Deal keeper - jak usunąć

**Posty:** 39 · przez **mazurinho7** 24 Lip 2014, 13:33

Zainstalował mi się ostatnio Deal Keeper i wyskakuja mi reklamy na każdej stronie. Nie chce się usunąć. Używałem AdwCleaner ale on też nic nie dał i nie usunął tego. Proszę o pomoc. Z góry dzięki.

**Posty:** 4765 · przez **ordynat** 24 Lip 2014, 15:05

1) Odinstaluj:
"WindowsMangerProtect" = WindowsMangerProtect20.0.0.502

2) Uruchom OTL i w oknie Własne opcje skanowania/Skrypt wklej to:

:OTL
RV - File not found [Auto | Stopped] -- C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe -- (WindowsMangerProtect)
SRV - [2014-07-24 12:01:15 | 000,321,784 | ---- | M] () [Auto | Running] -- C:\Program Files\Deal Keeper\updateDealKeeper.exe -- (Update Deal Keeper)
SRV - [2014-07-24 11:56:41 | 000,321,784 | ---- | M] () [Auto | Running] -- C:\Program Files\Deal Keeper\bin\utilDealKeeper.exe -- (Util Deal Keeper)
SRV - [2014-07-23 19:50:38 | 000,135,928 | ---- | M] () [Auto | Running] -- C:\Program Files\Deal Keeper\updater.exe -- (UpdaterSvcDealKeeper)
DRV - [2014-07-18 06:01:12 | 000,052,928 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\System32\drivers\{55dce8ba-9dec-4013-937e-adbf9317d990}Gw.sys -- ({55dce8ba-9dec-4013-937e-adbf9317d990}Gw)
DRV - [2014-07-02 12:08:56 | 000,052,920 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\System32\drivers\{6fcd6092-9615-4f7f-8898-8df53980e5d2}Gw.sys -- ({6fcd6092-9615-4f7f-8898-8df53980e5d2}Gw)
O2 - BHO: (Deal Keeper) - {1ec8187a-6435-44e3-bbe4-6ce6d3c69254} - C:\Program Files\Deal Keeper\DealKeeperbho.dll File not found
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.

:Files
C:\Users\wangzhisong
C:\Program Files\Deal Keeper\updateDealKeeper.exe
C:\Program Files\Deal Keeper\bin\utilDealKeeper.exe
C:\Program Files\Deal Keeper\updater.exe
C:\Program Files\Deal Keeper

:Reg
[HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"=-
[HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"=-
[HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"=-
[HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"=-
[HKEY_USERS\S-1-5-21-2790593835-569049113-1710405452-1000\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"=-
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]

:Commands
[emptytemp]

Kliknij w Wykonaj Skrypt. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.
Następnie uruchom OTL ponownie, tym razem kliknij Skanuj.
Pokaż nowy log OTL.txt oraz raport z usuwania Skryptem.
.

**Posty:** 39 · przez **mazurinho7** 24 Lip 2014, 15:55

**Posty:** 4765 · przez **ordynat** 24 Lip 2014, 16:25

Uruchom OTL i w oknie Własne opcje skanowania/Skrypt wklej to:

:OTL
SRV - File not found [Auto | Stopped] -- C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe -- (WindowsMangerProtect)
[2014-07-21 02:48:09 | 000,000,000 | ---D | C] -- C:\Program Files\di7BlockAndSurf

:Commands
[emptytemp]

Kliknij w Wykonaj Skrypt.

Raportu z tego już nie dawaj.

Potem kończymy:
W Adw-Cleaner kliknij na przycisk Odinstaluj (UNINSTALL)
W OTL kliknij na przycisk Sprzątanie - to go usunie razem z jego Kwarantanną.
.

**Posty:** 39 · przez **mazurinho7** 24 Lip 2014, 16:38

Dzięki wielkie za pomoc

**Posty:** 9 · przez **angwec** 25 Paź 2014, 23:36

mam ten sam problem z deal keeper ale co gorsze wkleilam w otl to samo co uzytkownik na tej stronie a niewiem czy byla to odpowiedz ogolna czy indywidualna dla kazdego komputera i co teraz mam zrobic najpierw wklejam skanowanie adwcleaner # AdwCleaner v4.001 - Log utworzony 25/10/2014 o 23:14:20
# DB v
# Aktualizacja 20/10/2014 przez Xplode
# System operacyjny : Windows 7 Home Premium (32 bits)
# Użytkownik : admin - ADMIN-KOMPUTER
# Ścieżka : C:\Users\admin\Downloads\AdwCleaner.exe
# Opcja : Usuń

***** [ Usługi ] *****

Usługa Usunięto : {023ffe30-e38b-4272-b1c0-1e9f6a180b9d}w
Usługa Usunięto : {35d31228-a1dd-4d11-a2ff-ef6ba162cebd}w
Usługa Usunięto : {55dce8ba-9dec-4013-937e-adbf9317d990}w
Usługa Usunięto : {5637c139-b301-4ecd-a2cf-2ae75f214b07}w
Usługa Usunięto : {76152aee-de6d-453d-a8d8-6f11a0085df8}w
Usługa Usunięto : {7e4355b8-96cd-43eb-b59a-82af29f01b16}w
Usługa Usunięto : {871e60bd-7aec-4938-a4b2-ffde58590efe}w
Usługa Usunięto : {999a4cbb-05c0-4612-9e48-e2b9897a2c6f}w
Usługa Usunięto : {af7618ea-6d4f-47e5-9e06-5f808487ae22}w
Usługa Usunięto : {c42edeec-c173-4c88-9a7f-6934088af032}w
Usługa Usunięto : {c746a0c9-95e3-4ce8-9e9f-58fac8587b02}w

***** [ Pliki / Foldery ] *****

Folder Usunięto : C:\ProgramData\apn
Folder Usunięto : C:\ProgramData\Uniblue
Folder Usunięto : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cigiagpbkapepgklncnajbakkpkopmam
Folder Usunięto : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfohdbmjdkfijghgklbickfnaepghgba
Plik Usunięto : C:\Windows\system32\roboot.exe
Plik Usunięto : C:\Windows\system32\\drivers\{023ffe30-e38b-4272-b1c0-1e9f6a180b9d}w.sys
Plik Usunięto : C:\Windows\system32\\drivers\{35d31228-a1dd-4d11-a2ff-ef6ba162cebd}w.sys
Plik Usunięto : C:\Windows\system32\\drivers\{55dce8ba-9dec-4013-937e-adbf9317d990}w.sys
Plik Usunięto : C:\Windows\system32\\drivers\{5637c139-b301-4ecd-a2cf-2ae75f214b07}w.sys
Plik Usunięto : C:\Windows\system32\\drivers\{76152aee-de6d-453d-a8d8-6f11a0085df8}w.sys
Plik Usunięto : C:\Windows\system32\\drivers\{7e4355b8-96cd-43eb-b59a-82af29f01b16}w.sys
Plik Usunięto : C:\Windows\system32\\drivers\{871e60bd-7aec-4938-a4b2-ffde58590efe}w.sys
Plik Usunięto : C:\Windows\system32\\drivers\{999a4cbb-05c0-4612-9e48-e2b9897a2c6f}w.sys
Plik Usunięto : C:\Windows\system32\\drivers\{af7618ea-6d4f-47e5-9e06-5f808487ae22}w.sys
Plik Usunięto : C:\Windows\system32\\drivers\{c42edeec-c173-4c88-9a7f-6934088af032}w.sys
Plik Usunięto : C:\Windows\system32\\drivers\{c746a0c9-95e3-4ce8-9e9f-58fac8587b02}w.sys
Plik Usunięto : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
Plik Usunięto : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal

***** [ Zadania ] *****

***** [ Skróty ] *****

***** [ Rejestr ] *****

Klucz Usunięto : HKLM\SOFTWARE\Classes\driverscanner
Klucz Usunięto : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Klucz Usunięto : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Tracing\DealKeeper_RASAPI32
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Tracing\DealKeeper_RASMANCS
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASAPI32
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASMANCS
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Tracing\updateDealKeeper_RASAPI32
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Tracing\updateDealKeeper_RASMANCS
Klucz Usunięto : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Klucz Usunięto : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Klucz Usunięto : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Klucz Usunięto : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Klucz Usunięto : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Klucz Usunięto : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{06E58E5E-F8CB-4049-991E-A41C03BD419E}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{100EB1FD-D03E-47FD-81F3-EE91287F9465}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{258C9770-1713-4021-8D7E-1F184A2BD754}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{31CF9EBE-5755-4A1D-AC25-2834D952D9B4}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{43D9E6F0-1776-4897-AE14-ECEDECBAFEC0}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{5A074B29-F830-49DE-A31B-5BB9D7F6B407}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{C451C08A-EC37-45DF-AAAD-18B51AB5E837}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{DCC70A83-E184-40A3-906B-779AF5E941C4}
Klucz Usunięto : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Klucz Usunięto : HKCU\Software\Deal Keeper
Klucz Usunięto : HKLM\SOFTWARE\Deal Keeper
Klucz Usunięto : HKLM\SOFTWARE\Uniblue

***** [ Przeglądarki internetowe ] *****

-\\ Internet Explorer v9.0.8112.16555

-\\ Google Chrome v36.0.1985.143

*************************

AdwCleaner[R0].txt - [6998 octets] - [25/10/2014 23:09:52]
AdwCleaner[S0].txt - [6658 octets] - [25/10/2014 23:14:20]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6718 octets] ##########

Dodano Dzisiaj, 23:42:
a teraz z otl po wklejeniu skryptu umieszczonego na tej stronie
All processes killed
========== OTL ==========
Service Update Deal Keeper stopped successfully!
Service Update Deal Keeper deleted successfully!
C:\Program Files\Deal Keeper\updateDealKeeper.exe moved successfully.
Service Util Deal Keeper stopped successfully!
Service Util Deal Keeper deleted successfully!
C:\Program Files\Deal Keeper\bin\utilDealKeeper.exe moved successfully.
Service UpdaterSvcDealKeeper stopped successfully!
Service UpdaterSvcDealKeeper deleted successfully!
C:\Program Files\Deal Keeper\updater.exe moved successfully.
Service {55dce8ba-9dec-4013-937e-adbf9317d990}Gw stopped successfully!
Service {55dce8ba-9dec-4013-937e-adbf9317d990}Gw deleted successfully!
C:\Windows\System32\drivers\{55dce8ba-9dec-4013-937e-adbf9317d990}Gw.sys moved successfully.
Service {6fcd6092-9615-4f7f-8898-8df53980e5d2}Gw stopped successfully!
Service {6fcd6092-9615-4f7f-8898-8df53980e5d2}Gw deleted successfully!
C:\Windows\System32\drivers\{6fcd6092-9615-4f7f-8898-8df53980e5d2}Gw.sys moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1ec8187a-6435-44e3-bbe4-6ce6d3c69254}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1ec8187a-6435-44e3-bbe4-6ce6d3c69254}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\10 deleted successfully.
========== FILES ==========
File\Folder C:\Users\wangzhisong not found.
File\Folder C:\Program Files\Deal Keeper\updateDealKeeper.exe not found.
File\Folder C:\Program Files\Deal Keeper\bin\utilDealKeeper.exe not found.
File\Folder C:\Program Files\Deal Keeper\updater.exe not found.
C:\Program Files\Deal Keeper\bin folder moved successfully.
C:\Program Files\Deal Keeper folder moved successfully.
========== REGISTRY ==========
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope deleted successfully.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope not found.
Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope deleted successfully.
Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2790593835-569049113-1710405452-1000\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope deleted successfully.
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\ deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator

User: All Users

User: ASPNET

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Gość

User: HomeGroupUser$

User: Public

User: wangjihua

User: z
->Temp folder emptied: 147071291 bytes
->Temporary Internet Files folder emptied: 11060933 bytes
->Java cache emptied: 26929 bytes
->Google Chrome cache emptied: 6282630 bytes
->Flash cache emptied: 1039 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1279252 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 6350279 bytes
RecycleBin emptied: 200019564 bytes

Total Files Cleaned = 355,00 mb

OTL by OldTimer - Version 3.2.69.0 log created on 07242014_153807

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Dodano Dzisiaj, 23:46:
i po zatwierdzeniu restartu kompa i skanowania ponownego
OTL Extras logfile created on: 2014-10-25 22:50:09 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\admin\Downloads
Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,61 Gb Total Physical Memory | 1,61 Gb Available Physical Memory | 61,69% Memory free
5,21 Gb Paging File | 4,17 Gb Available in Paging File | 80,04% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 244,96 Gb Total Space | 193,13 Gb Free Space | 78,84% Space Free | Partition Type: NTFS
Drive D: | 220,70 Gb Total Space | 133,52 Gb Free Space | 60,50% Space Free | Partition Type: NTFS

