OTL logfile created on: 2011-08-31 20:43:42 - Run 3 OTL by OldTimer - Version 3.2.26.7 Folder = C:\Documents and Settings\luki\Moje dokumenty\Downloads Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1023,48 Mb Total Physical Memory | 365,58 Mb Available Physical Memory | 35,72% Memory free 2,40 Gb Paging File | 1,82 Gb Available in Paging File | 75,56% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 14,65 Gb Total Space | 2,06 Gb Free Space | 14,07% Space Free | Partition Type: NTFS Drive D: | 24,42 Gb Total Space | 6,29 Gb Free Space | 25,75% Space Free | Partition Type: NTFS Drive E: | 35,45 Gb Total Space | 13,96 Gb Free Space | 39,37% Space Free | Partition Type: NTFS Computer Name: LUKANET-B06D147 | User Name: luki | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: On | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 90 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-08-30 19:08:03 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\luki\Moje dokumenty\Downloads\OTL.exe PRC - [2011-08-09 20:55:50 | 009,118,208 | ---- | M] (Creative Team S.A.) -- C:\Program Files\WapSter\WapSter AQQ\AQQ.exe PRC - [2011-08-07 17:15:52 | 000,140,952 | ---- | M] (Google Inc.) -- C:\Documents and Settings\luki\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.65\GoogleCrashHandler.exe PRC - [2011-03-15 10:17:40 | 002,071,904 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgtray.exe PRC - [2010-11-25 11:45:09 | 000,755,552 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgscanx.exe PRC - [2010-11-25 11:44:21 | 000,725,344 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgcsrvx.exe PRC - [2010-09-27 20:24:16 | 000,621,920 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgnsx.exe PRC - [2010-08-11 22:05:29 | 001,101,152 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgchsvx.exe PRC - [2010-08-11 22:05:28 | 000,515,424 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgrsx.exe PRC - [2010-08-11 22:05:26 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files\AVG\AVG9\avgwdsvc.exe PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-09-20 19:31:54 | 000,020,480 | ---- | M] (Ansys, Inc) -- D:\ansys\v110\RSM\bin\JobManagerService.exe PRC - [2007-09-20 19:31:52 | 000,020,480 | ---- | M] (Ansys, Inc.) -- D:\ansys\v110\RSM\bin\ScriptHostService.exe PRC - [2007-03-28 14:11:58 | 001,433,600 | ---- | M] () -- C:\Program Files\Ansys Inc\Shared Files\Licensing\intel\ansyslmd.exe PRC - [2006-11-03 16:23:44 | 001,327,104 | ---- | M] (Macrovision Corporation) -- C:\Program Files\Ansys Inc\Shared Files\Licensing\intel\lmgrd.exe PRC - [2006-03-04 17:40:30 | 000,882,176 | ---- | M] () -- C:\Program Files\Kalendarz XP\Kalendarz.exe PRC - [2005-10-18 15:00:10 | 000,241,152 | ---- | M] (ASUSTeK COMPUTER INC.) -- C:\WINDOWS\ATKKBService.exe PRC - [2005-09-06 22:11:16 | 000,035,840 | ---- | M] (Dassault Systemes) -- D:\CATIA V5\intel_a\code\bin\CATSysDemon.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2011-07-18 12:02:10 | 000,577,536 | ---- | M] () -- C:\Program Files\WapSter\WapSter AQQ\System\Shared\Plugins\SMS.dll MOD - [2011-07-14 13:27:48 | 000,890,880 | ---- | M] () -- C:\Program Files\WapSter\WapSter AQQ\System\Shared\Plugins\GGNet.dll MOD - [2011-04-10 22:44:18 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_pl_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll MOD - [2011-04-10 22:44:16 | 000,311,296 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_pl_b77a5c561934e089\mscorlib.resources.dll MOD - [2011-03-30 16:39:58 | 000,771,584 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\3de39eb60b9d32af46f32f6c7a88fc7f\System.Runtime.Remoting.ni.dll MOD - [2010-10-13 13:25:49 | 011,798,016 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\411a627d6f5cb83509332253406988e5\System.Web.ni.dll MOD - [2010-10-13 13:25:13 | 000,212,992 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8b000cc703c9d95593b516bf2c2ec316\System.ServiceProcess.ni.dll MOD - [2010-10-13 13:20:07 | 000,971,264 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\ab688d0f9f333ba117832726bfb589c1\System.Configuration.ni.dll MOD - [2010-10-13 11:10:03 | 005,450,752 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\a6dbe24cbfe3ab6b318ed3095cc572d8\System.Xml.ni.dll MOD - [2010-10-13 11:03:53 | 007,949,824 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\08ffa4d388d5f007869aa7651c458e7c\System.ni.dll MOD - [2010-10-13 11:03:37 | 011,490,816 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\7bffd7ff2009f421fe5d229927588496\mscorlib.ni.dll MOD - [2010-08-25 11:41:20 | 000,304,640 | ---- | M] () -- C:\Program Files\WapSter\WapSter AQQ\System\Shared\Plugins\Contact.dll MOD - [2007-03-28 14:11:58 | 001,433,600 | ---- | M] () -- C:\Program Files\Ansys Inc\Shared Files\Licensing\intel\ansyslmd.exe MOD - [2006-03-17 17:11:56 | 000,081,408 | ---- | M] () -- C:\WINDOWS\system32\P17.dll MOD - [2006-03-04 17:40:30 | 000,882,176 | ---- | M] () -- C:\Program Files\Kalendarz XP\Kalendarz.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - [2011-04-10 22:50:33 | 000,077,944 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service) SRV - [2010-08-11 22:05:26 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files\AVG\AVG9\avgwdsvc.exe -- (avg9wd) SRV - [2007-09-20 19:31:54 | 000,020,480 | ---- | M] (Ansys, Inc) [Auto | Running] -- D:\ansys\v110\RSM\bin\JobManagerService.exe -- (JobManagerService110) SRV - [2007-09-20 19:31:52 | 000,020,480 | ---- | M] (Ansys, Inc.) [Auto | Running] -- D:\ansys\v110\RSM\bin\ScriptHostService.exe -- (ScriptHostService110) SRV - [2006-11-03 16:23:44 | 001,327,104 | ---- | M] (Macrovision Corporation) [Auto | Running] -- C:\Program Files\Ansys Inc\Shared Files\Licensing\intel\lmgrd.exe -- (ANSYS FLEXlm license manager) SRV - [2005-10-18 15:00:10 | 000,241,152 | ---- | M] (ASUSTeK COMPUTER INC.) [Auto | Running] -- C:\WINDOWS\ATKKBService.exe -- (ATKKeyboardService) SRV - [2005-09-23 07:01:16 | 002,799,808 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\msvsmon.exe -- (msvsmon80) SRV - [2005-09-06 22:11:16 | 000,035,840 | ---- | M] (Dassault Systemes) [Auto | Running] -- D:\CATIA V5\intel_a\code\bin\CATSysDemon.exe -- (BBDemon) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011-05-08 16:57:49 | 000,243,152 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtdix.sys -- (AvgTdiX) DRV - [2010-08-11 22:05:33 | 000,216,400 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgldx86.sys -- (AvgLdx86) DRV - [2010-08-11 22:05:33 | 