Witam,jakiś czas temu mając Viste64 większość gier od tak sobie zaczeła sie zawieszać tzn.niebieski obraz i brzęczenie w głośnikach,sformatowałem.Zainstalowałem Viste64,tymrazem home,sterowniki i wszystko co potrzeba,dalej te same zawiechy,zainstalowałem windows 7 i dalej to samo,gry które wcześniej działały teraz sie zawieszają.
Na inny partycjach mam 600gb danych.Prosze o pomoc.
Notoryczne zawieszanie podczas grania na Viście i 7
Rozpoczęty przez
mullen87
, 02 11 2009 19:27
17 odpowiedzi w tym temacie
#2
Celdur
-
-
- 6 100 postów
Republic of Gamers
Napisano 02 11 2009 - 20:10
Niebieski obraz, tzw. "Blue Screen" przeważnie może oznaczać problem z pamięcią RAM, jednakże może to być także problem z jakimś np. sterownikiem.
Możliwe też, że jeśli podkręciłeś CPU to przesadziłeś z szyną FSB. Zwykle blue screen'y są zapisywane w postaci logów i można zobaczyć co się z czym pogryzło.
Z tego co pamiętam to w Vista był chyba podkatalog "memdump"
Możliwe też, że jeśli podkręciłeś CPU to przesadziłeś z szyną FSB. Zwykle blue screen'y są zapisywane w postaci logów i można zobaczyć co się z czym pogryzło.
Z tego co pamiętam to w Vista był chyba podkatalog "memdump"
#3
brutus3
-
-
- 2 406 postów
Profesjonalista
Napisano 02 11 2009 - 21:44
Wykasuj partycję systemową używając do tego płyty ratunkowej, wykasuj partycję i sformatuj pod Linux-a, potem sformatuj pod Windowsa i wtedy zainstaluj system jaki chcesz, Vistę lub Windowsa 7.
Ręczę ci że będzie po problemie.
Ręczę ci że będzie po problemie.
#4
mullen87
-
-
- 45 postów
Początkujący
Napisano 02 11 2009 - 22:31
Podpis problemu:
Nazwa zdarzenia problemu: BlueScreen
Wersja systemu operacyjnego: 6.1.7600.2.0.0.768.3
Identyfikator ustawień regionalnych: 1045
Dodatkowe informacje o problemie:
BCCode: 124
BCP1: 0000000000000000
BCP2: FFFFFA8004B908F8
BCP3: 0000000000000000
BCP4: 0000000000000000
OS Version: 6_1_7600
Service Pack: 0_0
Product: 768_1
Nazwa zdarzenia problemu: BlueScreen
Wersja systemu operacyjnego: 6.1.7600.2.0.0.768.3
Identyfikator ustawień regionalnych: 1045
Dodatkowe informacje o problemie:
BCCode: 124
BCP1: 0000000000000000
BCP2: FFFFFA8004B908F8
BCP3: 0000000000000000
BCP4: 0000000000000000
OS Version: 6_1_7600
Service Pack: 0_0
Product: 768_1
#6
mullen87
-
-
- 45 postów
Początkujący
Napisano 03 11 2009 - 00:22
Użyłem WinDbg
Symbol search path is: C:\Symbols
Executable search path is: C:\Symbols2
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Machine Name:
Kernel base = 0xfffff800`01c17000 PsLoadedModuleList = 0xfffff800`01e54e50
Debug session time: Mon Nov 2 21:40:18.350 2009 (GMT+1)
System Uptime: 0 days 0:00:06.162
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
...i co teraz,to ntoskrnl.exe wywala mi gry?????
ADDITIONAL_DEBUG_TEXT:
Use '!findthebuild' command to search for the target build information.
If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols
FAULTING_MODULE: fffff80001c17000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 0
BUGCHECK_STR: 0x124_GenuineIntel
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
CURRENT_IRQL: 0
w systemie mam kilka tych plików ntoskrnl.exe
Symbol search path is: C:\Symbols
Executable search path is: C:\Symbols2
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS Personal
Machine Name:
Kernel base = 0xfffff800`01c17000 PsLoadedModuleList = 0xfffff800`01e54e50
Debug session time: Mon Nov 2 21:40:18.350 2009 (GMT+1)
System Uptime: 0 days 0:00:06.162
Unable to load image ntoskrnl.exe, Win32 error 0n2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
...i co teraz,to ntoskrnl.exe wywala mi gry?????
ADDITIONAL_DEBUG_TEXT:
Use '!findthebuild' command to search for the target build information.
If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols
FAULTING_MODULE: fffff80001c17000 nt
DEBUG_FLR_IMAGE_TIMESTAMP: 0
BUGCHECK_STR: 0x124_GenuineIntel
CUSTOMER_CRASH_COUNT: 1
DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT
CURRENT_IRQL: 0
w systemie mam kilka tych plików ntoskrnl.exe
#7
brutus3
-
-
- 2 406 postów
Profesjonalista
Napisano 03 11 2009 - 11:14
Kolego napisałem ci wcześniej co masz zrobić, jeśli chcesz się bawić w łapanie wirusów czy śmieci w komputerze to zrób loga i załóż wątek w temacie Bezpieczeństwo komputera. Ale jeśli nie chcesz się w to bawić i zależy ci na czasie to zrób format partycji systemowej tu masz opis :Bezpieczeństwo komutera , jeśli postąpisz tak jak jest w opisie to pozbędziesz się problemu a na przyszłość będziesz miał pewność że komputer cię nie zawiedzie.
Użytkownik Celdur edytował ten post 03 11 2009 - 12:32
Czy On napisał, że chce szukać wirusów? Dla Ciebie jest zawsze tylko jedno wyjście z trudnej sytuacji.. Formatowanie.
#8
mullen87
-
-
- 45 postów
Początkujący
Napisano 03 11 2009 - 16:30
Łapanie wirusów,jakich wirusów?jakich śmieci,pisałem że mam problem z wirusami?Wymieniłem dysk na stary,podzieliłem na partycje,zainstalowałem Windows 7 i dalej to samo....
#9
brutus3
-
-
- 2 406 postów
Profesjonalista
Napisano 03 11 2009 - 16:57
Po pierwsze instalacja a a niedbała instalacja to dwie różnice, daj loga.
Użytkownik Celdur edytował ten post 04 11 2009 - 10:10
"Niedbała instalacja" - Jak masz coś na myśli to to napisz, a nie walisz swoimi skrótami myślowymi.
#10
mullen87
-
-
- 45 postów
Początkujący
Napisano 03 11 2009 - 17:12
C:\Windows\SysWOW64\Ctxfihlp.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\SysWOW64\CTXFISPI.EXE
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Browser Defender BHO - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - E:\programy\Spyware Doctor\BDT\PCTBrowserDefender.dll
O3 - Toolbar: PC Tools Browser Guard - {472734EA-242A-422B-ADF8-83D1E48CC825} - E:\programy\Spyware Doctor\BDT\PCTBrowserDefender.dll
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'USŁUGA SIECIOWA')
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files (x86)\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files (x86)\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files (x86)\BitComet\BitComet.exe/AddAllLink.htm
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Usuga stanu ASP.NET (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Browser Defender Update Service - Threat Expert Ltd. - E:\programy\Spyware Doctor\BDT\BDTUpdateService.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - E:\programy\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - E:\programy\Spyware Doctor\pctsSvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\SysWOW64\CTXFISPI.EXE
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Browser Defender BHO - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - E:\programy\Spyware Doctor\BDT\PCTBrowserDefender.dll
O3 - Toolbar: PC Tools Browser Guard - {472734EA-242A-422B-ADF8-83D1E48CC825} - E:\programy\Spyware Doctor\BDT\PCTBrowserDefender.dll
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'USŁUGA SIECIOWA')
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files (x86)\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files (x86)\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files (x86)\BitComet\BitComet.exe/AddAllLink.htm
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Usuga stanu ASP.NET (aspnet_state) - Unknown owner - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Browser Defender Update Service - Threat Expert Ltd. - E:\programy\Spyware Doctor\BDT\BDTUpdateService.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - E:\programy\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - E:\programy\Spyware Doctor\pctsSvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
#11
Jakub566
-
-
- 897 postów
Pedobear
Napisano 03 11 2009 - 18:42
Wytłumacz mi co to znaczy...niedbała instalacja
Co do logów, nie widzę nic nadzwyczajnego - może ktoś inny coś zobaczy.
Jak dla mnie to raczej problem sprzętowy, żadne formatowanie nie pomoże. Na razie ściągnij Memtesta i przetestuj nim pamięć RAM.
Zresetuj również ustawienia w biosie.
Memtest 4.0:
http://www.instalki.pl/programy/download/testowanie_i_diagnostyka/MemTest.php
#12
brutus3
-
-
- 2 406 postów
Profesjonalista
Napisano 04 11 2009 - 09:58
To przykład kompletnego logu nie sugeruj się 32 bitami.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:39:02, on 2009-11-04
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\PC Tools Firewall Plus\FWService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\UPSMON\UPSMON_Service.Exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe
C:\Program Files\UPSMON\UPSMON.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.atcomet.com/b/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [00PCTFW] "C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe" -s
O4 - HKLM\..\Run: [UPSMON] C:\Program Files\UPSMON\UPSMON.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Picture Motion Browser Media Check Tool.lnk.disabled
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creat...15108/CTPID.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A872B4A0-8406-4192-84EE-767FF32DE518}: NameServer = 217.30.129.149,217.30.137.200
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: InCD Helper (read only) (InCDsrvR) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: lxcc_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxcccoms.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - PC Tools - C:\Program Files\PC Tools Firewall Plus\FWService.exe
O23 - Service: UPSMONService - Unknown owner - C:\Program Files\UPSMON\UPSMON_Service.Exe
--
End of file - 5455 bytes
------------------------------------------------------------------------------------------------------------------------
Jakub566
Co to jest niedbała instalacja systemu to zapoznaj się z tym: Komputery a bezpieczeństwo
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:39:02, on 2009-11-04
Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\PC Tools Firewall Plus\FWService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\UPSMON\UPSMON_Service.Exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe
C:\Program Files\UPSMON\UPSMON.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.atcomet.com/b/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [00PCTFW] "C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe" -s
O4 - HKLM\..\Run: [UPSMON] C:\Program Files\UPSMON\UPSMON.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Picture Motion Browser Media Check Tool.lnk.disabled
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creat...15108/CTPID.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A872B4A0-8406-4192-84EE-767FF32DE518}: NameServer = 217.30.129.149,217.30.137.200
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: InCD Helper (read only) (InCDsrvR) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: lxcc_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxcccoms.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - PC Tools - C:\Program Files\PC Tools Firewall Plus\FWService.exe
O23 - Service: UPSMONService - Unknown owner - C:\Program Files\UPSMON\UPSMON_Service.Exe
--
End of file - 5455 bytes
------------------------------------------------------------------------------------------------------------------------
Jakub566
Co to jest niedbała instalacja systemu to zapoznaj się z tym: Komputery a bezpieczeństwo
#14
mullen87
-
-
- 45 postów
Początkujący
Napisano 07 11 2009 - 14:17
OTL.txt
OTL logfile created on: 2009-11-07 13:17:12 - Run 1
OTL by OldTimer - Version 3.1.4.0 Folder = C:\Users\dawido\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
4,00 Gb Total Physical Memory | 2,87 Gb Available Physical Memory | 71,80% Memory free
4,00 Gb Paging File | 4,00 Gb Available in Paging File | 100,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 68,36 Gb Total Space | 36,87 Gb Free Space | 53,94% Space Free | Partition Type: NTFS
Drive D: | 464,40 Gb Total Space | 254,70 Gb Free Space | 54,85% Space Free | Partition Type: NTFS
Drive E: | 398,75 Gb Total Space | 10,89 Gb Free Space | 2,73% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: DAWIDO-KOMPUTER
Current User Name: dawido
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
========== Processes (SafeList) ==========
PRC - [2009-11-07 13:15:34 | 00,528,896 | ---- | M] (OldTimer Tools) -- C:\Users\dawido\Desktop\OTL.exe
PRC - [2009-11-07 12:12:26 | 00,323,392 | ---- | M] (BitTorrent, Inc.) -- C:\Users\dawido\Program Files (x86)\DNA\btdna.exe
PRC - [2009-11-07 12:12:26 | 00,323,392 | ---- | M] (BitTorrent, Inc.) -- C:\Users\dawido\Program Files (x86)\DNA\btdna.exe
PRC - [2009-11-03 21:16:08 | 00,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Java\jre6\bin\jusched.exe
PRC - [2009-11-01 12:26:34 | 00,075,064 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2009-10-28 16:28:06 | 00,908,280 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2009-10-28 16:28:06 | 00,908,280 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2009-10-28 16:28:06 | 00,908,280 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2009-10-28 01:33:12 | 02,665,328 | ---- | M] () -- C:\Program Files (x86)\GamersFirst\LIVE!\Live.exe
PRC - [2009-10-08 11:31:44 | 00,112,592 | ---- | M] (Threat Expert Ltd.) -- E:\programy\Spyware Doctor\BDT\BDTUpdateService.exe
PRC - [2009-10-08 11:31:44 | 00,112,592 | ---- | M] (Threat Expert Ltd.) -- E:\programy\Spyware Doctor\BDT\BDTUpdateService.exe
PRC - [2009-09-15 12:56:48 | 00,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe
PRC - [2009-09-15 12:56:43 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2009-09-15 12:56:43 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2009-09-15 12:56:43 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2009-09-15 12:56:28 | 00,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
PRC - [2009-09-15 12:54:13 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009-09-15 12:54:13 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009-09-15 12:54:13 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009-09-15 12:54:13 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009-09-15 12:54:13 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009-09-15 12:54:13 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009-09-15 12:49:40 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
PRC - [2009-07-13 23:28:00 | 00,024,576 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysWOW64\Ctxfihlp.exe
PRC - [2009-07-13 23:22:08 | 01,263,616 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysWOW64\CTxfispi.exe
PRC - [2009-02-23 10:43:54 | 00,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
PRC - [2009-02-23 10:43:54 | 00,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
PRC - [2009-02-23 10:43:54 | 00,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
PRC - [2009-02-23 10:43:54 | 00,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
PRC - [2008-09-30 12:48:28 | 00,935,208 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
========== Modules (SafeList) ==========
MOD - [2009-11-07 13:15:34 | 00,528,896 | ---- | M] (OldTimer Tools) -- C:\Users\dawido\Desktop\OTL.exe
MOD - [2009-07-14 02:16:17 | 01,123,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll
MOD - [2009-07-14 02:16:17 | 00,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll
MOD - [2009-07-14 02:16:15 | 00,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll
MOD - [2009-07-14 02:16:15 | 00,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll
MOD - [2009-07-14 02:14:57 | 00,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll
MOD - [2009-07-14 02:03:50 | 01,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV:64bit: - [2009-09-15 12:56:43 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus)
SRV:64bit: - [2009-09-15 12:56:28 | 00,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner)
SRV:64bit: - [2009-09-15 12:54:13 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner)
SRV:64bit: - [2009-09-15 12:49:40 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv)
SRV:64bit: - [2009-07-30 06:40:54 | 00,202,752 | ---- | M] (AMD) -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009-07-14 02:41:59 | 00,229,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wwansvc.dll -- (WwanSvc)
SRV:64bit: - [2009-07-14 02:41:56 | 00,202,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wbiosrvc.dll -- (WbioSrvc)
SRV:64bit: - [2009-07-14 02:41:56 | 00,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\umpo.dll -- (Power)
SRV:64bit: - [2009-07-14 02:41:55 | 00,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\themeservice.dll -- (Themes)
SRV:64bit: - [2009-07-14 02:41:54 | 00,065,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sppuinotify.dll -- (sppuinotify)
SRV:64bit: - [2009-07-14 02:41:54 | 00,029,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sensrsvc.dll -- (SensrSvc)
SRV:64bit: - [2009-07-14 02:41:53 | 00,327,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pnrpsvc.dll -- (PNRPsvc)
SRV:64bit: - [2009-07-14 02:41:53 | 00,327,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pnrpsvc.dll -- (p2pimsvc)
SRV:64bit: - [2009-07-14 02:41:53 | 00,187,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\provsvc.dll -- (HomeGroupProvider)
SRV:64bit: - [2009-07-14 02:41:53 | 00,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\RpcEpMap.dll -- (RpcEptMapper)
SRV:64bit: - [2009-07-14 02:41:53 | 00,025,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pnrpauto.dll -- (PNRPAutoReg)
SRV:64bit: - [2009-07-14 02:41:27 | 01,011,712 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009-07-14 02:41:18 | 00,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ListSvc.dll -- (HomeGroupListener)
SRV:64bit: - [2009-07-14 02:40:54 | 01,127,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\FntCache.dll -- (FontCache)
SRV:64bit: - [2009-07-14 02:40:28 | 00,314,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dhcpcore.dll -- (Dhcp)
SRV:64bit: - [2009-07-14 02:40:28 | 00,291,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\defragsvc.dll -- (defragsvc)
SRV:64bit: - [2009-07-14 02:40:13 | 00,083,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\bthserv.dll -- (bthserv)
SRV:64bit: - [2009-07-14 02:40:10 | 00,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\bdesvc.dll -- (BDESVC)
SRV:64bit: - [2009-07-14 02:40:05 | 00,114,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\AxInstSv.dll -- (AxInstSV)
SRV:64bit: - [2009-07-14 02:40:01 | 00,032,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\appidsvc.dll -- (AppIDSvc)
SRV:64bit: - [2009-07-14 02:39:56 | 01,525,248 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
SRV:64bit: - [2009-07-14 02:39:51 | 01,503,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wbengine.exe -- (wbengine)
SRV:64bit: - [2009-07-14 02:39:28 | 03,524,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sppsvc.exe -- (sppsvc)
SRV:64bit: - [2009-07-14 02:39:11 | 00,689,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\FXSSVC.exe -- (Fax)
SRV - [2009-11-01 12:26:34 | 00,075,064 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2009-10-14 20:25:35 | 00,079,360 | ---- | M] (Creative Labs) -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
SRV - [2009-10-08 11:31:44 | 00,112,592 | ---- | M] (Threat Expert Ltd.) -- E:\programy\Spyware Doctor\BDT\BDTUpdateService.exe -- (Browser Defender Update Service)
SRV - [2009-09-23 13:33:42 | 01,141,200 | ---- | M] (PC Tools) -- E:\programy\Spyware Doctor\pctsSvc.exe -- (sdCoreService)
SRV - [2009-09-23 12:17:22 | 00,358,600 | ---- | M] (PC Tools) -- E:\programy\Spyware Doctor\pctsAuxs.exe -- (sdAuxService)
SRV - [2009-07-14 04:20:14 | 00,000,000 | ---D | M] -- C:\Windows\Vss -- (VSS)
SRV - [2009-07-14 04:20:14 | 00,000,000 | ---D | M] -- C:\Windows\SysWOW64\Msdtc -- (MSDTC)
SRV - [2009-07-14 02:39:09 | 00,696,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehrecvr.exe -- (ehRecvr)
SRV - [2009-07-14 02:39:09 | 00,127,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehsched.exe -- (ehSched)
SRV - [2009-07-14 02:16:12 | 00,165,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\provsvc.dll -- (HomeGroupProvider)
SRV - [2009-07-14 02:15:11 | 00,253,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp)
SRV - [2009-07-13 21:30:11 | 00,061,056 | ---- | M] () -- C:\Windows\SysWOW64\wbem\vds.mof -- (vds)
SRV - [2009-06-10 22:23:09 | 00,066,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009-06-10 21:39:58 | 00,089,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_64)
SRV - [2009-06-10 21:30:59 | 00,042,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0)
SRV - [2009-06-10 21:30:45 | 00,856,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc)
SRV - [2009-06-02 09:10:08 | 00,637,952 | ---- | M] (Nokia.) -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2009-02-23 10:43:54 | 00,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)
SRV - [2008-09-30 12:48:28 | 00,935,208 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
========== Driver Services (SafeList) ==========
DRV:64bit: - [2009-11-02 11:49:12 | 00,834,544 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2009-10-31 16:34:38 | 00,314,016 | ---- | M] () -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)
DRV:64bit: - [2009-10-31 16:34:38 | 00,043,680 | ---- | M] () -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)
DRV:64bit: - [2009-09-23 16:10:04 | 00,218,056 | ---- | M] (PC Tools) -- C:\Windows\SysNative\drivers\PCTCore64.sys -- (PCTCore)
DRV:64bit: - [2009-09-15 12:55:43 | 00,089,680 | ---- | M] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2009-09-15 12:55:24 | 00,022,096 | ---- | M] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2009-09-15 12:55:16 | 00,065,616 | ---- | M] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2009-09-15 12:54:34 | 00,059,472 | ---- | M] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2009-09-15 12:54:24 | 00,027,216 | ---- | M] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswRdr.sys -- (aswRdr)
DRV:64bit: - [2009-07-30 14:24:38 | 06,103,552 | ---- | M] (ATI Technologies Inc.) -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2009-07-24 07:49:00 | 00,119,312 | ---- | M] (ATI Technologies, Inc.) -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV:64bit: - [2009-07-14 02:52:21 | 00,106,576 | ---- | M] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009-07-14 02:52:21 | 00,028,752 | ---- | M] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009-07-14 02:52:20 | 00,194,128 | ---- | M] (AMD Technologies Inc.) -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009-07-14 02:48:04 | 00,153,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ksecpkg.sys -- (KSecPkg)
DRV:64bit: - [2009-07-14 02:48:04 | 00,065,600 | ---- | M] (LSI Corporation) -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009-07-14 02:48:04 | 00,014,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hwpolicy.sys -- (hwpolicy)
DRV:64bit: - [2009-07-14 02:47:49 | 00,055,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fsdepends.sys -- (FsDepends)
DRV:64bit: - [2009-07-14 02:47:48 | 00,077,888 | ---- | M] (Hewlett-Packard Company) -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009-07-14 02:45:56 | 00,022,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\wimmount.sys -- (WIMMount)
DRV:64bit: - [2009-07-14 02:45:55 | 00,217,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\vhdmp.sys -- (vhdmp)
DRV:64bit: - [2009-07-14 02:45:55 | 00,036,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\vdrvroot.sys -- (vdrvroot)
DRV:64bit: - [2009-07-14 02:45:55 | 00,024,656 | ---- | M] (Promise Technology) -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009-07-14 02:45:46 | 00,214,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rdyboost.sys -- (rdyboost)
DRV:64bit: - [2009-07-14 02:45:45 | 00,050,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pcw.sys -- (pcw)
DRV:64bit: - [2009-07-14 02:43:14 | 00,460,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\cng.sys -- (CNG)
DRV:64bit: - [2009-07-14 02:43:13 | 00,223,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fvevol.sys -- (fvevol)
DRV:64bit: - [2009-07-14 01:54:52 | 01,613,336 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysNative\drivers\ha20x22k.sys -- (ha20x22k)
DRV:64bit: - [2009-07-14 01:54:38 | 01,568,792 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysNative\drivers\ha20x2k.sys -- (ha20x2k)
DRV:64bit: - [2009-07-14 01:54:28 | 00,118,296 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysNative\drivers\emupia2k.sys -- (emupia)
DRV:64bit: - [2009-07-14 01:54:18 | 00,213,016 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysNative\drivers\ctsfm2k.sys -- (ctsfm2k)
DRV:64bit: - [2009-07-14 01:54:12 | 00,015,896 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysNative\drivers\ctprxy2k.sys -- (ctprxy2k)
DRV:64bit: - [2009-07-14 01:54:04 | 00,179,224 | ---- | M] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\ctoss2k.sys -- (ossrv)
DRV:64bit: - [2009-07-14 01:53:54 | 00,696,984 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysNative\drivers\ctaud2k.sys -- (ctaud2k)
DRV:64bit: - [2009-07-14 01:53:46 | 00,580,632 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysNative\drivers\ctac32k.sys -- (ctac32k)
DRV:64bit: - [2009-07-14 01:53:36 | 01,445,912 | ---- | M] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\CTEXFIFX.sys -- (CTEXFIFX.SYS)
DRV:64bit: - [2009-07-14 01:53:36 | 01,445,912 | ---- | M] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\CTEXFIFX.sys -- (CTEXFIFX)
DRV:64bit: - [2009-07-14 01:53:24 | 00,095,256 | ---- | M] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\CTHWIUT.sys -- (CTHWIUT.SYS)
