OTL logfile created on: 2011-08-28 10:11:02 - Run 1
OTL by OldTimer - Version 3.2.26.6     Folder = c:\Documents and Settings\dd\Pulpit\avir
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1022,42 Mb Total Physical Memory | 548,13 Mb Available Physical Memory | 53,61% Memory free
2,40 Gb Paging File | 2,09 Gb Available in Paging File | 87,02% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 177,29 Gb Total Space | 115,53 Gb Free Space | 65,16% Space Free | Partition Type: NTFS
Drive D: | 97,65 Gb Total Space | 90,69 Gb Free Space | 92,87% Space Free | Partition Type: NTFS
Drive E: | 97,65 Gb Total Space | 93,14 Gb Free Space | 95,37% Space Free | Partition Type: NTFS
 
Computer Name: DEX-15797A365C5 | User Name: dd | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-08-28 08:43:47 | 000,580,096 | ---- | M] (OldTimer Tools) -- c:\Documents and Settings\dd\Pulpit\avir\OTL.exe
PRC - [2011-08-01 08:43:21 | 000,140,952 | ---- | M] (Google Inc.) -- C:\Documents and Settings\dd\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.65\GoogleCrashHandler.exe
PRC - [2011-05-02 21:49:38 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010-12-17 07:56:10 | 003,707,808 | ---- | M] (Ghisler Software GmbH) -- C:\totalcmd\TOTALCMD.EXE
PRC - [2010-11-07 11:22:00 | 000,286,720 | ---- | M] (Babylon Ltd.) -- C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe
PRC - [2010-03-25 21:14:30 | 000,937,984 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe
PRC - [2010-02-02 23:45:50 | 014,252,952 | ---- | M] (Redefine Sp z o.o.) -- C:\Program Files\ipla\ipla.exe
PRC - [2008-04-14 19:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-06-09 00:23:50 | 000,208,896 | ---- | M] (UASSOFT.COM) -- C:\Program Files\Trust\Trust R-Series Mouse\KMWDSrv.exe
PRC - [2007-06-08 11:19:22 | 000,397,312 | ---- | M] (UASSOFT.COM) -- C:\Program Files\Trust\Trust R-Series Mouse\KMCONFIG.exe
PRC - [2007-04-04 11:30:40 | 000,327,680 | ---- | M] (UASSOFT.COM) -- C:\Program Files\Trust\Trust R-Series Mouse\KMProcess.exe
PRC - [2007-03-06 14:51:14 | 000,212,992 | ---- | M] (UASSOFT.COM) -- C:\Program Files\Trust\Trust R-Series Mouse\StartAutorun.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2011-08-02 08:37:24 | 003,542,616 | ---- | M] () -- c:\Program Files\Common Files\Akamai\netsession_win_2da1ebd.dll
MOD - [2011-05-02 21:49:38 | 001,874,904 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2010-02-02 23:45:58 | 000,066,456 | ---- | M] () -- C:\Program Files\ipla\ziplib.dll
MOD - [2010-02-02 23:45:56 | 000,392,600 | ---- | M] () -- C:\Program Files\ipla\jabberoo.dll
MOD - [2009-12-09 21:20:06 | 000,126,976 | ---- | M] () -- C:\Program Files\REALTEK\11n USB Wireless LAN Utility\EnumDevLib.dll
MOD - [2009-02-03 04:15:28 | 003,771,296 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
MOD - [2007-07-12 11:11:54 | 001,163,264 | ---- | M] () -- C:\Program Files\REALTEK\11n USB Wireless LAN Utility\acAuth.dll
MOD - [2007-06-29 00:43:00 | 000,466,944 | ---- | M] () -- C:\WINDOWS\system32\nvshell.dll
MOD - [2007-03-29 12:17:42 | 000,106,496 | ---- | M] () -- C:\Program Files\Trust\Trust R-Series Mouse\keydll.dll
MOD - [2005-05-04 19:12:46 | 000,028,672 | ---- | M] () -- C:\Program Files\Trust\Trust R-Series Mouse\MouseHook.dll
MOD - [1999-04-08 19:00:54 | 000,073,728 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Auto | Stopped] --  -- (wxpdrivers)
SRV - File not found [Auto | Stopped] --  -- (srvsysdriver32)
SRV - File not found [Auto | Stopped] --  -- (srviecheck)
SRV - File not found [Auto | Stopped] --  -- (srvbtcclient)
SRV - File not found [Auto | Stopped] --  -- (ddservice)
SRV - File not found [On_Demand | Stopped] --  -- (AppMgmt)
