OTL logfile created on: 2011-09-28 23:35:07 - Run 5 OTL by OldTimer - Version 3.2.29.1 Folder = C:\Users\bartuś\Desktop 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 2,43 Gb Available Physical Memory | 60,69% Memory free 7,99 Gb Paging File | 6,13 Gb Available in Paging File | 76,66% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 451,91 Gb Total Space | 27,55 Gb Free Space | 6,10% Space Free | Partition Type: NTFS Drive D: | 13,55 Gb Total Space | 2,25 Gb Free Space | 16,59% Space Free | Partition Type: NTFS Drive E: | 99,02 Mb Total Space | 92,43 Mb Free Space | 93,34% Space Free | Partition Type: FAT32 Unable to calculate disk information. Computer Name: BARTUŚ-KOMPUTER | User Name: bartuś | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-09-28 21:38:33 | 000,582,656 | ---- | M] (OldTimer Tools) -- C:\Users\bartuś\Desktop\OTL.exe PRC - [2011-09-05 09:11:25 | 000,947,056 | ---- | M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe PRC - [2011-07-27 12:53:28 | 019,781,576 | ---- | M] (Redefine Sp z o.o.) -- C:\Program Files (x86)\ipla\ipla.exe PRC - [2011-07-11 23:47:06 | 000,074,752 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\Winamp\winampa.exe PRC - [2010-12-24 15:21:19 | 000,395,640 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe PRC - [2010-10-27 20:17:52 | 000,207,424 | ---- | M] (ArcSoft Inc.) -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe PRC - [2010-10-14 18:27:38 | 000,092,216 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe PRC - [2010-03-18 12:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe PRC - [2009-10-06 00:08:42 | 000,210,216 | ---- | M] (CyberLink) -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe PRC - [2009-09-04 14:35:14 | 000,013,600 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe PRC - [2009-07-17 16:25:20 | 000,842,816 | ---- | M] (DigitalPersona, Inc.) -- C:\Program Files (x86)\DigitalPersona\Bin\DpAgent.exe PRC - [2009-07-17 16:25:20 | 000,322,624 | ---- | M] (DigitalPersona, Inc.) -- C:\Program Files (x86)\DigitalPersona\Bin\DpHostW.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2011-07-27 12:53:32 | 000,068,456 | ---- | M] () -- C:\Program Files (x86)\ipla\ziplib.dll MOD - [2011-07-27 12:53:30 | 000,392,552 | ---- | M] () -- C:\Program Files (x86)\ipla\jabberoo.dll MOD - [2011-07-27 12:27:58 | 000,291,840 | ---- | M] () -- C:\Program Files (x86)\ipla\MediaFileScanner.dll MOD - [2011-07-27 12:25:22 | 000,156,160 | ---- | M] () -- C:\Program Files (x86)\ipla\lua.dll MOD - [2011-07-16 11:17:52 | 006,271,136 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll MOD - [2009-10-06 00:08:38 | 000,931,112 | ---- | M] () -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMediaLibrary.dll MOD - [2009-08-20 13:35:48 | 007,745,536 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll MOD - [2009-08-20 13:35:46 | 002,121,728 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll MOD - [2009-08-20 13:35:46 | 000,135,168 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV:[b]64bit:[/b] - [2010-09-22 19:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc) SRV:[b]64bit:[/b] - [2009-09-04 14:35:12 | 000,873,248 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe -- (btwdins) SRV:[b]64bit:[/b] - [2009-08-05 06:44:56 | 000,203,264 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:[b]64bit:[/b] - [2009-07-22 03:33:32 | 000,240,128 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\stacsv64.exe -- (STacSV) SRV:[b]64bit:[/b] - [2009-07-14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:[b]64bit:[/b] - [2009-07-12 23:18:24 | 001,924,400 | ---- | M] (Validity Sensors, Inc.) [Auto | Running] -- C:\Windows\SysNative\vcsFPService.exe -- (vcsFPService) SRV:[b]64bit:[/b] - [2009-07-08 14:49:02 | 000,030,520 | ---- | M] (Hewlett-Packard) [Auto | Running] -- C:\Windows\SysNative\hpservice.exe -- (hpsrv) SRV:[b]64bit:[/b] - [2009-03-02 23:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe -- (AESTFilters) SRV - [2010-10-26 17:05:24 | 000,155,344 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe -- (Sony Ericsson PCCompanion) SRV - [2010-10-14 18:27:38 | 000,092,216 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe -- (HPDrvMntSvc.exe) SRV - [2010-06-14 15:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2010-03-18 12:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon) SRV - [2009-07-17 16:25:20 | 000,322,624 | ---- | M] (DigitalPersona, Inc.) [Auto | Running] -- C:\Program Files (x86)\DigitalPersona\Bin\DpHostW.exe -- (DpHost) SRV - [2009-07-14 03:15:31 | 000,396,288 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (WAS) SRV - [2009-07-14 03:15:31 | 000,396,288 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (W3SVC) SRV - [2009-07-14 03:14:53 | 000,061,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\apphostsvc.dll -- (AppHostSvc) SRV - [2009-07-12 23:04:26 | 001,656,112 | ---- | M] (Validity Sensors, Inc.) [Auto | Running] -- C:\Windows\SysWOW64\vcsFPService.exe -- (vcsFPService) SRV - [2009-06-10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2009-06-06 02:07:28 | 000,250,616 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe -- (GameConsoleService) SRV - [2009-02-22 13:00:00 | 000,129,584 | ---- | M] (EasyBits Sofware AS) [Auto | Running] -- C:\Windows\SysWOW64\ezsvc7.dll -- (ezSharedSvc) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV:[b]64bit:[/b] - [2011-03-20 20:29:43 | 000,027,176 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc) DRV:[b]64bit:[/b] - [2011-03-20 20:29:43 | 000,013,352 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt) DRV:[b]64bit:[/b] - [2010-09-23 01:36:48 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr) DRV:[b]64bit:[/b] - [2010-06-23 16:20:44 | 000,189,952 | ---- | M] (Hauppauge, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcwhdpvr.sys -- (hcwhdpvr) DRV:[b]64bit:[/b] - [2010-06-21 13:20:14 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:[b]64bit:[/b] - [2010-02-26 14:33:40 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64j.sys -- (UsbserFilt) DRV:[b]64bit:[/b] - [2010-02-26 14:33:24 | 000,009,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev) DRV:[b]64bit:[/b] - [2010-02-26 14:33:22 | 000,025,088 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdcx64) DRV:[b]64bit:[/b] - [2010-02-26 14:33:22 | 000,019,456 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcdx64) DRV:[b]64bit:[/b] - [2009-09-21 20:47:14 | 001,484,800 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:[b]64bit:[/b] - [2009-09-17 22:56:24 | 000,021,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwrchid.sys -- (btwrchid) DRV:[b]64bit:[/b] - [2009-09-17 22:56:16 | 000,035,104 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwl2cap.sys -- (btwl2cap) DRV:[b]64bit:[/b] - [2009-09-17 22:56:14 | 000,132,648 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwavdt.sys -- (btwavdt) DRV:[b]64bit:[/b] - [2009-09-17 22:56:10 | 000,098,344 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btwaudio.sys -- (btwaudio) DRV:[b]64bit:[/b] - [2009-08-05 07:23:00 | 006,038,016 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:[b]64bit:[/b] - [2009-07-24 09:49:00 | 000,119,312 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService) DRV:[b]64bit:[/b] - [2009-07-22 03:33:32 | 000,487,936 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA) DRV:[b]64bit:[/b] - [2009-07-15 01:16:34 | 000,273,456 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:[b]64bit:[/b] - [2009-07-14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:[b]64bit:[/b] - [2009-07-14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:[b]64bit:[/b] - [2009-07-14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:[b]64bit:[/b] - [2009-07-14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:[b]64bit:[/b] - [2009-07-14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:[b]64bit:[/b] - [2009-07-14 02:06:32 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser) DRV:[b]64bit:[/b] - [2009-07-14 01:31:10 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:[b]64bit:[/b] - [2009-07-08 14:49:08 | 000,030,008 | ---- | M] (Hewlett-Packard) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hpdskflt.sys -- (hpdskflt) DRV:[b]64bit:[/b] - [2009-07-08 14:48:50 | 000,041,272 | ---- | M] (Hewlett-Packard) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelerometer.sys -- (Accelerometer) DRV:[b]64bit:[/b] - [2009-06-29 20:17:00 | 000,070,656 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\enecir.sys -- (enecir) DRV:[b]64bit:[/b] - [2009-06-10 23:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92) DRV:[b]64bit:[/b] - [2009-06-10 23:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac) DRV:[b]64bit:[/b] - [2009-06-10 23:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA) DRV:[b]64bit:[/b] - [2009-06-10 23:01:06 | 001,146,880 | ---- | M] (LSI Corp) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem) DRV:[b]64bit:[/b] - [2009-06-10 22:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:[b]64bit:[/b] - [2009-06-10 22:35:33 | 000,389,120 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7) DRV:[b]64bit:[/b] - [2009-06-10 22:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64) Intel(R) DRV:[b]64bit:[/b] - [2009-06-10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:[b]64bit:[/b] - [2009-06-10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:[b]64bit:[/b] - [2009-06-10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:[b]64bit:[/b] - [2009-05-23 08:52:30 | 000,215,040 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:[b]64bit:[/b] - [2009-05-22 08:32:52 | 000,311,424 | ---- | M] (AVerMedia TECHNOLOGIES, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AVerAF15.sys -- (AVerAF15) DRV:[b]64bit:[/b] - [2009-05-05 07:30:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie) AMD PCI Express (3GIO) DRV:[b]64bit:[/b] - [2009-04-29 09:48:32 | 000,018,432 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys -- (HpqKbFiltr) DRV:[b]64bit:[/b] - [2009-03-09 07:49:08 | 000,036,408 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter) DRV:[b]64bit:[/b] - [2008-08-28 12:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd) DRV - [2009-07-14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1312970488-2484046678-3195451813-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-21-1312970488-2484046678-3195451813-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF:[b]64bit:[/b] - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@ganymede/GanymedeNetPlugin,version=1.0: C:\Program