x-kom hosting

Nagły spadek prędkości łącza.

verold
utworzono
utworzono

Od około tygodnia na moim łączu 5mb/s max prędkość pobierania nie przekracza 60kb/s. Problem dotyczy tylko mojego laptopa w całej sieci domowej. System sprawdzony Malwarebytes Anti-Malware, Ad - Aware, Spybot - Search & Destroy, Avastem i Adware Cleanerem bez skutku.

OTL:
[log]
OTL logfile created on: 2012-06-09 23:36:13 - Run 1
OTL by OldTimer - Version 3.2.48.0 Folder = C:\Users\Verold\Desktop\logi
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19190)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,00 Gb Total Physical Memory | 1,21 Gb Available Physical Memory | 60,74% Memory free
4,23 Gb Paging File | 2,76 Gb Available in Paging File | 65,18% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 93,16 Gb Total Space | 0,91 Gb Free Space | 0,98% Space Free | Partition Type: NTFS
Drive E: | 91,69 Gb Total Space | 1,21 Gb Free Space | 1,32% Space Free | Partition Type: NTFS
Drive G: | 596,17 Gb Total Space | 4,66 Gb Free Space | 0,78% Space Free | Partition Type: NTFS

Computer Name: LAPTOP-WARSZAWA | User Name: Verold | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2012-06-09 23:23:57 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Verold\Desktop\logi\OTL.exe
PRC - [2012-04-04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012-03-07 01:15:17 | 004,241,512 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2012-03-07 01:15:14 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2012-03-07 01:15:13 | 000,134,920 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\afwServ.exe
PRC - [2012-01-19 19:08:34 | 003,477,312 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe
PRC - [2011-12-09 19:23:30 | 001,596,032 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Winamp\winamp.exe
PRC - [2011-11-09 23:07:44 | 000,291,840 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
PRC - [2010-02-02 01:54:52 | 007,418,368 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.bin
PRC - [2010-02-02 01:54:50 | 007,424,000 | ---- | M] (OpenOffice.org) -- C:\Program Files\OpenOffice.org 3\program\soffice.exe
PRC - [2009-12-24 09:55:22 | 001,732,960 | ---- | M] (Diskeeper Corporation) -- E:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
PRC - [2009-11-25 12:54:25 | 000,045,056 | ---- | M] () -- C:\Windows\System32\UTSCSI.EXE
PRC - [2009-09-12 01:34:12 | 001,488,128 | ---- | M] (O&O Software GmbH) -- C:\Program Files\OO Software\Defrag\oodag.exe
PRC - [2009-04-11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009-04-11 08:27:28 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe
PRC - [2008-12-03 12:47:34 | 001,205,760 | ---- | M] (Nokia) -- C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
PRC - [2008-11-11 09:38:06 | 000,620,544 | ---- | M] (Nokia.) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
PRC - [2008-09-15 04:00:48 | 000,431,472 | ---- | M] (Juniper Networks) -- C:\Program Files\Juniper Networks\Common Files\dsNcService.exe
PRC - [2008-07-07 09:34:59 | 000,167,936 | ---- | M] (PowerISO Computing, Inc.) -- C:\Program Files\PowerISO\PWRISOVM.EXE
PRC - [2008-06-03 08:02:34 | 000,119,808 | ---- | M] () -- C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
PRC - [2008-05-27 22:40:24 | 000,611,664 | ---- | M] (Lavasoft) -- E:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
PRC - [2007-05-23 15:57:12 | 000,509,496 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
PRC - [2007-05-22 16:32:00 | 000,538,744 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
PRC - [2007-05-17 20:12:30 | 000,114,688 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
PRC - [2007-03-29 10:39:00 | 000,427,576 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
PRC - [2007-03-29 10:39:00 | 000,411,192 | ---- | M] (TOSHIBA Corporation) -- C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
PRC - [2007-03-09 16:17:06 | 002,170,880 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtProc.exe
PRC - [2007-03-07 14:01:18 | 000,274,432 | ---- | M] (TOSHIBA CORPORATION.) -- c:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtHSP.exe
PRC - [2007-02-27 20:21:10 | 000,278,528 | ---- | M] (TOSHIBA CORPORATION.) -- c:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosA2dp.exe
PRC - [2007-02-27 19:57:56 | 000,278,528 | ---- | M] (TOSHIBA CORPORATION.) -- c:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosAVRC.exe
PRC - [2007-02-27 14:31:34 | 002,756,608 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtMng.exe
PRC - [2007-02-25 21:55:18 | 000,125,048 | ---- | M] (TOSHIBA CORPORATION) -- c:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe
PRC - [2007-01-30 17:47:48 | 000,307,200 | ---- | M] (TOSHIBA CORPORATION.) -- c:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosOBEX.exe
PRC - [2006-11-14 22:02:36 | 001,372,160 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
PRC - [2006-11-14 21:19:42 | 000,405,504 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe
PRC - [2006-11-14 20:33:10 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
PRC - [2006-11-06 17:14:44 | 000,034,352 | ---- | M] () -- C:\Program Files\TOSHIBA\Utilities\KeNotify.exe
PRC - [2006-11-02 11:45:59 | 000,215,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\WindowsMobile\wmdSync.exe
PRC - [2006-10-05 13:10:12 | 000,009,216 | ---- | M] (Agere Systems) -- C:\Windows\System32\agrsmsvc.exe
PRC - [2006-05-25 19:30:16 | 000,114,688 | ---- | M] (TOSHIBA Corporation) -- C:\Windows\System32\TODDSrv.exe
PRC - [2006-01-23 23:14:10 | 000,069,632 | ---- | M] (TOSHIBA CORPORATION.) -- c:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtHid.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2012-06-09 20:12:52 | 000,014,848 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\in_wm.lng
MOD - [2012-06-09 20:12:51 | 000,323,584 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\winamp.lng
MOD - [2012-06-09 20:12:51 | 000,161,792 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\vis_milk2.lng
MOD - [2012-06-09 20:12:51 | 000,087,552 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\vis_avs.lng
MOD - [2012-06-09 20:12:51 | 000,046,592 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\ml_pmp.lng
MOD - [2012-06-09 20:12:51 | 000,045,056 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\pmp_wifi.lng
MOD - [2012-06-09 20:12:51 | 000,036,864 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\ombrowser.lng
MOD - [2012-06-09 20:12:51 | 000,016,896 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\out_ds.lng
MOD - [2012-06-09 20:12:51 | 000,014,336 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\ml_wire.lng
MOD - [2012-06-09 20:12:51 | 000,013,312 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\ml_playlists.lng
MOD - [2012-06-09 20:12:51 | 000,012,800 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\ml_plg.lng
MOD - [2012-06-09 20:12:51 | 000,010,752 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\pmp_usb.lng
MOD - [2012-06-09 20:12:51 | 000,010,752 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\pmp_android.lng
MOD - [2012-06-09 20:12:51 | 000,008,192 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\ml_transcode.lng
MOD - [2012-06-09 20:12:51 | 000,007,680 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\vis_nsfs.lng
MOD - [2012-06-09 20:12:51 | 000,007,168 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\out_wave.lng
MOD - [2012-06-09 20:12:51 | 000,006,656 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\pmp_ipod.lng
MOD - [2012-06-09 20:12:51 | 000,006,144 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\tagz.lng
MOD - [2012-06-09 20:12:51 | 000,006,144 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\out_disk.lng
MOD - [2012-06-09 20:12:51 | 000,005,632 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\ml_rg.lng
MOD - [2012-06-09 20:12:51 | 000,004,608 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\pmp_activesync.lng
MOD - [2012-06-09 20:12:51 | 000,004,096 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\pmp_p4s.lng
MOD - [2012-06-09 20:12:51 | 000,004,096 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\ml_orb.lng
MOD - [2012-06-09 20:12:51 | 000,003,584 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\winampa.lng
MOD - [2012-06-09 20:12:51 | 000,003,584 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\pmp_njb.lng
MOD - [2012-06-09 20:12:51 | 000,003,072 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\playlist.lng
MOD - [2012-06-09 20:12:50 | 000,066,560 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\burnlib.lng
MOD - [2012-06-09 20:12:50 | 000,054,272 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\ml_local.lng
MOD - [2012-06-09 20:12:50 | 000,047,616 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\ml_disc.lng
MOD - [2012-06-09 20:12:50 | 000,040,960 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\gen_jumpex.lng
MOD - [2012-06-09 20:12:50 | 000,022,528 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\in_mp3.lng
MOD - [2012-06-09 20:12:50 | 000,022,016 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\gen_ff.lng
MOD - [2012-06-09 20:12:50 | 000,021,504 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\gen_ml.lng
MOD - [2012-06-09 20:12:50 | 000,020,992 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\in_midi.lng
MOD - [2012-06-09 20:12:50 | 000,018,432 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\in_mod.lng
MOD - [2012-06-09 20:12:50 | 000,014,336 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\ml_online.lng
MOD - [2012-06-09 20:12:50 | 000,013,312 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\in_cdda.lng
MOD - [2012-06-09 20:12:50 | 000,012,800 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\dsp_sps.lng
MOD - [2012-06-09 20:12:50 | 000,011,264 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\in_vorbis.lng
MOD - [2012-06-09 20:12:50 | 000,011,264 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\in_nsv.lng
MOD - [2012-06-09 20:12:50 | 000,011,264 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\gen_hotkeys.lng
MOD - [2012-06-09 20:12:50 | 000,011,264 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\auth.lng
MOD - [2012-06-09 20:12:50 | 000,009,216 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\ml_downloads.lng
MOD - [2012-06-09 20:12:50 | 000,008,704 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\ml_history.lng
MOD - [2012-06-09 20:12:50 | 000,008,192 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\ml_devices.lng
MOD - [2012-06-09 20:12:50 | 000,007,680 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\gen_tray.lng
MOD - [2012-06-09 20:12:50 | 000,007,168 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\ml_autotag.lng
MOD - [2012-06-09 20:12:50 | 000,007,168 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\in_dshow.lng
MOD - [2012-06-09 20:12:50 | 000,007,168 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\gen_orgler.lng
MOD - [2012-06-09 20:12:50 | 000,007,168 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\gen_crasher.lng
MOD - [2012-06-09 20:12:50 | 000,006,656 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\enc_fhgaac.lng
MOD - [2012-06-09 20:12:50 | 000,006,144 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\in_flac.lng
MOD - [2012-06-09 20:12:50 | 000,006,144 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\enc_wma.lng
MOD - [2012-06-09 20:12:50 | 000,005,632 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\in_wave.lng
MOD - [2012-06-09 20:12:50 | 000,005,632 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\enc_lame.lng
MOD - [2012-06-09 20:12:50 | 000,005,120 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\ml_impex.lng
MOD - [2012-06-09 20:12:50 | 000,005,120 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\ml_bookmarks.lng
MOD - [2012-06-09 20:12:50 | 000,005,120 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\in_avi.lng
MOD - [2012-06-09 20:12:50 | 000,004,608 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\in_mp4.lng
MOD - [2012-06-09 20:12:50 | 000,004,608 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\in_mkv.lng
MOD - [2012-06-09 20:12:50 | 000,004,096 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\enc_wav.lng
MOD - [2012-06-09 20:12:50 | 000,004,096 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\enc_flac.lng
MOD - [2012-06-09 20:12:50 | 000,003,584 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\ml_nowplaying.lng
MOD - [2012-06-09 20:12:50 | 000,003,584 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\ml_addons.lng
MOD - [2012-06-09 20:12:50 | 000,003,584 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\in_swf.lng
MOD - [2012-06-09 20:12:50 | 000,003,584 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\in_linein.lng
MOD - [2012-06-09 20:12:50 | 000,003,584 | ---- | M] () -- C:\Users\Verold\AppData\Local\Temp\WLZA872.tmp\in_flv.lng
MOD - [2012-02-24 01:16:42 | 000,090,112 | ---- | M] () -- C:\Program Files\Winamp\System\xml.w5s
MOD - [2012-02-24 01:16:42 | 000,083,968 | ---- | M] () -- C:\Program Files\Winamp\tataki.dll
MOD - [2012-02-24 01:16:42 | 000,047,616 | ---- | M] () -- C:\Program Files\Winamp\zlib.dll
MOD - [2012-02-24 01:16:42 | 000,035,328 | ---- | M] () -- C:\Program Files\Winamp\System\timer.w5s
MOD - [2012-02-24 01:16:42 | 000,021,504 | ---- | M] () -- C:\Program Files\Winamp\System\tagz.w5s
MOD - [2012-02-24 01:16:41 | 000,103,936 | ---- | M] () -- C:\Program Files\Winamp\System\png.w5s
MOD - [2012-02-24 01:16:41 | 000,084,480 | ---- | M] () -- C:\Program Files\Winamp\System\playlist.w5s
MOD - [2012-02-24 01:16:41 | 000,013,824 | ---- | M] () -- C:\Program Files\Winamp\System\primo.w5s
MOD - [2012-02-24 01:16:40 | 000,623,616 | ---- | M] () -- C:\Program Files\Winamp\System\jnetlib.w5s
MOD - [2012-02-24 01:16:40 | 000,154,624 | ---- | M] () -- C:\Program Files\Winamp\System\jpeg.w5s
MOD - [2012-02-24 01:16:40 | 000,044,544 | ---- | M] () -- C:\Program Files\Winamp\System\devices.w5s
MOD - [2012-02-24 01:16:40 | 000,019,456 | ---- | M] () -- C:\Program Files\Winamp\System\gif.w5s
MOD - [2012-02-24 01:16:40 | 000,019,456 | ---- | M] () -- C:\Program Files\Winamp\System\bmp.w5s
MOD - [2012-02-24 01:16:40 | 000,016,896 | ---- | M] () -- C:\Program Files\Winamp\System\dlmgr.w5s
MOD - [2012-02-24 01:16:40 | 000,016,384 | ---- | M] () -- C:\Program Files\Winamp\System\gracenote.w5s
MOD - [2012-02-24 01:16:40 | 000,014,336 | ---- | M] () -- C:\Program Files\Winamp\System\filereader.w5s
MOD - [2012-02-24 01:16:39 | 000,922,624 | ---- | M] () -- C:\Program Files\Winamp\System\aacdec.w5s
MOD - [2012-02-24 01:16:39 | 000,174,080 | ---- | M] () -- C:\Program Files\Winamp\System\auth.w5s
MOD - [2012-02-24 01:16:39 | 000,023,040 | ---- | M] () -- C:\Program Files\Winamp\System\albumart.w5s
MOD - [2012-02-24 01:16:37 | 000,170,496 | ---- | M] () -- C:\Program Files\Winamp\Plugins\pmp_ipod.dll
MOD - [2012-02-24 01:16:37 | 000,118,272 | ---- | M] () -- C:\Program Files\Winamp\Plugins\pmp_p4s.dll
MOD - [2012-02-24 01:16:37 | 000,113,664 | ---- | M] () -- C:\Program Files\Winamp\Plugins\pmp_wifi.dll
MOD - [2012-02-24 01:16:37 | 000,060,928 | ---- | M] () -- C:\Program Files\Winamp\Plugins\pmp_android.dll
MOD - [2012-02-24 01:16:37 | 000,053,760 | ---- | M] () -- C:\Program Files\Winamp\Plugins\pmp_usb.dll
MOD - [2012-02-24 01:16:37 | 000,052,224 | ---- | M] () -- C:\Program Files\Winamp\Plugins\out_ds.dll
MOD - [2012-02-24 01:16:37 | 000,029,184 | ---- | M] () -- C:\Program Files\Winamp\Plugins\pmp_activesync.dll
MOD - [2012-02-24 01:16:37 | 000,022,528 | ---- | M] () -- C:\Program Files\Winamp\Plugins\out_disk.dll
MOD - [2012-02-24 01:16:37 | 000,020,480 | ---- | M] () -- C:\Program Files\Winamp\Plugins\pmp_njb.dll
MOD - [2012-02-24 01:16:37 | 000,018,432 | ---- | M] () -- C:\Program Files\Winamp\Plugins\out_wave.dll
MOD - [2012-02-24 01:16:36 | 000,241,152 | ---- | M] () -- C:\Program Files\Winamp\Plugins\ml_pmp.dll
MOD - [2012-02-24 01:16:36 | 000,033,792 | ---- | M] () -- C:\Program Files\Winamp\Plugins\ml_rg.dll
MOD - [2012-02-24 01:16:36 | 000,032,256 | ---- | M] () -- C:\Program Files\Winamp\Plugins\ml_transcode.dll
MOD - [2012-02-24 01:16:35 | 000,294,400 | ---- | M] () -- C:\Program Files\Winamp\Plugins\ml_local.dll
MOD - [2012-02-24 01:16:35 | 000,124,928 | ---- | M] () -- C:\Program Files\Winamp\Plugins\ml_online.dll
MOD - [2012-02-24 01:16:35 | 000,083,456 | ---- | M] () -- C:\Program Files\Winamp\Plugins\ml_plg.dll
MOD - [2012-02-24 01:16:35 | 000,082,944 | ---- | M] () -- C:\Program Files\Winamp\Plugins\ml_playlists.dll
MOD - [2012-02-24 01:16:35 | 000,057,344 | ---- | M] () -- C:\Program Files\Winamp\Plugins\ml_impex.dll
MOD - [2012-02-24 01:16:34 | 000,313,344 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_wm.dll
MOD - [2012-02-24 01:16:34 | 000,249,856 | ---- | M] () -- C:\Program Files\Winamp\Plugins\ml_devices.dll
MOD - [2012-02-24 01:16:34 | 000,200,192 | ---- | M] () -- C:\Program Files\Winamp\Plugins\ml_disc.dll
MOD - [2012-02-24 01:16:34 | 000,052,224 | ---- | M] () -- C:\Program Files\Winamp\Plugins\ml_history.dll
MOD - [2012-02-24 01:16:34 | 000,028,672 | ---- | M] () -- C:\Program Files\Winamp\Plugins\ml_autotag.dll
MOD - [2012-02-24 01:16:34 | 000,028,160 | ---- | M] () -- C:\Program Files\Winamp\Plugins\ml_bookmarks.dll
MOD - [2012-02-24 01:16:34 | 000,016,896 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_wave.dll
MOD - [2012-02-24 01:16:33 | 000,290,304 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_mp3.dll
MOD - [2012-02-24 01:16:33 | 000,253,440 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_vorbis.dll
MOD - [2012-02-24 01:16:33 | 000,165,376 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_mod.dll
MOD - [2012-02-24 01:16:33 | 000,109,568 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_midi.dll
MOD - [2012-02-24 01:16:33 | 000,075,264 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_nsv.dll
MOD - [2012-02-24 01:16:33 | 000,052,736 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_mp4.dll
MOD - [2012-02-24 01:16:33 | 000,049,152 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_mkv.dll
MOD - [2012-02-24 01:16:33 | 000,023,552 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_swf.dll
MOD - [2012-02-24 01:16:32 | 000,102,400 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_cdda.dll
MOD - [2012-02-24 01:16:32 | 000,072,192 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_dshow.dll
MOD - [2012-02-24 01:16:32 | 000,068,608 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_avi.dll
MOD - [2012-02-24 01:16:32 | 000,061,440 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_flac.dll
MOD - [2012-02-24 01:16:32 | 000,043,008 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_flv.dll
MOD - [2012-02-24 01:16:32 | 000,025,600 | ---- | M] () -- C:\Program Files\Winamp\Plugins\gen_tray.dll
MOD - [2012-02-24 01:16:32 | 000,007,168 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_linein.dll
MOD - [2012-02-24 01:16:31 | 001,737,728 | ---- | M] () -- C:\Program Files\Winamp\Plugins\gen_ff.dll
MOD - [2012-02-24 01:16:31 | 000,318,464 | ---- | M] () -- C:\Program Files\Winamp\Plugins\gen_ml.dll
MOD - [2012-02-24 01:16:31 | 000,185,344 | ---- | M] () -- C:\Program Files\Winamp\Plugins\gen_jumpex.dll
MOD - [2012-02-24 01:16:31 | 000,057,344 | ---- | M] () -- C:\Program Files\Winamp\Plugins\gen_orgler.dll
MOD - [2012-02-24 01:16:31 | 000,027,648 | ---- | M] () -- C:\Program Files\Winamp\Plugins\gen_hotkeys.dll
MOD - [2012-02-24 01:16:30 | 000,053,248 | ---- | M] () -- C:\Program Files\Winamp\Plugins\Gen_AlarmClock.dll
MOD - [2012-02-24 01:16:29 | 000,340,992 | ---- | M] () -- C:\Program Files\Winamp\Plugins\freeform\wacs\freetype\freetype.wac
MOD - [2012-02-24 01:16:27 | 000,417,280 | ---- | M] () -- C:\Program Files\Winamp\nsutil.dll
MOD - [2012-02-24 01:16:27 | 000,253,440 | ---- | M] () -- C:\Program Files\Winamp\libsndfile.dll
MOD - [2012-02-24 01:16:27 | 000,180,224 | ---- | M] () -- C:\Program Files\Winamp\libmp4v2.dll
MOD - [2012-02-24 01:16:27 | 000,078,848 | ---- | M] () -- C:\Program Files\Winamp\nde.dll
MOD - [2012-02-18 17:19:31 | 000,240,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\9a22784f4af63232128cbaa639e1852b\WindowsFormsIntegration.ni.dll
MOD - [2012-02-18 17:19:20 | 011,820,032 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\2598077ccea480c6120d3a1ad4455be0\System.Web.ni.dll
MOD - [2012-02-18 17:19:08 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\5c3bfd69e0c268baff0d169e11a6a784\System.Runtime.Remoting.ni.dll
MOD - [2012-02-18 17:18:46 | 000,519,168 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\TCrdMain\49c69863d3fa6b95de2a4dd141e22644\TCrdMain.ni.exe
MOD - [2012-02-18 17:17:51 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\7fd6c62196829d1e2dce5a253145d51a\System.Configuration.ni.dll
MOD - [2012-02-18 17:15:21 | 005,450,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d9f0f1dc8cbdb81f1ba122d77a6ab710\System.Xml.ni.dll
MOD - [2012-02-18 17:14:30 | 012,430,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\65450889f3742aada2a6c0cf8e6173e3\System.Windows.Forms.ni.dll
MOD - [2012-02-18 17:14:15 | 001,587,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\137696d0416b65dbc1561152971488b4\System.Drawing.ni.dll
MOD - [2012-02-18 17:13:40 | 002,295,296 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\bc01d91f95947c7f25f3ae4e16db2cb5\System.Core.ni.dll
MOD - [2012-02-18 17:13:33 | 000,224,768 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\b864ec9d102833ef1fa33daa1e16466e\PresentationFramework.Classic.ni.dll
MOD - [2012-02-18 17:13:30 | 014,328,832 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\56df3488472318c59d0a08ed10a065d3\PresentationFramework.ni.dll
MOD - [2012-02-18 17:13:02 | 012,216,832 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\3951e0a359c004cd6ba268ff78ac62aa\PresentationCore.ni.dll
MOD - [2012-02-18 17:12:32 | 003,325,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\1e258a951222c818540b33880ca45f2e\WindowsBase.ni.dll
MOD - [2012-02-18 17:11:55 | 007,953,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\c50133cb67d7c013fa31e1ffb942060b\System.ni.dll
MOD - [2011-11-09 23:10:38 | 000,369,152 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
MOD - [2011-11-09 23:07:50 | 000,095,232 | ---- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
MOD - [2011-10-14 19:21:21 | 000,060,928 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\5aab9bc687029a908fc01473f8e5f77b\UIAutomationProvider.ni.dll
MOD - [2011-10-14 19:15:36 | 011,490,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\b6632a8b2f276a8e31f5b0f6b2006cd1\mscorlib.ni.dll
MOD - [2010-03-24 15:05:42 | 000,970,752 | ---- | M] () -- C:\Program Files\OpenOffice.org 3\program\libxml2.dll
MOD - [2009-03-31 20:05:12 | 000,311,296 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll
MOD - [2009-02-04 07:00:36 | 000,159,744 | ---- | M] () -- C:\Windows\System32\atitmmxx.dll
MOD - [2008-08-12 10:16:16 | 002,023,424 | ---- | M] () -- C:\Program Files\Nokia\Nokia PC Suite 7\QtCore4.dll
MOD - [2008-07-29 13:47:56 | 000,016,384 | ---- | M] () -- C:\Program Files\Nokia\Nokia PC Suite 7\imageformats\qsvg4.dll
MOD - [2008-07-29 13:47:38 | 000,135,168 | ---- | M] () -- C:\Program Files\Nokia\Nokia PC Suite 7\imageformats\qjpeg4.dll
MOD - [2008-07-29 13:11:18 | 000,253,952 | ---- | M] () -- C:\Program Files\Nokia\Nokia PC Suite 7\QtSvg4.dll
MOD - [2008-07-29 13:01:12 | 007,331,840 | ---- | M] () -- C:\Program Files\Nokia\Nokia PC Suite 7\QtGUI4.dll
MOD - [2008-07-29 12:51:22 | 000,806,912 | ---- | M] () -- C:\Program Files\Nokia\Nokia PC Suite 7\QtNetwork4.dll
MOD - [2008-07-29 12:50:26 | 000,364,544 | ---- | M] () -- C:\Program Files\Nokia\Nokia PC Suite 7\QtXml4.dll
MOD - [2007-09-20 18:34:58 | 000,129,024 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2007-05-31 16:39:08 | 000,958,464 | ---- | M] () -- C:\Program Files\TOSHIBA\FlashCards\pl\TCrdMain.resources.dll
MOD - [2007-04-23 10:38:08 | 000,009,216 | ---- | M] () -- C:\Program Files\TOSHIBA\ConfigFree\NotifyCFF.dll
MOD - [2006-12-01 18:55:42 | 000,009,216 | ---- | M] () -- C:\Program Files\TOSHIBA\TBS\NotifyTBS.dll
MOD - [2006-11-09 18:27:06 | 000,090,112 | ---- | M] () -- C:\Program Files\TOSHIBA\FlashCards\TWarnMsg\TWarnMsg.dll
MOD - [2006-11-08 19:08:30 | 000,009,216 | ---- | M] () -- C:\Program Files\TOSHIBA\PCDiag\NotifyPCD.dll
MOD - [2006-11-06 17:14:44 | 000,034,352 | ---- | M] () -- C:\Program Files\TOSHIBA\Utilities\KeNotify.exe
MOD - [2006-10-10 11:44:16 | 000,009,728 | ---- | M] () -- C:\Program Files\TOSHIBA\TOSHIBA Assist\NotifyX.dll
MOD - [2006-10-07 12:57:04 | 000,053,248 | ---- | M] () -- C:\Program Files\TOSHIBA\TOSHIBA Disc Creator\NotifyTDC.dll
MOD - [2005-09-05 07:27:28 | 000,077,824 | ---- | M] () -- C:\Program Files\Winamp\Plugins\in_mpc.dll
MOD - [2005-07-22 21:30:20 | 000,065,536 | ---- | M] () -- C:\Windows\System32\TosCommAPI.dll
MOD - [2004-10-14 10:18:24 | 000,040,960 | ---- | M] () -- C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtAfh.dll


