Otwieranie folderu podczas startu systemu

Question

Witam. Od pewnego czasu przy uruchamianiu komputera system "otwiera" folder Mój komputer. Skan nodem32 i innymi nic nie pokazał. Również OTL nie napra...

Anonymous · Answer

wpisz w pasku uruchom: "msconfig" i przejdź do zakładki "uruchamianie" zobacz tam, może masz coś zaznaczone na stracie co otwiera "mój komputer"

liptonp · Answer

Nie to sprawdziłem na początku

GallusAnonimus · Answer

Zresetuj ustawienia folderów (Opcje Folderów -> zakładka Widok -> przycisk Resetuj foldery). Przed restartem upewnij się, że masz wszystkie okienka folderów pozamykane.

sPeRaCz.PL · Answer

Tudzież w opcjach folderów odznacz "przywróć otwarte okna po zalogowaniu".

liptonp · Answer

No niestety nic nie pomaga

ak6 · Answer

http://answers.microsoft.com/pl-pl/windows/fo...0a?msgId=e7c33fdf-ba5c-4594-96a8-9606d79ffe96

p1orun · Answer

usuń wszytko z auto startu który jest w menu start miałem podobny problem z notatnikiem i właśnie w autor starcie utworzył się skrót

liptonp · Answer

autostart pusty. ktoś ma jeszcze jakieś pomysły?

Kolobos · Answer

Daj w zalaczniku oba logi z OTL, przed skanowaniem zaznacz: wszyscy uzytkownicy, lop oraz purity.