Files (x86)\Ganymede\Plugins\npganymedenet.dll ( ) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Media Software and Services Inc) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\otis@digitalpersona.com: C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt\ [2010-02-24 02:44:05 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\otis@digitalpersona.com: C:\Program Files (x86)\DigitalPersona\Bin\firefoxext [2010-02-24 02:44:05 | 000,000,000 | ---D | M] O1 HOSTS File: ([2011-09-28 19:26:27 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2:[b]64bit:[/b] - BHO: (DigitalPersona Personal Extension) - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files\DigitalPersona\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.) O2 - BHO: (DigitalPersona Personal Extension) - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files (x86)\DigitalPersona\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.) O4:[b]64bit:[/b] - HKLM..\Run: [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe () O4:[b]64bit:[/b] - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.) O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.) O4 - HKLM..\Run: [DpAgent] C:\Program Files (x86)\DigitalPersona\Bin\dpagent.exe (DigitalPersona, Inc.) O4 - HKLM..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe (EasyBits Software AS) O4 - HKLM..\Run: [HPCam_Menu] c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [WinampAgent] C:\Program Files (x86)\Winamp\winampa.exe (Nullsoft, Inc.) O4 - HKU\S-1-5-21-1312970488-2484046678-3195451813-1000..\Run: [Gadu-Gadu 10] C:\Program Files (x86)\Gadu-Gadu 10\gg.exe (GG Network S.A.) O4 - HKU\S-1-5-21-1312970488-2484046678-3195451813-1000..\Run: [IPLA!] C:\Program Files (x86)\ipla\ipla.exe (Redefine Sp z o.o.) O4 - HKU\S-1-5-21-1312970488-2484046678-3195451813-1000..\Run: [uTorrent] C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent, Inc.) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1312970488-2484046678-3195451813-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1312970488-2484046678-3195451813-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\S-1-5-21-1312970488-2484046678-3195451813-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0 O7 - HKU\S-1-5-21-1312970488-2484046678-3195451813-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0 O8:[b]64bit:[/b] - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O8:[b]64bit:[/b] - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O8:[b]64bit:[/b] - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O8 - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9:[b]64bit:[/b] - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9:[b]64bit:[/b] - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra Button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra Button: Wyślij do interfejsu Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : Wyślij do urządzenia &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{53606B4D-5E6A-4D1C-9901-5D7101165239}: DhcpNameServer = 217.172.224.160 89.228.6.43 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E8C1BA62-DAE2-40B6-B1F3-428CDACAF398}: DhcpNameServer = 192.168.1.1 O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\ms-itss - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll (EasyBits Software Corp.) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010-11-27 13:09:55 | 000,000,000 | ---D | M] - C:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2010-11-27 13:09:53 | 000,000,000 | ---D | M] - D:\autorun.inf -- [ NTFS ] O32 - AutoRun File - [2010-11-27 12:09:48 | 000,000,000 | ---D | M] - E:\autorun.inf -- [ FAT32 ] O34 - HKLM BootExecute: (autocheck autochk *) O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %* O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...com [@ = ComFile] -- "%1" %* O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-09-28 23:21:17 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{AD087597-3DF2-4AEC-9C06-94884903CDCC} [2011-09-28 23:21:02 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{AF1F0A13-7CF8-4ABA-B557-CCC1F6020758} [2011-09-28 23:18:37 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN [2011-09-28 21:34:56 | 000,000,000 | ---D | C] -- C:\Windows\temp [2011-09-28 19:27:25 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{8F5466B2-CC96-429E-8437-C72F9B6E2A57} [2011-09-28 19:27:04 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{023C31E6-0D88-487B-B13F-BF317FD0F41F} [2011-09-28 18:35:06 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe [2011-09-28 18:35:06 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe [2011-09-28 18:35:06 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe [2011-09-28 18:34:54 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT [2011-09-28 18:34:44 | 000,000,000 | ---D | C] -- C:\Qoobox [2011-09-28 18:30:06 | 004,232,763 | R--- | C] (Swearware) -- C:\Users\bartuś\Desktop\ComboFix.exe [2011-09-28 18:27:25 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{A1BA9E84-629D-4C1A-9EBA-5DEEA4FDB89F} [2011-09-28 18:26:48 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{91B60597-5567-4C4E-AB4F-B93C6FF5878D} [2011-09-28 18:23:39 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{A1AB2BF3-9CD3-4C59-AAA4-666DA083BFCA} [2011-09-28 