DRV:64bit: - [2009-07-14 01:53:24 | 00,095,256 | ---- | M] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\CTHWIUT.sys -- (CTHWIUT)
DRV:64bit: - [2009-07-14 01:53:16 | 00,230,424 | ---- | M] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\CT20XUT.sys -- (CT20XUT.SYS)
DRV:64bit: - [2009-07-14 01:53:16 | 00,230,424 | ---- | M] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\CT20XUT.sys -- (CT20XUT)
DRV:64bit: - [2009-07-14 01:17:46 | 00,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rdpbus.sys -- (rdpbus)
DRV:64bit: - [2009-07-14 01:16:35 | 00,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\RDPREFMP.sys -- (RDPREFMP)
DRV:64bit: - [2009-07-14 01:10:24 | 00,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\agilevpn.sys -- (RasAgileVpn)
DRV:64bit: - [2009-07-14 01:09:26 | 00,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\wfplwf.sys -- (WfpLwf)
DRV:64bit: - [2009-07-14 01:08:13 | 00,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ndiscap.sys -- (NdisCap)
DRV:64bit: - [2009-07-14 01:07:21 | 00,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\vwifibus.sys -- (vwifibus)
DRV:64bit: - [2009-07-14 01:07:13 | 00,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\1394ohci.sys -- (1394ohci)
DRV:64bit: - [2009-07-14 01:07:00 | 00,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\HdAudio.sys -- (HdAudAddService)
DRV:64bit: - [2009-07-14 01:06:52 | 00,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\umpass.sys -- (UmPass)
DRV:64bit: - [2009-07-14 01:06:32 | 00,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:64bit: - [2009-07-14 01:06:24 | 00,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\mshidkmdf.sys -- (mshidkmdf)
DRV:64bit: - [2009-07-14 01:05:37 | 00,112,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WUDFPf.sys -- (WudfPf)
DRV:64bit: - [2009-07-14 01:02:08 | 00,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\MTConfig.sys -- (MTConfig)
DRV:64bit: - [2009-07-14 01:00:34 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\CompositeBus.sys -- (CompositeBus)
DRV:64bit: - [2009-07-14 01:00:13 | 00,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\beep.sys -- (Beep)
DRV:64bit: - [2009-07-14 00:52:39 | 00,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\appid.sys -- (AppID)
DRV:64bit: - [2009-07-14 00:50:17 | 00,029,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\scfilter.sys -- (scfilter)
DRV:64bit: - [2009-07-14 00:37:18 | 00,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\discache.sys -- (discache)
DRV:64bit: - [2009-07-14 00:31:06 | 00,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidbatt.sys -- (HidBatt)
DRV:64bit: - [2009-07-14 00:31:03 | 00,017,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\CmBatt.sys -- (CmBatt)
DRV:64bit: - [2009-07-14 00:27:17 | 00,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\acpipmi.sys -- (AcpiPmi)
DRV:64bit: - [2009-07-14 00:19:25 | 00,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\amdppm.sys -- (AmdPPM)
DRV:64bit: - [2009-06-10 21:35:53 | 00,051,712 | ---- | M] (Realtek Semiconductor Corporation ) -- C:\Windows\SysNative\drivers\Rtnic64.sys -- (RTL8023x64)
DRV:64bit: - [2009-06-10 21:35:33 | 00,389,120 | ---- | M] (Marvell) -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)
DRV:64bit: - [2009-06-10 21:34:33 | 03,286,016 | ---- | M] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009-06-10 21:34:28 | 00,468,480 | ---- | M] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009-06-10 21:34:23 | 00,270,848 | ---- | M] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009-06-10 21:31:59 | 00,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009-05-23 00:08:37 | 00,036,352 | ---- | M] (Elaborate Bytes AG) -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone)
DRV:64bit: - [2009-02-09 07:38:44 | 00,008,192 | ---- | M] (Nokia) -- C:\Windows\SysNative\drivers\usbser_lowerfltx64j.sys -- (UsbserFilt)
DRV:64bit: - [2009-02-09 07:38:34 | 00,018,944 | ---- | M] (Nokia) -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcdx64)
DRV:64bit: - [2009-02-09 07:38:34 | 00,008,192 | ---- | M] (Nokia) -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
DRV:64bit: - [2009-02-09 07:38:32 | 00,025,088 | ---- | M] (Nokia) -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdcx64)
DRV:64bit: - [2008-08-28 11:44:42 | 00,025,600 | ---- | M] (Nokia) -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
DRV - [2009-07-14 02:19:10 | 00,019,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2009-07-14 02:16:02 | 00,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netbios.dll -- (NetBIOS)
DRV - [2009-06-10 22:28:14 | 00,001,088 | ---- | M] () -- C:\Windows\SysWOW64\wbem\mpsdrv.mof -- (mpsdrv)
DRV - [2009-06-10 22:15:18 | 00,003,066 | ---- | M] () -- C:\Windows\SysWOW64\wbem\tcpip.mof -- (Tcpip)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..extensions.enabledItems: {d5bc46d8-67c7-11dc-8c1d-0097498c2b7a}:1.0.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.4
FF - HKLM\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files (x86)\Nokia\Nokia PC Suite 7\bkmrksync\ [2009-10-24 14:00:38 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.4\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2009-10-28 16:28:07 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.4\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2009-11-03 21:16:12 | 00,000,000 | ---D | M]
[2009-10-14 19:34:18 | 00,000,000 | ---D | M] -- C:\Users\dawido\AppData\Roaming\mozilla\Extensions
[2009-10-14 19:34:18 | 00,000,000 | ---D | M] -- C:\Users\dawido\AppData\Roaming\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009-10-14 19:34:18 | 00,000,000 | ---D | M] -- C:\Users\dawido\AppData\Roaming\mozilla\Firefox\Profiles\gjw8yhm3.default\extensions
[2009-11-03 21:16:13 | 00,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions
[2009-10-28 16:28:07 | 00,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009-11-03 21:16:13 | 00,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
[2009-10-28 16:28:06 | 00,023,544 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browserdirprovider.dll
[2009-10-28 16:28:06 | 00,137,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\brwsrcmp.dll
[2007-04-10 16:21:08 | 00,163,256 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll
[2009-11-03 21:16:08 | 00,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeploytk.dll
[2009-10-28 16:28:07 | 00,065,016 | ---- | M] (mozilla.org) -- C:\Program Files (x86)\mozilla firefox\plugins\npnul32.dll
[2009-02-27 12:13:42 | 00,103,792 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll
[2009-08-24 20:19:13 | 00,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml
[2009-08-24 20:19:13 | 00,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml
[2009-08-24 20:19:13 | 00,002,371 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\google.xml
[2009-08-24 20:19:13 | 00,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml
[2009-08-24 20:19:13 | 00,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml
[2009-08-24 20:19:13 | 00,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml
[2009-08-24 20:19:13 | 00,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml
O1 HOSTS File: (824 bytes) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (PC Tools Browser Guard BHO) - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - E:\programy\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - E:\programy\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - E:\programy\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [CTxfiHlp] C:\Windows\SysWow64\Ctxfihlp.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files (x86)\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe File not found
O4 - HKCU..\Run: [BitTorrent DNA] C:\Users\dawido\Program Files (x86)\DNA\btdna.exe (BitTorrent, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceActiveDesktopOn = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O8:64bit: - Extra context menu item: &D&ownload &with BitComet - C:\Program Files (x86)\BitComet\BitComet.exe (www.BitComet.com)
O8:64bit: - Extra context menu item: &D&ownload all video with BitComet - C:\Program Files (x86)\BitComet\BitComet.exe (www.BitComet.com)
O8:64bit: - Extra context menu item: &D&ownload all with BitComet - C:\Program Files (x86)\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: &D&ownload &with BitComet - C:\Program Files (x86)\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: &D&ownload all video with BitComet - C:\Program Files (x86)\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: &D&ownload all with BitComet - C:\Program Files (x86)\BitComet\BitComet.exe (www.BitComet.com)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.5.3.1 195.110.50.4
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O30:64bit: - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{81b70e6f-c79d-11de-a824-004f4e618da5}\Shell - "" = AutoRun
O33 - MountPoints2\{81b70e6f-c79d-11de-a824-004f4e618da5}\Shell\AutoRun\command - "" = H:\Autorun.exe -- File not found
O33 - MountPoints2\{ce1267d9-b8f0-11de-9e9f-004f4e618da5}\Shell - "" = AutoRun
O33 - MountPoints2\{ce1267d9-b8f0-11de-9e9f-004f4e618da5}\Shell\AutoRun\command - "" = G:\setup.exe -- File not found
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\Windows\SysWow64\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found
64bit: O35 - comfile [open] -- "%1" %* File not found
64bit: O35 - exefile [open] -- "%1" %* File not found
O35 - comfile [open] -- "%1" %* File not found
O35 - exefile [open] -- "%1" %* File not found
========== Files/Folders - Created Within 30 Days ==========
[2009-11-07 13:17:56 | 04,045,528 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\dawido\Desktop\mbam-setup.exe
[2009-11-07 13:15:33 | 00,528,896 | ---- | C] (OldTimer Tools) -- C:\Users\dawido\Desktop\OTL.exe
[2009-11-06 23:28:29 | 00,000,000 | ---D | C] -- C:\Users\dawido\Documents\NFS SHIFT
[2009-11-06 06:43:57 | 00,000,000 | ---D | C] -- C:\Users\dawido\Program Files (x86)
[2009-11-05 22:04:41 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\GamersFirst LIVE!
[2009-11-05 22:04:35 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\DNA
[2009-11-05 22:04:34 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\DNA
[2009-11-05 22:04:34 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\GamersFirst
[2009-11-05 22:04:34 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\DNA
[2009-11-05 21:53:56 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\WarRockDF
[2009-11-05 21:50:04 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\Threat Expert
[2009-11-04 21:57:41 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\Adobe
[2009-11-04 15:28:07 | 00,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2009-11-04 15:28:07 | 00,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2009-11-04 15:27:02 | 01,177,600 | ---- | C] (AD) -- C:\Windows\SysWow64\SYNSOEMU.DLL
[2009-11-04 15:26:55 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\VST3
[2009-11-04 15:26:16 | 00,000,000 | ---D | C] -- C:\ProgramData\VST3 Presets
[2009-11-04 15:26:16 | 00,000,000 | ---D | C] -- C:\ProgramData\VST3 Presets
[2009-11-04 15:21:25 | 00,000,000 | ---D | C] -- C:\ProgramData\Steinberg
[2009-11-04 15:21:25 | 00,000,000 | ---D | C] -- C:\ProgramData\Steinberg
[2009-11-04 15:21:05 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Steinberg
[2009-11-04 15:19:50 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Steinberg
[2009-11-04 15:19:12 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Steinberg
[2009-11-03 21:16:12 | 00,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deploytk.dll
[2009-11-03 21:16:12 | 00,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2009-11-03 21:16:12 | 00,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2009-11-03 21:16:12 | 00,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2009-11-03 21:16:07 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2009-11-03 16:21:41 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Trend Micro
[2009-11-03 15:44:01 | 00,059,472 | ---- | C] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2009-11-03 15:44:01 | 00,027,216 | ---- | C] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswRdr.sys
[2009-11-03 15:44:00 | 00,097,480 | ---- | C] (ALWIL Software) -- C:\Windows\SysNative\AvastSS.scr
[2009-11-03 15:43:59 | 00,089,680 | ---- | C] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2009-11-03 15:43:59 | 00,065,616 | ---- | C] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2009-11-03 15:43:59 | 00,022,096 | ---- | C] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2009-11-03 15:43:46 | 01,279,968 | ---- | C] (ALWIL Software) -- C:\Windows\SysWow64\aswBoot.exe
[2009-11-03 15:43:45 | 00,000,000 | ---D | C] -- C:\Program Files\Alwil Software
[2009-11-02 23:05:06 | 00,000,000 | ---D | C] -- C:\Symbols2
[2009-11-02 22:47:49 | 00,000,000 | ---D | C] -- C:\Symbols
[2009-11-02 22:08:46 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Debugging Tools for Windows (x86)
[2009-11-02 20:24:15 | 00,000,000 | ---D | C] -- C:\Users\dawido\Documents\Ubisoft
[2009-11-02 20:13:05 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\InstallShield
[2009-11-02 19:12:44 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Lavalys
[2009-11-02 18:58:13 | 00,311,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msv1_0.dll
[2009-11-02 18:58:13 | 00,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msv1_0.dll
[2009-11-02 18:58:07 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0
[2009-11-02 18:57:34 | 14,629,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
[2009-11-02 18:57:33 | 11,406,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
[2009-11-02 18:57:32 | 12,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL
[2009-11-02 18:57:32 | 12,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
[2009-11-02 18:57:32 | 02,868,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2009-11-02 18:57:32 | 02,613,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe
[2009-11-02 18:57:32 | 01,975,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertEnroll.dll
[2009-11-02 18:57:32 | 01,320,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertEnroll.dll
[2009-11-02 18:57:32 | 00,982,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgkrnl.sys
[2009-11-02 18:57:32 | 00,366,080 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2009-11-02 18:57:32 | 00,293,888 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2009-11-02 18:57:32 | 00,148,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll
[2009-11-02 18:57:32 | 00,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll
[2009-11-02 18:57:32 | 00,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll
[2009-11-02 18:57:32 | 00,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
[2009-11-02 18:57:26 | 00,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msasn1.dll
[2009-11-02 18:57:26 | 00,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msasn1.dll
[2009-11-02 17:06:14 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\DAEMON Tools Lite
[2009-11-02 16:52:14 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Win7codecs
[2009-11-02 16:52:12 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Win7codecs
[2009-11-02 16:51:02 | 00,000,000 | ---D | C] -- C:\ProgramData\Win7codecs
[2009-11-02 16:51:02 | 00,000,000 | ---D | C] -- C:\ProgramData\Win7codecs
[2009-11-02 11:48:57 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Lite
[2009-11-02 11:48:36 | 00,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2009-11-02 11:48:36 | 00,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2009-11-01 17:21:25 | 00,000,000 | ---D | C] -- C:\Users\Public\Documents\SEGA Rally
[2009-11-01 17:12:14 | 00,000,000 | ---D | C] -- C:\Users\dawido\Documents\Sega Rally
[2009-11-01 12:08:48 | 00,000,000 | ---D | C] -- C:\Users\dawido\Desktop\pbsetup
[2009-11-01 11:10:42 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Tropico 3
[2009-11-01 11:07:49 | 02,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll
[2009-11-01 11:07:49 | 01,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_41.dll
[2009-11-01 11:07:49 | 00,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll
[2009-11-01 11:07:49 | 00,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_41.dll
[2009-11-01 11:07:48 | 05,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll
[2009-11-01 11:07:48 | 04,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_41.dll
[2009-11-01 11:07:48 | 00,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll
[2009-11-01 11:07:48 | 00,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_4.dll
[2009-11-01 11:07:48 | 00,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll
[2009-11-01 11:07:48 | 00,069,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll
[2009-11-01 11:07:47 | 02,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll
[2009-11-01 11:07:47 | 02,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll
[2009-11-01 11:07:47 | 00,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll
[2009-11-01 11:07:47 | 00,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll
[2009-11-01 11:07:47 | 00,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_4.dll
[2009-11-01 11:07:47 | 00,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll
[2009-11-01 11:07:47 | 00,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll
[2009-11-01 11:07:47 | 00,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_6.dll
[2009-11-01 11:07:46 | 05,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll
[2009-11-01 11:07:46 | 04,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll
[2009-10-31 18:54:18 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Creative
[2009-10-31 16:34:38 | 00,000,000 | ---D | C] -- C:\Windows\1C4551A64743409391E41477CD655043.TMP
[2009-10-31 16:34:29 | 00,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll
[2009-10-31 16:34:29 | 00,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll
[2009-10-31 16:34:29 | 00,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll
[2009-10-31 16:34:29 | 00,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll
[2009-10-31 16:34:29 | 00,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll
[2009-10-31 16:34:29 | 00,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll
[2009-10-31 16:34:29 | 00,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll
[2009-10-31 16:34:29 | 00,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll
[2009-10-31 16:04:55 | 00,000,000 | -H-D | C] -- C:\ProgramData\CanonBJ
[2009-10-31 16:04:55 | 00,000,000 | -H-D | C] -- C:\ProgramData\CanonBJ
[2009-10-30 16:05:39 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Audacity
[2009-10-29 06:37:14 | 00,149,456 | ---- | C] (PC Tools) -- C:\Windows\SGDetectionTool.dll
[2009-10-29 06:37:13 | 01,636,304 | ---- | C] (Threat Expert Ltd.) -- C:\Windows\PCTBDCore.dll
[2009-10-29 06:37:13 | 00,165,840 | ---- | C] (Threat Expert Ltd.) -- C:\Windows\PCTBDRes.dll
[2009-10-29 06:35:07 | 00,304,576 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\pctgntdi64.sys
[2009-10-29 06:35:07 | 00,132,048 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\pctwfpfilter64.sys
[2009-10-29 06:35:02 | 00,218,056 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\PCTCore64.sys
[2009-10-29 06:34:59 | 00,092,896 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\pctplsg64.sys
[2009-10-29 06:34:56 | 00,000,000 | ---D | C] -- C:\ProgramData\PC Tools
[2009-10-29 06:34:56 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\PC Tools
[2009-10-29 06:34:56 | 00,000,000 | ---D | C] -- C:\ProgramData\PC Tools
[2009-10-29 06:34:56 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PC Tools
[2009-10-29 06:34:34 | 00,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2009-10-29 06:34:34 | 00,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2009-10-28 16:59:33 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Nero
[2009-10-28 16:54:12 | 00,000,000 | ---D | C] -- C:\ProgramData\Nero
[2009-10-28 16:54:12 | 00,000,000 | ---D | C] -- C:\ProgramData\Nero
[2009-10-28 16:54:12 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nero
[2009-10-27 22:24:16 | 00,000,000 | ---D | C] -- C:\Users\dawido\Documents\DVDVideoSoft
[2009-10-27 22:24:10 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\DVDVideoSoft
[2009-10-27 22:24:10 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DVDVideoSoft
[2009-10-27 21:45:19 | 00,000,000 | ---D | C] -- C:\ProgramData\eMule
[2009-10-27 21:45:19 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\eMule
[2009-10-27 21:45:19 | 00,000,000 | ---D | C] -- C:\ProgramData\eMule
[2009-10-26 12:54:22 | 00,000,000 | ---D | C] -- C:\Users\dawido\Documents\Prince of Persia
[2009-10-26 12:50:13 | 00,513,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_2.dll
[2009-10-26 12:50:13 | 00,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_2.dll
[2009-10-26 12:50:13 | 00,072,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_1.dll
[2009-10-26 12:50:13 | 00,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_1.dll
[2009-10-26 12:50:12 | 00,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_2.dll
[2009-10-26 12:50:12 | 00,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_2.dll
[2009-10-26 12:50:11 | 01,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll
[2009-10-26 12:50:11 | 01,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_39.dll
[2009-10-26 12:50:11 | 00,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll
[2009-10-26 12:50:11 | 00,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_39.dll
[2009-10-26 12:50:09 | 04,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll
[2009-10-26 12:50:09 | 03,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_39.dll
[2009-10-26 12:50:08 | 00,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll
[2009-10-26 12:50:08 | 00,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll
[2009-10-26 12:50:08 | 00,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll
[2009-10-26 12:50:08 | 00,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll
[2009-10-26 12:50:08 | 00,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll
[2009-10-26 12:50:08 | 00,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll
[2009-10-26 12:50:07 | 00,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll
[2009-10-26 12:50:07 | 00,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll
[2009-10-26 12:50:06 | 01,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll
[2009-10-26 12:50:06 | 01,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll
[2009-10-26 12:50:06 | 00,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll
[2009-10-26 12:50:06 | 00,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll
[2009-10-26 12:50:04 | 04,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll
[2009-10-26 12:50:04 | 03,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll
[2009-10-26 12:50:03 | 00,489,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_0.dll
[2009-10-26 12:50:03 | 00,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_0.dll
[2009-10-26 12:50:03 | 00,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_0.dll
[2009-10-26 12:50:03 | 00,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_0.dll
[2009-10-26 12:50:03 | 00,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_3.dll
[2009-10-26 12:50:03 | 00,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_3.dll
[2009-10-26 12:50:02 | 01,860,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_37.dll
[2009-10-26 12:50:02 | 01,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_37.dll
[2009-10-26 12:50:02 | 00,529,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_37.dll
[2009-10-26 12:50:02 | 00,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_37.dll
[2009-10-26 12:50:00 | 04,910,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_37.dll
[2009-10-26 12:50:00 | 03,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_37.dll
[2009-10-26 12:50:00 | 00,411,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_10.dll
[2009-10-26 12:50:00 | 00,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_10.dll
[2009-10-26 12:49:58 | 02,006,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_36.dll
[2009-10-26 12:49:58 | 01,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_36.dll
[2009-10-26 12:49:58 | 00,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_36.dll
[2009-10-26 12:49:58 | 00,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_36.dll
[2009-10-26 12:49:56 | 05,081,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_36.dll
[2009-10-26 12:49:56 | 03,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_36.dll
[2009-10-26 12:49:51 | 00,021,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_2.dll
[2009-10-26 12:49:51 | 00,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_2.dll
[2009-10-25 20:21:19 | 00,000,000 | ---D | C] -- C:\Users\dawido\Documents\KONAMI
[2009-10-25 20:16:09 | 00,000,000 | ---D | C] -- C:\ProgramData\KONAMI
[2009-10-25 20:16:09 | 00,000,000 | ---D | C] -- C:\ProgramData\KONAMI
[2009-10-25 18:43:21 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\ATI Technologies
[2009-10-25 18:38:59 | 00,000,000 | ---D | C] -- C:\AMD
[2009-10-25 09:35:06 | 01,985,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_35.dll
[2009-10-25 09:35:06 | 01,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_35.dll
[2009-10-25 09:35:06 | 00,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_35.dll
