OTL logfile created on: 2011-05-29 18:36:09 - Run 1 OTL by OldTimer - Version 3.2.23.0 Folder = C:\Users\Paulina\Downloads 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,79 Gb Total Physical Memory | 1,84 Gb Available Physical Memory | 48,49% Memory free 7,58 Gb Paging File | 5,19 Gb Available in Paging File | 68,48% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 116,45 Gb Total Space | 67,22 Gb Free Space | 57,73% Space Free | Partition Type: NTFS Drive D: | 329,78 Gb Total Space | 119,98 Gb Free Space | 36,38% Space Free | Partition Type: NTFS Computer Name: ASUS | User Name: Paulina | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011-05-29 18:35:42 | 000,580,096 | ---- | M] (OldTimer Tools) – C:\Users\Paulina\Downloads\OTL.exe PRC - [2011-05-17 11:02:08 | 000,231,592 | ---- | M] (Panda Security) – C:\ProgramData\Panda Security URL Filtering\Panda_URL_Filtering.exe PRC - [2011-05-13 23:50:12 | 000,403,240 | ---- | M] (Valve Corporation) – C:\Program Files (x86)\Common Files\Steam\SteamService.exe PRC - [2011-05-12 16:17:13 | 000,924,632 | ---- | M] (Mozilla Corporation) – C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2011-04-22 11:41:20 | 001,242,448 | ---- | M] (Valve Corporation) – D:\Program Files (x86)\Steam\steam.exe PRC - [2011-03-22 20:37:06 | 000,074,752 | ---- | M] (Nullsoft, Inc.) – D:\Program Files (x86)\Winamp\winampa.exe PRC - [2011-02-24 15:36:15 | 000,423,232 | ---- | M] (Panda Security, S.L.) – C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUNMain.exe PRC - [2010-12-26 01:30:27 | 000,066,872 | ---- | M] () – C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2010-12-16 19:19:34 | 000,140,608 | ---- | M] (Panda Security, S.L.) – C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSANHost.exe PRC - [2010-09-21 05:52:43 | 003,058,304 | ---- | M] (ASUS) – C:\Windows\AsScrPro.exe PRC - [2010-07-27 07:53:46 | 001,620,584 | ---- | M] (NVIDIA Corporation) – C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe PRC - [2010-07-10 07:45:00 | 000,984,400 | ---- | M] (Virage Logic Corporation / Sonic Focus) – C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe PRC - [2010-06-25 02:50:50 | 006,806,144 | ---- | M] (ASUS) – C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe PRC - [2010-06-09 18:55:54 | 001,080,448 | ---- | M] (asus) – C:\Program Files (x86)\ASUS\ControlDeck\ControlDeck.exe PRC - [2010-05-08 13:48:36 | 000,229,376 | ---- | M] () – C:\ProgramData\DatacardService\DCService.exe PRC - [2010-05-08 13:48:26 | 000,241,664 | ---- | M] (Huawei Technologies Co., Ltd.) – C:\ProgramData\DatacardService\DCSHelper.exe PRC - [2010-05-03 23:45:50 | 000,182,912 | ---- | M] (ASUS) – C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe PRC - [2010-05-03 23:41:46 | 000,170,624 | ---- | M] (ASUS) – C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe PRC - [2010-04-26 18:37:54 | 001,597,440 | ---- | M] () – C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe PRC - [2010-04-05 20:11:26 | 000,144,688 | ---- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\syncables\syncables desktop\jre\bin\javaw.exe PRC - [2010-04-05 20:10:36 | 000,370,480 | ---- | M] (syncables, LLC) – C:\Program Files (x86)\syncables\syncables desktop\syncables.exe PRC - [2010-04-01 11:16:20 | 000,357,696 | ---- | M] (DT Soft Ltd) – D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe PRC - [2010-03-12 05:13:56 | 000,013,600 | ---- | M] (Broadcom Corporation.) – C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe PRC - [2009-12-15 19:39:38 | 000,096,896 | ---- | M] (ASUS) – C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe PRC - [2009-11-02 23:21:26 | 000,103,720 | ---- | M] (CyberLink) – C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe PRC - [2009-10-01 04:34:22 | 002,314,240 | ---- | M] (Intel Corporation) – C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe PRC - [2009-10-01 04:33:08 | 000,262,144 | ---- | M] (Intel Corporation) – C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe PRC - [2009-08-12 21:32:56 | 000,365,936 | ---- | M] (Boingo Wireless, Inc.) – C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo Wi-Fi.exe PRC - [2009-07-31 19:38:24 | 000,305,720 | ---- | M] (ASUS) – C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe PRC - [2009-07-06 23:22:04 | 000,087,336 | ---- | M] (CyberLink Corp.) – C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe PRC - [2009-06-19 19:29:42 | 000,105,016 | ---- | M] (ASUS) – C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe PRC - [2009-06-19 19:29:26 | 002,488,888 | ---- | M] (ASUS) – C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe PRC - [2009-06-16 02:30:42 | 000,084,536 | ---- | M] (ASUS) – C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe PRC - [2008-12-23 02:15:34 | 000,174,648 | ---- | M] (ASUS) – C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe PRC - [2007-12-14 17:19:26 | 000,132,624 | ---- | M] (SAMSUNG ELECTRONICS) – D:\Program Files (x86)\Samsung\Samsung Media Studio 5\SMSTray.exe PRC - [2007-11-30 20:20:44 | 000,051,768 | ---- | M] () – C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe ========== Modules (SafeList) ========== MOD - [2011-05-29 18:35:42 | 000,580,096 | ---- | M] (OldTimer Tools) – C:\Users\Paulina\Downloads\OTL.exe MOD - [2010-08-21 07:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) – C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll MOD - [2010-07-26 16:26:59 | 000,100,968 | ---- | M] (NVIDIA Corporation) – C:\Windows\SysWOW64\nvinit.dll ========== Win32 Services (SafeList) ========== SRV:64bit: - [2010-03-12 05:13:54 | 000,873,248 | ---- | M] (Broadcom Corporation.) [Auto | Running] – C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe – (btwdins) SRV:64bit: - [2009-12-08 01:16:34 | 000,379,520 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] – C:\Windows\SysNative\FBAgent.exe – (AFBAgent) SRV:64bit: - [2009-08-06 23:17:46 | 000,118,672 | ---- | M] (Intel® Corporation) [On_Demand | Running] – C:\Program Files\Intel\TurboBoost\TurboBoost.exe – (TurboBoost) SRV:64bit: - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Program Files\Windows Defender\MpSvc.dll – (WinDefend) SRV - [2011-05-13 23:50:12 | 000,403,240 | ---- | M] (Valve Corporation) [On_Demand | Running] – C:\Program Files (x86)\Common Files\Steam\SteamService.exe – (Steam Client Service) SRV - [2010-12-26 01:30:27 | 000,066,872 | ---- | M] () [Auto | Running] – C:\Windows\SysWOW64\PnkBstrA.exe – (PnkBstrA) SRV - [2010-12-16 19:19:34 | 000,140,608 | ---- | M] (Panda Security, S.L.) [Auto | Running] – C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSANHost.exe – (NanoServiceMain) SRV - [2010-07-27 07:53:46 | 001,620,584 | ---- | M] (NVIDIA Corporation) [Auto | Running] – C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe – (nvUpdatusService) SRV - [2010-05-08 13:48:36 | 000,229,376 | ---- | M] () [Auto | Running] – C:\ProgramData\DatacardService\DCService.exe – (DCService.exe) SRV - [2010-03-18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe – (clr_optimization_v4.0.30319_32) SRV - [2009-12-15 19:39:38 | 000,096,896 | ---- | M] (ASUS) [Auto | Running] – C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe – (ATKGFNEXSrv) SRV - [2009-10-01 04:34:22 | 002,314,240 | ---- | M] (Intel Corporation) [Auto | Running] – C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe – (UNS) Intel® SRV - [2009-10-01 04:33:08 | 000,262,144 | ---- | M] (Intel Corporation) [Auto | Running] – C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe – (LMS) Intel® SRV - [2009-06-16 02:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Running] – C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe – (ASLDRService) SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe – (clr_optimization_v2.0.50727_32) ========== Driver Services (SafeList) ========== DRV:64bit: - [2011-03-11 08:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\amdsata.sys – (amdsata) DRV:64bit: - [2011-03-11 08:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\amdxata.sys – (amdxata) DRV:64bit: - [2010-12-25 00:08:13 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\sptd.sys – (sptd) DRV:64bit: - [2010-12-16 19:12:18 | 000,128,584 | ---- | M] (Panda Security, S.L.) [Kernel | Auto | Running] – C:\Windows\SysNative\drivers\PSINProt.sys – (PSINProt) DRV:64bit: - [2010-12-16 19:12:11 | 000,121,928 | ---- | M] (Panda Security, S.L.) [File_System | Auto | Running] – C:\Windows\SysNative\drivers\PSINProc.sys – (PSINProc) DRV:64bit: - [2010-12-16 19:12:04 | 000,150,088 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] – C:\Windows\SysNative\drivers\PSINKNC.sys – (PSINKNC) DRV:64bit: - [2010-12-16 19:11:56 | 000,114,760 | ---- | M] (Panda Security, S.L.) [File_System | Auto | Running] – C:\Windows\SysNative\drivers\PSINFile.sys – (PSINFile) DRV:64bit: - [2010-12-16 19:11:49 | 000,158,280 | ---- | M] (Panda Security, S.L.) [Kernel | Auto | Running] – C:\Windows\SysNative\drivers\PSINAflt.sys – (PSINAflt) DRV:64bit: - [2010-08-25 20:36:04 | 010,611,552 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\igdkmd64.sys – (igfx) DRV:64bit: - [2010-07-26 16:26:59 | 000,024,680 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\nvpciflt.sys – (nvpciflt) DRV:64bit: - [2010-06-28 08:27:14 | 000,206,848 | ---- | M] (Fresco Logic) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\FLxHCIc.sys – (FLxHCIc) Fresco Logic xHCI (USB3) DRV:64bit: - [2010-05-22 15:49:30 | 000,083,456 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\ew_jubusenum.sys – (huawei_enumerator) DRV:64bit: - [2010-04-30 17:53:10 | 000,252,928 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\ewusbnet.sys – (ewusbnet) DRV:64bit: - [2010-04-21 09:47:49 | 000,076,912 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\L1C62x64.sys – (L1C) DRV:64bit: - [2010-04-13 12:15:03 | 000,135,560 | ---- | M] (ELAN Microelectronic Corp.