18:23:25 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{6278DFF2-D449-408B-AF4E-0A3131FCF1E7} [2011-09-28 16:17:10 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{524EBE49-D07B-4EBC-857B-E3E13CBD3372} [2011-09-28 16:16:53 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{BF22BD8D-403D-4525-866F-CF00D6795F74} [2011-09-28 07:37:43 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{E5BCE6A7-F5A3-4CDC-8564-287FB7CE5FD2} [2011-09-28 07:37:28 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{EB02359F-9093-415A-AE99-E83B0897F1E1} [2011-09-28 00:59:04 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{597608F4-9584-44EF-A892-514EA76C7810} [2011-09-28 00:58:51 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{C9D76D1B-EC88-4595-92F9-BD61E2B13EFD} [2011-09-27 14:20:03 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{5F757675-E3F2-4AAC-A322-B02F58E0B09F} [2011-09-27 14:19:19 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{03E16504-F3C1-4354-A40E-84A7B99E9FDE} [2011-09-27 10:18:06 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{5D980A9E-097A-48A3-A632-B338F9ED9775} [2011-09-27 10:17:54 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{06510946-4D84-45AD-A5B7-686CC80695F3} [2011-09-26 21:36:01 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{24D375AE-034E-4DF8-A78E-062D40C580E4} [2011-09-26 21:35:45 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{3A8D5F76-19A7-4C4B-B48A-1358F686E6C0} [2011-09-26 13:56:31 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{2CC9F8AF-109F-408A-948A-A2CABBA16E4E} [2011-09-26 13:56:18 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{BF786F10-CF97-4844-B0CB-2C430311A536} [2011-09-26 09:31:38 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{64BBC8A1-1B32-49E4-B734-ECFF5CABDEDF} [2011-09-26 09:31:24 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{1CC40D88-2AA8-42EE-B6B8-464F2882447C} [2011-09-25 23:55:23 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{465B02F0-FD3A-410C-8643-1706390A5F3A} [2011-09-25 23:55:07 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{41B293BC-9DDE-43D9-B106-7A2AC2C1E612} [2011-09-25 18:31:46 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{4B538BCD-B5FA-4C20-A844-43A9E4B9C44C} [2011-09-25 18:31:25 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{C2BBA8A9-339A-4217-9B75-8AB4EEDCC28B} [2011-09-25 15:11:46 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{5FB1719A-8C37-49E0-9D2E-31C658CA338C} [2011-09-25 15:11:18 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{7503AFC7-5F8B-4768-A6F1-923B7F4EE6E2} [2011-09-25 14:45:11 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{549F9655-11DF-45EF-8E96-EC204F838785} [2011-09-25 14:44:57 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{FA4EF53A-3FB6-4E8B-B282-DE4CC9E5E441} [2011-09-25 09:32:51 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{EDEE4C0A-87C0-4218-B0FE-DF218690D51E} [2011-09-25 09:32:37 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{D1D04241-A1BA-4EB9-9EF5-6B0CBF9F8A7D} [2011-09-24 20:39:17 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{6AC950E8-23C1-4181-A3DB-D41F27645138} [2011-09-24 20:39:03 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{1433716A-3660-402A-A973-46B1FCD22F78} [2011-09-24 19:14:57 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{2CF146D1-6736-48BD-860A-575D7B6C86F3} [2011-09-24 19:14:40 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{FB3ED92F-5605-4101-8D64-685587D66620} [2011-09-24 11:25:35 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{8E7E4FCA-52B9-4980-8CA7-65B8685CAD85} [2011-09-24 11:25:11 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{6496437E-4DA2-4931-A79A-7AC13D6DE2D1} [2011-09-23 15:49:50 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{5DB8C195-2D25-4665-9BD2-E12EF8EA5D7A} [2011-09-23 15:49:37 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{65FBE946-C022-47CB-A64B-2F10B7374EF1} [2011-09-23 08:17:00 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{A2564BEC-6242-4890-A27F-75709ECCB442} [2011-09-23 08:16:45 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{01462DD5-7D8B-43C1-A405-B1595DFC7E20} [2011-09-22 15:03:17 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{BBD7F854-E3E8-495A-A7F8-32749295AA22} [2011-09-22 15:03:04 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{92F88567-8776-456E-822C-768C348B9686} [2011-09-22 07:09:01 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{11A2F366-32B6-4522-B8BE-E8E2C8DC2DE9} [2011-09-22 07:08:48 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{DD5BBDB2-31DE-4AA5-80EE-955C49EA6A61} [2011-09-21 15:33:16 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{40C08825-6BC1-4524-B108-99C895957A3C} [2011-09-21 15:33:02 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{96067C8A-8D39-4CAB-A636-56224B21A600} [2011-09-21 08:14:08 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{C77E8FB0-9779-432F-BC2E-D7B697BF014B} [2011-09-21 08:13:51 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{02C56932-7B53-41E9-BABC-75227D30A150} [2011-09-20 22:03:16 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{2C62E4C5-F6F6-4801-8CA4-695A4ECEBA3C} [2011-09-20 22:02:58 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{1D2E82F3-FA2B-4D9A-8F1F-CF44C00AD64E} [2011-09-20 