 21:51:40 | 000,283,416 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr [2012-02-19 21:51:40 | 000,283,416 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe [2012-02-19 21:20:04 | 000,283,416 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0 [2012-02-19 21:18:00 | 000,076,888 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe [2012-02-19 17:13:12 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\lvuvc.hs [2012-02-19 13:55:10 | 000,002,483 | ---- | M] () -- C:\Users\Public\Desktop\ImageShack Uploader.lnk [2012-02-19 13:26:56 | 000,000,202 | ---- | M] () -- C:\Users\Paweł\Desktop\APB Reloaded.url [2012-02-19 13:20:14 | 000,000,199 | ---- | M] () -- C:\Users\Paweł\Desktop\Team Fortress 2.url [2012-02-17 21:38:55 | 000,001,914 | ---- | M] () -- C:\Windows\Sandboxie.ini [2012-02-17 17:47:09 | 000,000,485 | ---- | M] () -- C:\Windows\CSSBOT.cfg [2012-02-12 16:18:44 | 000,000,000 | ---- | M] () -- C:\Users\Paweł\Desktop\Documents\cod6bot.rar [2012-02-12 16:14:51 | 000,000,000 | ---- | M] () -- C:\Users\Paweł\Desktop\Documents\CoD6Bot alteriwnet.dll [2012-02-12 16:13:42 | 000,000,000 | ---- | M] () -- C:\Users\Paweł\Desktop\Documents\cod6espv207.ini [2012-02-11 17:12:09 | 001,645,142 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2012-02-11 16:30:02 | 000,736,113 | ---- | M] () -- C:\Users\Paweł\Desktop\Documents\mw2.png [2012-02-08 22:55:30 | 000,092,160 | ---- | M] () -- C:\Windows\SysNative\ff_vfw.dll [2012-02-04 18:41:30 | 002,589,009 | -H-- | M] () -- C:\Users\Paweł\AppData\Roaming\Pawełlog.dat [2012-01-30 21:16:05 | 000,001,103 | ---- | M] () -- C:\Users\Public\Desktop\Multimedia mobilNET.lnk [2012-01-30 21:15:34 | 001,001,472 | ---- | M] (DiBcom SA) -- C:\Windows\SysNative\drivers\mod7700.sys [2012-01-30 21:15:34 | 000,421,376 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbwwan.sys [2012-01-30 21:15:34 | 000,221,312 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbmdm.sys [2012-01-30 21:15:34 | 000,212,992 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_juwwanecm.sys [2012-01-30 21:15:34 | 000,117,248 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_hwusbdev.sys [2012-01-30 21:15:34 | 000,098,816 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_jucdcacm.sys [2012-01-30 21:15:34 | 000,086,016 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_jubusenum.sys [2012-01-30 21:15:34 | 000,069,632 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_jucdcecm.sys [2012-01-30 21:15:34 | 000,032,768 | ---- | M] (Huawei Tech. Co., Ltd.) -- C:\Windows\SysNative\drivers\ewdcsc.sys [2012-01-30 21:15:34 | 000,028,672 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_juextctrl.sys [2012-01-30 21:15:34 | 000,022,016 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_hwupgrade.sys [2012-01-30 21:15:34 | 000,013,952 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_usbenumfilter.sys [2012-01-30 21:14:14 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ew_jubusenum_01007.Wdf [2012-01-29 16:22:31 | 000,001,048 | ---- | M] () -- C:\Users\Paweł\Desktop\Counter-Strike P48.lnk [2012-01-29 16:08:50 | 000,001,791 | ---- | M] () -- C:\Users\Paweł\Desktop\Documents\ne_unlimitedammo.sma [2012-01-29 16:08:39 | 000,002,084 | ---- | M] () -- C:\Users\Paweł\Desktop\Documents\ne_unlimitedammo.amxx [2012-01-29 16:02:49 | 000,322,409 | ---- | M] () -- C:\Users\Paweł\Desktop\Documents\csdm-2.1.2.zip [2012-01-22 23:26:40 | 000,072,822 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf [2012-01-22 23:26:38 | 000,072,822 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf [2012-01-22 20:04:20 | 000,000,829 | ---- | M] () -- C:\Users\Paweł\Desktop\Adobe Photoshop CS5.lnk [2012-01-22 17:54:16 | 000,000,580 | ---- | M] () -- C:\Users\Paweł\Desktop\Aurora.lnk [2012-01-21 17:15:20 | 000,000,064 | ---- | M] () -- C:\Users\Paweł\Desktop\Documents\metamod.vdf [2012-01-21 16:34:29 | 007,353,410 | ---- | M] () -- C:\Users\Paweł\Desktop\Documents\sourcemod-1.4.1-windows.zip [2012-01-21 15:18:10 | 004,087,152 | ---- | M] (TeamViewer GmbH) -- C:\Users\Paweł\Desktop\Documents\TeamViewer_Setup_pl.exe [2012-01-20 21:23:55 | 000,002,517 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk [2012-01-19 20:21:40 | 000,008,918 | ---- | M] () -- C:\Users\Paweł\Desktop\Documents\plej.cfg [2012-01-19 19:48:54 | 000,002,009 | ---- | M] () -- C:\Users\Public\Desktop\Logitech Vid HD.lnk [2012-01-19 19:47:47 | 000,001,624 | ---- | M] () -- C:\Users\Public\Desktop\Logitech Webcam Software .lnk [2012-01-17 21:52:14 | 000,034,975 | ---- | M] () -- C:\Users\Paweł\Desktop\Documents\4325.png [2012-01-17 18:32:35 | 000,014,132 | ---- | M] () -- C:\Users\Paweł\Desktop\Documents\rolex_logo1-431x300.jpg [2012-01-17 16:32:16 | 000,029,510 | ---- | M] () -- C:\Users\Paweł\Desktop\Documents\42.png [2012-01-15 17:57:10 | 000,027,102 | ---- | M] () -- C:\Users\Paweł\Desktop\Documents\ea.png [2012-01-15 16:15:00 | 000,000,199 | ---- | M] () -- C:\Users\Paweł\Desktop\Half-Life 2 Deathmatch.url [2012-01-15 16:14:04 | 000,000,199 | ---- | M] () -- C:\Users\Paweł\Desktop\Half-Life 2.url [2012-01-14 16:23:53 | 000,000,914 | ---- | M] () -- C:\Users\Paweł\Desktop\Documents\CPU-Z.lnk [2012-01-05 20:32:40 | 045,123,515 | ---- | M] () -- C:\Users\Paweł\Desktop\Documents\gimp-2.7.3-64bit.exe [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-03-04 15:02:35 | 000,707,504 | ---- | C] () -- C:\Users\Paweł\AppData\Local\unins000.exe [2012-03-04 14:59:53 | 000,236,236 | ---- | C] () -- C:\Users\Paweł\Desktop\PIT-37(17)_v1-0E.pdf [2012-03-04 14:58:52 | 000,011,761 | ---- | C] () -- C:\Users\Paweł\AppData\Local\unins000.msg [2012-03-04 14:58:51 | 000,007,376 | ---- | C] () -- C:\Users\Paweł\AppData\Local\unins000.dat [2012-03-03 21:39:20 | 000,007,602 | ---- | C] () -- C:\Users\Paweł\AppData\Local\Resmon.ResmonCfg [2012-03-03 19:08:38 | 000,002,089 | ---- | C] () -- C:\Users\Paweł\.recently-used.xbel [2012-03-03 18:54:52 | 000,524,288 | -HS- | C] () -- C:\Users\Paweł\ntuser.dat{bd0a0a6b-6559-11e1-9ba8-50e5492e94c5}.TMContainer00000000000000000002.regtrans-ms [2012-03-03 18:54:52 | 000,524,288 | -HS- | C] () -- C:\Users\Paweł\ntuser.dat{bd0a0a6b-6559-11e1-9ba8-50e5492e94c5}.TMContainer00000000000000000001.regtrans-ms [2012-03-03 18:54:52 | 000,065,536 | -HS- | C] () -- C:\Users\Paweł\ntuser.dat{bd0a0a6b-6559-11e1-9ba8-50e5492e94c5}.TM.blf [2012-03-03 18:14:21 | 000,000,848 | ---- | C] () -- C:\Users\Paweł\AppData\Local\recently-used.xbel [2012-03-02 19:09:04 | 002,718,437 | ---- | C] () -- C:\Users\Paweł\Desktop\Documents\fps.png [2012-02-29 20:21:24 | 000,042,392 | ---- | C] () -- C:\Windows\SysWow64\xfcodec.dll [2012-02-29 20:21:24 | 000,028,056 | ---- | C] () -- C:\Windows\SysNative\xfcodec64.dll [2012-02-28 22:00:03 | 000,110,592 | ---- | C] () -- C:\Windows\SysNative\rtvcvfw32.dll [2012-02-28 22:00:03 | 000,000,597 | ---- | C] () -- C:\Users\Paweł\Desktop\MSI Afterburner.lnk [2012-02-28 16:58:45 | 000,209,764 | ---- | C] () -- C:\Users\Paweł\Desktop\Documents\Bez tytułuuu.png [2012-02-27 15:50:27 | 002,242,438 | ---- | C] () -- C:\Users\Paweł\Desktop\Documents\hax.png [2012-02-26 16:03:43 | 000,000,786 | ---- | C] () -- C:\Users\Paweł\Desktop\Documents\MasterServers.vdf [2012-02-25 22:17:48 | 000,008,192 | ---- | C] () -- C:\Users\Paweł\Desktop\Owner's AIW Hack.exe [2012-02-25 22:17:01 | 000,092,160 | ---- | C] () -- C:\Windows\SysNative\ff_vfw.dll [2012-02-23 17:38:48 | 000,278,836 | ---- | C] () -- C:\Users\Paweł\Desktop\Documents\peterxdddd.png [2012-02-23 14:44:57 | 000,000,403 | ---- | C] () -- C:\Windows\winiini.fin [2012-02-19 13:55:10 | 000,002,483 | ---- | C] () -- C:\Users\Public\Desktop\ImageShack Uploader.lnk [2012-02-19 13:26:56 | 000,000,202 | ---- | C] () -- C:\Users\Paweł\Desktop\APB Reloaded.url [2012-02-19 13:20:14 | 000,000,199 | ---- | C] () -- C:\Users\Paweł\Desktop\Team Fortress 2.url [2012-02-17 21:37:19 | 000,001,914 | ---- | C] () -- C:\Windows\Sandboxie.ini [2012-02-17 17:47:09 | 000,000,485 | ---- | C] () -- C:\Windows\CSSBOT.cfg [2012-02-12 16:18:44 | 000,000,000 | ---- | C] () -- C:\Users\Paweł\Desktop\Documents\cod6bot.rar [2012-02-12 16:14:51 | 000,000,000 | ---- | C] () -- C:\Users\Paweł\Desktop\Documents\CoD6Bot alteriwnet.dll [2012-02-12 16:13:42 | 000,000,000 | ---- | C] () -- C:\Users\Paweł\Desktop\Documents\cod6espv207.ini [2012-02-11 16:30:02 | 000,736,113 | ---- | C] () -- C:\Users\Paweł\Desktop\Documents\mw2.png [2012-01-30 21:16:05 | 000,001,103 | ---- | C] () -- C:\Users\Public\Desktop\Multimedia mobilNET.lnk [2012-01-30 21:14:14 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ew_jubusenum_01007.Wdf [2012-01-29 16:22:31 | 000,001,048 | ---- | C] () -- C:\Users\Paweł\Desktop\Counter-Strike P48.lnk [2012-01-29 16:08:50 | 000,001,791 | ---- | C] () -- C:\Users\Paweł\Desktop\Documents\ne_unlimitedammo.sma [2012-01-29 16:08:39 | 000,002,084 | ---- | C] () -- C:\Users\Paweł\Desktop\Documents\ne_unlimitedammo.amxx [2012-01-29 16:02:48 | 000,322,409 | ---- | C] () -- C:\Users\Paweł\Desktop\Documents\csdm-2.1.2.zip [2012-01-22 23:26:40 | 000,072,822 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf [2012-01-22 23:26:38 | 000,072,822 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf [2012-01-22 21:20:24 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk [2012-01-22 20:04:20 | 000,000,829 | ---- | C] () -- C:\Users\Paweł\Desktop\Adobe Photoshop CS5.lnk [2012-01-22 19:14:30 | 000,000,829 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS5.1 (64 Bit).lnk [2012-01-22 19:14:12 | 000,000,782 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS5.1.lnk [2012-01-22 19:13:20 | 000,000,756 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS5.1.lnk [2012-01-22 19:13:07 | 000,000,819 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS5.5.lnk [2012-01-22 19:11:42 | 000,000,882 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS5.5.lnk [2012-01-22 19:11:37 | 000,001,555 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS5.5.lnk [2012-01-22 19:11:16 | 000,000,997 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk [2012-01-22 17:54:16 | 000,000,580 | ---- | C] () -- C:\Users\Paweł\Desktop\Aurora.lnk [2012-01-21 17:15:20 | 000,000,064 | ---- | C] () -- C:\Users\Paweł\Desktop\Documents\metamod.vdf [2012-01-21 16:34:21 | 007,353,410 | ---- | C] () -- C:\Users\Paweł\Desktop\Documents\sourcemod-1.4.1-windows.zip [2012-01-21 15:19:14 | 000,000,673 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 7.lnk [2012-01-19 20:21:38 | 000,008,918 | ---- | C] () -- C:\Users\Paweł\Desktop\Documents\plej.cfg [2012-01-19 19:48:54 | 000,002,009 | ---- | C] () -- C:\Users\Public\Desktop\Logitech Vid HD.lnk [2012-01-19 19:47:47 | 000,001,624 | ---- | C] () -- C:\Users\Public\Desktop\Logitech Webcam Software .lnk [2012-01-19 19:43:39 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\lvuvc.hs [2012-01-19 18:56:07 | 000,002,517 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk [2012-01-17 21:52:14 | 000,034,975 | ---- | C] () -- C:\Users\Paweł\Desktop\Documents\4325.png [2012-01-17 18:32:35 | 000,014,132 | ---- | C] () -- C:\Users\Paweł\Desktop\Documents\rolex_logo1-431x300.jpg [2012-01-17 16:32:16 | 000,029,510 | ---- | C] () -- C:\Users\Paweł\Desktop\Documents\42.png [2012-01-15 17:57:10 | 000,027,102 | ---- | C] () -- C:\Users\Paweł\Desktop\Documents\ea.png [2012-01-15 16:15:00 | 000,000,199 | ---- | C] () -- C:\Users\Paweł\Desktop\Half-Life 2 Deathmatch.url [2012-01-15 16:14:04 | 000,000,199 | ---- | C] () -- C:\Users\Paweł\Desktop\Half-Life 2.url [2012-01-14 16:23:53 | 000,000,914 | ---- | C] () -- C:\Users\Paweł\Desktop\Documents\CPU-Z.lnk [2012-01-05 20:34:10 | 000,000,626 | ---- | C] () -- C:\Users\Paweł\Desktop\GIMP 2.6.lnk [2012-01-05 20:31:41 | 045,123,515 | ---- | C] () -- C:\Users\Paweł\Desktop\Documents\gimp-2.7.3-64bit.exe [2011-12-30 18:23:11 | 000,650,752 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2011-12-30 18:23:11 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2011-12-30 18:23:11 | 000,079,360 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll [2011-12-29 11:54:03 | 000,000,844 | ---- | C] () -- C:\Windows\disney.ini [2011-12-24 14:47:55 | 000,010,752 | ---- | C] () -- C:\Windows\SysWow64\BASSMOD.dll [2011-12-21 20:20:06 | 000,283,416 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2011-12-21 20:19:55 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2011-12-17 08:51:50 | 000,000,311 | ---- | C] () -- C:\Windows\game.ini [2011-12-15 17:11:58 | 000,000,004 | ---- | C] () -- C:\Users\Paweł\AppData\Roaming\steam_md4.dat [2011-11-30 19:02:21 | 000,143,360 | ---- | C] () -- C:\Windows\Vmix108.dll [2011-11-30 19:02:21 | 000,000,259 | ---- | C] () -- C:\Windows\Cm108.ini.cfl [2011-11-30 19:02:19 | 000,008,287 | ---- | C] () -- C:\Windows\Cm108.ini.imi [2011-11-30 19:02:19 | 000,002,029 | ---- | C] () -- C:\Windows\Cm108.ini.cfg [2011-11-30 19:02:19 | 000,001,320 | ---- | C] () -- C:\Windows\cm108.ini [2011-11-30 18:43:35 | 003,642,912 | -H-- | C] () -- C:\Users\Paweł\AppData\Local\IconCache.db [2011-11-30 18:27:20 | 000,101,800 | ---- | C] () -- C:\Users\Paweł\AppData\Local\GDIPFONTCACHEV1.DAT [2011-11-30 11:35:37 | 001,645,142 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011-11-30 11:29:42 | 000,258,048 | ---- | C] () -- C:\Windows\SysWow64\libFLAC.dll [2011-11-30 11:28:59 | 000,175,616 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2011-11-30 11:08:51 | 000,008,192 | ---- | C] () -- C:\Windows\SysWow64\drivers\IntelMEFWVer.dll [2011-11-30 11:06:40 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini [2011-10-15 00:54:52 | 000,321,856 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe [2011-08-19 09:26:20 | 010,898,456 | ---- | C] () -- C:\Windows\SysWow64\LogiDPP.dll [2011-08-19 09:26:20 | 000,336,408 | ---- | C] () -- C:\Windows\SysWow64\DevManagerCore.dll [2011-08-19 09:26:20 | 000,104,472 | ---- | C] () -- C:\Windows\SysWow64\LogiDPPApp.exe [2011-06-02 08:17:24 | 000,007,282 | ---- | C] () -- C:\Windows\cadx2.ini [color=#E56717]========== LOP Check ==========[/color] [2012-03-03 18:51:58 | 000,000,000 | ---D | M] -- C:\Users\Paweł\AppData\Roaming\AIMP3 [2012-02-23 15:15:17 | 000,000,000 | ---D | M] -- C:\Users\Paweł\AppData\Roaming\capella-software [2011-12-29 12:19:28 | 000,000,000 | ---D | M] -- C:\Users\Paweł\AppData\Roaming\Disney Interactive Studios [2012-03-04 13:43:16 | 000,000,000 | ---D | M] -- C:\Users\Paweł\AppData\Roaming\Dropbox [2011-12-28 22:19:06 | 000,000,000 | ---D | M] -- C:\Users\Paweł\AppData\Roaming\Gadu-Gadu 10 [2012-03-03 19:08:14 | 000,000,000 | ---D | M] -- C:\Users\Paweł\AppData\Roaming\gtk-2.0 [2012-03-03 19:10:43 | 000,000,000 | ---D | M] -- C:\Users\Paweł\AppData\Roaming\IcoFX2X [2012-01-19 19:48:19 | 000,000,000 | ---D | M] -- C:\Users\Paweł\AppData\Roaming\Leadertech [2012-02-11 18:55:57 | 000,000,000 | ---D | M] -- C:\Users\Paweł\AppData\Roaming\Mael [2012-02-24 22:45:41 | 000,000,000 | ---D | M] -- C:\Users\Paweł\AppData\Roaming\MAXON [2011-12-04 14:13:04 | 000,000,000 | ---D | M] -- C:\Users\Paweł\AppData\Roaming\OpenOffice.org [2011-11-30 18:32:03 | 000,000,000 | ---D | M] -- C:\Users\Paweł\AppData\Roaming\Opera [2012-01-03 18:24:21 | 000,000,000 | ---D | M] -- C:\Users\Paweł\AppData\Roaming\pdfforge [2011-12-28 21:55:08 | 000,000,000 | ---D | M] -- C:\Users\Paweł\AppData\Roaming\Publish Providers [2012-01-07 13:15:32 | 000,000,000 | ---D | M] -- C:\Users\Paweł\AppData\Roaming\Sony [2012-03-03 18:51:58 | 000,000,000 | ---D | M] -- C:\Users\Paweł\AppData\Roaming\uTorrent [2012-02-05 15:53:52 | 000,000,000 | RHSD | M] -- C:\Users\Paweł\AppData\Roaming\winupdate [2012-02-21 18:44:41 | 000,032,520 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< %systemdrive%\*.* >[/color] [2012-02-23 15:00:14 | 000,000,000 | ---- | M] () -- C:\CreateMarkers.log [2011-11-30 11:09:11 | 000,000,180 | ---- | M] () -- C:\csb.log [2012-03-04 13:35:57 | 2134,450,175 | -HS- | M] () -- C:\hiberfil.sys [2012-03-03 19:10:30 | 000,000,000 | ---- | M] () -- C:\IcoFX.log [2012-03-04 13:35:57 | 4277,592,063 | -HS- | M] () -- C:\pagefile.sys [color=#A23BEC]< MD5 for: AGP440.SYS >[/color] [2009-07-14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys [2009-07-14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys [2009-07-14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2009-07-14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys [2009-07-14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys [2009-07-14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys [color=#A23BEC]< MD5 for: BEEP.SYS >[/color] [2009-07-14 01:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\SysNative\drivers\beep.sys [2009-07-14 01:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 -- C:\Windows\winsxs\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_201592fa214e4f02\beep.sys [color=#A23BEC]< MD5 for: CDROM.SYS >[/color] [2010-11-21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\drivers\cdrom.sys [2010-11-21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys [2010-11-21 04:23:47 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys [color=#A23BEC]< MD5 for: NDIS.SYS >[/color] [2010-11-21 04:23:55 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\SysNative\drivers\ndis.sys [2010-11-21 04:23:55 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_05ed313632ae9759\ndis.sys [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color] [2010-11-21 04:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe [2010-11-21 04:24:29 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe < End of report > [/log] Extras.txt [log] OTL Extras logfile created on: 2012-03-04 15:15:21 - Run 1 OTL by OldTimer - Version 3.2.35.0 Folder = C:\Users\Paweł\Desktop 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 7,98 Gb Total Physical Memory | 6,30 Gb Available Physical Memory | 78,96% Memory free 15,97 Gb Paging File | 14,25 Gb Available in Paging File | 89,28% Paging File free Paging file location(s): c:\pagefile.sys 0 0 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 292,87 Gb Total Space | 243,80 Gb Free Space | 83,25% Space Free | Partition Type: NTFS Drive D: | 292,97 Gb Total Space | 201,62 Gb Free Space | 68,82% Space Free | Partition Type: NTFS Drive E: | 345,57 Gb Total Space | 344,15 Gb Free Space | 99,59% Space Free | Partition Type: NTFS Computer Name: 1337MACHINE | User Name: Paweł | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: Off | File Age = 60 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html[@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software) .