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\ETD.sys – (ETD) DRV:64bit: - [2010-03-25 11:08:46 | 000,120,704 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\ewusbmdm.sys – (hwdatacard) DRV:64bit: - [2010-03-20 12:56:56 | 000,114,560 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\ew_hwusbdev.sys – (ew_hwusbdev) DRV:64bit: - [2010-03-03 13:51:39 | 000,540,696 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\iaStor.sys – (iaStor) DRV:64bit: - [2010-03-02 10:45:23 | 001,594,368 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\athrx.sys – (athr) DRV:64bit: - [2010-02-26 10:32:11 | 000,158,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\Impcd.sys – (Impcd) DRV:64bit: - [2010-01-15 07:23:19 | 000,098,344 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwaudio.sys – (btwaudio) DRV:64bit: - [2010-01-15 07:23:13 | 000,132,648 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwavdt.sys – (btwavdt) DRV:64bit: - [2010-01-15 07:23:09 | 000,021,288 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwrchid.sys – (btwrchid) DRV:64bit: - [2009-12-14 10:03:49 | 000,053,800 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btusbflt.sys – (btusbflt) DRV:64bit: - [2009-09-17 21:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\HECIx64.sys – (HECIx64) Intel® DRV:64bit: - [2009-08-20 04:41:37 | 001,800,192 | ---- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\snp2uvc.sys – (SNP2UVC) USB2.0 PC Camera (SNP2UVC) DRV:64bit: - [2009-08-06 23:17:34 | 000,013,784 | ---- | M] () [Kernel | Auto | Running] – C:\Windows\SysNative\drivers\TurboB.sys – (TurboB) DRV:64bit: - [2009-07-20 11:29:39 | 000,015,416 | ---- | M] ( ) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\kbfiltr.sys – (kbfiltr) DRV:64bit: - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\amdsbs.sys – (amdsbs) DRV:64bit: - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\lsi_sas2.sys – (LSI_SAS2) DRV:64bit: - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\HpSAMD.sys – (HpSAMD) DRV:64bit: - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\stexstor.sys – (stexstor) DRV:64bit: - [2009-06-10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] – C:\Windows\SysNative\wbem\ntfs.mof – (Ntfs) DRV:64bit: - [2009-06-10 22:35:57 | 000,056,832 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\SiSG664.sys – (SiSGbeLH) DRV:64bit: - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\evbda.sys – (ebdrv) DRV:64bit: - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\bxvbda.sys – (b06bdrv) DRV:64bit: - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\b57nd60a.sys – (b57nd60a) DRV:64bit: - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\hcw85cir.sys – (hcw85cir) DRV:64bit: - [2009-05-13 18:07:20 | 000,015,928 | ---- | M] (ASUS) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\ATK64AMD.sys – (MTsensor) DRV:64bit: - [2009-04-07 08:33:07 | 000,035,104 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwl2cap.sys – (btwl2cap) DRV:64bit: - [2008-12-08 18:35:52 | 000,061,792 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\fssfltr.sys – (fssfltr) DRV:64bit: - [2008-05-24 02:27:28 | 000,154,168 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] – C:\Windows\SysNative\drivers\WimFltr.sys – (WimFltr) DRV - [2009-07-03 02:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Running] – C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys – (ASMMAP64) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus.msn.