OTL.Txt

RunDLL nie można odnaleźć określonego modułu

Witam! Mam problem z odinstalowaniem gry. Nie udało mi sie jej odinstalować za pomocą panelu sterowania ani programu Revo Uninstaller a kiedy probowałem odinstalować ją poprzez deinstalator w grze wywalało błąd RunDLL Nie mozna odnaleźć.. Liczę na waszą pomoc, załączam skany z FRST i OTL. Pozdrawiam.


??OTL logfile created on: 2014-08-24 21:25:16 - Run 1

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Kuba\Downloads

64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.11.9600.16428)

Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd



4,00 Gb Total Physical Memory | 2,34 Gb Available Physical Memory | 58,58% Memory free

8,00 Gb Paging File | 6,03 Gb Available in Paging File | 75,43% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]



%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 151,59 Gb Total Space | 100,42 Gb Free Space | 66,25% Space Free | Partition Type: NTFS

Drive D: | 224,54 Gb Total Space | 168,47 Gb Free Space | 75,03% Space Free | Partition Type: NTFS

Drive G: | 693,97 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS

Drive M: | 220,04 Gb Total Space | 175,50 Gb Free Space | 79,76% Space Free | Partition Type: NTFS



Computer Name: KUBA-KOMPUTER | User Name: Kuba | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days



[color=#E56717]========== Processes (SafeList) ==========[/color]



PRC - [2014-08-24 21:25:02 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Kuba\Downloads\OTL.exe

PRC - [2014-08-19 13:57:23 | 047,565,944 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\23.0.1522.77\opera.exe

PRC - [2014-08-19 13:57:23 | 001,401,464 | ---- | M] () -- C:\Program Files (x86)\Opera\23.0.1522.77\opera_crashreporter.exe

PRC - [2014-08-12 13:04:07 | 000,694,784 | ---- | M] (Cherished Technololgy LIMITED) -- C:\ProgramData\IePluginServices\PluginService.exe

PRC - [2014-08-02 19:19:52 | 001,936,720 | ---- | M] (BitTorrent Inc.) -- C:\Users\Kuba\AppData\Roaming\uTorrent\uTorrent.exe

PRC - [2014-07-31 19:26:19 | 004,085,896 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\avastui.exe

PRC - [2014-07-23 19:58:07 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe

PRC - [2014-05-20 01:10:40 | 000,413,128 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

PRC - [2014-04-30 20:28:45 | 002,199,840 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

PRC - [2014-04-30 20:28:32 | 001,617,696 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

PRC - [2013-08-12 12:32:16 | 000,138,768 | ---- | M] (Portrait Displays, Inc.) -- C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe

PRC - [2012-04-16 11:02:26 | 000,117,552 | ---- | M] (Portrait Displays, Inc.) -- C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe





[color=#E56717]========== Modules (No Company Name) ==========[/color]



MOD - [2014-08-19 13:57:23 | 001,401,464 | ---- | M] () -- C:\Program Files (x86)\Opera\23.0.1522.77\opera_crashreporter.exe

MOD - [2014-08-19 13:57:22 | 000,957,048 | ---- | M] () -- C:\Program Files (x86)\Opera\23.0.1522.77\ffmpegsumo.dll

MOD - [2014-08-19 13:57:22 | 000,880,248 | ---- | M] () -- C:\Program Files (x86)\Opera\23.0.1522.77\libglesv2.dll

MOD - [2014-08-19 13:57:22 | 000,135,800 | ---- | M] () -- C:\Program Files (x86)\Opera\23.0.1522.77\libegl.dll

MOD - [2014-07-24 17:48:44 | 017,029,808 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll

MOD - [2014-07-23 19:58:07 | 019,329,904 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll

MOD - [2014-07-23 19:58:07 | 000,301,152 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\aswProperty.dll

MOD - [2013-08-12 12:32:38 | 000,093,712 | ---- | M] () -- C:\Program Files (x86)\Common Files\Portrait Displays\Plugins\DP\msgHook.dll





[color=#E56717]========== Services (SafeList) ==========[/color]



SRV:[b]64bit:[/b] - [2014-07-23 19:58:07 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)

SRV:[b]64bit:[/b] - [2014-04-30 20:28:23 | 021,007,192 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe -- (NvStreamSvc)

SRV:[b]64bit:[/b] - [2013-11-26 11:18:09 | 000,111,616 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)

SRV:[b]64bit:[/b] - [2013-05-27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