Computer Name: ADMIN-KOMPUTER | User Name: admin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 180 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{043C6279-2A90-4FA2-918D-724556E8E725}" = lport=4000 | protocol=6 | dir=out | app=c:\program files\dll-files.com fixer\dllfixer.exe |
"{0A971DD2-CEB0-410A-823D-3B5B6EA9CD08}" = lport=137 | protocol=17 | dir=in | app=system |
"{1B49AC17-0D45-4498-A802-ABE1309FB0FD}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{245B2EA8-7999-44C5-974F-7E62319907C1}" = lport=138 | protocol=17 | dir=in | app=system |
"{26DFF5B6-B00E-4215-B27A-CB7EB992D5DA}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{2BB42B4D-6311-4F4D-AD8E-FC4297099FD7}" = lport=139 | protocol=6 | dir=in | app=system |
"{31C52772-E77E-41D6-B598-2880FE69A06E}" = lport=2869 | protocol=6 | dir=in | app=system |
"{38A63D6D-375A-4AFC-9A3D-DE8A5FDB1CD9}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{3E80987B-3ABA-4A77-9272-3AAE41CBFCBD}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\google\chrome\application\chrome.exe |
"{429BDFE2-3482-4095-898D-14361CA07D7F}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{52FAFD28-9622-4044-BE01-742C57CF8EF5}" = rport=139 | protocol=6 | dir=out | app=system |
"{5B833E6F-A4A3-4900-B212-6E3D299B810F}" = lport=4000 | protocol=6 | dir=out | app=c:\program files\dll-files.com fixer\dllfixer.exe |
"{653D2DB1-3CC9-47FF-8ACD-E0AF30CBD2C6}" = rport=138 | protocol=17 | dir=out | app=system |
"{769B8EB6-34AD-4590-9534-42094F3C0111}" = lport=4000 | protocol=6 | dir=out | app=c:\program files\dll-files.com fixer\dllfixer.exe |
"{7DFDD67A-CDF4-4AD9-9954-E995782D0BAD}" = rport=137 | protocol=17 | dir=out | app=system |
"{85BED9BE-7403-4327-B1CA-C9552B98F6A1}" = rport=445 | protocol=6 | dir=out | app=system |
"{87193C9C-2988-42FF-B323-9194FA3866B1}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{981B170E-B426-4680-A9FE-862DE4684277}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{A2DCF913-D147-4DDD-AC2A-709EDD9BB140}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{A6B90022-6C67-4157-B36A-893FC79A9D66}" = rport=10243 | protocol=6 | dir=out | app=system |
"{AB44671A-6F63-4C16-AF9B-DBEBD5B06D62}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{C7BA6850-396C-4ABD-95A4-7F760AC78FAC}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{C8BCDF87-4756-4E09-A670-5FD30EBB2568}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{CA00B2FB-101F-4823-A146-1312657D3F84}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{E4F02C56-C9A1-4ED4-B774-DF72B40D6807}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{EA18854E-0949-4EBF-93BA-191BF7971C3F}" = lport=445 | protocol=6 | dir=in | app=system |
"{EAB0595C-2B1A-4B41-838A-92632FE038B8}" = lport=10243 | protocol=6 | dir=in | app=system |
"{F30E3B31-1494-4D92-8A95-4C911166D7C4}" = lport=4000 | protocol=6 | dir=out | app=c:\program files\dll-files.com fixer\dllfixer.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{04644AD3-38A2-41E3-B484-6EACBB0542C4}" = protocol=6 | dir=in | app=d:\spore\sporebinep1\sporeapp.exe |
"{1C501CF1-65EF-4AF2-8772-68A7A2A50BFD}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{43921D2F-1F6B-4248-B8A9-994E77CDED46}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{4567BCFB-6ED9-489B-AF73-99989F5A6888}" = protocol=6 | dir=in | app=d:\zoo tycoon 2\zt.exe |
"{51702DB0-8CC4-4E2B-8B87-5355FBD74892}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{52FB9535-CD51-4412-AD9B-D051A90FDC74}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{55DDCDD5-FAFA-4C31-A84E-27CA52AEE156}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{5BA1DE16-3ECB-47D1-8F84-8986ED3CF862}" = protocol=17 | dir=in | app=d:\spore\sporebinep1\sporeapp.exe |
"{5FA637E1-9939-408A-88E2-087D4EB51AB3}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{620B005E-9F87-4882-97CA-843E0AC51872}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{652CF84D-13BD-433B-94A7-A206AEAD4F0E}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{7A914818-DAA0-42AE-9E70-9ACBE7938F99}" = protocol=17 | dir=in | app=d:\spore\sporebin\sporeapp.exe |
"{8186D268-04B8-4F0F-A4D1-7D924F06874D}" = protocol=17 | dir=in | app=c:\users\admin\appdata\roaming\utorrent\utorrent.exe |
"{954888A8-BEC8-4D27-85A0-4C1963421309}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{96ABAF78-24FE-443C-B017-001D4807A2E9}" = protocol=17 | dir=in | app=d:\zoo tycoon 2\zt.exe |
"{996EAA40-40E9-47E4-9D66-61B536255CA4}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{9981129E-A5BE-4B1B-A466-C21FB4E9315E}" = protocol=6 | dir=in | app=d:\spore\sporebin\sporeapp.exe |
"{9FD61A05-569F-4800-BC8A-2B8074CF2FA4}" = protocol=6 | dir=in | app=c:\program files\avast software\avast\ng\vbox\aswfe.exe |
"{A0418C6F-3C0E-4186-A1A2-332A1E8461DA}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{B85A08CE-C641-4BB3-A684-D15A71F249D6}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{BDD7C8E3-5467-45E7-B95E-719B12765AD6}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{C480C01B-2D14-4B42-A617-96BD22822024}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{C6B6793A-0A43-4A1C-B631-2AB1F83E6128}" = protocol=6 | dir=in | app=c:\users\admin\appdata\roaming\utorrent\utorrent.exe |
"{CCFA18F6-E4D5-40D6-8659-859B78546B92}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{D896482A-7068-4E1E-9125-63E37EF048FA}" = protocol=17 | dir=in | app=c:\program files\avast software\avast\ng\vbox\aswfe.exe |
"{DF9B8DF6-E602-4341-A3B6-5A16FD557F7B}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{E1F7A2ED-78D3-4D7E-9AFB-F61ABA1F25A7}" = protocol=6 | dir=out | app=system |
"TCP Query User{6368ABFC-8891-49F3-801A-17D80652B0FF}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"TCP Query User{925BAA74-EAFE-4384-BEC1-518A61215557}D:\kingdoms of amalur reckoning\kingdoms of amalur reckoning.exe" = protocol=6 | dir=in | app=d:\kingdoms of amalur reckoning\kingdoms of amalur reckoning.exe |
"TCP Query User{E9D0BBC5-B40A-4866-B539-A3D775468813}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"UDP Query User{2C3E5AAF-AF49-4DF0-A33E-71FAE09FC528}D:\kingdoms of amalur reckoning\kingdoms of amalur reckoning.exe" = protocol=17 | dir=in | app=d:\kingdoms of amalur reckoning\kingdoms of amalur reckoning.exe |
"UDP Query User{4DD396D6-FB2C-4970-8A53-30208ABCF50E}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"UDP Query User{FD75F46D-A7C3-4810-A64F-3640DA44D77F}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1377477B-D9A5-ED23-55E9-7B81197E5500}" = CCC Help Danish
"{18192D3F-5537-4560-AD89-D695F72AF91D}" = OpenOffice.org 3.4.1
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{1F517564-BD91-768D-335A-31F4F92DAAE6}" = CCC Help Swedish
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{248D3B98-3BA9-ECE0-2C60-0E975B049A0E}" = CCC Help Chinese Standard
"{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}" = Skype™ 6.21
"{26A24AE4-039D-4CA4-87B4-2F03217060FF}" = Java 7 Update 60
"{321320E1-0E5A-36CB-9E52-F3B201B8C4D4}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack
"{3632EF08-E136-740B-F1C0-9706E10823AD}" = CCC Help Chinese Traditional
"{397F6387-F746-431E-891A-C19BC8D3A578}" = Catalyst Control Center - Branding
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{43F8EEDE-CFD6-01C6-0DC4-4A6DEDABE1E7}" = CCC Help Norwegian
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{50425A02-68C6-803C-68DA-B4EF0198D1E8}" = CCC Help Thai
"{54160902-495B-CA24-24EB-D7A20C9C276A}" = CCC Help Hungarian
"{56679682-DE9E-5FFA-19E7-9E4B7B30DB29}" = CCC Help French
"{598CCE64-8F44-4E01-214C-E53E86AAE4F8}" = AMD VISION Engine Control Center
"{5BD160CD-B301-C25E-CD33-D98329674AE2}" = CCC Help Finnish
"{5D599C5F-A0F5-7EF1-33A1-D95016151DCE}" = CCC Help Turkish
"{5EA0726E-58E3-48FB-87C6-615ED7662B32}" = CCC Help Czech
"{5F07FA35-E4A6-2BD7-F101-5F69C1C989A0}" = CCC Help Polish
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{6A6D3F8C-4DEA-492E-00BA-C5AAD7C7DF16}" = CCC Help Korean
"{6C325EF2-7654-3E3F-73C4-F914D74C933A}" = CCC Help Greek
"{6D1221A9-17BF-4EC0-81F2-27D30EC30701}" = Skype Click to Call
"{6D35DF2D-7523-4CB6-9E8F-A1660D9F8637}_is1" = "Spore"
"{78B4C598-75E0-97E1-A2BF-A7D8A69B4AF4}" = ccc-utility
"{8496146D-1703-0616-E0BE-9118003B6AF1}" = CCC Help Spanish
"{866E7136-1C37-7EFC-6F0D-7530B43A199A}" = CCC Help Italian
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8B460EC1-067A-59F4-31DC-C66D8DBAB986}" = CCC Help Japanese
"{8B7D005E-8EE4-C942-FF32-1C183476D91E}" = CCC Help Dutch
"{8D4A7DF9-CB2A-66C8-8F34-AF01D1D808C4}" = CCC Help Russian
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9BF8FA5B-6BC3-51AD-3B2D-E2CCA44E5281}" = CCC Help English
"{9E46AC02-EC6D-A371-BCE9-A13B3A2289C5}" = CCC Help Portuguese
"{9F6FEE21-E923-585C-2DEC-3B7FB59B165E}" = CCC Help German
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A299A3C4-5255-5078-822C-98BAD136E934}" = Catalyst Control Center Localization All
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1045-7B44-AB0000000001}" = Adobe Reader XI (11.0.09) - Polish
"{B6A0A1C1-C979-49D6-F390-1A7E20476201}" = AMD Catalyst Install Manager
"{DA518A76-8AFA-671B-570D-9A802508987A}" = AMD Steady Video Plug-In
"{E1390598-6F17-41C4-7AF5-4B54CFC62D67}" = Catalyst Control Center InstallProxy
"Adobe Flash Player ActiveX" = Adobe Flash Player 15 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 15 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 12.1
"Avast" = avast! Pro Antivirus
"DAEMON Tools Pro" = DAEMON Tools Pro
"EAX Unified" = EAX Unified
"Google Chrome" = Google Chrome
"KLiteCodecPack_is1" = K-Lite Codec Pack 10.6.0 Full
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile
"NSS" = Norton Security Scan
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"WinRAR archiver" = WinRAR 5.11 (32-bitowy)

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"OpenFM" = OpenFM
"UnityWebPlayer" = Unity Web Player
"uTorrent" = µTorrent

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 2014-10-16 14:30:09 | Computer Name = admin-Komputer | Source = VSS | ID = 8193
Description =

Error - 2014-10-18 03:27:20 | Computer Name = admin-Komputer | Source = VSS | ID = 8194
Description =

Error - 2014-10-18 06:02:33 | Computer Name = admin-Komputer | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez
Usługi kryptograficzne nie powiodło się. Details: AddLegacyDriverFiles: Unable to
back up image of binary Symantec Eraser Control driver. System Error: Nie można odnaleźć
określonego pliku. .

Error - 2014-10-18 14:29:36 | Computer Name = admin-Komputer | Source = Application Hang | ID = 1002
Description = Program chrome.exe w wersji 36.0.1985.143 zatrzymał interakcję z systemem
Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji
dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum
akcji. Identyfikator procesu: f50 Godzina rozpoczęcia: 01cfeb0117fb0508 Godzina zakończenia:
98 Ścieżka aplikacji: C:\Program Files\Google\Chrome\Application\chrome.exe Identyfikator
raportu: a51e6034-56f4-11e4-a8a1-50b7c3d72e21

Error - 2014-10-20 06:10:01 | Computer Name = admin-Komputer | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: dsrlte.exe, wersja: 1.1.0.2, sygnatura
czasowa: 0x53ff3819 Nazwa modułu powodującego błąd: unknown, wersja: 0.0.0.0, sygnatura
czasowa: 0x00000000 Kod wyjątku: 0xc0000005 Przesunięcie błędu: 0x020dc3b6 Identyfikator
procesu powodującego błąd: 0x84c Godzina uruchomienia aplikacji powodującej błąd:
0x01cfec4c50698730 Ścieżka aplikacji powodującej błąd: C:\Users\admin\AppData\Local\Pay-By-Ads\Yahoo!
Search\1.3.12.4\dsrlte.exe Ścieżka modułu powodującego błąd: unknown Identyfikator
raportu: 40262ed9-5841-11e4-8ea1-50b7c3d72e21

Error - 2014-10-20 11:27:07 | Computer Name = admin-Komputer | Source = VSS | ID = 12344
Description =

Error - 2014-10-20 11:38:05 | Computer Name = admin-Komputer | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Przetwarzanie wywołania OnIdentity() w obiekcie System Writer przez
Usługi kryptograficzne nie powiodło się. Details: AddLegacyDriverFiles: Unable to
back up image of binary Synaptics TouchPad Driver. System Error: Nie można odnaleźć
określonego pliku. .

