OTL logfile created on: 2011-10-03 00:33:49 - Run 1 OTL by OldTimer - Version 3.2.29.1 Folder = C:\Documents and Settings\PAWEŁ\Pulpit Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,46 Gb Available Physical Memory | 73,05% Memory free 3,85 Gb Paging File | 3,49 Gb Available in Paging File | 90,85% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 97,65 Gb Total Space | 10,15 Gb Free Space | 10,39% Space Free | Partition Type: NTFS Drive E: | 200,43 Gb Total Space | 2,04 Gb Free Space | 1,02% Space Free | Partition Type: NTFS Computer Name: PAWEL | User Name: PAWEŁ | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-10-03 00:31:41 | 000,582,656 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\PAWEŁ\Pulpit\OTL.exe PRC - [2010-04-07 21:07:24 | 000,810,120 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe PRC - [2010-04-07 21:07:04 | 002,145,000 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe PRC - [2008-04-14 19:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2005-06-06 19:08:58 | 001,273,344 | ---- | M] (OSA Technologies Inc.) -- C:\Acer\eManager\anbmServ.exe PRC - [2005-03-28 18:04:00 | 000,188,416 | ---- | M] (Acer Inc) -- C:\Acer\ePM\EPM-DM.exe PRC - [2004-12-09 12:50:00 | 000,311,296 | ---- | M] (Dritek System Inc.) -- C:\Program Files\Launch Manager\QtZgAcer.EXE PRC - [2004-06-09 11:15:30 | 000,417,792 | ---- | M] (INPROCOMM) -- C:\Program Files\acer\Wireless\Utility\wlanutil.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2006-10-26 13:56:46 | 000,757,008 | ---- | M] () -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL MOD - [2003-07-29 09:27:40 | 000,078,336 | ---- | M] () -- C:\WINDOWS\system32\spool\prtprocs\w32x86\LXBKPP5C.DLL [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Auto | Stopped] -- -- (UserAccess) SRV - File not found [Disabled | Stopped] -- -- (HidServ) SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt) SRV - [2010-06-14 15:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2010-04-07 21:10:38 | 000,033,560 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EhttpSrv) SRV - [2010-04-07 21:07:24 | 000,810,120 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn) SRV - [2005-06-06 19:08:58 | 001,273,344 | ---- | M] (OSA Technologies Inc.) [Auto | Running] -- C:\Acer\eManager\anbmServ.exe -- (anbmService) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011-03-05 12:19:02 | 000,218,688 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV - [2010-06-07 17:18:12 | 000,008,552 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\asctrm.sys -- (ASCTRM) DRV - [2010-06-07 14:55:53 | 000,691,696 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2010-04-07 21:08:08 | 000,055,232 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdi.sys -- (epfwtdi) DRV - [2010-04-07 21:08:06 | 000,032,584 | ---- | M] (ESET) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\epfwndis.sys -- (Epfwndis) DRV - [2010-04-07 21:08:04 | 000,134,488 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epfw.sys -- (epfw) DRV - [2010-04-07 21:07:08 | 000,114,984 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv) DRV - [2010-04-07 21:03:44 | 000,139,192 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon) DRV - [2010-02-26 14:32:58 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt) DRV - [2010-02-26 14:32:46 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2010-02-26 14:32:44 | 000,022,528 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2010-02-26 14:32:44 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2008-08-26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2005-06-30 16:58:24 | 000,007,296 | ---- | M] (OSA Technologies, An Avocent Company) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\osaio.sys -- (osaio) DRV - [2005-04-28 22:37:00 | 001,132,544 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2005-03-24 16:54:08 | 000,078,208 | ---- | M] (Acer Value Labs, USA) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epm-shd.sys -- (EpmShd) DRV - [2005-01-14 15:57:16 | 000,004,010 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\osanbm.sys -- (osanbm) DRV - [2004-10-29 18:48:10 | 003,222,784 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\w29n51.sys -- (w29n51) Sterownik karty Intel(R) DRV - [2004-10-15 11:20:04 | 000,011,354 | ---- | M] (Intel Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\s24trans.sys -- (s24trans) DRV - [2004-10-11 12:24:00 | 000,045,056 | R--- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys -- (bcm4sbxp) DRV - [2004-07-19 13:10:00 | 000,004,096 | ---- | M] (Acer Value Labs, USA) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\epm-psd.sys -- (EpmPsd) DRV - [2004-06-25 14:31:00 | 000,276,480 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\camchal.sys -- (CAMCHALA) DRV - [2004-06-25 14:29:00 | 000,034,048 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\camcaud.sys -- (CAMCAUD) DRV - [2003-04-04 15:07:20 | 000,030,336 | ---- | M] (Politecnico di Torino) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\npf.sys -- (NPF) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1993962763-2049760794-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://gazeta.pl/0,0.html?sc=1 IE - HKU\S-1-5-21-1993962763-2049760794-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1 IE - HKU\S-1-5-21-1993962763-2049760794-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes] IE - HKU\S-1-5-21-1993962763-2049760794-1801674531-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.slubclick.com/back/crm/informeComercial.htm?comercial=1270 IE - HKU\S-1-5-21-1993962763-2049760794-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1993962763-2049760794-1801674531-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2010-06-07 14:24:10 | 000,000,000 | ---D | M] O1 HOSTS File: ([2006-03-02 14:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O4 - HKLM..\Run: [acerWireless] C:\Program Files\acer\Wireless\Utility\wlanutil.exe (INPROCOMM) O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET) O4 - HKLM..\Run: [EPM-DM] c:\Acer\ePM\EPM-DM.exe (Acer Inc) O4 - HKLM..\Run: [ePowerManagement] C:\Acer\ePM\ePM.exe (Acer Value Labs, Taiwan) O4 - HKLM..\Run: [Lexmark X1100 Series] C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe (Lexmark International, Inc.) O4 - HKLM..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE (Dritek System Inc.) O4 - HKU\S-1-5-21-1993962763-2049760794-1801674531-1004..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1993962763-2049760794-1801674531-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O15 - HKU\S-1-5-21-1993962763-2049760794-1801674531-1004\..Trusted Domains: polbank24.pl ([www] https in Zaufane witryny) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25) O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 0.0.0.0 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{40F6099E-C820-4206-A92E-620EA154B037}: DhcpNameServer = 192.168.1.1 0.0.0.0 O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\PAWEŁ\Dane aplikacji\IrfanView\IrfanView_Wallpaper.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\PAWEŁ\Dane aplikacji\IrfanView\IrfanView_Wallpaper.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010-06-01 19:12:12 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{1b2e636c-a966-11df-8254-0013ce763d2f}\Shell - "" = AutoRun O33 - MountPoints2\{1b2e636c-a966-11df-8254-0013ce763d2f}\Shell\AutoRun\command - "" = H:\AutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-10-03 00:31:31 | 000,582,656 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\PAWEŁ\Pulpit\OTL.exe [2011-09-03 12:17:23 | 000,602,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\crypt32.dll [2004-11-24 20:25:52 | 000,335,872 | ---- | C] ( ) -- C:\WINDOWS\System32\drvc.dll [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2060-08-18 19:02:32 | 002,023,424 | ---- | M] (Inprise Corporation) -- C:\WINDOWS\System32\Vcl50.bpl [2060-08-18 19:02:22 | 001,496,064 | ---- | M] (Inprise Corporation) -- C:\WINDOWS\System32\Cc3250mt.dll [2060-08-18 19:02:12 | 000,248,832 | ---- | M] (Inprise Corporation) -- C:\WINDOWS\System32\Vclx50.bpl [2060-08-18 18:40:44 | 000,909,824 | ---- | M] (Inprise Corporation) -- C:\WINDOWS\System32\Cp3245mt.dll [2060-08-18 18:40:44 | 000,024,064 | ---- | M] (Inprise Corporation) -- C:\WINDOWS\System32\Borlndmm.dll [2011-10-03 00:31:41 | 000,582,656 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\PAWEŁ\Pulpit\OTL.exe [2011-10-03 00:22:46 | 000,000,462 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{6BB4F05F-A5F3-4043-BB47-41239FEA9465}.job [2011-10-02 23:58:01 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2011-10-02 23:57:43 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-10-02 23:57:30 | 2145,505,280 | -HS- | M] () -- C:\hiberfil.sys [2011-10-02 23:54:53 | 007,864,320 | -H-- | M] () -- C:\Documents and Settings\PAWEŁ\NTUSER.DAT [2011-10-02 23:54:53 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\PAWEŁ\ntuser.ini [2011-10-02 23:54:49 | 006,421,564 | -H-- | M] () -- C:\Documents and Settings\PAWEŁ\Ustawienia lokalne\Dane aplikacji\IconCache.db [2011-10-02 23:41:59 | 000,000,788 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk [2011-10-02 23:20:12 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011-09-19 20:44:32 | 000,002,267 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Skype.lnk [2011-09-16 20:46:01 | 000,202,240 | ---- | M] () -- C:\Documents and Settings\PAWEŁ\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-09-16 11:31:09 | 000,053,983 | ---- | M] () -- C:\Documents and Settings\PAWEŁ\Pulpit\Pawel_skype.jpg [2011-09-16 08:30:33 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2011-09-10 08:44:21 | 000,135,635 | ---- | M] () -- C:\Documents and Settings\PAWEŁ\Pulpit\Groupon-8AE61EA739.pdf [2011-09-09 22:21:11 | 000,477,377 | ---- | M] () -- C:\Documents and Settings\PAWEŁ\Pulpit\brak deala.jpg [2011-09-09 11:12:03 | 000,602,624 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\crypt32.dll [2011-09-05 19:04:09 | 000,001,244 | ---- | M] () -- C:\Documents and Settings\PAWEŁ\Pulpit\DOWNLOADS.lnk [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-10-02 23:41:59 | 000,000,788 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Malwarebytes' Anti-Malware.lnk [2011-09-16 11:31:09 | 000,053,983 | ---- | C] () -- C:\Documents and Settings\PAWEŁ\Pulpit\Pawel_skype.jpg [2011-09-10 08:44:21 | 000,135,635 | ---- | C] () -- C:\Documents and Settings\PAWEŁ\Pulpit\Groupon-8AE61EA739.pdf [2011-09-09 22:21:11 | 000,477,377 | ---- | C] () -- C:\Documents and Settings\PAWEŁ\Pulpit\brak deala.jpg [2011-09-05 19:04:09 | 000,001,244 | ---- | C] () -- C:\Documents and Settings\PAWEŁ\Pulpit\DOWNLOADS.lnk [2011-04-26 13:34:23 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2011-03-05 13:10:46 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll [2010-12-13 18:06:15 | 000,000,038 | ---- | C] () -- C:\WINDOWS\AviSplitter.INI [2010-07-15 12:13:41 | 000,446,559 | ---- | C] () -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\NMM-MetaData.db [2010-07-14 14:36:56 | 000,000,101 | ---- | C] () -- C:\WINDOWS\lexstat.ini [2010-07-14 14:36:35 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxbkvs.dll [2010-07-14 14:36:34 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\LXBKIH.EXE [2010-07-14 14:36:34 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\LXBKLCNP.DLL [2010-07-14 14:36:34 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\INSTMON.EXE [2010-07-14 14:36:14 | 000,000,266 | ---- | C] () -- C:\WINDOWS\System32\lxbkcoin.ini [2010-06-07 14:55:53 | 000,691,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2010-06-03 10:52:27 | 000,202,240 | ---- | C] () -- C:\Documents and Settings\PAWEŁ\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-06-01 20:23:15 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll [2010-06-01 