SRV:[b]64bit:[/b] - [2012-05-04 15:40:36 | 000,361,984 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)

SRV:[b]64bit:[/b] - [2009-07-14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)

SRV - [2014-08-12 13:04:07 | 000,694,784 | ---- | M] (Cherished Technololgy LIMITED) [Auto | Running] -- C:\ProgramData\IePluginServices\PluginService.exe -- (IePluginServices)

SRV - [2014-07-24 17:48:45 | 000,262,320 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2014-07-17 07:42:17 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2014-05-20 01:10:40 | 000,413,128 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)

SRV - [2014-04-30 20:28:32 | 001,617,696 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService)

SRV - [2013-09-11 22:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2013-08-12 12:32:16 | 000,138,768 | ---- | M] (Portrait Displays, Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe -- (DTSRVC)

SRV - [2012-04-16 11:02:26 | 000,117,552 | ---- | M] (Portrait Displays, Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe -- (PdiService)

SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)





[color=#E56717]========== Driver Services (SafeList) ==========[/color]



DRV:[b]64bit:[/b] - [2014-08-11 06:20:50 | 000,061,584 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{c5e48979-bd7f-4cf7-9b73-2482a67a4f37}Gw64.sys -- ({c5e48979-bd7f-4cf7-9b73-2482a67a4f37}Gw64)

DRV:[b]64bit:[/b] - [2014-07-23 21:20:44 | 000,283,064 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)

DRV:[b]64bit:[/b] - [2014-07-23 19:59:24 | 000,427,360 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswsp.sys -- (aswSP)

DRV:[b]64bit:[/b] - [2014-07-23 19:58:08 | 001,041,168 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)

DRV:[b]64bit:[/b] - [2014-07-23 19:58:08 | 000,224,896 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)

DRV:[b]64bit:[/b] - [2014-07-23 19:58:08 | 000,093,568 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)

DRV:[b]64bit:[/b] - [2014-07-23 19:58:08 | 000,092,008 | ---- | M] (AVAST Software) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswStm.sys -- (aswStm)

DRV:[b]64bit:[/b] - [2014-07-23 19:58:08 | 000,079,184 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)

DRV:[b]64bit:[/b] - [2014-07-23 19:58:08 | 000,065,776 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)

DRV:[b]64bit:[/b] - [2014-07-23 19:58:08 | 000,029,208 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\aswHwid.sys -- (aswHwid)

DRV:[b]64bit:[/b] - [2014-05-20 04:44:03 | 000,197,408 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)

DRV:[b]64bit:[/b] - [2014-04-30 20:28:22 | 000,018,776 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys -- (NvStreamKms)

DRV:[b]64bit:[/b] - [2014-03-31 18:42:44 | 000,040,392 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvvad64v.sys -- (nvvad_WaveExtensible)

DRV:[b]64bit:[/b] - [2012-08-23 16:12:16 | 000,029,696 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\terminpt.sys -- (terminpt)

DRV:[b]64bit:[/b] - [2012-08-23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)

DRV:[b]64bit:[/b] - [2012-08-23 16:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)

DRV:[b]64bit:[/b] - [2012-08-23 16:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:[b]64bit:[/b] - [2012-04-16 11:01:52 | 000,020,784 | ---- | M] (Portrait Displays, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\PdiPorts.sys -- (PdiPorts)

DRV:[b]64bit:[/b] - [2012-03-01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:[b]64bit:[/b] - [2011-11-13 14:31:16 | 000,055,936 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.1)

DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:[b]64bit:[/b] - [2011-03-11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:[b]64bit:[/b] - [2010-11-29 05:50:38 | 000,044,672 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)

DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tsusbhub.sys -- (tsusbhub)

DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,088,960 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Synth3dVsc.sys -- (Synth3dVsc)

DRV:[b]64bit:[/b] - [2010-11-21 05:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)

DRV:[b]64bit:[/b] - [2010-11-21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:[b]64bit:[/b] - [2010-06-17 17:15:36 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie64.sys -- (AtiPcie)

DRV:[b]64bit:[/b] - [2010-02-18 09:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64)

DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:[b]64bit:[/b] - [2009-06-10 22:35:42 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)

DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV - [2013-11-21 10:22:08 | 000,115,448 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys -- (ISODrive)

DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)





[color=#E56717]========== Standard Registry (SafeList) ==========[/color]





[color=#E56717]========== Internet Explorer ==========[/color]



IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds & ts=1407841429 & from=cor & uid=WDCXWD6400EADS-22M2B0XXX_WD-WCAV5724092940929 & q={searchTerms}

IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds & ts=1407841429 & from=cor & uid=WDCXWD6400EADS-22M2B0XXX_WD-WCAV5724092940929 & q={searchTerms}

IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank

IE:[b]64bit:[/b] - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: " URL " = http://www.bing.com/search?q={searchTerms} & FORM=IE8SRC

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds & ts=1407841429 & from=cor & uid=WDCXWD6400EADS-22M2B0XXX_WD-WCAV5724092940929 & q={searchTerms}

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds & ts=1407841429 & from=cor & uid=WDCXWD6400EADS-22M2B0XXX_WD-WCAV5724092940929 & q={searchTerms}

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: " URL " = http://www.bing.com/search?q={searchTerms} & FORM=IE8SRC



IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank

IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: " URL " = http://www.bing.com/search?q={searchTerms} & src=IE-SearchBox & FORM=IE11SR

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: " ProxyEnable " = 0



[color=#E56717]========== FireFox ==========[/color]



FF - prefs.js..extensions.enabledAddons: faststartff%40gmail.com:4.3.0

FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:31.0





FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll File not found

FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.11.2: M:\minecraft\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.11.2: M:\minecraft\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)



FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-07-23 19:58:08 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\faststartff@gmail.com: C:\Users\Kuba\AppData\Roaming\Mozilla\Firefox\Profiles\fauh54du.default\extensions\faststartff@gmail.com [2014-08-12 13:03:50 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 31.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 31.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins



[2014-07-24 17:45:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kuba\AppData\Roaming\mozilla\Extensions

[2014-08-13 09:31:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kuba\AppData\Roaming\mozilla\Firefox\Profiles\fauh54du.default\extensions

[2014-08-12 13:03:50 | 000,000,000 | ---D | M] ( " Fast Start " ) -- C:\Users\Kuba\AppData\Roaming\mozilla\Firefox\Profiles\fauh54du.default\extensions\faststartff@gmail.com

[2014-07-25 10:03:53 | 000,967,685 | ---- | M] () (No name found) -- C:\Users\Kuba\AppData\Roaming\mozilla\firefox\profiles\fauh54du.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

[2014-07-24 17:45:29 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions

[2014-07-24 17:45:29 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}



[color=#E56717]========== Chrome ==========[/color]



CHR - Extension: Dokumenty Google = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.7_0\

CHR - Extension: Dysk Google = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\

CHR - Extension: YouTube = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\

CHR - Extension: Adblock Plus = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.8.3_0\

CHR - Extension: Szukaj w Google = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\

CHR - Extension: PHD-V1.4 = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbobpneggpkcfkeefncbjelbklflhbdb\14863.1418.7172_0\

CHR - Extension: avast! Online Security = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2022.121_0\

CHR - Extension: Google Wallet = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\

CHR - Extension: Gmail = C:\Users\Kuba\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\



O1 HOSTS File: ([2009-06-10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O2:[b]64bit:[/b] - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation)

O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - M:\minecraft\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - M:\minecraft\bin\jp2ssv.dll (Oracle Corporation)

O4:[b]64bit:[/b] - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)

O4:[b]64bit:[/b] - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)

O4:[b]64bit:[/b] - HKLM..\Run: [ShadowPlay] C:\Windows\SysNative\nvspcap64.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)

O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)

F3:[b]64bit:[/b] - HKCU WinNT: Load - (C:\Users\Kuba\LOCALS~1\Temp\msnxiy.exe) - File not found

F3 - HKCU WinNT: Load - (C:\Users\Kuba\LOCALS~1\Temp\msnxiy.exe) - File not found

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O8:[b]64bit:[/b] - Extra context menu item: E & ksport do programu Microsoft Excel - res://C:\Program Files (x86)\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found

O8:[b]64bit:[/b] - Extra context menu item: E & ksportuj do programu Microsoft Excel - res://C:\Program Files (x86)\MICROS~1\Office12\EXCEL.EXE/3000 File not found

O8 - Extra context menu item: E & ksport do programu Microsoft Excel - res://C:\Program Files (x86)\MICROS~1\OFFICE11\EXCEL.EXE/3000 File not found

O8 - Extra context menu item: E & ksportuj do programu Microsoft Excel - res://C:\Program Files (x86)\MICROS~1\Office12\EXCEL.EXE/3000 File not found