[2009-10-25 09:35:06 | 00,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_35.dll
[2009-10-25 09:35:06 | 00,411,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_9.dll
[2009-10-25 09:35:06 | 00,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_9.dll
[2009-10-25 09:35:04 | 05,073,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_35.dll
[2009-10-25 09:35:04 | 03,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_35.dll
[2009-10-25 09:35:04 | 00,409,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_8.dll
[2009-10-25 09:35:04 | 00,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_8.dll
[2009-10-25 09:35:03 | 01,401,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_34.dll
[2009-10-25 09:35:03 | 01,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_34.dll
[2009-10-25 09:35:03 | 00,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_34.dll
[2009-10-25 09:35:03 | 00,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_34.dll
[2009-10-25 09:35:01 | 04,496,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_34.dll
[2009-10-25 09:35:01 | 03,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_34.dll
[2009-10-25 09:35:01 | 00,403,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_7.dll
[2009-10-25 09:35:01 | 00,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_7.dll
[2009-10-25 09:35:01 | 00,107,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_3.dll
[2009-10-25 09:35:01 | 00,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_3.dll
[2009-10-25 09:35:00 | 01,400,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_33.dll
[2009-10-25 09:35:00 | 01,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_33.dll
[2009-10-25 09:35:00 | 00,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_33.dll
[2009-10-25 09:35:00 | 00,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_33.dll
[2009-10-25 09:34:59 | 04,494,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_33.dll
[2009-10-25 09:34:59 | 03,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_33.dll
[2009-10-25 09:34:58 | 00,469,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10.dll
[2009-10-25 09:34:58 | 00,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10.dll
[2009-10-25 09:34:58 | 00,393,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_6.dll
[2009-10-25 09:34:58 | 00,390,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_5.dll
[2009-10-25 09:34:58 | 00,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_6.dll
[2009-10-25 09:34:58 | 00,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_5.dll
[2009-10-25 09:34:57 | 04,398,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_32.dll
[2009-10-25 09:34:57 | 03,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_32.dll
[2009-10-25 09:34:56 | 00,364,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_4.dll
[2009-10-25 09:34:56 | 00,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_4.dll
[2009-10-25 09:34:56 | 00,017,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_1.dll
[2009-10-25 09:34:56 | 00,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_1.dll
[2009-10-25 09:34:55 | 03,977,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_31.dll
[2009-10-25 09:34:55 | 02,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_31.dll
[2009-10-25 09:34:55 | 00,363,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_3.dll
[2009-10-25 09:34:55 | 00,354,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_2.dll
[2009-10-25 09:34:55 | 00,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_3.dll
[2009-10-25 09:34:55 | 00,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_2.dll
[2009-10-25 09:34:55 | 00,083,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_2.dll
[2009-10-25 09:34:55 | 00,083,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_1.dll
[2009-10-25 09:34:55 | 00,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_2.dll
[2009-10-25 09:34:55 | 00,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_1.dll
[2009-10-25 09:34:54 | 00,352,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_1.dll
[2009-10-25 09:34:54 | 00,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_1.dll
[2009-10-25 09:34:46 | 03,927,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_30.dll
[2009-10-25 09:34:46 | 02,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_30.dll
[2009-10-25 09:34:45 | 00,355,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_0.dll
[2009-10-25 09:34:45 | 00,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_0.dll
[2009-10-25 09:34:45 | 00,016,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_0.dll
[2009-10-25 09:34:45 | 00,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_0.dll
[2009-10-25 09:34:43 | 03,830,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_29.dll
[2009-10-25 09:34:43 | 03,815,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_28.dll
[2009-10-25 09:34:43 | 02,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_29.dll
[2009-10-25 09:34:43 | 02,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_28.dll
[2009-10-25 09:34:42 | 03,807,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_27.dll
[2009-10-25 09:34:42 | 02,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_27.dll
[2009-10-25 09:34:41 | 03,767,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_26.dll
[2009-10-25 09:34:41 | 02,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_26.dll
[2009-10-25 09:34:40 | 03,823,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_25.dll
[2009-10-25 09:34:40 | 02,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_25.dll
[2009-10-25 09:34:39 | 03,544,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_24.dll
[2009-10-25 09:34:39 | 02,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_24.dll
[2009-10-24 14:00:38 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PCSuite
[2009-10-24 14:00:26 | 00,025,600 | ---- | C] (Nokia) -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys
[2009-10-24 13:43:45 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Xilisoft
[2009-10-24 13:43:45 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime
[2009-10-24 11:04:09 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Mount&Blade
[2009-10-24 09:04:50 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\Diagnostics
[2009-10-22 15:14:51 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nokia
[2009-10-22 15:14:40 | 00,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE
[2009-10-22 15:14:29 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Nokia
[2009-10-22 14:30:36 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\streamripper
[2009-10-22 14:30:25 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Streamripper
[2009-10-20 17:28:21 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\2K Sports
[2009-10-20 16:26:13 | 00,000,000 | ---D | C] -- C:\Windows\SysWow64\URTTEMP
[2009-10-20 15:18:41 | 00,000,000 | ---D | C] -- C:\Users\dawido\Documents\Aspyr
[2009-10-20 15:15:46 | 00,000,000 | ---D | C] -- C:\Windows\SysWow64\AGEIA
[2009-10-20 15:15:46 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies
[2009-10-20 15:00:11 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
[2009-10-18 20:04:52 | 00,000,000 | ---D | C] -- C:\ProgramData\Ubisoft
[2009-10-18 20:04:52 | 00,000,000 | ---D | C] -- C:\ProgramData\Ubisoft
[2009-10-18 20:03:25 | 00,000,000 | RH-D | C] -- C:\Users\dawido\AppData\Roaming\SecuROM
[2009-10-18 18:55:27 | 00,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2009-10-18 18:55:27 | 00,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2009-10-18 18:55:26 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2009-10-18 18:55:26 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2009-10-18 11:09:22 | 00,000,000 | ---D | C] -- C:\Users\dawido\Phone Browser
[2009-10-18 11:08:46 | 00,000,000 | ---D | C] -- C:\ProgramData\PC Suite
[2009-10-18 11:08:46 | 00,000,000 | ---D | C] -- C:\ProgramData\PC Suite
[2009-10-18 11:08:22 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Nokia
[2009-10-18 11:08:12 | 00,000,000 | ---D | C] -- C:\Program Files\DIFX
[2009-10-18 11:08:11 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\PC Suite
[2009-10-18 11:08:09 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\PC Connectivity Solution
[2009-10-18 11:08:04 | 00,067,584 | ---- | C] (Nokia) -- C:\Windows\SysNative\nmwcdclsx64.dll
[2009-10-18 11:07:42 | 00,000,000 | ---D | C] -- C:\ProgramData\Installations
[2009-10-18 11:07:42 | 00,000,000 | ---D | C] -- C:\ProgramData\Installations
[2009-10-18 10:57:15 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\BESTplayer
[2009-10-18 10:57:00 | 01,213,952 | ---- | C] (Karol Winnicki) -- C:\Users\dawido\Desktop\BESTplayer.exe
[2009-10-16 22:37:22 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Gadu-Gadu
[2009-10-16 22:09:41 | 00,000,000 | ---D | C] -- C:\Users\dawido\Gadu-Gadu
[2009-10-16 21:02:07 | 00,000,000 | ---D | C] -- C:\Windows\Minidump
[2009-10-16 20:24:47 | 00,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft
[2009-10-16 19:30:50 | 00,000,000 | ---D | C] -- C:\Windows\SysWow64\xlive
[2009-10-16 19:30:50 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
[2009-10-16 18:16:20 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Leadertech
[2009-10-16 15:01:14 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Dark Sector
[2009-10-16 14:59:56 | 00,000,000 | ---D | C] -- C:\ProgramData\Codemasters
[2009-10-16 14:59:56 | 00,000,000 | ---D | C] -- C:\ProgramData\Codemasters
[2009-10-16 14:59:55 | 00,000,000 | ---D | C] -- C:\Users\dawido\Documents\Codemasters
[2009-10-16 14:17:02 | 00,000,000 | ---D | C] -- C:\Users\dawido\Documents\FIFA 10
[2009-10-16 14:16:34 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\PunkBuster
[2009-10-16 14:15:12 | 00,000,000 | ---D | C] -- C:\Users\dawido\Documents\Eidos
[2009-10-15 19:31:42 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Gadu-Gadu
[2009-10-15 17:55:17 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\WapSter
[2009-10-14 21:06:27 | 00,000,000 | ---D | C] -- C:\Users\dawido\Desktop\Windows.7.Loader.eXtreme.Edition.v3.014
[2009-10-14 21:00:15 | 00,000,000 | ---D | C] -- C:\Downloads
[2009-10-14 21:00:02 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\BitComet
[2009-10-14 20:29:27 | 00,000,000 | ---D | C] -- C:\Users\dawido\Documents\My Games
[2009-10-14 20:25:43 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Creative
[2009-10-14 20:25:42 | 00,000,000 | -H-D | C] -- C:\Program Files (x86)\Creative Installation Information
[2009-10-14 20:25:35 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Creative Labs Shared
[2009-10-14 20:25:30 | 00,000,000 | ---D | C] -- C:\Program Files\Creative
[2009-10-14 20:25:22 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Creative
[2009-10-14 20:25:03 | 00,113,152 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysNative\cttele64.dll
[2009-10-14 20:25:03 | 00,000,000 | ---D | C] -- C:\ProgramData\Creative
[2009-10-14 20:25:03 | 00,000,000 | ---D | C] -- C:\ProgramData\Creative
[2009-10-14 20:25:02 | 00,106,496 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\cttele32.dll
[2009-10-14 20:24:56 | 00,419,840 | ---- | C] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2009-10-14 20:24:56 | 00,413,696 | ---- | C] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2009-10-14 20:24:56 | 00,133,632 | ---- | C] (Portions © Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll
[2009-10-14 20:24:56 | 00,110,592 | ---- | C] (Portions © Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll
[2009-10-14 20:24:56 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\OpenAL
[2009-10-14 20:24:32 | 00,012,288 | ---- | C] (Creative Technology Limited) -- C:\Windows\SysNative\INRES.DLL
[2009-10-14 20:24:32 | 00,011,776 | ---- | C] (Creative Technology Limited) -- C:\Windows\SysWow64\INRES.DLL
[2009-10-14 20:24:32 | 00,000,000 | ---D | C] -- C:\Windows\SysWow64\Data
[2009-10-14 20:24:32 | 00,000,000 | ---D | C] -- C:\Windows\SysNative\Data
[2009-10-14 20:24:16 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2009-10-14 20:19:58 | 00,000,000 | ---D | C] -- C:\Users\dawido\Desktop\Nowy folder
[2009-10-14 20:16:17 | 00,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2009-10-14 20:07:11 | 00,000,000 | ---D | C] -- C:\Windows\Panther
[2009-10-14 20:07:07 | 00,000,000 | -HSD | C] -- C:\Boot
[2009-10-14 20:00:42 | 00,238,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MpSigStub.exe
[2009-10-14 19:36:38 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\ATI
[2009-10-14 19:36:38 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\ATI
[2009-10-14 19:35:36 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies
[2009-10-14 19:35:35 | 00,000,000 | -HSD | C] -- C:\Windows\Installer
[2009-10-14 19:35:35 | 00,000,000 | ---D | C] -- C:\Program Files\ATI
[2009-10-14 19:34:13 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Mozilla
[2009-10-14 19:34:13 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\Mozilla
[2009-10-14 19:33:52 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2009-10-14 19:33:01 | 01,628,920 | ---- | C] (Sonic Solutions) -- C:\Windows\SysWow64\pxsfs.dll
[2009-10-14 19:33:01 | 00,547,576 | ---- | C] (Sonic Solutions) -- C:\Windows\SysWow64\px.dll
[2009-10-14 19:33:01 | 00,510,712 | ---- | C] (Sonic Solutions) -- C:\Windows\SysWow64\pxdrv.dll
[2009-10-14 19:33:01 | 00,379,640 | ---- | C] (Sonic Solutions) -- C:\Windows\SysWow64\pxwave.dll
[2009-10-14 19:33:01 | 00,187,128 | ---- | C] (Sonic Solutions) -- C:\Windows\SysWow64\pxmas.dll
[2009-10-14 19:33:01 | 00,129,784 | ---- | C] (Sonic Solutions) -- C:\Windows\SysWow64\pxafs.dll
[2009-10-14 19:33:01 | 00,072,440 | ---- | C] (Sonic Solutions) -- C:\Windows\SysWow64\pxhpinst.exe
[2009-10-14 19:33:01 | 00,064,760 | ---- | C] (Sonic Solutions) -- C:\Windows\SysWow64\pxinsa64.exe
[2009-10-14 19:33:01 | 00,064,760 | ---- | C] (Sonic Solutions) -- C:\Windows\SysWow64\pxcpya64.exe
[2009-10-14 19:33:01 | 00,039,672 | ---- | C] (Sonic Solutions) -- C:\Windows\SysWow64\vxblock.dll
[2009-10-14 19:33:00 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Winamp
[2009-10-14 19:33:00 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Winamp
[2009-10-14 19:32:31 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\WinRAR
[2009-10-14 19:32:16 | 00,000,000 | ---D | C] -- C:\ATI
[2009-10-14 19:17:31 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Macromedia
[2009-10-14 19:17:31 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Adobe
[2009-10-14 19:17:30 | 00,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
[2009-10-14 19:15:14 | 00,000,000 | R--D | C] -- C:\Users\dawido\Searches
[2009-10-14 19:15:05 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Identities
[2009-10-14 19:15:04 | 00,000,000 | R--D | C] -- C:\Users\dawido\Contacts
[2009-10-14 19:15:02 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\VirtualStore
[2009-10-14 19:14:54 | 00,000,000 | --SD | C] -- C:\Users\dawido\AppData\Roaming\Microsoft
[2009-10-14 19:14:54 | 00,000,000 | R--D | C] -- C:\Users\dawido\Videos
[2009-10-14 19:14:54 | 00,000,000 | R--D | C] -- C:\Users\dawido\Saved Games
[2009-10-14 19:14:54 | 00,000,000 | R--D | C] -- C:\Users\dawido\Pictures
[2009-10-14 19:14:54 | 00,000,000 | R--D | C] -- C:\Users\dawido\Music
[2009-10-14 19:14:54 | 00,000,000 | R--D | C] -- C:\Users\dawido\Links
[2009-10-14 19:14:54 | 00,000,000 | R--D | C] -- C:\Users\dawido\Favorites
[2009-10-14 19:14:54 | 00,000,000 | R--D | C] -- C:\Users\dawido\Downloads
[2009-10-14 19:14:54 | 00,000,000 | R--D | C] -- C:\Users\dawido\Documents
[2009-10-14 19:14:54 | 00,000,000 | R--D | C] -- C:\Users\dawido\Desktop
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\Ustawienia lokalne
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\Szablony
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\SendTo
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\Recent
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\PrintHood
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\NetHood
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\Documents\Moje wideo
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\Documents\Moje obrazy
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\Moje dokumenty
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\Documents\Moja muzyka
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\Menu Start
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\Dane aplikacji
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\Cookies
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\AppData\Local\Temporary Internet Files
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\AppData\Local\Historia
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\AppData\Local\Dane aplikacji
[2009-10-14 19:14:54 | 00,000,000 | -H-D | C] -- C:\Users\dawido\AppData
[2009-10-14 19:14:54 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Media Center Programs
[2009-10-14 19:14:54 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\Temp
[2009-10-14 19:14:54 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\Microsoft
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Ulubione
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Szablony
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\Recovery
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Pulpit
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje wideo
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje obrazy
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moja muzyka
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Menu Start
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Dane aplikacji
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Ulubione
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Szablony
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Pulpit
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Menu Start
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Dane aplikacji
[2009-10-14 19:10:55 | 00,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2009-10-14 19:08:16 | 00,000,000 | ---D | C] -- C:\Windows\Prefetch
[2009-10-14 19:08:00 | 00,000,000 | -HSD | C] -- C:\System Volume Information
[2009-07-13 23:30:56 | 00,014,336 | ---- | C] ( ) -- C:\Windows\SysWow64\a3d.dll
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2009-11-07 13:18:48 | 01,572,864 | -HS- | M] () -- C:\Users\dawido\ntuser.dat
[2009-11-07 13:18:27 | 04,045,528 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\dawido\Desktop\mbam-setup.exe
[2009-11-07 13:15:34 | 00,528,896 | ---- | M] (OldTimer Tools) -- C:\Users\dawido\Desktop\OTL.exe
[2009-11-07 12:07:44 | 00,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2009-11-07 12:07:44 | 00,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2009-11-07 12:06:50 | 01,552,302 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2009-11-07 12:06:50 | 00,697,200 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2009-11-07 12:06:50 | 00,615,760 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2009-11-07 12:06:50 | 00,136,690 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2009-11-07 12:06:50 | 00,107,396 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2009-11-07 12:02:40 | 00,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2009-11-07 12:02:34 | 00,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2009-11-07 12:02:28 | 32,204,80000 | -HS- | M] () -- C:\hiberfil.sys
[2009-11-07 09:03:58 | 00,063,336 | ---- | M] () -- C:\Windows\SysNative\BMXStateBkp-{00000004-00000000-00000000-00001102-0000000B-00411102}.rfx
[2009-11-07 09:03:58 | 00,063,336 | ---- | M] () -- C:\Windows\SysNative\BMXState-{00000004-00000000-00000000-00001102-0000000B-00411102}.rfx
[2009-11-07 09:03:58 | 00,000,820 | ---- | M] () -- C:\Windows\SysNative\DVCState-{00000004-00000000-00000000-00001102-0000000B-00411102}.rfx
[2009-11-06 23:52:14 | 02,031,384 | -H-- | M] () -- C:\Users\dawido\AppData\Local\IconCache.db
[2009-11-05 22:07:15 | 00,001,080 | ---- | M] () -- C:\Windows\SysNative\settingsbkup.sfm
[2009-11-05 22:07:15 | 00,001,080 | ---- | M] () -- C:\Windows\SysNative\settings.sfm
[2009-11-05 22:05:03 | 00,001,160 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GamersFirst LIVE!.lnk
[2009-11-05 22:05:03 | 00,001,126 | ---- | M] () -- C:\Users\Public\Desktop\GamersFirst LIVE!.lnk
[2009-11-05 22:04:26 | 01,791,088 | ---- | M] () -- C:\Users\dawido\Desktop\GamersFirst_LIVE!_Setup_11443.exe
[2009-11-05 21:30:31 | 00,000,561 | ---- | M] () -- C:\Users\Public\Desktop\War Rock.lnk
[2009-11-04 15:19:52 | 00,001,639 | ---- | M] () -- C:\Users\dawido\Desktop\Cubase 5.lnk
[2009-11-03 21:16:08 | 00,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deploytk.dll
[2009-11-03 21:16:08 | 00,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2009-11-03 21:16:08 | 00,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2009-11-03 21:16:08 | 00,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2009-11-03 16:21:41 | 00,002,093 | ---- | M] () -- C:\Users\dawido\Desktop\HijackThis.lnk
[2009-11-03 15:44:01 | 00,001,861 | ---- | M] () -- C:\Users\Public\Desktop\avast! Antivirus.lnk
[2009-11-03 15:43:59 | 00,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2009-11-02 23:28:22 | 00,043,376 | ---- | M] () -- C:\Users\dawido\Desktop\Bez tytułu.gif
[2009-11-02 21:48:51 | 00,002,562 | ---- | M] () -- C:\Windows\diagwrn.xml
[2009-11-02 21:48:51 | 00,001,908 | ---- | M] () -- C:\Windows\diagerr.xml
[2009-11-02 21:40:23 | 00,262,144 | ---- | M] () -- C:\Users\dawido\Desktop\110209-16832-01.dmp
[2009-11-02 21:20:27 | 00,007,601 | ---- | M] () -- C:\Users\dawido\AppData\Local\Resmon.ResmonCfg
[2009-11-02 20:24:13 | 00,001,069 | ---- | M] () -- C:\Users\Public\Desktop\Tom Clancy's Rainbow Six Vegas.lnk
[2009-11-02 19:12:45 | 00,001,122 | ---- | M] () -- C:\Users\dawido\Desktop\EVEREST Ultimate Edition.lnk
[2009-11-02 18:59:48 | 00,274,840 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2009-11-02 11:49:12 | 00,834,544 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys
[2009-11-02 11:49:12 | 00,001,950 | ---- | M] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2009-11-01 16:09:43 | 00,215,104 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2009-11-01 16:09:43 | 00,215,104 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2009-11-01 12:26:34 | 00,075,064 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2009-10-31 21:33:35 | 00,001,076 | ---- | M] () -- C:\Users\dawido\Desktop\OFDR — skrót.lnk
[2009-10-31 16:34:38 | 00,314,016 | ---- | M] () -- C:\Windows\SysNative\drivers\atksgt.sys
[2009-10-31 16:34:38 | 00,043,680 | ---- | M] () -- C:\Windows\SysNative\drivers\lirsgt.sys
[2009-10-31 02:56:44 | 00,085,504 | ---- | M] () -- C:\Windows\SysWow64\ff_vfw.dll
[2009-10-30 16:05:26 | 00,000,681 | ---- | M] () -- C:\Users\dawido\Desktop\Audacity 1.3 Beta (Unicode).lnk
[2009-10-29 06:35:01 | 00,000,827 | ---- | M] () -- C:\Users\Public\Desktop\Spyware Doctor.lnk
[2009-10-28 18:19:44 | 00,002,560 | ---- | M] () -- C:\Windows\_MSRSTRT.EXE
[2009-10-28 16:55:33 | 00,001,569 | ---- | M] () -- C:\Users\Public\Desktop\Nero StartSmart.lnk
[2009-10-27 22:24:16 | 00,001,239 | ---- | M] () -- C:\Users\dawido\Desktop\DVDVideoSoft Free Studio.lnk
[2009-10-27 21:55:17 | 00,000,680 | ---- | M] () -- C:\Users\Public\Desktop\eMule.lnk
[2009-10-26 12:27:21 | 00,000,997 | ---- | M] () -- C:\Users\dawido\Desktop\SAW - The Video Game (TPTB).lnk
[2009-10-25 20:57:30 | 00,001,135 | ---- | M] () -- C:\Users\dawido\Desktop\pes2010 — skrót.lnk
[2009-10-24 15:13:11 | 42,088,1823 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2009-10-24 14:01:52 | 00,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ccdcmbx64_01007.Wdf
[2009-10-24 14:00:38 | 00,002,038 | ---- | M] () -- C:\Users\Public\Desktop\Nokia PC Suite.lnk
[2009-10-24 14:00:30 | 00,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_PCCSWpdDriver_01_07_00.Wdf
[2009-10-24 13:43:45 | 00,001,229 | ---- | M] () -- C:\Users\dawido\Desktop\Xilisoft 3GP Video Converter 3.lnk
[2009-10-24 08:40:16 | 00,001,939 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2009-10-24 08:34:23 | 00,524,288 | -HS- | M] () -- C:\Users\dawido\ntuser.dat{505bbb43-bf93-11de-9d37-004f4e618da5}.TMContainer00000000000000000002.regtrans-ms
[2009-10-24 08:34:23 | 00,524,288 | -HS- | M] () -- C:\Users\dawido\ntuser.dat{505bbb43-bf93-11de-9d37-004f4e618da5}.TMContainer00000000000000000001.regtrans-ms
[2009-10-24 08:34:23 | 00,065,536 | -HS- | M] () -- C:\Users\dawido\ntuser.dat{505bbb43-bf93-11de-9d37-004f4e618da5}.TM.blf
[2009-10-20 21:47:40 | 00,002,178 | ---- | M] () -- C:\Users\dawido\AppData\Roaming\PStrip.ini
[2009-10-20 16:32:44 | 00,000,740 | ---- | M] () -- C:\Users\Public\Desktop\NBA 2K10.lnk
[2009-10-20 16:26:37 | 01,575,648 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2009-10-19 05:16:17 | 00,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2009-10-18 19:57:26 | 00,000,904 | ---- | M] () -- C:\Users\dawido\Desktop\Splinter Cell Double Agent.lnk
[2009-10-18 18:55:31 | 00,002,014 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2009-10-18 11:09:35 | 00,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_PCCSWpdDriver_01_05_00.Wdf
[2009-10-18 10:57:02 | 01,213,952 | ---- | M] (Karol Winnicki) -- C:\Users\dawido\Desktop\BESTplayer.exe
[2009-10-16 22:09:39 | 00,000,978 | ---- | M] () -- C:\Users\dawido\Desktop\Gadu-Gadu.lnk
[2009-10-16 20:24:15 | 00,000,774 | ---- | M] () -- C:\Users\dawido\Desktop\rfg_launcher — skrót.lnk
[2009-10-16 18:17:37 | 00,000,684 | ---- | M] () -- C:\Users\dawido\Desktop\FIFA10 — skrót.lnk