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: “ProxyEnable” = 0 ========== FireFox ========== FF - prefs.js…extensions.enabledItems: {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}:2.0 FF - prefs.js…extensions.enabledItems: widgetruntime@surfsecret.com:1.0 FF - prefs.js…extensions.enabledItems: {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.3.0.7280 FF - prefs.js…keyword.URL: “http://search.yahoo.com/search?fr=panda&type=panda2_0yatb&p=” FF - prefs.js…network.proxy.type: 0 FF - HKLM\software\mozilla\Firefox\Extensions\widgetruntime@surfsecret.com: C:\Program Files (x86)\Panda Security\Panda ID Protect\Firefox [2011-03-18 22:49:17 | 000,000,000 | —D | M] FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011-05-12 16:17:17 | 000,000,000 | —D | M] FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011-05-12 16:17:17 | 000,000,000 | —D | M] [2011-01-16 21:27:50 | 000,000,000 | —D | M] (No name found) – C:\Users\Paulina\AppData\Roaming\mozilla\Extensions [2011-05-28 00:21:59 | 000,000,000 | —D | M] (No name found) – C:\Users\Paulina\AppData\Roaming\mozilla\Firefox\Profiles\w1pucjut.default\extensions [2011-05-25 19:01:07 | 000,000,000 | —D | M] (Panda Security Toolbar) – C:\Users\Paulina\AppData\Roaming\mozilla\Firefox\Profiles\w1pucjut.default\extensions{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} [2011-05-28 00:21:59 | 000,000,000 | —D | M] (Iplex to ALLPlayer) – C:\Users\Paulina\AppData\Roaming\mozilla\Firefox\Profiles\w1pucjut.default\extensions\IplextoALL@ALLPlayer.org [2011-05-10 19:13:53 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\mozilla firefox\extensions [2011-05-10 19:13:53 | 000,000,000 | —D | M] (Skype extension) – C:\Program Files (x86)\mozilla firefox\extensions{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} File not found (No name found) – [2011-05-12 16:17:13 | 000,142,296 | ---- | M] (Mozilla Foundation) – C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2011-03-22 20:38:12 | 000,012,800 | ---- | M] (Nullsoft, Inc.) – C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll [2011-05-12 16:17:15 | 000,002,767 | ---- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\allegro-pl.xml [2011-05-12 16:17:15 | 000,001,406 | ---- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\fbc-pl.xml [2011-05-12 16:17:15 | 000,000,917 | ---- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\merlin-pl.xml [2011-05-12 16:17:15 | 000,000,858 | ---- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\pwn-pl.xml [2011-05-12 16:17:15 | 000,001,183 | ---- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-pl.xml [2011-05-12 16:17:15 | 000,001,683 | ---- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:64bit: - BHO: (Windows Live Family Safety Browser Helper Class) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation) O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.) O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.) O2 - BHO: (Panda Security Toolbar) - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files (x86)\Panda Security\Panda Security Toolbar\PandaSecurityDx.dll () O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - D:\Program Files (x86)\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) O3:64bit: - HKLM…\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) O3:64bit: - HKLM…\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3:64bit: - HKLM…\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM…\Toolbar: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O3 - HKLM…\Toolbar: (Panda Security Toolbar) - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files (x86)\Panda Security\Panda Security Toolbar\PandaSecurityDx.dll () O3 - HKLM…\Toolbar: (no name) - Locked - No CLSID value found. O3:64bit: - HKCU…\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll () O3 - HKCU…\Toolbar\WebBrowser: (DAEMON Tools Toolbar) - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll () O4:64bit: - HKLM…\Run: [AmIcoSinglun64] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Alcor Micro Corp.) O4:64bit: - HKLM…\Run: [ASUS WebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe () O4:64bit: - HKLM…\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.) O4:64bit: - HKLM…\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:64bit: - HKLM…\Run: [igfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:64bit: - HKLM…\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4:64bit: - HKLM…\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) O4:64bit: - HKLM…\Run: [setwallpaper] File not found O4:64bit: - HKLM…\Run: [ufSeAgnt.exe] C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe (Trend Micro Inc.) O4 - HKLM…\Run: [ASUS VIBE] C:\Program Files (x86)\ASUS\ASUS VIBE\ASUS VIBE.exe (ecm) O4 - HKLM…\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS) O4 - HKLM…\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUS) O4 - HKLM…\Run: [boingo Wi-Fi] C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk () O4 - HKLM…\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS) O4 - HKLM…\Run: [Panda Security URL Filtering] C:\ProgramData\Panda Security URL Filtering\Panda_URL_Filtering.exe (Panda Security) O4 - HKLM…\Run: [PSUNMain] C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUNMain.exe (Panda Security, S.L.) O4 - HKLM…\Run: [RemoteControl9] C:\Program Files (x86)\Cyberlink\PowerDVD9\PDVD9Serv.exe (CyberLink Corp.) O4 - HKLM…\Run: [sessionLogon] File not found O4 - HKLM…\Run: [sMSTray] D:\Program Files (x86)\Samsung\Samsung Media Studio 5\SMSTray.exe (SAMSUNG ELECTRONICS) O4 - HKLM…\Run: [sonicMasterTray] C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe (Virage Logic Corporation / Sonic Focus) O4 - HKLM…\Run: [updateLBPShortCut] C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM…\Run: [updateP2GoShortCut] C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM…\Run: [updatePSTShortCut] C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM…\Run: [WinampAgent] D:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.) O4 - HKLM…\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe () O4 - HKCU…\Run: [ALLUpdate] D:\Program Files (x86)\ALLPlayer\ALLUpdate.exe () O4 - HKCU…\Run: [DAEMON Tools Lite] D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKCU…\Run: [steam] D:\Program Files (x86)\Steam\steam.exe (Valve Corporation) O4 - HKCU…\Run: [syncables] C:\Program Files (x86)\syncables\syncables desktop\Syncables.exe (syncables, LLC) O4 - Startup: C:\Users\Paulina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rejestracja LITTLEST PET SHOP.lnk = D:\Gry\Electronic Arts\LITTLEST PET SHOP\Support\EAregister.exe (Leader Technologies) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.) O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra ‘Tools’ menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra ‘Tools’ menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O18:64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:64bit: - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation) O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:64bit: - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2{ce4b2808-0fa3-11e0-b1b8-74f06db04c97}\Shell - “” = AutoRun O33 - MountPoints2{ce4b2808-0fa3-11e0-b1b8-74f06db04c97}\Shell\AutoRun\command - “” = F:\AutoRun.exe O33 - MountPoints2{ce4b2816-0fa3-11e0-b1b8-74f06db04c97}\Shell - “” = AutoRun O33 - MountPoints2{ce4b2816-0fa3-11e0-b1b8-74f06db04c97}\Shell\AutoRun\command - “” = F:\AutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (MACHINE BootExecut) - File not found O35:64bit: - HKLM…comfile [open] – “%1” %* O35:64bit: - HKLM…exefile [open] – “%1” %* O35 - HKLM…comfile [open] – “%1” %* O35 - HKLM…exefile [open] – “%1” %* O37:64bit: - HKLM…com [@ = comfile] – “%1” %* O37:64bit: - HKLM…exe [@ = exefile] – “%1” %* O37 - HKLM…com [@ = comfile] – “%1” %* O37 - HKLM…exe [@ = exefile] – “%1” %* MsConfig:64bit - StartUpReg: Adobe Reader Speed Launcher - hkey= - key= - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) MsConfig:64bit - StartUpReg: ASUS Screen Saver Protector - hkey= - key= - C:\Windows\AsScrPro.exe (ASUS) MsConfig:64bit - StartUpReg: CLMLServer - hkey= - key= - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink) MsConfig:64bit - StartUpReg: RtHDVCpl - hkey= - key= - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) MsConfig:64bit - State: “services” - Reg Error: Key error. MsConfig:64bit - State: “startup” - Reg Error: Key error. SafeBootMin:64bit: AppMgmt - Service SafeBootMin:64bit: Base - Driver Group SafeBootMin:64bit: Boot Bus Extender - Driver Group SafeBootMin:64bit: Boot file system - Driver Group SafeBootMin:64bit: File system - Driver Group SafeBootMin:64bit: Filter - Driver Group SafeBootMin:64bit: HelpSvc - Service SafeBootMin:64bit: PCI Configuration - Driver Group SafeBootMin:64bit: PNP Filter - Driver Group SafeBootMin:64bit: Primary disk - Driver Group SafeBootMin:64bit: sacsvr - Service SafeBootMin:64bit: SCSI Class - Driver Group SafeBootMin:64bit: System Bus Extender - Driver Group SafeBootMin:64bit: vmms - Service SafeBootMin:64bit: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootMin: AppMgmt - Service SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vmms - Service SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet:64bit: AppMgmt - Service SafeBootNet:64bit: Base - Driver Group SafeBootNet:64bit: Boot Bus Extender - Driver Group SafeBootNet:64bit: Boot file system - Driver Group SafeBootNet:64bit: File system - Driver Group SafeBootNet:64bit: Filter - Driver Group SafeBootNet:64bit: HelpSvc - Service SafeBootNet:64bit: Messenger - Service SafeBootNet:64bit: NDIS Wrapper - Driver Group SafeBootNet:64bit: NetBIOSGroup - Driver Group SafeBootNet:64bit: NetDDEGroup - Driver Group SafeBootNet:64bit: Network - Driver Group SafeBootNet:64bit: NetworkProvider - Driver Group SafeBootNet:64bit: PCI Configuration - Driver Group SafeBootNet:64bit: PNP Filter - Driver Group SafeBootNet:64bit: PNP_TDI - Driver