Error - 2014-10-22 09:59:51 | Computer Name = admin-Komputer | Source = Application Error | ID = 1000
Description = Nazwa aplikacji powodującej błąd: GoogleUpdate.exe, wersja: 1.3.21.103,
sygnatura czasowa: 0x4f3c6d6c Nazwa modułu powodującego błąd: ntdll.dll, wersja:
6.1.7600.16915, sygnatura czasowa: 0x4ec49caf Kod wyjątku: 0xc0000005 Przesunięcie
błędu: 0x0005e929 Identyfikator procesu powodującego błąd: 0xf60 Godzina uruchomienia
aplikacji powodującej błąd: 0x01cfedf69119a8fd Ścieżka aplikacji powodującej błąd:
C:\Program Files\Google\Update\GoogleUpdate.exe Ścieżka modułu powodującego błąd:
C:\Windows\SYSTEM32\ntdll.dll Identyfikator raportu: b086bf07-59f3-11e4-a908-50b7c3d72e21

Error - 2014-10-25 01:14:19 | Computer Name = admin-Komputer | Source = Application Hang | ID = 1002
Description = Program javaw.exe w wersji 7.0.670.1 zatrzymał interakcję z systemem
Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji
dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum
akcji. Identyfikator procesu: 11b0 Godzina rozpoczęcia: 01cff0121763cbb3 Godzina zakończenia:
84 Ścieżka aplikacji: C:\Program Files\Java\jre7\bin\javaw.exe Identyfikator raportu:
c01830c0-5c05-11e4-846f-50b7c3d72e21

Error - 2014-10-25 15:59:45 | Computer Name = admin-Komputer | Source = Application Hang | ID = 1002
Description = Program iexplore.exe w wersji 9.0.8112.16555 zatrzymał interakcję
z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej
informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania
Centrum akcji. Identyfikator procesu: db0 Godzina rozpoczęcia: 01cff08d80939cd2 Godzina
zakończenia: 131 Ścieżka aplikacji: C:\Program Files\Internet Explorer\iexplore.exe

Identyfikator
raportu:

[ System Events ]
Error - 2014-10-25 08:42:32 | Computer Name = admin-Komputer | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi AvastVBox COM Service z powodu następującego
błędu: %%1053

Error - 2014-10-25 08:42:35 | Computer Name = admin-Komputer | Source = Service Control Manager | ID = 7009
Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się
z usługą Internet Manager. OUC.

Error - 2014-10-25 08:42:35 | Computer Name = admin-Komputer | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Internet Manager. OUC z powodu następującego
błędu: %%1053

Error - 2014-10-25 14:15:26 | Computer Name = admin-Komputer | Source = Service Control Manager | ID = 7009
Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się
z usługą AvastVBox COM Service.

Error - 2014-10-25 14:15:26 | Computer Name = admin-Komputer | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi AvastVBox COM Service z powodu następującego
błędu: %%1053

Error - 2014-10-25 14:15:30 | Computer Name = admin-Komputer | Source = Service Control Manager | ID = 7009
Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się
z usługą Internet Manager. OUC.

Error - 2014-10-25 14:15:30 | Computer Name = admin-Komputer | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Internet Manager. OUC z powodu następującego
błędu: %%1053

Error - 2014-10-25 16:11:37 | Computer Name = admin-Komputer | Source = Service Control Manager | ID = 7034
Description = Usługa AMD External Events Utility niespodziewanie zakończyła pracę.
Wystąpiło to razy: 1.

Error - 2014-10-25 16:18:30 | Computer Name = admin-Komputer | Source = Service Control Manager | ID = 7009
Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się
z usługą AvastVBox COM Service.

Error - 2014-10-25 16:18:30 | Computer Name = admin-Komputer | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi AvastVBox COM Service z powodu następującego
błędu: %%1053

< End of report >

Dodano Dzisiaj, 23:50:
a taki raport mam z przeskanowania 180 dni
OTL logfile created on: 2014-10-25 22:50:09 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\admin\Downloads
Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd

2,61 Gb Total Physical Memory | 1,61 Gb Available Physical Memory | 61,69% Memory free
5,21 Gb Paging File | 4,17 Gb Available in Paging File | 80,04% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 244,96 Gb Total Space | 193,13 Gb Free Space | 78,84% Space Free | Partition Type: NTFS
Drive D: | 220,70 Gb Total Space | 133,52 Gb Free Space | 60,50% Space Free | Partition Type: NTFS

Computer Name: ADMIN-KOMPUTER | User Name: admin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 180 Days

========== Processes (SafeList) ==========

PRC - [2014-10-25 22:03:22 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\admin\Downloads\OTL.exe
PRC - [2014-10-22 20:42:57 | 000,123,640 | ---- | M] () -- C:\ProgramData\d7a0fe93-7bf3-4f3d-89c3-fe4e144b2eb8\maintainer.exe
PRC - [2014-10-14 10:22:12 | 005,170,480 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2014-10-14 10:22:12 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2014-10-14 10:21:25 | 003,192,344 | ---- | M] (Avast Software) -- C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
PRC - [2014-10-11 14:02:48 | 001,385,808 | ---- | M] (BitTorrent Inc.) -- C:\Users\admin\AppData\Roaming\uTorrent\uTorrent.exe
PRC - [2014-09-12 11:43:06 | 000,064,704 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2014-07-14 18:21:46 | 001,390,176 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
PRC - [2014-07-14 18:21:06 | 001,767,520 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
PRC - [2014-07-05 14:13:45 | 000,480,256 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
PRC - [2014-07-05 14:13:45 | 000,209,408 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
PRC - [2012-02-02 17:16:56 | 002,671,936 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe
PRC - [2009-10-31 07:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009-07-14 03:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe

========== Modules (No Company Name) ==========

MOD - [2014-10-14 10:22:18 | 038,984,400 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2014-07-09 22:22:20 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\0aeaf4f1629dbe8eafc8f47b1795b18a\PresentationFramework.Aero.ni.dll
MOD - [2014-07-09 22:21:32 | 014,325,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\36b839247bd1d22a7fd014a74abe9729\PresentationFramework.ni.dll
MOD - [2014-07-09 22:21:03 | 012,218,880 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\549690bfac66934b7c7fd5cf8b120b7c\PresentationCore.ni.dll
MOD - [2014-07-09 22:20:41 | 003,325,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\82a4c4666ad83c3a375210247e69646b\WindowsBase.ni.dll
MOD - [2014-07-09 22:20:19 | 002,295,296 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\7d3a95d2123d5a7982a451f1319fab8d\System.Core.ni.dll
MOD - [2014-07-08 21:21:31 | 012,433,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\05682429807d34d6ff05a77ea153935f\System.Windows.Forms.ni.dll
MOD - [2014-07-08 21:20:52 | 001,592,832 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\e2ee5d77ebe0bd025e7a7a317a43d677\System.Drawing.ni.dll
MOD - [2014-07-08 21:20:50 | 011,824,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\a00aab40bdf5aed84b4d4294965cf20d\System.Web.ni.dll
MOD - [2014-07-08 21:20:36 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\01b47a246b4ec7bfec31bf4503aceda1\System.Runtime.Remoting.ni.dll
MOD - [2014-07-08 21:20:22 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\10aba2c167cc1119b80159fd9ac71ca8\System.Xml.ni.dll
MOD - [2014-07-08 21:20:14 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\96a3b737db1e72adaf32d2b350e50c23\System.Configuration.ni.dll
MOD - [2014-07-08 21:20:09 | 007,974,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\c54750e64ba10d0fb7b6a636fb3695ca\System.ni.dll
MOD - [2014-07-08 21:19:56 | 011,490,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\b0b8554c05f194f546a8ed531320760b\mscorlib.ni.dll
MOD - [2012-03-01 15:56:34 | 000,016,384 | R--- | M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll
MOD - [2009-07-14 10:07:28 | 000,249,856 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_pl_31bf3856ad364e35\PresentationFramework.resources.dll
MOD - [2009-07-14 10:07:21 | 000,425,984 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_pl_b77a5c561934e089\System.Windows.Forms.resources.dll
MOD - [2009-07-14 10:07:18 | 000,311,296 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll
MOD - [2009-07-14 10:07:18 | 000,204,800 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_pl_b77a5c561934e089\System.resources.dll

========== Services (SafeList) ==========

SRV - [2014-10-22 20:42:57 | 000,123,640 | ---- | M] () [Auto | Running] -- C:\ProgramData\d7a0fe93-7bf3-4f3d-89c3-fe4e144b2eb8\maintainer.exe -- (MaintainerSvc2.02.5636706)
SRV - [2014-10-20 16:55:24 | 000,267,440 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014-10-14 10:22:12 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2014-10-14 10:21:25 | 003,192,344 | ---- | M] (Avast Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe -- (AvastVBoxSvc)
SRV - [2014-09-12 11:43:06 | 000,064,704 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2014-07-14 18:21:46 | 001,390,176 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe -- (c2cautoupdatesvc)
SRV - [2014-07-14 18:21:06 | 001,767,520 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe -- (c2cpnrsvc)
SRV - [2014-07-06 13:32:54 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2014-07-05 14:13:45 | 000,209,408 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2014-04-03 20:21:48 | 000,315,008 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2009-07-14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009-07-14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_juwwanecm.sys -- (huawei_wwanecm)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_juextctrl.sys -- (huawei_ext_ctrl)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jubusenum.sys -- (huawei_enumerator)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jucdcacm.sys -- (huawei_cdcacm)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_usbenumfilter.sys -- (ew_usbenumfilter)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys -- (esgiguard)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (a59cwou4)
DRV - [2014-10-22 22:30:02 | 000,043,152 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\System32\drivers\{7e4355b8-96cd-43eb-b59a-82af29f01b16}w.sys -- ({7e4355b8-96cd-43eb-b59a-82af29f01b16}w)
DRV - [2014-10-22 01:27:42 | 000,043,152 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\System32\drivers\{023ffe30-e38b-4272-b1c0-1e9f6a180b9d}w.sys -- ({023ffe30-e38b-4272-b1c0-1e9f6a180b9d}w)
DRV - [2014-10-21 18:32:58 | 000,043,152 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\System32\drivers\{5637c139-b301-4ecd-a2cf-2ae75f214b07}w.sys -- ({5637c139-b301-4ecd-a2cf-2ae75f214b07}w)
DRV - [2014-10-20 22:04:42 | 000,043,152 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\System32\drivers\{999a4cbb-05c0-4612-9e48-e2b9897a2c6f}w.sys -- ({999a4cbb-05c0-4612-9e48-e2b9897a2c6f}w)
DRV - [2014-10-20 15:00:40 | 000,043,152 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\System32\drivers\{c42edeec-c173-4c88-9a7f-6934088af032}w.sys -- ({c42edeec-c173-4c88-9a7f-6934088af032}w)
DRV - [2014-10-20 00:58:24 | 000,043,152 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\System32\drivers\{76152aee-de6d-453d-a8d8-6f11a0085df8}w.sys -- ({76152aee-de6d-453d-a8d8-6f11a0085df8}w)
DRV - [2014-10-19 11:04:16 | 000,043,152 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\System32\drivers\{af7618ea-6d4f-47e5-9e06-5f808487ae22}w.sys -- ({af7618ea-6d4f-47e5-9e06-5f808487ae22}w)
DRV - [2014-10-18 21:11:36 | 000,043,152 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\System32\drivers\{871e60bd-7aec-4938-a4b2-ffde58590efe}w.sys -- ({871e60bd-7aec-4938-a4b2-ffde58590efe}w)
DRV - [2014-10-18 00:06:32 | 000,043,152 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\System32\drivers\{c746a0c9-95e3-4ce8-9e9f-58fac8587b02}w.sys -- ({c746a0c9-95e3-4ce8-9e9f-58fac8587b02}w)
DRV - [2014-10-15 02:11:06 | 000,043,152 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\System32\drivers\{35d31228-a1dd-4d11-a2ff-ef6ba162cebd}w.sys -- ({35d31228-a1dd-4d11-a2ff-ef6ba162cebd}w)
DRV - [2014-10-14 10:22:21 | 000,424,808 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2014-10-14 10:22:21 | 000,206,248 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2014-10-14 10:22:21 | 000,089,960 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\aswStm.sys -- (aswStm)
DRV - [2014-10-14 10:22:21 | 000,081,768 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr2.sys -- (aswRdr)
DRV - [2014-10-14 10:22:21 | 000,070,384 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2014-10-14 10:22:21 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2014-10-14 10:22:21 | 000,024,184 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\aswHwid.sys -- (aswHwid)
DRV - [2014-10-14 10:22:07 | 000,787,800 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2014-10-14 10:22:05 | 000,026,136 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswKbd.sys -- (aswKbd)
DRV - [2014-10-14 10:21:25 | 000,218,192 | ---- | M] (Avast Software) [Kernel | Auto | Running] -- C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys -- (VBoxAswDrv)
DRV - [2014-08-15 08:15:13 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2014-08-15 08:10:57 | 000,477,240 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2014-08-06 16:29:08 | 000,052,880 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\System32\drivers\{55dce8ba-9dec-4013-937e-adbf9317d990}w.sys -- ({55dce8ba-9dec-4013-937e-adbf9317d990}w)
DRV - [2014-07-05 14:30:34 | 003,211,264 | ---- | M] (Qualcomm Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2014-07-05 14:13:45 | 010,925,056 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
DRV - [2014-07-05 14:13:45 | 000,495,104 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
DRV - [2012-03-19 11:43:42 | 000,232,040 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\RtsUVStor.sys -- (RSUSBVSTOR)
DRV - [2012-03-07 10:46:20 | 000,173,184 | ---- | M] (Advanced Micro Devices, INC.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\amdxhc.sys -- (amdxhc)
DRV - [2012-03-07 10:46:20 | 000,082,560 | ---- | M] (Advanced Micro Devices, INC.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\amdhub30.sys -- (amdhub30)
DRV - [2012-01-13 10:05:56 | 000,044,160 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\usbfilter.sys -- (usbfilter)
DRV - [2010-01-05 03:20:10 | 001,500,160 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\athur.sys -- (athur)