[2009-10-16 16:29:37 | 00,000,573 | ---- | M] () -- C:\Users\Public\Desktop\Capitalism II.lnk
[2009-10-14 21:08:51 | 00,438,840 | RHS- | M] () -- C:\bootxe1
[2009-10-14 21:08:51 | 00,171,136 | RHS- | M] () -- C:\XELD1
[2009-10-14 21:08:51 | 00,009,216 | RHS- | M] () -- C:\XELD1.1st
[2009-10-14 21:00:03 | 00,001,019 | ---- | M] () -- C:\Users\Public\Desktop\BitComet.lnk
[2009-10-14 20:24:56 | 00,419,840 | ---- | M] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2009-10-14 20:24:56 | 00,413,696 | ---- | M] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2009-10-14 20:24:56 | 00,133,632 | ---- | M] (Portions © Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll
[2009-10-14 20:24:56 | 00,110,592 | ---- | M] (Portions © Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll
[2009-10-14 20:24:56 | 00,000,159 | RH-- | M] () -- C:\Windows\ctfile.rfc
[2009-10-14 20:07:09 | 00,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2009-10-14 19:33:03 | 00,000,989 | ---- | M] () -- C:\Users\Public\Desktop\Winamp.lnk
[2009-10-14 19:27:59 | 00,000,363 | ---- | M] () -- C:\Users\dawido\Desktop\Komputer — skrót.lnk
[2009-10-14 19:26:29 | 00,524,288 | -HS- | M] () -- C:\Users\dawido\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2009-10-14 19:26:29 | 00,524,288 | -HS- | M] () -- C:\Users\dawido\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2009-10-14 19:26:29 | 00,065,536 | -HS- | M] () -- C:\Users\dawido\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2009-10-14 19:26:09 | 00,171,136 | ---- | M] () -- C:\grldr.bak
[2009-10-14 19:23:46 | 00,057,560 | ---- | M] () -- C:\Users\dawido\AppData\Local\GDIPFONTCACHEV1.DAT
[2009-10-14 19:14:54 | 00,000,020 | -HS- | M] () -- C:\Users\dawido\ntuser.ini
[2009-10-14 19:12:07 | 00,067,517 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2009-10-14 19:12:07 | 00,067,517 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2009-10-14 19:10:42 | 00,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
[2009-10-11 21:58:12 | 01,177,600 | ---- | M] (AD) -- C:\Windows\SysWow64\SYNSOEMU.DLL
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ==========
[2009-11-05 22:04:34 | 00,001,160 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GamersFirst LIVE!.lnk
[2009-11-05 22:04:34 | 00,001,126 | ---- | C] () -- C:\Users\Public\Desktop\GamersFirst LIVE!.lnk
[2009-11-05 22:04:23 | 01,791,088 | ---- | C] () -- C:\Users\dawido\Desktop\GamersFirst_LIVE!_Setup_11443.exe
[2009-11-05 21:30:31 | 00,000,561 | ---- | C] () -- C:\Users\Public\Desktop\War Rock.lnk
[2009-11-04 15:37:52 | 00,001,080 | ---- | C] () -- C:\Windows\SysNative\settingsbkup.sfm
[2009-11-04 15:37:52 | 00,001,080 | ---- | C] () -- C:\Windows\SysNative\settings.sfm
[2009-11-04 15:19:51 | 00,001,639 | ---- | C] () -- C:\Users\dawido\Desktop\Cubase 5.lnk
[2009-11-03 16:21:41 | 00,002,093 | ---- | C] () -- C:\Users\dawido\Desktop\HijackThis.lnk
[2009-11-03 15:44:01 | 00,001,861 | ---- | C] () -- C:\Users\Public\Desktop\avast! Antivirus.lnk
[2009-11-03 15:43:59 | 00,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt
[2009-11-03 15:43:46 | 00,380,928 | ---- | C] () -- C:\Windows\SysWow64\actskin4.ocx
[2009-11-02 23:37:52 | 00,262,144 | ---- | C] () -- C:\Users\dawido\Desktop\110209-16832-01.dmp
[2009-11-02 23:28:21 | 00,043,376 | ---- | C] () -- C:\Users\dawido\Desktop\Bez tytułu.gif
[2009-11-02 21:47:43 | 00,002,562 | ---- | C] () -- C:\Windows\diagwrn.xml
[2009-11-02 21:47:43 | 00,001,908 | ---- | C] () -- C:\Windows\diagerr.xml
[2009-11-02 21:20:27 | 00,007,601 | ---- | C] () -- C:\Users\dawido\AppData\Local\Resmon.ResmonCfg
[2009-11-02 20:24:13 | 00,001,069 | ---- | C] () -- C:\Users\Public\Desktop\Tom Clancy's Rainbow Six Vegas.lnk
[2009-11-02 19:12:45 | 00,001,122 | ---- | C] () -- C:\Users\dawido\Desktop\EVEREST Ultimate Edition.lnk
[2009-11-02 11:49:12 | 00,834,544 | ---- | C] () -- C:\Windows\SysNative\drivers\sptd.sys
[2009-11-02 11:49:12 | 00,001,950 | ---- | C] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2009-11-01 17:03:15 | 00,062,232 | R--- | C] () -- C:\Windows\SysWow64\GameuxInstallHelper.dll
[2009-11-01 12:26:57 | 00,215,104 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2009-11-01 12:26:39 | 00,215,104 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2009-11-01 12:26:34 | 00,075,064 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2009-10-31 02:56:44 | 00,085,504 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2009-10-30 16:05:26 | 00,000,681 | ---- | C] () -- C:\Users\dawido\Desktop\Audacity 1.3 Beta (Unicode).lnk
[2009-10-29 06:37:14 | 00,767,952 | ---- | C] () -- C:\Windows\BDTSupport.dll
[2009-10-29 06:37:14 | 00,000,882 | ---- | C] () -- C:\Windows\RegSDImport.xml
[2009-10-29 06:37:14 | 00,000,880 | ---- | C] () -- C:\Windows\RegISSImport.xml
[2009-10-29 06:37:14 | 00,000,131 | ---- | C] () -- C:\Windows\IDB.zip
[2009-10-29 06:37:13 | 01,152,470 | ---- | C] () -- C:\Windows\UDB.zip
[2009-10-29 06:35:07 | 00,007,357 | ---- | C] () -- C:\Windows\SysNative\drivers\pctgntdi64.cat
[2009-10-29 06:35:02 | 00,007,353 | ---- | C] () -- C:\Windows\SysNative\drivers\pctcore64.cat
[2009-10-29 06:35:01 | 00,000,827 | ---- | C] () -- C:\Users\Public\Desktop\Spyware Doctor.lnk
[2009-10-29 06:34:59 | 00,007,353 | ---- | C] () -- C:\Windows\SysNative\drivers\pctplsg64.cat
[2009-10-28 18:19:43 | 00,002,560 | ---- | C] () -- C:\Windows\_MSRSTRT.EXE
[2009-10-28 16:55:33 | 00,001,569 | ---- | C] () -- C:\Users\Public\Desktop\Nero StartSmart.lnk
[2009-10-27 22:24:16 | 00,001,239 | ---- | C] () -- C:\Users\dawido\Desktop\DVDVideoSoft Free Studio.lnk
[2009-10-27 21:55:17 | 00,000,680 | ---- | C] () -- C:\Users\Public\Desktop\eMule.lnk
[2009-10-26 12:27:21 | 00,000,997 | ---- | C] () -- C:\Users\dawido\Desktop\SAW - The Video Game (TPTB).lnk
[2009-10-25 20:57:30 | 00,001,135 | ---- | C] () -- C:\Users\dawido\Desktop\pes2010 — skrót.lnk
[2009-10-25 09:35:15 | 00,314,016 | ---- | C] () -- C:\Windows\SysNative\drivers\atksgt.sys
[2009-10-25 09:35:15 | 00,043,680 | ---- | C] () -- C:\Windows\SysNative\drivers\lirsgt.sys
[2009-10-24 14:01:52 | 00,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ccdcmbx64_01007.Wdf
[2009-10-24 14:00:38 | 00,002,038 | ---- | C] () -- C:\Users\Public\Desktop\Nokia PC Suite.lnk
[2009-10-24 14:00:30 | 00,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_PCCSWpdDriver_01_07_00.Wdf
[2009-10-24 13:43:45 | 00,001,229 | ---- | C] () -- C:\Users\dawido\Desktop\Xilisoft 3GP Video Converter 3.lnk
[2009-10-24 08:40:16 | 00,001,939 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2009-10-24 08:13:44 | 00,524,288 | -HS- | C] () -- C:\Users\dawido\ntuser.dat{505bbb43-bf93-11de-9d37-004f4e618da5}.TMContainer00000000000000000002.regtrans-ms
[2009-10-24 08:13:44 | 00,524,288 | -HS- | C] () -- C:\Users\dawido\ntuser.dat{505bbb43-bf93-11de-9d37-004f4e618da5}.TMContainer00000000000000000001.regtrans-ms
[2009-10-24 08:13:44 | 00,065,536 | -HS- | C] () -- C:\Users\dawido\ntuser.dat{505bbb43-bf93-11de-9d37-004f4e618da5}.TM.blf
[2009-10-20 21:45:32 | 00,002,178 | ---- | C] () -- C:\Users\dawido\AppData\Roaming\PStrip.ini
[2009-10-20 21:44:59 | 00,013,008 | ---- | C] () -- C:\Windows\SysNative\drivers\pstrip64.sys
[2009-10-20 16:32:44 | 00,000,740 | ---- | C] () -- C:\Users\Public\Desktop\NBA 2K10.lnk
[2009-10-20 16:26:35 | 01,575,648 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2009-10-19 05:16:17 | 00,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2009-10-18 19:57:26 | 00,000,904 | ---- | C] () -- C:\Users\dawido\Desktop\Splinter Cell Double Agent.lnk
[2009-10-18 18:55:31 | 00,002,014 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2009-10-18 15:54:55 | 42,088,1823 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2009-10-18 11:09:35 | 00,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_PCCSWpdDriver_01_05_00.Wdf
[2009-10-16 20:24:15 | 00,000,774 | ---- | C] () -- C:\Users\dawido\Desktop\rfg_launcher — skrót.lnk
[2009-10-16 18:17:37 | 00,000,684 | ---- | C] () -- C:\Users\dawido\Desktop\FIFA10 — skrót.lnk
[2009-10-16 16:29:37 | 00,000,573 | ---- | C] () -- C:\Users\Public\Desktop\Capitalism II.lnk
[2009-10-15 19:31:42 | 00,000,978 | ---- | C] () -- C:\Users\dawido\Desktop\Gadu-Gadu.lnk
[2009-10-14 21:08:51 | 00,438,840 | RHS- | C] () -- C:\bootxe1
[2009-10-14 21:08:51 | 00,171,136 | RHS- | C] () -- C:\XELD1
[2009-10-14 21:08:51 | 00,009,216 | RHS- | C] () -- C:\XELD1.1st
[2009-10-14 21:00:03 | 00,001,019 | ---- | C] () -- C:\Users\Public\Desktop\BitComet.lnk
[2009-10-14 20:27:19 | 00,063,336 | ---- | C] () -- C:\Windows\SysNative\BMXStateBkp-{00000004-00000000-00000000-00001102-0000000B-00411102}.rfx
[2009-10-14 20:27:19 | 00,063,336 | ---- | C] () -- C:\Windows\SysNative\BMXState-{00000004-00000000-00000000-00001102-0000000B-00411102}.rfx
[2009-10-14 20:27:19 | 00,000,820 | ---- | C] () -- C:\Windows\SysNative\DVCState-{00000004-00000000-00000000-00001102-0000000B-00411102}.rfx
[2009-10-14 20:26:04 | 00,007,062 | ---- | C] () -- C:\Windows\SysWow64\audiopid.vxd
[2009-10-14 20:24:56 | 00,212,992 | ---- | C] () -- C:\Windows\SysNative\APOMgr64.DLL
[2009-10-14 20:24:56 | 00,164,864 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL
[2009-10-14 20:24:56 | 00,089,088 | ---- | C] () -- C:\Windows\SysNative\CmdRtr64.DLL
[2009-10-14 20:24:56 | 00,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL
[2009-10-14 20:24:56 | 00,000,159 | RH-- | C] () -- C:\Windows\ctfile.rfc
[2009-10-14 20:23:30 | 00,001,076 | ---- | C] () -- C:\Users\dawido\Desktop\OFDR — skrót.lnk
[2009-10-14 20:07:09 | 00,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK
[2009-10-14 20:07:07 | 00,383,562 | RHS- | C] () -- C:\bootmgr
[2009-10-14 19:33:03 | 00,000,989 | ---- | C] () -- C:\Users\Public\Desktop\Winamp.lnk
[2009-10-14 19:27:59 | 00,000,363 | ---- | C] () -- C:\Users\dawido\Desktop\Komputer — skrót.lnk
[2009-10-14 19:26:27 | 02,031,384 | -H-- | C] () -- C:\Users\dawido\AppData\Local\IconCache.db
[2009-10-14 19:26:26 | 00,171,136 | ---- | C] () -- C:\grldr.bak
[2009-10-14 19:23:46 | 00,057,560 | ---- | C] () -- C:\Users\dawido\AppData\Local\GDIPFONTCACHEV1.DAT
[2009-10-14 19:14:54 | 01,572,864 | -HS- | C] () -- C:\Users\dawido\ntuser.dat
[2009-10-14 19:14:54 | 00,524,288 | -HS- | C] () -- C:\Users\dawido\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2009-10-14 19:14:54 | 00,524,288 | -HS- | C] () -- C:\Users\dawido\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2009-10-14 19:14:54 | 00,065,536 | -HS- | C] () -- C:\Users\dawido\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2009-10-14 19:14:54 | 00,000,020 | -HS- | C] () -- C:\Users\dawido\ntuser.ini
[2009-10-14 19:10:42 | 00,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2009-10-14 19:08:00 | 32,204,80000 | -HS- | C] () -- C:\hiberfil.sys
[2009-08-16 11:08:36 | 00,178,176 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2009-08-07 18:51:34 | 00,178,430 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2009-08-02 23:21:54 | 00,197,912 | ---- | C] () -- C:\Windows\SysWow64\physxcudart_20.dll
[2009-08-02 23:21:54 | 00,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2009-08-02 23:21:54 | 00,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll
[2009-08-02 23:21:54 | 00,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll
[2009-08-02 23:21:54 | 00,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2009-08-02 23:21:54 | 00,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll
[2009-08-02 23:21:54 | 00,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll
[2009-08-02 23:21:54 | 00,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll
[2009-08-02 23:21:52 | 00,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll
[2009-08-02 23:21:52 | 00,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll
[2009-07-14 06:32:39 | 00,043,318 | ---- | C] () -- C:\Windows\Fonts\GlobalUserInterface.CompositeFont
[2009-07-14 06:32:39 | 00,029,779 | ---- | C] () -- C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009-07-14 06:32:39 | 00,026,489 | ---- | C] () -- C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009-07-14 06:32:39 | 00,026,040 | ---- | C] () -- C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009-07-14 05:54:24 | 00,000,174 | -HS- | C] () -- C:\Program Files (x86)\desktop.ini
[2009-07-14 03:34:57 | 00,000,403 | ---- | C] () -- C:\Windows\win.ini
[2009-07-14 03:34:57 | 00,000,219 | ---- | C] () -- C:\Windows\system.ini
[2009-07-14 00:42:10 | 00,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009-07-14 00:14:20 | 00,027,839 | ---- | C] () -- C:\Windows\SysWow64\instwdm.ini
[2009-07-14 00:14:16 | 00,000,054 | ---- | C] () -- C:\Windows\SysWow64\ctzapxx.ini
[2009-07-13 23:28:04 | 00,002,560 | ---- | C] () -- C:\Windows\SysWow64\CTXFIRES.DLL
[2009-07-13 22:03:59 | 00,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009-05-29 16:52:26 | 00,204,800 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2009-05-29 16:47:06 | 00,881,664 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2009-05-26 11:12:38 | 00,000,285 | ---- | C] () -- C:\Windows\SysWow64\kill.ini
[2007-02-05 20:05:26 | 00,000,038 | ---- | C] () -- C:\Windows\AviSplitter.INI
========== Alternate Data Streams ==========
@Alternate Data Stream - 218 bytes -> C:\ProgramData\TEMP:DFC5A2B2
@Alternate Data Stream - 114 bytes -> C:\ProgramData\TEMP:A8ADE5D8
< End of report >
OTL Extras logfile created on: 2009-11-07 13:17:12 - Run 1
OTL by OldTimer - Version 3.1.4.0 Folder = C:\Users\dawido\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
4,00 Gb Total Physical Memory | 2,87 Gb Available Physical Memory | 71,80% Memory free
4,00 Gb Paging File | 4,00 Gb Available in Paging File | 100,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 68,36 Gb Total Space | 36,87 Gb Free Space | 53,94% Space Free | Partition Type: NTFS
Drive D: | 464,40 Gb Total Space | 254,70 Gb Free Space | 54,85% Space Free | Partition Type: NTFS
Drive E: | 398,75 Gb Total Space | 10,89 Gb Free Space | 2,73% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: DAWIDO-KOMPUTER
Current User Name: dawido
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.chm [@ = chm.file] -- "%SystemRoot%\hh.exe" %1
.cpl[@ = cplfile] -- C:\Windows\SysNative\control.exe (Microsoft Corporation)
.hlp[@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html[@ = htmlfile] -- C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation)
.inf[@ = inffile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
.ini[@ = inifile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)
.js[@ = JSFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.jse[@ = JSEFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.txt[@ = txtfile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
.vbe[@ = VBEFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.vbs[@ = VBSFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.wsf[@ = WSFFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.wsh[@ = WSHFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.chm [@ = chm.file] -- "%SystemRoot%\hh.exe" %1
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url [@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)
.reg [@ = regfile] -- C:\Windows\SysWow64\regedit.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
batfile [open] -- "%1" %* File not found
batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
chm.file [open] -- "%SystemRoot%\hh.exe" %1 File not found
cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
cmdfile [open] -- "%1" %* File not found
cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
comfile [open] -- "%1" %* File not found
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
http [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
https [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
inffile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsfile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsefile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation)
regfile [merge] -- Reg Error: Key error.
regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation)
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation)
vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbefile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbsfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
chm.file [open] -- "%SystemRoot%\hh.exe" %1 File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
http [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
https [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [open] -- regedit.exe "%1" (Microsoft Corporation)
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" (Microsoft Corporation)
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{68660049-8D48-427C-9FF7-139D8340CDC0}" = MSVC80_x64
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{B88F5E68-B0FB-950F-EC6F-82FB18DF3E5D}" = ATI Catalyst Install Manager
"{D72834D3-6A08-AF4B-B231-161A8B226D7B}" = ATI AVIVO64 Codecs
"E8A6D621B6D3FC5D43C68C549D959DE76EEF5D84" = Pakiet sterowników systemu Windows - Nokia Modem (06/01/2009 4.1)
"F779F5541ABD99C95C03B0FD5E3C058B22DA0FF7" = Pakiet sterowników systemu Windows - Nokia Modem (06/01/2009 7.01.0.3)
"FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D" = Pakiet sterowników systemu Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{086a7d8c-0a38-4c7f-819a-620275550d5c}" = Nero BurningROM
"{0A9C9BD5-8588-40D4-8A1A-860E3D2ED6EE}" = NBA 2K10
"{0C973594-7DDF-4BD0-84ED-3517F7622037}" = PC Connectivity Solution
"{11202615-E557-4ECF-9B86-F59C81E52909}" = FIFA 10
"{1A4052AB-BA77-44F7-8EE7-9F9131BFD7A6}" = OF Dragon Rising
"{1A7C2340-D1AC-4742-BCFF-1EA6CADFDC8B}" = Microsoft Windows Debugging Symbols
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{2348b586-c9ae-46ce-936c-a68e9426e214}" = Nero StartSmart Help
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java™ 6 Update 17
"{283FFB23-8751-4B08-ACB8-5E0F8BCF7727}" = Pro Evolution Soccer 2010
"{2c822a2f-4a5c-4f88-b07e-c6cb35ffa4e0}" = Nero 9
"{2E660A2A-A55F-43CD-9F73-CAD7382EEB78}" = Microsoft Games for Windows - LIVE Redistributable
"{300A2961-B2B5-4889-9CB9-5C2A570D08AD}" = Debugging Tools for Windows (x86)
"{3D39E775-DDDA-4327-B747-0BDC5F191331}" = Nokia PC Suite
"{438AD0E0-495F-11D6-B09D-0004769F25D1}" = Capitalism II
"{4A05FF52-4AA8-4681-BC06-5EE7F812A441}" = SEGA Rally
"{4A19D6AC-ADE0-4A07-80FF-9C9812C45557}" = Steinberg Cubase 5
"{52D02A2B-03D2-4E34-A358-DC5D951FD296}" = Nokia Connectivity Cable Driver
"{532B917B-8235-4FA5-BE36-643A8BB053A5}" = Steinberg REVerence Content 01
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5731C0A8-B266-451A-8D3F-8066AA21836F}" = Tom Clancy's Rainbow Six Vegas
"{595a3116-40bb-4e0f-a2e8-d7951da56270}" = NeroExpress
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6D1ACE56-38B1-1055-5926-EADFB056F2F2}" = Catalyst Control Center InstallProxy
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7748ac8c-18e3-43bb-959b-088faea16fb2}" = Nero StartSmart
"{7829db6f-a066-4e40-8912-cb07887c20bb}" = Nero BurnRights
"{7C11154F-3539-4CB5-979D-EF7913473E53}" = Prince of Persia
"{83202942-84b3-4c50-8622-b8c0aa2d2885}" = Nero Express
"{865D9ED1-EAC2-436D-AFA7-0B750EB5AAAB}" = Steinberg HALionOne Studio Drum Set
"{8C0CAA7A-3272-4991-A808-2C7559DE3409}" = Win7codecs
"{A357EF4C-2B6F-4980-ACA9-B1E42A74D7F3}" = Red Faction Guerrilla
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{AC76BA86-7AD7-1045-7B44-A92000000001}" = Adobe Reader 9.2 - Polish
"{AC997F93-0757-4ED4-A701-F40C2D654D09}" = Steinberg HALionOne GM Drum Set
"{b1adf008-e898-4fe2-8a1f-690d9a06acaf}" = DolbyFiles
"{b2ec4a38-b545-4a00-8214-13fe0e915e6d}" = Advertising Center
"{b78120a0-cf84-4366-a393-4d0a59bc546c}" = Menu Templates - Starter Kit
"{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4}" = Need for Speed™ SHIFT
"{bd5ca0da-71ad-43da-b19e-6eee0c9adc9a}" = Nero ControlCenter
"{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}" = Creative MediaSource 5
"{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}" = NVIDIA PhysX
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{d025a639-b9c9-417d-8531-208859000af8}" = NeroBurningROM
"{D23CBFDA-C46B-4920-BA70-FC7878A3F05A}" = Steinberg HALionOne Studio Set
"{D734A52D-624E-428E-8DE6-B2665E3621CC}" = Microsoft Windows Debugging Symbols
"{D82CDA0D-C182-42C8-8FF2-5649C98D6003}" = Steinberg HALionOne Pro Set
"{E22AD5D3-EB60-4A8F-835C-6C10E369DCE2}" = Steinberg HALionOne Expression Set
"{E397F6F0-AEE4-4236-BB05-1351350F8365}" = War Rock
"{e498385e-1c51-459a-b45f-1721e37aa1a0}" = Movie Templates - Starter Kit
"{E70E7159-93B1-470D-9FBD-D8E9EF34B538}" = Steinberg HALionOne
"{e8a80433-302b-4ff1-815d-fcc8eac482ff}" = Nero Installer
"{F057965A-D974-4C64-ADB1-4381CD4B8956}" = Steinberg HALionOne GM Set
"{F112F66E-25CA-42DD-983C-6118EB38F606}" = Microsoft Games for Windows - LIVE
"{F3AFD063-8BAD-485E-B641-E7F5A2C5AE71}" = Steinberg HALionOne Additional Content Set 01
"{f4041dce-3fe1-4e18-8a9e-9de65231ee36}" = Nero ControlCenter
"{f6bdd7c5-89ed-4569-9318-469aa9732572}" = Nero BurnRights
"{F7753BE0-62A0-0C91-A48E-ECA6D23F6C0F}" = HydraVision
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"AQQ" = WapSter AQQ
"Audacity 1.3 Beta (Unicode)_is1" = Audacity 1.3.9 (Unicode)
"AudioCS" = Creative Audio Control Panel
"avast!" = avast! Antivirus
"BitComet" = BitComet 1.05
"Browser Defender_is1" = Browser Defender 2.0.6.10
"Console Launcher" = Creative Console Launcher
"Creative Software AutoUpdate" = Creative Software AutoUpdate
"Creative Sound Blaster Properties x64 Edition" = Creative Sound Blaster Properties x64 Edition
"eMule" = eMule
"EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.30
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.2
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.2
"Gadu-Gadu" = Gadu-Gadu 7.7
"GamersFirst LIVE!" = GamersFirst LIVE!
"HijackThis" = HijackThis 2.0.2
"InstallShield_{4A05FF52-4AA8-4681-BC06-5EE7F812A441}" = SEGA Rally
"InstallShield_{A357EF4C-2B6F-4980-ACA9-B1E42A74D7F3}" = Red Faction Guerrilla
"Mozilla Firefox (3.5.4)" = Mozilla Firefox (3.5.4)
"My Global Search Uninstall" = My Global Search Bar
"Nokia PC Suite" = Nokia PC Suite
"OpenAL" = OpenAL
"SCDA_is1" = Tom Clancy's Splinter Cell: Double Agent
"Spyware Doctor" = Spyware Doctor 7.0
"Streamripper" = Streamripper (Remove only)
"Tropico3" = Tropico 3 1.00
"Uninstall_is1" = Uninstall 1.0.0.1
"Winamp" = Winamp
"WinRAR archiver" = Archiwizator WinRAR
"Xilisoft 3GP Video Converter" = Xilisoft 3GP Video Converter
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"BitTorrent DNA" = DNA
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 2009-11-05 10:42:31 | Computer Name = dawido-Komputer | Source = SideBySide | ID = 16842815
Description = Nie można wygenerować kontekstu aktywacji dla "c:\program files (x86)\WapSter\wapster
aqq\System\DelZip179.dll". Błąd w pliku manifestu lub w pliku zasad "c:\program
files (x86)\WapSter\wapster aqq\System\DelZip179.dll" w wierszu 8. Wartość "*" atrybutu
"language" elementu "assemblyIdentity" jest nieprawidłowa.
Error - 2009-11-05 10:42:37 | Computer Name = dawido-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Program Files (x86)\Nokia\Nokia
PC Suite 7\TIS_VistaPIM.dll". Nie można odnaleźć zestawu zależnego Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.
Error - 2009-11-05 14:37:43 | Computer Name = dawido-Komputer | Source = SideBySide | ID = 16842815
Description = Nie można wygenerować kontekstu aktywacji dla "c:\program files (x86)\WapSter\wapster
aqq\System\DelZip179.dll". Błąd w pliku manifestu lub w pliku zasad "c:\program
files (x86)\WapSter\wapster aqq\System\DelZip179.dll" w wierszu 8. Wartość "*" atrybutu
"language" elementu "assemblyIdentity" jest nieprawidłowa.
Error - 2009-11-05 14:37:57 | Computer Name = dawido-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Program Files (x86)\Nokia\Nokia
PC Suite 7\TIS_VistaPIM.dll". Nie można odnaleźć zestawu zależnego Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.
Error - 2009-11-06 02:24:53 | Computer Name = dawido-Komputer | Source = SideBySide | ID = 16842815
Description = Nie można wygenerować kontekstu aktywacji dla "c:\program files (x86)\WapSter\wapster
aqq\System\DelZip179.dll". Błąd w pliku manifestu lub w pliku zasad "c:\program
files (x86)\WapSter\wapster aqq\System\DelZip179.dll" w wierszu 8. Wartość "*" atrybutu
"language" elementu "assemblyIdentity" jest nieprawidłowa.
Error - 2009-11-06 02:25:02 | Computer Name = dawido-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Program Files (x86)\Nokia\Nokia
PC Suite 7\TIS_VistaPIM.dll". Nie można odnaleźć zestawu zależnego Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.
Error - 2009-11-06 06:58:23 | Computer Name = dawido-Komputer | Source = EventSystem | ID = 4621
Description =
Error - 2009-11-06 17:46:27 | Computer Name = dawido-Komputer | Source = EventSystem | ID = 4621
Description =
Error - 2009-11-07 02:20:12 | Computer Name = dawido-Komputer | Source = SideBySide | ID = 16842815
Description = Nie można wygenerować kontekstu aktywacji dla "c:\program files (x86)\WapSter\wapster
aqq\System\DelZip179.dll". Błąd w pliku manifestu lub w pliku zasad "c:\program
files (x86)\WapSter\wapster aqq\System\DelZip179.dll" w wierszu 8. Wartość "*" atrybutu
"language" elementu "assemblyIdentity" jest nieprawidłowa.
Error - 2009-11-07 02:20:24 | Computer Name = dawido-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Program Files (x86)\Nokia\Nokia
PC Suite 7\TIS_VistaPIM.dll". Nie można odnaleźć zestawu zależnego Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.