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .html [@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software) https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [Bridge] -- D:\Adobe Photoshop CS5\Adobe Bridge CS5.1\Bridge.exe "%L" (Adobe Systems, Inc.) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software) https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [Bridge] -- D:\Adobe Photoshop CS5\Adobe Bridge CS5.1\Bridge.exe "%L" (Adobe Systems, Inc.) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0446A460-E8E8-4387-9D1F-4BE9C9824F7B}" = Microsoft Antimalware Service PL-PL Language Pack "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64) "{138A4072-9E64-46BD-B5F9-DB2BB395391F}" = LWS VideoEffects "{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64 "{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition) "{350AA351-21FA-3270-8B7A-835434E766AD}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 "{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64 "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 "{774088D4-0777-4D78-904D-E435B318F5D2}" = Microsoft Antimalware "{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64 "{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended "{8E5DA9A6-7A9F-3A6F-BC5C-D6CBCA6A29C7}" = Microsoft .NET Framework 4 Extended PLK Language Pack "{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010 "{90140000-002A-0415-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Polish) 2010 "{90BF0360-A1DB-4599-A643-95AB90A52C1E}" = Microsoft_VC90_MFCLOC_x86_x64 "{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64 "{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64 "{A2422B02-0D41-43F5-B62E-C7A5E55FCBA8}" = Vegas Pro 9.0 (64-bit) "{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64 "{A49402DD-2781-3782-B0CF-52BDA349E3F3}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Sterownik 3D Vision 285.62 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 285.62 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 285.62 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA Sterownik kontrolera 3D Vision 285.62 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Oprogramowanie systemu PhysX 9.11.0621 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 1.5.20 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Sterownik dźwięku HD 1.2.24.0 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components "{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64 "{C9608300-11F5-11E0-A64B-0013D3D69929}" = MSVCRT Redists "{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 "{E77543EE-6FB5-4FF6-AB70-635392C8C756}" = Microsoft Security Client "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "{FCAB9F73-BF5D-4E3D-92E7-B0F35C568F20}" = Microsoft Security Client PL-PL Language Pack "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit "CCleaner" = CCleaner "C-Media CM108 Like Sound Driver" = SteelSeries USB Soundcard v1.20 "CPUID CPU-Z_is1" = CPUID CPU-Z 1.59 "ffdshow64_is1" = ffdshow x64 v1.1.4323 [2012-02-13] "MAXON10064A67" = NET Render Client 12.016 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "Microsoft .NET Framework 4 Extended PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended "Microsoft Security Client" = Microsoft Security Essentials "Sandboxie" = Sandboxie 3.64 (64-bit) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator "{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86 "{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam "{08610298-29AE-445B-B37D-EFBE05802967}" = LWS Pictures And Video "{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86 "{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86 "{15634701-BACE-4449-8B25-1567DA8C9FD3}" = CameraHelperMsi "{1651216E-E7AD-4250-92A1-FB8ED61391C9}" = LWS