========== Standard Registry (All) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/?src01=dp1
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.wp.pl/?src01=dp1 [binary data]
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)
IE - HKCU\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = https://www.google.com/search?q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1213153.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.67.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.67.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\admin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-10-18 09:33:44 | 000,000,000 | ---D | M]

========== Chrome ==========

CHR - default_search_provider: ()
CHR - default_search_provider: search_url =
CHR - default_search_provider: suggest_url =
CHR - homepage: http://www.goalunited.org/pl/
CHR - plugin: Error reading preferences file
CHR - Extension: Adblock Plus = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.8.6_0\
CHR - Extension: Spry this! = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cigiagpbkapepgklncnajbakkpkopmam\0.1_0\
CHR - Extension: CSS reload! = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfohdbmjdkfijghgklbickfnaepghgba\0.1_0\
CHR - Extension: Assassin's Creed Revelations = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjkfepmkmmmkfefiijaoledbhobjcfea\1.2_0\
CHR - Extension: Skype Click to Call = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\7.3.16540.9015_0\
CHR - Extension: Google Wallet = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_1\
CHR - Extension: Deal Keeper = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnjdjonjhkmemnldiniaionkhfnpbdom\1.0.1_0\

O1 HOSTS File: ([2009-06-10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (SteadyVideoBHO Class) - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Skype Click to Call for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Common Files\Java\Java Update\jusched.exe (Oracle Corporation)
O4 - HKCU..\Run: [Skype] C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
O4 - HKCU..\Run: [uTorrent] C:\Users\admin\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O9 - Extra Button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\System32\nlaapi.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\System32\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\System32\NapiNSP.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Windows\System32\wshbth.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{938DAC9D-7721-43D3-8398-02AC09934312}: DhcpNameServer = 192.168.1.254
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\skypec2c {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\video/mp4 {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
O18 - Protocol\Filter\video/x-flv {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\System32\credssp.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\Windows\System32\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\Windows\System32\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\Windows\System32\wdigest.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (tspkg) - C:\Windows\System32\tspkg.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 180 Days ==========