[ System Events ]
Error - 2009-11-06 07:24:59 | Computer Name = dawido-Komputer | Source = atikmdag | ID = 43029
Description = Display is not active
Error - 2009-11-06 17:37:24 | Computer Name = dawido-Komputer | Source = atikmdag | ID = 43029
Description = Display is not active
Error - 2009-11-06 17:46:30 | Computer Name = dawido-Komputer | Source = atikmdag | ID = 43029
Description = Display is not active
Error - 2009-11-06 17:46:37 | Computer Name = dawido-Komputer | Source = atikmdag | ID = 43029
Description = Display is not active
Error - 2009-11-07 01:57:36 | Computer Name = dawido-Komputer | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter
Error - 2009-11-07 01:57:36 | Computer Name = dawido-Komputer | Source = atikmdag | ID = 43029
Description = Display is not active
Error - 2009-11-07 07:02:35 | Computer Name = dawido-Komputer | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter
Error - 2009-11-07 07:02:35 | Computer Name = dawido-Komputer | Source = atikmdag | ID = 43029
Description = Display is not active
Error - 2009-11-07 08:09:48 | Computer Name = dawido-Komputer | Source = atikmdag | ID = 43029
Description = Display is not active
Error - 2009-11-07 08:10:23 | Computer Name = dawido-Komputer | Source = atikmdag | ID = 43029
Description = Display is not active
< End of report >
Malwarebytes' Anti-Malware 1.41
Wersja bazy definicji: 2775
Windows 6.1.7600
2009-11-07 13:27:28
mbam-log-2009-11-07 (13-27-28).txt
Typ skanowania: Szybkie skanowanie
Przeskanowane obiekty: 86406
Upłynęło: 2 minute(s), 11 second(s)
Zainfekowane procesy w pamięci: 0
Zainfekowane moduły pamięci: 0
Zainfekowane klucze rejestru: 8
Zainfekowane wartości rejestru: 0
Zainfekowane pliki rejestru: 1
Zainfekowane foldery: 0
Zainfekowane pliki: 0
Zainfekowane procesy w pamięci:
(Nie wykryto groźnych plików)
Zainfekowane moduły pamięci:
(Nie wykryto groźnych plików)
Zainfekowane klucze rejestru:
HKEY_CLASSES_ROOT\myglobalsearchbar.settingsplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\myglobalsearchbar.settingsplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\myglobalsearchbar.toolbarplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\myglobalsearchbar.toolbarplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{37b85a2a-692b-4205-9cad-2626e4993404} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{37b85a2c-692b-4205-9cad-2626e4993404} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{37b85a2b-692b-4205-9cad-2626e4993404} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\MyGlobalSearch (Adware.BookedSpace) -> Quarantined and deleted successfully.
Zainfekowane wartości rejestru:
(Nie wykryto groźnych plików)
Zainfekowane pliki rejestru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
Zainfekowane foldery:
(Nie wykryto groźnych plików)
Zainfekowane pliki:
(Nie wykryto groźnych plików)
OTL logfile created on: 2009-11-07 13:17:12 - Run 1
OTL by OldTimer - Version 3.1.4.0 Folder = C:\Users\dawido\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
4,00 Gb Total Physical Memory | 2,87 Gb Available Physical Memory | 71,80% Memory free
4,00 Gb Paging File | 4,00 Gb Available in Paging File | 100,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 68,36 Gb Total Space | 36,87 Gb Free Space | 53,94% Space Free | Partition Type: NTFS
Drive D: | 464,40 Gb Total Space | 254,70 Gb Free Space | 54,85% Space Free | Partition Type: NTFS
Drive E: | 398,75 Gb Total Space | 10,89 Gb Free Space | 2,73% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: DAWIDO-KOMPUTER
Current User Name: dawido
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
========== Processes (SafeList) ==========
PRC - [2009-11-07 13:15:34 | 00,528,896 | ---- | M] (OldTimer Tools) -- C:\Users\dawido\Desktop\OTL.exe
PRC - [2009-11-07 12:12:26 | 00,323,392 | ---- | M] (BitTorrent, Inc.) -- C:\Users\dawido\Program Files (x86)\DNA\btdna.exe
PRC - [2009-11-07 12:12:26 | 00,323,392 | ---- | M] (BitTorrent, Inc.) -- C:\Users\dawido\Program Files (x86)\DNA\btdna.exe
PRC - [2009-11-03 21:16:08 | 00,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\Java\jre6\bin\jusched.exe
PRC - [2009-11-01 12:26:34 | 00,075,064 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2009-10-28 16:28:06 | 00,908,280 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2009-10-28 16:28:06 | 00,908,280 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2009-10-28 16:28:06 | 00,908,280 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2009-10-28 01:33:12 | 02,665,328 | ---- | M] () -- C:\Program Files (x86)\GamersFirst\LIVE!\Live.exe
PRC - [2009-10-08 11:31:44 | 00,112,592 | ---- | M] (Threat Expert Ltd.) -- E:\programy\Spyware Doctor\BDT\BDTUpdateService.exe
PRC - [2009-10-08 11:31:44 | 00,112,592 | ---- | M] (Threat Expert Ltd.) -- E:\programy\Spyware Doctor\BDT\BDTUpdateService.exe
PRC - [2009-09-15 12:56:48 | 00,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashDisp.exe
PRC - [2009-09-15 12:56:43 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2009-09-15 12:56:43 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2009-09-15 12:56:43 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe
PRC - [2009-09-15 12:56:28 | 00,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
PRC - [2009-09-15 12:54:13 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009-09-15 12:54:13 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009-09-15 12:54:13 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009-09-15 12:54:13 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009-09-15 12:54:13 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009-09-15 12:54:13 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
PRC - [2009-09-15 12:49:40 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
PRC - [2009-07-13 23:28:00 | 00,024,576 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysWOW64\Ctxfihlp.exe
PRC - [2009-07-13 23:22:08 | 01,263,616 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysWOW64\CTxfispi.exe
PRC - [2009-02-23 10:43:54 | 00,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
PRC - [2009-02-23 10:43:54 | 00,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
PRC - [2009-02-23 10:43:54 | 00,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
PRC - [2009-02-23 10:43:54 | 00,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
PRC - [2008-09-30 12:48:28 | 00,935,208 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
========== Modules (SafeList) ==========
MOD - [2009-11-07 13:15:34 | 00,528,896 | ---- | M] (OldTimer Tools) -- C:\Users\dawido\Desktop\OTL.exe
MOD - [2009-07-14 02:16:17 | 01,123,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll
MOD - [2009-07-14 02:16:17 | 00,056,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll
MOD - [2009-07-14 02:16:15 | 00,171,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll
MOD - [2009-07-14 02:16:15 | 00,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll
MOD - [2009-07-14 02:14:57 | 00,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll
MOD - [2009-07-14 02:03:50 | 01,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV:64bit: - [2009-09-15 12:56:43 | 00,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashServ.exe -- (avast! Antivirus)
SRV:64bit: - [2009-09-15 12:56:28 | 00,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe -- (avast! Mail Scanner)
SRV:64bit: - [2009-09-15 12:54:13 | 00,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\ashWebSv.exe -- (avast! Web Scanner)
SRV:64bit: - [2009-09-15 12:49:40 | 00,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe -- (aswUpdSv)
SRV:64bit: - [2009-07-30 06:40:54 | 00,202,752 | ---- | M] (AMD) -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009-07-14 02:41:59 | 00,229,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wwansvc.dll -- (WwanSvc)
SRV:64bit: - [2009-07-14 02:41:56 | 00,202,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wbiosrvc.dll -- (WbioSrvc)
SRV:64bit: - [2009-07-14 02:41:56 | 00,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\umpo.dll -- (Power)
SRV:64bit: - [2009-07-14 02:41:55 | 00,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\themeservice.dll -- (Themes)
SRV:64bit: - [2009-07-14 02:41:54 | 00,065,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sppuinotify.dll -- (sppuinotify)
SRV:64bit: - [2009-07-14 02:41:54 | 00,029,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sensrsvc.dll -- (SensrSvc)
SRV:64bit: - [2009-07-14 02:41:53 | 00,327,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pnrpsvc.dll -- (PNRPsvc)
SRV:64bit: - [2009-07-14 02:41:53 | 00,327,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pnrpsvc.dll -- (p2pimsvc)
SRV:64bit: - [2009-07-14 02:41:53 | 00,187,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\provsvc.dll -- (HomeGroupProvider)
SRV:64bit: - [2009-07-14 02:41:53 | 00,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\RpcEpMap.dll -- (RpcEptMapper)
SRV:64bit: - [2009-07-14 02:41:53 | 00,025,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\pnrpauto.dll -- (PNRPAutoReg)
SRV:64bit: - [2009-07-14 02:41:27 | 01,011,712 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2009-07-14 02:41:18 | 00,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ListSvc.dll -- (HomeGroupListener)
SRV:64bit: - [2009-07-14 02:40:54 | 01,127,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\FntCache.dll -- (FontCache)
SRV:64bit: - [2009-07-14 02:40:28 | 00,314,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\dhcpcore.dll -- (Dhcp)
SRV:64bit: - [2009-07-14 02:40:28 | 00,291,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\defragsvc.dll -- (defragsvc)
SRV:64bit: - [2009-07-14 02:40:13 | 00,083,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\bthserv.dll -- (bthserv)
SRV:64bit: - [2009-07-14 02:40:10 | 00,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\bdesvc.dll -- (BDESVC)
SRV:64bit: - [2009-07-14 02:40:05 | 00,114,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\AxInstSv.dll -- (AxInstSV)
SRV:64bit: - [2009-07-14 02:40:01 | 00,032,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\appidsvc.dll -- (AppIDSvc)
SRV:64bit: - [2009-07-14 02:39:56 | 01,525,248 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
SRV:64bit: - [2009-07-14 02:39:51 | 01,503,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wbengine.exe -- (wbengine)
SRV:64bit: - [2009-07-14 02:39:28 | 03,524,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\sppsvc.exe -- (sppsvc)
SRV:64bit: - [2009-07-14 02:39:11 | 00,689,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\FXSSVC.exe -- (Fax)
SRV - [2009-11-01 12:26:34 | 00,075,064 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2009-10-14 20:25:35 | 00,079,360 | ---- | M] (Creative Labs) -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)
SRV - [2009-10-08 11:31:44 | 00,112,592 | ---- | M] (Threat Expert Ltd.) -- E:\programy\Spyware Doctor\BDT\BDTUpdateService.exe -- (Browser Defender Update Service)
SRV - [2009-09-23 13:33:42 | 01,141,200 | ---- | M] (PC Tools) -- E:\programy\Spyware Doctor\pctsSvc.exe -- (sdCoreService)
SRV - [2009-09-23 12:17:22 | 00,358,600 | ---- | M] (PC Tools) -- E:\programy\Spyware Doctor\pctsAuxs.exe -- (sdAuxService)
SRV - [2009-07-14 04:20:14 | 00,000,000 | ---D | M] -- C:\Windows\Vss -- (VSS)
SRV - [2009-07-14 04:20:14 | 00,000,000 | ---D | M] -- C:\Windows\SysWOW64\Msdtc -- (MSDTC)
SRV - [2009-07-14 02:39:09 | 00,696,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehrecvr.exe -- (ehRecvr)
SRV - [2009-07-14 02:39:09 | 00,127,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\ehome\ehsched.exe -- (ehSched)
SRV - [2009-07-14 02:16:12 | 00,165,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\provsvc.dll -- (HomeGroupProvider)
SRV - [2009-07-14 02:15:11 | 00,253,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp)
SRV - [2009-07-13 21:30:11 | 00,061,056 | ---- | M] () -- C:\Windows\SysWOW64\wbem\vds.mof -- (vds)
SRV - [2009-06-10 22:23:09 | 00,066,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009-06-10 21:39:58 | 00,089,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_64)
SRV - [2009-06-10 21:30:59 | 00,042,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0)
SRV - [2009-06-10 21:30:45 | 00,856,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc)
SRV - [2009-06-02 09:10:08 | 00,637,952 | ---- | M] (Nokia.) -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2009-02-23 10:43:54 | 00,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)
SRV - [2008-09-30 12:48:28 | 00,935,208 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
========== Driver Services (SafeList) ==========
DRV:64bit: - [2009-11-02 11:49:12 | 00,834,544 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2009-10-31 16:34:38 | 00,314,016 | ---- | M] () -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)
DRV:64bit: - [2009-10-31 16:34:38 | 00,043,680 | ---- | M] () -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)
DRV:64bit: - [2009-09-23 16:10:04 | 00,218,056 | ---- | M] (PC Tools) -- C:\Windows\SysNative\drivers\PCTCore64.sys -- (PCTCore)
DRV:64bit: - [2009-09-15 12:55:43 | 00,089,680 | ---- | M] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2009-09-15 12:55:24 | 00,022,096 | ---- | M] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2009-09-15 12:55:16 | 00,065,616 | ---- | M] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2009-09-15 12:54:34 | 00,059,472 | ---- | M] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2009-09-15 12:54:24 | 00,027,216 | ---- | M] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswRdr.sys -- (aswRdr)
DRV:64bit: - [2009-07-30 14:24:38 | 06,103,552 | ---- | M] (ATI Technologies Inc.) -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:64bit: - [2009-07-24 07:49:00 | 00,119,312 | ---- | M] (ATI Technologies, Inc.) -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV:64bit: - [2009-07-14 02:52:21 | 00,106,576 | ---- | M] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009-07-14 02:52:21 | 00,028,752 | ---- | M] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009-07-14 02:52:20 | 00,194,128 | ---- | M] (AMD Technologies Inc.) -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009-07-14 02:48:04 | 00,153,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ksecpkg.sys -- (KSecPkg)
DRV:64bit: - [2009-07-14 02:48:04 | 00,065,600 | ---- | M] (LSI Corporation) -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009-07-14 02:48:04 | 00,014,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hwpolicy.sys -- (hwpolicy)
DRV:64bit: - [2009-07-14 02:47:49 | 00,055,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fsdepends.sys -- (FsDepends)
DRV:64bit: - [2009-07-14 02:47:48 | 00,077,888 | ---- | M] (Hewlett-Packard Company) -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009-07-14 02:45:56 | 00,022,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\wimmount.sys -- (WIMMount)
DRV:64bit: - [2009-07-14 02:45:55 | 00,217,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\vhdmp.sys -- (vhdmp)
DRV:64bit: - [2009-07-14 02:45:55 | 00,036,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\vdrvroot.sys -- (vdrvroot)
DRV:64bit: - [2009-07-14 02:45:55 | 00,024,656 | ---- | M] (Promise Technology) -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009-07-14 02:45:46 | 00,214,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rdyboost.sys -- (rdyboost)
DRV:64bit: - [2009-07-14 02:45:45 | 00,050,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\pcw.sys -- (pcw)
DRV:64bit: - [2009-07-14 02:43:14 | 00,460,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\cng.sys -- (CNG)
DRV:64bit: - [2009-07-14 02:43:13 | 00,223,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fvevol.sys -- (fvevol)
DRV:64bit: - [2009-07-14 01:54:52 | 01,613,336 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysNative\drivers\ha20x22k.sys -- (ha20x22k)
DRV:64bit: - [2009-07-14 01:54:38 | 01,568,792 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysNative\drivers\ha20x2k.sys -- (ha20x2k)
DRV:64bit: - [2009-07-14 01:54:28 | 00,118,296 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysNative\drivers\emupia2k.sys -- (emupia)
DRV:64bit: - [2009-07-14 01:54:18 | 00,213,016 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysNative\drivers\ctsfm2k.sys -- (ctsfm2k)
DRV:64bit: - [2009-07-14 01:54:12 | 00,015,896 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysNative\drivers\ctprxy2k.sys -- (ctprxy2k)
DRV:64bit: - [2009-07-14 01:54:04 | 00,179,224 | ---- | M] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\ctoss2k.sys -- (ossrv)
DRV:64bit: - [2009-07-14 01:53:54 | 00,696,984 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysNative\drivers\ctaud2k.sys -- (ctaud2k)
DRV:64bit: - [2009-07-14 01:53:46 | 00,580,632 | ---- | M] (Creative Technology Ltd) -- C:\Windows\SysNative\drivers\ctac32k.sys -- (ctac32k)
DRV:64bit: - [2009-07-14 01:53:36 | 01,445,912 | ---- | M] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\CTEXFIFX.sys -- (CTEXFIFX.SYS)
DRV:64bit: - [2009-07-14 01:53:36 | 01,445,912 | ---- | M] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\CTEXFIFX.sys -- (CTEXFIFX)
DRV:64bit: - [2009-07-14 01:53:24 | 00,095,256 | ---- | M] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\CTHWIUT.sys -- (CTHWIUT.SYS)
DRV:64bit: - [2009-07-14 01:53:24 | 00,095,256 | ---- | M] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\CTHWIUT.sys -- (CTHWIUT)
DRV:64bit: - [2009-07-14 01:53:16 | 00,230,424 | ---- | M] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\CT20XUT.sys -- (CT20XUT.SYS)
DRV:64bit: - [2009-07-14 01:53:16 | 00,230,424 | ---- | M] (Creative Technology Ltd.) -- C:\Windows\SysNative\drivers\CT20XUT.sys -- (CT20XUT)
DRV:64bit: - [2009-07-14 01:17:46 | 00,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rdpbus.sys -- (rdpbus)
DRV:64bit: - [2009-07-14 01:16:35 | 00,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\RDPREFMP.sys -- (RDPREFMP)
DRV:64bit: - [2009-07-14 01:10:24 | 00,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\agilevpn.sys -- (RasAgileVpn)
DRV:64bit: - [2009-07-14 01:09:26 | 00,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\wfplwf.sys -- (WfpLwf)
DRV:64bit: - [2009-07-14 01:08:13 | 00,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ndiscap.sys -- (NdisCap)
DRV:64bit: - [2009-07-14 01:07:21 | 00,024,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\vwifibus.sys -- (vwifibus)
DRV:64bit: - [2009-07-14 01:07:13 | 00,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\1394ohci.sys -- (1394ohci)
DRV:64bit: - [2009-07-14 01:07:00 | 00,350,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\HdAudio.sys -- (HdAudAddService)
DRV:64bit: - [2009-07-14 01:06:52 | 00,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\umpass.sys -- (UmPass)
DRV:64bit: - [2009-07-14 01:06:32 | 00,032,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:64bit: - [2009-07-14 01:06:24 | 00,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\mshidkmdf.sys -- (mshidkmdf)
DRV:64bit: - [2009-07-14 01:05:37 | 00,112,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\WUDFPf.sys -- (WudfPf)
DRV:64bit: - [2009-07-14 01:02:08 | 00,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\MTConfig.sys -- (MTConfig)
DRV:64bit: - [2009-07-14 01:00:34 | 00,038,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\CompositeBus.sys -- (CompositeBus)
DRV:64bit: - [2009-07-14 01:00:13 | 00,006,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\beep.sys -- (Beep)
DRV:64bit: - [2009-07-14 00:52:39 | 00,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\appid.sys -- (AppID)
DRV:64bit: - [2009-07-14 00:50:17 | 00,029,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\scfilter.sys -- (scfilter)
DRV:64bit: - [2009-07-14 00:37:18 | 00,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\discache.sys -- (discache)
DRV:64bit: - [2009-07-14 00:31:06 | 00,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidbatt.sys -- (HidBatt)
DRV:64bit: - [2009-07-14 00:31:03 | 00,017,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\CmBatt.sys -- (CmBatt)
DRV:64bit: - [2009-07-14 00:27:17 | 00,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\acpipmi.sys -- (AcpiPmi)
DRV:64bit: - [2009-07-14 00:19:25 | 00,060,928 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\amdppm.sys -- (AmdPPM)
DRV:64bit: - [2009-06-10 21:35:53 | 00,051,712 | ---- | M] (Realtek Semiconductor Corporation ) -- C:\Windows\SysNative\drivers\Rtnic64.sys -- (RTL8023x64)
DRV:64bit: - [2009-06-10 21:35:33 | 00,389,120 | ---- | M] (Marvell) -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)
DRV:64bit: - [2009-06-10 21:34:33 | 03,286,016 | ---- | M] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009-06-10 21:34:28 | 00,468,480 | ---- | M] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009-06-10 21:34:23 | 00,270,848 | ---- | M] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009-06-10 21:31:59 | 00,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009-05-23 00:08:37 | 00,036,352 | ---- | M] (Elaborate Bytes AG) -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone)
DRV:64bit: - [2009-02-09 07:38:44 | 00,008,192 | ---- | M] (Nokia) -- C:\Windows\SysNative\drivers\usbser_lowerfltx64j.sys -- (UsbserFilt)
DRV:64bit: - [2009-02-09 07:38:34 | 00,018,944 | ---- | M] (Nokia) -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcdx64)
DRV:64bit: - [2009-02-09 07:38:34 | 00,008,192 | ---- | M] (Nokia) -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
DRV:64bit: - [2009-02-09 07:38:32 | 00,025,088 | ---- | M] (Nokia) -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdcx64)
DRV:64bit: - [2008-08-28 11:44:42 | 00,025,600 | ---- | M] (Nokia) -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
DRV - [2009-07-14 02:19:10 | 00,019,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2009-07-14 02:16:02 | 00,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netbios.dll -- (NetBIOS)
DRV - [2009-06-10 22:28:14 | 00,001,088 | ---- | M] () -- C:\Windows\SysWOW64\wbem\mpsdrv.mof -- (mpsdrv)
DRV - [2009-06-10 22:15:18 | 00,003,066 | ---- | M] () -- C:\Windows\SysWOW64\wbem\tcpip.mof -- (Tcpip)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..extensions.enabledItems: {d5bc46d8-67c7-11dc-8c1d-0097498c2b7a}:1.0.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.4
FF - HKLM\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files (x86)\Nokia\Nokia PC Suite 7\bkmrksync\ [2009-10-24 14:00:38 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.4\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2009-10-28 16:28:07 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.4\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2009-11-03 21:16:12 | 00,000,000 | ---D | M]
[2009-10-14 19:34:18 | 00,000,000 | ---D | M] -- C:\Users\dawido\AppData\Roaming\mozilla\Extensions
[2009-10-14 19:34:18 | 00,000,000 | ---D | M] -- C:\Users\dawido\AppData\Roaming\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009-10-14 19:34:18 | 00,000,000 | ---D | M] -- C:\Users\dawido\AppData\Roaming\mozilla\Firefox\Profiles\gjw8yhm3.default\extensions
[2009-11-03 21:16:13 | 00,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions
[2009-10-28 16:28:07 | 00,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009-11-03 21:16:13 | 00,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
[2009-10-28 16:28:06 | 00,023,544 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browserdirprovider.dll
[2009-10-28 16:28:06 | 00,137,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\brwsrcmp.dll
[2007-04-10 16:21:08 | 00,163,256 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll
[2009-11-03 21:16:08 | 00,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeploytk.dll
[2009-10-28 16:28:07 | 00,065,016 | ---- | M] (mozilla.org) -- C:\Program Files (x86)\mozilla firefox\plugins\npnul32.dll
[2009-02-27 12:13:42 | 00,103,792 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll
[2009-08-24 20:19:13 | 00,002,767 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml
[2009-08-24 20:19:13 | 00,001,406 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml
[2009-08-24 20:19:13 | 00,002,371 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\google.xml
[2009-08-24 20:19:13 | 00,000,917 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml
[2009-08-24 20:19:13 | 00,000,858 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml
[2009-08-24 20:19:13 | 00,001,183 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml
[2009-08-24 20:19:13 | 00,001,683 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml
O1 HOSTS File: (824 bytes) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (PC Tools Browser Guard BHO) - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - E:\programy\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - E:\programy\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - E:\programy\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast!] C:\Program Files\Alwil Software\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [CTxfiHlp] C:\Windows\SysWow64\Ctxfihlp.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files (x86)\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe File not found
O4 - HKCU..\Run: [BitTorrent DNA] C:\Users\dawido\Program Files (x86)\DNA\btdna.exe (BitTorrent, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceActiveDesktopOn = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O8:64bit: - Extra context menu item: &D&ownload &with BitComet - C:\Program Files (x86)\BitComet\BitComet.exe (www.BitComet.com)
O8:64bit: - Extra context menu item: &D&ownload all video with BitComet - C:\Program Files (x86)\BitComet\BitComet.exe (www.BitComet.com)
O8:64bit: - Extra context menu item: &D&ownload all with BitComet - C:\Program Files (x86)\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: &D&ownload &with BitComet - C:\Program Files (x86)\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: &D&ownload all video with BitComet - C:\Program Files (x86)\BitComet\BitComet.exe (www.BitComet.com)
O8 - Extra context menu item: &D&ownload all with BitComet - C:\Program Files (x86)\BitComet\BitComet.exe (www.BitComet.com)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.5.3.1 195.110.50.4
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O30:64bit: - LSA: Security Packages - (pku2u) - C:\Windows\SysNative\pku2u.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{81b70e6f-c79d-11de-a824-004f4e618da5}\Shell - "" = AutoRun
O33 - MountPoints2\{81b70e6f-c79d-11de-a824-004f4e618da5}\Shell\AutoRun\command - "" = H:\Autorun.exe -- File not found
O33 - MountPoints2\{ce1267d9-b8f0-11de-9e9f-004f4e618da5}\Shell - "" = AutoRun
O33 - MountPoints2\{ce1267d9-b8f0-11de-9e9f-004f4e618da5}\Shell\AutoRun\command - "" = G:\setup.exe -- File not found
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\Windows\SysWow64\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found
64bit: O35 - comfile [open] -- "%1" %* File not found
64bit: O35 - exefile [open] -- "%1" %* File not found
O35 - comfile [open] -- "%1" %* File not found
O35 - exefile [open] -- "%1" %* File not found
========== Files/Folders - Created Within 30 Days ==========
[2009-11-07 13:17:56 | 04,045,528 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\dawido\Desktop\mbam-setup.exe
[2009-11-07 13:15:33 | 00,528,896 | ---- | C] (OldTimer Tools) -- C:\Users\dawido\Desktop\OTL.exe
[2009-11-06 23:28:29 | 00,000,000 | ---D | C] -- C:\Users\dawido\Documents\NFS SHIFT
[2009-11-06 06:43:57 | 00,000,000 | ---D | C] -- C:\Users\dawido\Program Files (x86)
[2009-11-05 22:04:41 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\GamersFirst LIVE!