Help_main "{174A3B31-4C43-43DD-866F-73C9DB887B48}" = LWS Twitter "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform "{21DF0294-6B9D-4741-AB6F-B2ABFBD2387E}" = LWS YouTube Plugin "{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java™ 6 Update 29 "{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver "{3521BDBD-D453-5D9F-AA55-44B75D214629}" = Adobe Community Help "{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup "{3DECD372-76A1-4483-BF10-B547790A3261}" = ON_OFF Charge B11.0110.1 "{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = erLT "{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{532850FA-2747-4836-8057-74C4FE6D3733}" = Counter-Strike Source "{567C9882-843D-4188-A181-00E2CC3E1045}" = LG Burning Tools "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{5D4875F6-89D1-4E9C-B7B9-9164C9D20C9C}" = Kaspersky Security Scan "{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86 "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components "{6F76EC3C-34B1-436E-97FB-48C58D7BEDCD}" = LWS Gallery "{7032B400-11EC-11E0-A9BF-0013D3D69929}" = MSVCRT Redists "{71E66D3F-A009-44AB-8784-75E2819BA4BA}" = LWS Motion Detection "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update "{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime "{7F6D7FD9-648D-4DD9-BB6E-3990C675ECA4}" = NVIDIA PhysX "{81BF6353-3C5B-4E6E-A566-7E162A00BF72}_is1" = Wtyczka e-Deklaracje "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{83C8FA3C-F4EA-46C4-8392-D3CE353738D6}" = LWS Launcher "{8727531E-6C58-4852-A90B-39CF45E269A9}" = OpenOffice.org 3.2 "{87686C21-8A15-4b4d-A3F1-11141D9BE094}" = Battlefield Play4Free "{8937D274-C281-42E4-8CDB-A0B2DF979189}" = LWS Webcam Software "{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty® 4 - Modern Warfare™ 1.6 Patch "{8BCD7AE7-F713-4D50-BAB9-7839B9386870}" = ImageShack Uploader 2.2.0 "{90140000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2010 "{90140000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2010 "{90140000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2010 "{90140000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2010 "{90140000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2010 "{90140000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2010 "{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010 "{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010 "{90140000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2010 "{90140000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2010 "{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010 "{90140000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2010 "{90140000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2010 "{9158FF30-78D7-40EF-B83E-451AC5334640}" = Adobe Photoshop CS5.1 "{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86 "{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty® 4 - Modern Warfare™ 1.7 Patch "{943A8D28-80D6-41DC-AE94-81FEB42041BF}" = System Requirements Lab CYRI "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9ABFB92D-93DA-49EE-8ABF-F8195DE45CA9}" = Counter-Strike 1.6 "{9DAEA76B-E50F-4272-A595-0124E826553D}" = LWS WLM Plugin "{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5 "{A83279FD-CA4B-4206-9535-90974DE76654}" = Apple Application Support "{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5 "{AC76BA86-7AD7-1045-7B44-A92000000001}" = Adobe Reader 9.2 - Polish "{B6D38690-755E-4F40-A35A-23F8BC2B86AC}" = Microsoft_VC90_MFCLOC_x86 "{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86 "{D40EB009-0499-459c-A8AF-C9C110766215}" = Logitech Webcam Software "{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86 "{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty® 