[2014-10-25 22:11:36 | 000,000,000 | ---D | C] -- C:\_OTL
[2014-10-25 13:48:10 | 000,000,000 | ---D | C] -- C:\Windows\System32\SPReview
[2014-10-23 11:52:53 | 000,043,152 | ---- | C] (StdLib) -- C:\Windows\System32\drivers\{7e4355b8-96cd-43eb-b59a-82af29f01b16}w.sys
[2014-10-22 14:51:45 | 000,043,152 | ---- | C] (StdLib) -- C:\Windows\System32\drivers\{023ffe30-e38b-4272-b1c0-1e9f6a180b9d}w.sys
[2014-10-22 04:17:49 | 000,043,152 | ---- | C] (StdLib) -- C:\Windows\System32\drivers\{5637c139-b301-4ecd-a2cf-2ae75f214b07}w.sys
[2014-10-21 07:19:21 | 000,043,152 | ---- | C] (StdLib) -- C:\Windows\System32\drivers\{999a4cbb-05c0-4612-9e48-e2b9897a2c6f}w.sys
[2014-10-21 07:15:50 | 000,043,152 | ---- | C] (StdLib) -- C:\Windows\System32\drivers\{c42edeec-c173-4c88-9a7f-6934088af032}w.sys
[2014-10-20 17:29:24 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2014-10-20 14:34:26 | 000,000,000 | ---D | C] -- C:\Program Files\Enigma Software Group
[2014-10-20 14:33:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Wise Installation Wizard
[2014-10-20 12:02:12 | 000,043,152 | ---- | C] (StdLib) -- C:\Windows\System32\drivers\{76152aee-de6d-453d-a8d8-6f11a0085df8}w.sys
[2014-10-20 08:07:10 | 000,043,152 | ---- | C] (StdLib) -- C:\Windows\System32\drivers\{af7618ea-6d4f-47e5-9e06-5f808487ae22}w.sys
[2014-10-19 09:26:05 | 000,043,152 | ---- | C] (StdLib) -- C:\Windows\System32\drivers\{871e60bd-7aec-4938-a4b2-ffde58590efe}w.sys
[2014-10-18 11:59:53 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Google
[2014-10-18 09:40:55 | 002,377,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2014-10-18 09:34:34 | 000,291,352 | ---- | C] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2014-10-18 09:30:19 | 000,043,152 | ---- | C] (StdLib) -- C:\Windows\System32\drivers\{c746a0c9-95e3-4ce8-9e9f-58fac8587b02}w.sys
[2014-10-17 08:36:11 | 000,043,152 | ---- | C] (StdLib) -- C:\Windows\System32\drivers\{f7e972a4-3731-46b4-91a5-4140fc1009e8}w.sys
[2014-10-15 17:23:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared
[2014-10-15 17:12:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Symantec
[2014-10-15 17:12:28 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\NSS
[2014-10-15 17:12:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security Scan
[2014-10-15 17:12:28 | 000,000,000 | ---D | C] -- C:\Program Files\Norton Security Scan
[2014-10-15 17:12:28 | 000,000,000 | ---D | C] -- C:\Windows\System32\drivers\NSS\0400010.010
[2014-10-15 17:12:22 | 000,000,000 | ---D | C] -- C:\Program Files\NortonInstaller
[2014-10-15 16:11:24 | 000,000,000 | ---D | C] -- C:\Windows\System32\Adobe
[2014-10-15 13:21:45 | 000,043,152 | ---- | C] (StdLib) -- C:\Windows\System32\drivers\{35d31228-a1dd-4d11-a2ff-ef6ba162cebd}w.sys
[2014-10-14 16:34:46 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Unity
[2014-10-14 10:54:51 | 000,000,000 | ---D | C] -- C:\Windows\System32\vbox
[2014-10-14 10:24:38 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\AVAST Software
[2014-10-14 10:24:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
[2014-10-14 10:23:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Google
[2014-10-14 10:22:39 | 000,089,960 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswStm.sys
[2014-10-14 10:22:38 | 000,424,808 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys
[2014-10-14 10:22:37 | 000,070,384 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
[2014-10-14 10:22:35 | 000,081,768 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr2.sys
[2014-10-14 10:22:34 | 000,787,800 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
[2014-10-14 10:22:33 | 000,026,136 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswKbd.sys
[2014-10-14 10:22:20 | 000,043,152 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2014-10-14 10:20:31 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2014-10-14 10:19:23 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2014-10-13 15:28:44 | 000,000,000 | ---D | C] -- C:\d744a8cea6b52629b6c7490ce36959a8
[2014-10-13 13:53:21 | 000,000,000 | ---D | C] -- C:\ProgramData\APN
[2014-10-13 13:51:19 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2014-10-13 13:51:10 | 000,272,808 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2014-10-13 13:51:05 | 000,175,528 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2014-10-13 13:51:05 | 000,175,528 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2014-10-13 13:51:05 | 000,096,680 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2014-10-13 13:51:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
[2014-10-12 21:24:13 | 000,000,000 | ---D | C] -- C:\89ab554948932209a81a
[2014-10-12 08:12:47 | 000,000,000 | -H-D | C] -- C:\Windows\AxInstSV
[2014-10-11 20:40:43 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\Unity
[2014-10-11 18:40:00 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\Skype
[2014-10-11 18:39:54 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Skype
[2014-10-11 18:39:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2014-10-11 18:39:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2014-10-11 18:39:36 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2014-10-11 18:39:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2014-10-11 14:31:32 | 000,000,000 | ---D | C] -- C:\ProgramData\d7a0fe93-7bf3-4f3d-89c3-fe4e144b2eb8
[2014-08-25 21:02:35 | 000,000,000 | ---D | C] -- C:\914dd65f7ee920d1eb85
[2014-08-15 09:51:05 | 000,000,000 | ---D | C] -- C:\Program Files\Mafia
[2014-08-15 09:50:09 | 000,139,264 | ---- | C] (Creative Technology Ltd) -- C:\Windows\System32\eax.dll
[2014-08-15 09:50:08 | 000,000,000 | ---D | C] -- C:\Program Files\Creative
[2014-08-15 09:50:07 | 000,306,688 | ---- | C] (InstallShield Software Corporation) -- C:\Windows\IsUninst.exe
[2014-08-15 09:49:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mafia
[2014-08-15 09:42:10 | 000,000,000 | ---D | C] -- C:\Users\admin\Documents\CAPCOM
[2014-08-15 08:37:25 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\Risen3
[2014-08-15 08:10:57 | 000,477,240 | ---- | C] (Duplex Secure Ltd.) -- C:\Windows\System32\drivers\sptd.sys
[2014-08-15 08:10:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Pro
[2014-08-10 10:43:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2014-08-10 10:43:01 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2014-08-07 22:46:34 | 000,052,880 | ---- | C] (StdLib) -- C:\Windows\System32\drivers\{55dce8ba-9dec-4013-937e-adbf9317d990}w.sys
[2014-08-04 19:28:25 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_7.dll
[2014-08-04 19:28:25 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_7.dll
[2014-08-04 19:28:25 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_5.dll
[2014-08-04 19:28:24 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_43.dll
[2014-08-04 19:28:24 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dcsx_43.dll
[2014-08-04 19:28:24 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_43.dll
[2014-08-04 19:28:24 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx11_43.dll
[2014-08-04 19:28:23 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_42.dll
[2014-08-04 19:28:23 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_6.dll
[2014-08-04 19:28:23 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_5.dll
[2014-08-04 19:28:23 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_6.dll
[2014-08-04 19:28:23 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_5.dll
[2014-08-04 19:28:23 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_4.dll
[2014-08-04 19:28:23 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_7.dll
[2014-08-04 19:28:22 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dcsx_42.dll
[2014-08-04 19:28:22 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_42.dll
[2014-08-04 19:28:22 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_41.dll
[2014-08-04 19:28:22 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_42.dll
[2014-08-04 19:28:22 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_41.dll
[2014-08-04 19:28:22 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx11_42.dll
[2014-08-04 19:28:21 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_41.dll
[2014-08-04 19:28:20 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_4.dll
[2014-08-04 19:28:20 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_4.dll
[2014-08-04 19:28:20 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_3.dll
[2014-08-04 19:28:20 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_6.dll
[2014-08-04 19:28:18 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_40.dll
[2014-08-04 19:28:18 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_40.dll
[2014-08-04 19:28:18 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_3.dll
[2014-08-04 19:28:18 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_40.dll
[2014-08-04 19:28:18 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_2.dll
[2014-08-04 19:28:17 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_39.dll
[2014-08-04 19:28:17 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_2.dll
[2014-08-04 19:28:17 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_2.dll
[2014-08-04 19:28:17 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_3.dll
[2014-08-04 19:28:17 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_1.dll
[2014-08-04 19:28:17 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_5.dll
[2014-08-04 19:28:16 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_39.dll
[2014-08-04 19:28:16 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_1.dll
[2014-08-04 19:28:16 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_39.dll
[2014-08-04 19:28:16 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_1.dll
[2014-08-04 19:28:16 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAPOFX1_0.dll
[2014-08-04 19:28:15 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_38.dll
[2014-08-04 19:28:15 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_38.dll
[2014-08-04 19:28:15 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_38.dll
[2014-08-04 19:28:15 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_4.dll
[2014-08-04 19:28:14 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_37.dll
[2014-08-04 19:28:14 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XAudio2_0.dll
[2014-08-04 19:28:14 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_37.dll
[2014-08-04 19:28:14 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine3_0.dll
[2014-08-04 19:28:14 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_3.dll
[2014-08-04 19:28:13 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_37.dll
[2014-08-04 19:28:13 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_10.dll
[2014-08-04 19:28:12 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_36.dll
[2014-08-04 19:28:12 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_36.dll
[2014-08-04 19:28:12 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_36.dll
[2014-08-04 19:28:11 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_35.dll
[2014-08-04 19:28:11 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_9.dll
[2014-08-04 19:28:10 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_35.dll
[2014-08-04 19:28:10 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_35.dll
[2014-08-04 19:28:10 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_34.dll
[2014-08-04 19:28:10 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_8.dll
[2014-08-04 19:28:10 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\X3DAudio1_2.dll
[2014-08-04 19:28:09 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_34.dll
[2014-08-04 19:28:09 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_34.dll
[2014-08-04 19:28:08 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_33.dll
[2014-08-04 19:28:08 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10_33.dll
[2014-08-04 19:28:08 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_7.dll
[2014-08-04 19:28:07 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_33.dll
[2014-08-04 19:28:07 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_6.dll
[2014-08-04 19:28:06 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_32.dll
[2014-08-04 19:28:06 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_31.dll
[2014-08-04 19:28:06 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx10.dll
[2014-08-04 19:28:06 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_5.dll
[2014-08-04 19:28:06 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_4.dll
[2014-08-04 19:28:06 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\x3daudio1_1.dll
[2014-08-04 19:28:05 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_3.dll
[2014-08-04 19:28:05 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_2.dll
[2014-08-04 19:28:05 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_2.dll
[2014-08-04 19:28:05 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_1.dll
[2014-08-04 19:28:04 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_1.dll
[2014-08-04 19:27:55 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_30.dll
[2014-08-04 19:27:53 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_29.dll
[2014-08-04 19:27:53 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_28.dll
[2014-08-04 19:27:53 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xactengine2_0.dll
[2014-08-04 19:27:53 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\x3daudio1_0.dll
[2014-08-04 19:27:52 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_26.dll
[2014-08-04 19:27:50 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_24.dll
[2014-08-04 19:11:14 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_43.dll
[2014-08-04 19:09:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Steam
[2014-08-04 18:40:20 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xinput1_3.dll
[2014-08-04 18:39:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Logs
[2014-08-04 18:39:40 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2014-08-04 18:39:39 | 000,017,344 | ---- | C] (Dll-Files.com) -- C:\Windows\System32\roboot.exe
[2014-08-04 13:23:09 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\.minecraft
[2014-08-04 13:21:14 | 000,000,000 | ---D | C] -- C:\Users\admin\Desktop\.minecraft
[2014-08-03 19:51:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
[2014-08-03 19:51:19 | 000,000,000 | ---D | C] -- C:\Program Files\TeamSpeak 3 Client
[2014-08-03 19:37:58 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\TS3Client
[2014-07-28 20:15:23 | 000,000,000 | ---D | C] -- C:\859f1a5cc0fccbb0d2c50bf20950
[2014-07-23 13:57:59 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\Adobe
[2014-07-23 13:55:09 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2014-07-23 13:55:09 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2014-07-23 13:54:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2014-07-23 13:46:23 | 000,701,104 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2014-07-23 13:46:23 | 000,071,344 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2014-07-23 13:46:22 | 000,000,000 | ---D | C] -- C:\Windows\System32\Macromed
[2014-07-17 13:36:15 | 001,112,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WdfCoInstaller01007.dll
[2014-07-17 13:36:15 | 001,112,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\WdfCoInstaller01007.dll
[2014-07-17 13:34:54 | 000,000,000 | ---D | C] -- C:\ProgramData\DatacardService
[2014-07-12 19:43:35 | 000,000,000 | ---D | C] -- C:\Users\admin\Documents\My Spore Creations
[2014-07-12 19:43:34 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Spore
[2014-07-12 19:32:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spore
[2014-07-12 18:55:44 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\BigHugeEngine
[2014-07-12 17:57:35 | 000,000,000 | ---D | C] -- C:\Users\admin\Documents\My Games
[2014-07-12 17:49:02 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\TheBannerSaga
[2014-07-12 17:10:33 | 000,000,000 | ---D | C] -- C:\ProgramData\GG
[2014-07-08 12:33:38 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\CrashDumps
[2014-07-08 07:21:56 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft.NET
[2014-07-07 22:10:11 | 000,000,000 | ---D | C] -- C:\Windows\System32\EventProviders
[2014-07-07 16:57:01 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\SKIDROW
[2014-07-07 16:56:53 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\Game Updater
[2014-07-07 16:56:34 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_27.dll
[2014-07-07 16:41:02 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\Setup Integrity Check
[2014-07-07 06:37:38 | 000,284,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbport.sys
[2014-07-07 06:37:37 | 000,005,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbd.sys
[2014-07-07 06:37:32 | 000,146,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\storport.sys
[2014-07-07 06:37:31 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fsutil.exe
[2014-07-06 23:41:13 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\MPC-HC
[2014-07-06 19:21:59 | 000,000,000 | ---D | C] -- C:\Windows\System32\Wat
[2014-07-06 14:51:07 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2014-07-06 14:51:07 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2014-07-06 14:32:12 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe
[2014-07-06 14:32:12 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll
[2014-07-06 14:32:12 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll
[2014-07-06 13:49:44 | 000,047,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\WdfLdr.sys
[2014-07-06 13:49:44 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wdfres.dll
[2014-07-06 13:47:38 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFPlatform.dll
[2014-07-06 13:47:37 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFx.dll
[2014-07-06 13:47:37 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFCoinstaller.dll
[2014-07-06 13:42:56 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2014-07-06 13:42:56 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2014-07-06 13:42:56 | 001,810,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2014-07-06 13:42:56 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2014-07-06 13:42:56 | 000,607,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2014-07-06 13:42:56 | 000,434,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2014-07-06 13:42:56 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2014-07-06 13:42:56 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2014-07-06 13:42:56 | 000,353,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2014-07-06 13:42:56 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2014-07-06 13:42:56 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2014-07-06 13:42:56 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2014-07-06 13:42:56 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2014-07-06 13:42:56 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2014-07-06 13:42:56 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2014-07-06 13:42:56 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2014-07-06 13:42:56 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2014-07-06 13:42:56 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2014-07-06 13:42:56 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2014-07-06 13:42:56 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2014-07-06 13:42:56 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2014-07-06 13:42:56 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2014-07-06 13:42:56 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2014-07-06 13:42:56 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2014-07-06 13:42:56 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2014-07-06 13:42:56 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2014-07-06 13:42:56 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2014-07-06 13:42:56 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2014-07-06 13:42:56 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2014-07-06 13:42:56 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2014-07-06 13:42:56 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2014-07-06 13:42:56 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2014-07-06 13:42:56 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2014-07-06 13:42:56 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2014-07-06 13:42:56 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2014-07-06 13:42:56 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2014-07-06 13:42:56 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2014-07-06 13:39:55 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browserchoice.exe
[2014-07-06 13:33:12 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ks.sys
[2014-07-06 03:51:25 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usb8023.sys
[2014-07-06 03:49:47 | 000,376,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnet.dll
[2014-07-06 03:49:40 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prevhost.exe
[2014-07-06 03:49:02 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
[2014-07-06 03:48:51 | 003,958,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2014-07-06 03:48:50 | 003,902,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2014-07-06 03:48:50 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
[2014-07-06 03:48:44 | 000,197,632 | ---- | C] (Intel(R) Corporation) -- C:\Windows\System32\ir32_32.dll
[2014-07-06 03:48:44 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\System32\iccvid.dll
[2014-07-06 03:48:41 | 002,614,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2014-07-06 03:48:05 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
[2014-07-06 03:46:37 | 000,417,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdri.dll
[2014-07-06 03:46:35 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll
[2014-07-06 03:46:35 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax
[2014-07-06 03:46:34 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSNP.ax
[2014-07-06 03:46:34 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Mpeg2Data.ax
[2014-07-06 03:46:34 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSDvbNP.ax
[2014-07-06 03:46:32 | 000,478,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl
[2014-07-06 03:46:13 | 000,496,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll
[2014-07-06 03:46:12 | 000,351,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmicmiplugin.dll
[2014-07-06 03:46:12 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskcomp.dll