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - File not found [On_Demand | Stopped] -- C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe -- (NMIndexingService)
SRV - File not found [Auto | Stopped] -- C:\Program Files\iolo\common\lib\ioloServiceManager.exe -- (ioloSystemService)
SRV - File not found [Auto | Stopped] -- C:\Program Files\iolo\common\lib\ioloServiceManager.exe -- (ioloFileInfoList)
SRV - [2012-05-15 21:55:56 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012-04-04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012-03-07 01:15:14 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2012-03-07 01:15:13 | 000,134,920 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\afwServ.exe -- (avast! Firewall)
SRV - [2011-11-09 23:07:44 | 000,291,840 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
SRV - [2009-12-24 09:55:22 | 001,732,960 | ---- | M] (Diskeeper Corporation) [Auto | Running] -- E:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe -- (Diskeeper)
SRV - [2009-11-25 12:54:25 | 000,045,056 | ---- | M] () [Auto | Running] -- C:\Windows\System32\UTSCSI.EXE -- (UTSCSI)
SRV - [2009-09-12 01:34:12 | 001,488,128 | ---- | M] (O&O Software GmbH) [Auto | Running] -- C:\Program Files\OO Software\Defrag\oodag.exe -- (O&O Defrag)
SRV - [2008-12-11 15:53:38 | 000,098,488 | ---- | M] (SiSoftware) [On_Demand | Stopped] -- C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP2\RpcAgentSrv.exe -- (SandraAgentSrv)
SRV - [2008-11-11 09:38:06 | 000,620,544 | ---- | M] (Nokia.) [On_Demand | Running] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2008-09-15 04:00:48 | 000,431,472 | ---- | M] (Juniper Networks) [Auto | Running] -- C:\Program Files\Juniper Networks\Common Files\dsNcService.exe -- (dsNcService)
SRV - [2008-05-27 22:40:24 | 000,611,664 | ---- | M] (Lavasoft) [Auto | Running] -- E:\Program Files\Lavasoft\Ad-Aware\aawservice.exe -- (aawservice)
SRV - [2008-01-19 09:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008-01-19 09:36:49 | 000,365,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2008-01-19 09:36:15 | 000,167,936 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
SRV - [2007-05-17 20:12:30 | 000,114,688 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe -- (TNaviSrv)
SRV - [2007-03-29 10:39:00 | 000,427,576 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe -- (TosCoSrv)
SRV - [2007-02-25 21:55:18 | 000,125,048 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- c:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
SRV - [2007-02-05 11:11:18 | 000,075,320 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe -- (SSScsiSV)
SRV - [2007-02-05 11:11:16 | 000,112,184 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe -- (SonicStage Back-End Service)
SRV - [2006-12-14 03:21:20 | 000,045,056 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe -- (MSCSPTISRV)
SRV - [2006-12-14 03:02:08 | 000,069,632 | ---- | M] (Sony Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe -- (SPTISRV)
SRV - [2006-12-14 02:46:16 | 000,057,344 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe -- (PACSPTISVR)
SRV - [2006-11-14 20:33:10 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe -- (CFSvcs)
SRV - [2006-10-05 13:10:12 | 000,009,216 | ---- | M] (Agere Systems) [Auto | Running] -- C:\Windows\System32\agrsmsvc.exe -- (AgereModemAudio)
SRV - [2006-08-23 16:39:48 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)
SRV - [2006-05-25 19:30:16 | 000,114,688 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\System32\TODDSrv.exe -- (TODDSrv)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\TpChoice.sys -- (TpChoice)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Verold\AppData\Local\Temp\AMDPCI.sys -- (AMDPCI)
DRV - File not found [Kernel | Boot | Stopped] -- system32\DRIVERS\amdide.sys -- (amdide)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (a1dp0iel)
DRV - [2012-04-04 15:56:40 | 000,022,344 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2012-03-07 01:04:25 | 000,112,984 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswFW.sys -- (aswFW)
DRV - [2012-03-07 01:03:51 | 000,612,184 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2012-03-07 01:03:38 | 000,337,880 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2012-03-07 01:03:23 | 000,196,440 | ---- | M] (AVAST Software) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswNdis2.sys -- (aswNdis2)
DRV - [2012-03-07 01:02:43 | 000,024,408 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswKbd.sys -- (aswKbd)
DRV - [2012-03-07 01:02:00 | 000,035,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2012-03-07 01:01:53 | 000,053,848 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2012-03-07 01:01:48 | 000,057,688 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2012-03-07 01:01:30 | 000,020,696 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2012-03-07 00:44:51 | 000,012,112 | ---- | M] (ALWIL Software) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswNdis.sys -- (aswNdis)
DRV - [2012-01-30 01:43:06 | 000,473,656 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2011-10-17 19:40:34 | 000,082,960 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AtihdLH3.sys -- (AtiHDAudioService)
DRV - [2010-04-11 18:27:31 | 000,281,760 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt)
DRV - [2010-04-11 18:27:30 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2010-02-18 10:18:22 | 000,037,944 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\amdiox86.sys -- (amdiox86)
DRV - [2010-01-27 04:09:02 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\npf.sys -- (npf)
DRV - [2009-12-10 15:48:40 | 000,045,616 | ---- | M] (Diskeeper Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\DKRtWrt.sys -- (DKRtWrt)
DRV - [2009-02-04 09:29:03 | 004,303,360 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2008-12-09 10:59:30 | 000,020,392 | ---- | M] (EldoS Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\elrawdsk.sys -- (ElRawDisk)
DRV - [2008-11-25 23:57:04 | 000,022,432 | ---- | M] (SiSoftware) [Kernel | On_Demand | Stopped] -- C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP2\WNt500x86\sandra.sys -- (SANDRA)
DRV - [2008-09-15 07:56:34 | 000,008,064 | ---- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2008-09-15 07:56:24 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2008-09-15 07:56:24 | 000,017,664 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2008-09-15 07:56:24 | 000,008,064 | ---- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2008-09-15 03:43:28 | 000,023,552 | ---- | M] (Juniper Networks) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dsNcAdpt.sys -- (dsNcAdpt)
DRV - [2008-08-26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008-07-29 06:05:04 | 000,919,552 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2008-07-07 09:40:49 | 000,056,108 | ---- | M] (PowerISO Computing, Inc.) [Kernel | System | Running] -- C:\Windows\System32\drivers\scdemu.sys -- (SCDEmu)
DRV - [2008-04-28 15:26:42 | 000,014,352 | ---- | M] (ATI Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\AtiPcie.sys -- (AtiPcie) ATI PCI Express (3GIO)
DRV - [2008-02-20 13:47:34 | 000,027,936 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tbhsd.sys -- (tbhsd)
DRV - [2008-01-08 14:23:48 | 000,017,408 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vburner.sys -- (vburner)
DRV - [2007-11-09 05:00:52 | 000,023,640 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\TVALZ_O.SYS -- (TVALZ)
DRV - [2007-06-29 14:47:34 | 000,034,304 | ---- | M] (AMD, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AmdLLD.sys -- (AmdLLD)
DRV - [2007-04-27 20:13:58 | 000,285,184 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\tos_sps32.sys -- (tos_sps32)
DRV - [2007-03-12 21:47:54 | 000,011,264 | ---- | M] (Chicony Electronics Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\UVCFTR_S.SYS -- (UVCFTR)
DRV - [2007-03-01 16:53:12 | 000,073,728 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Tosrfhid.sys -- (Tosrfhid)
DRV - [2007-02-28 22:27:06 | 000,041,344 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfusb.sys -- (Tosrfusb)
DRV - [2007-02-22 19:56:24 | 000,113,920 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfbd.sys -- (tosrfbd)
DRV - [2007-02-07 17:50:32 | 000,118,552 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\adiusbaw.sys -- (adiusbaw)
DRV - [2007-02-07 17:50:14 | 000,056,088 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\adildr.sys -- (ELOADER) General Purpose USB Driver (adildr.sys)
DRV - [2007-01-24 14:44:06 | 000,290,304 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tifm21.sys -- (tifm21)
DRV - [2007-01-22 10:43:26 | 000,053,376 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TosRfSnd.sys -- (TosRfSnd)
DRV - [2007-01-18 16:47:18 | 000,211,072 | ---- | M] (TOSHIBA CORPORATION) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\KR10N.sys -- (KR10N)
DRV - [2007-01-18 16:40:56 | 000,219,392 | ---- | M] (TOSHIBA CORPORATION) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\KR10I.sys -- (KR10I)
DRV - [2007-01-04 14:48:04 | 000,104,344 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\e4usbaw.sys -- (e4usbaw)
DRV - [2007-01-04 14:47:48 | 000,069,656 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\e4ldr.sys -- (E4LOADER) General Purpose USB Driver (e4ldr.sys)
DRV - [2006-12-25 18:35:08 | 000,067,072 | ---- | M] (Realtek Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2006-11-28 16:11:00 | 001,161,888 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2006-11-20 17:55:16 | 000,036,480 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfbnp.sys -- (tosrfbnp)
DRV - [2006-10-23 16:32:20 | 000,009,216 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfec.sys -- (tosrfec)
DRV - [2006-10-18 12:50:04 | 000,016,128 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tdcmdpst.sys -- (tdcmdpst)
DRV - [2006-10-10 19:33:00 | 000,041,600 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosporte.sys -- (tosporte)
DRV - [2006-07-28 16:25:26 | 000,019,456 | ---- | M] (COMPAL ELECTRONIC INC.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\LPCFilter.sys -- (LPCFilter)
DRV - [2005-08-01 16:45:00 | 000,064,896 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\tosrfcom.sys -- (Tosrfcom)
DRV - [2005-01-06 13:42:00 | 000,018,612 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tosrfnds.sys -- (tosrfnds)
DRV - [2004-06-10 01:42:38 | 000,015,429 | ---- | M] ( ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Sacm2A.sys -- (USBCM)
DRV - [2002-07-17 16:20:32 | 000,084,832 | ---- | M] (Adaptec) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ASPI32.SYS -- (ASPI)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\..\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuze.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes,DefaultScope = {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = [url="http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}"]http://search.live.c...ferrer:source?}[/url]