SRV - [2011-08-02 08:37:24 | 003,542,616 | ---- | M] () [Auto | Running] -- c:\Program Files\Common Files\Akamai\netsession_win_2da1ebd.dll -- (Akamai)
SRV - [2007-12-19 16:13:51 | 000,411,008 | ---- | M] (Cenega Poland Sp. z o.o.) [Auto | Stopped] -- C:\WINDOWS\System32\pr2apt4b.exe -- (pr2apt4b) Wintersports 2008 Drivers Auto Removal (pr2apt4b)
SRV - [2007-10-18 17:27:17 | 000,410,984 | ---- | M] (Cyanide) [Auto | Stopped] -- C:\WINDOWS\System32\pr2agqwb.exe -- (pr2agqwb) Loki Drivers Auto Removal (pr2agqwb)
SRV - [2007-06-09 00:23:50 | 000,208,896 | ---- | M] (UASSOFT.COM) [Auto | Running] -- C:\Program Files\Trust\Trust R-Series Mouse\KMWDSrv.exe -- (KMWDSERVICE)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2010-04-28 01:57:28 | 000,066,632 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WmXlCore.sys -- (WmXlCore)
DRV - [2010-04-28 01:57:28 | 000,015,048 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WmVirHid.sys -- (WmVirHid)
DRV - [2010-04-28 01:57:24 | 000,031,816 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WmHidLo.sys -- (WmHidLo)
DRV - [2010-04-28 01:57:22 | 000,022,856 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WmBEnum.sys -- (WmBEnum)
DRV - [2010-04-27 23:01:26 | 000,037,704 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\WmFilter.sys -- (WmFilter)
DRV - [2010-03-10 19:28:40 | 000,602,912 | R--- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8192su.sys -- (RTL8192su)
DRV - [2009-09-10 15:55:52 | 000,102,528 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2009-07-24 19:33:24 | 000,100,736 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbdev.sys -- (hwusbdev)
DRV - [2008-08-07 03:01:00 | 000,282,208 | R--- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\V0490Vid.sys -- (V0490Vid)
DRV - [2008-07-17 16:56:38 | 000,145,760 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CtClsFlt.sys -- (CtClsFlt)
DRV - [2008-05-02 10:58:12 | 000,017,536 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2008-04-30 09:43:42 | 000,160,768 | R--- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\V0490Afx.sys -- (V0490Afx)
DRV - [2008-02-25 19:55:00 | 000,064,616 | ---- | M] (Cyanide) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\pe3agqwb.sys -- (pe3agqwb) Loki Environment Driver (pe3agqwb)
DRV - [2008-02-25 19:54:25 | 000,068,208 | ---- | M] (Cyanide) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\ps7agqwb.sys -- (ps7agqwb) Loki Synchronization Driver (ps7agqwb)
DRV - [2007-12-19 16:13:11 | 000,065,160 | ---- | M] (Cenega Poland Sp. z o.o.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\pe3apt4b.sys -- (pe3apt4b) Wintersports 2008 Environment Driver (pe3apt4b)
DRV - [2007-12-19 16:12:41 | 000,083,592 | ---- | M] (Cenega Poland Sp. z o.o.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\pf2apt4b.sys -- (pf2apt4b) Wintersports 2008 File System Driver (pf2apt4b)
DRV - [2007-12-19 16:12:00 | 000,068,752 | ---- | M] (Cenega Poland Sp. z o.o.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\ps7apt4b.sys -- (ps7apt4b) Wintersports 2008 Synchronization Driver (ps7apt4b)
DRV - [2007-08-07 18:33:12 | 004,108,992 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2007-03-29 15:00:16 | 000,017,024 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\KMWDFilter.SYS -- (KMWDFilter)
DRV - [2007-01-15 17:57:08 | 000,031,616 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\livecamv.sys -- (RLDesignVirtualAudioCableWdm)
DRV - [2004-08-04 00:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Sterownik NT karty Realtek RTL8139(A/B/C)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=f8f7bcdc0000000000000018f3268de3&tlver=1.4.19.19&ss=1&affID=18047
IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.)