[2009-11-05 22:04:35 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\DNA
[2009-11-05 22:04:34 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\DNA
[2009-11-05 22:04:34 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\GamersFirst
[2009-11-05 22:04:34 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\DNA
[2009-11-05 21:53:56 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\WarRockDF
[2009-11-05 21:50:04 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\Threat Expert
[2009-11-04 21:57:41 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\Adobe
[2009-11-04 15:28:07 | 00,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2009-11-04 15:28:07 | 00,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2009-11-04 15:27:02 | 01,177,600 | ---- | C] (AD) -- C:\Windows\SysWow64\SYNSOEMU.DLL
[2009-11-04 15:26:55 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\VST3
[2009-11-04 15:26:16 | 00,000,000 | ---D | C] -- C:\ProgramData\VST3 Presets
[2009-11-04 15:26:16 | 00,000,000 | ---D | C] -- C:\ProgramData\VST3 Presets
[2009-11-04 15:21:25 | 00,000,000 | ---D | C] -- C:\ProgramData\Steinberg
[2009-11-04 15:21:25 | 00,000,000 | ---D | C] -- C:\ProgramData\Steinberg
[2009-11-04 15:21:05 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Steinberg
[2009-11-04 15:19:50 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Steinberg
[2009-11-04 15:19:12 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Steinberg
[2009-11-03 21:16:12 | 00,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deploytk.dll
[2009-11-03 21:16:12 | 00,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2009-11-03 21:16:12 | 00,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2009-11-03 21:16:12 | 00,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2009-11-03 21:16:07 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2009-11-03 16:21:41 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Trend Micro
[2009-11-03 15:44:01 | 00,059,472 | ---- | C] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2009-11-03 15:44:01 | 00,027,216 | ---- | C] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswRdr.sys
[2009-11-03 15:44:00 | 00,097,480 | ---- | C] (ALWIL Software) -- C:\Windows\SysNative\AvastSS.scr
[2009-11-03 15:43:59 | 00,089,680 | ---- | C] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2009-11-03 15:43:59 | 00,065,616 | ---- | C] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2009-11-03 15:43:59 | 00,022,096 | ---- | C] (ALWIL Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2009-11-03 15:43:46 | 01,279,968 | ---- | C] (ALWIL Software) -- C:\Windows\SysWow64\aswBoot.exe
[2009-11-03 15:43:45 | 00,000,000 | ---D | C] -- C:\Program Files\Alwil Software
[2009-11-02 23:05:06 | 00,000,000 | ---D | C] -- C:\Symbols2
[2009-11-02 22:47:49 | 00,000,000 | ---D | C] -- C:\Symbols
[2009-11-02 22:08:46 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Debugging Tools for Windows (x86)
[2009-11-02 20:24:15 | 00,000,000 | ---D | C] -- C:\Users\dawido\Documents\Ubisoft
[2009-11-02 20:13:05 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\InstallShield
[2009-11-02 19:12:44 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Lavalys
[2009-11-02 18:58:13 | 00,311,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msv1_0.dll
[2009-11-02 18:58:13 | 00,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msv1_0.dll
[2009-11-02 18:58:07 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0
[2009-11-02 18:57:34 | 14,629,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
[2009-11-02 18:57:33 | 11,406,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
[2009-11-02 18:57:32 | 12,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL
[2009-11-02 18:57:32 | 12,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
[2009-11-02 18:57:32 | 02,868,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2009-11-02 18:57:32 | 02,613,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe
[2009-11-02 18:57:32 | 01,975,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertEnroll.dll
[2009-11-02 18:57:32 | 01,320,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertEnroll.dll
[2009-11-02 18:57:32 | 00,982,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgkrnl.sys
[2009-11-02 18:57:32 | 00,366,080 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2009-11-02 18:57:32 | 00,293,888 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2009-11-02 18:57:32 | 00,148,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll
[2009-11-02 18:57:32 | 00,108,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll
[2009-11-02 18:57:32 | 00,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll
[2009-11-02 18:57:32 | 00,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
[2009-11-02 18:57:26 | 00,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msasn1.dll
[2009-11-02 18:57:26 | 00,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msasn1.dll
[2009-11-02 17:06:14 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\DAEMON Tools Lite
[2009-11-02 16:52:14 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Win7codecs
[2009-11-02 16:52:12 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Win7codecs
[2009-11-02 16:51:02 | 00,000,000 | ---D | C] -- C:\ProgramData\Win7codecs
[2009-11-02 16:51:02 | 00,000,000 | ---D | C] -- C:\ProgramData\Win7codecs
[2009-11-02 11:48:57 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Lite
[2009-11-02 11:48:36 | 00,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2009-11-02 11:48:36 | 00,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite
[2009-11-01 17:21:25 | 00,000,000 | ---D | C] -- C:\Users\Public\Documents\SEGA Rally
[2009-11-01 17:12:14 | 00,000,000 | ---D | C] -- C:\Users\dawido\Documents\Sega Rally
[2009-11-01 12:08:48 | 00,000,000 | ---D | C] -- C:\Users\dawido\Desktop\pbsetup
[2009-11-01 11:10:42 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Tropico 3
[2009-11-01 11:07:49 | 02,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll
[2009-11-01 11:07:49 | 01,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_41.dll
[2009-11-01 11:07:49 | 00,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll
[2009-11-01 11:07:49 | 00,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_41.dll
[2009-11-01 11:07:48 | 05,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll
[2009-11-01 11:07:48 | 04,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_41.dll
[2009-11-01 11:07:48 | 00,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll
[2009-11-01 11:07:48 | 00,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_4.dll
[2009-11-01 11:07:48 | 00,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll
[2009-11-01 11:07:48 | 00,069,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll
[2009-11-01 11:07:47 | 02,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll
[2009-11-01 11:07:47 | 02,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll
[2009-11-01 11:07:47 | 00,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll
[2009-11-01 11:07:47 | 00,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll
[2009-11-01 11:07:47 | 00,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_4.dll
[2009-11-01 11:07:47 | 00,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll
[2009-11-01 11:07:47 | 00,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll
[2009-11-01 11:07:47 | 00,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_6.dll
[2009-11-01 11:07:46 | 05,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll
[2009-11-01 11:07:46 | 04,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll
[2009-10-31 18:54:18 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Creative
[2009-10-31 16:34:38 | 00,000,000 | ---D | C] -- C:\Windows\1C4551A64743409391E41477CD655043.TMP
[2009-10-31 16:34:29 | 00,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll
[2009-10-31 16:34:29 | 00,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll
[2009-10-31 16:34:29 | 00,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll
[2009-10-31 16:34:29 | 00,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll
[2009-10-31 16:34:29 | 00,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll
[2009-10-31 16:34:29 | 00,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll
[2009-10-31 16:34:29 | 00,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll
[2009-10-31 16:34:29 | 00,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll
[2009-10-31 16:04:55 | 00,000,000 | -H-D | C] -- C:\ProgramData\CanonBJ
[2009-10-31 16:04:55 | 00,000,000 | -H-D | C] -- C:\ProgramData\CanonBJ
[2009-10-30 16:05:39 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Audacity
[2009-10-29 06:37:14 | 00,149,456 | ---- | C] (PC Tools) -- C:\Windows\SGDetectionTool.dll
[2009-10-29 06:37:13 | 01,636,304 | ---- | C] (Threat Expert Ltd.) -- C:\Windows\PCTBDCore.dll
[2009-10-29 06:37:13 | 00,165,840 | ---- | C] (Threat Expert Ltd.) -- C:\Windows\PCTBDRes.dll
[2009-10-29 06:35:07 | 00,304,576 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\pctgntdi64.sys
[2009-10-29 06:35:07 | 00,132,048 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\pctwfpfilter64.sys
[2009-10-29 06:35:02 | 00,218,056 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\PCTCore64.sys
[2009-10-29 06:34:59 | 00,092,896 | ---- | C] (PC Tools) -- C:\Windows\SysNative\drivers\pctplsg64.sys
[2009-10-29 06:34:56 | 00,000,000 | ---D | C] -- C:\ProgramData\PC Tools
[2009-10-29 06:34:56 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\PC Tools
[2009-10-29 06:34:56 | 00,000,000 | ---D | C] -- C:\ProgramData\PC Tools
[2009-10-29 06:34:56 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PC Tools
[2009-10-29 06:34:34 | 00,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2009-10-29 06:34:34 | 00,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2009-10-28 16:59:33 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Nero
[2009-10-28 16:54:12 | 00,000,000 | ---D | C] -- C:\ProgramData\Nero
[2009-10-28 16:54:12 | 00,000,000 | ---D | C] -- C:\ProgramData\Nero
[2009-10-28 16:54:12 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nero
[2009-10-27 22:24:16 | 00,000,000 | ---D | C] -- C:\Users\dawido\Documents\DVDVideoSoft
[2009-10-27 22:24:10 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\DVDVideoSoft
[2009-10-27 22:24:10 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DVDVideoSoft
[2009-10-27 21:45:19 | 00,000,000 | ---D | C] -- C:\ProgramData\eMule
[2009-10-27 21:45:19 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\eMule
[2009-10-27 21:45:19 | 00,000,000 | ---D | C] -- C:\ProgramData\eMule
[2009-10-26 12:54:22 | 00,000,000 | ---D | C] -- C:\Users\dawido\Documents\Prince of Persia
[2009-10-26 12:50:13 | 00,513,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_2.dll
[2009-10-26 12:50:13 | 00,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_2.dll
[2009-10-26 12:50:13 | 00,072,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_1.dll
[2009-10-26 12:50:13 | 00,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_1.dll
[2009-10-26 12:50:12 | 00,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_2.dll
[2009-10-26 12:50:12 | 00,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_2.dll
[2009-10-26 12:50:11 | 01,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll
[2009-10-26 12:50:11 | 01,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_39.dll
[2009-10-26 12:50:11 | 00,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll
[2009-10-26 12:50:11 | 00,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_39.dll
[2009-10-26 12:50:09 | 04,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll
[2009-10-26 12:50:09 | 03,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_39.dll
[2009-10-26 12:50:08 | 00,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll
[2009-10-26 12:50:08 | 00,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll
[2009-10-26 12:50:08 | 00,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll
[2009-10-26 12:50:08 | 00,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll
[2009-10-26 12:50:08 | 00,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll
[2009-10-26 12:50:08 | 00,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll
[2009-10-26 12:50:07 | 00,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll
[2009-10-26 12:50:07 | 00,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll
[2009-10-26 12:50:06 | 01,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll
[2009-10-26 12:50:06 | 01,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll
[2009-10-26 12:50:06 | 00,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll
[2009-10-26 12:50:06 | 00,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll
[2009-10-26 12:50:04 | 04,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll
[2009-10-26 12:50:04 | 03,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll
[2009-10-26 12:50:03 | 00,489,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_0.dll
[2009-10-26 12:50:03 | 00,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_0.dll
[2009-10-26 12:50:03 | 00,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_0.dll
[2009-10-26 12:50:03 | 00,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_0.dll
[2009-10-26 12:50:03 | 00,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_3.dll
[2009-10-26 12:50:03 | 00,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_3.dll
[2009-10-26 12:50:02 | 01,860,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_37.dll
[2009-10-26 12:50:02 | 01,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_37.dll
[2009-10-26 12:50:02 | 00,529,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_37.dll
[2009-10-26 12:50:02 | 00,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_37.dll
[2009-10-26 12:50:00 | 04,910,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_37.dll
[2009-10-26 12:50:00 | 03,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_37.dll
[2009-10-26 12:50:00 | 00,411,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_10.dll
[2009-10-26 12:50:00 | 00,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_10.dll
[2009-10-26 12:49:58 | 02,006,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_36.dll
[2009-10-26 12:49:58 | 01,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_36.dll
[2009-10-26 12:49:58 | 00,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_36.dll
[2009-10-26 12:49:58 | 00,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_36.dll
[2009-10-26 12:49:56 | 05,081,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_36.dll
[2009-10-26 12:49:56 | 03,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_36.dll
[2009-10-26 12:49:51 | 00,021,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_2.dll
[2009-10-26 12:49:51 | 00,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_2.dll
[2009-10-25 20:21:19 | 00,000,000 | ---D | C] -- C:\Users\dawido\Documents\KONAMI
[2009-10-25 20:16:09 | 00,000,000 | ---D | C] -- C:\ProgramData\KONAMI
[2009-10-25 20:16:09 | 00,000,000 | ---D | C] -- C:\ProgramData\KONAMI
[2009-10-25 18:43:21 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\ATI Technologies
[2009-10-25 18:38:59 | 00,000,000 | ---D | C] -- C:\AMD
[2009-10-25 09:35:06 | 01,985,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_35.dll
[2009-10-25 09:35:06 | 01,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_35.dll
[2009-10-25 09:35:06 | 00,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_35.dll
[2009-10-25 09:35:06 | 00,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_35.dll
[2009-10-25 09:35:06 | 00,411,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_9.dll
[2009-10-25 09:35:06 | 00,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_9.dll
[2009-10-25 09:35:04 | 05,073,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_35.dll
[2009-10-25 09:35:04 | 03,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_35.dll
[2009-10-25 09:35:04 | 00,409,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_8.dll
[2009-10-25 09:35:04 | 00,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_8.dll
[2009-10-25 09:35:03 | 01,401,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_34.dll
[2009-10-25 09:35:03 | 01,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_34.dll
[2009-10-25 09:35:03 | 00,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_34.dll
[2009-10-25 09:35:03 | 00,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_34.dll
[2009-10-25 09:35:01 | 04,496,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_34.dll
[2009-10-25 09:35:01 | 03,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_34.dll
[2009-10-25 09:35:01 | 00,403,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_7.dll
[2009-10-25 09:35:01 | 00,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_7.dll
[2009-10-25 09:35:01 | 00,107,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_3.dll
[2009-10-25 09:35:01 | 00,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_3.dll
[2009-10-25 09:35:00 | 01,400,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_33.dll
[2009-10-25 09:35:00 | 01,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_33.dll
[2009-10-25 09:35:00 | 00,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_33.dll
[2009-10-25 09:35:00 | 00,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_33.dll
[2009-10-25 09:34:59 | 04,494,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_33.dll
[2009-10-25 09:34:59 | 03,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_33.dll
[2009-10-25 09:34:58 | 00,469,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10.dll
[2009-10-25 09:34:58 | 00,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10.dll
[2009-10-25 09:34:58 | 00,393,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_6.dll
[2009-10-25 09:34:58 | 00,390,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_5.dll
[2009-10-25 09:34:58 | 00,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_6.dll
[2009-10-25 09:34:58 | 00,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_5.dll
[2009-10-25 09:34:57 | 04,398,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_32.dll
[2009-10-25 09:34:57 | 03,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_32.dll
[2009-10-25 09:34:56 | 00,364,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_4.dll
[2009-10-25 09:34:56 | 00,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_4.dll
[2009-10-25 09:34:56 | 00,017,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_1.dll
[2009-10-25 09:34:56 | 00,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_1.dll
[2009-10-25 09:34:55 | 03,977,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_31.dll
[2009-10-25 09:34:55 | 02,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_31.dll
[2009-10-25 09:34:55 | 00,363,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_3.dll
[2009-10-25 09:34:55 | 00,354,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_2.dll
[2009-10-25 09:34:55 | 00,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_3.dll
[2009-10-25 09:34:55 | 00,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_2.dll
[2009-10-25 09:34:55 | 00,083,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_2.dll
[2009-10-25 09:34:55 | 00,083,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_1.dll
[2009-10-25 09:34:55 | 00,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_2.dll
[2009-10-25 09:34:55 | 00,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_1.dll
[2009-10-25 09:34:54 | 00,352,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_1.dll
[2009-10-25 09:34:54 | 00,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_1.dll
[2009-10-25 09:34:46 | 03,927,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_30.dll
[2009-10-25 09:34:46 | 02,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_30.dll
[2009-10-25 09:34:45 | 00,355,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_0.dll
[2009-10-25 09:34:45 | 00,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_0.dll
[2009-10-25 09:34:45 | 00,016,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_0.dll
[2009-10-25 09:34:45 | 00,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_0.dll
[2009-10-25 09:34:43 | 03,830,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_29.dll
[2009-10-25 09:34:43 | 03,815,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_28.dll
[2009-10-25 09:34:43 | 02,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_29.dll
[2009-10-25 09:34:43 | 02,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_28.dll
[2009-10-25 09:34:42 | 03,807,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_27.dll
[2009-10-25 09:34:42 | 02,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_27.dll
[2009-10-25 09:34:41 | 03,767,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_26.dll
[2009-10-25 09:34:41 | 02,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_26.dll
[2009-10-25 09:34:40 | 03,823,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_25.dll
[2009-10-25 09:34:40 | 02,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_25.dll
[2009-10-25 09:34:39 | 03,544,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_24.dll
[2009-10-25 09:34:39 | 02,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_24.dll
[2009-10-24 14:00:38 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PCSuite
[2009-10-24 14:00:26 | 00,025,600 | ---- | C] (Nokia) -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys
[2009-10-24 13:43:45 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Xilisoft
[2009-10-24 13:43:45 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime
[2009-10-24 11:04:09 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Mount&Blade
[2009-10-24 09:04:50 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\Diagnostics
[2009-10-22 15:14:51 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nokia
[2009-10-22 15:14:40 | 00,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE
[2009-10-22 15:14:29 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Nokia
[2009-10-22 14:30:36 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\streamripper
[2009-10-22 14:30:25 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Streamripper
[2009-10-20 17:28:21 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\2K Sports
[2009-10-20 16:26:13 | 00,000,000 | ---D | C] -- C:\Windows\SysWow64\URTTEMP
[2009-10-20 15:18:41 | 00,000,000 | ---D | C] -- C:\Users\dawido\Documents\Aspyr
[2009-10-20 15:15:46 | 00,000,000 | ---D | C] -- C:\Windows\SysWow64\AGEIA
[2009-10-20 15:15:46 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies
[2009-10-20 15:00:11 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard
[2009-10-18 20:04:52 | 00,000,000 | ---D | C] -- C:\ProgramData\Ubisoft
[2009-10-18 20:04:52 | 00,000,000 | ---D | C] -- C:\ProgramData\Ubisoft
[2009-10-18 20:03:25 | 00,000,000 | RH-D | C] -- C:\Users\dawido\AppData\Roaming\SecuROM
[2009-10-18 18:55:27 | 00,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2009-10-18 18:55:27 | 00,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2009-10-18 18:55:26 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2009-10-18 18:55:26 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2009-10-18 11:09:22 | 00,000,000 | ---D | C] -- C:\Users\dawido\Phone Browser
[2009-10-18 11:08:46 | 00,000,000 | ---D | C] -- C:\ProgramData\PC Suite
[2009-10-18 11:08:46 | 00,000,000 | ---D | C] -- C:\ProgramData\PC Suite
[2009-10-18 11:08:22 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Nokia
[2009-10-18 11:08:12 | 00,000,000 | ---D | C] -- C:\Program Files\DIFX
[2009-10-18 11:08:11 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\PC Suite
[2009-10-18 11:08:09 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\PC Connectivity Solution
[2009-10-18 11:08:04 | 00,067,584 | ---- | C] (Nokia) -- C:\Windows\SysNative\nmwcdclsx64.dll
[2009-10-18 11:07:42 | 00,000,000 | ---D | C] -- C:\ProgramData\Installations
[2009-10-18 11:07:42 | 00,000,000 | ---D | C] -- C:\ProgramData\Installations
[2009-10-18 10:57:15 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\BESTplayer
[2009-10-18 10:57:00 | 01,213,952 | ---- | C] (Karol Winnicki) -- C:\Users\dawido\Desktop\BESTplayer.exe
[2009-10-16 22:37:22 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Gadu-Gadu
[2009-10-16 22:09:41 | 00,000,000 | ---D | C] -- C:\Users\dawido\Gadu-Gadu
[2009-10-16 21:02:07 | 00,000,000 | ---D | C] -- C:\Windows\Minidump
[2009-10-16 20:24:47 | 00,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft
[2009-10-16 19:30:50 | 00,000,000 | ---D | C] -- C:\Windows\SysWow64\xlive
[2009-10-16 19:30:50 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
[2009-10-16 18:16:20 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Leadertech
[2009-10-16 15:01:14 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Dark Sector
[2009-10-16 14:59:56 | 00,000,000 | ---D | C] -- C:\ProgramData\Codemasters
[2009-10-16 14:59:56 | 00,000,000 | ---D | C] -- C:\ProgramData\Codemasters
[2009-10-16 14:59:55 | 00,000,000 | ---D | C] -- C:\Users\dawido\Documents\Codemasters
[2009-10-16 14:17:02 | 00,000,000 | ---D | C] -- C:\Users\dawido\Documents\FIFA 10
[2009-10-16 14:16:34 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\PunkBuster
[2009-10-16 14:15:12 | 00,000,000 | ---D | C] -- C:\Users\dawido\Documents\Eidos
[2009-10-15 19:31:42 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Gadu-Gadu
[2009-10-15 17:55:17 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\WapSter
[2009-10-14 21:06:27 | 00,000,000 | ---D | C] -- C:\Users\dawido\Desktop\Windows.7.Loader.eXtreme.Edition.v3.014
[2009-10-14 21:00:15 | 00,000,000 | ---D | C] -- C:\Downloads
[2009-10-14 21:00:02 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\BitComet
[2009-10-14 20:29:27 | 00,000,000 | ---D | C] -- C:\Users\dawido\Documents\My Games
[2009-10-14 20:25:43 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Creative
[2009-10-14 20:25:42 | 00,000,000 | -H-D | C] -- C:\Program Files (x86)\Creative Installation Information
[2009-10-14 20:25:35 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Creative Labs Shared
[2009-10-14 20:25:30 | 00,000,000 | ---D | C] -- C:\Program Files\Creative
[2009-10-14 20:25:22 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Creative
[2009-10-14 20:25:03 | 00,113,152 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysNative\cttele64.dll
[2009-10-14 20:25:03 | 00,000,000 | ---D | C] -- C:\ProgramData\Creative
[2009-10-14 20:25:03 | 00,000,000 | ---D | C] -- C:\ProgramData\Creative
[2009-10-14 20:25:02 | 00,106,496 | ---- | C] (Creative Technology Ltd) -- C:\Windows\SysWow64\cttele32.dll
[2009-10-14 20:24:56 | 00,419,840 | ---- | C] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2009-10-14 20:24:56 | 00,413,696 | ---- | C] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2009-10-14 20:24:56 | 00,133,632 | ---- | C] (Portions © Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll
[2009-10-14 20:24:56 | 00,110,592 | ---- | C] (Portions © Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll
[2009-10-14 20:24:56 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\OpenAL
[2009-10-14 20:24:32 | 00,012,288 | ---- | C] (Creative Technology Limited) -- C:\Windows\SysNative\INRES.DLL
[2009-10-14 20:24:32 | 00,011,776 | ---- | C] (Creative Technology Limited) -- C:\Windows\SysWow64\INRES.DLL
[2009-10-14 20:24:32 | 00,000,000 | ---D | C] -- C:\Windows\SysWow64\Data
[2009-10-14 20:24:32 | 00,000,000 | ---D | C] -- C:\Windows\SysNative\Data
[2009-10-14 20:24:16 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2009-10-14 20:19:58 | 00,000,000 | ---D | C] -- C:\Users\dawido\Desktop\Nowy folder
[2009-10-14 20:16:17 | 00,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2009-10-14 20:07:11 | 00,000,000 | ---D | C] -- C:\Windows\Panther
[2009-10-14 20:07:07 | 00,000,000 | -HSD | C] -- C:\Boot
[2009-10-14 20:00:42 | 00,238,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MpSigStub.exe
[2009-10-14 19:36:38 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\ATI
[2009-10-14 19:36:38 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\ATI
[2009-10-14 19:35:36 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies
[2009-10-14 19:35:35 | 00,000,000 | -HSD | C] -- C:\Windows\Installer
[2009-10-14 19:35:35 | 00,000,000 | ---D | C] -- C:\Program Files\ATI
[2009-10-14 19:34:13 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Mozilla
[2009-10-14 19:34:13 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\Mozilla
[2009-10-14 19:33:52 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2009-10-14 19:33:01 | 01,628,920 | ---- | C] (Sonic Solutions) -- C:\Windows\SysWow64\pxsfs.dll