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = [url="http://www.gazeta.pl/0,0.html?p=128"]http://www.gazeta.pl/0,0.html?p=128[/url]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuze.dll (Conduit Ltd.)
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = [url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"]http://www.bing.com/...Box&FORM=IE8SRC[/url]
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = [url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7BJYS"]http://www.google.co...ie7&rlz=1I7BJYS[/url]
IE - HKCU\..\SearchScopes\{B5B15B11-E3DF-41a6-AC32-2452FB61C94F}: "URL" = [url="http://www.ask.com/web?&o=13795&l=dis&q={searchTerms}"]http://www.ask.com/w...q={searchTerms}[/url]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.gazeta.pl/0,0.html?p=128"
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Content Upload Plugin,version=1.0.0: C:\Program Files\DivX\DivX Content Uploader\npUpload.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@idsoftware.com/QuakeLive: C:\ProgramData\id Software\QuakeLive\npquakezero.dll (id Software Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@rayv.com/rayvplugin: C:\Program Files\RayV\RayV\plugins\nprayvplugin.dll (RayV)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@veetle.com/vbp;version=0.9.16: C:\Program Files\Veetle\VLCBroadcast\npvbp.dll File not found
FF - HKCU\Software\MozillaPlugins\@octoshape.com/Octoshape Streaming Services,version=1.0: C:\Users\Verold\AppData\Local\Octoshape\Octoshape Streaming Services\octoprogram-L03-N00-U00-C00_0804080_000\npoctoshape.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Verold\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Verold\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2009-04-18 21:27:54 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0329E7D6-6F54-462D-93F6-F5C3118BADF2}: C:\Program Files\SpeedBit Video Downloader\SPFireFox [2010-02-15 22:50:38 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\Alwil Software\Avast5\WebRep\FF [2012-06-09 01:23:14 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-05-19 15:09:44 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-05-19 15:09:44 | 000,000,000 | ---D | M]

[2010-01-05 22:41:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Verold\AppData\Roaming\mozilla\Extensions
[2012-05-14 23:39:14 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Verold\AppData\Roaming\mozilla\Firefox\Profiles\ywmsv06d.default\extensions
[2011-01-25 18:44:41 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Users\Verold\AppData\Roaming\mozilla\Firefox\Profiles\ywmsv06d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2010-04-27 15:34:15 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Verold\AppData\Roaming\mozilla\Firefox\Profiles\ywmsv06d.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010-10-23 19:19:56 | 000,000,000 | ---D | M] (vShare Plugin) -- C:\Users\Verold\AppData\Roaming\mozilla\Firefox\Profiles\ywmsv06d.default\extensions\vshare@toolbar
[2011-01-29 05:31:09 | 000,001,196 | ---- | M] () -- C:\Users\Verold\AppData\Roaming\Mozilla\Firefox\Profiles\ywmsv06d.default\searchplugins\winamp-search.xml
[2012-04-04 21:00:37 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2009-08-21 18:06:27 | 000,000,000 | ---D | M] (VideoGet FireFox extension) -- C:\Program Files\Mozilla Firefox\extensions\{85E85FF9-E50C-42DE-8A3D-61485FD6C8DB}
[2010-02-14 23:29:48 | 000,000,000 | ---D | M] (flashget3 Extension) -- C:\Program Files\Mozilla Firefox\extensions\{DB9127A2-3381-41ec-82B3-1B6ED4C6F29A}
[2012-05-15 21:55:55 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012-03-21 00:27:57 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012-01-23 12:50:38 | 000,170,080 | ---- | M] (Tracker Software Products (Canada) Ltd.) -- C:\Program Files\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll
[2011-12-09 19:23:32 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
[2012-04-04 21:00:17 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2012-04-04 21:00:17 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2012-04-04 21:00:17 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2012-04-04 21:00:17 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2012-04-04 21:00:16 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2012-04-04 21:00:16 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml

[color=#E56717]========== Chrome ==========[/color]


O1 HOSTS File: ([2012-02-22 02:10:23 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {1F364306-AA45-47B5-9F9D-39A8B94E7EF1} - No CLSID value found.
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (SBCONVERT Class) - {3017FB3E-9A77-4396-88C5-0EC9548FB42F} - C:\Program Files\SpeedBit Video Downloader\Toolbar\tbcore3.dll ()
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
O2 - BHO: (no name) - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - No CLSID value found.
O2 - BHO: (Vuze Remote Toolbar) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuze.dll (Conduit Ltd.)
O2 - BHO: (GrabberObj Class) - {FF7C3CF0-4B15-11D1-ABED-709549C10000} - C:\Program Files\SpeedBit Video Downloader\Toolbar\Grabber.dll (Speedbit Ltd.)
O3 - HKLM\..\Toolbar: (SpeedBit Video Downloader) - {0329E7D6-6F54-462D-93F6-F5C3118BADF2} - C:\Program Files\SpeedBit Video Downloader\Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (Vuze Remote Toolbar) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuze.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (SpeedBit Video Downloader) - {0329E7D6-6F54-462D-93F6-F5C3118BADF2} - C:\Program Files\SpeedBit Video Downloader\Toolbar\tbcore3.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Vuze Remote Toolbar) - {BA14329E-9550-4989-B3F2-9732E92D17CC} - C:\Program Files\Vuze_Remote\tbVuze.dll (Conduit Ltd.)
O4 - HKLM..\Run: [00TCrdMain] C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [adiras] C:\Windows\adiras.exe ()
O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avast] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Camera Assistant Software] C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe (Chicony)
O4 - HKLM..\Run: [HSON] C:\Program Files\TOSHIBA\TBS\HSON.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [KeNotify] C:\Program Files\TOSHIBA\Utilities\KeNotify.exe ()
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NDSTray.exe] NDSTray.exe File not found
O4 - HKLM..\Run: [OODefragTray] C:\Program Files\OO Software\Defrag\oodtray.exe (O&O Software GmbH)
O4 - HKLM..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.)
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime Alternative\QTTask.exe (Apple Inc.)
O4 - HKLM..\Run: [SmoothView] C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SVPWUTIL] C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe (TOSHIBA)
O4 - HKLM..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe (TOSHIBA)
O4 - HKLM..\Run: [Toshiba Registration] C:\Program Files\TOSHIBA\Registration\ToshibaRegistration.exe (Toshiba)
O4 - HKLM..\Run: [TPwrMain] C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [PC Suite Tray] C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia)
O4 - Startup: C:\Users\Verold\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 227
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Download all by FlashGet3 - C:\Users\Verold\AppData\Roaming\FlashGetBHO\GetAllUrl.htm File not found
O8 - Extra context menu item: Download by FlashGet3 - C:\Users\Verold\AppData\Roaming\FlashGetBHO\GetUrl.htm File not found
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKCU\..Trusted Domains: kuaiche.com ([software] http in Trusted sites)
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} [url="http://www.mks.com.pl/skaner/SkanerOnline.cab"]http://www.mks.com.p...kanerOnline.cab[/url] (MksSkanerOnline Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} [url="http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab"]http://java.sun.com/...indows-i586.cab[/url] (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} [url="http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab"]http://java.sun.com/...indows-i586.cab[/url] (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} [url="http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab"]http://java.sun.com/...indows-i586.cab[/url] (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [url="http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab"]http://java.sun.com/...indows-i586.cab[/url] (Java Plug-in 1.6.0_31)
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} [url="https://ssl.wum.edu.pl/dana-cached/sc/JuniperSetupClient.cab"]https://ssl.wum.edu....SetupClient.cab[/url] (JuniperSetupClientControl Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5613A390-9D40-42C4-BFA2-7C8131254ED8}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{623B4FE2-D27F-4402-BB79-1DC5D6E9BE92}: DhcpNameServer = 62.179.1.62 62.179.1.63
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Verold\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\Verold\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2012-06-09 23:25:00 | 000,000,000 | ---D | C] -- C:\rsit
[2012-06-09 01:28:19 | 000,112,984 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswFW.sys
[2012-06-09 01:23:35 | 000,196,440 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswNdis2.sys
[2012-06-09 01:23:32 | 000,024,408 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswKbd.sys
[2012-06-09 01:23:05 | 000,012,112 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswNdis.sys
[2012-06-09 00:39:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Internet Security
[2012-06-09 00:35:47 | 000,000,000 | ---D | C] -- C:\Program Files\SkanerOnline
[2012-06-08 01:05:54 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2012-06-08 01:05:54 | 000,000,000 | ---D | C] -- C:\Users\Verold\AppData\Local\temp
[2012-06-08 01:03:54 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2012-06-07 23:47:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
[2012-06-07 23:47:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2012-06-07 23:47:07 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2012-05-29 20:11:10 | 000,258,048 | ---- | C] (Peter Wimmer, Gabest) -- C:\Windows\System32\GplMpgDec.ax
[2012-05-29 20:11:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Allok 3GP PSP MP4 iPod Video Converter
[2012-05-29 20:11:05 | 000,000,000 | ---D | C] -- C:\Program Files\Allok 3GP PSP MP4 iPod Video Converter
[2012-05-29 20:04:27 | 000,000,000 | ---D | C] -- C:\Users\Verold\Desktop\aviproxy
[2012-05-29 20:01:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SubEdit-Player
[2012-05-29 20:01:02 | 000,000,000 | ---D | C] -- C:\Program Files\SubEdit-Player
[2012-05-19 15:09:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2012-05-15 21:56:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2012-05-15 21:56:15 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2012-05-14 23:36:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\id Software
[2012-05-14 23:36:37 | 000,000,000 | ---D | C] -- C:\ProgramData\id Software
[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Users\Verold\*.tmp files -> C:\Users\Verold\*.tmp -> ]

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2012-06-09 23:40:00 | 000,001,036 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012-06-09 23:04:00 | 000,001,062 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3458874613-3300990240-4131716576-1000UA.job
[2012-06-09 22:40:01 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012-06-09 22:28:14 | 000,003,696 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012-06-09 22:28:14 | 000,003,696 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012-06-09 18:04:04 | 000,001,010 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3458874613-3300990240-4131716576-1000Core.job
[2012-06-09 16:28:34 | 000,065,536 | ---- | M] () -- C:\Windows\System32\Ikeext.etl
[2012-06-09 16:27:50 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-06-09 16:27:35 | 002,224,971 | ---- | M] () -- C:\Windows\System32\oodbs.lor
[2012-06-09 01:23:31 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2012-06-09 01:06:21 | 000,279,624 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012-06-09 00:39:39 | 000,001,805 | ---- | M] () -- C:\Users\Public\Desktop\avast! Internet Security.lnk
[2012-06-07 23:47:18 | 000,001,020 | ---- | M] () -- C:\Users\Verold\Desktop\Spybot - Search & Destroy.lnk
[2012-06-06 23:59:05 | 001,322,396 | ---- | M] () -- C:\Users\Verold\Desktop\NEUROLOGIA-nasz skrypt.pdf
[2012-06-06 02:35:58 | 030,244,110 | ---- | M] () -- C:\Users\Verold\Desktop\Ortopedia i traumatologia. Podręcznik dla studentów medycyny - Tadeusz Szymon Gaździk.pdf
[2012-06-06 01:36:39 | 000,342,116 | ---- | M] () -- C:\Users\Verold\Desktop\2000.pdf
[2012-06-06 01:36:30 | 000,203,346 | ---- | M] () -- C:\Users\Verold\Desktop\odpowiedzi.pdf
[2012-06-04 02:22:59 | 000,000,806 | ---- | M] () -- C:\Users\Public\Desktop\calibre - E-book management.lnk
[2012-05-31 03:23:18 | 000,237,056 | ---- | M] () -- C:\Users\Verold\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-05-30 02:21:04 | 175,067,767 | ---- | M] () -- C:\Users\Verold\Desktop\Antoni Prusiński Neurologia praktyczna.pdf
[2012-05-30 01:18:57 | 000,289,784 | ---- | M] () -- C:\Users\Verold\Desktop\J.R.R. Tolkien - Drzewo i Liść oraz Mythopoeia.rtf
[2012-05-29 20:11:10 | 000,001,017 | ---- | M] () -- C:\Users\Public\Desktop\Allok 3GP PSP MP4 iPod Video Converter.lnk
[2012-05-29 20:03:17 | 000,000,804 | ---- | M] () -- C:\Users\Verold\Desktop\subedit — skrót.lnk
[2012-05-24 14:14:14 | 000,002,096 | ---- | M] () -- C:\Users\Verold\Desktop\Google Chrome.lnk
[2012-05-17 19:50:01 | 000,000,992 | ---- | M] () -- C:\Users\Verold\Desktop\PES 2012.lnk
[2012-05-14 22:45:08 | 000,419,488 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012-05-14 22:45:08 | 000,070,304 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012-05-14 01:07:23 | 000,721,450 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2012-05-14 01:07:23 | 000,640,480 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012-05-14 01:07:23 | 000,155,334 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2012-05-14 01:07:22 | 000,122,468 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012-05-12 12:34:01 | 000,000,972 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job
[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Users\Verold\*.tmp files -> C:\Users\Verold\*.tmp -> ]

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2012-06-09 00:39:39 | 000,001,805 | ---- | C] () -- C:\Users\Public\Desktop\avast! Internet Security.lnk
[2012-06-07 23:47:18 | 000,001,020 | ---- | C] () -- C:\Users\Verold\Desktop\Spybot - Search & Destroy.lnk
[2012-06-06 23:58:54 | 001,322,396 | ---- | C] () -- C:\Users\Verold\Desktop\NEUROLOGIA-nasz skrypt.pdf
[2012-06-06 02:35:11 | 030,244,110 | ---- | C] () -- C:\Users\Verold\Desktop\Ortopedia i traumatologia. Podręcznik dla studentów medycyny - Tadeusz Szymon Gaździk.pdf
[2012-06-06 01:36:38 | 000,342,116 | ---- | C] () -- C:\Users\Verold\Desktop\2000.pdf
[2012-06-06 01:36:29 | 000,203,346 | ---- | C] () -- C:\Users\Verold\Desktop\odpowiedzi.pdf
[2012-05-30 02:07:55 | 175,067,767 | ---- | C] () -- C:\Users\Verold\Desktop\Antoni Prusiński Neurologia praktyczna.pdf
[2012-05-30 01:18:57 | 000,289,784 | ---- | C] () -- C:\Users\Verold\Desktop\J.R.R. Tolkien - Drzewo i Liść oraz Mythopoeia.rtf
[2012-05-29 20:11:10 | 000,129,024 | ---- | C] () -- C:\Windows\System32\AVERM.dll
[2012-05-29 20:11:10 | 000,001,017 | ---- | C] () -- C:\Users\Public\Desktop\Allok 3GP PSP MP4 iPod Video Converter.lnk
[2012-05-29 20:11:09 | 000,028,672 | ---- | C] () -- C:\Windows\System32\AVEQT.dll
[2012-05-29 20:04:27 | 000,069,632 | ---- | C] ( ) -- C:\Users\Verold\Desktop\auxsetup.exe
[2012-05-29 20:03:17 | 000,000,804 | ---- | C] () -- C:\Users\Verold\Desktop\subedit — skrót.lnk
[2012-04-09 00:51:06 | 000,000,266 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2012-03-15 21:51:55 | 000,116,224 | ---- | C] () -- C:\Windows\System32\pdfmonnt.dll
[2012-03-15 21:51:42 | 000,000,164 | ---- | C] () -- C:\Windows\System32\psconv.ini
[2012-01-09 21:30:25 | 000,116,224 | ---- | C] () -- C:\Windows\System32\pdfcmnnt.dll
[2011-11-09 23:39:44 | 000,059,904 | ---- | C] () -- C:\Windows\System32\OpenVideo.dll
[2011-11-09 23:39:32 | 000,054,784 | ---- | C] () -- C:\Windows\System32\OVDecode.dll
[2011-09-28 18:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2011-04-10 22:45:09 | 000,000,128 | ---- | C] () -- C:\ProgramData\sandra.ldb
[2011-04-10 22:45:08 | 008,507,392 | ---- | C] () -- C:\ProgramData\sandra.mda
[2010-12-15 19:33:28 | 000,075,776 | ---- | C] () -- C:\Windows\cadkasdeinst01e.exe
[2010-11-21 03:11:50 | 000,444,283 | ---- | C] () -- C:\Program Files\Common Files\WinPcapNmap.exe