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP_ss&mntrId=f8f7bcdc0000000000000018f3268de3&tlver=1.4.19.19&ss=1&affID=18047
IE - HKCU\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "AOL Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.winamp.com/search/search?query={searchTerms}&invocationType=tb50-ff-winamp-chromesbox-en-us&tb_uuid=20110319084849062&tb_oid=19-03-2011&tb_mrud=19-03-2011&query="
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Search the web (Babylon)"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.pl"
FF - prefs.js..keyword.URL: "http://search.babylon.com/?babsrc=SP_ss&mntrId=f8f7bcdc0000000000000018f3268de3&tlver=1.4.19.19&instlRef=sst&ss=1&affID=18047&q="
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\dd\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\dd\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Documents and Settings\dd\Ustawienia lokalne\Dane aplikacji\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-05-02 21:49:40 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-04-26 10:44:05 | 000,000,000 | ---D | M]
 
[2009-06-24 20:24:03 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\dd\Dane aplikacji\Mozilla\Extensions
[2011-08-28 08:35:35 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\dd\Dane aplikacji\Mozilla\Firefox\Profiles\k7eq354f.default\extensions
[2011-08-21 08:28:12 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Documents and Settings\dd\Dane aplikacji\Mozilla\Firefox\Profiles\k7eq354f.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2010-02-13 10:00:27 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\dd\Dane aplikacji\Mozilla\Firefox\Profiles\k7eq354f.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011-03-19 17:28:44 | 000,002,354 | ---- | M] () -- C:\Documents and Settings\dd\Dane aplikacji\Mozilla\Firefox\Profiles\k7eq354f.default\searchplugins\aol-web-search.xml
[2011-03-05 20:03:57 | 000,002,569 | ---- | M] () -- C:\Documents and Settings\dd\Dane aplikacji\Mozilla\Firefox\Profiles\k7eq354f.default\searchplugins\askcom.xml
[2011-05-01 10:02:57 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011-01-31 22:28:31 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011-05-02 21:49:37 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011-01-31 22:28:19 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011-03-17 21:57:30 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
[2010-01-01 10:00:00 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2011-06-07 13:44:45 | 000,002,428 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2010-01-01 10:00:00 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2010-01-01 10:00:00 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2010-01-01 10:00:00 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2010-01-01 10:00:00 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2010-01-01 10:00:00 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2011-08-26 12:55:11 | 000,202,984 | -H-- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 127.0.0.1 facebook.com
O1 - Hosts: 127.0.0.1 www.facebook.com
O1 - Hosts: 127.0.0.1 af-za.facebook.com
O1 - Hosts: 127.0.0.1 az-az.facebook.com
O1 - Hosts: 127.0.0.1 id-id.facebook.com
O1 - Hosts: 127.0.0.1 ms-my.facebook.com
O1 - Hosts: 127.0.0.1 bs-ba.facebook.com
O1 - Hosts: 127.0.0.1 ca-es.facebook.com
O1 - Hosts: 127.0.0.1 cs-cz.facebook.com
O1 - Hosts: 127.0.0.1 cy-gb.facebook.com
O1 - Hosts: 127.0.0.1 da-dk.facebook.com
O1 - Hosts: 127.0.0.1 de-de.facebook.com
O1 - Hosts: 127.0.0.1 et-ee.facebook.com
O1 - Hosts: 127.0.0.1 en-gb.facebook.com
O1 - Hosts: 127.0.0.1 es-la.facebook.com
O1 - Hosts: 127.0.0.1 eo-eo.facebook.com
O1 - Hosts: 127.0.0.1 eu-es.facebook.com
O1 - Hosts: 127.0.0.1 tl-ph.facebook.com
O1 - Hosts: 127.0.0.1 fo-fo.facebook.com
O1 - Hosts: 127.0.0.1 fr-fr.facebook.com
O1 - Hosts: 127.0.0.1 fy-nl.facebook.com
O1 - Hosts: 127.0.0.1 ga-ie.facebook.com
O1 - Hosts: 127.0.0.1 gl-es.facebook.com
O1 - Hosts: 127.0.0.1 ko-kr.facebook.com
O1 - Hosts: 50053 more lines...
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.)
O2 - BHO: (CescrtHlpr Object) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll (Babylon BHO)
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll (Babylon Ltd.)
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (AOL Inc.)