000,029,584 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\avgmfx86.sys -- (AvgMfx86) DRV - [2010-08-04 22:05:22 | 000,685,816 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2010-02-03 15:56:56 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2010-01-27 04:09:02 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\npf.sys -- (npf) DRV - [2006-06-19 11:05:34 | 000,081,792 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp) DRV - [2006-03-20 19:34:56 | 001,452,032 | ---- | M] (Sensaura) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\p17filt.sys -- (p17filt) DRV - [2006-03-17 17:10:00 | 001,163,264 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\P17.sys -- (P17) DRV - [2006-02-08 10:26:00 | 000,011,264 | R--- | M] (ASUSTeK Computer Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\EIO.sys -- (EIO) DRV - [2005-12-08 12:54:52 | 000,114,688 | R--- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctoss2k.sys -- (ossrv) DRV - [2005-12-08 12:54:44 | 000,142,336 | R--- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ctsfm2k.sys -- (ctsfm2k) DRV - [2005-10-18 15:01:38 | 000,011,008 | ---- | M] (ASUSTeK COMPUTER INC.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\atkkbnt.sys -- (asuskbnt) DRV - [2004-12-22 20:58:14 | 000,008,704 | R--- | M] (Creative Technology Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\Pfmodnt.sys -- (PfModNT) DRV - [2003-07-11 15:22:08 | 000,014,912 | ---- | M] (IBM) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\LUMDriver.sys -- (LUMDriver) DRV - [2002-10-03 00:09:08 | 000,031,504 | ---- | M] (Robert Schlabbach) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RMSPPPOE.SYS -- (RMSPPPOE) WAN Miniport (PPP over Ethernet Protocol) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1645522239-1979792683-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.qooqlle.com/ IE - HKU\S-1-5-21-1645522239-1979792683-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@pages.tvunetworks.com/WebPlayer: C:\WINDOWS\system32\TVUAx\npTVUAx.dll (TVU networks) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\luki\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\luki\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.) O1 HOSTS File: ([2006-03-02 14:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (IE5BarLauncherBHO Class) - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.) O3 - HKLM\..\Toolbar: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.) O3 - HKU\S-1-5-21-1645522239-1979792683-725345543-1003\..\Toolbar\WebBrowser: (no name) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - No CLSID value found. O3 - HKU\S-1-5-21-1645522239-1979792683-725345543-1003\..\Toolbar\WebBrowser: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.) O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [P17Helper] C:\WINDOWS\System32\P17.dll () O4 - HKLM..\Run: [SkyTel] File not found O4 - HKU\S-1-5-21-1645522239-1979792683-725345543-1003..\Run: [AQQ] C:\Program Files\WapSter\WapSter AQQ\AQQ.exe (Creative Team S.A.) O4 - HKU\S-1-5-21-1645522239-1979792683-725345543-1003..\Run: [Crystal.exe] File not found O4 - HKU\S-1-5-21-1645522239-1979792683-725345543-1003..\Run: [NBJ] C:\Program Files\Ahead\Nero BackItUp\NBJ.exe (Ahead Software AG) O4 - HKU\S-1-5-21-1645522239-1979792683-725345543-1003..\Run: [nvwiz] C:\Documents and Settings\All Users\nvwiz.exe ( ) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Kalendarz XP.lnk = C:\Program Files\Kalendarz XP\Kalendarz.exe () O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Przyspieszenie uruchomienia programu AutoCAD.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart17.exe (Autodesk, Inc) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1645522239-1979792683-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {B4891BE9-835D-471B-B495-F5F3E6A8BBD7} http://cdn.iplex.pl/1791/viv-3.5.27.6/player/player_ocx.jpeg (VPlayer Control) O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\luki\Dane aplikacji\XnView\\xnview_wallpaper_20110323.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\luki\Dane aplikacji\XnView\\xnview_wallpaper_20110323.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010-08-04 21:17:11 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2011-04-10 22:50:29 | 000,000,000 | ---D | M] - D:\Auto Cad -- [ NTFS ] O33 - MountPoints2\{0bb6d2f2-a9fb-11e0-ad7a-0016e6336a47}\Shell - "" = AutoRun O33 - MountPoints2\{0bb6d2f2-a9fb-11e0-ad7a-0016e6336a47}\Shell\AutoRun\command - "" = H:\AutoRun.exe O33 - MountPoints2\{0bb6d2f5-a9fb-11e0-ad7a-0016e6336a47}\Shell - "" = AutoRun O33 - MountPoints2\{0bb6d2f5-a9fb-11e0-ad7a-0016e6336a47}\Shell\AutoRun\command - "" = H:\AutoRun.exe O33 - MountPoints2\{3e749634-a8d9-11e0-ad78-0016e6336a47}\Shell\AutoRun\command - "" = H:\keyboard/flash.exe O33 - MountPoints2\{3e749634-a8d9-11e0-ad78-0016e6336a47}\Shell\Explore\command - "" = H:\keyboard/flash.exe O33 - MountPoints2\{3e749634-a8d9-11e0-ad78-0016e6336a47}\Shell\Open\command - "" = H:\keyboard/flash.exe O33 - MountPoints2\{76ac21d4-bf9f-11e0-adaf-0016e6336a47}\Shell\AutoRun\command - "" = H:\SETUP.EXE O33 - MountPoints2\{a1ccb370-ab08-11e0-ad7c-0016e6336a47}\Shell - "" = AutoRun O33 - MountPoints2\{a1ccb370-ab08-11e0-ad7c-0016e6336a47}\Shell\AutoRun\command - "" = H:\AutoRun.exe O33 - MountPoints2\{a1ccb371-ab08-11e0-ad7c-0016e6336a47}\Shell - "" = AutoRun O33 - MountPoints2\{a1ccb371-ab08-11e0-ad7c-0016e6336a47}\Shell\AutoRun\command - "" = H:\AutoRun.exe O33 - MountPoints2\{afc7499e-15ea-11e0-abe2-0016e6336a47}\Shell - "" = AutoRun O33 - MountPoints2\{afc7499e-15ea-11e0-abe2-0016e6336a47}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a O33 - MountPoints2\{ed2485c6-1679-11e0-abe4-0016e6336a47}\Shell - "" = AutoRun O33 - MountPoints2\{ed2485c6-1679-11e0-abe4-0016e6336a47}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a O33 - MountPoints2\{f064f1cb-fef1-11df-abac-0016e6336a47}\Shell\AutoRun\command - "" = H:\Toshiba\Launcher\start.exe O33 - MountPoints2\{f356a407-eb2e-11df-ab7a-0016e6336a47}\Shell\AutoRun\command - "" = KAZAN\\\\marijana.exe O33 - MountPoints2\{f356a407-eb2e-11df-ab7a-0016e6336a47}\Shell\explore\command - "" = KAZAN\\\\\marijana.exe O33 - MountPoints2\{f356a407-eb2e-11df-ab7a-0016e6336a47}\Shell\open\command - "" = KAZAN\\\\\marijana.exe O33 - MountPoints2\{ff4e7ee0-96bb-11e0-ad45-0016e6336a47}\Shell - "" = Autorun O33 - MountPoints2\{ff4e7ee0-96bb-11e0-ad45-0016e6336a47}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL start.exe