[2009-10-14 19:33:01 | 00,547,576 | ---- | C] (Sonic Solutions) -- C:\Windows\SysWow64\px.dll
[2009-10-14 19:33:01 | 00,510,712 | ---- | C] (Sonic Solutions) -- C:\Windows\SysWow64\pxdrv.dll
[2009-10-14 19:33:01 | 00,379,640 | ---- | C] (Sonic Solutions) -- C:\Windows\SysWow64\pxwave.dll
[2009-10-14 19:33:01 | 00,187,128 | ---- | C] (Sonic Solutions) -- C:\Windows\SysWow64\pxmas.dll
[2009-10-14 19:33:01 | 00,129,784 | ---- | C] (Sonic Solutions) -- C:\Windows\SysWow64\pxafs.dll
[2009-10-14 19:33:01 | 00,072,440 | ---- | C] (Sonic Solutions) -- C:\Windows\SysWow64\pxhpinst.exe
[2009-10-14 19:33:01 | 00,064,760 | ---- | C] (Sonic Solutions) -- C:\Windows\SysWow64\pxinsa64.exe
[2009-10-14 19:33:01 | 00,064,760 | ---- | C] (Sonic Solutions) -- C:\Windows\SysWow64\pxcpya64.exe
[2009-10-14 19:33:01 | 00,039,672 | ---- | C] (Sonic Solutions) -- C:\Windows\SysWow64\vxblock.dll
[2009-10-14 19:33:00 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Winamp
[2009-10-14 19:33:00 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\Winamp
[2009-10-14 19:32:31 | 00,000,000 | ---D | C] -- C:\Program Files (x86)\WinRAR
[2009-10-14 19:32:16 | 00,000,000 | ---D | C] -- C:\ATI
[2009-10-14 19:17:31 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Macromedia
[2009-10-14 19:17:31 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Adobe
[2009-10-14 19:17:30 | 00,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
[2009-10-14 19:15:14 | 00,000,000 | R--D | C] -- C:\Users\dawido\Searches
[2009-10-14 19:15:05 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Identities
[2009-10-14 19:15:04 | 00,000,000 | R--D | C] -- C:\Users\dawido\Contacts
[2009-10-14 19:15:02 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\VirtualStore
[2009-10-14 19:14:54 | 00,000,000 | --SD | C] -- C:\Users\dawido\AppData\Roaming\Microsoft
[2009-10-14 19:14:54 | 00,000,000 | R--D | C] -- C:\Users\dawido\Videos
[2009-10-14 19:14:54 | 00,000,000 | R--D | C] -- C:\Users\dawido\Saved Games
[2009-10-14 19:14:54 | 00,000,000 | R--D | C] -- C:\Users\dawido\Pictures
[2009-10-14 19:14:54 | 00,000,000 | R--D | C] -- C:\Users\dawido\Music
[2009-10-14 19:14:54 | 00,000,000 | R--D | C] -- C:\Users\dawido\Links
[2009-10-14 19:14:54 | 00,000,000 | R--D | C] -- C:\Users\dawido\Favorites
[2009-10-14 19:14:54 | 00,000,000 | R--D | C] -- C:\Users\dawido\Downloads
[2009-10-14 19:14:54 | 00,000,000 | R--D | C] -- C:\Users\dawido\Documents
[2009-10-14 19:14:54 | 00,000,000 | R--D | C] -- C:\Users\dawido\Desktop
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\Ustawienia lokalne
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\Szablony
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\SendTo
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\Recent
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\PrintHood
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\NetHood
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\Documents\Moje wideo
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\Documents\Moje obrazy
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\Moje dokumenty
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\Documents\Moja muzyka
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\Menu Start
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\Dane aplikacji
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\Cookies
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\AppData\Local\Temporary Internet Files
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\AppData\Local\Historia
[2009-10-14 19:14:54 | 00,000,000 | -HSD | C] -- C:\Users\dawido\AppData\Local\Dane aplikacji
[2009-10-14 19:14:54 | 00,000,000 | -H-D | C] -- C:\Users\dawido\AppData
[2009-10-14 19:14:54 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Roaming\Media Center Programs
[2009-10-14 19:14:54 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\Temp
[2009-10-14 19:14:54 | 00,000,000 | ---D | C] -- C:\Users\dawido\AppData\Local\Microsoft
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Ulubione
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Szablony
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\Recovery
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Pulpit
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje wideo
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje obrazy
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moja muzyka
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Menu Start
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Dane aplikacji
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Ulubione
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Szablony
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Pulpit
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Menu Start
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty
[2009-10-14 19:14:38 | 00,000,000 | -HSD | C] -- C:\ProgramData\Dane aplikacji
[2009-10-14 19:10:55 | 00,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2009-10-14 19:08:16 | 00,000,000 | ---D | C] -- C:\Windows\Prefetch
[2009-10-14 19:08:00 | 00,000,000 | -HSD | C] -- C:\System Volume Information
[2009-07-13 23:30:56 | 00,014,336 | ---- | C] ( ) -- C:\Windows\SysWow64\a3d.dll
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2009-11-07 13:18:48 | 01,572,864 | -HS- | M] () -- C:\Users\dawido\ntuser.dat
[2009-11-07 13:18:27 | 04,045,528 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\dawido\Desktop\mbam-setup.exe
[2009-11-07 13:15:34 | 00,528,896 | ---- | M] (OldTimer Tools) -- C:\Users\dawido\Desktop\OTL.exe
[2009-11-07 12:07:44 | 00,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2009-11-07 12:07:44 | 00,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2009-11-07 12:06:50 | 01,552,302 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2009-11-07 12:06:50 | 00,697,200 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat
[2009-11-07 12:06:50 | 00,615,760 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2009-11-07 12:06:50 | 00,136,690 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat
[2009-11-07 12:06:50 | 00,107,396 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2009-11-07 12:02:40 | 00,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2009-11-07 12:02:34 | 00,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2009-11-07 12:02:28 | 32,204,80000 | -HS- | M] () -- C:\hiberfil.sys
[2009-11-07 09:03:58 | 00,063,336 | ---- | M] () -- C:\Windows\SysNative\BMXStateBkp-{00000004-00000000-00000000-00001102-0000000B-00411102}.rfx
[2009-11-07 09:03:58 | 00,063,336 | ---- | M] () -- C:\Windows\SysNative\BMXState-{00000004-00000000-00000000-00001102-0000000B-00411102}.rfx
[2009-11-07 09:03:58 | 00,000,820 | ---- | M] () -- C:\Windows\SysNative\DVCState-{00000004-00000000-00000000-00001102-0000000B-00411102}.rfx
[2009-11-06 23:52:14 | 02,031,384 | -H-- | M] () -- C:\Users\dawido\AppData\Local\IconCache.db
[2009-11-05 22:07:15 | 00,001,080 | ---- | M] () -- C:\Windows\SysNative\settingsbkup.sfm
[2009-11-05 22:07:15 | 00,001,080 | ---- | M] () -- C:\Windows\SysNative\settings.sfm
[2009-11-05 22:05:03 | 00,001,160 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GamersFirst LIVE!.lnk
[2009-11-05 22:05:03 | 00,001,126 | ---- | M] () -- C:\Users\Public\Desktop\GamersFirst LIVE!.lnk
[2009-11-05 22:04:26 | 01,791,088 | ---- | M] () -- C:\Users\dawido\Desktop\GamersFirst_LIVE!_Setup_11443.exe
[2009-11-05 21:30:31 | 00,000,561 | ---- | M] () -- C:\Users\Public\Desktop\War Rock.lnk
[2009-11-04 15:19:52 | 00,001,639 | ---- | M] () -- C:\Users\dawido\Desktop\Cubase 5.lnk
[2009-11-03 21:16:08 | 00,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deploytk.dll
[2009-11-03 21:16:08 | 00,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2009-11-03 21:16:08 | 00,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2009-11-03 21:16:08 | 00,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2009-11-03 16:21:41 | 00,002,093 | ---- | M] () -- C:\Users\dawido\Desktop\HijackThis.lnk
[2009-11-03 15:44:01 | 00,001,861 | ---- | M] () -- C:\Users\Public\Desktop\avast! Antivirus.lnk
[2009-11-03 15:43:59 | 00,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2009-11-02 23:28:22 | 00,043,376 | ---- | M] () -- C:\Users\dawido\Desktop\Bez tytułu.gif
[2009-11-02 21:48:51 | 00,002,562 | ---- | M] () -- C:\Windows\diagwrn.xml
[2009-11-02 21:48:51 | 00,001,908 | ---- | M] () -- C:\Windows\diagerr.xml
[2009-11-02 21:40:23 | 00,262,144 | ---- | M] () -- C:\Users\dawido\Desktop\110209-16832-01.dmp
[2009-11-02 21:20:27 | 00,007,601 | ---- | M] () -- C:\Users\dawido\AppData\Local\Resmon.ResmonCfg
[2009-11-02 20:24:13 | 00,001,069 | ---- | M] () -- C:\Users\Public\Desktop\Tom Clancy's Rainbow Six Vegas.lnk
[2009-11-02 19:12:45 | 00,001,122 | ---- | M] () -- C:\Users\dawido\Desktop\EVEREST Ultimate Edition.lnk
[2009-11-02 18:59:48 | 00,274,840 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2009-11-02 11:49:12 | 00,834,544 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys
[2009-11-02 11:49:12 | 00,001,950 | ---- | M] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2009-11-01 16:09:43 | 00,215,104 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2009-11-01 16:09:43 | 00,215,104 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2009-11-01 12:26:34 | 00,075,064 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2009-10-31 21:33:35 | 00,001,076 | ---- | M] () -- C:\Users\dawido\Desktop\OFDR — skrót.lnk
[2009-10-31 16:34:38 | 00,314,016 | ---- | M] () -- C:\Windows\SysNative\drivers\atksgt.sys
[2009-10-31 16:34:38 | 00,043,680 | ---- | M] () -- C:\Windows\SysNative\drivers\lirsgt.sys
[2009-10-31 02:56:44 | 00,085,504 | ---- | M] () -- C:\Windows\SysWow64\ff_vfw.dll
[2009-10-30 16:05:26 | 00,000,681 | ---- | M] () -- C:\Users\dawido\Desktop\Audacity 1.3 Beta (Unicode).lnk
[2009-10-29 06:35:01 | 00,000,827 | ---- | M] () -- C:\Users\Public\Desktop\Spyware Doctor.lnk
[2009-10-28 18:19:44 | 00,002,560 | ---- | M] () -- C:\Windows\_MSRSTRT.EXE
[2009-10-28 16:55:33 | 00,001,569 | ---- | M] () -- C:\Users\Public\Desktop\Nero StartSmart.lnk
[2009-10-27 22:24:16 | 00,001,239 | ---- | M] () -- C:\Users\dawido\Desktop\DVDVideoSoft Free Studio.lnk
[2009-10-27 21:55:17 | 00,000,680 | ---- | M] () -- C:\Users\Public\Desktop\eMule.lnk
[2009-10-26 12:27:21 | 00,000,997 | ---- | M] () -- C:\Users\dawido\Desktop\SAW - The Video Game (TPTB).lnk
[2009-10-25 20:57:30 | 00,001,135 | ---- | M] () -- C:\Users\dawido\Desktop\pes2010 — skrót.lnk
[2009-10-24 15:13:11 | 42,088,1823 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2009-10-24 14:01:52 | 00,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ccdcmbx64_01007.Wdf
[2009-10-24 14:00:38 | 00,002,038 | ---- | M] () -- C:\Users\Public\Desktop\Nokia PC Suite.lnk
[2009-10-24 14:00:30 | 00,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_PCCSWpdDriver_01_07_00.Wdf
[2009-10-24 13:43:45 | 00,001,229 | ---- | M] () -- C:\Users\dawido\Desktop\Xilisoft 3GP Video Converter 3.lnk
[2009-10-24 08:40:16 | 00,001,939 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2009-10-24 08:34:23 | 00,524,288 | -HS- | M] () -- C:\Users\dawido\ntuser.dat{505bbb43-bf93-11de-9d37-004f4e618da5}.TMContainer00000000000000000002.regtrans-ms
[2009-10-24 08:34:23 | 00,524,288 | -HS- | M] () -- C:\Users\dawido\ntuser.dat{505bbb43-bf93-11de-9d37-004f4e618da5}.TMContainer00000000000000000001.regtrans-ms
[2009-10-24 08:34:23 | 00,065,536 | -HS- | M] () -- C:\Users\dawido\ntuser.dat{505bbb43-bf93-11de-9d37-004f4e618da5}.TM.blf
[2009-10-20 21:47:40 | 00,002,178 | ---- | M] () -- C:\Users\dawido\AppData\Roaming\PStrip.ini
[2009-10-20 16:32:44 | 00,000,740 | ---- | M] () -- C:\Users\Public\Desktop\NBA 2K10.lnk
[2009-10-20 16:26:37 | 01,575,648 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2009-10-19 05:16:17 | 00,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2009-10-18 19:57:26 | 00,000,904 | ---- | M] () -- C:\Users\dawido\Desktop\Splinter Cell Double Agent.lnk
[2009-10-18 18:55:31 | 00,002,014 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2009-10-18 11:09:35 | 00,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_PCCSWpdDriver_01_05_00.Wdf
[2009-10-18 10:57:02 | 01,213,952 | ---- | M] (Karol Winnicki) -- C:\Users\dawido\Desktop\BESTplayer.exe
[2009-10-16 22:09:39 | 00,000,978 | ---- | M] () -- C:\Users\dawido\Desktop\Gadu-Gadu.lnk
[2009-10-16 20:24:15 | 00,000,774 | ---- | M] () -- C:\Users\dawido\Desktop\rfg_launcher — skrót.lnk
[2009-10-16 18:17:37 | 00,000,684 | ---- | M] () -- C:\Users\dawido\Desktop\FIFA10 — skrót.lnk
[2009-10-16 16:29:37 | 00,000,573 | ---- | M] () -- C:\Users\Public\Desktop\Capitalism II.lnk
[2009-10-14 21:08:51 | 00,438,840 | RHS- | M] () -- C:\bootxe1
[2009-10-14 21:08:51 | 00,171,136 | RHS- | M] () -- C:\XELD1
[2009-10-14 21:08:51 | 00,009,216 | RHS- | M] () -- C:\XELD1.1st
[2009-10-14 21:00:03 | 00,001,019 | ---- | M] () -- C:\Users\Public\Desktop\BitComet.lnk
[2009-10-14 20:24:56 | 00,419,840 | ---- | M] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll
[2009-10-14 20:24:56 | 00,413,696 | ---- | M] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll
[2009-10-14 20:24:56 | 00,133,632 | ---- | M] (Portions © Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll
[2009-10-14 20:24:56 | 00,110,592 | ---- | M] (Portions © Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll
[2009-10-14 20:24:56 | 00,000,159 | RH-- | M] () -- C:\Windows\ctfile.rfc
[2009-10-14 20:07:09 | 00,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2009-10-14 19:33:03 | 00,000,989 | ---- | M] () -- C:\Users\Public\Desktop\Winamp.lnk
[2009-10-14 19:27:59 | 00,000,363 | ---- | M] () -- C:\Users\dawido\Desktop\Komputer — skrót.lnk
[2009-10-14 19:26:29 | 00,524,288 | -HS- | M] () -- C:\Users\dawido\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2009-10-14 19:26:29 | 00,524,288 | -HS- | M] () -- C:\Users\dawido\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2009-10-14 19:26:29 | 00,065,536 | -HS- | M] () -- C:\Users\dawido\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2009-10-14 19:26:09 | 00,171,136 | ---- | M] () -- C:\grldr.bak
[2009-10-14 19:23:46 | 00,057,560 | ---- | M] () -- C:\Users\dawido\AppData\Local\GDIPFONTCACHEV1.DAT
[2009-10-14 19:14:54 | 00,000,020 | -HS- | M] () -- C:\Users\dawido\ntuser.ini
[2009-10-14 19:12:07 | 00,067,517 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2009-10-14 19:12:07 | 00,067,517 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2009-10-14 19:10:42 | 00,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
[2009-10-11 21:58:12 | 01,177,600 | ---- | M] (AD) -- C:\Windows\SysWow64\SYNSOEMU.DLL
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ==========
[2009-11-05 22:04:34 | 00,001,160 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GamersFirst LIVE!.lnk
[2009-11-05 22:04:34 | 00,001,126 | ---- | C] () -- C:\Users\Public\Desktop\GamersFirst LIVE!.lnk
[2009-11-05 22:04:23 | 01,791,088 | ---- | C] () -- C:\Users\dawido\Desktop\GamersFirst_LIVE!_Setup_11443.exe
[2009-11-05 21:30:31 | 00,000,561 | ---- | C] () -- C:\Users\Public\Desktop\War Rock.lnk
[2009-11-04 15:37:52 | 00,001,080 | ---- | C] () -- C:\Windows\SysNative\settingsbkup.sfm
[2009-11-04 15:37:52 | 00,001,080 | ---- | C] () -- C:\Windows\SysNative\settings.sfm
[2009-11-04 15:19:51 | 00,001,639 | ---- | C] () -- C:\Users\dawido\Desktop\Cubase 5.lnk
[2009-11-03 16:21:41 | 00,002,093 | ---- | C] () -- C:\Users\dawido\Desktop\HijackThis.lnk
[2009-11-03 15:44:01 | 00,001,861 | ---- | C] () -- C:\Users\Public\Desktop\avast! Antivirus.lnk
[2009-11-03 15:43:59 | 00,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt
[2009-11-03 15:43:46 | 00,380,928 | ---- | C] () -- C:\Windows\SysWow64\actskin4.ocx
[2009-11-02 23:37:52 | 00,262,144 | ---- | C] () -- C:\Users\dawido\Desktop\110209-16832-01.dmp
[2009-11-02 23:28:21 | 00,043,376 | ---- | C] () -- C:\Users\dawido\Desktop\Bez tytułu.gif
[2009-11-02 21:47:43 | 00,002,562 | ---- | C] () -- C:\Windows\diagwrn.xml
[2009-11-02 21:47:43 | 00,001,908 | ---- | C] () -- C:\Windows\diagerr.xml
[2009-11-02 21:20:27 | 00,007,601 | ---- | C] () -- C:\Users\dawido\AppData\Local\Resmon.ResmonCfg
[2009-11-02 20:24:13 | 00,001,069 | ---- | C] () -- C:\Users\Public\Desktop\Tom Clancy's Rainbow Six Vegas.lnk
[2009-11-02 19:12:45 | 00,001,122 | ---- | C] () -- C:\Users\dawido\Desktop\EVEREST Ultimate Edition.lnk
[2009-11-02 11:49:12 | 00,834,544 | ---- | C] () -- C:\Windows\SysNative\drivers\sptd.sys
[2009-11-02 11:49:12 | 00,001,950 | ---- | C] () -- C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
[2009-11-01 17:03:15 | 00,062,232 | R--- | C] () -- C:\Windows\SysWow64\GameuxInstallHelper.dll
[2009-11-01 12:26:57 | 00,215,104 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2009-11-01 12:26:39 | 00,215,104 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2009-11-01 12:26:34 | 00,075,064 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2009-10-31 02:56:44 | 00,085,504 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2009-10-30 16:05:26 | 00,000,681 | ---- | C] () -- C:\Users\dawido\Desktop\Audacity 1.3 Beta (Unicode).lnk
[2009-10-29 06:37:14 | 00,767,952 | ---- | C] () -- C:\Windows\BDTSupport.dll
[2009-10-29 06:37:14 | 00,000,882 | ---- | C] () -- C:\Windows\RegSDImport.xml
[2009-10-29 06:37:14 | 00,000,880 | ---- | C] () -- C:\Windows\RegISSImport.xml
[2009-10-29 06:37:14 | 00,000,131 | ---- | C] () -- C:\Windows\IDB.zip
[2009-10-29 06:37:13 | 01,152,470 | ---- | C] () -- C:\Windows\UDB.zip
[2009-10-29 06:35:07 | 00,007,357 | ---- | C] () -- C:\Windows\SysNative\drivers\pctgntdi64.cat
[2009-10-29 06:35:02 | 00,007,353 | ---- | C] () -- C:\Windows\SysNative\drivers\pctcore64.cat
[2009-10-29 06:35:01 | 00,000,827 | ---- | C] () -- C:\Users\Public\Desktop\Spyware Doctor.lnk
[2009-10-29 06:34:59 | 00,007,353 | ---- | C] () -- C:\Windows\SysNative\drivers\pctplsg64.cat
[2009-10-28 18:19:43 | 00,002,560 | ---- | C] () -- C:\Windows\_MSRSTRT.EXE
[2009-10-28 16:55:33 | 00,001,569 | ---- | C] () -- C:\Users\Public\Desktop\Nero StartSmart.lnk
[2009-10-27 22:24:16 | 00,001,239 | ---- | C] () -- C:\Users\dawido\Desktop\DVDVideoSoft Free Studio.lnk
[2009-10-27 21:55:17 | 00,000,680 | ---- | C] () -- C:\Users\Public\Desktop\eMule.lnk
[2009-10-26 12:27:21 | 00,000,997 | ---- | C] () -- C:\Users\dawido\Desktop\SAW - The Video Game (TPTB).lnk
[2009-10-25 20:57:30 | 00,001,135 | ---- | C] () -- C:\Users\dawido\Desktop\pes2010 — skrót.lnk
[2009-10-25 09:35:15 | 00,314,016 | ---- | C] () -- C:\Windows\SysNative\drivers\atksgt.sys
[2009-10-25 09:35:15 | 00,043,680 | ---- | C] () -- C:\Windows\SysNative\drivers\lirsgt.sys
[2009-10-24 14:01:52 | 00,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ccdcmbx64_01007.Wdf
[2009-10-24 14:00:38 | 00,002,038 | ---- | C] () -- C:\Users\Public\Desktop\Nokia PC Suite.lnk
[2009-10-24 14:00:30 | 00,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_PCCSWpdDriver_01_07_00.Wdf
[2009-10-24 13:43:45 | 00,001,229 | ---- | C] () -- C:\Users\dawido\Desktop\Xilisoft 3GP Video Converter 3.lnk
[2009-10-24 08:40:16 | 00,001,939 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2009-10-24 08:13:44 | 00,524,288 | -HS- | C] () -- C:\Users\dawido\ntuser.dat{505bbb43-bf93-11de-9d37-004f4e618da5}.TMContainer00000000000000000002.regtrans-ms
[2009-10-24 08:13:44 | 00,524,288 | -HS- | C] () -- C:\Users\dawido\ntuser.dat{505bbb43-bf93-11de-9d37-004f4e618da5}.TMContainer00000000000000000001.regtrans-ms
[2009-10-24 08:13:44 | 00,065,536 | -HS- | C] () -- C:\Users\dawido\ntuser.dat{505bbb43-bf93-11de-9d37-004f4e618da5}.TM.blf
[2009-10-20 21:45:32 | 00,002,178 | ---- | C] () -- C:\Users\dawido\AppData\Roaming\PStrip.ini
[2009-10-20 21:44:59 | 00,013,008 | ---- | C] () -- C:\Windows\SysNative\drivers\pstrip64.sys
[2009-10-20 16:32:44 | 00,000,740 | ---- | C] () -- C:\Users\Public\Desktop\NBA 2K10.lnk
[2009-10-20 16:26:35 | 01,575,648 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2009-10-19 05:16:17 | 00,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2009-10-18 19:57:26 | 00,000,904 | ---- | C] () -- C:\Users\dawido\Desktop\Splinter Cell Double Agent.lnk
[2009-10-18 18:55:31 | 00,002,014 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2009-10-18 15:54:55 | 42,088,1823 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2009-10-18 11:09:35 | 00,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_PCCSWpdDriver_01_05_00.Wdf
[2009-10-16 20:24:15 | 00,000,774 | ---- | C] () -- C:\Users\dawido\Desktop\rfg_launcher — skrót.lnk
[2009-10-16 18:17:37 | 00,000,684 | ---- | C] () -- C:\Users\dawido\Desktop\FIFA10 — skrót.lnk
[2009-10-16 16:29:37 | 00,000,573 | ---- | C] () -- C:\Users\Public\Desktop\Capitalism II.lnk
[2009-10-15 19:31:42 | 00,000,978 | ---- | C] () -- C:\Users\dawido\Desktop\Gadu-Gadu.lnk
[2009-10-14 21:08:51 | 00,438,840 | RHS- | C] () -- C:\bootxe1
[2009-10-14 21:08:51 | 00,171,136 | RHS- | C] () -- C:\XELD1
[2009-10-14 21:08:51 | 00,009,216 | RHS- | C] () -- C:\XELD1.1st
[2009-10-14 21:00:03 | 00,001,019 | ---- | C] () -- C:\Users\Public\Desktop\BitComet.lnk
[2009-10-14 20:27:19 | 00,063,336 | ---- | C] () -- C:\Windows\SysNative\BMXStateBkp-{00000004-00000000-00000000-00001102-0000000B-00411102}.rfx
[2009-10-14 20:27:19 | 00,063,336 | ---- | C] () -- C:\Windows\SysNative\BMXState-{00000004-00000000-00000000-00001102-0000000B-00411102}.rfx
[2009-10-14 20:27:19 | 00,000,820 | ---- | C] () -- C:\Windows\SysNative\DVCState-{00000004-00000000-00000000-00001102-0000000B-00411102}.rfx
[2009-10-14 20:26:04 | 00,007,062 | ---- | C] () -- C:\Windows\SysWow64\audiopid.vxd
[2009-10-14 20:24:56 | 00,212,992 | ---- | C] () -- C:\Windows\SysNative\APOMgr64.DLL
[2009-10-14 20:24:56 | 00,164,864 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL
[2009-10-14 20:24:56 | 00,089,088 | ---- | C] () -- C:\Windows\SysNative\CmdRtr64.DLL
[2009-10-14 20:24:56 | 00,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL
[2009-10-14 20:24:56 | 00,000,159 | RH-- | C] () -- C:\Windows\ctfile.rfc
[2009-10-14 20:23:30 | 00,001,076 | ---- | C] () -- C:\Users\dawido\Desktop\OFDR — skrót.lnk
[2009-10-14 20:07:09 | 00,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK
[2009-10-14 20:07:07 | 00,383,562 | RHS- | C] () -- C:\bootmgr
[2009-10-14 19:33:03 | 00,000,989 | ---- | C] () -- C:\Users\Public\Desktop\Winamp.lnk
[2009-10-14 19:27:59 | 00,000,363 | ---- | C] () -- C:\Users\dawido\Desktop\Komputer — skrót.lnk
[2009-10-14 19:26:27 | 02,031,384 | -H-- | C] () -- C:\Users\dawido\AppData\Local\IconCache.db
[2009-10-14 19:26:26 | 00,171,136 | ---- | C] () -- C:\grldr.bak
[2009-10-14 19:23:46 | 00,057,560 | ---- | C] () -- C:\Users\dawido\AppData\Local\GDIPFONTCACHEV1.DAT
[2009-10-14 19:14:54 | 01,572,864 | -HS- | C] () -- C:\Users\dawido\ntuser.dat
[2009-10-14 19:14:54 | 00,524,288 | -HS- | C] () -- C:\Users\dawido\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2009-10-14 19:14:54 | 00,524,288 | -HS- | C] () -- C:\Users\dawido\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2009-10-14 19:14:54 | 00,065,536 | -HS- | C] () -- C:\Users\dawido\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2009-10-14 19:14:54 | 00,000,020 | -HS- | C] () -- C:\Users\dawido\ntuser.ini
[2009-10-14 19:10:42 | 00,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2009-10-14 19:08:00 | 32,204,80000 | -HS- | C] () -- C:\hiberfil.sys
[2009-08-16 11:08:36 | 00,178,176 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2009-08-07 18:51:34 | 00,178,430 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2009-08-02 23:21:54 | 00,197,912 | ---- | C] () -- C:\Windows\SysWow64\physxcudart_20.dll
[2009-08-02 23:21:54 | 00,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2009-08-02 23:21:54 | 00,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSwedish.dll
[2009-08-02 23:21:54 | 00,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSpanish.dll
[2009-08-02 23:21:54 | 00,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2009-08-02 23:21:54 | 00,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelPortugese.dll
[2009-08-02 23:21:54 | 00,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelKorean.dll
[2009-08-02 23:21:54 | 00,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelJapanese.dll
[2009-08-02 23:21:52 | 00,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelGerman.dll
[2009-08-02 23:21:52 | 00,058,648 | ---- | C] () -- C:\Windows\SysWow64\AgCPanelFrench.dll
[2009-07-14 06:32:39 | 00,043,318 | ---- | C] () -- C:\Windows\Fonts\GlobalUserInterface.CompositeFont
[2009-07-14 06:32:39 | 00,029,779 | ---- | C] () -- C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009-07-14 06:32:39 | 00,026,489 | ---- | C] () -- C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009-07-14 06:32:39 | 00,026,040 | ---- | C] () -- C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009-07-14 05:54:24 | 00,000,174 | -HS- | C] () -- C:\Program Files (x86)\desktop.ini
[2009-07-14 03:34:57 | 00,000,403 | ---- | C] () -- C:\Windows\win.ini
[2009-07-14 03:34:57 | 00,000,219 | ---- | C] () -- C:\Windows\system.ini
[2009-07-14 00:42:10 | 00,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009-07-14 00:14:20 | 00,027,839 | ---- | C] () -- C:\Windows\SysWow64\instwdm.ini
[2009-07-14 00:14:16 | 00,000,054 | ---- | C] () -- C:\Windows\SysWow64\ctzapxx.ini
[2009-07-13 23:28:04 | 00,002,560 | ---- | C] () -- C:\Windows\SysWow64\CTXFIRES.DLL
[2009-07-13 22:03:59 | 00,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009-05-29 16:52:26 | 00,204,800 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2009-05-29 16:47:06 | 00,881,664 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2009-05-26 11:12:38 | 00,000,285 | ---- | C] () -- C:\Windows\SysWow64\kill.ini
[2007-02-05 20:05:26 | 00,000,038 | ---- | C] () -- C:\Windows\AviSplitter.INI
========== Alternate Data Streams ==========
@Alternate Data Stream - 218 bytes -> C:\ProgramData\TEMP:DFC5A2B2
@Alternate Data Stream - 114 bytes -> C:\ProgramData\TEMP:A8ADE5D8
< End of report >
OTL Extras logfile created on: 2009-11-07 13:17:12 - Run 1
OTL by OldTimer - Version 3.1.4.0 Folder = C:\Users\dawido\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
4,00 Gb Total Physical Memory | 2,87 Gb Available Physical Memory | 71,80% Memory free
4,00 Gb Paging File | 4,00 Gb Available in Paging File | 100,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 68,36 Gb Total Space | 36,87 Gb Free Space | 53,94% Space Free | Partition Type: NTFS
Drive D: | 464,40 Gb Total Space | 254,70 Gb Free Space | 54,85% Space Free | Partition Type: NTFS
Drive E: | 398,75 Gb Total Space | 10,89 Gb Free Space | 2,73% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: DAWIDO-KOMPUTER
Current User Name: dawido
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.chm [@ = chm.file] -- "%SystemRoot%\hh.exe" %1
.cpl[@ = cplfile] -- C:\Windows\SysNative\control.exe (Microsoft Corporation)
.hlp[@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html[@ = htmlfile] -- C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation)
.inf[@ = inffile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
.ini[@ = inifile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)
.js[@ = JSFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.jse[@ = JSEFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.txt[@ = txtfile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
.vbe[@ = VBEFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.vbs[@ = VBSFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.wsf[@ = WSFFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.wsh[@ = WSHFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.chm [@ = chm.file] -- "%SystemRoot%\hh.exe" %1
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url [@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)
.reg [@ = regfile] -- C:\Windows\SysWow64\regedit.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
batfile [open] -- "%1" %* File not found
batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
chm.file [open] -- "%SystemRoot%\hh.exe" %1 File not found
cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
cmdfile [open] -- "%1" %* File not found
cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
comfile [open] -- "%1" %* File not found
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
http [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
https [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
inffile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsfile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsefile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation)
regfile [merge] -- Reg Error: Key error.
regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation)
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation)
vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbefile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbsfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
chm.file [open] -- "%SystemRoot%\hh.exe" %1 File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
http [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
https [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [open] -- regedit.exe "%1" (Microsoft Corporation)
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" (Microsoft Corporation)
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{68660049-8D48-427C-9FF7-139D8340CDC0}" = MSVC80_x64
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{B88F5E68-B0FB-950F-EC6F-82FB18DF3E5D}" = ATI Catalyst Install Manager
"{D72834D3-6A08-AF4B-B231-161A8B226D7B}" = ATI AVIVO64 Codecs
"E8A6D621B6D3FC5D43C68C549D959DE76EEF5D84" = Pakiet sterowników systemu Windows - Nokia Modem (06/01/2009 4.1)
"F779F5541ABD99C95C03B0FD5E3C058B22DA0FF7" = Pakiet sterowników systemu Windows - Nokia Modem (06/01/2009 7.01.0.3)
"FCEC33AD40CEA5E0FC4CEE6E42041A0DA189652D" = Pakiet sterowników systemu Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{086a7d8c-0a38-4c7f-819a-620275550d5c}" = Nero BurningROM
"{0A9C9BD5-8588-40D4-8A1A-860E3D2ED6EE}" = NBA 2K10
"{0C973594-7DDF-4BD0-84ED-3517F7622037}" = PC Connectivity Solution
"{11202615-E557-4ECF-9B86-F59C81E52909}" = FIFA 10
"{1A4052AB-BA77-44F7-8EE7-9F9131BFD7A6}" = OF Dragon Rising
"{1A7C2340-D1AC-4742-BCFF-1EA6CADFDC8B}" = Microsoft Windows Debugging Symbols
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{2348b586-c9ae-46ce-936c-a68e9426e214}" = Nero StartSmart Help
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java™ 6 Update 17
"{283FFB23-8751-4B08-ACB8-5E0F8BCF7727}" = Pro Evolution Soccer 2010
"{2c822a2f-4a5c-4f88-b07e-c6cb35ffa4e0}" = Nero 9
"{2E660A2A-A55F-43CD-9F73-CAD7382EEB78}" = Microsoft Games for Windows - LIVE Redistributable
"{300A2961-B2B5-4889-9CB9-5C2A570D08AD}" = Debugging Tools for Windows (x86)
"{3D39E775-DDDA-4327-B747-0BDC5F191331}" = Nokia PC Suite
"{438AD0E0-495F-11D6-B09D-0004769F25D1}" = Capitalism II
"{4A05FF52-4AA8-4681-BC06-5EE7F812A441}" = SEGA Rally
"{4A19D6AC-ADE0-4A07-80FF-9C9812C45557}" = Steinberg Cubase 5
"{52D02A2B-03D2-4E34-A358-DC5D951FD296}" = Nokia Connectivity Cable Driver
"{532B917B-8235-4FA5-BE36-643A8BB053A5}" = Steinberg REVerence Content 01
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5731C0A8-B266-451A-8D3F-8066AA21836F}" = Tom Clancy's Rainbow Six Vegas
"{595a3116-40bb-4e0f-a2e8-d7951da56270}" = NeroExpress
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6D1ACE56-38B1-1055-5926-EADFB056F2F2}" = Catalyst Control Center InstallProxy
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7748ac8c-18e3-43bb-959b-088faea16fb2}" = Nero StartSmart
"{7829db6f-a066-4e40-8912-cb07887c20bb}" = Nero BurnRights
"{7C11154F-3539-4CB5-979D-EF7913473E53}" = Prince of Persia
"{83202942-84b3-4c50-8622-b8c0aa2d2885}" = Nero Express
"{865D9ED1-EAC2-436D-AFA7-0B750EB5AAAB}" = Steinberg HALionOne Studio Drum Set
"{8C0CAA7A-3272-4991-A808-2C7559DE3409}" = Win7codecs
"{A357EF4C-2B6F-4980-ACA9-B1E42A74D7F3}" = Red Faction Guerrilla
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{AC76BA86-7AD7-1045-7B44-A92000000001}" = Adobe Reader 9.2 - Polish
"{AC997F93-0757-4ED4-A701-F40C2D654D09}" = Steinberg HALionOne GM Drum Set
"{b1adf008-e898-4fe2-8a1f-690d9a06acaf}" = DolbyFiles
"{b2ec4a38-b545-4a00-8214-13fe0e915e6d}" = Advertising Center
"{b78120a0-cf84-4366-a393-4d0a59bc546c}" = Menu Templates - Starter Kit
"{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4}" = Need for Speed™ SHIFT
"{bd5ca0da-71ad-43da-b19e-6eee0c9adc9a}" = Nero ControlCenter
"{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}" = Creative MediaSource 5
"{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}" = NVIDIA PhysX
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{d025a639-b9c9-417d-8531-208859000af8}" = NeroBurningROM
"{D23CBFDA-C46B-4920-BA70-FC7878A3F05A}" = Steinberg HALionOne Studio Set
"{D734A52D-624E-428E-8DE6-B2665E3621CC}" = Microsoft Windows Debugging Symbols
"{D82CDA0D-C182-42C8-8FF2-5649C98D6003}" = Steinberg HALionOne Pro Set
"{E22AD5D3-EB60-4A8F-835C-6C10E369DCE2}" = Steinberg HALionOne Expression Set
"{E397F6F0-AEE4-4236-BB05-1351350F8365}" = War Rock
"{e498385e-1c51-459a-b45f-1721e37aa1a0}" = Movie Templates - Starter Kit
"{E70E7159-93B1-470D-9FBD-D8E9EF34B538}" = Steinberg HALionOne
"{e8a80433-302b-4ff1-815d-fcc8eac482ff}" = Nero Installer
"{F057965A-D974-4C64-ADB1-4381CD4B8956}" = Steinberg HALionOne GM Set
"{F112F66E-25CA-42DD-983C-6118EB38F606}" = Microsoft Games for Windows - LIVE
"{F3AFD063-8BAD-485E-B641-E7F5A2C5AE71}" = Steinberg HALionOne Additional Content Set 01
"{f4041dce-3fe1-4e18-8a9e-9de65231ee36}" = Nero ControlCenter
"{f6bdd7c5-89ed-4569-9318-469aa9732572}" = Nero BurnRights
"{F7753BE0-62A0-0C91-A48E-ECA6D23F6C0F}" = HydraVision
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"AQQ" = WapSter AQQ
"Audacity 1.3 Beta (Unicode)_is1" = Audacity 1.3.9 (Unicode)
"AudioCS" = Creative Audio Control Panel
"avast!" = avast! Antivirus
"BitComet" = BitComet 1.05
"Browser Defender_is1" = Browser Defender 2.0.6.10
"Console Launcher" = Creative Console Launcher
"Creative Software AutoUpdate" = Creative Software AutoUpdate
"Creative Sound Blaster Properties x64 Edition" = Creative Sound Blaster Properties x64 Edition
"eMule" = eMule
"EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.30
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.2
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.2
"Gadu-Gadu" = Gadu-Gadu 7.7
"GamersFirst LIVE!" = GamersFirst LIVE!
"HijackThis" = HijackThis 2.0.2
"InstallShield_{4A05FF52-4AA8-4681-BC06-5EE7F812A441}" = SEGA Rally
"InstallShield_{A357EF4C-2B6F-4980-ACA9-B1E42A74D7F3}" = Red Faction Guerrilla
"Mozilla Firefox (3.5.4)" = Mozilla Firefox (3.5.4)
"My Global Search Uninstall" = My Global Search Bar
"Nokia PC Suite" = Nokia PC Suite
"OpenAL" = OpenAL
"SCDA_is1" = Tom Clancy's Splinter Cell: Double Agent
"Spyware Doctor" = Spyware Doctor 7.0
"Streamripper" = Streamripper (Remove only)
"Tropico3" = Tropico 3 1.00
"Uninstall_is1" = Uninstall 1.0.0.1
"Winamp" = Winamp
"WinRAR archiver" = Archiwizator WinRAR
"Xilisoft 3GP Video Converter" = Xilisoft 3GP Video Converter
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"BitTorrent DNA" = DNA
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 2009-11-05 10:42:31 | Computer Name = dawido-Komputer | Source = SideBySide | ID = 16842815
Description = Nie można wygenerować kontekstu aktywacji dla "c:\program files (x86)\WapSter\wapster
aqq\System\DelZip179.dll". Błąd w pliku manifestu lub w pliku zasad "c:\program
files (x86)\WapSter\wapster aqq\System\DelZip179.dll" w wierszu 8. Wartość "*" atrybutu
"language" elementu "assemblyIdentity" jest nieprawidłowa.
Error - 2009-11-05 10:42:37 | Computer Name = dawido-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Program Files (x86)\Nokia\Nokia
PC Suite 7\TIS_VistaPIM.dll". Nie można odnaleźć zestawu zależnego Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.
Error - 2009-11-05 14:37:43 | Computer Name = dawido-Komputer | Source = SideBySide | ID = 16842815
Description = Nie można wygenerować kontekstu aktywacji dla "c:\program files (x86)\WapSter\wapster
aqq\System\DelZip179.dll". Błąd w pliku manifestu lub w pliku zasad "c:\program
files (x86)\WapSter\wapster aqq\System\DelZip179.dll" w wierszu 8. Wartość "*" atrybutu
"language" elementu "assemblyIdentity" jest nieprawidłowa.
Error - 2009-11-05 14:37:57 | Computer Name = dawido-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Program Files (x86)\Nokia\Nokia
PC Suite 7\TIS_VistaPIM.dll". Nie można odnaleźć zestawu zależnego Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.
Error - 2009-11-06 02:24:53 | Computer Name = dawido-Komputer | Source = SideBySide | ID = 16842815
Description = Nie można wygenerować kontekstu aktywacji dla "c:\program files (x86)\WapSter\wapster
aqq\System\DelZip179.dll". Błąd w pliku manifestu lub w pliku zasad "c:\program
files (x86)\WapSter\wapster aqq\System\DelZip179.dll" w wierszu 8. Wartość "*" atrybutu
"language" elementu "assemblyIdentity" jest nieprawidłowa.
Error - 2009-11-06 02:25:02 | Computer Name = dawido-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Program Files (x86)\Nokia\Nokia
PC Suite 7\TIS_VistaPIM.dll". Nie można odnaleźć zestawu zależnego Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.
Error - 2009-11-06 06:58:23 | Computer Name = dawido-Komputer | Source = EventSystem | ID = 4621
Description =
Error - 2009-11-06 17:46:27 | Computer Name = dawido-Komputer | Source = EventSystem | ID = 4621
Description =
Error - 2009-11-07 02:20:12 | Computer Name = dawido-Komputer | Source = SideBySide | ID = 16842815
Description = Nie można wygenerować kontekstu aktywacji dla "c:\program files (x86)\WapSter\wapster
aqq\System\DelZip179.dll". Błąd w pliku manifestu lub w pliku zasad "c:\program
files (x86)\WapSter\wapster aqq\System\DelZip179.dll" w wierszu 8. Wartość "*" atrybutu
"language" elementu "assemblyIdentity" jest nieprawidłowa.
Error - 2009-11-07 02:20:24 | Computer Name = dawido-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Program Files (x86)\Nokia\Nokia
PC Suite 7\TIS_VistaPIM.dll". Nie można odnaleźć zestawu zależnego Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.
[ System Events ]
Error - 2009-11-06 07:24:59 | Computer Name = dawido-Komputer | Source = atikmdag | ID = 43029
Description = Display is not active
Error - 2009-11-06 17:37:24 | Computer Name = dawido-Komputer | Source = atikmdag | ID = 43029
Description = Display is not active
Error - 2009-11-06 17:46:30 | Computer Name = dawido-Komputer | Source = atikmdag | ID = 43029
Description = Display is not active
Error - 2009-11-06 17:46:37 | Computer Name = dawido-Komputer | Source = atikmdag | ID = 43029
Description = Display is not active
Error - 2009-11-07 01:57:36 | Computer Name = dawido-Komputer | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter
Error - 2009-11-07 01:57:36 | Computer Name = dawido-Komputer | Source = atikmdag | ID = 43029
Description = Display is not active
Error - 2009-11-07 07:02:35 | Computer Name = dawido-Komputer | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter
Error - 2009-11-07 07:02:35 | Computer Name = dawido-Komputer | Source = atikmdag | ID = 43029
Description = Display is not active
Error - 2009-11-07 08:09:48 | Computer Name = dawido-Komputer | Source = atikmdag | ID = 43029
Description = Display is not active
Error - 2009-11-07 08:10:23 | Computer Name = dawido-Komputer | Source = atikmdag | ID = 43029
Description = Display is not active
< End of report >
Malwarebytes' Anti-Malware 1.41
Wersja bazy definicji: 2775
Windows 6.1.7600
2009-11-07 13:27:28
mbam-log-2009-11-07 (13-27-28).txt
Typ skanowania: Szybkie skanowanie
Przeskanowane obiekty: 86406
Upłynęło: 2 minute(s), 11 second(s)
Zainfekowane procesy w pamięci: 0
Zainfekowane moduły pamięci: 0
Zainfekowane klucze rejestru: 8
Zainfekowane wartości rejestru: 0
Zainfekowane pliki rejestru: 1
Zainfekowane foldery: 0
Zainfekowane pliki: 0
Zainfekowane procesy w pamięci:
(Nie wykryto groźnych plików)
Zainfekowane moduły pamięci:
(Nie wykryto groźnych plików)
Zainfekowane klucze rejestru:
HKEY_CLASSES_ROOT\myglobalsearchbar.settingsplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\myglobalsearchbar.settingsplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\myglobalsearchbar.toolbarplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\myglobalsearchbar.toolbarplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{37b85a2a-692b-4205-9cad-2626e4993404} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{37b85a2c-692b-4205-9cad-2626e4993404} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{37b85a2b-692b-4205-9cad-2626e4993404} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\MyGlobalSearch (Adware.BookedSpace) -> Quarantined and deleted successfully.
Zainfekowane wartości rejestru:
(Nie wykryto groźnych plików)
Zainfekowane pliki rejestru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
Zainfekowane foldery:
(Nie wykryto groźnych plików)
Zainfekowane pliki:
(Nie wykryto groźnych plików)
#15
sw29l
-
-
- 1 958 postów
Charlie Don't Surf !
Napisano 07 11 2009 - 17:21
To nie jest problem z systemem, to problem z pamięciami lub innym podzespolem- np. k.graficzna- ustaw w biosie wszsytkie napiecia ręcznie i zobaczysz czy jest jakis efekt.
#16
mullen87
-
-
- 45 postów
Początkujący
Napisano 15 11 2009 - 10:32
Nie wiem jak ustawić te napięcia,mam asus P5Q-e.Dziwne,przeszedłem cod mw2,na koncu trafiam kolesia w oko mija 10 sekund i sie zawiesza.Zauważyłem też,że kiedy przewijam niektóre okienka, w kompie słychać dziwne cichutkie bzyczenie,wcześniej tak nie było.
#17
brutus3
-
-
- 2 406 postów
Profesjonalista
Napisano 15 11 2009 - 13:40
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 2009-11-05 10:42:31 | Computer Name = dawido-Komputer | Source = SideBySide | ID = 16842815
Description = Nie można wygenerować kontekstu aktywacji dla "c:\program files (x86)\WapSter\wapster
aqq\System\DelZip179.dll". Błąd w pliku manifestu lub w pliku zasad "c:\program
files (x86)\WapSter\wapster aqq\System\DelZip179.dll" w wierszu 8. Wartość "*" atrybutu
"language" elementu "assemblyIdentity" jest nieprawidłowa.
Error - 2009-11-05 10:42:37 | Computer Name = dawido-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Program Files (x86)\Nokia\Nokia
PC Suite 7\TIS_VistaPIM.dll". Nie można odnaleźć zestawu zależnego Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.
Error - 2009-11-05 14:37:43 | Computer Name = dawido-Komputer | Source = SideBySide | ID = 16842815
Description = Nie można wygenerować kontekstu aktywacji dla "c:\program files (x86)\WapSter\wapster
aqq\System\DelZip179.dll". Błąd w pliku manifestu lub w pliku zasad "c:\program
files (x86)\WapSter\wapster aqq\System\DelZip179.dll" w wierszu 8. Wartość "*" atrybutu
"language" elementu "assemblyIdentity" jest nieprawidłowa.
Error - 2009-11-05 14:37:57 | Computer Name = dawido-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Program Files (x86)\Nokia\Nokia
PC Suite 7\TIS_VistaPIM.dll". Nie można odnaleźć zestawu zależnego Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.
Error - 2009-11-06 02:24:53 | Computer Name = dawido-Komputer | Source = SideBySide | ID = 16842815
Description = Nie można wygenerować kontekstu aktywacji dla "c:\program files (x86)\WapSter\wapster
aqq\System\DelZip179.dll". Błąd w pliku manifestu lub w pliku zasad "c:\program
files (x86)\WapSter\wapster aqq\System\DelZip179.dll" w wierszu 8. Wartość "*" atrybutu
"language" elementu "assemblyIdentity" jest nieprawidłowa.
Error - 2009-11-06 02:25:02 | Computer Name = dawido-Komputer | Source = SideBySide | ID = 16842785
Description = Nie można wygenerować kontekstu aktywacji dla "C:\Program Files (x86)\Nokia\Nokia
PC Suite 7\TIS_VistaPIM.dll". Nie można odnaleźć zestawu zależnego Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0".
Użyj
narzędzia sxstrace.exe, aby uzyskać szczegółową diagnozę.
A to co jest te informacje podają co jest źle, może to nie jest tak groźne dla pracy komputera chyba że zaczyna się grę gdzie komputer pracuje na full, wtedy te błędy powodują że komputer zaczyna źle pracować.
#18
mullen87
-
-
- 45 postów
Początkujący
Napisano 23 11 2009 - 15:31
System został uruchomiony ponownie bez uprzedniego czystego zamknięcia. Przyczyną tego błędu może być fakt, że system przestał odpowiadać, uległ awarii lub nastąpiła nieoczekiwana utrata zasilania.
- Provider
[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}
EventID 41
Version 2
Level 1
Task 63
Opcode 0
Keywords 0x8000000000000002
- TimeCreated
[ SystemTime] 2009-11-23T13:39:52.130011600Z
EventRecordID 31059
Correlation
- Execution
[ ProcessID] 4
[ ThreadID] 8
Channel System
Computer dawido-Komputer
- Security
[ UserID] S-1-5-18
- EventData
BugcheckCode 0
BugcheckParameter1 0x0
BugcheckParameter2 0x0
BugcheckParameter3 0x0
BugcheckParameter4 0x0
SleepInProgress false
PowerButtonTimestamp 0
- Provider
[ Name] Microsoft-Windows-Kernel-Power
[ Guid] {331C3B3A-2005-44C2-AC5E-77220C37D6B4}
EventID 41
Version 2
Level 1
Task 63
Opcode 0
Keywords 0x8000000000000002
- TimeCreated
[ SystemTime] 2009-11-23T13:39:52.130011600Z
EventRecordID 31059
Correlation
- Execution
[ ProcessID] 4
[ ThreadID] 8
Channel System
Computer dawido-Komputer
- Security
[ UserID] S-1-5-18
- EventData
BugcheckCode 0
BugcheckParameter1 0x0
BugcheckParameter2 0x0
BugcheckParameter3 0x0
BugcheckParameter4 0x0
SleepInProgress false
PowerButtonTimestamp 0
Użytkownicy przeglądający ten temat: 0
0 użytkowników, 0 gości, 0 anonimowych