O4 - HKLM..\Run: [1683263.exe]  File not found
O4 - HKLM..\Run: [1731917.exe]  File not found
O4 - HKLM..\Run: [7200222.exe]  File not found
O4 - HKLM..\Run: [7360995.exe]  File not found
O4 - HKLM..\Run: [75623956-loader2.exe]  File not found
O4 - HKLM..\Run: [8630967.exe]  File not found
O4 - HKLM..\Run: [avast]  File not found
O4 - HKLM..\Run: [BabylonToolbar] C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe (Babylon Ltd.)
O4 - HKLM..\Run: [KernelFaultCheck]  File not found
O4 - HKLM..\Run: [KMCONFIG]  File not found
O4 - HKLM..\Run: [l1rezerv.exe]  File not found
O4 - HKLM..\Run: [Live! Central] C:\Program Files\Creative\Creative Live! Cam\Live! Central\CTLVCentral.exe (Creative Technology Ltd.)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\soundman.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Logitech Inc.)
O4 - HKLM..\Run: [sysdriver32.exe]  File not found
O4 - HKLM..\Run: [sysdriver32_.exe]  File not found
O4 - HKLM..\Run: [systemup]  File not found
O4 - HKLM..\Run: [tray_ico]  File not found
O4 - HKLM..\Run: [tray_ico0]  File not found
O4 - HKLM..\Run: [tray_ico1]  File not found
O4 - HKLM..\Run: [tray_ico2]  File not found
O4 - HKLM..\Run: [tray_ico3]  File not found
O4 - HKLM..\Run: [tray_ico4]  File not found
O4 - HKLM..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKLM..\Run: [wxpdrv]  File not found
O4 - HKCU..\Run: [ALLUpdate] C:\Program Files\ALLPlayer\ALLUpdate.exe ()
O4 - HKCU..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe (Electronic Arts)
O4 - HKCU..\Run: [IPLA!] C:\Program Files\ipla\ipla.exe (Redefine Sp z o.o.)
O4 - HKCU..\Run: [MediaGet2] C:\Documents and Settings\dd\Ustawienia lokalne\Dane aplikacji\MediaGet2\mediaget.exe (MediaGet LLC)
O4 - HKCU..\Run: [Steam] D:\Program Files\Valve\Steam\Steam.exe (Valve Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\REALTEK 11n USB Wireless LAN Utility.lnk = C:\Program Files\REALTEK\11n USB Wireless LAN Utility\RtWLan.exe (Realtek Semiconductor Corp.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\dd\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\dd\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O31 - SafeBoot: AlternateShell - services32.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-06-24 19:46:33 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{01b3d55c-67f4-11de-9e1e-0018f3268de3}\Shell - "" = AutoRun
O33 - MountPoints2\{01b3d55c-67f4-11de-9e1e-0018f3268de3}\Shell\AutoRun\command - "" = J:\AutoRun.exe
O33 - MountPoints2\{081c78a0-3832-11e0-a276-0018f3268de3}\Shell - "" = AutoRun
O33 - MountPoints2\{081c78a0-3832-11e0-a276-0018f3268de3}\Shell\AutoRun\command - "" = J:\AutoRun.exe
O33 - MountPoints2\{081c78a2-3832-11e0-a276-0018f3268de3}\Shell - "" = AutoRun
O33 - MountPoints2\{081c78a2-3832-11e0-a276-0018f3268de3}\Shell\AutoRun\command - "" = J:\AutoRun.exe
O33 - MountPoints2\{081c78a5-3832-11e0-a276-0018f3268de3}\Shell - "" = AutoRun
O33 - MountPoints2\{081c78a5-3832-11e0-a276-0018f3268de3}\Shell\AutoRun\command - "" = J:\AutoRun.exe
O33 - MountPoints2\{081c78a7-3832-11e0-a276-0018f3268de3}\Shell - "" = AutoRun
O33 - MountPoints2\{081c78a7-3832-11e0-a276-0018f3268de3}\Shell\AutoRun\command - "" = J:\AutoRun.exe
O33 - MountPoints2\{b513ac84-94b1-11de-9e79-0018f3268de3}\Shell - "" = Autorun
O33 - MountPoints2\{b513ac84-94b1-11de-9e79-0018f3268de3}\Shell\AutoRun\command - "" = N:\setup.exe
O33 - MountPoints2\{b513ac85-94b1-11de-9e79-0018f3268de3}\Shell - "" = Autorun
O33 - MountPoints2\{b513ac85-94b1-11de-9e79-0018f3268de3}\Shell\AutoRun\command - "" = C:\WINDOWS\System32\setup.exe -- [2008-04-14 19:21:39 | 000,023,040 | ---- | M] (Microsoft Corporation)
O33 - MountPoints2\{de629952-60e9-11de-9e00-0018f3268de3}\Shell - "" = AutoRun
O33 - MountPoints2\{de629952-60e9-11de-9e00-0018f3268de3}\Shell\AutoRun\command - "" = M:\AutoRun.exe
O33 - MountPoints2\{de629957-60e9-11de-9e00-0018f3268de3}\Shell - "" = AutoRun
O33 - MountPoints2\{de629957-60e9-11de-9e00-0018f3268de3}\Shell\AutoRun\command - "" = J:\AutoRun.exe