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 498 bytes -> C:\ProgramData\TEMP:05EE1EEF
@Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:3457FAC4

< End of report >
[/log]






[log]

OTL Extras logfile created on: 2012-06-09 23:36:13 - Run 1
OTL by OldTimer - Version 3.2.48.0 Folder = C:\Users\Verold\Desktop\logi
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19190)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,00 Gb Total Physical Memory | 1,21 Gb Available Physical Memory | 60,74% Memory free
4,23 Gb Paging File | 2,76 Gb Available in Paging File | 65,18% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 93,16 Gb Total Space | 0,91 Gb Free Space | 0,98% Space Free | Partition Type: NTFS
Drive E: | 91,69 Gb Total Space | 1,21 Gb Free Space | 1,32% Space Free | Partition Type: NTFS
Drive G: | 596,17 Gb Total Space | 4,66 Gb Free Space | 0,78% Space Free | Partition Type: NTFS

Computer Name: LAPTOP-WARSZAWA | User Name: Verold | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]


[color=#E56717]========== File Associations ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.bat [@ = batfile] -- Reg Error: Key error. File not found

[color=#E56717]========== Shell Spawning ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "E:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[color=#E56717]========== Security Center Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 1
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[color=#E56717]========== System Restore Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[color=#E56717]========== Firewall Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[color=#E56717]========== Authorized Applications List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\uusee\UUSeePlayer.exe" = C:\Program Files\uusee\UUSeePlayer.exe:*:Enabled:UUPlayer
"C:\Program Files\PPMate\ppmate.exe" = C:\Program Files\PPMate\ppmate.exe:*:Enabled:PPMate
"C:\Program Files\PPMate\ppamnet.exe" = C:\Program Files\PPMate\ppamnet.exe:*:Enabled:PPMate
"C:\Program Files\PPStream\PPStream.exe" = C:\Program Files\PPStream\PPStream.exe:*:Enabled:PPSÍřÂçµçĘÓ
"C:\Program Files\PPStream\PPSAP.exe" = C:\Program Files\PPStream\PPSAP.exe:*:Enabled:PPStream ÍřÂçĽÓËŮĆ÷
"C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe" = C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe:*:Enabled:Flashget2
"C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdate.exe" = C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdate.exe:*:Enabled:FGLiveUpdate
"C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateEx.exe" = C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateEx.exe:*:Enabled:FGLiveUpdateEx
"C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe" = C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3


[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02CD1BDC-39C3-411C-89E1-D1BDE91282B8}" = lport=138 | protocol=17 | dir=in | app=system |
"{07BD11D2-3A8A-4B7B-A7B0-27D4BF655091}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{0C6F35F2-C973-4D0C-92AC-6E65EC0D5CA2}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{0E84EDB5-909D-4BF9-B0E3-BE9790C5725A}" = lport=139 | protocol=6 | dir=in | app=system |
"{13D6AE26-2555-4493-AC04-14C34208D08B}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{14FFCFEA-68FD-4AAF-9D30-E39BB90D5426}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{151FFD70-D46D-4D3B-BA76-DB654EC82890}" = lport=rpc | protocol=6 | dir=in | app=c:\program files\sisoftware\sisoftware sandra lite 2009.sp2\wnt500x86\rpcsandrasrv.exe |
"{1BD88B03-EABB-4CEF-ADEC-4EE03A9755F7}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{22DC2EFC-464E-42E9-AD61-733AB251641B}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{2587A91E-DF34-4E9C-A620-A6D53B72631B}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{3F79F4B9-DE51-46B5-98A1-37CC5316F785}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe |
"{4041D099-6167-4250-90BA-9BA51FCD2745}" = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{473BF371-D1FF-436A-AB52-C296D3A2CDC9}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{4BF7494E-ED38-41EB-8A2B-B21402BA98AC}" = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{610A4DAA-9FDB-4C7F-8536-1B9AC026EABF}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{8CB5FCEA-3BE4-462B-A1C5-6AF731C8E0A3}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{998C9056-1B59-465A-838A-E27A4D2FE617}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{9A54EBA7-4CA0-46CB-8F29-DA66FF5FB15F}" = lport=rpc | protocol=6 | dir=in | app=c:\program files\sisoftware\sisoftware sandra lite 2009.sp2\rpcagentsrv.exe |
"{9E770E4E-635B-4F43-A4C1-142BA86F751F}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{A8DB3EB0-6F89-470D-89A8-CADC45AB8B28}" = rport=2869 | protocol=6 | dir=out | app=system |
"{AF830A13-460F-4777-BA85-9C4F2E5EA7D2}" = lport=137 | protocol=17 | dir=in | app=system |
"{B08E845C-8D85-4246-A72B-7E961CC20F39}" = lport=445 | protocol=6 | dir=in | app=system |
"{B57FB009-DE2A-48C3-BF57-DDF13B98C7D0}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{B5DB870B-F8EE-40DD-AB4A-D91FB4E6BB4F}" = rport=139 | protocol=6 | dir=out | app=system |
"{B7B68655-223D-4E5E-8E95-D44EA6D3DBA8}" = rport=138 | protocol=17 | dir=out | app=system |
"{BBA7410D-4808-4A2F-A536-111F04938327}" = lport=rpc | protocol=6 | dir=in | app=c:\program files\sisoftware\sisoftware sandra lite 2009.sp2\wnt500x86\rpcsandrasrv.exe |
"{C254B90B-3A56-40B8-9DD7-34AA79898111}" = rport=445 | protocol=6 | dir=out | app=system |
"{C7F51C08-2A4B-4EE8-A58C-4A67E5842BD3}" = lport=2869 | protocol=6 | dir=in | app=system |
"{DCB2392B-A6E9-4849-A7E6-E2F923D2ACF9}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{DDCA6D61-E4B0-4230-B256-DD4A30A620A7}" = rport=137 | protocol=17 | dir=out | app=system |
"{E2BA8172-ACE6-41AC-9C30-6B4AC6E85757}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{FD89EC44-6287-4DF9-B118-1922BB5C0B14}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |

[color=#E56717]========== Vista Active Application Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00BB0C93-8BDE-40FB-842B-573CFA5B51C0}" = protocol=6 | dir=in | app=e:\program files\electronic arts\need for speed™ hot pursuit\launcher.exe |
"{03B764F4-3B87-4A35-908B-DA6A41FB9189}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{05F5CEF8-4C0D-490F-83EC-1597DF1BDB0E}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\verold\counter-strike\hl.exe |
"{0A1560E2-331A-4D3F-883C-659EA2D2589E}" = protocol=6 | dir=in | app=e:\program files\electronic arts\battlefield bad company 2\bfbc2updater.exe |
"{0BA8AA5D-62E7-446C-8B7C-43950AA316AD}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{0CA68757-6A47-468F-8BB2-9BE0C72FB8BE}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{0EBDB462-8D50-4703-B4D4-6393D28FE809}" = protocol=17 | dir=in | app=e:\program files\deep silver\s.t.a.l.k.e.r. - clear sky\bin\dedicated\xrengine.exe |
"{158FFB84-855E-419A-8FF6-D11434228BFF}" = protocol=17 | dir=in | app=c:\program files\winamp remote\bin\orb.exe |
"{15DDCBAE-10CC-4C81-BC0E-26082706F2ED}" = protocol=17 | dir=in | app=c:\program files\mass effect 2\masseffect2launcher.exe |
"{18B30F08-9217-443D-A92D-1F39A8B1096A}" = protocol=17 | dir=in | app=c:\program files\winamp remote\bin\orbstreamerclient.exe |
"{1DAB1399-DB9F-4663-A199-E016D71629D6}" = protocol=6 | dir=in | app=e:\program files\deep silver\s.t.a.l.k.e.r. - clear sky\bin\xrengine.exe |
"{39BD3BFE-593E-46DF-900C-B9C1C59E3EEB}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{3C93C5B8-2645-4EB7-AFCD-061902A66166}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{3DD14409-D5DB-45B4-BD99-04B9332A7FC8}" = protocol=17 | dir=in | app=e:\program files\electronic arts\need for speed™ hot pursuit\launcher.exe |
"{47A0E7D4-0ECD-40DF-8EB4-F147723464B6}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{483F7AD2-A5F3-4D30-8E38-C0E335580596}" = protocol=6 | dir=in | app=c:\program files\rapidsolution\tunebite\tunebitehelper.exe |
"{48901FDE-F197-4FC4-83C7-83C35DAC910B}" = protocol=6 | dir=in | app=c:\program files\winamp remote\bin\orb.exe |
"{4C061490-217F-47AE-8DF4-A03454B81455}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{4D078D4E-54DF-410C-B532-5ED73EA84D2D}" = protocol=6 | dir=in | app=e:\program files\deep silver\s.t.a.l.k.e.r. - clear sky\bin\dedicated\xrengine.exe |
"{5034ECE0-A827-4E73-AE0C-4A29B0BE9C96}" = protocol=17 | dir=in | app=e:\program files\deep silver\s.t.a.l.k.e.r. - clear sky\bin\xrengine.exe |
"{5088992C-553E-4AC9-A4F1-880E5C0C2565}" = protocol=6 | dir=in | app=c:\program files\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{50FC6A7D-2C60-4648-B588-6BE2D4450304}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{533AAF07-7F64-44C9-9BE6-9F836C27FB32}" = protocol=6 | dir=in | app=c:\program files\mass effect 2\masseffect2launcher.exe |
"{656FB6FB-B5AC-4E1A-81F2-0CB54C27F4A5}" = protocol=1 | dir=in | name=sisoftware deployment agent service (icmp-in) |
"{6B5C766F-F16F-473B-AFE7-99714F48F85C}" = protocol=17 | dir=in | app=c:\program files\rapidsolution\tunebite\tunebitehelper.exe |
"{70559216-6F10-41F2-A0F5-746BF292F2E4}" = protocol=17 | dir=in | app=e:\program files\activision\call of duty - world at war\codwawmp.exe |
"{7B74DF9C-114B-4BA8-A723-CC261B31A2B2}" = protocol=6 | dir=in | app=c:\program files\mass effect 2\binaries\masseffect2.exe |
"{7C12EF71-009E-40EB-89AC-370E64791721}" = protocol=1 | dir=in | name=sisoftware sandra agent service (icmp-in) |
"{834337DC-0975-491B-8739-AF6E5091C177}" = protocol=17 | dir=in | app=e:\program files\activision\call of duty - world at war\codwaw.exe |
"{83CED37D-2B5D-4F99-B839-41C636543271}" = protocol=6 | dir=in | app=e:\program files\eidos\kane and lynch dead men\kaneandlynch.exe |
"{8DD04BCC-D153-49E2-84DE-1BDD8C056AB4}" = protocol=6 | dir=in | app=e:\program files\azureus\azureus.exe |
"{8DDBF572-1D15-4799-A034-308AB8F0E2A2}" = protocol=6 | dir=in | app=c:\program files\winamp remote\bin\orbtray.exe |
"{993554D1-269B-4799-A8A6-E52526DFAB6D}" = dir=out | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{9A88E2CF-6201-4754-A765-D3119F6568A2}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{9DEEEE42-4853-4124-B8DD-A94790841521}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{9F1AF24E-AB04-4CA1-A150-443766B82593}" = protocol=58 | dir=in | name=@hnetcfg.dll,-148 |
"{A4208ADA-13B3-41EF-AEA4-182703E18290}" = protocol=17 | dir=in | app=e:\program files\activision\call of duty 4 - modern warfare\iw3mp.exe |
"{A4F7D999-D8F2-4305-98EF-D4B6B72B9ECA}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{A62E701C-59C9-4CED-BE96-085CCA7B603B}" = protocol=17 | dir=in | app=c:\program files\konami\pro evolution soccer 2012\pes2012.exe |
"{A9F6E897-971E-4ECE-9DE3-41625C4FC792}" = protocol=17 | dir=in | app=e:\program files\electronic arts\battlefield bad company 2\bfbc2updater.exe |
"{ADB7AB48-E126-4BCB-823D-1642E1239B82}" = protocol=6 | dir=in | app=e:\program files\activision\call of duty 4 - modern warfare\iw3mp.exe |
"{BD8C30B4-7844-459F-9D5B-51F0D9797CB8}" = protocol=6 | dir=in | app=c:\program files\konami\pro evolution soccer 2012\pes2012.exe |
"{BF8AE7D7-69A0-4BFF-B881-B9C031ABCF29}" = protocol=17 | dir=in | app=c:\program files\mass effect 2\binaries\masseffect2.exe |
"{C055751D-9221-4C08-A77C-71AB5F2A23D0}" = protocol=17 | dir=in | app=c:\program files\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{C07CC085-5DF3-4D4E-8E9C-BBA605AE3724}" = protocol=17 | dir=in | app=e:\program files\azureus\azureus.exe |
"{C919FEEA-EDA9-4A01-BA2B-80136EDFEB5F}" = protocol=6 | dir=in | app=e:\program files\activision\call of duty - world at war\codwawmp.exe |
"{C97E9557-2C2D-439C-B052-700CCC405B6E}" = protocol=17 | dir=in | app=e:\program files\eidos\kane and lynch dead men\kaneandlynch.exe |
"{CFADA050-58CA-4312-870C-EA2599CAFD00}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{D53E9C14-6E73-4AD6-A74A-E54D8312744E}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{DD3E327F-2F38-4ACA-BD6C-467F595A87D6}" = protocol=6 | dir=in | app=c:\program files\winamp remote\bin\orbstreamerclient.exe |
"{E3471042-63C2-4044-A101-C401C17E947B}" = protocol=17 | dir=in | app=c:\program files\winamp remote\bin\orbtray.exe |
"{E70326EE-37AC-4842-BDF3-7D5956F41B51}" = protocol=6 | dir=in | app=c:\program files\winamp remote\bin\orbir.exe |
"{EF6D79D8-4919-46CD-87ED-78D4B5853897}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{F080F09C-BCAF-4EBA-ADD5-7EFABD2E33A1}" = protocol=17 | dir=in | app=c:\program files\winamp remote\bin\orbir.exe |
"{F5085371-C947-45B1-A1B3-F7E55460CDC2}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\verold\counter-strike\hl.exe |
"{F60867C4-9161-4246-B6E1-41B31D135ACA}" = protocol=1 | dir=in | name=sisoftware sandra agent service (icmp-in) |
"{F70E1722-22F4-42B3-A3E7-E75E3B87DF5E}" = protocol=6 | dir=in | app=e:\program files\activision\call of duty - world at war\codwaw.exe |
"TCP Query User{03844C9A-D2BF-4E07-B81E-C58D3B69C63F}C:\program files\limewire\limewire.exe" = protocol=6 | dir=in | app=c:\program files\limewire\limewire.exe |
"TCP Query User{06E93F61-64C3-4623-92C2-0FCE8705BDFA}E:\program files\kolekcja klasyki\commandos antologia\commandos3, destination berlin\comm3.exe" = protocol=6 | dir=in | app=e:\program files\kolekcja klasyki\commandos antologia\commandos3, destination berlin\comm3.exe |
"TCP Query User{184253BB-E8B0-4558-A6D9-89AE44D0F374}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"TCP Query User{18EED810-BD87-42DF-8026-82A208AF797C}C:\program files\java\jre1.6.0\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.6.0\bin\javaw.exe |
"TCP Query User{21BD56C7-C018-4560-99F2-037DC1AB2DA5}E:\downloads\ds_luksze\dead space.exe" = protocol=6 | dir=in | app=e:\downloads\ds_luksze\dead space.exe |
"TCP Query User{29892BD3-4FD8-48E0-B37B-7FB9367B1166}C:\program files\flashget network\flashget universal\flashget.exe" = protocol=6 | dir=in | app=c:\program files\flashget network\flashget universal\flashget.exe |
"TCP Query User{29E78883-B002-4BCF-ACC4-A723B82344D2}C:\program files\sopcast\adv\sopadver.exe" = protocol=6 | dir=in | app=c:\program files\sopcast\adv\sopadver.exe |
"TCP Query User{375E2EFB-BD87-4A40-81E4-A81F382C3E1D}C:\program files\free download manager\fdmwi.exe" = protocol=6 | dir=in | app=c:\program files\free download manager\fdmwi.exe |
"TCP Query User{3BF0F7C6-01EF-4CE8-9B60-2CB7750B938E}C:\program files\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe |
"TCP Query User{4C6E5A58-D52C-4BC8-9EBF-4CDFC45E1127}C:\program files\opera\opera.exe" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe |
"TCP Query User{505D0FD9-6430-44A0-ACFB-71CA29986032}C:\program files\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files\winamp\winamp.exe |
"TCP Query User{540A59F7-091F-4C4B-AC21-CD1206055487}C:\program files\warcraft iii\war3.exe" = protocol=6 | dir=in | app=c:\program files\warcraft iii\war3.exe |
"TCP Query User{6824508A-2D5B-452A-876C-EC4FDA5304ED}C:\program files\streamtorrent 1.0\streamtorrent.exe" = protocol=6 | dir=in | app=c:\program files\streamtorrent 1.0\streamtorrent.exe |
"TCP Query User{6C0F716D-0693-4945-8DC1-8204F5057557}C:\program files\flashget network\flashget 3\flashget3.exe" = protocol=6 | dir=in | app=c:\program files\flashget network\flashget 3\flashget3.exe |
"TCP Query User{7A8FA652-2A91-4B02-BD28-B1AB39D76A26}C:\program files\sopcast\sopcast.exe" = protocol=6 | dir=in | app=c:\program files\sopcast\sopcast.exe |
"TCP Query User{7F17A951-A864-4A6F-BFB1-7236DA529682}C:\program files\b2bpoker\frontpoker\jre\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\b2bpoker\frontpoker\jre\bin\javaw.exe |
"TCP Query User{7F26604D-5748-47A2-ACFD-EEF935270CCC}C:\program files\rayv\rayv\rayv.exe" = protocol=6 | dir=in | app=c:\program files\rayv\rayv\rayv.exe |
"TCP Query User{95BAE0FA-69AA-4B34-82C2-7B2B765F3D83}C:\program files\ppmate\ppamnet.exe" = protocol=6 | dir=in | app=c:\program files\ppmate\ppamnet.exe |
"TCP Query User{9CC1AFBA-BD1C-46C8-AF9B-20A918EBC30D}E:\program files\codemasters\worms 4 totalna rozwałka\worms 4 mayhem.exe" = protocol=6 | dir=in | app=e:\program files\codemasters\worms 4 totalna rozwałka\worms 4 mayhem.exe |
"TCP Query User{9D479F31-B701-4CDD-A863-AC4F1BA4D79B}E:\program files\gadu-gadu\gg.exe" = protocol=6 | dir=in | app=e:\program files\gadu-gadu\gg.exe |
"TCP Query User{9D4A0466-9D8E-41B3-94A9-BF8D0F828FA2}C:\program files\id software\quake 4\quake4ded.exe" = protocol=6 | dir=in | app=c:\program files\id software\quake 4\quake4ded.exe |
"TCP Query User{A5CB7E4E-7D1D-4300-870A-FD3F1A7828D0}E:\program files\winamp\winamp.exe" = protocol=6 | dir=in | app=e:\program files\winamp\winamp.exe |
"TCP Query User{AA2DDF4F-3747-4443-9947-222AF6F8FF10}C:\program files\bearshare applications\bearshare\bearshare.exe" = protocol=6 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe |
"TCP Query User{AB79E63B-5C88-49A5-8DFE-E531260E0678}E:\program files\konami\pro evolution soccer 2009\pes2009.exe" = protocol=6 | dir=in | app=e:\program files\konami\pro evolution soccer 2009\pes2009.exe |
"TCP Query User{AC497BE4-E4E5-4615-99B4-A130F91B6DB6}C:\program files\gumboy tournament\gumboytournament.exe" = protocol=6 | dir=in | app=c:\program files\gumboy tournament\gumboytournament.exe |
"TCP Query User{C44C72B4-8C1F-48D0-9FD6-07CB7C7F879F}C:\users\verold\temp\teamviewer\version4\teamviewer.exe" = protocol=6 | dir=in | app=c:\users\verold\temp\teamviewer\version4\teamviewer.exe |
"TCP Query User{CB779567-D1A5-4A0C-9747-A58823C13578}C:\program files\java\jre1.6.0\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.6.0\bin\java.exe |
"TCP Query User{DA153273-30BE-4A38-8843-755A236CC663}E:\program files\electronic arts\need for speed™ hot pursuit\nfs11.exe" = protocol=6 | dir=in | app=e:\program files\electronic arts\need for speed™ hot pursuit\nfs11.exe |
"TCP Query User{E60FF9D4-95C0-4715-B2D0-0E655EE2D207}C:\users\verold\appdata\local\temp\hebat\opera.exe" = protocol=6 | dir=in | app=c:\users\verold\appdata\local\temp\hebat\opera.exe |
"TCP Query User{E792471C-B141-42D7-ACA4-9F1790E82505}C:\program files\dc++\dcplusplus.exe" = protocol=6 | dir=in | app=c:\program files\dc++\dcplusplus.exe |
"TCP Query User{F3667803-D04B-4FE3-A250-FEF78223678D}E:\games\xtcs counter-strike 1.6 final release\hltv.exe" = protocol=6 | dir=in | app=e:\games\xtcs counter-strike 1.6 final release\hltv.exe |
"TCP Query User{F63C88B6-E39D-4CBA-BC03-C15F354ED1AC}E:\program files\ea sports\fifa 11\game\fifa.exe" = protocol=6 | dir=in | app=e:\program files\ea sports\fifa 11\game\fifa.exe |
"TCP Query User{F9063025-9018-4E61-A857-CADCEB793279}C:\program files\dragon age\bin_ship\eacoreserver.exe" = protocol=6 | dir=in | app=c:\program files\dragon age\bin_ship\eacoreserver.exe |
"TCP Query User{FD5268E9-9CDF-43DE-89F7-F0237BE2D7B6}C:\program files\tvants\tvants.exe" = protocol=6 | dir=in | app=c:\program files\tvants\tvants.exe |
"TCP Query User{FF9104B0-D1BA-49C2-8F80-4396F4C428C0}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"UDP Query User{0C6B408E-5277-4366-868A-CF75CE14DFC6}E:\games\xtcs counter-strike 1.6 final release\hltv.exe" = protocol=17 | dir=in | app=e:\games\xtcs counter-strike 1.6 final release\hltv.exe |
"UDP Query User{0CD4F05E-6F1D-43B3-B102-33D972339EE6}C:\program files\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files\winamp\winamp.exe |
"UDP Query User{24018406-5097-405A-AC52-7705AB3826D4}C:\users\verold\appdata\local\temp\hebat\opera.exe" = protocol=17 | dir=in | app=c:\users\verold\appdata\local\temp\hebat\opera.exe |
"UDP Query User{37A70208-93D9-4910-BE47-46C8B3FE149C}C:\program files\gumboy tournament\gumboytournament.exe" = protocol=17 | dir=in | app=c:\program files\gumboy tournament\gumboytournament.exe |
"UDP Query User{3D1A0AC5-5613-4EFD-951E-4A95AC41D785}C:\program files\java\jre1.6.0\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.6.0\bin\javaw.exe |
"UDP Query User{3EFEB6BD-85D0-4C3D-9175-03F81CEB8D57}E:\program files\electronic arts\need for speed™ hot pursuit\nfs11.exe" = protocol=17 | dir=in | app=e:\program files\electronic arts\need for speed™ hot pursuit\nfs11.exe |
"UDP Query User{426474A7-A50E-4D50-9FA0-98CAF199F3DD}C:\program files\ppmate\ppamnet.exe" = protocol=17 | dir=in | app=c:\program files\ppmate\ppamnet.exe |
"UDP Query User{430CAEA0-307C-44F6-B4AF-AC66263D28F2}C:\program files\flashget network\flashget universal\flashget.exe" = protocol=17 | dir=in | app=c:\program files\flashget network\flashget universal\flashget.exe |
"UDP Query User{4B5557AC-7AEF-4B0E-9D5B-47ADE477AB98}C:\program files\free download manager\fdmwi.exe" = protocol=17 | dir=in | app=c:\program files\free download manager\fdmwi.exe |
"UDP Query User{4BBF7415-1156-4DB8-AFC8-D865526DC3B4}C:\program files\bearshare applications\bearshare\bearshare.exe" = protocol=17 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe |
"UDP Query User{55FD55FD-4627-416C-B265-3F10CCEF78C8}C:\program files\streamtorrent 1.0\streamtorrent.exe" = protocol=17 | dir=in | app=c:\program files\streamtorrent 1.0\streamtorrent.exe |
"UDP Query User{7627C776-07AE-4122-A428-43ED290B817F}C:\program files\sopcast\sopcast.exe" = protocol=17 | dir=in | app=c:\program files\sopcast\sopcast.exe |
"UDP Query User{7AAD07C1-23D2-4B7B-99CF-59E33B7235D4}C:\program files\opera\opera.exe" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe |
"UDP Query User{7D824B72-0F5C-4B3F-B551-E137A597F46C}C:\program files\dc++\dcplusplus.exe" = protocol=17 | dir=in | app=c:\program files\dc++\dcplusplus.exe |
"UDP Query User{82C57865-B7F5-4B4E-B6FF-F400D9A2AFCA}C:\program files\tvants\tvants.exe" = protocol=17 | dir=in | app=c:\program files\tvants\tvants.exe |
"UDP Query User{877C37EE-11A3-44FC-B0F9-EAC2712E5A2C}C:\program files\flashget network\flashget 3\flashget3.exe" = protocol=17 | dir=in | app=c:\program files\flashget network\flashget 3\flashget3.exe |
"UDP Query User{89AA2FDF-EDCA-4C45-B430-D47ED28121CB}C:\program files\id software\quake 4\quake4ded.exe" = protocol=17 | dir=in | app=c:\program files\id software\quake 4\quake4ded.exe |
"UDP Query User{8BE6604A-4ECC-401E-92AE-A2F17F29802E}E:\program files\konami\pro evolution soccer 2009\pes2009.exe" = protocol=17 | dir=in | app=e:\program files\konami\pro evolution soccer 2009\pes2009.exe |
"UDP Query User{8CE3AD85-E391-49C3-BF9B-CCEF4656B4B9}C:\program files\limewire\limewire.exe" = protocol=17 | dir=in | app=c:\program files\limewire\limewire.exe |
"UDP Query User{9118FE09-6A00-44B8-9523-7FF8B51CC1B8}C:\users\verold\temp\teamviewer\version4\teamviewer.exe" = protocol=17 | dir=in | app=c:\users\verold\temp\teamviewer\version4\teamviewer.exe |
"UDP Query User{95447D14-3E2E-4651-92FD-6A584E6C14EA}C:\program files\b2bpoker\frontpoker\jre\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\b2bpoker\frontpoker\jre\bin\javaw.exe |
"UDP Query User{9A0618EC-0216-4646-88A9-2DE1B7691364}E:\program files\winamp\winamp.exe" = protocol=17 | dir=in | app=e:\program files\winamp\winamp.exe |
"UDP Query User{9ADE3977-2E52-4AC4-AB4D-44BB1831518A}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"UDP Query User{9B6E4616-51DC-43FA-B94B-0EBDE49311E6}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"UDP Query User{A17F3A7A-53F2-4FEA-AAD1-8733E9D4B708}E:\program files\kolekcja klasyki\commandos antologia\commandos3, destination berlin\comm3.exe" = protocol=17 | dir=in | app=e:\program files\kolekcja klasyki\commandos antologia\commandos3, destination berlin\comm3.exe |
"UDP Query User{A92CB021-7DBF-4DBE-871C-BB5D722B9088}C:\program files\sopcast\adv\sopadver.exe" = protocol=17 | dir=in | app=c:\program files\sopcast\adv\sopadver.exe |
"UDP Query User{B4579AD6-A82C-49DE-AF79-B3117CE915CD}C:\program files\java\jre1.6.0\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.6.0\bin\java.exe |
"UDP Query User{B9D1A2A8-4BC4-41F8-87FE-190AD72A66B1}C:\program files\rayv\rayv\rayv.exe" = protocol=17 | dir=in | app=c:\program files\rayv\rayv\rayv.exe |
"UDP Query User{BECEB4F8-9A01-4E8F-95C3-BD2912889608}C:\program files\warcraft iii\war3.exe" = protocol=17 | dir=in | app=c:\program files\warcraft iii\war3.exe |
"UDP Query User{D755232F-C3EE-4B0C-9001-756C517CB3A2}E:\downloads\ds_luksze\dead space.exe" = protocol=17 | dir=in | app=e:\downloads\ds_luksze\dead space.exe |
"UDP Query User{DC1A4723-A859-47FD-BCE7-BD5E5B7953CD}E:\program files\gadu-gadu\gg.exe" = protocol=17 | dir=in | app=e:\program files\gadu-gadu\gg.exe |
"UDP Query User{E3F0790F-927E-4DE5-8B90-FC23E2AF3C4E}C:\program files\dragon age\bin_ship\eacoreserver.exe" = protocol=17 | dir=in | app=c:\program files\dragon age\bin_ship\eacoreserver.exe |
"UDP Query User{E6012B40-B25F-46B8-B028-FA777A3C019A}C:\program files\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe |
"UDP Query User{ECDB3731-E250-4909-A884-46274F63E401}E:\program files\codemasters\worms 4 totalna rozwałka\worms 4 mayhem.exe" = protocol=17 | dir=in | app=e:\program files\codemasters\worms 4 totalna rozwałka\worms 4 mayhem.exe |
"UDP Query User{FA52650C-321D-4653-8C0C-37C45E575BAB}E:\program files\ea sports\fifa 11\game\fifa.exe" = protocol=17 | dir=in | app=e:\program files\ea sports\fifa 11\game\fifa.exe |