[2014-07-06 03:46:12 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\schtasks.exe
[2014-07-06 03:45:17 | 000,131,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aaclient.dll
[2014-07-06 03:45:17 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsgqec.dll
[2014-07-06 03:44:35 | 001,320,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CertEnroll.dll
[2014-07-06 03:44:34 | 000,507,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winload.exe
[2014-07-06 03:44:34 | 000,442,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winresume.exe
[2014-07-06 03:44:13 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll
[2014-07-06 03:44:05 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40.dll
[2014-07-06 03:44:05 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40u.dll
[2014-07-06 03:44:02 | 000,187,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS
[2014-07-06 03:43:58 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
[2014-07-06 03:43:55 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\packager.dll
[2014-07-06 03:42:10 | 001,553,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tquery.dll
[2014-07-06 03:42:10 | 001,401,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssrch.dll
[2014-07-06 03:42:10 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssvp.dll
[2014-07-06 03:42:10 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssph.dll
[2014-07-06 03:42:09 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mssphtb.dll
[2014-07-06 03:42:08 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscntrs.dll
[2014-07-06 03:41:26 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSCOVER.exe
[2014-07-06 03:41:24 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2014-07-06 03:41:23 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
[2014-07-06 03:41:21 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDec.dll
[2014-07-06 03:41:15 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browcli.dll
[2014-07-06 03:41:11 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2014-07-06 03:41:02 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2014-07-06 03:41:01 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciavi32.dll
[2014-07-06 03:40:32 | 000,850,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sbe.dll
[2014-07-06 03:40:32 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CPFilters.dll
[2014-07-06 03:40:32 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mpg2splt.ax
[2014-07-06 03:39:30 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2014-07-06 03:39:30 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qdvd.dll
[2014-07-06 03:38:51 | 000,490,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2014-07-06 03:38:36 | 000,046,592 | ---- | C] (Microsoft) -- C:\Windows\System32\fpb.rs
[2014-07-06 03:38:36 | 000,045,568 | ---- | C] (Microsoft) -- C:\Windows\System32\oflc-nz.rs
[2014-07-06 03:38:36 | 000,044,544 | ---- | C] (Microsoft) -- C:\Windows\System32\pegibbfc.rs
[2014-07-06 03:38:36 | 000,043,520 | ---- | C] (Microsoft) -- C:\Windows\System32\csrr.rs
[2014-07-06 03:38:36 | 000,040,960 | ---- | C] (Microsoft) -- C:\Windows\System32\cob-au.rs
[2014-07-06 03:38:36 | 000,030,720 | ---- | C] (Microsoft) -- C:\Windows\System32\usk.rs
[2014-07-06 03:38:36 | 000,021,504 | ---- | C] (Microsoft) -- C:\Windows\System32\grb.rs
[2014-07-06 03:38:36 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi-pt.rs
[2014-07-06 03:38:36 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi.rs
[2014-07-06 03:38:36 | 000,015,360 | ---- | C] (Microsoft) -- C:\Windows\System32\djctq.rs
[2014-07-06 03:38:35 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll
[2014-07-06 03:38:35 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wpc.dll
[2014-07-06 03:38:34 | 000,055,296 | ---- | C] (Microsoft) -- C:\Windows\System32\cero.rs
[2014-07-06 03:38:34 | 000,051,712 | ---- | C] (Microsoft) -- C:\Windows\System32\esrb.rs
[2014-07-06 03:38:34 | 000,023,552 | ---- | C] (Microsoft) -- C:\Windows\System32\oflc.rs
[2014-07-06 03:38:34 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi-fi.rs
[2014-07-06 03:37:56 | 000,219,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
[2014-07-06 03:37:45 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webio.dll
[2014-07-06 03:37:43 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll
[2014-07-06 03:37:41 | 000,319,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcjt32.dll
[2014-07-06 03:37:40 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbctrac.dll
[2014-07-06 03:37:40 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccp32.dll
[2014-07-06 03:37:40 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccu32.dll
[2014-07-06 03:37:40 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbccr32.dll
[2014-07-06 03:37:35 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcorekmts.dll
[2014-07-06 03:37:35 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpwsx.dll
[2014-07-06 03:37:35 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdrmemptylst.exe
[2014-07-06 03:37:25 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\synceng.dll
[2014-07-06 03:37:09 | 003,181,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mf.dll
[2014-07-06 03:37:08 | 001,619,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVDECOD.DLL
[2014-07-06 03:37:08 | 001,495,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ExplorerFrame.dll
[2014-07-06 03:37:08 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfreadwrite.dll
[2014-07-06 03:37:07 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsRasterService.dll
[2014-07-06 03:37:02 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscapi.dll
[2014-07-06 03:37:02 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\slwga.dll
[2014-07-06 03:36:55 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpmde.dll
[2014-07-06 03:36:54 | 000,101,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\consent.exe
[2014-07-06 03:36:42 | 000,369,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc.dll
[2014-07-06 03:36:42 | 000,365,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_isv.dll
[2014-07-06 03:36:42 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_isv.exe
[2014-07-06 03:36:42 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate.exe
[2014-07-06 03:36:42 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp.exe
[2014-07-06 03:36:42 | 000,277,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp_isv.exe
[2014-07-06 03:36:42 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp_isv.dll
[2014-07-06 03:36:42 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp.dll
[2014-07-06 03:36:40 | 001,170,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2014-07-06 03:36:40 | 000,739,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2014-07-06 03:36:39 | 001,074,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
[2014-07-06 03:36:39 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2014-07-06 03:36:39 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2014-07-06 03:36:35 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll
[2014-07-06 03:36:35 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
[2014-07-06 03:36:18 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\poqexec.exe
[2014-07-06 03:36:16 | 000,026,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\Diskdump.sys
[2014-07-06 03:34:59 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2014-07-06 03:33:50 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
[2014-07-06 03:33:50 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2014-07-06 03:33:50 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
[2014-07-06 03:33:50 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2014-07-06 03:33:50 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
[2014-07-06 03:33:49 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
[2014-07-06 03:33:49 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
[2014-07-06 03:33:49 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
[2014-07-06 03:33:49 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
[2014-07-06 03:33:49 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
[2014-07-06 03:33:49 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
[2014-07-06 03:33:49 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
[2014-07-06 03:33:49 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
[2014-07-06 03:33:49 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
[2014-07-06 03:33:49 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
[2014-07-06 03:33:49 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
[2014-07-06 03:33:49 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
[2014-07-06 03:33:49 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
[2014-07-06 03:33:49 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
[2014-07-06 03:33:49 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
[2014-07-06 03:33:49 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
[2014-07-06 03:33:49 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
[2014-07-06 03:33:49 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
[2014-07-06 03:33:49 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
[2014-07-06 03:33:48 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
[2014-07-06 03:33:48 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
[2014-07-06 03:33:48 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
[2014-07-06 03:33:48 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
[2014-07-06 03:33:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
[2014-07-06 03:33:48 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
[2014-07-06 03:23:09 | 000,219,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgmms1.sys
[2014-07-06 03:23:09 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
[2014-07-05 20:24:19 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
[2014-07-05 20:23:01 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_25.dll
[2014-07-05 20:21:56 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\InstallShield
[2014-07-05 20:20:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games
[2014-07-05 20:06:46 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\DAEMON Tools Images
[2014-07-05 20:04:41 | 000,000,000 | ---D | C] -- C:\Program Files\DAEMON Tools Pro
[2014-07-05 20:03:49 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\DAEMON Tools Pro
[2014-07-05 20:03:49 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Pro
[2014-07-05 18:38:11 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Adobe
[2014-07-05 18:37:55 | 000,000,000 | --SD | C] -- C:\Users\admin\GG dysk
[2014-07-05 18:37:40 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Macromedia
[2014-07-05 18:36:31 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Mozilla
[2014-07-05 18:35:48 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\GG
[2014-07-05 18:35:26 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\GG
[2014-07-05 18:35:24 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\OpenFM
[2014-07-05 17:56:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
[2014-07-05 17:56:43 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack
[2014-07-05 17:56:07 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\Programs
[2014-07-05 16:53:17 | 000,826,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcore.dll
[2014-07-05 16:47:41 | 000,045,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2014-07-05 16:47:40 | 002,422,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2014-07-05 16:47:01 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
[2014-07-05 16:47:01 | 000,035,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
[2014-07-05 16:47:00 | 000,577,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
[2014-07-05 16:46:34 | 000,171,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2014-07-05 16:46:34 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2014-07-05 16:43:11 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\ATI
[2014-07-05 16:43:11 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\ATI
[2014-07-05 16:43:11 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
[2014-07-05 14:48:01 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\uTorrent
[2014-07-05 14:39:24 | 000,000,000 | ---D | C] -- C:\Program Files\AMD
[2014-07-05 14:39:19 | 000,000,000 | ---D | C] -- C:\Program Files\AMD APP
[2014-07-05 14:39:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
[2014-07-05 14:37:25 | 000,044,160 | ---- | C] (Advanced Micro Devices) -- C:\Windows\System32\drivers\usbfilter.sys
[2014-07-05 14:37:25 | 000,000,000 | ---D | C] -- C:\Windows\System32\DRVSTORE
[2014-07-05 14:36:30 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2014-07-05 14:36:09 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2014-07-05 14:36:08 | 000,000,000 | ---D | C] -- C:\Program Files\ATI
[2014-07-05 14:35:25 | 009,888,360 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\RtsUVStoricon.dll
[2014-07-05 14:35:25 | 000,232,040 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\System32\drivers\RtsUVStor.sys
[2014-07-05 14:33:01 | 000,173,184 | ---- | C] (Advanced Micro Devices, INC.) -- C:\Windows\System32\drivers\amdxhc.sys
[2014-07-05 14:33:00 | 000,082,560 | ---- | C] (Advanced Micro Devices, INC.) -- C:\Windows\System32\drivers\amdhub30.sys
[2014-07-05 14:30:34 | 003,211,264 | ---- | C] (Qualcomm Atheros Communications, Inc.) -- C:\Windows\System32\drivers\athr.sys
[2014-07-05 14:21:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2014-07-05 14:20:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2014-07-05 14:20:18 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2014-07-05 14:20:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle
[2014-07-05 14:19:37 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\Google
[2014-07-05 14:19:01 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2014-07-05 14:14:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Norton
[2014-07-05 14:14:36 | 000,000,000 | ---D | C] -- C:\ProgramData\NortonInstaller
[2014-07-05 14:13:46 | 006,189,416 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiumdag.dll
[2014-07-05 14:13:46 | 006,176,008 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiumdva.dll
[2014-07-05 14:13:46 | 000,164,352 | ---- | C] (AMD) -- C:\Windows\System32\atitmmxx.dll
[2014-07-05 14:13:46 | 000,125,824 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiuxpag.dll
[2014-07-05 14:13:46 | 000,114,688 | ---- | C] (AMD) -- C:\Windows\System32\coinst_13.152.dll
[2014-07-05 14:13:46 | 000,097,984 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiu9pag.dll
[2014-07-05 14:13:46 | 000,083,456 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\System32\OpenVideo.dll
[2014-07-05 14:13:46 | 000,073,216 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\System32\OVDecode.dll
[2014-07-05 14:13:45 | 021,400,064 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atioglxx.dll
[2014-07-05 14:13:45 | 010,925,056 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\drivers\atikmdag.sys
[2014-07-05 14:13:45 | 008,215,992 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atidxx32.dll
[2014-07-05 14:13:45 | 001,027,544 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\aticfx32.dll
[2014-07-05 14:13:45 | 000,495,104 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\drivers\atikmpag.sys
[2014-07-05 14:13:45 | 000,480,256 | ---- | C] (AMD) -- C:\Windows\System32\atieclxx.exe
[2014-07-05 14:13:45 | 000,442,368 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atidemgy.dll
[2014-07-05 14:13:45 | 000,294,912 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\ATIODE.exe
[2014-07-05 14:13:45 | 000,209,408 | ---- | C] (AMD) -- C:\Windows\System32\atiesrxx.exe
[2014-07-05 14:13:45 | 000,096,768 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atigktxx.dll
[2014-07-05 14:13:45 | 000,071,704 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atimpc32.dll
[2014-07-05 14:13:45 | 000,071,704 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\amdpcom32.dll
[2014-07-05 14:13:45 | 000,069,632 | ---- | C] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiglpxx.dll
[2014-07-05 14:13:45 | 000,052,224 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\System32\aticalrt.dll
[2014-07-05 14:13:45 | 000,045,056 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\ATIODCLI.exe
[2014-07-05 14:13:45 | 000,025,600 | ---- | C] (AMD) -- C:\Windows\System32\atimuixx.dll
[2014-07-05 14:13:44 | 014,302,208 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\System32\aticaldd.dll
[2014-07-05 14:13:44 | 000,594,944 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atiadlxx.dll
[2014-07-05 14:13:44 | 000,368,640 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atiapfxx.exe
[2014-07-05 14:13:44 | 000,118,784 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atibtmon.exe
[2014-07-05 14:13:44 | 000,049,152 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\System32\aticalcl.dll
[2014-07-05 14:13:44 | 000,043,520 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\drivers\ati2erec.dll
[2014-07-05 14:13:42 | 023,760,896 | ---- | C] (Advanced Micro Devices Inc.) -- C:\Windows\System32\amdocl.dll
[2014-07-05 14:13:42 | 000,057,344 | ---- | C] (Khronos Group) -- C:\Windows\System32\OpenCL.dll
[2014-07-05 14:13:29 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.4.1
[2014-07-05 14:13:26 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\WinRAR
[2014-07-05 14:12:11 | 000,000,000 | ---D | C] -- C:\Program Files\OpenOffice.org 3
[2014-07-05 14:11:37 | 000,000,000 | ---D | C] -- C:\Windows\System32\sda
[2014-07-05 14:08:26 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2014-07-05 14:07:44 | 000,231,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2014-07-05 14:06:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Uniblue
[2014-07-05 14:05:39 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2014-07-05 14:05:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2014-07-05 14:05:37 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2014-07-05 14:02:21 | 000,100,896 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\System32\RTNUninst32.dll
[2014-07-05 14:02:21 | 000,080,488 | ---- | C] (Realtek Semiconductor Corporation) -- C:\Windows\System32\RtNicProp32.dll
[2014-07-05 14:02:18 | 000,000,000 | -H-D | C] -- C:\Program Files\InstallShield Installation Information
[2014-07-05 14:02:18 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2014-07-05 13:46:24 | 000,000,000 | R--D | C] -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2014-07-05 13:46:24 | 000,000,000 | R--D | C] -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2014-07-05 13:46:23 | 000,000,000 | R--D | C] -- C:\Users\admin\Searches
[2014-07-05 13:46:02 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Identities
[2014-07-05 13:45:44 | 000,000,000 | R--D | C] -- C:\Users\admin\Contacts
[2014-07-05 13:45:07 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\VirtualStore
[2014-07-05 13:45:04 | 000,000,000 | -HSD | C] -- C:\Users\admin\Ustawienia lokalne
[2014-07-05 13:45:04 | 000,000,000 | -HSD | C] -- C:\Users\admin\AppData\Local\Temporary Internet Files
[2014-07-05 13:45:04 | 000,000,000 | -HSD | C] -- C:\Users\admin\Szablony
[2014-07-05 13:45:04 | 000,000,000 | -HSD | C] -- C:\Users\admin\SendTo
[2014-07-05 13:45:04 | 000,000,000 | -HSD | C] -- C:\Users\admin\Recent
[2014-07-05 13:45:04 | 000,000,000 | -HSD | C] -- C:\Users\admin\PrintHood
[2014-07-05 13:45:04 | 000,000,000 | -HSD | C] -- C:\Users\admin\NetHood
[2014-07-05 13:45:04 | 000,000,000 | -HSD | C] -- C:\Users\admin\Documents\Moje wideo
[2014-07-05 13:45:04 | 000,000,000 | -HSD | C] -- C:\Users\admin\Documents\Moje obrazy
[2014-07-05 13:45:04 | 000,000,000 | -HSD | C] -- C:\Users\admin\Moje dokumenty
[2014-07-05 13:45:04 | 000,000,000 | -HSD | C] -- C:\Users\admin\Documents\Moja muzyka
[2014-07-05 13:45:04 | 000,000,000 | -HSD | C] -- C:\Users\admin\Menu Start
[2014-07-05 13:45:04 | 000,000,000 | -HSD | C] -- C:\Users\admin\AppData\Local\Historia
[2014-07-05 13:45:04 | 000,000,000 | -HSD | C] -- C:\Users\admin\Dane aplikacji
[2014-07-05 13:45:04 | 000,000,000 | -HSD | C] -- C:\Users\admin\AppData\Local\Dane aplikacji
[2014-07-05 13:45:04 | 000,000,000 | -HSD | C] -- C:\Users\admin\Cookies
[2014-07-05 13:45:03 | 000,000,000 | --SD | C] -- C:\Users\admin\AppData\Roaming\Microsoft
[2014-07-05 13:45:03 | 000,000,000 | R--D | C] -- C:\Users\admin\Videos
[2014-07-05 13:45:03 | 000,000,000 | R--D | C] -- C:\Users\admin\Saved Games
[2014-07-05 13:45:03 | 000,000,000 | R--D | C] -- C:\Users\admin\Pictures
[2014-07-05 13:45:03 | 000,000,000 | R--D | C] -- C:\Users\admin\Music
[2014-07-05 13:45:03 | 000,000,000 | R--D | C] -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2014-07-05 13:45:03 | 000,000,000 | R--D | C] -- C:\Users\admin\Links
[2014-07-05 13:45:03 | 000,000,000 | R--D | C] -- C:\Users\admin\Favorites
[2014-07-05 13:45:03 | 000,000,000 | R--D | C] -- C:\Users\admin\Downloads
[2014-07-05 13:45:03 | 000,000,000 | R--D | C] -- C:\Users\admin\Documents
[2014-07-05 13:45:03 | 000,000,000 | R--D | C] -- C:\Users\admin\Desktop
[2014-07-05 13:45:03 | 000,000,000 | R--D | C] -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2014-07-05 13:45:03 | 000,000,000 | -H-D | C] -- C:\Users\admin\AppData
[2014-07-05 13:45:03 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\Temp
[2014-07-05 13:45:03 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Local\Microsoft
[2014-07-05 13:45:03 | 000,000,000 | ---D | C] -- C:\Users\admin\AppData\Roaming\Media Center Programs
[2014-07-05 13:44:52 | 000,000,000 | -HSD | C] -- C:\ProgramData\Ulubione
[2014-07-05 13:44:52 | 000,000,000 | -HSD | C] -- C:\ProgramData\Szablony
[2014-07-05 13:44:52 | 000,000,000 | -HSD | C] -- C:\Recovery
[2014-07-05 13:44:52 | 000,000,000 | -HSD | C] -- C:\ProgramData\Pulpit
[2014-07-05 13:44:52 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje wideo
[2014-07-05 13:44:52 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moje obrazy
[2014-07-05 13:44:52 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Moja muzyka
[2014-07-05 13:44:52 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menu Start
[2014-07-05 13:44:52 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumenty
[2014-07-05 13:44:52 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dane aplikacji
[2014-07-05 13:40:22 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2014-07-05 13:37:31 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2014-07-05 13:36:59 | 000,000,000 | -HSD | C] -- C:\System Volume Information