liptonp · Answer

Log z OTL:OTL logfile created on: 2013-06-21 12:54:33 - Run 2OTL by OldTimer - Version 3.2.57.0 Folder = \INFORMATYK\wymiana\Bezpieczeństwo_sieci64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstationInternet Explorer (Version = 9.10.9200.16614)Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 5,90 Gb Total Physical Memory | 3,62 Gb Available Physical Memory | 61,26% Memory free11,81 Gb Paging File | 9,48 Gb Available in Paging File | 80,31% Paging File freePaging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)Drive C: | 146,48 Gb Total Space | 70,82 Gb Free Space | 48,35% Space Free | Partition Type: NTFSDrive D: | 765,30 Gb Total Space | 416,95 Gb Free Space | 54,48% Space Free | Partition Type: NTFS Computer Name: Y580 | User Name: Przemysław Libera | Logged in as Administrator.Boot Mode: Normal | Scan Mode: All users | Include 64bit ScansCompany Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2013-06-13 07:46:25 | 001,855,880 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exePRC - [2013-06-07 14:39:25 | 004,150,112 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exePRC - [2013-05-21 20:57:28 | 000,920,472 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exePRC - [2013-05-02 09:09:35 | 000,216,968 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.21.145\GoogleCrashHandler.exePRC - [2013-02-28 22:46:23 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exePRC - [2012-12-14 16:42:22 | 000,316,360 | ---- | M] (Azureus Software, Inc) -- C:\Program Files (x86)\Vuze\Azureus.exePRC - [2012-08-14 08:34:44 | 000,596,992 | ---- | M] (OldTimer Tools) -- \INFORMATYK\wymiana\Bezpieczeństwo_sieci\OTL.exePRC - [2012-07-04 11:17:42 | 000,999,704 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Endpoint Antivirus\x86\ekrn.exePRC - [2012-02-28 11:20:02 | 000,363,800 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exePRC - [2012-02-28 11:19:56 | 000,277,784 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exePRC - [2012-02-28 11:19:46 | 000,161,560 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exePRC - [2011-11-29 20:04:56 | 000,013,592 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exePRC - [2011-01-28 23:29:36 | 000,136,488 | ---- | M] (CyberLink) -- C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exePRC - [2008-03-20 12:04:46 | 002,127,296 | ---- | M] (Gadu-Gadu S.A.) -- C:\Program Files (x86)\Gadu-Gadu\gg.exe  ========== Modules (No Company Name) ========== MOD - [2013-06-13 07:46:24 | 016,033,160 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dllMOD - [2013-05-22 09:41:20 | 000,028,160 | ---- | M] () -- C:\Users\Przemysław Libera\AppData\Roaming\Azureus\plugins\azutp\win32\utp.dllMOD - [2013-05-21 20:57:28 | 003,128,728 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dllMOD - [2013-05-16 06:54:56 | 013,199,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\153143f74d840484b510d8cf5187796b\System.Windows.Forms.ni.dllMOD - [2013-05-16 06:54:54 | 007,069,696 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\2f9e0112e10f9e70d3430d0be9863976\System.Core.ni.dllMOD - [2013-02-17 23:27:19 | 000,194,048 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\CustomMarshalers\14850aef08b8af036fd6f1e5b38a3719\CustomMarshalers.ni.dllMOD - [2013-02-17 02:48:33 | 001,667,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\b573c6a62bb88df0ee2af59b6a8ca910\System.Drawing.ni.dllMOD - [2013-02-17 02:48:32 | 009,094,656 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\15872842e3e63ddf0f720f406706198e\System.ni.dllMOD - [2013-02-17 02:48:28 | 014,412,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\3f95a6d480ed1ebe45cf27b770ba94ed\mscorlib.ni.dllMOD - [2012-12-14 16:42:22 | 000,053,160 | ---- | M] () -- C:\Program Files (x86)\Vuze\aereg.dllMOD - [2011-03-17 01:11:16 | 004,297,568 | ---- | M] () -- C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odfMOD - [2010-12-21 02:15:30 | 001,041,248 | ---- | M] () -- C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dllMOD - [2010-10-25 15:13:40 | 002,893,216 | ---- | M] () -- C:\Program Files (x86)\Adobe\Acrobat 10.0\PDFMaker\Common\AdobePDFMakerX.dllMOD - [2008-03-20 11:17:48 | 000,106,496 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu\libiax2.dllMOD - [2008-03-20 11:17:44 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu\libjb.dllMOD - [2007-10-25 13:51:16 | 000,198,656 | ---- | M] () -- C:\Program Files (x86)\Gadu-Gadu\libcurl.dll  ========== Win32 Services (SafeList) ========== SRV:64bit: - [2013-01-22 18:35:38 | 004,774,208 | ---- | M] (RealVNC Ltd) [On_Demand | Stopped] -- C:\Program Files\RealVNC\VNC Server\vncserver.exe -- (vncserver)SRV:64bit: - [2012-07-04 11:18:44 | 000,190,208 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Endpoint Antivirus\EShaSrv.exe -- (ESHASRV)SRV:64bit: - [2012-07-04 11:18:26 | 000,035,720 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Endpoint Antivirus\EHttpSrv.exe -- (EhttpSrv)SRV:64bit: - [2012-07-04 11:17:42 | 000,999,704 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Endpoint Antivirus\x86\ekrn.exe -- (ekrn)SRV:64bit: - [2012-02-02 22:29:52 | 000,628,448 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)SRV:64bit: - [2012-02-01 18:31:02 | 000,945,440 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe -- (btwdins)SRV:64bit: - [2011-12-23 18:51:22 | 000,120,160 | ---- | M] (Lenovo) [Auto | Stopped] -- C:\Windows\SysNative\NSDSvc.exe -- (NSDSvc)SRV:64bit: - [2011-12-08 10:44:04 | 000,594,704 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe -- (ZeroConfigService)SRV:64bit: - [2011-12-08 10:43:56 | 000,273,168 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)SRV:64bit: - [2011-12-08 10:43:48 | 000,618,256 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)SRV:64bit: - [2011-12-08 10:43:44 | 000,148,752 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)SRV:64bit: - [2011-12-05 09:30:50 | 000,659,968 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3)SRV:64bit: - [2011-12-05 08:55:36 | 000,135,952 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr)SRV:64bit: - [2010-09-22 18:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)SRV:64bit: - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)SRV - [2013-06-13 07:46:26 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)SRV - [2013-06-07 14:39:25 | 004,150,112 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe -- (TeamViewer8)SRV - [2013-05-21 20:57:28 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)SRV - [2013-02-28 22:46:23 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)SRV - [2013-02-28 19:09:08 | 000,161,384 | R--- | M] (Skype Technologies) [Disabled | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)SRV - [2012-12-29 12:34:47 | 001,260,472 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)SRV - [2012-12-19 10:49:34 | 000,732,648 | ---- | M] (Nokia) [Disabled | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)SRV - [2012-06-07 06:03:02 | 000,276,288 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)SRV - [2012-02-28 11:20:02 | 000,363,800 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)SRV - [2012-02-28 11:19:56 | 000,277,784 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)SRV - [2012-02-28 11:19:46 | 000,161,560 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service)SRV - [2011-11-29 20:04:56 | 000,013,592 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)SRV - [2011-06-06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)SRV - [2010-03-18 23:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)SRV - [2010-03-10 15:26:48 | 000,189,728 | ---- | M] (Protexis Inc.) [Disabled | Stopped] -- c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)SRV - [2010-02-19 14:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)  ========== Driver Services (SafeList) ========== DRV:64bit: - [2013-02-28 08:46:05 | 000,294,248 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\VMM.sys -- (vmm)DRV:64bit: - [2013-01-22 18:08:56 | 000,004,608 | ---- | M] (RealVNC Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vncmirror.sys -- (vncmirror)DRV:64bit: - [2012-12-29 12:34:47 | 000,030,648 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers
vpciflt.sys -- (nvpciflt)DRV:64bit: - [2012-12-11 20:44:44 | 000,258,296 | ---- | M] (Pismo Technic Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\pfmfs_7DB.sys -- (pfmfs_7DB)DRV:64bit: - [2012-11-28 19:49:00 | 000,035,112 | ---- | M] (TeamViewer GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers	eamviewervpn.sys -- (teamviewervpn)DRV:64bit: - [2012-11-09 16:33:30 | 000,171,008 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers
mwcdnsux64.sys -- (nmwcdnsux64)DRV:64bit: - [2012-11-09 16:33:30 | 000,027,136 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc)DRV:64bit: - [2012-11-09 16:33:30 | 000,019,968 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)DRV:64bit: - [2012-11-09 16:33:30 | 000,012,800 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers
mwcdnsucx64.sys -- (nmwcdnsucx64)DRV:64bit: - [2012-11-09 16:33:30 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt)DRV:64bit: - [2012-11-09 16:33:30 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)DRV:64bit: - [2012-10-17 14:53:46 | 000,026,112 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)DRV:64bit: - [2012-08-15 14:10:26 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)DRV:64bit: - [2012-08-15 05:08:17 | 000,057,952 | ---- | M] (Lenovo) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\fbfmon.sys -- (fbfmon)DRV:64bit: - [2012-08-15 05:08:17 | 000,013,408 | ---- | M] (Lenovo) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\BPntDrv.sys -- (BPntDrv)DRV:64bit: - [2012-08-15 05:07:59 | 000,039,008 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\LhdX64.sys -- (LHDmgr)DRV:64bit: - [2012-08-15 05:07:59 | 000,030,816 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AcpiVpc.sys -- (ACPIVPC)DRV:64bit: - [2012-07-10 11:16:32 | 000,213,416 | ---- | M] (ESET) [File_System | System | Running] -- C:\Windows\SysNative\drivers\eamonm.sys -- (eamonm)DRV:64bit: - [2012-06-07 05:49:08 | 014,760,096 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)DRV:64bit: - [2012-05-21 09:25:32 | 000,789,824 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc)DRV:64bit: - [2012-05-21 09:25:32 | 000,357,184 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub)DRV:64bit: - [2012-05-21 09:25:32 | 000,019,264 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs)DRV:64bit: - [2012-03-29 12:03:56 | 000,140,752 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\epfwwfpr.sys -- (epfwwfpr)DRV:64bit: - [2012-03-29 12:03:54 | 000,152,136 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ehdrv.sys -- (ehdrv)DRV:64bit: - [2012-03-02 12:49:20 | 000,104,048 | ---- | M] (Qualcomm Atheros Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C)DRV:64bit: - [2012-02-02 05:07:18 | 000,615,976 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwampfl.sys -- (btwampfl)DRV:64bit: - [2012-02-02 05:07:18 | 000,134,696 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\bcbtums.sys -- (bcbtums)DRV:64bit: - [2012-02-02 05:07:12 | 000,211,496 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt)DRV:64bit: - [2012-02-02 05:07:12 | 000,184,360 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio)DRV:64bit: - [2012-02-02 05:07:12 | 000,039,976 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap)DRV:64bit: - [2012-02-02 05:07:12 | 000,021,544 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid)DRV:64bit: - [2012-01-27 10:00:28 | 000,109,056 | ---- | M] (Ozmo Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hswpan.sys -- (hswpan)DRV:64bit: - [2012-01-26 18:37:24 | 000,034,200 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)DRV:64bit: - [2012-01-26 18:37:24 | 000,025,496 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)DRV:64bit: - [2011-12-23 17:45:50 | 000,024,160 | ---- | M] (Lenovo Corporation") [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers
sd.sys -- (NSD)DRV:64bit: - [2011-12-21 21:57:42 | 000,059,488 | ---- | M] (Lenovo Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\Nsdfltr.sys -- (Nsdfltr)DRV:64bit: - [2011-12-16 03:04:02 | 000,411,920 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)DRV:64bit: - [2011-12-06 13:23:10 | 000,331,264 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)DRV:64bit: - [2011-12-05 09:22:58 | 000,195,584 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP)DRV:64bit: - [2011-12-05 09:22:58 | 000,195,584 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL)DRV:64bit: - [2011-12-01 22:51:00 | 011,417,088 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64)DRV:64bit: - [2011-11-29 19:40:32 | 000,568,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)DRV:64bit: - [2011-11-09 19:04:14 | 000,060,184 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)DRV:64bit: - [2011-10-10 09:56:15 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)DRV:64bit: - [2011-10-10 09:56:15 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)DRV:64bit: - [2011-09-06 17:28:38 | 008,208,488 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\driverstsuvc.sys -- (rtsuvc)DRV:64bit: - [2011-08-25 04:21:00 | 000,173,656 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR)DRV:64bit: - [2011-01-28 23:29:58 | 000,031,088 | ---- | M] (CyberLink Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\clwvd.sys -- (clwvd)DRV:64bit: - [2010-11-21 05:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)DRV:64bit: - [2010-11-21 05:23:48 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)DRV:64bit: - [2010-11-21 05:23:47 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)DRV:64bit: - [2010-11-21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)DRV:64bit: - [2010-11-21 05:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)DRV:64bit: - [2010-09-23 00:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr)DRV:64bit: - [2009-07-21 14:20:06 | 000,121,840 | ---- | M] (CyberLink) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wsvd.sys -- (wsvd)DRV:64bit: - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)DRV:64bit: - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)DRV:64bit: - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)DRV:64bit: - [2009-07-14 01:21:48 | 000,038,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers	pm.sys -- (TPM)DRV:64bit: - [2009-06-15 04:02:44 | 000,044,672 | ---- | M] (Advanced Card Systems Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\a38usb.sys -- (ACSSCR)DRV:64bit: - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)DRV:64bit: - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)DRV:64bit: - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)DRV:64bit: - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)DRV:64bit: - [2008-02-05 02:50:42 | 000,079,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VMNetSrv.sys -- (VPCNetS2)DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)  ========== Standard Registry (SafeList) ==========  ========== Internet Explorer ========== IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRCIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htmIE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRCIE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7  IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0   IE - HKU\S-1-5-21-286197290-2416854029-1394129047-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 03 E2 48 79 8C 5B CE 01 [binary data]IE - HKU\S-1-5-21-286197290-2416854029-1394129047-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}IE - HKU\S-1-5-21-286197290-2416854029-1394129047-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SRIE - HKU\S-1-5-21-286197290-2416854029-1394129047-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: ""FF - prefs.js..browser.search.defaultenginename,S: S", ""FF - prefs.js..browser.search.defaultthis.engineName: ""FF - prefs.js..browser.search.defaulturl: ""FF - prefs.js..browser.search.order.1: ""FF - prefs.js..browser.search.order.1,S: S", ""FF - prefs.js..browser.search.selectedEngine: "Google"FF - prefs.js..browser.search.selectedEngine,S: S", ""FF - prefs.js..browser.startup.homepage: "http://www.onet.pl/"FF - prefs.js..network.proxy.type: 0FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: ""FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: ""FF - prefs.js..browser.startup.homepage: ""FF - prefs.js..sweetim.toolbar.previous.keyword.URL: ""FF - user.js - File not found FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll File not foundFF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat
pWatWeb.dll (Microsoft Corporation)FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0
pctrl.dll ( Microsoft Corporation)FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin
pgeplugin.dll (Google)FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT
pIntelWebAPIIPT.dll (Intel Corporation)FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT
pIntelWebAPIUpdater.dll (Intel Corporation)FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.13.2: C:\Windows\SysWOW64
pDeployJava1.dll (Oracle Corporation)FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.13.2: C:\Program Files (x86)\Java\jre7\bin\plugin2
pjp2.dll (Oracle Corporation)FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat
pWatWeb.dll (Microsoft Corporation)FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0
pctrl.dll ( Microsoft Corporation)FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)FF - HKLM\Software\MozillaPlugins\@nokia.com/EnablerPlugin: C:\Program Files (x86)\Nokia\Nokia Suite
pNokiaSuiteEnabler.dll ( )FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files (x86)\Real Alternative\browser\plugins
ppl3260.dll (RealNetworks, Inc.)FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files (x86)\Real Alternative\browser\plugins
prpjplug.dll (RealNetworks, Inc.)FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not foundFF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.145
pGoogleUpdate3.dll (Google Inc.)FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.145
pGoogleUpdate3.dll (Google Inc.)FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR
ppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\web2pdfextension@web2pdf.adobedotcom: C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2013-05-31 07:28:50 | 000,000,000 | ---D | M]FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013-05-21 20:57:29 | 000,000,000 | ---D | M]FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013-05-31 07:28:56 | 000,000,000 | ---D | M]FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\eplgTb@eset.com: C:\Program Files\ESET\ESET Endpoint Antivirus\Mozilla Thunderbird [2013-02-16 22:12:47 | 000,000,000 | ---D | M] [2013-02-16 21:39:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Przemysław Libera\AppData\Roaming\Mozilla\Extensions[2013-06-19 09:49:53 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Przemysław Libera\AppData\Roaming\Mozilla\Firefox\Profiles\hn79z120.default\extensions[2013-05-21 20:57:29 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions[2013-05-21 20:57:29 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}File not found (No name found) -- C:\USERS\PRZEMYSĹ‚AW LIBERA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\HN79Z120.DEFAULT\EXTENSIONS\ARTUR.DUBOVOY@GMAIL.COM.XPI[2012-06-28 17:42:00 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins
pwachk.dll ========== Chrome ==========CHR - Extension: No name found = C:\Users\Przemysław Libera\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogkholdhdcediehgkongjnkhkabefcal\1\ O1 HOSTS File: ([2013-05-31 07:29:44 | 000,000,542 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hostsO1 - Hosts: 127.0.0.1 localhostO1 - Hosts: 127.0.0.1				activate.adobe.comO1 - Hosts: 127.0.0.1				practivate.adobe.comO1 - Hosts: 127.0.0.1				ereg.adobe.comO1 - Hosts: 127.0.0.1				activate.wip3.adobe.comO1 - Hosts: 127.0.0.1				wip3.adobe.comO1 - Hosts: 127.0.0.1				3dns-3.adobe.comO1 - Hosts: 127.0.0.1				3dns-2.adobe.comO1 - Hosts: 127.0.0.1				adobe-dns.adobe.comO1 - Hosts: 127.0.0.1				adobe-dns-2.adobe.comO1 - Hosts: 127.0.0.1				adobe-dns-3.adobe.comO1 - Hosts: 127.0.0.1				ereg.wip3.adobe.comO1 - Hosts: 127.0.0.1				activate-sea.adobe.comO1 - Hosts: 127.0.0.1				wwis-dubc1-vip60.adobe.comO1 - Hosts: 127.0.0.1				activate-sjc0.adobe.comO1 - Hosts: 127.0.0.1				adobe.activate.comO2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL (Microsoft Corporation)O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\PROGRA~2\ALLPLA~1\Iplex\IPLEXT~1.DLL (ALLCinema Ltd.)O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.O3 - HKU\S-1-5-21-286197290-2416854029-1394129047-1001\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)O4:64bit: - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe (ESET)O4 - HKLM..\Run: [] File not foundO4 - HKU\S-1-5-21-286197290-2416854029-1394129047-1001..