[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{001E7FB6-BB6B-4ED0-BEDC-B5404ED96D4E}" = DocProc
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0289B35E-DC07-4c7a-9710-BBD686EA4B7D}" = Status
"{0323731F-5EFF-C9AE-B398-6077AE9C67D9}" = Catalyst Control Center Localization Chinese Standard
"{05CAF469-9765-8FBF-10AD-FD621091824A}" = CCC Help English
"{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Windows Live ID Sign-in Assistant
"{084D94A9-D67E-D41B-6B4E-B6A481384D27}" = CCC Help Finnish
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0A8DA20B-1F01-D1C5-A24F-91EEE7A94A59}" = Catalyst Control Center Localization Korean
"{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime
"{11D49772-0D06-0B31-DC09-CE413F9B0C93}" = CCC Help Chinese Traditional
"{12688FD7-CB92-4A5B-BEE4-5C8E0574434F}" = Utility Common Driver
"{12B3A009-A080-4619-9A2A-C6DB151D8D67}" = TOSHIBA Assist
"{13F00518-807A-4B3A-83B0-A7CD90F3A398}" = MarketResearch
"{15AC0C5D-A6FB-4CE2-8CD0-28179EEB5625}" = Nokia Connectivity Cable Driver
"{1701765B-6D93-43C6-A835-DD423517581F}" = OpenOffice.org 3.2
"{172423F9-522A-483A-AD65-03600CE4CA4F}" = Microsoft Works 6-9 Converter
"{1753255A-0AEB-4220-8C75-607B73F0C133}" = Copy
"{18D00C9F-B259-4838-871A-C61FCFF34C59}" = EA SPORTS™ Rugby 08
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{22721B8E-8D36-C102-8C79-925C221DD9B4}" = Catalyst Control Center Localization Russian
"{2290A680-4083-410A-ADCC-7092C67FC052}" = Toshiba Online Product Information
"{2614F54E-A828-49FA-93BA-45A3F756BFAA}" = 32 Bit HP CIO Components Installer
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java™ 6 Update 31
"{26D4FB2E-BA55-3E2C-CC6F-97D6A0A74306}" = AMD Fuel
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Atheros Driver Installation Program
"{28599CEE-974A-4AFA-8484-C6FC94984330}" = Majesty Złota Edycja
"{29FA38B4-0AE4-4D0D-8A51-6165BB990BB0}" = WebReg
"{2D1B9BD2-C430-C5D6-6A40-BD00956F9CA4}" = Catalyst Control Center Graphics Previews Vista
"{2ECA81CA-D932-4AD3-AD59-BF5CCF099C83}" = Catalyst Control Center - Branding
"{2F28B3C9-2C89-4206-8B33-8ADC9577C49B}" = Scan
"{3248F0A8-6813-11D6-A77B-00B0D0160000}" = Java™ SE Runtime Environment 6
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java™ 6 Update 7
"{342126E1-173C-4585-BFBE-3EBDD20E3E9E}" = Mobipocket Reader 6.2
"{34E2872D-1493-25E6-FBD8-98FCC1A96645}" = CCC Help Portuguese
"{36FDBE6E-6684-462B-AE98-9A39A1B200CC}" = HP Product Assistant
"{37C866E4-AA67-4725-9E95-A39968DD7960}" = Camera Assistant Software for Toshiba
"{3A6F4A31-8CFD-46B4-8385-E1F384DB121E}" = PDF-XChange Viewer
"{3AC8457C-0385-4BEA-A959-E095F05D6D67}" = Battlefield: Bad Company™ 2
"{3BF34856-1A5F-2AD8-7D50-66BE8A82B5C1}" = CCC Help Spanish
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{415CDA53-9100-476F-A7B2-476691E117C7}" = HP Smart Web Printing
"{42442BC6-5A92-4BC2-9E0C-3D359D548A21}_is1" = Pazera Free MP4 to AVI Converter 1.6
"{45F00029-0A50-43AA-497A-67EFFF1E06F7}" = CCC Help Swedish
"{487B0B9B-DCD4-440D-89A0-A6EDE1A545A3}" = HPSSupply
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A8B461A-9336-4CF9-98F4-14DD38E673F0}" = BioShock 2
"{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}" = SAGEM F@st 800-840
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4DFF1415-4C29-44A8-BFD4-2BCE249C4991}" = SpPhones
"{4E1D0591-14F7-736E-143A-62DC3E552A1A}" = Catalyst Control Center InstallProxy
"{5034E4E7-A8E7-7BCA-0014-1534C77A7A5C}" = Catalyst Control Center Localization Turkish
"{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}" = TOSHIBA Supervisor Password
"{5279374D-87FE-4879-9385-F17278EBB9D3}" = TOSHIBA Hardware Setup
"{52EC92CA-771A-F8C8-95A2-37AFB43798B7}" = Catalyst Control Center Localization Spanish
"{543E938C-BDC4-4933-A612-01293996845F}" = UnloadSupport
"{5454085C-840F-4070-8FAA-441000018301}" = BioShock 2
"{55BDC5EB-A3CF-46D6-9F23-3144436AECAE}" = Podreczniki TOSHIBA
"{560F47F7-EB23-44B1-AAFC-667F1CD8FE5C}" = Sp5
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{58FB2F9A-5F2D-40E8-82DF-4987E60AD8BD}" = Nokia PC Suite
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{5AEDCB07-25E3-4136-BE1E-BB2A2944355D}" = Game Graphic Studio
"{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}" = Skype™ 3.8
"{5DA0E02F-970B-424B-BF41-513A5018E4C0}" = TOSHIBA Disc Creator
"{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center
"{61A994FF-D39B-4937-9DB9-87EC4E91B316}" = USB GAMEPAD
"{61E3FE32-07B9-4563-A3E0-2DE2D620FE10}" = PixiePack Codec Pack
"{620BBA5E-F848-4D56-8BDA-584E44584C5E}" = TOSHIBA Flash Cards Support Utility
"{64FA2F4C-F61D-9A7C-318D-711C63308A61}" = CCC Help German
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6C3959C6-943E-44B3-BAAD-570B04B134E5}" = SpCommon
"{6C5F3BDC-0A1B-4436-A696-5939629D5C31}" = TOSHIBA DVD PLAYER
"{6CA1CD8C-2D65-491E-9467-00A3ACA4A0A9}" = Tropico 3
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{6F64A42C-6D93-6788-EB4F-07CC066DE194}" = Catalyst Control Center Graphics Previews Common
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{71929EC1-FDB2-4A67-AAAD-936E4539FA84}_is1" = Driver Sweeper 2.1.0
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{72E710CD-51E2-D3BA-108C-F00C54E5B7B0}" = CCC Help Japanese
"{75D84EF7-0D8C-4e70-B3FA-7B42A5D4E0EB}" = Mass Effect 2
"{76D1FBEB-FBBF-0D1E-BB0A-CAA0D19E2C7F}" = ccc-utility
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{789289CA-F73A-4A16-A331-54D498CE069F}" = Ventrilo
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{78C6A78A-8B03-48C8-A47C-78BA1FCA2307}" = TOSHIBA ConfigFree
"{79A4C5D0-EF1A-752A-43F9-C4E79341628A}" = Catalyst Control Center Localization Italian
"{7AC09EE2-08B0-7C97-B8ED-961C58AA9E96}" = Catalyst Control Center Localization Greek
"{7BD5E0A6-DB75-B763-CE09-0D883E97F5DF}" = Catalyst Control Center Localization Thai
"{7CF70E3E-BDC7-5F46-F806-49D8D104A0E3}" = CCC Help Danish
"{7D61830A-1867-6DFA-11FE-A64752B4658D}" = CCC Help Greek
"{80FEE630-084D-50F6-9FC8-75757A87F015}" = Catalyst Control Center Localization Polish
"{824D3839-DAA1-4315-A822-7AE3E620E528}" = VideoToolkit01
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{8389382B-53BA-4A87-8854-91E3D80A5AC7}" = HP Photosmart Essential2.01
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8B743AA0-53B2-11D2-808A-00600895FB43}" = Heroes of Might and Magic III - Złota Edycja
"{8D8B8115-40C1-A707-B7DA-599514076A81}" = Catalyst Pro Control Center
"{8E8780B8-2924-B51D-976B-59EE97713659}" = CCC Help Russian
"{90840409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Excel Viewer 2003
"{90850415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Word Viewer 2003
"{95120000-00AF-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (Polish)
"{95AEBA1F-23F4-3751-73FA-CFCFB962F789}" = CCC Help Polish
"{977D59F6-C638-B0AC-5CE4-D6A615D62033}" = Catalyst Control Center Localization Dutch
"{981FAFFC-35E9-42E0-9C58-9AADE646F92A}" = Diskeeper 2010
"{9954B400-AEB7-638D-E753-BB4ECE1064EE}" = CCC Help English
"{9A1EFCBB-5E3C-7E13-2AAD-7AFA4FD9DBD9}" = Catalyst Control Center Localization Swedish
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C2D4047-0E40-499a-AC7A-C4B9BB12FE03}" = TrayApp
"{9EFDFBA8-9174-3C61-8645-28376C5CA994}" = Microsoft .NET Framework 3.5 Language Pack SP1 - plk
"{9FD6F1A8-5550-46AF-8509-271DF0E768B5}" = Dual-Core Optimizer
"{9FE35071-CAB2-4E79-93E7-BFC6A2DC5C5D}" = Wyciszacz napędu CD/DVD
"{A036E231-5A03-4d63-94F6-7864CC77EC48}" = PS_AIO_ProductContext
"{A0EB195B-5876-48E6-879D-33D4B2102610}" = SonicStage 4.3
"{A1C98C40-F126-11D6-A72A-00E07D97B509}" = Syberia
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A66C4716-7E10-4A53-8101-00C3C11D6A9C}" = Kane and Lynch: Dead Men
"{A6D4234C-CB02-4048-AC3E-AD09404FA35A}" = Emdedded IR Driver
"{A73730D7-1D88-3DAB-9A3B-3959093347CC}" = CCC Help Chinese Standard
"{A7E19604-93AF-4611-8C9F-CE509C2B286E}_is1" = VDownloader 3.0.720
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A942958E-AF92-7901-861B-7F373A1B6ABA}" = AMD Catalyst Install Manager
"{AAD49C89-CA9D-911E-0407-8EE0521EA24D}" = CCC Help Dutch
"{AAF80000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 8.0 Professional Edition
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1033-7B44-A83000000003}" = Adobe Reader 8.3.1
"{AEA07F97-9088-497c-8821-0F36BD5DC251}" = HPProductAssistant
"{AF7FC1CA-79DF-43c3-90A3-33EFEB9294CE}" = AIO_Scan
"{AFE499B5-FCC4-45E6-A1A5-3C51AE0E539B}" = Mobipocket Creator 4.2
"{B040FEFE-B45F-4e30-B3C6-035F53F544A9}" = c4200_Help
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B22C19AE-6A67-4f28-B541-5AE72FB17A25}" = HP Photosmart All-In-One Software 9.0
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B5FDA445-CAC4-4BA6-A8FB-A7212BD439DE}" = Microsoft XML Parser
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{B823632F-3B72-4514-8861-B961CE263224}" = PostgreSQL 8.3
"{B9F3A6E6-9C77-4535-9ED9-B16C1EBDFEC2}" = C4200
"{BC093E6F-61D2-4F6D-9463-ECDC2CA25462}" = calibre
"{BCD6CD1A-0DBE-412E-9F25-3B500D1E6BA1}" = SolutionCenter
"{BF49AD34-C4F3-115A-CACE-E06EA0B59EDC}" = CCC Help Korean
"{C23CD6DA-1958-43A5-ADD0-59396572E02E}" = Apple Mobile Device Support
"{C2E4B5BD-32DB-4817-A060-341AB17C3F90}" = Bonjour
"{C3075CFB-4EFE-AD80-587A-3FB74338A44D}" = Catalyst Control Center Localization Finnish
"{C3113E55-7BCB-4de3-8EBF-60E6CE6B2196}_is1" = SiSoftware Sandra Lite 2009.SP2
"{C705D235-051D-B65E-DAF2-E4D104F640A6}" = CCC Help Norwegian
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86
"{CCD663AE-610D-4BDF-AAB0-E914B044527D}" = OpenMG Secure Module 4.7.00
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba
"{CEDFF4EA-DFCF-312A-773A-4F743AAF78E2}" = Catalyst Control Center Localization Japanese
"{D08A5DFE-F0C2-74FC-DD56-A3B371E9344D}" = EA Shared Game Component: Activation
"{D0E39A1D-0CEE-4D85-B4A2-E3BE990D075E}" = Destination Component
"{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.4.4 Game
"{D55BA1E9-0517-C325-00BD-B68087923AE9}" = CCC Help Hungarian
"{D719E8F1-6931-40b4-AC0B-5FE2C097F995}" = C4200_doccd
"{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty® - World at War™
"{D848D140-41C3-4A53-86D8-E866A100B4CD}" = PC Connectivity Solution
"{D99C322D-C21B-40C7-AE71-EE51AA096B6E}" = Nokia Flashing Cable Driver
"{DB780B85-B4B5-4864-A49C-9B706B169C93}" = TIPCI
"{DD3D3F5A-BFB9-CEC4-1A86-619E7FF83300}" = Catalyst Control Center Localization Chinese Traditional
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"{E10DB5DA-E576-40EA-A7FC-1CB2A7B283A6}" = NVIDIA PhysX
"{E1B530E5-3515-AC68-CA75-0932BA837A1A}" = CCC Help Thai
"{E2662C24-B31E-4349-A084-32EB76E8B760}" = BufferChm
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series
"{E39A3770-3DDE-404c-B91F-3522947874A3}" = PS_AIO_Software_min
"{E415C943-37E5-473F-8BAE-043C56734124}" = Sp5TTInt
"{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty® 4 - Modern Warfare™
"{E4A0225B-A975-416C-8CF7-C1C025FD32D6}" = YP-U1
"{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218
"{E54F065A-4DCB-1875-222D-CF27620AF646}" = Catalyst Control Center Localization Portuguese
"{E6802BDF-0F93-6DB7-E542-B1B36BAA9FFF}" = Catalyst Control Center Localization French
"{E737A098-F161-4B6F-AF22-86AAE34F6FBD}" = Pro Evolution Soccer 2012
"{E858ECF5-7644-33F3-EBE5-1A6D4E606F5B}" = CCC Help Turkish
"{E91E8912-769D-42F0-8408-0E329443BABC}" = Ralink Wireless LAN Card
"{E9C18EBD-85BE-47D0-AA73-3FEDCC976B04}" = Toolbox
"{EA6DCFC6-BCA2-D901-7417-19261C50802A}" = Catalyst Control Center Localization Hungarian
"{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support
"{EBFF48F5-3CFA-436F-8FD5-94FB01D3A0A7}" = TOSHIBA SD Memory Utilities
"{ED6C5ECD-5AA4-4054-BF67-8F49526E5765}" = O&O Defrag Professional
"{EF1ADA5A-0B1A-4662-8C55-7475A61D8B65}" = DeviceDiscovery
"{EF4F620F-F295-41D7-92C0-6B635709C850}" = Nokia Software Updater
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F214EAA4-A069-4BAF-9DA4-4DB8BEEDE485}" = DVD MovieFactory for TOSHIBA
"{F6527F8D-F203-CD41-7D39-2C6FBB91DCAD}" = CCC Help Italian
"{F72E2DDC-3DB8-4190-A21D-63883D955FE7}" = PSSWCORE
"{FA4FA322-5C90-4d2b-A019-9E588273DED5}" = PS_AIO_Software
"{FA66CFD7-0977-4C45-AACD-A8BB994B1A05}" = Quake Live Mozilla Plugin
"{FBB22939-6AAD-A6EB-5AA1-BAA166F2D032}" = CCC Help Czech
"{FD4B33E1-24AE-4535-AA7B-162B30FB57CD}" = Sp5Intl
"{FE57DE70-95DE-4B64-9266-84DA811053DB}" = HP Update
"{FE890808-EE76-63DF-6D0E-4609D2520DF0}" = Catalyst Control Center Localization German
"{FEC7CD2E-2BB5-40C3-9592-078F64677E6C}" = PC TWIN SHOCK
"{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package
"{FEDD8B8B-6EA0-A35C-6CB4-06F1AF4D7769}" = Catalyst Control Center Localization Norwegian
"{FF62A079-FE47-C34A-AB88-C61CA838B007}" = CCC Help French
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"4Musics OGG to MP3 Converter 4.3_is1" = 4Musics OGG to MP3 Converter 4.3
"504244733D18C8F63FF584AEB290E3904E791693" = Pakiet sterowników systemu Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"5986551A16FD8E9B1B4C89E7AAD17C1BB3196D28" = Pakiet sterowników systemu Windows - Nokia Modem (10/27/2008 7.01.0.1)
"6D296974BAB6CA8429D5E687B292A6DA3E9FBD4A" = Pakiet sterowników systemu Windows - Nokia Modem (10/27/2008 3.9)
"7-Zip" = 7-Zip 4.57
"8461-7759-5462-8226" = Vuze
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Advanced MP3 Catalog_is1" = Advanced MP3 Catalog 3.36
"Advanced MP3 Sound Recorder_is1" = Advanced MP3 Sound Recorder 3.6
"All ATI Software" = ATI - Software Uninstall Utility
"Allok 3GP PSP MP4 iPod Video Converter_is1" = Allok 3GP PSP MP4 iPod Video Converter 6.2.0603
"ALLPlayer V3.1_is1" = ALLPlayer V3.X
"Any Video Converter_is1" = Any Video Converter 3.3.5
"Ashampoo Burning Studio 2009_is1" = Ashampoo Burning Studio 2009
"Audacity_is1" = Audacity 1.2.6
"AutoConnect" = AutoConnect v0.1.3.1
"avast" = avast! Internet Security
"Call of Duty: Black Ops_is1" = Call of Duty: Black Ops
"CCleaner" = CCleaner
"com.ea.Activation.919CACB699904AC5D41B606703500DD39747C02D.1" = EA Shared Game Component: Activation
"Convert PPT to PDF For PowerPoint_is1" = Convert PPT to PDF For PowerPoint 3.50
"DAEMON Tools Lite" = DAEMON Tools Lite
"Driver Cleaner" = Driver Cleaner 3
"DriverAgent.exe" = DriverAgent by eSupport.com
"EA Installer.-49286475" = EA Installer
"EncFlac" = EncFlac 1.1.2
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"ffdshow_is1" = ffdshow v1.1.4150 [2011-12-15]
"FLAC" = FLAC 1.2.1b (remove only)
"Free PS Convert driver_is1" = Free PS Convert driver 8.15
"Free WMA to MP3 Converter_is1" = Free WMA to MP3 Converter 1.16
"Gadu-Gadu 10" = Gadu-Gadu 10
"Google Updater" = Aktualizator Google
"HaaliMkx" = Haali Media Splitter
"HEXelon MAX_is1" = HEXelon MAX 6.07
"HijackThis" = HijackThis 2.0.2
"HP Imaging Device Functions" = HP Imaging Device Functions 9.0
"HP Photosmart Essential" = HP Photosmart Essential 2.01
"HP Solution Center & Imaging Support Tools" = HP Solution Center 9.0
"HPExtendedCapabilities" = HP Customer Participation Program 9.0
"HPOCR" = HP OCR Software 9.0
"ImageMagick 6.3.3 Q16_is1" = ImageMagick 6.3.3-7 Q16 (04/15/07)
"InstallShield_{050C1C8E-4A4D-4C2F-B9AE-67E60EE91B7F}" = Call of Duty® 4 - Modern Warfare™ 1.3 Patch
"InstallShield_{3BD633E0-4BF8-4499-9149-88F0767D449C}" = Call of Duty® 4 - Modern Warfare™ 1.4 Patch
"InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}" = TOSHIBA Hasło administratora
"InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}" = Sprzęt instalacyjny TOSHIBA
"InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center
"InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}" = TOSHIBA Flash Cards Support Utility
"InstallShield_{8503C901-85D7-4262-88D2-8D8B2A7B08B8}" = Call of Duty® 4 - Modern Warfare™ 1.5 Multiplayer Patch
"InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty® 4 - Modern Warfare™ 1.7 Patch
"InstallShield_{A6D4234C-CB02-4048-AC3E-AD09404FA35A}" = Emdedded IR Driver
"InstallShield_{CCD663AE-610D-4BDF-AAB0-E914B044527D}" = OpenMG Secure Module 4.7.00
"InstallShield_{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty® - World at War™
"InstallShield_{DB780B85-B4B5-4864-A49C-9B706B169C93}" = Texas Instruments PCIxx21/x515/xx12 drivers.
"InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty® 4 - Modern Warfare™
"InstallShield_{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package
"ipla" = ipla 2.3.5
"IrfanView" = IrfanView (remove only)
"ISO Commander" = ISO Commander 1.6 (remove only)
"IVONA - syntezator mowy, wersja rehabilitacyjna" = IVONA - syntezator mowy, wersja rehabilitacyjna
"JDownloader" = JDownloader
"Juniper Network Connect 6.3.0" = Juniper Networks Network Connect 6.3.0
"Kingdoms of Amalur Reckoning_is1" = Kingdoms of Amalur Reckoning
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 4.3.4
"LADSPA_plugins-win_is1" = LADSPA_plugins-win-0.4.15
"LastFM_is1" = Last.fm 1.5.4.27091
"Machinarium" = Machinarium
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware wersja 1.61.0.1400
"Mansion Poker" = MansionPoker
"MediaInfo" = MediaInfo 0.7.51
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 Language Pack SP1 - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"MobilityDotNET" = DH Mobility Modder.NET
"Monkey's Audio_is1" = Monkey's Audio
"Mozilla Firefox 12.0 (x86 pl)" = Mozilla Firefox 12.0 (x86 pl)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Mp3tag" = Mp3tag v2.43
"mp4UI" = mp4UI
"Muti ID3 Tag Editor" = Alex Buturuga - Muti ID3 Tag Editor 1.3b1
"NAPIPROJEKT_is1" = NAPIPROJEKT 1.0.6.2
"Nero8Lite_is1" = Nero 8 Lite 8.3.6.0
"Nokia PC Suite" = Nokia PC Suite
"OpenAL" = OpenAL
"OpenMG HotFix4.7-07-13-22-01" = OpenMG Limited Patch 4.7-07-14-05-01
"Opera 11.64.1403" = Opera 11.64
"OSPS_is1" = OSPS-Odinstaluj
"PDFtoEPUB" = PDFtoEPUB
"PIXresizer_is1" = PIXresizer 2.0.3
"Postal 2_is1" = Portal 2
"PowerISO" = PowerISO
"PunkBusterSvc" = PunkBuster Services
"qt7lite_is1" = QT Lite 2.5.1
"QuicktimeAlt_is1" = QuickTime Alternative 1.56
"RayV" = PL-IPTV
"RealAlt_is1" = Real Alternative 2.0.2
"SC_UniPad_is1" = SC UniPad 1.20
"Sina Web TV" = Sina Web TV
"SopCast" = SopCast 3.0.1
"SpeedBit Video Accelerator" = SpeedBit Video Accelerator
"SpeedBit Video Downloader" = SpeedBit Video Downloader
"SubEdit - Vista WMP Patch_is1" = SubEdit - Vista WMP Patch
"SubEdit-Player_is1" = SubEdit-Player
"Syberia" = Syberia
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"System Cleaner 5" = System Cleaner 5
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"The Elder Scrolls V Skyrim_is1" = The Elder Scrolls V Skyrim
"TOSHIBA Software Modem" = TOSHIBA Software Modem
"VideoGet_is1" = VideoGet
"VistaGlazz_is1" = VistaGlazz 2.1
"WebSTAR DPC2100 Uninstall" = Scientific-Atlanta WebSTAR 2000 series Cable Modem
"Winamp" = Winamp
"Winamp Toolbar for Firefox" = Winamp Toolbar for Firefox
"WinAVI Video Converter 9.09.0" = WinAVI Video Converter 9.0
"Windows Media Encoder 9" = Windows Media Encoder 9 Series
"WinPcapInst" = WinPcap 4.1.1
"WinRAR archiver" = Archiwizator WinRAR
"winscp3_is1" = WinSCP 4.1.6
"World of Goo/PL-Polish_is1" = World of Goo