O33 - MountPoints2\J\Shell - "" = AutoRun
O33 - MountPoints2\J\Shell\AutoRun\command - "" = J:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-08-28 10:10:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dd\Ustawienia lokalne\Dane aplikacji\GHISLER
[2011-08-28 10:10:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dd\Menu Start\Programy\Total Commander
[2011-08-28 10:10:02 | 000,000,000 | ---D | C] -- C:\totalcmd
[2011-08-28 10:10:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dd\Dane aplikacji\GHISLER
[2011-08-28 10:09:55 | 003,280,704 | ---- | C] (Ghisler Software GmbH) -- C:\Documents and Settings\dd\Pulpit\tcmd756a.exe
[2011-08-28 08:43:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\dd\Pulpit\avir
[2011-08-28 08:32:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\REALTEK 11n USB Wireless LAN Utility
[2011-08-28 08:31:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2011-08-28 08:31:39 | 000,602,912 | R--- | C] (Realtek Semiconductor Corporation                           ) -- C:\WINDOWS\System32\drivers\RTL8192su.sys
[2011-08-28 08:31:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\OPTIONS
[2011-08-28 08:31:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\RtlGina
[2011-08-28 08:31:32 | 000,000,000 | ---D | C] -- C:\Program Files\REALTEK
[2011-08-28 08:31:10 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SWF Studio
[2011-08-25 18:07:33 | 000,000,000 | -H-D | C] -- C:\WINDOWS\update.8.1
[2011-08-20 20:51:56 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011-08-20 20:44:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\av_ico
[2011-08-20 20:42:23 | 000,000,000 | -H-D | C] -- C:\WINDOWS\update.tray-7-0-lnk
[2011-08-20 20:42:23 | 000,000,000 | -H-D | C] -- C:\WINDOWS\update.tray-7-0
[2011-08-20 20:39:43 | 000,019,544 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2011-08-20 20:39:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\avast! Free Antivirus
[2011-08-20 20:39:42 | 000,309,848 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2011-08-20 20:39:41 | 000,043,608 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2011-08-20 20:39:39 | 000,441,176 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2011-08-20 20:39:22 | 000,199,304 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2011-08-20 20:39:22 | 000,040,112 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2011-08-20 20:23:56 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\dd\Recent
[2011-08-20 20:20:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\CCleaner
[2011-08-20 20:20:35 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2011-08-20 10:55:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\ufa
[2011-08-20 10:55:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\rpcminer
[2011-08-20 10:55:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\phoenix
[2011-08-20 10:53:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Dane aplikacji\Adobe
[2011-08-20 10:53:41 | 000,000,000 | -H-D | C] -- C:\WINDOWS\update.5.0
[2011-08-20 10:51:55 | 000,000,000 | -H-D | C] -- C:\WINDOWS\update.2
[2011-08-20 10:51:37 | 000,000,000 | -H-D | C] -- C:\WINDOWS\update.7.1
[2011-08-20 10:50:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Dane aplikacji\WinRAR
[2011-08-20 10:49:06 | 000,000,000 | -H-D | C] -- C:\WINDOWS\update.1
[2011-08-11 08:33:35 | 000,139,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpwd.sys
[2011-08-11 08:30:37 | 000,010,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndistapi.sys
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-08-28 10:10:04 | 000,000,548 | ---- | M] () -- C:\Documents and Settings\dd\Pulpit\Total Commander.lnk
[2011-08-28 10:09:55 | 003,280,704 | ---- | M] (Ghisler Software GmbH) -- C:\Documents and Settings\dd\Pulpit\tcmd756a.exe
[2011-08-28 09:48:00 | 000,001,120 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-308236825-682003330-1004UA.job
[2011-08-28 08:48:00 | 000,001,068 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-308236825-682003330-1004Core.job