O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 90 Days ==========[/color] [2011-08-31 20:22:08 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\luki\Recent [2011-08-30 18:54:36 | 000,498,688 | ---- | C] ( ) -- C:\Documents and Settings\All Users\nvwiz.exe [2011-08-26 22:22:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\K-Lite Codec Pack [2011-08-26 22:22:11 | 000,839,680 | ---- | C] (http://www.mp3dev.org/) -- C:\WINDOWS\System32\lameACM.acm [2011-08-26 22:22:11 | 000,237,568 | ---- | C] (www.helixcommunity.org) -- C:\WINDOWS\System32\yv12vfw.dll [2011-08-26 22:22:11 | 000,151,552 | ---- | C] (fccHandler) -- C:\WINDOWS\System32\ac3acm.acm [2011-08-25 20:53:37 | 000,000,000 | ---D | C] -- C:\Program Files\vShare.tv plugin [2011-08-24 17:16:07 | 000,000,000 | ---D | C] -- C:\_OTL [2011-08-23 19:44:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\luki\Menu Start\Programy\Google Chrome [2011-08-18 22:07:19 | 000,098,304 | ---- | C] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll [2011-08-18 22:00:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\luki\Menu Start\Programy\KONAMI [2011-08-18 07:24:45 | 000,000,000 | ---D | C] -- C:\Data [2011-08-18 07:12:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\luki\Ustawienia lokalne\Dane aplikacji\searchplugins [2011-08-08 20:06:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\luki\Pulpit\Nowy folder [2011-08-01 20:58:11 | 000,000,000 | ---D | C] -- C:\Program Files\JDownloader [2011-07-31 15:09:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\luki\Moje dokumenty\KONAMI [2011-07-31 00:59:23 | 000,737,280 | ---- | C] (Indigo Rose Corporation) -- C:\WINDOWS\iun6002.exe [2011-07-14 17:43:33 | 000,000,000 | ---D | C] -- C:\Program Files\SopCast [2011-07-14 17:43:33 | 000,000,000 | ---D | C] -- C:\Documents and Settings\luki\Menu Start\Programy\SopCast [2011-06-25 19:49:23 | 000,061,440 | ---- | C] (Brother Industries Ltd.) -- C:\WINDOWS\System32\brprtink.dll [2011-06-25 19:49:20 | 001,535,488 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\BrWia09c.dll [2011-06-25 19:49:20 | 000,055,808 | ---- | C] (Brother Industries, Ltd.) -- C:\WINDOWS\System32\BrUsi09c.dll [2011-06-25 19:48:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Brother [2011-06-25 19:33:46 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbprint.sys [2011-06-12 19:13:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\luki\Dane aplikacji\Windows Search [2011-06-12 19:12:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\luki\Ustawienia lokalne\Dane aplikacji\Identities [2011-06-12 19:12:22 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Desktop Search [2011-06-12 19:12:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\GroupPolicy [2011-06-12 19:11:00 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\offfilt.dll [2011-06-12 19:11:00 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nlhtml.dll [2011-06-12 19:11:00 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mimefilt.dll [2002-04-11 02:41:06 | 000,065,536 | R--- | C] ( ) -- C:\WINDOWS\System32\A3d.dll [1 C:\Documents and Settings\All Users\Dokumenty\*.tmp files -> C:\Documents and Settings\All Users\Dokumenty\*.tmp -> ] [color=#E56717]========== Files - Modified Within 90 Days ==========[/color] [2011-08-31 20:26:27 | 085,111,995 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm [2011-08-31 20:24:36 | 000,000,460 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{FA45B6D4-B35C-46DD-B6B0-71793271FA17}.job [2011-08-31 20:22:18 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011-08-31 20:22:13 | 000,045,378 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2011-08-31 20:21:58 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-08-30 19:21:00 | 000,001,128 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-1979792683-725345543-1003UA.job [2011-08-30 18:54:40 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\luki\Ustawienia lokalne\Dane aplikacji\patterns.ini [2011-08-30 18:54:33 | 000,498,688 | ---- | M] ( ) -- C:\Documents and Settings\All Users\nvwiz.exe [2011-08-28 18:04:26 | 000,053,760 | ---- | M] () -- C:\Documents and Settings\luki\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-08-28 17:21:00 | 000,001,076 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-1979792683-725345543-1003Core.job [2011-08-28 16:39:06 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2011-08-25 20:53:39 | 000,000,069 | ---- | M] () -- C:\prefs.js [2011-08-18 22:07:19 | 000,098,304 | ---- | M] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll [2011-08-18 22:00:58 | 000,000,373 | ---- | M] () -- C:\Documents and Settings\luki\Pulpit\Pro Evolution Soccer 6.lnk [2011-08-08 21:43:33 | 005,240,376 | ---- | M] () -- C:\Documents and Settings\luki\Pulpit\EXIsport_Kampan_1108_letak_PL_web.pdf [2011-08-08 10:00:00 | 000,074,752 | ---- | M] () -- C:\WINDOWS\System32\ff_vfw.dll [2011-08-08 10:00:00 | 000,000,038 | ---- | M] () -- C:\WINDOWS\avisplitter.ini [2011-08-01 20:58:27 | 000,000,767 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\JDownloader.lnk [2011-07-31 00:59:08 | 000,737,280 | ---- | M] (Indigo Rose Corporation) -- C:\WINDOWS\iun6002.exe [2011-07-21 07:21:52 | 000,282,128 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-07-16 16:17:06 | 000,151,552 | ---- | M] (fccHandler) -- C:\WINDOWS\System32\ac3acm.acm [2011-07-14 17:43:33 | 000,000,672 | ---- | M] () -- C:\Documents and Settings\luki\Pulpit\SopCast.lnk [2011-07-09 09:17:59 | 000,493,632 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2011-07-09 09:17:59 | 000,435,260 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2011-07-09 09:17:59 | 000,084,916 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2011-07-09 09:17:59 | 000,068,156 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2011-07-06 20:41:30 | 001,784,832 | ---- | M] () -- C:\Documents and Settings\luki\file.avi [2011-07-06 20:41:25 | 001,376,256 | ---- | M] () -- C:\Documents and Settings\luki\file.db [2011-07-06 18:36:33 | 000,079,980 | ---- | M] () -- C:\Documents and Settings\luki\file.err [2011-07-06 18:36:29 | 001,835,008 | ---- | M] () -- C:\Documents and Settings\luki\file.rst [2011-07-06 18:36:29 | 000,131,072 | ---- | M] () -- C:\Documents and Settings\luki\file.full [2011-07-06 18:36:29 | 000,065,536 | ---- | M] () -- C:\Documents and Settings\luki\file.mode [2011-07-06 18:36:29 | 000,065,536 | ---- | M] () -- C:\Documents and Settings\luki\file.esav [2011-07-06 18:36:29 | 000,003,712 | ---- | M] () -- C:\Documents and Settings\luki\file.BCS [2011-07-06 18:36:29 | 000,000,151 | ---- | M] () -- C:\Documents and Settings\luki\file.stat [2011-07-06 18:36:28 | 001,835,008 | ---- | M] () -- C:\Documents and Settings\luki\file.dbb [2011-07-06 18:36:28 | 000,000,732 | ---- | M] () -- C:\Documents and Settings\luki\file.mntr [2011-07-04 22:05:20 | 000,006,131 | ---- | M] () -- C:\Documents and Settings\luki\3.1.err [2011-07-04 22:05:15 | 000,131,072 | ---- | M] () -- C:\Documents and Settings\luki\3.1.rst [2011-07-04 22:05:15 | 000,065,536 | ---- | M] () -- C:\Documents and Settings\luki\3.1.mode [2011-07-04 22:05:15 | 000,065,536 | ---- | M] () -- C:\Documents and Settings\luki\3.1.full [2011-07-04 22:05:15 | 000,065,536 | ---- | M] () -- C:\Documents and Settings\luki\3.1.esav [2011-07-04 22:05:15 | 000,065,536 | ---- | M] () -- C:\Documents and Settings\luki\3.1.emat [2011-07-04 22:05:15 | 000,003,552 | ---- | M] () -- C:\Documents and Settings\luki\3.1.BCS [2011-07-04 22:05:15 | 000,000,151 | ---- | M] () -- C:\Documents and Settings\luki\3.1.stat [2011-07-04 22:05:14 | 000,000,732 | ---- | M] () -- C:\Documents and Settings\luki\3.1.mntr [2011-07-04 22:04:56 | 000,003,378 | ---- | M] () -- C:\Documents and Settings\luki\www.rst [2011-07-04 22:02:15 | 008,740,352 | ---- | M] () -- C:\Documents and Settings\luki\3.1.avi [2011-07-04 21:57:40 | 009,042,944 | ---- | M] () -- C:\Documents and Settings\luki\wyboczenie.avi [2011-07-04 21:57:19 | 000,131,072 | ---- | M] () -- C:\Documents and Settings\luki\wyboczenie.rst [2011-07-04 21:57:19 | 000,065,536 | ---- | M] () -- C:\Documents and Settings\luki\wyboczenie.mode [2011-07-04 21:57:19 | 000,065,536 | ---- | M] () -- C:\Documents and Settings\luki\wyboczenie.esav [2011-07-04 21:57:19 | 000,065,536 | ---- | M] () -- C:\Documents and Settings\luki\wyboczenie.emat [2011-07-04 21:57:18 | 000,065,536 | ---- | M] () -- C:\Documents and Settings\luki\wyboczenie.full [2011-07-04 21:57:18 | 000,003,552 | ---- | M] () -- C:\Documents and Settings\luki\wyboczenie.BCS [2011-07-04 21:57:18 | 000,000,732 | ---- | M] () -- C:\Documents and Settings\luki\wyboczenie.mntr [2011-07-04 21:57:18 | 000,000,151 | ---- | M] () -- C:\Documents and Settings\luki\wyboczenie.stat [2011-07-04 21:55:48 | 002,031,616 | ---- | M] () -- C:\Documents and Settings\luki\3.1.db [2011-07-03 23:35:41 | 000,065,536 | ---- | M] () -- C:\Documents and Settings\luki\file.emat [2011-07-03 23:25:33 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\luki\file.sda [2011-06-27 20:07:05 | 000,238,691 | ---- | M] () -- C:\Documents and Settings\luki\Pulpit\MechanikaiBudowaMaszyn_IIst_Podst.pdf [2011-06-27 20:06:48 | 000,135,627 | ---- | M] () -- C:\Documents and Settings\luki\Pulpit\Zastosowanie_InforamtykiwBudowieMaszyn_MiBM-IIst.pdf [2011-06-25 19:50:06 | 000,000,404 | ---- | M] () -- C:\WINDOWS\BRWMARK.INI [2011-06-25 19:49:24 | 000,000,050 | ---- | M] () -- C:\WINDOWS\System32\BRIDF10A.DAT [2011-06-24 16:44:30 | 000,243,200 | ---- | M] () -- C:\WINDOWS\System32\xvidvfw.dll [2011-06-24 16:28:22 | 000,650,752 | ---- | M] () -- C:\WINDOWS\System32\xvidcore.dll [1 C:\Documents and Settings\All Users\Dokumenty\*.tmp files -> C:\Documents and Settings\All Users\Dokumenty\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-08-30 18:54:40 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\luki\Ustawienia lokalne\Dane aplikacji\patterns.ini [2011-08-26 22:22:11 | 000,000,414 | ---- | C] () -- C:\WINDOWS\System32\lame_acm.xml [2011-08-26 22:22:11 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2011-08-26 22:22:10 | 000,650,752 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2011-08-26 22:22:10 | 000,243,200 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2011-08-26 22:22:10 | 000,074,752 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2011-08-25 20:53:39 | 000,000,069 | ---- | C] () -- C:\prefs.js [2011-08-18 22:00:58 | 000,000,373 | ---- | C] () -- C:\Documents and Settings\luki\Pulpit\Pro Evolution Soccer 6.lnk [2011-08-08 21:43:38 | 005,240,376 | ---- | C] () -- C:\Documents and Settings\luki\Pulpit\EXIsport_Kampan_1108_letak_PL_web.pdf [2011-08-01 20:58:27 | 000,000,767 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\JDownloader.lnk [2011-07-14 17:43:33 | 000,000,672 | ---- | C] () -- C:\Documents and Settings\luki\Pulpit\SopCast.lnk [2011-07-04 22:04:56 | 000,003,378 | ---- | C] () -- C:\Documents and Settings\luki\www.rst [2011-07-04 22:02:03 | 008,740,352 | ---- | C] () -- C:\Documents and Settings\luki\3.1.avi [2011-07-04 22:01:20 | 000,065,536 | ---- | C] () -- C:\Documents and Settings\luki\3.1.mode [2011-07-04 22:01:18 | 000,131,072 | ---- | C] () -- C:\Documents and Settings\luki\3.1.rst [2011-07-04 22:01:18 | 000,065,536 | ---- | C] () -- C:\Documents and Settings\luki\3.1.full [2011-07-04 22:01:18 | 000,065,536 | ---- | C] () -- C:\Documents and Settings\luki\3.1.esav [2011-07-04 22:01:18 | 000,065,536 | ---- | C] () -- C:\Documents and Settings\luki\3.1.emat [2011-07-04 22:01:18 | 000,003,552 | ---- | C] () -- C:\Documents and Settings\luki\3.1.BCS [2011-07-04 22:01:18 | 000,000,732 | ---- | C] () -- C:\Documents and Settings\luki\3.1.mntr [2011-07-04 22:01:18 | 000,000,151 | ---- | C] () -- C:\Documents and Settings\luki\3.1.stat [2011-07-04 21:57:25 | 009,042,944 | ---- | C] () -- C:\Documents and Settings\luki\wyboczenie.avi [2011-07-04 21:57:18 | 000,065,536 | ---- | C] () -- C:\Documents and Settings\luki\wyboczenie.mode [2011-07-04 21:57:17 | 000,003,552 | ---- | C] () -- C:\Documents and Settings\luki\wyboczenie.BCS [2011-07-04 21:57:17 | 000,000,151 | ---- | C] () -- C:\Documents and Settings\luki\wyboczenie.stat [2011-07-04 21:57:15 | 000,131,072 | ---- | C] () -- C:\Documents and Settings\luki\wyboczenie.rst [2011-07-04 21:57:15 | 000,065,536 | ---- | C] () -- C:\Documents and Settings\luki\wyboczenie.full [2011-07-04 21:57:15 | 000,065,536 | ---- | C] () -- C:\Documents and Settings\luki\wyboczenie.esav [2011-07-04 21:57:15 | 000,065,536 | ---- | C] () -- C:\Documents and Settings\luki\wyboczenie.emat [2011-07-04 21:57:15 | 000,000,732 | ---- | C] () -- C:\Documents and Settings\luki\wyboczenie.mntr [2011-07-04 21:56:30 | 000,006,131 | ---- | C] () -- C:\Documents and Settings\luki\3.1.err [2011-07-04 21:56:11 | 002,031,616 | ---- | C] () -- C:\Documents and Settings\luki\3.1.db [2011-07-03 23:25:33 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\luki\file.sda [2011-07-03 19:03:39 | 000,065,536 | ---- | C] () -- C:\Documents and