Group SafeBootNet:64bit: Primary disk - Driver Group SafeBootNet:64bit: rdsessmgr - Service SafeBootNet:64bit: sacsvr - Service SafeBootNet:64bit: SCSI Class - Driver Group SafeBootNet:64bit: Streams Drivers - Driver Group SafeBootNet:64bit: System Bus Extender - Driver Group SafeBootNet:64bit: TDI - Driver Group SafeBootNet:64bit: vmms - Service SafeBootNet:64bit: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation) SafeBootNet:64bit: WudfUsbccidDriver - Driver SafeBootNet:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet:64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet:64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet:64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet:64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet:64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: AppMgmt - Service SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vmms - Service SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices ========== Files/Folders - Created Within 30 Days ========== [2011-05-29 01:03:48 | 000,000,000 | —D | C] – C:\Users\Paulina\AppData\Roaming\Unity [2011-05-29 00:59:11 | 000,000,000 | —D | C] – C:\Users\Paulina\AppData\Local\Unity [2011-05-29 00:13:15 | 000,000,000 | —D | C] – C:\Users\Paulina\AppData\Roaming\go [2011-05-29 00:13:05 | 000,000,000 | —D | C] – C:\ProgramData\Easybits GO [2011-05-28 00:22:06 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALLPlayer [2011-05-28 00:22:03 | 000,000,000 | —D | C] – C:\Users\Paulina\AppData\Local\ALLPlayer [2011-05-25 19:09:34 | 000,027,008 | ---- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\Diskdump.sys [2011-05-25 16:13:51 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner [2011-05-22 21:38:31 | 000,000,000 | —D | C] – C:\Users\Paulina\Desktop\Przyroda prezentacja [2011-05-22 21:36:54 | 000,000,000 | —D | C] – C:\Users\Paulina\Desktop\Informatyka Misia [2011-05-19 17:17:33 | 001,093,632 | ---- | C] (Karol Winnicki) – C:\Users\Paulina\Desktop\BESTplayer.exe [2011-05-19 12:52:08 | 000,142,336 | ---- | C] (Microsoft Corporation) – C:\Windows\SysNative\poqexec.exe [2011-05-19 12:52:08 | 000,123,904 | ---- | C] (Microsoft Corporation) – C:\Windows\SysWow64\poqexec.exe [2011-05-15 14:08:20 | 000,000,000 | —D | C] – C:\Users\Paulina\AppData\Roaming\Tropico 3 [2011-05-11 20:37:01 | 005,509,504 | ---- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe [2011-05-11 20:37:00 | 003,957,632 | ---- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntkrnlpa.exe [2011-05-11 20:37:00 | 003,901,824 | ---- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntoskrnl.exe [2011-05-11 20:36:58 | 000,324,608 | ---- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbport.sys [2011-05-11 20:36:58 | 000,007,936 | ---- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbd.sys [2011-05-10 19:14:12 | 000,000,000 | —D | C] – C:\ProgramData\Skype Extras [2011-05-10 19:13:44 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype [2011-05-10 19:13:44 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Skype [2011-05-07 00:27:48 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace [2011-05-03 12:22:39 | 000,000,000 | —D | C] – C:\Users\Paulina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Moja Matura - Język Polski Podstawowy [2011-05-03 12:22:31 | 000,000,000 | —D | C] – C:\Windows\Moja Matura - Język Polski Podstawowy [2011-05-02 21:21:01 | 000,000,000 | —D | C] – C:\Users\Paulina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Moja Matura - Matematyka Podstawowa [2011-05-02 21:20:52 | 000,000,000 | —D | C] – C:\Windows\Moja Matura - Matematyka Podstawowa [2011-05-02 18:22:13 | 000,000,000 | —D | C] – C:\Users\Paulina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Urządzenia interfejsu Bluetooth ========== Files - Modified Within 30 Days ========== [2011-05-29 18:28:55 | 000,067,584 | --S- | M] () – C:\Windows\bootstat.dat [2011-05-29 18:02:17 | 000,010,240 | -H-- | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011-05-29 18:02:17 | 000,010,240 | -H-- | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011-05-29 17:58:21 | 001,549,696 | ---- | M] () – C:\Windows\SysNative\PerfStringBackup.INI [2011-05-29 17:58:21 | 000,697,912 | ---- | M] () – C:\Windows\SysNative\perfh015.dat [2011-05-29 17:58:21 | 000,616,008 | ---- | M] () – C:\Windows\SysNative\perfh009.dat [2011-05-29 17:58:21 | 000,134,990 | ---- | M] () – C:\Windows\SysNative\perfc015.dat [2011-05-29 17:58:21 | 000,106,388 | ---- | M] () – C:\Windows\SysNative\perfc009.dat [2011-05-29 17:58:00 | 000,001,062 | ---- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011-05-29 17:53:49 | 000,045,056 | ---- | M] () – C:\Windows\SysNative\acovcnt.exe [2011-05-29 17:53:45 | 000,001,058 | ---- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011-05-29 17:53:25 | 3054,383,104 | -HS- | M] () – C:\hiberfil.sys [2011-05-29 00:13:17 | 000,001,658 | ---- | M] () – C:\Users\Paulina\Desktop\Play games (EasyBits GO).lnk [2011-05-28 11:55:31 | 000,002,196 | ---- | M] () – C:\Windows\SysNative\AutoRunFilter.ini [2011-05-28 00:22:06 | 000,000,724 | ---- | M] () – C:\Users\Paulina\Desktop\ALLPlayer V4.6.lnk [2011-05-22 20:43:50 | 000,003,584 | ---- | M] () – C:\Users\Paulina\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-05-19 17:17:35 | 001,093,632 | ---- | M] (Karol Winnicki) – C:\Users\Paulina\Desktop\BESTplayer.exe [2011-05-18 20:16:30 | 000,001,065 | ---- | M] () – C:\Users\Paulina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rejestracja LITTLEST PET SHOP.lnk [2011-05-10 19:13:44 | 000,002,515 | ---- | M] () – C:\Users\Public\Desktop\Skype.lnk ========== Files Created - No Company Name ========== [2011-05-29 00:13:17 | 000,001,688 | ---- | C] () – C:\Users\Paulina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Play games (EasyBits GO).lnk [2011-05-29 00:13:17 | 000,001,658 | ---- | C] () – C:\Users\Paulina\Desktop\Play games (EasyBits GO).lnk [2011-05-28 00:22:06 | 000,000,724 | ---- | C] () – C:\Users\Paulina\Desktop\ALLPlayer V4.6.lnk [2011-05-28 00:22:03 | 000,810,496 | ---- | C] () – C:\Windows\SysWow64\xvidcore.dll [2011-05-28 00:22:03 | 000,797,184 | ---- | C] () – C:\Windows\SysWow64\ac3filter.ax [2011-05-28 00:22:03 | 000,258,048 | ---- | C] () – C:\Windows\SysWow64\libFLAC.dll [2011-05-12 16:17:23 | 000,001,152 | ---- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk [2011-05-10 19:13:44 | 000,002,515 | ---- | C] () – C:\Users\Public\Desktop\Skype.lnk [2011-04-09 18:55:28 | 000,179,261 | ---- | C] () – C:\Windows\SysWow64\xlive.dll.cat [2011-04-01 14:46:27 | 000,921,600 | ---- | C] () – C:\Windows\SysWow64\vorbisenc.dll [2011-04-01 14:46:27 | 000,237,568 | ---- | C] () – C:\Windows\SysWow64\OggDS.dll [2011-04-01 14:46:27 | 000,188,416 | ---- | C] () – C:\Windows\SysWow64\vorbis.dll [2011-04-01 14:46:27 | 000,045,056 | ---- | C] () – C:\Windows\SysWow64\Ogg.dll [2011-03-20 18:10:36 | 000,855,641 | ---- | C] () – C:\Users\Paulina\AppData\Roaming\PandaIDProtectHelp.chm [2011-03-02 15:42:19 | 000,003,584 | ---- | C] () – C:\Users\Paulina\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-02-08 23:03:50 | 000,002,060 | ---- | C] () – C:\Windows\disney.ini [2011-02-03 14:32:09 | 000,000,056 | -H-- | C] () – C:\ProgramData\ezsidmv.dat [2010-12-26 01:30:27 | 000,103,736 | ---- | C] () – C:\Windows\SysWow64\PnkBstrB.exe [2010-12-26 01:30:27 | 000,066,872 | ---- | C] () – C:\Windows\SysWow64\PnkBstrA.exe [2010-12-26 01:30:26 | 000,669,184 | ---- | C] () – C:\Windows\SysWow64\pbsvc.exe [2010-12-26 01:05:26 | 000,012,288 | ---- | C] () – C:\Windows\DCEBoot64.exe [2010-12-25 01:41:20 | 000,000,024 | ---- | C] () – C:\Windows\ATKPF.ini [2010-09-21 05:23:56 | 000,131,368 | ---- | C] () – C:\ProgramData\FullRemove.exe [2010-08-25 20:34:30 | 000,127,868 | ---- | C] () – C:\Windows\SysWow64\igcompkrng575.bin [2010-08-25 20:34:30 | 000,104,796 | ---- | C] () – C:\Windows\SysWow64\igfcg575m.bin [2010-05-14 04:27:47 | 000,870,560 | ---- | C] () – C:\Windows\SysWow64\igkrng575.bin [2010-05-14 03:16:11 | 000,208,896 | ---- | C] () – C:\Windows\SysWow64\iglhsip32.dll [2010-05-14 03:16:11 | 000,143,360 | ---- | C] () – C:\Windows\SysWow64\iglhcp32.dll [2010-02-09 09:07:38 | 000,020,480 | ---- | C] () – C:\Windows\OOBEPlayer.exe [2010-02-09 09:07:38 | 000,000,269 | ---- | C] () – C:\Windows\OOBEPlayer.ini [2009-10-26 05:38:22 | 000,000,176 | ---- | C] () – C:\Windows\explorer.exe.config [2009-07-29 07:20:40 | 000,000,010 | ---- | C] () – C:\Windows\SysWow64\ABLKSR.ini [2009-07-14 07:38:36 | 000,067,584 | --S- | C] () – C:\Windows\bootstat.dat [2009-07-14 04:35:51 | 000,000,741 | ---- | C] () – C:\Windows\SysWow64\NOISE.DAT [2009-07-14 04:34:42 | 000,215,943 | ---- | C] () – C:\Windows\SysWow64\dssec.dat [2009-07-14 02:10:29 | 000,043,131 | ---- | C] () – C:\Windows\mib.bin [2009-07-14 01:42:10 | 000,064,000 | ---- | C] () – C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 23:03:59 | 000,364,544 | ---- | C] () – C:\Windows\SysWow64\msjetoledb40.dll [2009-06-19 20:06:22 | 000,197,912 | ---- | C] () – C:\Windows\SysWow64\physxcudart_20.dll [2009-06-19 20:06:22 | 000,058,648 | ---- | C] () – C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll [2009-06-19 20:06:22 | 000,058,648 | ---- | C] () – C:\Windows\SysWow64\AgCPanelSwedish.dll [2009-06-19 20:06:22 | 000,058,648 | ---- | C] () – C:\Windows\SysWow64\AgCPanelSpanish.dll [2009-06-19 20:06:22 | 000,058,648 | ---- | C] () – C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll [2009-06-19 20:06:22 | 000,058,648 | ---- | C] () – C:\Windows\SysWow64\AgCPanelPortugese.dll [2009-06-19 20:06:22 | 000,058,648 | ---- | C] () – C:\Windows\SysWow64\AgCPanelKorean.dll [2009-06-19 20:06:22 | 000,058,648 | ---- | C] () – C:\Windows\SysWow64\AgCPanelJapanese.dll [2009-06-19 20:06:22 | 000,058,648 | ---- | C] () – C:\Windows\SysWow64\AgCPanelGerman.dll [2009-06-19 20:06:22 | 000,058,648 | ---- | C] () – C:\Windows\SysWow64\AgCPanelFrench.dll [2009-06-10 23:26:10 | 000,673,088 | ---- | C] () – C:\Windows\SysWow64\mlang.dat [2006-05-19 05:39:57 | 000,015,497 | ---- | C] () – C:\Windows\snp2uvc.ini ========== Custom Scans ========== < %systemdrive%*.* > [2009-06-15 13:11:59 | 000,000,054 | ---- | M] () – C:\AdobeReader.log [2009-07-14 03:38:58 | 000,383,562 | RHS- | M] () – C:\bootmgr [2009-07-29 08:03:37 | 000,008,192 | RHS- | M] () – C:\BOOTSECT.BAK [2010-09-21 06:04:06 | 000,015,300 | ---- | M] () – C:\devlist.txt [2011-01-16 16:09:17 | 000,000,165 | ---- | M] () – C:\dpi.txt [2010-09-21 06:04:05 | 000,000,009 | ---- | M] () – C:\Finish.log [2011-05-29 17:53:25 | 3054,383,104 | -HS- | M] () – C:\hiberfil.sys [2010-08-05 05:53:49 | 002,097,152 | -H-- | M] () – C:\N73JF.BIN [2010-08-11 04:16:04 | 000,000,018 | ---- | M] () – C:\N73JF_WIN7.10 [2011-05-29 17:53:29 | 4072,513,536 | -HS- | M] () – C:\pagefile.sys [2010-09-20 17:15:22 | 000,000,233 | ---- | M] () – C:\Pass.txt [2010-08-11 04:16:04 | 000,000,007 | ---- | M] () – C:\RECOVERY.DAT [2010-09-21 05:48:01 | 000,002,428 | ---- | M] () – C:\RHDSetup.log [2010-09-21 05:55:41 | 000,000,090 | ---- | M] () – C:\setup.log [2006-05-13 18:22:24 | 000,000,005 | ---- | M] () – C:\store.log [2010-09-21 04:53:04 | 000,000,166 | ---- | M] () – C:\SumHidd.txt [2010-09-21 04:51:33 | 000,000,098 | ---- | M] () – C:\SumOS.txt < MD5 for: AGP440.SYS > [2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 – C:\Windows\SysNative\drivers\AGP440.sys [2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 – C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_9e6bb86c3b39a3e9\AGP440.sys [2009-07-14 03:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 – C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys < MD5 for: ATAPI.SYS > [2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C – C:\Windows\SysNative\drivers\atapi.sys [2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C – C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_a69a58a4286f0b22\atapi.sys [2009-07-14 03:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C – C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys < MD5 for: BEEP.SYS > [2009-07-14 02:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 – C:\Windows\SysNative\drivers\beep.sys [2009-07-14 02:00:13 | 000,006,656 | ---- | M] (Microsoft Corporation) MD5=16A47CE2DECC9B099349A5F840654746 – C:\Windows\winsxs\amd64_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_201592fa214e4f02\beep.sys < MD5 for: CDROM.SYS > [2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB – C:\Windows\SysNative\drivers\cdrom.sys [2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB – C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_8363d00ecae4322d\cdrom.sys [2009-07-14 01:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB – C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys < MD5 for: NDIS.SYS > [2009-07-14 03:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C – C:\Windows\SysNative\drivers\ndis.sys [2009-07-14 03:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C – C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys < MD5 for: USERINIT.EXE > [2009-07-14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 – C:\Windows\SysWOW64\userinit.exe [2009-07-14 03:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 – C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe [2009-07-14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE – C:\Windows\SysNative\userinit.exe [2009-07-14 03:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE – C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe < MD5 for: WINLOGON.EXE > [2009-07-14 03:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe [2010-09-21 05:27:33 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe [2010-09-21 05:27:33 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A – C:\Windows\SysNative\winlogon.exe [2010-09-21 05:27:33 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe ========== Alternate Data Streams ========== @Alternate Data Stream - 121 bytes -> C:\ProgramData\Temp:AB689DEA < End of report >