[color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Amazon Kindle" = Amazon Kindle
"Google Chrome" = Google Chrome
"Juniper_Setup_Client" = Juniper Networks Setup Client
"Octoshape Streaming Services" = Octoshape Streaming Services
"Winamp Detect" = Detektor Winampa

[color=#E56717]========== Last 20 Event Log Errors ==========[/color]

[ Application Events ]
Error - 2012-06-07 13:18:27 | Computer Name = Laptop-Warszawa | Source = Application Hang | ID = 1002
Description = Program winamp.exe w wersji 5.6.2.3199 zatrzymał interakcję z systemem
Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji
dotyczących tego problemu, sprawdź historię problemu w panelu sterowania raportami
i rozwiązaniami problemów. Identyfikator procesu: 9c8 Godzina rozpoczęcia: 01cd44c93660bc36
Godzina
zakończenia: 12

Error - 2012-06-07 16:28:40 | Computer Name = Laptop-Warszawa | Source = MsiInstaller | ID = 1024
Description =

Error - 2012-06-07 16:28:50 | Computer Name = Laptop-Warszawa | Source = MsiInstaller | ID = 1024
Description =

Error - 2012-06-07 16:28:59 | Computer Name = Laptop-Warszawa | Source = MsiInstaller | ID = 1024
Description =

Error - 2012-06-07 16:29:04 | Computer Name = Laptop-Warszawa | Source = MsiInstaller | ID = 1024
Description =

Error - 2012-06-07 16:29:08 | Computer Name = Laptop-Warszawa | Source = MsiInstaller | ID = 1024
Description =

Error - 2012-06-07 18:22:21 | Computer Name = Laptop-Warszawa | Source = Perflib | ID = 1008
Description =

Error - 2012-06-08 18:12:11 | Computer Name = Laptop-Warszawa | Source = Perflib | ID = 1010
Description =

Error - 2012-06-08 19:22:59 | Computer Name = Laptop-Warszawa | Source = Perflib | ID = 1008
Description =

Error - 2012-06-09 14:10:37 | Computer Name = Laptop-Warszawa | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd winamp.exe, wersja 5.6.2.3199, sygnatura
czasowa 0x4ee2440b, moduł powodujący błąd gen_audioscrobbler.dll, wersja 1.1.11.0,
sygnatura czasowa 0x4714013b, kod wyjątku 0xc0000005, przesunięcie błędu 0x000321c0,
identyfikator
procesu 0x14cc, godzina rozpoczęcia aplikacji 0x01cd464e938add2d.

Error - 2012-06-09 14:11:59 | Computer Name = Laptop-Warszawa | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd winamp.exe, wersja 5.6.2.3199, sygnatura
czasowa 0x4ee2440b, moduł powodujący błąd gen_audioscrobbler.dll, wersja 1.1.11.0,
sygnatura czasowa 0x4714013b, kod wyjątku 0xc0000005, przesunięcie błędu 0x000321c0,
identyfikator
procesu 0x1a70, godzina rozpoczęcia aplikacji 0x01cd466b322adc7d.

[ Media Center Events ]
Error - 2008-04-17 12:36:48 | Computer Name = Laptop-Warszawa | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: nie można pobrać pakietu MCESpotlight.

[ System Events ]
Error - 2008-12-25 10:58:48 | Computer Name = Laptop-Warszawa | Source = Service Control Manager | ID = 7000
Description =

Error - 2008-12-25 10:58:48 | Computer Name = Laptop-Warszawa | Source = Service Control Manager | ID = 7000
Description =

Error - 2008-12-25 10:58:48 | Computer Name = Laptop-Warszawa | Source = Service Control Manager | ID = 7000
Description =

Error - 2008-12-25 11:14:50 | Computer Name = Laptop-Warszawa | Source = volsnap | ID = 393252
Description = Wykonywanie kopii w tle woluminu C: zostało przerwane, ponieważ nie
można powiększyć magazynu kopii w tle z powodu limitu wprowadzonego przez użytkownika.

Error - 2008-12-25 16:39:24 | Computer Name = Laptop-Warszawa | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 20:36:04 na 2008-12-25 było nieoczekiwane.

Error - 2008-12-25 16:39:33 | Computer Name = Laptop-Warszawa | Source = HTTP | ID = 15016
Description =

Error - 2008-12-25 16:40:54 | Computer Name = Laptop-Warszawa | Source = Service Control Manager | ID = 7000
Description =

Error - 2008-12-25 16:40:54 | Computer Name = Laptop-Warszawa | Source = Service Control Manager | ID = 7000
Description =

Error - 2008-12-25 16:40:54 | Computer Name = Laptop-Warszawa | Source = Service Control Manager | ID = 7000
Description =

Error - 2008-12-26 12:03:08 | Computer Name = Laptop-Warszawa | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 03:07:27 na 2008-12-26 było nieoczekiwane.


< End of report >
[/log]



RSIT:

[log]

Logfile of random's system information tool 1.09 (written by random/random)
Run by Verold at 2012-06-09 23:25:00
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 649 MB (1%) free of 95 GB
Total RAM: 2045 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:26:06, on 2012-06-09
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.19190)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
C:\Program Files\TOSHIBA\Utilities\KeNotify.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\WindowsMobile\wmdSync.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
c:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtProc.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\conime.exe
C:\Program Files\Winamp\winamp.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Verold\Desktop\logi\RSIT.exe
C:\Program Files\trend micro\Verold.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [url="http://www.gazeta.pl/0,0.html?p=128"]http://www.gazeta.pl/0,0.html?p=128[/url]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [url="http://go.microsoft.com/fwlink/?LinkId=69157"]http://go.microsoft....k/?LinkId=69157[/url]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [url="http://go.microsoft.com/fwlink/?LinkId=54896"]http://go.microsoft....k/?LinkId=54896[/url]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [url="http://go.microsoft.com/fwlink/?LinkId=54896"]http://go.microsoft....k/?LinkId=54896[/url]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [url="http://go.microsoft.com/fwlink/?LinkId=69157"]http://go.microsoft....k/?LinkId=69157[/url]
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuze.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: flashget2 urlcatch - {1F364306-AA45-47B5-9F9D-39A8B94E7EF1} - (no file)
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: SBCONVERT - {3017FB3E-9A77-4396-88C5-0EC9548FB42F} - C:\Program Files\SpeedBit Video Downloader\Toolbar\tbcore3.dll
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: FlashGetBHO - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - (no file)
O2 - BHO: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuze.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: GrabberObj Class - {FF7C3CF0-4B15-11D1-ABED-709549C10000} - C:\PROGRA~1\SpeedBit Video Downloader\Toolbar\grabber.dll
O3 - Toolbar: SpeedBit Video Downloader - {0329E7D6-6F54-462D-93F6-F5C3118BADF2} - C:\Program Files\SpeedBit Video Downloader\Toolbar\tbcore3.dll
O3 - Toolbar: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuze.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
O4 - HKLM\..\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
O4 - HKLM\..\Run: [KeNotify] C:\Program Files\TOSHIBA\Utilities\KeNotify.exe
O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe"
O4 - HKLM\..\Run: [Toshiba Registration] C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [OODefragTray] C:\Program Files\OO Software\Defrag\oodtray.exe
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [avast] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Download all by FlashGet3 - C:\Users\Verold\AppData\Roaming\FlashGetBHO\GetAllUrl.htm
O8 - Extra context menu item: Download by FlashGet3 - C:\Users\Verold\AppData\Roaming\FlashGetBHO\GetUrl.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O15 - Trusted Zone: [url="http://software.kuaiche.com"]http://software.kuaiche.com[/url]
O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - [url="http://www.mks.com.pl/skaner/SkanerOnline.cab"]http://www.mks.com.p...kanerOnline.cab[/url]
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} (JuniperSetupClientControl Class) - [url="https://ssl.wum.edu.pl/dana-cached/sc/JuniperSetupClient.cab"]https://ssl.wum.edu....SetupClient.cab[/url]
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - E:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\Alwil Software\Avast5\afwServ.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Diskeeper - Diskeeper Corporation - E:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: Juniper Network Connect Service (dsNcService) - Juniper Networks - C:\Program Files\Juniper Networks\Common Files\dsNcService.exe
O23 - Service: Usługa Google Update (gupdate1c995bddcd4e9da) (gupdate1c995bddcd4e9da) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Usługa Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iolo FileInfoList Service (ioloFileInfoList) - Unknown owner - C:\Program Files\iolo\common\lib\ioloServiceManager.exe (file missing)
O23 - Service: iolo System Service (ioloSystemService) - Unknown owner - C:\Program Files\iolo\common\lib\ioloServiceManager.exe (file missing)
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: O&O Defrag - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: SiSoftware Deployment Agent Service (SandraAgentSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP2\RpcAgentSrv.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SonicStage Back-End Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: CLCV0 (UTSCSI) - Unknown owner - C:\Windows\system32\UTSCSI.EXE

--
End of file - 13482 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Google Software Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3458874613-3300990240-4131716576-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3458874613-3300990240-4131716576-1000UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Verold\AppData\Roaming\Mozilla\Firefox\Profiles\ywmsv06d.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.gazeta.pl/0, 0.html?p=128"

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"bkmrksync@nokia.com"=C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\
"{0329E7D6-6F54-462D-93F6-F5C3118BADF2}"=C:\Program Files\SpeedBit Video Downloader\SPFireFox
"wrc@avast.com"=C:\Program Files\Alwil Software\Avast5\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.2.202.235 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Web Player
"Path"=C:\Program Files\DivX\DivX Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Content Upload Plugin,version=1.0.0]
"Description"=DivX® Content Upload Plugin
"Path"=C:\Program Files\DivX\DivX Content Uploader\npUpload.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0]
"Description"=DivX® Player Plugin for VOD Content
"Path"=C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@idsoftware.com/QuakeLive]
"Description"=
"Path"=C:\ProgramData\id Software\QuakeLive\npquakezero.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pack.google.com/Google Updater;version=14]
"Description"=Google Updater
"Path"=C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@rayv.com/rayvplugin]
"Description"=RayV Plugin
"Path"=C:\Program Files\RayV\RayV\plugins\nprayvplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450]
"Description"=RealPlayer™ LiveConnect-Enabled Plug-In
"Path"=C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448]
"Description"=6.0.12.448
"Path"=C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@veetle.com/vbp;version=0.9.16]
"Description"=Veetle Broadcaster Plugin
"Path"=C:\Program Files\Veetle\VLCBroadcast\npvbp.dll

C:\Program Files\Mozilla Firefox\extensions\
{85E85FF9-E50C-42DE-8A3D-61485FD6C8DB}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{DB9127A2-3381-41ec-82B3-1B6ED4C6F29A}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
FlashGet3_En.xpi
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
npdeployJava1.dll
nppdf32.dll
npPDFXCviewNPPlugin.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
npqtplugin7.dll
npwachk.dll
QuickTimePlugin.class

C:\Program Files\Mozilla Firefox\searchplugins\
allegro-pl.xml
fbc-pl.xml
google.xml
merlin-pl.xml
pwn-pl.xml
wikipedia-pl.xml
wp-pl.xml

C:\Users\Verold\AppData\Roaming\Mozilla\Firefox\Profiles\ywmsv06d.default\extensions\
vshare@toolbar
{0b38152b-1b20-484d-a11f-5e04a9b0661f}
{20a82645-c095-46ed-80e3-08825760534b}

C:\Users\Verold\AppData\Roaming\Mozilla\Firefox\Profiles\ywmsv06d.default\searchplugins\
winamp-search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2011-08-30 61888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1F364306-AA45-47B5-9F9D-39A8B94E7EF1}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-11-18 1082880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3017FB3E-9A77-4396-88C5-0EC9548FB42F}]
SBCONVERT Class - C:\Program Files\SpeedBit Video Downloader\Toolbar\tbcore3.dll [2010-02-15 2447360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java™ Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-03-21 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll [2011-09-27 761840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
Vuze Remote Toolbar - C:\Program Files\Vuze_Remote\tbVuze.dll [2010-09-12 3863136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java™ Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-03-21 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FF7C3CF0-4B15-11D1-ABED-709549C10000}]
GrabberObj Class - C:\PROGRA~1\SpeedBit Video Downloader\Toolbar\grabber.dll [2010-02-15 185944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0329E7D6-6F54-462D-93F6-F5C3118BADF2} - SpeedBit Video Downloader - C:\Program Files\SpeedBit Video Downloader\Toolbar\tbcore3.dll [2010-02-15 2447360]
{ba14329e-9550-4989-b3f2-9732e92d17cc} - Vuze Remote Toolbar - C:\Program Files\Vuze_Remote\tbVuze.dll [2010-09-12 3863136]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"TPwrMain"=C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [2007-03-29 411192]
"HSON"=C:\Program Files\TOSHIBA\TBS\HSON.exe [2006-12-07 55416]
"SmoothView"=C:\Program Files\Toshiba\SmoothView\SmoothView.exe [2007-05-23 509496]
"00TCrdMain"=C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [2007-05-22 538744]
"KeNotify"=C:\Program Files\TOSHIBA\Utilities\KeNotify.exe [2006-11-06 34352]
"SVPWUTIL"=C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe [2006-03-22 438272]
"NDSTray.exe"=NDSTray.exe []
"topi"=C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe [2007-04-02 577536]
"Camera Assistant Software"=C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe [2007-04-10 413696]
"Toshiba Registration"=C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe [2007-05-04 571024]
"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2004-04-13 69632]
"adiras"=C:\Windows\adiras.exe [2007-02-13 194128]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-06-20 1316136]
"amd_dc_opt"=C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"PWRISOVM.EXE"=C:\Program Files\PowerISO\PWRISOVM.EXE [2008-07-07 167936]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-06-02 7518752]
"OODefragTray"=C:\Program Files\OO Software\Defrag\oodtray.exe [2009-09-12 2524416]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2012-04-04 981680]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2011-08-31 40368]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-29 937920]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2012-02-20 59240]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-11-09 343168]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2012-04-04 462408]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-18 254696]
"Windows Mobile-based device management"=C:\Windows\WindowsMobile\wmdSync.exe [2006-11-02 215552]
"QuickTime Task"=C:\Program Files\QuickTime Alternative\QTTask.exe [2012-04-18 421888]
"avast"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2012-03-07 4241512]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM Startup"=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe [2004-04-17 196608]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
"PC Suite Tray"=C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2008-12-03 1205760]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2012-01-19 3477312]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Users\Verold\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=227
"NoDrives"=0
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\uusee\UUSeePlayer.exe"="C:\Program Files\uusee\UUSeePlayer.exe:*:Enabled:UUPlayer"
"C:\Program Files\PPMate\ppmate.exe"="C:\Program Files\PPMate\ppmate.exe:*:Enabled:PPMate"
"C:\Program Files\PPMate\ppamnet.exe"="C:\Program Files\PPMate\ppamnet.exe:*:Enabled:PPMate"
"C:\Program Files\PPStream\PPStream.exe"="C:\Program Files\PPStream\PPStream.exe:*:Enabled:PPSÍřÂçµçĘÓ"
"C:\Program Files\PPStream\PPSAP.exe"="C:\Program Files\PPStream\PPSAP.exe:*:Enabled:PPStream ÍřÂçĽÓËŮĆ÷"
"C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe"="C:\Program Files\FlashGet Network\FlashGet universal\FlashGet.exe:*:Enabled:Flashget2"
"C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdate.exe"="C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdate.exe:*:Enabled:FGLiveUpdate"
"C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateEx.exe"="C:\Program Files\FlashGet Network\FlashGet universal\LiveUpdateEx.exe:*:Enabled:FGLiveUpdateEx"
"C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe"="C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"msacm.dvacm"=C:\PROGRA~1\COMMON~1\ULEADS~1\vio\dvacm.acm
"MSVideo8"=VfWWDM32.dll
"VIDC.FPS1"=frapsvid.dll
"msacm.lhacm"=lhacm.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.DIVX"=divx.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"vidc.tscc"=tsccvid.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux2"=wdmaud.drv
"VIDC.FFDS"=ff_vfw.dll
"msacm.avis"=ff_acm.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2012-06-09 23:25:00 ----D---- C:\rsit
2012-06-09 04:07:27 ----A---- C:\TDSSKiller.2.7.36.0_09.06.2012_04.07.27_log.txt
2012-06-09 01:28:19 ----A---- C:\Windows\system32\drivers\aswFW.sys
2012-06-09 01:23:35 ----A---- C:\Windows\system32\drivers\aswNdis2.sys
2012-06-09 01:23:32 ----A---- C:\Windows\system32\drivers\aswKbd.sys
2012-06-09 01:23:05 ----A---- C:\Windows\system32\drivers\aswNdis.sys
2012-06-09 00:35:47 ----D---- C:\Program Files\SkanerOnline
2012-06-08 01:05:54 ----D---- C:\Windows\temp
2012-06-08 01:03:54 ----SHD---- C:\$RECYCLE.BIN
2012-06-07 23:47:07 ----D---- C:\ProgramData\Spybot - Search & Destroy
2012-06-07 23:47:07 ----D---- C:\Program Files\Spybot - Search & Destroy
2012-05-29 20:11:10 ----A---- C:\Windows\system32\AVERM.dll
2012-05-29 20:11:09 ----A---- C:\Windows\system32\AVEQT.dll
2012-05-29 20:11:05 ----D---- C:\Program Files\Allok 3GP PSP MP4 iPod Video Converter
2012-05-29 20:01:02 ----D---- C:\Program Files\SubEdit-Player
2012-05-15 21:56:18 ----D---- C:\ProgramData\Mozilla
2012-05-15 21:56:15 ----D---- C:\Program Files\Mozilla Maintenance Service
2012-05-14 23:36:37 ----D---- C:\ProgramData\id Software