\Run: [Gadu-Gadu] C:\Program Files (x86)\Gadu-Gadu\gg.exe (Gadu-Gadu S.A.)O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions presentO6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKU\S-1-5-21-286197290-2416854029-1394129047-1001\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKU\S-1-5-21-286197290-2416854029-1394129047-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145O7 - HKU\S-1-5-21-286197290-2416854029-1394129047-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0O8:64bit: - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)O8:64bit: - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)O8:64bit: - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)O8:64bit: - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)O8 - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)O13 - gopher Prefix: missingO15 - HKU\S-1-5-21-286197290-2416854029-1394129047-1001\..Trusted Domains: mks.com.pl ([www] http in Zaufane witryny)O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} http://www.mks.com.pl/skaner/SkanerOnline.cab (MksSkanerOnline Class)O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.127 194.204.152.34 194.204.159.1 127.0.0.1O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{607B9EF0-D4EC-4E93-A422-4EB792B660A0}: DhcpNameServer = 192.168.0.127 194.204.152.34 194.204.159.1 127.0.0.1O18:64bit: - Protocol\Handler\livecall - No CLSID value foundO18:64bit: - Protocol\Handler\msdaipp - No CLSID value foundO18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value foundO18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value foundO18:64bit: - Protocol\Handler\ms-help - No CLSID value foundO18:64bit: - Protocol\Handler\msnim - No CLSID value foundO18:64bit: - Protocol\Handler\skype4com - No CLSID value foundO18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value foundO18:64bit: - Protocol\Handler\wlpg - No CLSID value foundO18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\SYSTEM\OLEDB~1\MSDAIPP.DLL (Microsoft Corporation)O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)O20:64bit: - AppInit_DLLs: (C:\Windows\System32
vinitx.dll) - C:\Windows\SysNative
vinitx.dll (NVIDIA Corporation)O20 - AppInit_DLLs: (c:\Windows\SysWOW64
vinit.dll) - c:\Windows\SysWOW64
vinit.dll (NVIDIA Corporation)O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not foundO20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not foundO20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.O32 - HKLM CDRom: AutoRun - 1O34 - HKLM BootExecute: (autocheck autochk *)O35:64bit: - HKLM\..comfile [open] -- "%1" %*O35:64bit: - HKLM\..exefile [open] -- "%1" %*O35 - HKLM\..comfile [open] -- "%1" %*O35 - HKLM\..exefile [open] -- "%1" %*O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*O37 - HKLM\...com [@ = ComFile] -- "%1" %*O37 - HKLM\...exe [@ = exefile] -- "%1" %*O38 - SubSystems\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)O38 - SubSystems\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)O38 - SubSystems\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2013-06-21 08:38:48 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN[2013-06-21 07:55:20 | 000,000,000 | ---D | C] -- C:\Windows	emp[2013-06-21 07:38:02 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe[2013-06-21 07:38:02 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe[2013-06-21 07:38:02 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe[2013-06-18 08:21:14 | 000,000,000 | ---D | C] -- C:\Users\Przemysław Libera\AppData\Roaming\Expert PDF 7[2013-06-18 08:20:54 | 000,000,000 | ---D | C] -- C:\Users\Przemysław Libera\AppData\Roaming\Expert PDF Editor[2013-06-18 08:20:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visagesoft[2013-06-18 08:20:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Visagesoft[2013-06-14 08:42:06 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll[2013-06-14 08:42:06 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll[2013-06-13 15:30:42 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll[2013-06-13 15:30:42 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll[2013-06-13 15:30:42 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe[2013-06-13 15:30:42 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll[2013-06-13 15:30:42 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll[2013-06-13 15:30:41 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll[2013-06-13 15:30:41 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll[2013-06-13 15:30:41 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe[2013-06-13 15:30:41 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe[2013-06-13 15:30:40 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll[2013-06-13 15:30:40 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll[2013-06-13 15:30:39 | 003,958,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll[2013-06-13 15:30:39 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll[2013-06-12 14:00:11 | 000,000,000 | ---D | C] -- C:\Users\Przemysław Libera\.pdfsam[2013-06-12 13:57:39 | 000,000,000 | ---D | C] -- C:\Users\Przemysław Libera\AppData\Roaming\TuneUp Software[2013-06-12 13:57:29 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software[2013-06-12 13:57:27 | 000,000,000 | -HSD | C] -- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}[2013-06-12 13:57:27 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files[2013-06-12 13:56:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Split And Merge Basic[2013-06-12 13:56:58 | 000,000,000 | ---D | C] -- C:\Program Files\PDF Split And Merge Basic[2013-06-12 13:56:14 | 000,000,000 | ---D | C] -- C:\Users\Przemysław Libera\AppData\Roaming\OpenCandy[2013-06-12 12:10:36 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll[2013-06-12 12:10:35 | 000,492,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll[2013-06-12 12:10:31 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptdlg.dll[2013-06-12 