========== Files - Modified Within 180 Days ==========

[2014-10-25 22:46:00 | 000,001,036 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014-10-25 22:39:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014-10-25 22:25:37 | 000,019,312 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014-10-25 22:25:37 | 000,019,312 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014-10-25 22:18:04 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014-10-25 22:17:45 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014-10-25 22:17:41 | 2097,987,584 | -HS- | M] () -- C:\hiberfil.sys
[2014-10-22 22:30:02 | 000,043,152 | ---- | M] (StdLib) -- C:\Windows\System32\drivers\{7e4355b8-96cd-43eb-b59a-82af29f01b16}w.sys
[2014-10-22 01:27:42 | 000,043,152 | ---- | M] (StdLib) -- C:\Windows\System32\drivers\{023ffe30-e38b-4272-b1c0-1e9f6a180b9d}w.sys
[2014-10-21 18:32:58 | 000,043,152 | ---- | M] (StdLib) -- C:\Windows\System32\drivers\{5637c139-b301-4ecd-a2cf-2ae75f214b07}w.sys
[2014-10-20 22:04:42 | 000,043,152 | ---- | M] (StdLib) -- C:\Windows\System32\drivers\{999a4cbb-05c0-4612-9e48-e2b9897a2c6f}w.sys
[2014-10-20 16:55:22 | 000,701,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2014-10-20 16:55:22 | 000,071,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2014-10-20 15:00:40 | 000,043,152 | ---- | M] (StdLib) -- C:\Windows\System32\drivers\{c42edeec-c173-4c88-9a7f-6934088af032}w.sys
[2014-10-20 00:58:24 | 000,043,152 | ---- | M] (StdLib) -- C:\Windows\System32\drivers\{76152aee-de6d-453d-a8d8-6f11a0085df8}w.sys
[2014-10-19 11:04:16 | 000,043,152 | ---- | M] (StdLib) -- C:\Windows\System32\drivers\{af7618ea-6d4f-47e5-9e06-5f808487ae22}w.sys
[2014-10-18 21:11:36 | 000,043,152 | ---- | M] (StdLib) -- C:\Windows\System32\drivers\{871e60bd-7aec-4938-a4b2-ffde58590efe}w.sys
[2014-10-18 13:16:26 | 000,294,056 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2014-10-18 09:36:13 | 000,002,065 | ---- | M] () -- C:\Users\Public\Desktop\avast! SafeZone.lnk
[2014-10-18 09:36:13 | 000,002,005 | ---- | M] () -- C:\Users\Public\Desktop\avast! Pro Antivirus.lnk
[2014-10-18 09:25:53 | 000,000,440 | -H-- | M] () -- C:\Windows\tasks\Norton Security Scan for admin.job
[2014-10-18 00:06:32 | 000,043,152 | ---- | M] (StdLib) -- C:\Windows\System32\drivers\{c746a0c9-95e3-4ce8-9e9f-58fac8587b02}w.sys
[2014-10-16 20:46:04 | 000,043,152 | ---- | M] (StdLib) -- C:\Windows\System32\drivers\{f7e972a4-3731-46b4-91a5-4140fc1009e8}w.sys
[2014-10-15 17:12:39 | 000,001,375 | ---- | M] () -- C:\Users\Public\Desktop\Norton Security Scan.LNK
[2014-10-15 02:11:06 | 000,043,152 | ---- | M] (StdLib) -- C:\Windows\System32\drivers\{35d31228-a1dd-4d11-a2ff-ef6ba162cebd}w.sys
[2014-10-14 10:22:21 | 000,424,808 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys
[2014-10-14 10:22:21 | 000,206,248 | ---- | M] () -- C:\Windows\System32\drivers\aswVmm.sys
[2014-10-14 10:22:21 | 000,089,960 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswStm.sys
[2014-10-14 10:22:21 | 000,081,768 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr2.sys
[2014-10-14 10:22:21 | 000,070,384 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
[2014-10-14 10:22:21 | 000,049,944 | ---- | M] () -- C:\Windows\System32\drivers\aswRvrt.sys
[2014-10-14 10:22:21 | 000,024,184 | ---- | M] () -- C:\Windows\System32\drivers\aswHwid.sys
[2014-10-14 10:22:20 | 000,291,352 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2014-10-14 10:22:20 | 000,043,152 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2014-10-14 10:22:07 | 000,787,800 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
[2014-10-14 10:22:05 | 000,026,136 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswKbd.sys
[2014-10-12 18:40:26 | 000,000,266 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2014-10-11 18:39:37 | 000,002,505 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2014-10-08 15:52:25 | 000,697,912 | ---- | M] () -- C:\Windows\System32\perfh015.dat
[2014-10-08 15:52:25 | 000,616,008 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2014-10-08 15:52:25 | 000,134,990 | ---- | M] () -- C:\Windows\System32\perfc015.dat
[2014-10-08 15:52:25 | 000,106,388 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2014-10-07 14:17:06 | 000,000,926 | ---- | M] () -- C:\Users\admin\Desktop\GG dysk.lnk
[2014-10-02 15:53:02 | 000,231,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2014-09-15 02:42:27 | 002,377,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2014-08-15 08:15:13 | 000,242,240 | ---- | M] (DT Soft Ltd) -- C:\Windows\System32\drivers\dtsoftbus01.sys
[2014-08-15 08:10:24 | 000,000,966 | ---- | M] () -- C:\Users\Public\Desktop\DAEMON Tools Pro.lnk
[2014-08-14 08:43:56 | 000,002,095 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014-08-06 16:29:08 | 000,052,880 | ---- | M] (StdLib) -- C:\Windows\System32\drivers\{55dce8ba-9dec-4013-937e-adbf9317d990}w.sys
[2014-08-04 19:08:49 | 002,106,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_43.dll
[2014-08-04 18:40:22 | 000,081,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\xinput1_3.dll
[2014-08-03 19:51:54 | 000,001,084 | ---- | M] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2014-07-25 12:55:14 | 000,096,680 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2014-07-25 12:49:57 | 000,272,808 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2014-07-25 12:49:52 | 000,175,528 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2014-07-25 12:49:19 | 000,175,528 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2014-07-23 13:55:22 | 000,001,989 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk
[2014-07-17 13:37:41 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_ew_juextctrl_01007.Wdf
[2014-07-17 13:37:32 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf
[2014-07-17 13:36:22 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
[2014-07-12 19:32:28 | 000,000,702 | ---- | M] () -- C:\Users\Public\Desktop\Spore.lnk
[2014-07-06 13:42:56 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2014-07-06 13:42:56 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2014-07-06 13:42:56 | 001,810,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2014-07-06 13:42:56 | 001,427,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2014-07-06 13:42:56 | 000,607,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2014-07-06 13:42:56 | 000,434,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2014-07-06 13:42:56 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2014-07-06 13:42:56 | 000,353,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2014-07-06 13:42:56 | 000,353,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2014-07-06 13:42:56 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2014-07-06 13:42:56 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2014-07-06 13:42:56 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2014-07-06 13:42:56 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2014-07-06 13:42:56 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2014-07-06 13:42:56 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2014-07-06 13:42:56 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2014-07-06 13:42:56 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2014-07-06 13:42:56 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2014-07-06 13:42:56 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2014-07-06 13:42:56 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2014-07-06 13:42:56 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2014-07-06 13:42:56 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2014-07-06 13:42:56 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2014-07-06 13:42:56 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2014-07-06 13:42:56 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2014-07-06 13:42:56 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2014-07-06 13:42:56 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2014-07-06 13:42:56 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2014-07-06 13:42:56 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2014-07-06 13:42:56 | 000,072,822 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2014-07-06 13:42:56 | 000,065,536 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2014-07-06 13:42:56 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2014-07-06 13:42:56 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2014-07-06 13:42:56 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2014-07-06 13:42:56 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2014-07-06 13:42:56 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2014-07-06 13:42:56 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2014-07-06 13:42:56 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2014-07-05 18:35:47 | 000,001,142 | ---- | M] () -- C:\Users\admin\Desktop\OpenFM.lnk
[2014-07-05 14:48:21 | 000,000,813 | ---- | M] () -- C:\Users\admin\Desktop\µTorrent.lnk
[2014-07-05 14:36:48 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_SynTP_01009.Wdf
[2014-07-05 14:30:34 | 003,211,264 | ---- | M] (Qualcomm Atheros Communications, Inc.) -- C:\Windows\System32\drivers\athr.sys
[2014-07-05 14:24:51 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
[2014-07-05 14:13:46 | 021,400,064 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atioglxx.dll
[2014-07-05 14:13:46 | 006,189,416 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiumdag.dll
[2014-07-05 14:13:46 | 006,176,008 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiumdva.dll
[2014-07-05 14:13:46 | 003,422,720 | ---- | M] () -- C:\Windows\System32\atiumdva.cap
[2014-07-05 14:13:46 | 000,233,652 | ---- | M] () -- C:\Windows\System32\ativvaxy_cik.dat
[2014-07-05 14:13:46 | 000,231,984 | ---- | M] () -- C:\Windows\System32\ativvaxy_cik_nd.dat
[2014-07-05 14:13:46 | 000,204,952 | ---- | M] () -- C:\Windows\System32\ativvsvl.dat
[2014-07-05 14:13:46 | 000,200,704 | ---- | M] () -- C:\Windows\System32\clinfo.exe
[2014-07-05 14:13:46 | 000,164,352 | ---- | M] (AMD) -- C:\Windows\System32\atitmmxx.dll
[2014-07-05 14:13:46 | 000,157,144 | ---- | M] () -- C:\Windows\System32\ativvsva.dat
[2014-07-05 14:13:46 | 000,125,824 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiuxpag.dll
[2014-07-05 14:13:46 | 000,114,688 | ---- | M] (AMD) -- C:\Windows\System32\coinst_13.152.dll
[2014-07-05 14:13:46 | 000,097,984 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiu9pag.dll
[2014-07-05 14:13:46 | 000,083,456 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\System32\OpenVideo.dll
[2014-07-05 14:13:46 | 000,082,336 | ---- | M] () -- C:\Windows\System32\ativce02.dat
[2014-07-05 14:13:46 | 000,073,216 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\System32\OVDecode.dll
[2014-07-05 14:13:46 | 000,003,917 | ---- | M] () -- C:\Windows\System32\atipblag.dat
[2014-07-05 14:13:45 | 014,302,208 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\System32\aticaldd.dll
[2014-07-05 14:13:45 | 010,925,056 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\drivers\atikmdag.sys
[2014-07-05 14:13:45 | 008,215,992 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atidxx32.dll
[2014-07-05 14:13:45 | 001,027,544 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\aticfx32.dll
[2014-07-05 14:13:45 | 000,716,208 | ---- | M] () -- C:\Windows\System32\atiicdxx.dat
[2014-07-05 14:13:45 | 000,495,104 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\drivers\atikmpag.sys
[2014-07-05 14:13:45 | 000,480,256 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
[2014-07-05 14:13:45 | 000,442,368 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atidemgy.dll
[2014-07-05 14:13:45 | 000,294,912 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\ATIODE.exe
[2014-07-05 14:13:45 | 000,209,408 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
[2014-07-05 14:13:45 | 000,096,768 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atigktxx.dll
[2014-07-05 14:13:45 | 000,071,704 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atimpc32.dll
[2014-07-05 14:13:45 | 000,071,704 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\amdpcom32.dll
[2014-07-05 14:13:45 | 000,069,632 | ---- | M] (Advanced Micro Devices, Inc. ) -- C:\Windows\System32\atiglpxx.dll
[2014-07-05 14:13:45 | 000,052,224 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\System32\aticalrt.dll
[2014-07-05 14:13:45 | 000,047,164 | ---- | M] () -- C:\Windows\atiogl.xml
[2014-07-05 14:13:45 | 000,045,056 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\ATIODCLI.exe
[2014-07-05 14:13:45 | 000,025,600 | ---- | M] (AMD) -- C:\Windows\System32\atimuixx.dll
[2014-07-05 14:13:44 | 000,995,342 | ---- | M] () -- C:\Windows\System32\amdocl_as32.exe
[2014-07-05 14:13:44 | 000,798,734 | ---- | M] () -- C:\Windows\System32\amdocl_ld32.exe
[2014-07-05 14:13:44 | 000,594,944 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atiadlxx.dll
[2014-07-05 14:13:44 | 000,530,824 | ---- | M] () -- C:\Windows\System32\atiapfxx.blb
[2014-07-05 14:13:44 | 000,368,640 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atiapfxx.exe
[2014-07-05 14:13:44 | 000,118,784 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\atibtmon.exe
[2014-07-05 14:13:44 | 000,049,152 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\System32\aticalcl.dll
[2014-07-05 14:13:44 | 000,043,520 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Windows\System32\drivers\ati2erec.dll
[2014-07-05 14:13:43 | 023,760,896 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Windows\System32\amdocl.dll
[2014-07-05 14:13:42 | 000,057,344 | ---- | M] (Khronos Group) -- C:\Windows\System32\OpenCL.dll
[2014-07-05 14:00:51 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2014-07-05 13:43:09 | 000,067,517 | ---- | M] () -- C:\Windows\System32\license.rtf
[2014-06-14 16:03:42 | 000,218,200 | ---- | M] () -- C:\Windows\System32\unrar.dll