O9 - Extra Button: Wy[lij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : Wy[lij & do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)

O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files (x86)\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)

O13[b]64bit:[/b] - gopher Prefix: missing

O13 - gopher Prefix: missing

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C5547009-0F46-485B-9B6B-5423BE97A19B}: DhcpNameServer = 192.168.0.1

O18:[b]64bit:[/b] - Protocol\Handler\grooveLocalGWS - No CLSID value found

O18:[b]64bit:[/b] - Protocol\Handler\msdaipp - No CLSID value found

O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found

O18:[b]64bit:[/b] - Protocol\Handler\msdaipp\oledb - No CLSID value found

O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found

O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap - No CLSID value found

O18:[b]64bit:[/b] - Protocol\Handler\mso-offdap11 - No CLSID value found

O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\MICROS~1\Office12\GRA32A~1.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)

O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation)

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2006-11-20 22:24:19 | 003,170,304 | R--- | M] () - G:\Autorun.exe -- [ CDFS ]

O32 - AutoRun File - [2006-11-17 12:31:58 | 000,000,045 | R--- | M] () - G:\autorun.inf -- [ CDFS ]

O33 - MountPoints2\{f5459e7f-129c-11e4-b3b0-d43d7e35c0b6}\Shell - " " = AutoRun

O33 - MountPoints2\{f5459e7f-129c-11e4-b3b0-d43d7e35c0b6}\Shell\AutoRun\command - " " = G:\autorun.exe -- [2006-11-20 22:24:19 | 003,170,304 | R--- | M] ()

O34 - HKLM BootExecute: (autocheck autochk *)

O35:[b]64bit:[/b] - HKLM\..comfile [open] -- " %1 " %*

O35:[b]64bit:[/b] - HKLM\..exefile [open] -- " %1 " %*

O35 - HKLM\..comfile [open] -- " %1 " %*

O35 - HKLM\..exefile [open] -- " %1 " %*

O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- " %1 " %*

O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- " %1 " %*

O37 - HKLM\...com [@ = comfile] -- " %1 " %*

O37 - HKLM\...exe [@ = exefile] -- " %1 " %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)



[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]



[2014-08-24 19:20:08 | 000,000,000 | ---D | C] -- C:\Users\Kuba\Desktop\emergency_4_(global_fighters_for_life)-pc-pl-2006-ce1

[2014-08-19 19:24:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

[2014-08-19 19:24:06 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight

[2014-08-19 19:24:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight

[2014-08-13 11:32:07 | 000,000,000 | R--D | C] -- C:\Users\Kuba\Documents\Scanned Documents

[2014-08-13 11:32:07 | 000,000,000 | ---D | C] -- C:\Users\Kuba\Documents\Fax

[2014-08-13 09:42:00 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner

[2014-08-13 09:30:43 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt

[2014-08-12 14:05:17 | 000,061,584 | ---- | C] (StdLib) -- C:\Windows\SysNative\drivers\{c5e48979-bd7f-4cf7-9b73-2482a67a4f37}Gw64.sys

[2014-08-12 13:42:58 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\ABBYY

[2014-08-12 13:42:57 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Local\ABBYY

[2014-08-12 13:38:11 | 000,000,000 | ---D | C] -- C:\ProgramData\ABBYY

[2014-08-12 13:34:40 | 000,000,000 | ---D | C] -- C:\Temp

[2014-08-12 13:08:14 | 000,000,000 | ---D | C] -- C:\ProgramData\374311380

[2014-08-12 13:05:50 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\Nitro

[2014-08-12 13:05:50 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\FileOpen

[2014-08-12 13:05:50 | 000,000,000 | ---D | C] -- C:\ProgramData\FileOpen

[2014-08-12 13:05:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Nitro

[2014-08-12 13:04:36 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\Downloaded Installations

[2014-08-12 13:04:10 | 000,000,000 | ---D | C] -- C:\ProgramData\IePluginServices

[2014-08-12 13:04:00 | 000,000,000 | ---D | C] -- C:\ProgramData\WindowsMangerProtect

[2014-08-12 13:03:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ClearThink

[2014-08-12 13:03:13 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Local\WorldofTanks

[2014-08-07 10:41:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle

[2014-08-07 10:40:59 | 000,272,808 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe

[2014-08-07 10:40:55 | 000,176,552 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe

[2014-08-07 10:40:55 | 000,176,040 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe

[2014-08-07 10:40:55 | 000,098,216 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll

[2014-08-07 10:37:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java

[2014-08-07 10:37:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

[2014-08-07 10:36:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun

[2014-08-07 10:35:17 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller

[2014-08-07 10:35:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VS Revo Group

[2014-08-07 10:28:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft

[2014-08-06 18:52:47 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Local\Diagnostics

[2014-08-06 18:43:28 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\.minecraft

[2014-08-04 15:28:34 | 000,000,000 | ---D | C] -- C:\Users\Kuba\Documents\My Games

[2014-08-04 15:26:38 | 000,000,000 | ---D | C] -- C:\Users\Kuba\Local Settings

[2014-08-04 15:24:00 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll

[2014-08-04 15:24:00 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll

[2014-08-04 15:24:00 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll

[2014-08-04 15:24:00 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll

[2014-08-04 15:23:58 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll

[2014-08-04 15:23:58 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll

[2014-08-04 15:21:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\cdp.pl

[2014-08-04 14:29:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2

[2014-08-04 14:29:25 | 000,000,000 | ---D | C] -- C:\Users\Kuba\Documents\Euro Truck Simulator 2

[2014-08-02 22:18:30 | 040,670,208 | ---- | C] (Crytek GmbH) -- C:\Users\Kuba\Desktop\Crysis2.exe

[2014-08-02 22:00:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Solidshield

[2014-08-02 21:57:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts

[2014-08-02 21:57:23 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Core

[2014-08-02 19:19:14 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\uTorrent

[2014-08-01 10:19:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraISO

[2014-08-01 10:19:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\EZB Systems

[2014-08-01 10:19:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\UltraISO

[2014-08-01 10:19:01 | 000,000,000 | ---D | C] -- C:\Users\Kuba\Documents\My ISO Files

[2014-08-01 10:18:26 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Local\Programs

[2014-07-31 20:22:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Works

[2014-07-31 20:21:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio

[2014-07-31 20:19:29 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office

[2014-07-31 20:19:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio 8

[2014-07-31 20:19:01 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Local\Microsoft Help

[2014-07-31 20:18:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help

[2014-07-31 12:54:32 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\DisplayTune

[2014-07-31 12:54:32 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Local\DisplayTune

[2014-07-31 12:52:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmartControl

[2014-07-31 12:52:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Portrait Displays

[2014-07-31 12:52:08 | 000,020,784 | ---- | C] (Portrait Displays, Inc.) -- C:\Windows\SysNative\drivers\PdiPorts.sys

[2014-07-31 12:52:01 | 001,392,671 | ---- | C] (Microsoft Corporation) -- C:\Windows\msvbvm60.dll

[2014-07-31 12:52:01 | 001,093,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\mfc80u.dll

[2014-07-31 12:52:01 | 000,974,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\mfc70.dll

[2014-07-31 12:52:01 | 000,487,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\msvcp70.dll

[2014-07-31 12:52:01 | 000,344,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\msvcr70.dll

[2014-07-31 12:52:01 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\mfcm80.dll

[2014-07-31 12:52:01 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\mfcm80u.dll

[2014-07-31 12:52:00 | 001,105,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\mfc80.dll

[2014-07-31 12:52:00 | 000,773,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\msvcr100.dll

[2014-07-31 12:52:00 | 000,632,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\msvcr80.dll

[2014-07-31 12:52:00 | 000,554,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\msvcp80.dll

[2014-07-31 12:52:00 | 000,479,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\msvcm80.dll

[2014-07-31 12:52:00 | 000,421,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\msvcp100.dll

[2014-07-31 12:52:00 | 000,372,736 | ---- | C] (Intel Corporation) -- C:\Windows\ijl15.dll

[2014-07-31 12:52:00 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\atl80.dll

[2014-07-31 12:51:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Portrait Displays

[2014-07-31 12:51:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Philips Display

[2014-07-30 20:23:30 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\NVIDIA

[2014-07-30 13:49:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Hewlett-Packard

[2014-07-30 13:45:30 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Local\Adobe

[2014-07-30 13:45:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe

[2014-07-30 13:45:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe

[2014-07-30 13:44:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe

[2014-07-27 13:03:55 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\ms-MY

[2014-07-27 13:02:01 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft

[2014-07-27 13:02:00 | 000,000,000 | R--D | C] -- C:\Users\Kuba\Podcasts

[2014-07-26 09:45:18 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Roaming\Opera Software