[2011-08-28 08:32:26 | 000,001,910 | ---- | M] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\REALTEK 11n USB Wireless LAN Utility.lnk
[2011-08-28 08:32:26 | 000,001,892 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\REALTEK 11n USB Wireless LAN Utility.lnk
[2011-08-28 08:32:18 | 000,376,832 | ---- | M] () -- C:\WINDOWS\System32\AegisI5Installer.exe
[2011-08-28 08:29:12 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011-08-27 12:06:18 | 524,288,000 | ---- | M] () -- C:\REMOVE_THIS_FILE.livecd.swap
[2011-08-27 10:00:42 | 000,001,698 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\avast! Free Antivirus.lnk
[2011-08-27 10:00:18 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011-08-26 11:37:36 | 000,002,265 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk
[2011-08-26 09:50:12 | 000,002,279 | ---- | M] () -- C:\Documents and Settings\dd\Pulpit\Google Chrome.lnk
[2011-08-25 18:07:33 | 000,000,223 | ---- | M] () -- C:\WINDOWS\info1
[2011-08-22 16:07:11 | 000,000,404 | -H-- | M] () -- C:\WINDOWS\tasks\Norton Security Scan for dd.job
[2011-08-20 20:56:03 | 000,000,215 | ---- | M] () -- C:\boot.ini
[2011-08-20 20:52:05 | 000,002,644 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2011-08-20 20:20:37 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk
[2011-08-20 10:55:56 | 000,246,272 | ---- | M] () -- C:\WINDOWS\unrar.exe
[2011-08-20 10:55:55 | 005,589,370 | ---- | M] () -- C:\WINDOWS\phoenix.rar
[2011-08-20 10:55:51 | 001,075,284 | ---- | M] () -- C:\WINDOWS\rpcminer.rar
[2011-08-20 10:50:34 | 000,904,792 | ---- | M] () -- C:\WINDOWS\geoiplist.rar
[2011-08-20 10:50:13 | 000,000,000 | ---- | M] () -- C:\WINDOWS\loader2.exe_ok
[2011-08-18 10:20:30 | 000,101,642 | ---- | M] () -- C:\Documents and Settings\dd\Pulpit\watch (1).htm
[2011-08-14 13:46:33 | 000,002,525 | ---- | M] () -- C:\Documents and Settings\dd\Pulpit\Microsoft Word (2).lnk
[2011-08-11 12:52:09 | 000,490,706 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2011-08-11 12:52:09 | 000,432,778 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011-08-11 12:52:09 | 000,084,082 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2011-08-11 12:52:09 | 000,067,734 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-08-28 10:10:04 | 000,000,548 | ---- | C] () -- C:\Documents and Settings\dd\Pulpit\Total Commander.lnk
[2011-08-28 10:10:02 | 000,000,545 | ---- | C] () -- C:\WINDOWS\UC.PIF
[2011-08-28 10:10:02 | 000,000,545 | ---- | C] () -- C:\WINDOWS\RAR.PIF
[2011-08-28 10:10:02 | 000,000,545 | ---- | C] () -- C:\WINDOWS\PKZIP.PIF
[2011-08-28 10:10:02 | 000,000,545 | ---- | C] () -- C:\WINDOWS\PKUNZIP.PIF
[2011-08-28 10:10:02 | 000,000,545 | ---- | C] () -- C:\WINDOWS\NOCLOSE.PIF
[2011-08-28 10:10:02 | 000,000,545 | ---- | C] () -- C:\WINDOWS\LHA.PIF
[2011-08-28 10:10:02 | 000,000,545 | ---- | C] () -- C:\WINDOWS\ARJ.PIF
[2011-08-28 08:35:28 | 000,000,724 | ---- | C] () -- C:\Documents and Settings\dd\Pulpit\Mozilla Firefox.lnk
[2011-08-28 08:32:26 | 000,001,910 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\REALTEK 11n USB Wireless LAN Utility.lnk
[2011-08-28 08:32:26 | 000,001,892 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\REALTEK 11n USB Wireless LAN Utility.lnk
[2011-08-28 08:32:15 | 000,376,832 | ---- | C] () -- C:\WINDOWS\System32\AegisI5Installer.exe
[2011-08-28 08:31:32 | 000,451,072 | ---- | C] () -- C:\WINDOWS\System32\ISSRemoveSP.exe
[2011-08-27 12:05:46 | 524,288,000 | ---- | C] () -- C:\REMOVE_THIS_FILE.livecd.swap
[2011-08-20 20:39:43 | 000,001,698 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\avast! Free Antivirus.lnk
[2011-08-20 20:20:37 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\CCleaner.lnk
[2011-08-20 10:55:55 | 005,589,370 | ---- | C] () -- C:\WINDOWS\phoenix.rar
[2011-08-20 10:55:51 | 001,075,284 | ---- | C] () -- C:\WINDOWS\rpcminer.rar
[2011-08-20 10:51:37 | 000,000,223 | ---- | C] () -- C:\WINDOWS\info1
[2011-08-20 10:50:35 | 004,636,907 | ---- | C] () -- C:\WINDOWS\geoiplist