4 - Modern Warfare™ "{EED027B7-0DB6-404B-8F45-6DFEE34A0441}" = LWS Video Mask Maker "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel® Control Center "{FF167195-9EE4-46C0-8CD7-FBA3457E88AB}" = LWS Facebook "{FF3C203A-2F19-43A2-9C7C-EC1B5A0FC873}" = Pure "Adobe AIR" = Adobe AIR "Afterburner" = MSI Afterburner 2.1.0 "AIMP3" = AIMP3 "ALLPlayer_is1" = ALLPlayer V4.X "Aurora 11.0a2 (x86 pl)" = Aurora 11.0a2 (x86 pl) "Capella Professional_is1" = Capella Professional, wersja 5.3 "chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help "Cheat Engine 6.1_is1" = Cheat Engine 6.1 "DFX" = DFX "DFX for Winamp" = DFX for Winamp "Finale 2006" = Finale 2006 "Fraps" = Fraps (remove only) "Gadu-Gadu 10" = Gadu-Gadu 10 "Gimp" = Gimp 2.7.3 "HxD Hex Editor_is1" = HxD Hex Editor wersja 1.7.7.0 "IcoFX 2_is1" = IcoFX 2.1 "InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platforma Menedżera urządzeń "InstallShield_{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty® 4 - Modern Warfare™ 1.6 Patch "InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty® 4 - Modern Warfare™ 1.7 Patch "InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty® 4 - Modern Warfare™ "KLiteCodecPack_is1" = K-Lite Codec Pack 8.1.0 (Full) "Logitech Vid" = Logitech Vid HD "Magic Bullet Editors 2.0 Vegas" = Magic Bullet Editors 2.0 Vegas "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware wersja 1.60.1.1000 "Mozilla Firefox 8.0.1 (x86 pl)" = Mozilla Firefox 8.0.1 (x86 pl) "Multimedia mobilNET" = Multimedia mobilNET "MySSID_is1" = EXPERTool 7.20 "NewBlue 3D Explosions for Vegas" = NewBlue 3D Explosions for Vegas "NewBlue Art Blends 2.0 for Vegas" = NewBlue Art Blends 2.0 for Vegas "NewBlue Art Effects 2.0 for Vegas" = NewBlue Art Effects 2.0 for Vegas "NewBlue Film Effects for Vegas" = NewBlue Film Effects for Vegas "NVIDIA StereoUSB Driver" = NVIDIA 3D Vision Controller Driver "NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver "Office14.SingleImage" = Microsoft Office Home and Student 2010 "Opera 11.61.1250" = Opera 11.61 "OscarX7Mouse5Mode" = 5-Mode Oscar Editor "PhotoScape" = PhotoScape "PunkBusterSvc" = PunkBuster Services "RealAlt_is1" = Real Alternative 2.0.2 "Steam App 10" = Counter-Strike "Steam App 10180" = Call of Duty: Modern Warfare 2 "Steam App 10190" = Call of Duty: Modern Warfare 2 - Multiplayer "Steam App 113400" = APB Reloaded "Steam App 220" = Half-Life 2 "Steam App 240" = Counter-Strike: Source "Steam App 310" = Source Multiplayer Dedicated Server "Steam App 320" = Half-Life 2: Deathmatch "Steam App 42690" = Call of Duty: Modern Warfare 3 - Multiplayer "Steam App 440" = Team Fortress 2 "Świadectwa gim N" = Librus Świadectwa Gimnazjum "TeamViewer 7" = TeamViewer 7 "uTorrent" = µTorrent "Winamp" = Winamp "Xfire" = Xfire (remove only) [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-2076870112-2381720548-2427631625-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Dropbox" = Dropbox [color=#E56717]========== Last 10 Event Log Errors ==========[/color] Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt! < End of report > [/log]
Gość komentarz 5 marca 2012 komentarz 5 marca 2012 [b]1.[/b] Otwórz Notatnik i wklej w nim: [code]Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "Userinit"=- "Userinit"="C:\\WINDOWS\\system32\\userinit.exe," [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "Shell"=-[/code] [b]Z menu Notatnika > Plik > Zapisz jako > Ustaw rozszerzenie na Wszystkie pliki > Zapisz jako [color=red]FIX.REG[/color] > z prawokliku wybierz opcję Scal[/b] [b]2.[/b]Wykonaj restart i podaj czy Explorer startuje normalnie.
Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!
Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.