[2014-07-26 09:45:18 | 000,000,000 | ---D | C] -- C:\Users\Kuba\AppData\Local\Opera Software

[2014-07-26 09:45:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Opera

[1 C:\Windows\*.tmp files - & gt; C:\Windows\*.tmp - & gt; ]



[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]



[2014-08-24 21:09:26 | 000,001,816 | ---- | M] () -- C:\Users\Kuba\Desktop\SmartControl.lnk

[2014-08-24 21:08:00 | 000,001,044 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2014-08-24 20:49:39 | 000,026,576 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2014-08-24 20:49:39 | 000,026,576 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2014-08-24 20:42:21 | 000,001,040 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2014-08-24 20:42:09 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2014-08-24 20:42:06 | 3220,578,304 | -HS- | M] () -- C:\hiberfil.sys

[2014-08-24 20:33:00 | 000,000,930 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2014-08-24 19:19:30 | 1588,792,844 | R--- | M] () -- C:\Users\Kuba\Desktop\emergency_4_(global_fighters_for_life)-pc-pl-2006-ce1.rar

[2014-08-18 18:58:42 | 000,272,428 | ---- | M] () -- C:\Users\Kuba\Desktop\CRD_Faktura_indywidualna_250-493-7481-2492_14_08_F008_X.pdf

[2014-08-13 15:30:42 | 001,669,178 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2014-08-13 15:30:42 | 000,740,096 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat

[2014-08-13 15:30:42 | 000,653,928 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2014-08-13 15:30:42 | 000,155,670 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat

[2014-08-13 15:30:42 | 000,121,800 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2014-08-13 11:39:18 | 000,297,157 | ---- | M] () -- C:\Users\Kuba\Desktop\Obraz.jpg

[2014-08-13 11:39:18 | 000,171,302 | ---- | M] () -- C:\Users\Kuba\Desktop\Obraz (2).jpg

[2014-08-13 09:42:02 | 000,000,843 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk

[2014-08-13 09:32:58 | 000,384,016 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

[2014-08-13 09:13:26 | 000,002,216 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk

[2014-08-11 06:20:50 | 000,061,584 | ---- | M] (StdLib) -- C:\Windows\SysNative\drivers\{c5e48979-bd7f-4cf7-9b73-2482a67a4f37}Gw64.sys

[2014-08-07 10:40:46 | 000,098,216 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll

[2014-08-07 10:40:44 | 000,272,808 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe

[2014-08-07 10:40:44 | 000,176,552 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe

[2014-08-07 10:40:44 | 000,176,040 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe

[2014-08-07 10:35:17 | 000,001,291 | ---- | M] () -- C:\Users\Kuba\Desktop\Revo Uninstaller.lnk

[2014-08-07 10:28:29 | 000,000,561 | ---- | M] () -- C:\Users\Public\Desktop\Minecraft.lnk

[2014-08-05 21:54:08 | 000,259,715 | ---- | M] () -- C:\Users\Kuba\Desktop\10515069_705633112850258_4209306901565669234_o.jpg

[2014-08-05 21:50:42 | 000,251,675 | ---- | M] () -- C:\Users\Kuba\Desktop\10428126_715568241856745_6442937345860349405_o.jpg

[2014-08-04 15:21:29 | 000,000,653 | ---- | M] () -- C:\Users\Public\Desktop\Farming Simulator 2013.lnk

[2014-08-04 14:29:26 | 000,000,814 | ---- | M] () -- C:\Users\Public\Desktop\Euro Truck Simulator 2.lnk

[2014-08-02 19:10:28 | 000,000,000 | -H-- | M] () -- C:\Users\Kuba\Documents\Default.rdp

[2014-08-01 10:19:03 | 000,001,034 | ---- | M] () -- C:\Users\Public\Desktop\UltraISO.lnk

[2014-07-27 13:03:57 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_ZuneDriver_01_09_00.Wdf

[2014-07-27 13:03:54 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_winusb_01009.Wdf

[2014-07-26 09:45:14 | 000,001,162 | ---- | M] () -- C:\Users\Public\Desktop\Opera.lnk

[1 C:\Windows\*.tmp files - & gt; C:\Windows\*.tmp - & gt; ]



[color=#E56717]========== Files Created - No Company Name ==========[/color]