======List of files/folders modified in the last 1 month======

2012-06-09 23:26:06 ----D---- C:\Program Files\Trend Micro
2012-06-09 23:25:43 ----D---- C:\Windows\Prefetch
2012-06-09 23:25:25 ----D---- C:\Windows\tracing
2012-06-09 04:07:32 ----D---- C:\Windows\system32\drivers
2012-06-09 02:13:42 ----SHD---- C:\System Volume Information
2012-06-09 01:37:26 ----D---- C:\Windows
2012-06-09 01:27:33 ----D---- C:\Windows\system32\catroot
2012-06-09 01:27:33 ----D---- C:\Windows\inf
2012-06-09 01:23:03 ----D---- C:\Windows\System32
2012-06-09 00:35:47 ----SD---- C:\Windows\Downloaded Program Files
2012-06-09 00:35:47 ----D---- C:\Program Files
2012-06-08 01:01:28 ----A---- C:\Windows\system.ini
2012-06-08 00:55:33 ----D---- C:\Windows\AppPatch
2012-06-08 00:55:31 ----D---- C:\Program Files\Common Files
2012-06-07 23:47:07 ----D---- C:\ProgramData
2012-06-07 22:29:08 ----SHD---- C:\Windows\Installer
2012-06-05 22:04:21 ----D---- C:\Users\Verold\AppData\Roaming\Azureus
2012-06-04 02:22:55 ----D---- C:\Program Files\Calibre2
2012-06-03 22:15:17 ----D---- C:\Downloads
2012-05-26 20:38:31 ----D---- C:\Users\Verold\AppData\Roaming\ipla
2012-05-26 20:38:17 ----D---- C:\Program Files\Mozilla Firefox
2012-05-20 16:54:32 ----D---- C:\ProgramData\ipla
2012-05-19 15:09:40 ----D---- C:\Program Files\QuickTime Alternative
2012-05-19 15:08:48 ----D---- C:\ProgramData\Apple Computer
2012-05-15 20:17:40 ----D---- C:\Program Files\Opera
2012-05-15 00:58:07 ----D---- C:\Windows\system32\catroot2
2012-05-14 22:45:08 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2012-05-14 01:07:22 ----A---- C:\Windows\system32\PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdis;avast! Firewall NDIS Filter Service; C:\Windows\system32\DRIVERS\aswNdis.sys [2012-03-07 12112]
R0 aswNdis2;avast! Firewall Core Firewall Service; C:\Windows\system32\drivers\aswNdis2.sys [2012-03-07 196440]
R0 AtiPcie;ATI PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2008-04-28 14352]
R0 LPCFilter;LPC Lower Filter Driver; C:\Windows\system32\DRIVERS\LPCFilter.sys [2006-07-28 19456]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2012-01-30 473656]
R0 tos_sps32;TOSHIBA tos_sps32 Service; C:\Windows\system32\DRIVERS\tos_sps32.sys [2007-04-27 285184]
R0 TVALZ;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\Windows\system32\DRIVERS\TVALZ_O.SYS [2007-11-09 23640]
R0 vburner;vburner; C:\Windows\system32\DRIVERS\vburner.sys [2008-01-08 17408]
R1 aswFW;avast! TDI Firewall driver; C:\Windows\system32\drivers\aswFW.sys [2012-03-07 112984]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2012-03-07 24408]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2012-03-07 35672]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-03-07 612184]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-03-07 337880]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-03-07 53848]
R1 ElRawDisk;ElRawDisk; \??\C:\Windows\system32\drivers\elrawdsk.sys [2008-12-09 20392]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2008-07-07 56108]
R1 Tosrfcom;Bluetooth RFCOMM; C:\Windows\System32\Drivers\tosrfcom.sys [2005-08-01 64896]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-03-07 20696]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-03-07 57688]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2010-04-11 281760]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2010-04-11 25888]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2010-01-27 50704]
R3 AgereSoftModem;TOSHIBA V92 Software Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2006-11-28 1161888]
R3 amdiox86;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox86.sys [2010-02-18 37944]
R3 AmdLLD;AMD Low Level Device Driver; C:\Windows\system32\DRIVERS\AmdLLD.sys [2007-06-29 34304]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2008-07-29 919552]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdLH3.sys [2011-10-17 82960]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-02-04 4303360]
R3 dsNcAdpt;Juniper Network Connect Adapter; C:\Windows\system32\DRIVERS\dsNcAdpt.sys [2008-09-15 23552]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-06-02 2364960]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2012-04-04 22344]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2008-01-19 8192]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2006-12-25 67072]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-06-20 200112]
R3 tdcmdpst;TOSHIBA Writing Engine Filter Driver; C:\Windows\system32\DRIVERS\tdcmdpst.sys [2006-10-18 16128]
R3 tifm21;tifm21; C:\Windows\system32\drivers\tifm21.sys [2007-01-24 290304]
R3 tosporte;Bluetooth COM Port; C:\Windows\system32\DRIVERS\tosporte.sys [2006-10-10 41600]
R3 tosrfbd;Bluetooth RFBUS; C:\Windows\system32\DRIVERS\tosrfbd.sys [2007-02-22 113920]
R3 tosrfbnp;Bluetooth RFBNEP; C:\Windows\System32\Drivers\tosrfbnp.sys [2006-11-20 36480]
R3 tosrfec;Bluetooth ACPI; C:\Windows\system32\DRIVERS\tosrfec.sys [2006-10-23 9216]
R3 Tosrfhid;Bluetooth RFHID; C:\Windows\system32\DRIVERS\Tosrfhid.sys [2007-03-01 73728]
R3 tosrfnds;Bluetooth Personal Area Network; C:\Windows\system32\DRIVERS\tosrfnds.sys [2005-01-06 18612]
R3 Tosrfusb;Bluetooth USB Controller; C:\Windows\system32\DRIVERS\tosrfusb.sys [2007-02-28 41344]
R3 usbvideo;Urządzenie wideo USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2006-11-02 132352]
R3 UVCFTR;UVCFTR; C:\Windows\system32\DRIVERS\UVCFTR_S.SYS [2007-03-12 11264]
S2 E4LOADER;General Purpose USB Driver (e4ldr.sys); C:\Windows\System32\Drivers\e4ldr.sys [2007-01-04 69656]
S2 ELOADER;General Purpose USB Driver (adildr.sys); C:\Windows\System32\Drivers\adildr.sys [2007-02-07 56088]
S3 adiusbaw;USB ADSL WAN Adapter; C:\Windows\system32\DRIVERS\adiusbaw.sys [2007-02-07 118552]
S3 AMDPCI;AMDPCI; \??\C:\Users\Verold\AppData\Local\Temp\AMDPCI.sys []
S3 ASPI;Advanced SCSI Programming Interface Driver; \??\C:\Windows\System32\DRIVERS\ASPI32.sys [2002-07-17 84832]
S3 DKRtWrt;DKRtWrt; C:\Windows\system32\DRIVERS\DKRtWrt.sys [2009-12-10 45616]
S3 Dot4;Sterownik MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-19 131584]
S3 Dot4Print;Sterownik klasy drukowania dla IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-19 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-19 36864]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 e4usbaw;USB ADSL2 WAN Adapter; C:\Windows\system32\DRIVERS\e4usbaw.sys [2007-01-04 104344]
S3 HdAudAddService;Sterownik funkcji Microsoft 1.1 UAA dla usługi standardu High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
S3 MSKSSRV;Serwer proxy usługi Microsoft Streaming; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Serwer proxy zegara Microsoft Streaming; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Serwer proxy menedżera jakości Microsoft Streaming; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Konwerter strumieni Tee/Sink-to-Sink Microsoft Streaming; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2008-09-15 17664]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2008-09-15 22016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 SANDRA;SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP2\WNt500x86\Sandra.sys [2008-11-25 22432]
S3 tbhsd;Tunebite High-Speed Dubbing; C:\Windows\system32\drivers\tbhsd.sys [2008-02-20 27936]
S3 TosRfSnd;Bluetooth Audio; C:\Windows\system32\drivers\tosrfsnd.sys [2007-01-22 53376]
S3 TpChoice;Touch Pad Detection Filter driver; C:\Windows\system32\DRIVERS\TpChoice.sys []
S3 TVICHW32;TVICHW32; \??\C:\Windows\system32\DRIVERS\TVICHW32.SYS [2008-12-22 23600]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2008-09-15 8064]
S3 usb_rndisx;Karta USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2009-04-11 15872]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2010-09-28 41984]
S3 USBCM;Scientific-Atlanta USB Cable Modem Driver; C:\Windows\system32\DRIVERS\Sacm2A.sys [2004-06-10 15429]
S3 usbscan;Sterownik skanera USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-04-11 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2008-09-15 8064]
S4 KR10I;KR10I; C:\Windows\system32\drivers\kr10i.sys [2007-01-18 219392]
S4 KR10N;KR10N; C:\Windows\system32\drivers\kr10n.sys [2007-01-18 211072]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aawservice;Lavasoft Ad-Aware Service; E:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2008-05-27 611664]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Windows\system32\agrsmsvc.exe [2006-10-05 9216]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-11-09 291840]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2011-02-18 37664]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2009-02-04 729088]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2012-03-07 44768]
R2 CFSvcs;ConfigFree Service; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [2006-11-14 40960]
R2 Diskeeper;Diskeeper; E:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe [2009-12-24 1732960]
R2 dsNcService;Juniper Network Connect Service; C:\Program Files\Juniper Networks\Common Files\dsNcService.exe [2008-09-15 431472]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 hpqddsvc;Usługa HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2012-04-04 654408]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 O&O Defrag;O&O Defrag; C:\Program Files\OO Software\Defrag\oodag.exe [2009-09-12 1488128]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-04-21 75064]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 TNaviSrv;TOSHIBA Navi Support Service; C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe [2007-05-17 114688]
R2 TODDSrv;TOSHIBA Optical Disc Drive Service; C:\Windows\system32\TODDSrv.exe [2006-05-25 114688]
R2 TosCoSrv;TOSHIBA Power Saver; C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe [2007-03-29 427576]
R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2007-02-25 125048]
R2 UTSCSI;CLCV0; C:\Windows\system32\UTSCSI.EXE [2009-11-25 45056]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-11-11 620544]
S2 avast! Firewall;avast! Firewall; C:\Program Files\Alwil Software\Avast5\afwServ.exe [2012-03-07 134920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate1c995bddcd4e9da;Usługa Google Update (gupdate1c995bddcd4e9da); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-02-23 133104]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-09-27 194104]
S2 ioloFileInfoList;iolo FileInfoList Service; C:\Program Files\iolo\common\lib\ioloServiceManager.exe []
S2 ioloSystemService;iolo System Service; C:\Program Files\iolo\common\lib\ioloServiceManager.exe []
S2 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 gupdatem;Usługa Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-02-23 133104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-05-15 129976]
S3 MSCSPTISRV;MSCSPTISRV; C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [2006-12-14 45056]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe []
S3 PACSPTISVR;PACSPTISVR; C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [2006-12-14 57344]
S3 SandraAgentSrv;SiSoftware Deployment Agent Service; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP2\RpcAgentSrv.exe [2008-12-11 98488]
S3 SonicStage Back-End Service;SonicStage Back-End Service; C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe [2007-02-05 112184]
S3 SPTISRV;Sony SPTI Service; C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe [2006-12-14 69632]
S3 SSScsiSV;SonicStage SCSI Service; C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe [2007-02-05 75320]
S4 Bonjour Service;Usługa Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2011-04-06 349472]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2006-08-23 49152]

-----------------EOF-----------------
[/log]

Ma ktoś jeszcze jakiś pomysł co może być przyczyną???

Natsuki Kuga
komentarz
komentarz

Do OTL wklej:
[log]
:OTL
IE - HKCU\..\SearchScopes\{B5B15B11-E3DF-41a6-AC32-2452FB61C94F}: "URL" = [url="http://www.ask.com/w...q={searchTerms}"]http://www.ask.com/w...q={searchTerms}[/url]
IE - HKLM\..\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuze.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuze.dll (Conduit Ltd.)
[2011-01-25 18:44:41 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Users\Verold\AppData\Roaming\mozilla\Firefox\Profiles\ywmsv06d.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2011-01-29 05:31:09 | 000,001,196 | ---- | M] () -- C:\Users\Verold\AppData\Roaming\Mozilla\Firefox\Profiles\ywmsv06d.default\searchplugins\winamp-search.xml
O2 - BHO: (no name) - {1F364306-AA45-47B5-9F9D-39A8B94E7EF1} - No CLSID value found.
O2 - BHO: (SBCONVERT Class) - {3017FB3E-9A77-4396-88C5-0EC9548FB42F} - C:\Program Files\SpeedBit Video Downloader\Toolbar\tbcore3.dll ()
O2 - BHO: (no name) - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - No CLSID value found.
O2 - BHO: (Vuze Remote Toolbar) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuze.dll (Conduit Ltd.)
O2 - BHO: (GrabberObj Class) - {FF7C3CF0-4B15-11D1-ABED-709549C10000} - C:\Program Files\SpeedBit Video Downloader\Toolbar\Grabber.dll (Speedbit Ltd.)
O3 - HKLM\..\Toolbar: (SpeedBit Video Downloader) - {0329E7D6-6F54-462D-93F6-F5C3118BADF2} - C:\Program Files\SpeedBit Video Downloader\Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (Vuze Remote Toolbar) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuze.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (SpeedBit Video Downloader) - {0329E7D6-6F54-462D-93F6-F5C3118BADF2} - C:\Program Files\SpeedBit Video Downloader\Toolbar\tbcore3.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Vuze Remote Toolbar) - {BA14329E-9550-4989-B3F2-9732E92D17CC} - C:\Program Files\Vuze_Remote\tbVuze.dll (Conduit Ltd.)
O4 - HKLM..\Run: [NDSTray.exe] NDSTray.exe File not found
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
O34 - HKLM BootExecute: (autocheck OODBS)
@Alternate Data Stream - 498 bytes -> C:\ProgramData\TEMP:05EE1EEF
@Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:3457FAC4

:Files
C:\Program Files\SpeedBit Video Downloader\Toolbar

:Reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1F364306-AA45-47B5-9F9D-39A8B94E7EF1}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3017FB3E-9A77-4396-88C5-0EC9548FB42F}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FF7C3CF0-4B15-11D1-ABED-709549C10000}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{0329E7D6-6F54-462D-93F6-F5C3118BADF2}"
"{ba14329e-9550-4989-b3f2-9732e92d17cc}"

:Commands
[emptytemp]
[/log]
[b]Wykonaj skrypt,[/b] pokaż raport.

Pobierz [url="http://jpshortstuff.247fixes.com/SystemLook.exe"][b]SystemLook[/b][/url] i wklej:
[code]
:file
C:\Windows\System32\UTSCSI.EXE
C:\Windows\cadkasdeinst01e.exe

:service
a1dp0iel
[/code]
[b]Look,[/b] pokaż raport.

Pokaż zawartość pliku [b]C:\TDSSKiller.2.7.36.0_09.06.2012_04.07.27_log.txt[/b] .

Po wykonaniu zaprezentuj zestaw nowych logów.

Wciąż szukasz rozwiązania problemu? Napisz teraz na forum!

Możesz zadać pytanie bez konieczności rejestracji - wystarczy, że wypełnisz formularz.

×
×
  • Dodaj nową pozycję...

Powiadomienie o plikach cookie

Strona wykorzystuje pliki cookies w celu prawidłowego świadczenia usług i wygody użytkowników. Warunki przechowywania i dostępu do plików cookies możesz zmienić w ustawieniach przeglądarki.