15:54:16 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{D8A79353-14B4-4B74-8603-9783F7FDC9BA} [2011-09-20 15:53:30 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{441A15ED-CF69-440D-8CA8-197DC8DC61D9} [2011-09-20 07:02:23 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{182E1E89-DDCB-4FA7-B8A2-A01C8530A49A} [2011-09-20 07:02:02 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{D0924E43-4187-43E9-A509-240504E73EC4} [2011-09-19 15:28:04 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{771B6A9A-F7CA-4765-98D6-E6C8F1C1A600} [2011-09-19 15:27:46 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{BBCD514E-21BD-4A48-B613-2DE805EC975B} [2011-09-17 13:45:41 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{B38F05CF-264B-45DF-B159-2CC98A9BC601} [2011-09-17 13:45:01 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{ECB7463E-526F-4BA4-B8C4-AC9558663EBA} [2011-09-17 12:20:20 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{28C3022D-4620-4405-8B55-B31A3B903D2C} [2011-09-17 12:20:01 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{64E0FC8A-4751-4B4F-9239-CEF423004BD1} [2011-09-17 11:40:08 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{6E64ADD9-7552-4A27-99E1-13197C13E705} [2011-09-17 11:39:50 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{4076CBC6-3F2B-4C9A-8EFC-61C64FB524BB} [2011-09-16 07:16:53 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{C83A25B1-22CD-4AB2-A68E-1732CDB189EC} [2011-09-16 07:16:46 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{F0A711EA-0AC3-4915-B9B5-8FF7083DC667} [2011-09-15 17:48:26 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{F306503F-00D8-4109-B63A-2E1CDB9EAA5D} [2011-09-15 15:03:45 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{759C92D8-792A-4F77-AE74-77A15073C54D} [2011-09-15 15:03:30 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{21E92BF4-180D-493D-8D89-9F8FC748A07D} [2011-09-15 07:22:19 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{E607FBFE-38B1-4815-B368-176478D86E64} [2011-09-15 07:22:06 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{17967005-3894-45DE-AE20-D0D85DB4629C} [2011-09-14 19:57:22 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{38946CCA-C190-4C0D-9C35-200FBF3355AB} [2011-09-14 19:57:09 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{03BF5DBA-2E06-4334-B7D7-10100F4CFE4D} [2011-09-14 19:05:58 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{49B8E28D-638C-45F4-B6E4-836F92825575} [2011-09-14 19:05:46 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{AAAB3555-B0A9-48A4-ABDD-5951185FFDB0} [2011-09-14 16:20:35 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{18997782-3E23-4F64-8F3C-316BA62BD30F} [2011-09-14 16:20:19 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{AB945AE6-ACD0-444B-B1DE-69299FC8D893} [2011-09-14 07:47:00 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{EB169531-6F4D-4CBF-B7D5-6638EA3D37DF} [2011-09-14 07:46:48 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{9CD1FD1A-4AB5-4AC7-B311-529FB7D34B87} [2011-09-13 14:20:09 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{480F4AF3-2010-4C02-9B61-B3779C06DE00} [2011-09-13 14:19:52 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{338C356C-E440-482B-98C6-86AA8BAD46D5} [2011-09-13 08:21:12 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{0602DF8A-D16D-46B7-8D7E-9BDCC41ED314} [2011-09-13 08:21:00 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{49D1F6DD-2653-44DE-AAD4-0A90E34EADA8} [2011-09-12 18:18:50 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{D0B66C51-1D56-409F-8FE6-196AC3FAAFAF} [2011-09-12 18:18:34 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{1C22F634-F067-49DA-930E-C811FD0CCB3E} [2011-09-12 17:51:56 | 000,000,000 | ---D | C] -- C:\Users\bartuś\Documents\WINRAR [2011-09-12 16:57:34 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{5F2A177A-5402-4023-9381-3CE456E6FBBB} [2011-09-12 16:57:14 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{DE329F40-E480-44E3-8881-315D2E96AAC7} [2011-09-12 14:57:10 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{A3E5615A-D0AD-4B08-AD13-DEE70A9B07B9} [2011-09-12 14:56:57 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{D6D43868-2E6D-4A56-BA8F-C59D30BEA005} [2011-09-12 09:28:10 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{F89AF6D2-2540-48CD-AF46-548CEBC0ECF1} [2011-09-12 09:27:57 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{386DCA31-3BAD-487F-9E6A-82505D71AF8F} [2011-09-12 00:36:25 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{C9B2ECB0-6480-4E6B-8B98-1CFAFE90BEDD} [2011-09-12 00:36:12 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{EF4C017E-5A84-40B6-B51A-5F18DDDEED0A} [2011-09-11 19:12:38 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{64749C8E-1BD3-484D-853D-DE904B642701} [2011-09-11 19:12:24 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{B7883DB6-EB66-4FB8-9EF8-408CD66A52F7} [2011-09-11 17:42:15 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{D685DD8A-E25A-4D51-9771-1BAC6884FC11} [2011-09-11 17:41:58 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{0BFAA509-24EF-410B-A399-98367F3868A1} [2011-09-11 15:54:25 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{3C4F353D-8B04-4F2B-8D03-0E2DB4CAD883} [2011-09-11 