Settings\luki\file.emat [2011-06-27 20:07:07 | 000,238,691 | ---- | C] () -- C:\Documents and Settings\luki\Pulpit\MechanikaiBudowaMaszyn_IIst_Podst.pdf [2011-06-27 20:06:53 | 000,135,627 | ---- | C] () -- C:\Documents and Settings\luki\Pulpit\Zastosowanie_InforamtykiwBudowieMaszyn_MiBM-IIst.pdf [2011-06-25 19:50:06 | 000,000,404 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI [2011-06-25 19:49:24 | 000,000,050 | ---- | C] () -- C:\WINDOWS\System32\BRIDF10A.DAT [2011-06-14 19:10:59 | 000,001,128 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-1979792683-725345543-1003UA.job [2011-06-14 19:10:58 | 000,001,076 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1645522239-1979792683-725345543-1003Core.job [2011-03-30 18:25:53 | 000,319,792 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2011-03-30 16:42:30 | 000,000,000 | ---- | C] () -- C:\WINDOWS\eDrawingOfficeAutomator.INI [2011-03-21 13:00:30 | 000,027,456 | ---- | C] () -- C:\WINDOWS\System32\solidlocalmon.dll [2011-03-21 13:00:30 | 000,018,752 | ---- | C] () -- C:\WINDOWS\System32\solidlocalui.dll [2011-03-20 22:11:43 | 000,005,781 | ---- | C] () -- C:\WINDOWS\System32\Ludap17.ini [2011-03-20 22:11:43 | 000,000,039 | R--- | C] () -- C:\WINDOWS\System32\ctzapxx.ini [2011-01-15 14:49:55 | 000,000,028 | ---- | C] () -- C:\WINDOWS\wordpad.ini [2011-01-13 14:24:40 | 000,056,144 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat [2010-09-05 17:51:38 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2010-08-13 11:35:16 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2010-08-05 11:55:42 | 000,053,760 | ---- | C] () -- C:\Documents and Settings\luki\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-08-04 23:09:05 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2010-08-04 23:08:01 | 000,282,128 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010-08-04 22:21:48 | 000,006,857 | ---- | C] () -- C:\WINDOWS\System32\mswrdt.dat [2010-08-04 21:50:39 | 000,046,592 | ---- | C] () -- C:\WINDOWS\System32\asfrench.dll [2010-08-04 21:50:39 | 000,046,080 | ---- | C] () -- C:\WINDOWS\System32\asrussian.dll [2010-08-04 21:50:39 | 000,046,080 | ---- | C] () -- C:\WINDOWS\System32\asgerman.dll [2010-08-04 21:50:39 | 000,046,080 | ---- | C] () -- C:\WINDOWS\System32\aseng.dll [2010-08-04 21:50:39 | 000,045,568 | ---- | C] () -- C:\WINDOWS\System32\askorean.dll [2010-08-04 21:50:39 | 000,045,568 | ---- | C] () -- C:\WINDOWS\System32\asjapan.dll [2010-08-04 21:50:39 | 000,045,568 | ---- | C] () -- C:\WINDOWS\System32\aschs.dll [2010-08-04 21:50:39 | 000,010,496 | ---- | C] () -- C:\WINDOWS\System32\ATKOSDMini.DLL [2010-08-04 21:50:39 | 000,000,018 | ---- | C] () -- C:\WINDOWS\System32\atkid.ini [2010-08-04 21:50:38 | 000,045,568 | ---- | C] () -- C:\WINDOWS\System32\ASCHT.dll [2010-08-04 21:19:26 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2010-08-04 21:14:25 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2010-01-27 04:09:02 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll [2006-03-17 17:11:56 | 000,081,408 | ---- | C] () -- C:\WINDOWS\System32\P17.dll [2006-03-02 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2006-03-02 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2006-03-02 14:00:00 | 000,493,632 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2006-03-02 14:00:00 | 000,435,260 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2006-03-02 14:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2006-03-02 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2006-03-02 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2006-03-02 14:00:00 | 000,084,916 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2006-03-02 14:00:00 | 000,068,156 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2006-03-02 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2006-03-02 14:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2006-03-02 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2006-03-02 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2006-03-02 14:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2006-03-02 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin [2006-03-02 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [2006-02-13 15:05:00 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2006-02-13 15:05:00 | 001,519,616 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe [2006-02-13 15:05:00 | 001,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2006-02-13 15:05:00 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe [2006-02-13 15:05:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2006-02-13 15:05:00 | 000,573,440 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll [2006-02-13 15:05:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2006-02-13 15:05:00 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe [2006-02-13 15:05:00 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe [2006-02-13 15:05:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll [2006-02-13 15:05:00 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll [2005-04-26 02:05:50 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll [2003-10-02 19:48:18 | 000,053,248 | R--- | C] () -- C:\WINDOWS\System32\P17CPI.dll [color=#E56717]========== LOP Check ==========[/color] [2011-03-30 15:34:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Autodesk [2010-08-11 22:05:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\avg9 [2011-03-15 10:19:42 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Common Files [2010-10-12 18:56:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DassaultSystemes [2010-09-20 14:43:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2010-11-04 19:07:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla [2010-10-12 18:23:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IsolatedStorage [2010-10-20 00:18:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM [2011-03-21 13:00:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SolidDocuments [2010-11-11 21:59:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dane aplikacji\Softland [2010-10-12 19:15:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\luki\Dane aplikacji\Ansys [2011-01-07 18:45:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\luki\Dane aplikacji\Autodesk [2010-08-05 11:35:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\luki\Dane aplikacji\DassaultSystemes [2011-04-01 13:20:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\luki\Dane aplikacji\DWGeditor [2011-06-12 18:48:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\luki\Dane aplikacji\EurekaLog [2010-10-02 17:38:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\luki\Dane aplikacji\Gadu-Gadu 10 [2011-08-17 20:10:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\luki\Dane aplikacji\ipla [2010-12-13 21:23:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\luki\Dane aplikacji\Mathsoft [2010-09-20 14:17:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\luki\Dane aplikacji\Nowe Gadu-Gadu [2010-10-20 00:18:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\luki\Dane aplikacji\OpenFM [2011-01-19 01:17:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\luki\Dane aplikacji\Opera [2011-08-17 20:14:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\luki\Dane aplikacji\RDRM [2010-11-11 21:59:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\luki\Dane aplikacji\Softland [2011-03-21 14:39:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\luki\Dane aplikacji\SolidDocuments [2011-08-30 18:57:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\luki\Dane aplikacji\uTorrent [2011-06-12 19:13:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\luki\Dane aplikacji\Windows Search [2011-08-19 19:19:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\luki\Dane aplikacji\XnView [2010-08-12 21:45:46 | 000,000,502 | ---- | M] () -- C:\WINDOWS\Tasks\Install.job [2011-08-31 20:24:36 | 000,000,460 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{FA45B6D4-B35C-46DD-B6B0-71793271FA17}.job [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 68 bytes -> C:\WINDOWS\win.ini:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\System32\winmine.exe:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\System32\vga.dll:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\System32\sol.exe:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\System32\sndvol32.exe:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\System32\riched32.dll:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\System32\oleacc.dll:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\System32\nvwddi.dll:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\System32\nvsvc32.exe:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\System32\nview.dll:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\System32\nv4_disp.dll:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\System32\NeroCheck.exe:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\System32\mycomput.dll:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\System32\mshearts.exe:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\System32\msacm32.drv:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\System32\ImagXpr7.dll:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\System32\ImagX7.dll:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\System32\freecell.exe:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\System32\drivers\nv4_mini.sys:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\System32\charmap.exe:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\System32\ATKOSDMini.DLL:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\System32\ATKDISP.dll:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\IsUninst.exe:KAVICHS @Alternate Data Stream - 68 bytes -> C:\WINDOWS\ATKKBService.exe:KAVICHS @Alternate Data Stream - 68 bytes -> C:\Documents and Settings\luki\Pulpit\Counter Strike 1.6 Non Steam.lnk:KAVICHS @Alternate Data Stream - 68 bytes -> C:\Documents and Settings\luki\Moje dokumenty\desktop.ini:KAVICHS @Alternate Data Stream - 68 bytes -> C:\Documents and Settings\luki\Menu Start\Programy\Pomoc zdalna.lnk:KAVICHS @Alternate Data Stream - 68 bytes -> C:\Documents and Settings\luki\Menu Start\Programy\desktop.ini:KAVICHS @Alternate Data Stream - 68 bytes -> C:\Documents and Settings\luki\Menu Start\Programy\Autostart\desktop.ini:KAVICHS @Alternate Data Stream - 68 bytes -> C:\Documents and Settings\luki\Dane aplikacji\desktop.ini:KAVICHS @Alternate Data Stream - 68 bytes -> C:\Documents and Settings\All Users\Menu Start\Programy\Windows Movie Maker.lnk:KAVICHS @Alternate Data Stream - 68 bytes -> C:\Documents and Settings\All Users\Menu Start\Programy\Windows Messenger.lnk:KAVICHS @Alternate Data Stream - 68 bytes -> C:\Documents and Settings\All Users\Menu Start\Programy\desktop.ini:KAVICHS @Alternate Data Stream - 68 bytes -> C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\desktop.ini:KAVICHS @Alternate Data Stream - 68 bytes -> C:\Documents and Settings\All Users\Dokumenty\desktop.ini:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\wupdmgr.exe:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\wshpl.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\WISPTIS.EXE:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\wfwnet.drv:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\vga64k.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\vga256.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\vga.drv:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\VEN2232.OLB:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\VBAME.DLL:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\VBAEND32.OLB:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\VBAEN32.OLB:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\utildll.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\user.exe:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\unicode.nls:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\TwnLib4.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\TwnLib20.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\tssoft32.acm:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\timer.drv:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\telephon.cpl:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\system.drv:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\stdole32.tlb:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\sound.drv:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\sortkey.nls:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\SCP32.DLL:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\rsvp.exe:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\olethk32.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\olesvr32.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\oleaccrc.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nwiz.exe:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nwc.cpl:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrszht.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrszhc.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrstr.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrssv.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrssl.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrssk.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrsru.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrsptb.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrspt.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrspl.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrsno.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrsnl.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrsko.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrsja.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrsit.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrshu.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrshe.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrsfr.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrsfi.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrsesm.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrses.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrseng.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrsel.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrsde.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrsda.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrscs.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwrsar.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwimg.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvwdmcpl.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\NVUNINST.EXE:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvtuicpl.cpl:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvshell.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrszht.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrszhc.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrstr.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrssv.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrssl.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrssk.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrsru.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrsptb.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrspt.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrspl.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrsno.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrsnl.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrsko.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrsja.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrsit.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrshu.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrshe.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrsfr.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrsfi.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrsesm.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrses.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrseng.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrsel.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrsde.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrsda.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrscs.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvrsar.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvoglnt.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvnt4cpl.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvmccsrs.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvmccs.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvhwvid.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvdspsch.exe:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvcolor.exe:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvcodins.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvcod.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvappbar.exe:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nvapi.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\nscompat.tlb:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\netui2.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\netmsg.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\netevent.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\msxml3r.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\mswrdt.dat:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\msgsm32.acm:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\msg723.acm:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\msg711.acm:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\mscat32.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\mouse.drv:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\mmsystem.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\mmdrv.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\mlang.dat:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\mfc42loc.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\mcicda.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\mapi32.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\main.cpl:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\lz32.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\LoopyMusic.wav:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\keystone.exe:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\keyboard.drv:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\kbdus.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\kbdpl1.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\kbdpl.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\ir32_32.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\INKED.DLL:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\ImagXRA7.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\ImagXR7.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\icmui.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\geo.nls:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\FM20ENU.DLL:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\ega.cpi:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drwtsn32.exe:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drivers\wmilib.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drivers\usbd.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drivers\rdpcdd.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drivers\raspti.