[2011-08-20 10:50:34 | 000,246,272 | ---- | C] () -- C:\WINDOWS\unrar.exe
[2011-08-20 10:50:33 | 000,904,792 | ---- | C] () -- C:\WINDOWS\geoiplist.rar
[2011-08-20 10:49:47 | 000,000,000 | ---- | C] () -- C:\WINDOWS\loader2.exe_ok
[2011-08-18 10:20:34 | 000,101,642 | ---- | C] () -- C:\Documents and Settings\dd\Pulpit\watch (1).htm
[2011-03-19 12:40:43 | 000,334,216 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2010-11-22 14:25:45 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll
[2010-10-22 19:27:22 | 000,031,616 | ---- | C] () -- C:\WINDOWS\System32\drivers\livecamv.sys
[2010-05-18 16:37:04 | 000,000,049 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2010-05-18 16:37:03 | 000,004,608 | ---- | C] () -- C:\Documents and Settings\dd\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-02-18 16:53:03 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009-10-14 14:34:07 | 000,066,872 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2009-10-14 14:34:06 | 000,138,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2009-10-14 14:34:01 | 000,183,112 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2009-08-29 17:48:42 | 000,083,732 | ---- | C] () -- C:\Program Files\1251128894.jpg
[2009-08-29 17:48:32 | 000,031,027 | ---- | C] () -- C:\Program Files\1251139250.jpeg
[2009-08-29 17:48:19 | 000,063,286 | ---- | C] () -- C:\Program Files\1251139431.jpg
[2009-08-29 17:47:38 | 000,030,295 | ---- | C] () -- C:\Program Files\1251145887.jpg
[2009-08-29 17:47:30 | 000,039,978 | ---- | C] () -- C:\Program Files\1251192799.jpg
[2009-08-29 17:47:18 | 000,062,202 | ---- | C] () -- C:\Program Files\1251231023.jpg
[2009-08-29 17:47:09 | 000,029,095 | ---- | C] () -- C:\Program Files\1251277415.jpg
[2009-08-29 17:46:35 | 000,172,122 | ---- | C] () -- C:\Program Files\1251204039.jpeg
[2009-08-29 17:46:24 | 000,029,270 | ---- | C] () -- C:\Program Files\1251277772.jpg
[2009-08-29 17:46:00 | 000,056,069 | ---- | C] () -- C:\Program Files\1251278057.jpg
[2009-08-29 17:44:53 | 000,016,874 | ---- | C] () -- C:\Program Files\1251278607.jpg
[2009-08-29 17:44:36 | 000,057,312 | ---- | C] () -- C:\Program Files\1251279463.jpg
[2009-08-29 17:44:03 | 000,033,488 | ---- | C] () -- C:\Program Files\1251284117.jpg
[2009-08-29 17:43:56 | 000,224,527 | ---- | C] () -- C:\Program Files\1251285419.jpg
[2009-08-29 17:43:42 | 000,251,530 | ---- | C] () -- C:\Program Files\1251288370.jpg
[2009-08-29 17:42:59 | 000,087,920 | ---- | C] () -- C:\Program Files\1251315024.jpg
[2009-08-29 17:42:50 | 000,064,406 | ---- | C] () -- C:\Program Files\1251358599.jpg
[2009-08-29 17:42:41 | 000,040,010 | ---- | C] () -- C:\Program Files\1251377174.jpg
[2009-08-29 17:42:01 | 000,068,794 | ---- | C] () -- C:\Program Files\1251380437.jpg
[2009-08-29 17:41:53 | 000,186,562 | ---- | C] () -- C:\Program Files\1251383441.jpg
[2009-08-29 17:41:17 | 000,035,312 | ---- | C] () -- C:\Program Files\1251401770.jpg
[2009-08-29 17:40:32 | 000,122,280 | ---- | C] () -- C:\Program Files\1251402045.jpg
[2009-08-29 17:39:55 | 000,227,782 | ---- | C] () -- C:\Program Files\1251444902.jpg
[2009-08-29 17:39:47 | 000,033,317 | ---- | C] () -- C:\Program Files\1251444768.jpg
[2009-08-29 17:39:36 | 000,049,077 | ---- | C] () -- C:\Program Files\1251453462.jpg
[2009-08-29 17:39:25 | 000,026,834 | ---- | C] () -- C:\Program Files\1251447843.jpg
[2009-08-29 17:39:01 | 000,028,823 | ---- | C] () -- C:\Program Files\1251456378.jpg
[2009-08-29 17:38:51 | 000,032,592 | ---- | C] () -- C:\Program Files\1251455875.jpg
[2009-08-29 17:38:43 | 000,066,687 | ---- | C] () -- C:\Program Files\1251456510.jpg
[2009-08-29 17:38:36 | 000,213,020 | ---- | C] () -- C:\Program Files\1251470527.jpg
[2009-08-29 17:37:51 | 000,126,221 | ---- | C] () -- C:\Program Files\1251492842.jpg
[2009-08-29 17:37:43 | 000,114,080 | ---- | C] () -- C:\Program Files\1251491941.jpg
[2009-08-29 17:37:34 | 000,086,447 | ---- | C] () -- C:\Program Files\1251492949.jpg
[2009-08-29 17:37:24 | 000,085,810 | ---- | C] () -- C:\Program Files\1251493106.jpg