[2014-08-24 18:55:39 | 1588,792,844 | R--- | C] () -- C:\Users\Kuba\Desktop\emergency_4_(global_fighters_for_life)-pc-pl-2006-ce1.rar

[2014-08-18 19:46:47 | 000,272,428 | ---- | C] () -- C:\Users\Kuba\Desktop\CRD_Faktura_indywidualna_250-493-7481-2492_14_08_F008_X.pdf

[2014-08-13 11:33:59 | 000,171,302 | ---- | C] () -- C:\Users\Kuba\Desktop\Obraz (2).jpg

[2014-08-13 11:32:57 | 000,297,157 | ---- | C] () -- C:\Users\Kuba\Desktop\Obraz.jpg

[2014-08-13 09:42:02 | 000,000,843 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk

[2014-08-07 10:35:17 | 000,001,291 | ---- | C] () -- C:\Users\Kuba\Desktop\Revo Uninstaller.lnk

[2014-08-07 10:28:29 | 000,000,561 | ---- | C] () -- C:\Users\Public\Desktop\Minecraft.lnk

[2014-08-05 21:54:07 | 000,259,715 | ---- | C] () -- C:\Users\Kuba\Desktop\10515069_705633112850258_4209306901565669234_o.jpg

[2014-08-05 21:50:41 | 000,251,675 | ---- | C] () -- C:\Users\Kuba\Desktop\10428126_715568241856745_6442937345860349405_o.jpg

[2014-08-04 15:21:29 | 000,000,653 | ---- | C] () -- C:\Users\Public\Desktop\Farming Simulator 2013.lnk

[2014-08-04 14:29:25 | 000,000,814 | ---- | C] () -- C:\Users\Public\Desktop\Euro Truck Simulator 2.lnk

[2014-08-02 19:10:28 | 000,000,000 | -H-- | C] () -- C:\Users\Kuba\Documents\Default.rdp

[2014-08-01 10:19:03 | 000,001,034 | ---- | C] () -- C:\Users\Public\Desktop\UltraISO.lnk

[2014-07-31 12:55:47 | 000,001,816 | ---- | C] () -- C:\Users\Kuba\Desktop\SmartControl.lnk

[2014-07-31 12:52:38 | 000,007,432 | ---- | C] () -- C:\Windows\SysWow64\Machnm32.sys

[2014-07-31 12:52:08 | 000,007,425 | ---- | C] () -- C:\pdiports.cat

[2014-07-31 12:52:08 | 000,002,853 | ---- | C] () -- C:\pdiports64.inf

[2014-07-30 13:45:22 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk

[2014-07-27 13:03:57 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_ZuneDriver_01_09_00.Wdf

[2014-07-27 13:03:54 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_winusb_01009.Wdf

[2014-07-26 09:45:15 | 000,001,162 | ---- | C] () -- C:\Users\Public\Desktop\Opera.lnk

[2014-07-26 09:45:15 | 000,001,162 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk

[2014-07-23 21:25:43 | 000,000,412 | ---- | C] () -- C:\Windows\ODBC.INI

[2014-07-23 21:03:09 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl

[2014-01-15 18:19:46 | 001,640,168 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI



[color=#E56717]========== ZeroAccess Check ==========[/color]



[2009-07-14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini



[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64



[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]



[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64



[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]



[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

" " = C:\Windows\SysNative\shell32.dll -- [2013-07-26 04:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)

" ThreadingModel " = Apartment



[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

" " = %SystemRoot%\system32\shell32.dll -- [2013-07-26 03:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)

" ThreadingModel " = Apartment



[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

" " = C:\Windows\SysNative\wbem\fastprox.dll -- [2009-07-14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)

" ThreadingModel " = Free



[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

" " = %systemroot%\system32\wbem\fastprox.dll -- [2010-11-21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)

" ThreadingModel " = Free



[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

" " = C:\Windows\SysNative\wbem\wbemess.dll -- [2009-07-14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)

" ThreadingModel " = Both



[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]



[color=#E56717]========== Alternate Data Streams ==========[/color]



@Alternate Data Stream - 164 bytes - & gt; C:\Users\Kuba\Desktop\Obraz.jpg:3or4kl4x13tuuug3Byamue2s4b

@Alternate Data Stream - 164 bytes - & gt; C:\Users\Kuba\Desktop\Obraz (2).jpg:3or4kl4x13tuuug3Byamue2s4b



& lt; End of report & gt;


Pobierz plik - link do postu