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drivers\rasacd.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drivers\ptilink.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\system32\DRIVERS\pciide.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drivers\parvdm.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drivers\nwlnkfwd.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drivers\nwlnkflt.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drivers\null.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drivers\mnmdd.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drivers\ipfltdrv.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\system32\DRIVERS\ftdisk.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drivers\fs_rec.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drivers\dxgthk.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drivers\dxapi.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drivers\dmload.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drivers\cdaudio.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drivers\Bravo_n.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drivers\Bravo_a.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drivers\beep.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drivers\audstub.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\drivers\atkkbnt.sys:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\dfrgres.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\deskperf.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\deskmon.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\deskadp.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\ctype.nls:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\crtdll.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\comm.drv:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\calc.exe:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\c_950.nls:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\c_936.nls:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\c_1258.nls:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\c_1257.nls:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\c_1256.nls:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\c_1255.nls:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\c_1254.nls:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\c_1253.nls:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\c_1252.nls:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\c_1251.nls:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\BuzzingBee.wav:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\bootvid.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\avicap32.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\atkrec.rc0:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\ATKOSDX32.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\atkosdRUS.rc0:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\atkosdKOR.rc0:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\atkosdJPN.rc0:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\atkosdGER.rc0:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\atkosdFRA.rc0:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\atkosdENG.rc0:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\atkosdCHT.rc0:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\atkosdCHS.rc0:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\ATKOGL32.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\atkid.ini:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\atkgtvt.rc0:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\atkgtvon.rc0:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\atkgtvoff.rc0:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\atkgft.rc0:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\atkgfon.rc0:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\atkgfoff.rc0:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\ATKF16.rc1:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\ATKF16.rc0:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\ATKF12.rc1:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\ATKF12.rc0:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\atkdst.rc0:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\atkdson.rc0:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\atkdsoff.rc0:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\ATKDispCPL.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\asrussian.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\askorean.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\asjapan.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\asgerman.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\asfrench.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\aseng.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\ASCHT.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\aschs.dll:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\amcompat.tlb:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\System32\$winnt$.inf:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\setupapi.log.0.old:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\SchedLgU.Txt:KAVICHS @Alternate Data Stream - 36 bytes -> C:\WINDOWS\bootstat.dat:KAVICHS @Alternate Data Stream - 36 bytes -> C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE:KAVICHS @Alternate Data Stream - 36 bytes -> C:\Program Files\Ahead\Nero BackItUp\NBJ.exe:KAVICHS @Alternate Data Stream - 36 bytes -> C:\Documents and Settings\luki\Pulpit\HEXelon MAX.lnk:KAVICHS @Alternate Data Stream - 36 bytes -> C:\Documents and Settings\luki\ntuser.ini:KAVICHS @Alternate Data Stream - 36 bytes -> C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Kalendarz XP.lnk:KAVICHS @Alternate Data Stream - 36 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\desktop.ini:KAVICHS @Alternate Data Stream - 36 bytes -> C:\boot.ini:KAVICHS @Alternate Data Stream - 196 bytes -> C:\WINDOWS\WindowsUpdate.log:KAVICHS @Alternate Data Stream - 164 bytes -> C:\WINDOWS\system.ini:KAVICHS @Alternate Data Stream - 132 bytes -> C:\WINDOWS\System32\wpa.dbl:KAVICHS @Alternate Data Stream - 132 bytes -> C:\WINDOWS\System32\wpa.bak:KAVICHS @Alternate Data Stream - 100 bytes -> C:\WINDOWS\System32\NvMcTray.dll:KAVICHS @Alternate Data Stream - 100 bytes -> C:\WINDOWS\System32\NvCpl.dll:KAVICHS @Alternate Data Stream - 100 bytes -> C:\WINDOWS\System32\FNTCACHE.DAT:KAVICHS < End of report >