15:54:11 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{13E68EF2-E522-4F72-AAE8-D396406CBEEF} [2011-09-11 11:15:30 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{899A35D0-7A13-408B-A491-3B2419943146} [2011-09-11 11:15:12 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{3E755BD1-270B-4E1D-B431-5FA9EA6B2D9A} [2011-09-10 18:56:00 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{34FA39D2-2467-4234-834A-46571F755A17} [2011-09-10 18:55:48 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{25739F32-168C-4947-8E69-ED70324A70F1} [2011-09-10 15:08:20 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{33BB8AEB-D101-4404-88DF-D971F96B6445} [2011-09-10 15:08:02 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{05770403-4074-463D-B49D-7E794A0BF731} [2011-09-10 10:55:09 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{9A24A706-2F3C-4EEE-B46C-8D477D8A5E3F} [2011-09-10 10:54:55 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{5538D154-AE5E-473D-9CA9-6108F3D067D5} [2011-09-09 16:44:09 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{BD234300-8A99-4719-9ACA-B73727C420A3} [2011-09-09 16:43:53 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{9B7F5453-0454-4E1B-8971-594B8D44F3EB} [2011-09-08 22:20:15 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{C47821FF-A537-4985-8B08-99D919303136} [2011-09-08 22:20:00 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{794588EE-0DA4-43EB-AA08-1610B662DDCD} [2011-09-08 14:27:44 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{8B55292C-2A98-435E-8423-220C454F85E1} [2011-09-08 14:27:28 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{962F7B87-EC4D-4EE0-8A14-F3CE110D5722} [2011-09-08 08:42:35 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{287AFA8F-D83F-49D3-92C5-CD946A58B9E6} [2011-09-08 08:42:21 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{B3F417CF-A259-47CF-85A0-EC0CDA4F731C} [2011-09-07 15:39:44 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{7FECD15B-5FB6-4903-94DA-08746BFB42D3} [2011-09-07 15:39:24 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{B5A7258D-3AD4-4955-954D-E9825C397076} [2011-09-07 07:46:28 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{A6BFD850-8A33-4097-B3F4-42958CF5EF44} [2011-09-07 07:46:13 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{A52DC20F-FEA5-4222-A087-89A4A1AE8BA6} [2011-09-06 23:04:41 | 000,000,000 | ---D | C] -- C:\Users\bartuś\Desktop\dla bartusia [2011-09-06 21:48:41 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{85D92D3F-4C99-45D1-B1A1-527241EB7AE8} [2011-09-06 21:48:26 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{7CCBC55F-3FD2-4C31-B4C7-9FFA93BAF09F} [2011-09-06 14:24:15 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{194C6947-C9CF-4002-839E-6AB8670790DF} [2011-09-06 14:23:58 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{E0F21A7C-1511-4686-8399-D23B6D74681D} [2011-09-06 07:51:38 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{677EB65A-1702-4F35-BE81-94D90213941E} [2011-09-06 07:51:24 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{54FF63FF-8D4B-49EB-BB86-019C5F5F8AF2} [2011-09-05 20:00:35 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{2DBA9202-1598-4A12-98C0-DDEF31BDE1AE} [2011-09-05 19:59:59 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{F25454EE-A97B-4170-B78E-DD527B054490} [2011-09-05 08:17:15 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{88982842-E404-42DC-B7E5-E0C6A94688A9} [2011-09-05 08:17:01 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{0134AA7D-B429-4336-84E5-517AE41F6FA4} [2011-09-04 21:53:40 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{82B36D96-A593-4D98-82C6-6C0300C43298} [2011-09-04 21:53:26 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{C0862BC0-6716-4F70-8A1C-32747D42A4D2} [2011-09-04 15:15:39 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{D8BA5E0B-4870-4E52-8474-6D81F6602106} [2011-09-04 15:15:25 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{2C72E5D1-64D9-479E-871C-FB800106C1FB} [2011-09-04 13:23:20 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{CAC0899D-40F8-45F2-8125-9DF6ECAC4F4E} [2011-09-04 13:23:03 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{BC939F5E-DAD6-43D5-BAD2-E649313FDD3E} [2011-09-03 21:22:15 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{C3A487D7-E00A-41C8-8056-9907CB6495FE} [2011-09-03 21:22:03 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{A2F574E4-BFAB-418B-8A05-74999C0A3486} [2011-09-03 18:02:41 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{7E392390-4DB1-47C1-B7F3-D1FA3FD339B5} [2011-09-03 18:02:24 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{B3698C73-DBDA-4897-8536-6B7412AA1694} [2011-09-03 12:07:59 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{7A8D33D8-872B-4EF0-86F2-02A2F6032D82} [2011-09-03 12:07:43 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{0601C25E-5962-4DA2-8C2F-C75DC0EBF237} [2011-09-03 08:52:59 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{7F884498-0F71-4619-BFA6-DE29C6B04A36} [2011-09-03 08:52:40 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{AB1CA60D-4464-4AE0-BE52-0E04D08ABDDE} [2011-09-02 14:42:34 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{18E91BA2-CB58-4E10-A5FC-3939C1BC7ECE} [2011-09-02 