12:10:31 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptdlg.dll[2013-06-12 12:10:27 | 001,424,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll[2013-06-12 12:10:25 | 001,464,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll[2013-06-12 12:10:25 | 001,192,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certutil.exe[2013-06-12 12:10:25 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certutil.exe[2013-06-12 12:10:25 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll[2013-06-12 12:10:24 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certenc.dll[2013-06-12 12:10:24 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certenc.dll[2013-06-12 12:10:21 | 001,887,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll[2013-06-12 12:10:21 | 001,505,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll[2013-06-11 07:47:51 | 000,000,000 | ---D | C] -- C:\Windows\pss[2013-06-10 08:49:24 | 000,000,000 | ---D | C] -- C:\Qoobox[2013-06-06 09:26:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo[2013-06-06 09:25:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ashampoo[2013-05-31 07:29:11 | 000,000,000 | R--D | C] -- C:\Users\Przemysław Libera\Documents[2013-05-31 07:28:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe LiveCycle ES2[2013-05-28 10:21:37 | 000,000,000 | --SD | C] -- C:\Windows\SysWow64\Microsoft ========== Files - Modified Within 30 Days ========== [2013-06-21 12:46:00 | 000,000,930 | ---- | M] () -- C:\Windows	asks\Adobe Flash Player Updater.job[2013-06-21 12:14:00 | 000,001,070 | ---- | M] () -- C:\Windows	asks\GoogleUpdateTaskMachineUA.job[2013-06-21 09:14:00 | 000,001,066 | ---- | M] () -- C:\Windows	asks\GoogleUpdateTaskMachineCore.job[2013-06-21 08:46:07 | 000,032,064 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0[2013-06-21 08:46:07 | 000,032,064 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0[2013-06-21 08:39:16 | 000,161,948 | ---- | M] () -- C:\Windows\SysNative\fastboot.set[2013-06-21 08:38:34 | 000,067,584 | ---- | M] () -- C:\Windows\bootstat.dat[2013-06-21 08:38:27 | 460,079,103 | -HS- | M] () -- C:\hiberfil.sys[2013-06-20 23:15:02 | 001,671,400 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI[2013-06-20 23:15:02 | 000,743,068 | ---- | M] () -- C:\Windows\SysNative\perfh015.dat[2013-06-20 23:15:02 | 000,655,790 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat[2013-06-20 23:15:02 | 000,156,672 | ---- | M] () -- C:\Windows\SysNative\perfc015.dat[2013-06-20 23:15:02 | 000,122,662 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat[2013-06-18 08:22:20 | 000,000,111 | -H-- | M] () -- C:\sys3478.bin[2013-06-14 22:58:56 | 000,280,600 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr[2013-06-14 22:58:56 | 000,280,600 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe[2013-06-14 22:48:14 | 000,280,600 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0[2013-06-14 13:53:25 | 000,000,132 | ---- | M] () -- C:\Users\Przemysław Libera\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe[2013-06-13 07:56:38 | 000,220,160 | ---- | M] () -- C:\Users\Przemysław Libera\Desktop\Documents\Welcome to Microsoft Certification! Access Your Benefits in Four Steps{~622962651~}.msg[2013-06-13 07:54:00 | 000,032,337 | ---- | M] () -- C:\Users\Przemysław Libera\Desktop\S__04C0.jpg[2013-06-13 07:46:25 | 000,692,104 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe[2013-06-13 07:46:25 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl[2013-06-12 07:48:22 | 362,936,782 | ---- | M] () -- C:\Users\Przemysław Libera\Desktop\Documents\backup.reg[2013-06-11 08:09:34 | 000,016,568 | ---- | M] () -- C:\Windows\diagwrn.xml[2013-06-11 08:09:34 | 000,002,876 | ---- | M] () -- C:\Windows\diagerr.xml[2013-06-10 08:35:19 | 000,025,066 | ---- | M] () -- C:\Users\Przemysław Libera\Desktop\Documents\cc_20130610_083508.reg[2013-06-08 16:06:58 | 000,526,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll[2013-06-08 13:40:02 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll[2013-06-06 06:55:04 | 018,614,372 | ---- | M] () -- C:\Users\Przemysław Libera\Desktop\Documents\Microsoft_Press_ebook_Introducing_Windows_Server_2012_PDF.pdf[2013-06-05 14:16:13 | 003,679,198 | ---- | M] () -- C:\Users\Przemysław Libera\Desktop\Documents\USBOblivion-64-Y580-130605-141610.reg[2013-05-31 10:14:10 | 005,071,208 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT ========== Files Created - No Company Name ========== [2013-06-21 07:38:02 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe[2013-06-21 07:38:02 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe[2013-06-21 07:38:02 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe[2013-06-21 07:38:02 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe[2013-06-21 07:38:02 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe[2013-06-18 08:20:53 | 000,000,111 | -H-- | C] () -- C:\sys3478.bin[2013-06-14 13:53:25 | 000,000,132 | ---- | C] () -- C:\Users\Przemysław Libera\AppData\Roaming\Preferencje formatu PNG CS6 firmy Adobe[2013-06-13 07:56:36 | 000,220,160 | ---- | C] () -- C:\Users\Przemysław Libera\Desktop\Documents\Welcome to Microsoft Certification! Access Your Benefits in Four Steps{~622962651~}.msg[2013-06-13 07:54:00 | 000,032,337 | ---- | C] () -- C:\Users\Przemysław Libera\Desktop\S__04C0.jpg[2013-06-12 07:48:10 | 362,936,782 | ---- | C] () -- C:\Users\Przemysław Libera\Desktop\Documents\backup.reg[2013-06-12 07:43:05 | 000,537,850 | ---- | C] () -- C:\HaxFix.exe[2013-06-10 08:35:10 | 000,025,066 | ---- | C] () -- C:\Users\Przemysław Libera\Desktop\Documents\cc_20130610_083508.reg[2013-06-08 00:01:35 | 004,483,524 | ---- | C] () -- C:\Users\Przemysław Libera\Desktop\DSC_0073.JPG[2013-06-06 06:54:43 | 018,614,372 | ---- | C] () -- C:\Users\Przemysław Libera\Desktop\Documents\Microsoft_Press_ebook_Introducing_Windows_Server_2012_PDF.pdf[2013-06-05 14:16:10 | 003,679,198 | ---- | C] () -- C:\Users\Przemysław Libera\Desktop\Documents\USBOblivion-64-Y580-130605-141610.reg[2013-05-31 07:28:56 | 000,002,465 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller X.lnk[2013-05-31 07:28:56 | 000,002,453 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat X Pro.lnk[2013-05-06 07:49:26 | 000,004,768 | ---- | C] () -- C:\Users\Przemysław Libera\AppData\Local\operaprefs.ini[2013-05-02 09:01:14 | 000,004,768 | ---- | C] () -- C:\ProgramData\operaprefs.ini[2013-04-15 13:55:10 | 000,007,597 | ---- | C] () -- C:\Users\Przemysław Libera\AppData\Local\Resmon.ResmonCfg[2013-03-05 11:36:58 | 000,000,132 | ---- | C] () -- C:\Users\Przemysław Libera\AppData\Roaming\Preferencje formatu BMP CS6 firmy Adobe[2013-02-28 22:46:41 | 000,280,600 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe[2013-02-28 22:46:23 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe[2013-02-21 15:08:26 | 000,707,504 | ---- | C] () -- C:\Users\Przemysław Libera\AppData\Local\unins000.exe[2013-02-21 15:08:26 | 000,011,761 | ---- | C] () -- C:\Users\Przemysław Libera\AppData\Local\unins000.msg[2013-02-21 15:08:26 | 000,002,433 | ---- | C] () -- C:\Users\Przemysław Libera\AppData\Local\unins000.dat[2013-02-17 01:49:29 | 000,644,608 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll[2013-02-17 01:49:29 | 000,258,048 | ---- | C] () -- C:\Windows\SysWow64\libFLAC.dll[2013-02-17 01:48:03 | 000,112,640 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll[2013-02-16 19:39:44 | 000,000,000 | ---- | C] () -- C:\Windows\firstboot.dat[2012-08-15 05:06:52 | 000,472,416 | ---- | C] () -- C:\Windows\SysWow64\Lenovo.VerifaceStub.dll[2012-08-15 05:06:50 | 002,086,240 | ---- | C] () -- C:\Windows\SysWow64\LenovoVeriface.Interface.dll[2012-08-15 05:06:50 | 001,500,512 | ---- | C] () -- C:\Windows\SysWow64\Apblend.dll[2012-08-15 05:06:50 | 001,171,456 | ---- | C] () -- C:\Windows\SysWow64\PicNotify.dll[2012-08-15 05:06:42 | 001,044,480 | ---- | C] () -- C:\Windows\SysWow64\3DImageRenderer.dll[2012-08-15 04:37:17 | 001,689,266 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI[2012-07-09 02:56:50 | 000,755,572 | ---- | C] () -- C:\Windows\SysWow64\igkrng700.bin[2012-07-09 02:56:45 | 000,559,972 | ---- | C] () -- C:\Windows\SysWow64\igfcg700m.bin[2012-07-09 02:56:42 | 000,058,880 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll[2012-07-09 02:56:36 | 013,026,816 | ---- | C] () -- C:\Windows\SysWow64\ig7icd32.dll[2012-02-02 22:08:26 | 000,001,536 | ---- | C] () -- C:\Windows\SysWow64\IusEventLog.dll ========== LOP Check ========== [2013-05-21 11:03:31 | 000,000,000 | ---D | M] -- C:\Users\Przemysław Libera\AppData\Roaming\ACD Systems[2013-06-06 09:26:48 | 000,000,000 | ---D | M] -- C:\Users\Przemysław Libera\AppData\Roaming\Ashampoo[2013-06-21 12:55:37 | 000,000,000 | ---D | M] -- C:\Users\Przemysław Libera\AppData\Roaming\Azureus[2013-02-22 09:43:40 | 000,000,000 | ---D | M] -- C:\Users\Przemysław Libera\AppData\Roaming\BESTplayer[2013-02-22 09:51:32 | 000,000,000 | ---D | M] -- C:\Users\Przemysław Libera\AppData\Roaming\BSplayer[2013-02-22 09:44:07 | 000,000,000 | ---D | M] -- C:\Users\Przemysław Libera\AppData\Roaming\BSplayer Pro[2013-03-14 09:24:43 | 000,000,000 | ---D | M] -- C:\Users\Przemysław Libera\AppData\Roaming\DAEMON Tools Pro[2013-06-18 08:21:14 | 000,000,000 | ---D | M] -- C:\Users\Przemysław Libera\AppData\Roaming\Expert PDF 7[2013-06-18 08:20:54 | 000,000,000 | ---D | M] -- C:\Users\Przemysław Libera\AppData\Roaming\Expert PDF Editor[2013-02-16 22:14:21 | 000,000,000 | ---D | M] -- C:\Users\Przemysław Libera\AppData\Roaming\Gadu-Gadu[2013-03-14 12:23:23 | 000,000,000 | ---D | M] -- C:\Users\Przemysław Libera\AppData\Roaming\GHISLER[2013-02-16 19:41:16 | 000,000,000 | ---D | M] -- C:\Users\Przemysław Libera\AppData\Roaming\Leadertech[2013-03-16 10:59:38 | 000,000,000 | ---D | M] -- C:\Users\Przemysław Libera\AppData\Roaming\NapiProjekt[2013-02-19 22:45:10 | 000,000,000 | ---D | M] -- C:\Users\Przemysław Libera\AppData\Roaming\Nokia[2013-06-12 13:56:14 | 000,000,000 | ---D | M] -- C:\Users\Przemysław Libera\AppData\Roaming\OpenCandy[2013-05-22 10:17:13 | 000,000,000 | ---D | M] -- C:\Users\Przemysław Libera\AppData\Roaming\Origin[2013-04-18 08:41:20 | 000,000,000 | ---D | M] -- C:\Users\Przemysław Libera\AppData\Roaming\PC Suite[2013-03-09 23:17:17 | 000,000,000 | ---D | M] -- C:\Users\Przemysław Libera\AppData\Roaming\TeamViewer[2013-06-12 13:57:39 | 000,000,000 | ---D | M] -- C:\Users\Przemysław Libera\AppData\Roaming\TuneUp Software[2013-03-08 11:10:36 | 000,000,000 | ---D | M] -- C:\Users\Przemysław Libera\AppData\Roaming\UDC Profiles[2013-04-24 12:06:40 | 000,000,000 | ---D | M] -- C:\Users\Przemysław Libera\AppData\Roaming\XBMC[2013-06-10 07:38:55 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ==========  < End of report >[/code]