[2009-08-29 17:36:37 | 000,023,340 | ---- | C] () -- C:\Program Files\1251554313.jpg
[2009-08-29 17:36:04 | 000,079,465 | ---- | C] () -- C:\Program Files\1251493611.jpg
[2009-07-09 09:20:34 | 000,000,413 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2009-07-09 09:20:34 | 000,000,027 | ---- | C] () -- C:\WINDOWS\BRPP2KA.INI
[2009-06-24 21:50:04 | 000,000,427 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009-06-24 21:44:25 | 000,000,050 | ---- | C] () -- C:\WINDOWS\System32\bridf07a.dat
[2009-06-24 21:43:20 | 000,031,567 | ---- | C] () -- C:\WINDOWS\maxlink.ini
[2009-06-24 21:36:14 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009-06-24 21:35:09 | 000,118,952 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009-06-24 21:01:04 | 000,795,648 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009-06-24 20:29:22 | 000,000,795 | ---- | C] () -- C:\WINDOWS\VPlayer.INI
[2009-06-24 20:24:04 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009-06-24 20:12:05 | 000,001,065 | ---- | C] () -- C:\WINDOWS\winamp.ini
[2009-06-24 19:59:47 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2009-06-24 19:59:18 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2009-06-24 19:48:10 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009-06-24 19:44:26 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009-06-19 20:06:22 | 000,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll
[2009-06-19 20:06:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2009-06-19 20:06:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2009-06-19 20:06:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2009-06-19 20:06:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2009-06-19 20:06:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2009-06-19 20:06:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2009-06-19 20:06:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2009-06-19 20:06:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2009-06-19 20:06:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2007-06-29 00:43:00 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2007-06-29 00:43:00 | 001,626,112 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2007-06-29 00:43:00 | 001,474,560 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2007-06-29 00:43:00 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2007-06-29 00:43:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2007-06-29 00:43:00 | 001,018,772 | ---- | C] () -- C:\WINDOWS\System32\nvucode.bin
[2007-06-29 00:43:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2007-06-29 00:43:00 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2007-06-29 00:43:00 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2007-06-29 00:43:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2006-03-02 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2006-03-02 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2006-03-02 14:00:00 | 000,490,706 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat
[2006-03-02 14:00:00 | 000,432,778 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2006-03-02 14:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat
[2006-03-02 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2006-03-02 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2006-03-02 14:00:00 | 000,084,082 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat
[2006-03-02 14:00:00 | 000,067,734 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2006-03-02 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2006-03-02 14:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat
[2006-03-02 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2006-03-02 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2006-03-02 14:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2006-03-02 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2006-03-02 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat

< End of report >