14:42:20 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{C5DFC30E-BDC8-4012-9F10-E958370EB141} [2011-09-01 10:36:09 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{6A5F7201-A54B-439D-8447-D923CF16B884} [2011-09-01 10:35:55 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{90849FAD-7E72-402E-A616-0D1F03AB3952} [2011-08-31 14:49:50 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{B89C6E44-5E79-4FA6-A7AF-C3BE20E83D0D} [2011-08-31 12:49:55 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{31A23232-04B6-4714-9793-1EDF51EBD75E} [2011-08-31 12:49:41 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{709D10D8-5F4D-4FC0-8F28-FAFF4080C860} [2011-08-30 12:26:25 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{4579B010-419F-4618-8F48-7B252638DE94} [2011-08-30 12:26:10 | 000,000,000 | ---D | C] -- C:\Users\bartuś\AppData\Local\{8719C3A1-F99C-444F-9B09-F33B99E04C20} [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-09-28 23:28:12 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011-09-28 23:28:12 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011-09-28 23:19:51 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011-09-28 23:19:45 | 3218,235,392 | -HS- | M] () -- C:\hiberfil.sys [2011-09-28 21:38:33 | 000,582,656 | ---- | M] (OldTimer Tools) -- C:\Users\bartuś\Desktop\OTL.exe [2011-09-28 21:07:29 | 000,002,488 | ---- | M] () -- C:\Users\bartuś\Desktop\Obst_Bartlomiej.deklaracja [2011-09-28 21:06:15 | 000,150,984 | ---- | M] () -- C:\Users\bartuś\Desktop\Obst_Bartlomiej.pdf [2011-09-28 20:35:29 | 000,000,000 | ---- | M] () -- C:\Users\bartuś\Documents\QScan09282011_203443.jpg [2011-09-28 19:26:27 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts [2011-09-28 18:30:10 | 004,232,763 | R--- | M] (Swearware) -- C:\Users\bartuś\Desktop\ComboFix.exe [2011-09-28 18:01:20 | 000,696,626 | ---- | M] () -- C:\Users\bartuś\Documents\QScan09282011_175818.jpg [2011-09-28 18:01:17 | 000,782,323 | ---- | M] () -- C:\Users\bartuś\Documents\QScan09282011_175854.jpg [2011-09-28 18:01:12 | 000,588,326 | ---- | M] () -- C:\Users\bartuś\Documents\QScan09282011_175659.jpg [2011-09-28 18:00:34 | 000,563,059 | ---- | M] () -- C:\Users\bartuś\Documents\QScan09282011_175628.jpg [2011-09-28 17:07:15 | 000,000,336 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForbartuś.job [2011-09-13 16:13:45 | 000,712,233 | ---- | M] () -- C:\Users\bartuś\Documents\_20110913_16070101.jpg [2011-09-12 17:54:59 | 000,531,506 | ---- | M] () -- C:\Users\bartuś\Documents\_20110912_17403201.jpg [2011-09-12 17:54:58 | 000,545,981 | ---- | M] () -- C:\Users\bartuś\Documents\_20110912_17410407.jpg [2011-09-12 17:54:42 | 000,504,174 | ---- | M] () -- C:\Users\bartuś\Documents\_20110912_17422909.jpg [2011-09-12 17:54:27 | 000,504,686 | ---- | M] () -- C:\Users\bartuś\Documents\_20110912_17420600.jpg [2011-09-12 17:54:14 | 000,535,097 | ---- | M] () -- C:\Users\bartuś\Documents\_20110912_17413504.jpg [2011-09-12 17:48:17 | 003,290,039 | ---- | M] () -- C:\Users\bartuś\Documents\WINRAR.rar [2011-09-10 12:42:14 | 000,556,530 | ---- | M] () -- C:\Users\bartuś\Documents\_20110910_12402001.jpg [2011-09-06 23:10:54 | 002,873,996 | ---- | M] () -- C:\Users\bartuś\Desktop\dla bartusia.rar [2011-09-06 16:32:51 | 000,536,093 | ---- | M] () -- C:\Users\bartuś\Desktop\QScan09062011_163234.jpg [2011-09-05 22:11:50 | 000,495,180 | ---- | M] () -- C:\Users\bartuś\Documents\QScan09042011_195410.jpg [2011-09-05 22:06:55 | 000,601,621 | ---- | M] () -- C:\Users\bartuś\Documents\QScan09042011_195339.jpg [2011-08-30 14:34:48 | 001,100,449 | ---- | M] () -- C:\Users\bartuś\Desktop\s383.zip [2011-08-30 12:45:58 | 001,119,622 | ---- | M] () -- C:\Users\bartuś\Desktop\s365.zip [2011-08-30 12:29:00 | 001,126,692 | ---- | M] () -- C:\Users\bartuś\Desktop\s348.zip [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-09-28 21:07:29 | 000,002,488 | ---- | C] () -- C:\Users\bartuś\Desktop\Obst_Bartlomiej.deklaracja [2011-09-28 21:06:15 | 000,150,984 | ---- | C] () -- C:\Users\bartuś\Desktop\Obst_Bartlomiej.pdf [2011-09-28 20:35:29 | 000,000,000 | ---- | C] () -- C:\Users\bartuś\Documents\QScan09282011_203443.jpg [2011-09-28 18:35:06 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe [2011-09-28 18:35:06 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe [2011-09-28 18:35:06 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe [2011-09-28 18:35:06 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe [2011-09-28 18:35:06 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe [2011-09-28 17:59:53 | 000,782,323 | ---- | C] () -- C:\Users\bartuś\Documents\QScan09282011_175854.jpg [2011-09-28 17:59:52 | 000,588,326 | ---- | C] () -- C:\Users\bartuś\Documents\QScan09282011_175659.jpg [2011-09-28 17:59:49 | 000,696,626 | ---- | C] () -- C:\Users\bartuś\Documents\QScan09282011_175818.jpg [2011-09-28 17:59:44 | 000,563,059 | ---- | C] () -- C:\Users\bartuś\Documents\QScan09282011_175628.jpg [2011-09-13 16:13:22 | 000,712,233 | ---- | C] () -- C:\Users\bartuś\Documents\_20110913_16070101.jpg [2011-09-12 17:54:09 | 000,531,506 | ---- | C] () -- C:\Users\bartuś\Documents\_20110912_17403201.jpg [2011-09-12 17:54:01 | 000,545,981 | ---- | C] () -- C:\Users\bartuś\Documents\_20110912_17410407.jpg [2011-09-12 17:53:44 | 000,504,174 | ---- | C] () -- C:\Users\bartuś\Documents\_20110912_17422909.jpg [2011-09-12 17:53:35 | 000,504,686 | ---- | C] () -- C:\Users\bartuś\Documents\_20110912_17420600.jpg [2011-09-12 17:53:32 | 000,535,097 | ---- | C] () -- C:\Users\bartuś\Documents\_20110912_17413504.jpg [2011-09-12 17:46:24 | 003,290,039 | ---- | C] () -- C:\Users\bartuś\Documents\WINRAR.rar [2011-09-10 12:41:56 | 000,556,530 | ---- | C] () -- C:\Users\bartuś\Documents\_20110910_12402001.jpg [2011-09-06 23:03:47 | 000,536,093 | ---- | C] () -- C:\Users\bartuś\Desktop\QScan09062011_163234.jpg [2011-09-06 21:50:04 | 002,873,996 | ---- | C] () -- C:\Users\bartuś\Desktop\dla bartusia.rar [2011-09-05 20:16:12 | 000,495,180 | ---- | C] () -- C:\Users\bartuś\Documents\QScan09042011_195410.jpg [2011-09-05 20:16:10 | 000,601,621 | ---- | C] () -- C:\Users\bartuś\Documents\QScan09042011_195339.jpg [2011-08-30 14:38:45 | 000,748,086 | ---- | C] () -- C:\Users\bartuś\Desktop\s383.apk [2011-08-30 14:34:47 | 001,100,449 | ---- | C] () -- C:\Users\bartuś\Desktop\s383.zip [2011-08-30 12:47:19 | 000,764,251 | ---- | C] () -- C:\Users\bartuś\Desktop\s365.apk [2011-08-30 12:47:19 | 000,475,396 | ---- | C] () -- C:\Users\bartuś\Desktop\Present-4.jpg [2011-08-30 12:45:58 | 001,119,622 | ---- | C] () -- C:\Users\bartuś\Desktop\s365.zip [2011-08-30 12:31:45 | 000,652,559 | ---- | C] () -- C:\Users\bartuś\Desktop\sk48.apk [2011-08-30 12:29:00 | 001,126,692 | ---- | C] () -- C:\Users\bartuś\Desktop\s348.zip [2011-07-18 11:44:47 | 000,001,854 | ---- | C] () -- C:\Users\bartuś\AppData\Roaming\GhostObjGAFix.xml [2011-06-08 15:39:09 | 001,669,034 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011-05-05 15:37:01 | 000,000,000 | ---- | C] () -- C:\Windows\iSnooker.INI [2011-04-24 18:59:08 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini [2011-04-24 18:59:06 | 000,631,808 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll [2011-04-24 18:59:06 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2011-04-24 18:59:06 | 000,080,896 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll [2011-02-02 16:16:59 | 000,161,792 | ---- | C] () -- C:\Windows\SysWow64\drivers\ArcHlp.sys [2011-02-02 16:09:51 | 000,000,569 | ---- | C] () -- C:\Windows\HCWBlast.ini [2011-02-02 16:08:59 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\dmcrypto.dll [2011-02-02 16:08:43 | 000,002,336 | ---- | C] () -- C:\Windows\HCWPNP.INI [2010-11-13 11:36:40 | 000,175,616 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2010-06-14 19:50:28 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat [2010-04-02 18:17:34 | 000,179,091 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat [2010-02-24 02:15:32 | 000,000,283 | ---- | C] () -- C:\Windows\SysWow64\RStoneLog2.ini [2010-02-24 02:15:32 | 000,000,224 | ---- | C] () -- C:\Windows\SysWow64\RStoneLog.ini [2010-02-24 02:12:21 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2009-12-11 20:24:37 | 000,009,868 | ---- | C] () -- C:\Windows\SysWow64\ezdigsgn.dat [2009-09-29 16:25:16 | 000,013,312 | ---- | C] () -- C:\Windows\LPRES.DLL [2009-07-14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009-07-14 04:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2009-07-14 04:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2009-07-14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009-07-14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009-07-13 23:59:36 | 001,498,564 | ---- | C] () -- C:\Windows\SysWow64\igkrng400.bin [2009-07-13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009-06-10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [color=#E56717]========== LOP Check ==========[/color] [2010-06-21 13:34:29 | 000,000,000 | ---D | M] -- C:\Users\bartuś\AppData\Roaming\DAEMON Tools Lite [2010-06-14 19:26:04 | 000,000,000 | ---D | M] -- C:\Users\bartuś\AppData\Roaming\DigitalPersona [2010-11-13 12:22:36 | 000,000,000 | ---D | M] -- C:\Users\bartuś\AppData\Roaming\Gadu-Gadu 10 [2011-05-18 18:49:09 | 000,000,000 | ---D | M] -- C:\Users\bartuś\AppData\Roaming\GanymedeNet [2011-09-28 23:20:35 | 000,000,000 | ---D | M] -- C:\Users\bartuś\AppData\Roaming\ipla [2010-11-10 23:54:45 | 000,000,000 | ---D | M] -- C:\Users\bartuś\AppData\Roaming\MusicBrainz [2010-08-27 01:10:49 | 000,000,000 | ---D | M] -- C:\Users\bartuś\AppData\Roaming\Nokia [2010-11-23 22:44:49 | 000,000,000 | ---D | M] -- C:\Users\bartuś\AppData\Roaming\OpenFM [2010-06-14 19:31:01 | 000,000,000 | ---D | M] -- C:\Users\bartuś\AppData\Roaming\Opera [2010-08-27 01:11:55 | 000,000,000 | ---D | M] -- C:\Users\bartuś\AppData\Roaming\PC Suite [2011-06-09 19:07:57 | 000,000,000 | ---D | M] -- C:\Users\bartuś\AppData\Roaming\Raptr [2011-02-09 08:21:22 | 000,000,000 | ---D | M] -- C:\Users\bartuś\AppData\Roaming\Sony [2010-11-10 23:52:15 | 000,000,000 | ---D | M] -- C:\Users\bartuś\AppData\Roaming\TuneUpMedia [2011-09-28 23:42:43 | 000,000,000 | ---D | M] -- C:\Users\bartuś\AppData\Roaming\uTorrent [2011-03-13 22:51:24 | 000,000,000 | ---D | M] -- C:\Users\bartuś\AppData\Roaming\Windows Live Writer [2010-06-14 19:50:19 | 000,000,000 | ---D | M] -- C:\Users\bartuś\AppData\Roaming\_MDLogs [2011-09-14 19:50:53 | 000,032,608 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#E56717]========== Purity Check ==========[/color] < End of report >