========== Files Created - No Company Name ==========

[2014-10-15 17:12:43 | 000,000,440 | -H-- | C] () -- C:\Windows\tasks\Norton Security Scan for admin.job
[2014-10-15 17:12:39 | 000,001,375 | ---- | C] () -- C:\Users\Public\Desktop\Norton Security Scan.LNK
[2014-10-15 17:12:28 | 000,000,172 | ---- | C] () -- C:\Windows\System32\drivers\NSS\0400010.010\isolate.ini
[2014-10-14 10:24:05 | 000,002,065 | ---- | C] () -- C:\Users\Public\Desktop\avast! SafeZone.lnk
[2014-10-14 10:24:05 | 000,002,005 | ---- | C] () -- C:\Users\Public\Desktop\avast! Pro Antivirus.lnk
[2014-10-14 10:22:38 | 000,206,248 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys
[2014-10-14 10:22:37 | 000,049,944 | ---- | C] () -- C:\Windows\System32\drivers\aswRvrt.sys
[2014-10-14 10:22:36 | 000,024,184 | ---- | C] () -- C:\Windows\System32\drivers\aswHwid.sys
[2014-10-12 18:40:26 | 000,000,266 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2014-10-11 18:39:37 | 000,002,505 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2014-08-15 08:10:09 | 000,000,966 | ---- | C] () -- C:\Users\Public\Desktop\DAEMON Tools Pro.lnk
[2014-08-03 19:51:54 | 000,001,084 | ---- | C] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2014-07-23 13:55:20 | 000,001,989 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader XI.lnk
[2014-07-23 13:55:15 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
[2014-07-23 13:46:25 | 000,000,930 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014-07-17 13:37:41 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_ew_juextctrl_01007.Wdf
[2014-07-17 13:37:32 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf
[2014-07-17 13:36:22 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
[2014-07-12 19:32:28 | 000,000,702 | ---- | C] () -- C:\Users\Public\Desktop\Spore.lnk
[2014-07-06 19:48:08 | 000,001,425 | ---- | C] () -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2014-07-06 13:49:51 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2014-07-06 13:47:37 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2014-07-06 13:42:56 | 000,072,822 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2014-07-05 18:37:55 | 000,000,926 | ---- | C] () -- C:\Users\admin\Desktop\GG dysk.lnk
[2014-07-05 18:35:47 | 000,001,142 | ---- | C] () -- C:\Users\admin\Desktop\OpenFM.lnk
[2014-07-05 18:35:35 | 000,001,150 | ---- | C] () -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenFM.lnk
[2014-07-05 17:56:51 | 000,218,200 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2014-07-05 14:48:21 | 000,000,813 | ---- | C] () -- C:\Users\admin\Desktop\µTorrent.lnk
[2014-07-05 14:36:48 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_SynTP_01009.Wdf
[2014-07-05 14:24:51 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2014-07-05 14:21:52 | 000,002,095 | ---- | C] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2014-07-05 14:20:54 | 000,001,036 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014-07-05 14:20:47 | 000,001,032 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014-07-05 14:13:46 | 003,422,720 | ---- | C] () -- C:\Windows\System32\atiumdva.cap
[2014-07-05 14:13:46 | 000,233,652 | ---- | C] () -- C:\Windows\System32\ativvaxy_cik.dat
[2014-07-05 14:13:46 | 000,231,984 | ---- | C] () -- C:\Windows\System32\ativvaxy_cik_nd.dat
[2014-07-05 14:13:46 | 000,204,952 | ---- | C] () -- C:\Windows\System32\ativvsvl.dat
[2014-07-05 14:13:46 | 000,200,704 | ---- | C] () -- C:\Windows\System32\clinfo.exe
[2014-07-05 14:13:46 | 000,157,144 | ---- | C] () -- C:\Windows\System32\ativvsva.dat
[2014-07-05 14:13:46 | 000,082,336 | ---- | C] () -- C:\Windows\System32\ativce02.dat
[2014-07-05 14:13:46 | 000,003,917 | ---- | C] () -- C:\Windows\System32\atipblag.dat
[2014-07-05 14:13:45 | 000,716,208 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2014-07-05 14:13:45 | 000,047,164 | ---- | C] () -- C:\Windows\atiogl.xml
[2014-07-05 14:13:44 | 000,995,342 | ---- | C] () -- C:\Windows\System32\amdocl_as32.exe
[2014-07-05 14:13:44 | 000,798,734 | ---- | C] () -- C:\Windows\System32\amdocl_ld32.exe
[2014-07-05 14:13:44 | 000,530,824 | ---- | C] () -- C:\Windows\System32\atiapfxx.blb
[2014-07-05 14:00:51 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2014-07-05 13:42:57 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2014-07-05 13:42:43 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2014-07-05 13:36:59 | 2097,987,584 | -HS- | C] () -- C:\hiberfil.sys
[2003-04-09 05:28:44 | 000,233,472 | R--- | C] () -- C:\Users\admin\AppData\Roaming\MafiaSetup.exe

========== ZeroAccess Check ==========

[2009-07-14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012-06-09 06:46:56 | 012,868,608 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009-07-14 03:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009-07-14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

< End of report >

Dodano Dzisiaj, 23:52:
i niewiem co dalej bo reklamy dalej wyskakuja z deal keeper a ten raport co wkleilam jako pierwszy z adw cleaner to zrobilam jako ostatni wiec przepraszam ze wkleilam go jako pierwszy bo wszystko pokickalam

**Posty:** 4765 · przez **ordynat** 26 Paź 2014, 00:34

. angwec

W tym dziale podpinanie się pod cudze tematy nie jest mile widziane.
To Twój pierwszy post na Forum, więc może Moderator nie będzie zbyt srogi ...

1) Uruchom OTL i w oknie Własne opcje skanowania/Skrypt wklej to:

:OTL
SRV - [2014-10-22 20:42:57 | 000,123,640 | ---- | M] () [Auto | Running] -- C:\ProgramData\d7a0fe93-7bf3-4f3d-89c3-fe4e144b2eb8\maintainer.exe -- (MaintainerSvc2.02.5636706)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_juwwanecm.sys -- (huawei_wwanecm)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_juextctrl.sys -- (huawei_ext_ctrl)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jubusenum.sys -- (huawei_enumerator)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_jucdcacm.sys -- (huawei_cdcacm)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_usbenumfilter.sys -- (ew_usbenumfilter)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ew_hwusbdev.sys -- (ew_hwusbdev)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys -- (esgiguard)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (a59cwou4)
[2014-10-11 14:31:32 | 000,000,000 | ---D | C] -- C:\ProgramData\d7a0fe93-7bf3-4f3d-89c3-fe4e144b2eb8

:Reg
[-HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes]
[-HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes]
[-HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes]
[-HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes]

:Commands
[emptytemp]

Kliknij w Wykonaj Skrypt. Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie.

2) Zrób logi z FRST http://forum.programosy.pl/frst-otl-zoek-vt139692.html
Logi wklej na http://wklejto.pl/, a w poście daj tylko linki.(czyli skopiuj adres z paska adresów)
Logi mają być dwa: Additional.txt oraz FRST.txt.
.

**Posty:** 9 · przez **angwec** 26 Paź 2014, 21:42

http://www.wklejto.pl/213814

Dodano Dzisiaj, 21:49:
http://www.wklejto.pl/213816
addition
a co do podpiecia sie pod czyjs temat to przeraszam ale dlamnie wogole to co robie za wasza pomoca to jest czarna magia a jeszcze dam link do raportu z otl
http://www.wklejto.pl/213819
az nie wierze ze to umiem zrobic

**Posty:** 4765 · przez **ordynat** 26 Paź 2014, 23:01

. . angwec

Logi są zniekształcone - na "wklejto" trzeba wklejać tekst, a nie plik.

W logach nie widzę niczego podejrzanego, więc kończymy:
OTL kliknij na przycisk Sprzątanie - to go usunie razem z jego Kwarantanną.
.

**Posty:** 9 · przez **angwec** 27 Paź 2014, 10:45

niestety dalej mam pelno reklam z deal keeper

**Posty:** 4765 · przez **ordynat** 27 Paź 2014, 12:14

........ . angwec
ro zrób nowe logi z FRST.

.

**Posty:** 9 · przez **angwec** 27 Paź 2014, 14:04

http://www.wklejto.pl/213863 mam nadzieje ze teraz zrobilam to poprawnie
http://www.wklejto.pl/213864

**Posty:** 4765 · przez **ordynat** 27 Paź 2014, 15:51

1) Otwórz Notatnik i wklej w nim:

Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKCU - No Name - {4F524A2D-5350-4500-76A7-7A786E7484D7} - No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR Extension: (Deal Keeper) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnjdjonjhkmemnldiniaionkhfnpbdom
C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnjdjonjhkmemnldiniaionkhfnpbdom
2014-10-17 07:36 - 2014-10-16 19:46 - 00043152 _____ (StdLib) C:\Windows\system32\Drivers\{f7e972a4-3731-46b4-91a5-4140fc1009e8}w.sys
C:\Windows\system32\Drivers\{f7e972a4-3731-46b4-91a5-4140fc1009e8}w.sys
EmptyTemp:

Plik zapisz pod nazwą [color="#483D8B"]fixlist.txt[/color] i umieść obok FRST. Uruchom FRST i kliknij przycisk Fix.
Powstanie plik fixlog.txt.
Daj ten log.

2) Zrób nowe logi z FRST.

3) Uruchom FRST.
W polu SEARCH wklej:
*keeper*.*
kliknij na przycisk "Search Files".
Raport z tego będzie tam, gdzie jest FRST.

Uruchom FRST.
W polu SEARCH wklej:
deal keeper
kliknij na przycisk "Search Registry".
Raport z tego będzie tam, gdzie jest FRST.

.

**Posty:** 9 · przez **angwec** 27 Paź 2014, 21:44

http://www.wklejto.pl/213904 a co znaczy podpunkt 2 ze mam zrobic nowe logi?

Dodano Dzisiaj, 10:17:
zrobilam ten plik nacisnelam fix i juz niemam deal keeper jak wchodze na neta a potem nierobilam punktu 2 i reszty

Dodano Dzisiaj, 10:30:
http://www.wklejto.pl/213924

Dodano Dzisiaj, 10:36:
http://www.wklejto.pl/213925

Dodano Dzisiaj, 10:39:
moze to juz koniec ? w kazdym razem dziekuje za pomoc i cierpliwosc

**Posty:** 2 · przez **Rossfranklin** 23 Mar 2015, 11:49

Deal Keeper to znany program adware, który udaje, że jest legalny program i twierdzi, aby pomóc użytkownikom w oszczędzaniu pieniędzy podczas zakupów online.

Ale to jest paskudne adware, które bombardują pulpit z tonami reklam annyonig pop-up, banerów, reklam, i kilku innych nachalnych reklam. może również kradzieży danych osobowych i ryzykować swoją prywatność.

Należy usunąć ten paskudny adware z komputera bardzo szybko. Należy usunąć rozszerzenie zagrożenia związane z przeglądarki.

Aby poznać pełną instrukcję usuwania adware, kliknij tutaj, aby zapoznać się z przewodnikiem: http://www.jakidoodinstaluj.com/usunac-bobyzoom-adware-jak-usunac-bobyzoom-adware :ok:

Kto jest na forum