20:07:18 | 000,087,540 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat [2010-06-01 20:04:36 | 006,421,564 | -H-- | C] () -- C:\Documents and Settings\PAWEŁ\Ustawienia lokalne\Dane aplikacji\IconCache.db [2010-06-01 20:00:37 | 000,028,264 | ---- | C] () -- C:\Documents and Settings\PAWEŁ\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT [2010-06-01 19:23:06 | 001,045,150 | ---- | C] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010-06-01 19:23:05 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2010-06-01 19:21:53 | 000,152,384 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010-06-01 19:14:21 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2010-06-01 19:12:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\control.ini [2010-06-01 19:11:06 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest [2010-06-01 19:11:00 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest [2010-06-01 19:09:15 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2010-06-01 19:09:02 | 000,000,037 | ---- | C] () -- C:\WINDOWS\vbaddin.ini [2010-06-01 19:09:02 | 000,000,036 | ---- | C] () -- C:\WINDOWS\vb.ini [2010-06-01 19:08:00 | 000,026,717 | ---- | C] () -- C:\WINDOWS\System32\tslabels.ini [2010-06-01 19:07:59 | 000,003,813 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.ini [2008-12-19 16:15:58 | 004,338,246 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll [2008-12-17 18:41:18 | 000,884,237 | ---- | C] () -- C:\WINDOWS\System32\ff_x264.dll [2008-12-17 18:22:58 | 000,093,184 | ---- | C] () -- C:\WINDOWS\System32\ff_wmv9.dll [2008-12-17 18:22:48 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2008-12-17 18:17:34 | 000,239,247 | ---- | C] () -- C:\WINDOWS\System32\ff_theora.dll [2008-12-17 17:59:54 | 000,560,802 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll [2008-12-11 12:27:02 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2006-11-02 17:10:16 | 000,080,912 | ---- | C] () -- C:\WINDOWS\System32\sherlock2.exe [2006-03-02 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2006-03-02 14:00:00 | 001,015,477 | ---- | C] () -- C:\WINDOWS\System32\esentprf.ini [2006-03-02 14:00:00 | 000,733,696 | ---- | C] () -- C:\WINDOWS\System32\qedwipes.dll [2006-03-02 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2006-03-02 14:00:00 | 000,491,288 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2006-03-02 14:00:00 | 000,433,112 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2006-03-02 14:00:00 | 000,355,112 | ---- | C] () -- C:\WINDOWS\System32\msjetoledb40.dll [2006-03-02 14:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2006-03-02 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2006-03-02 14:00:00 | 000,270,848 | ---- | C] () -- C:\WINDOWS\System32\sbe.dll [2006-03-02 14:00:00 | 000,253,440 | ---- | C] () -- C:\WINDOWS\System32\compatui.dll [2006-03-02 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2006-03-02 14:00:00 | 000,199,168 | ---- | C] () -- C:\WINDOWS\System32\ir32_32.dll [2006-03-02 14:00:00 | 000,186,880 | ---- | C] () -- C:\WINDOWS\System32\encdec.dll [2006-03-02 14:00:00 | 000,094,282 | ---- | C] () -- C:\WINDOWS\System32\msencode.dll [2006-03-02 14:00:00 | 000,084,500 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2006-03-02 14:00:00 | 000,070,656 | ---- | C] () -- C:\WINDOWS\System32\amstream.dll [2006-03-02 14:00:00 | 000,070,622 | ---- | C] () -- C:\WINDOWS\System32\edit.com [2006-03-02 14:00:00 | 000,068,068 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2006-03-02 14:00:00 | 000,053,920 | ---- | C] () -- C:\WINDOWS\System32\dosx.exe [2006-03-02 14:00:00 | 000,053,478 | ---- | C] () -- C:\WINDOWS\System32\tcpmon.ini [2006-03-02 14:00:00 | 000,051,823 | ---- | C] () -- C:\WINDOWS\System32\command.com [2006-03-02 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2006-03-02 14:00:00 | 000,042,809 | ---- | C] () -- C:\WINDOWS\System32\key01.sys [2006-03-02 14:00:00 | 000,042,537 | ---- | C] () -- C:\WINDOWS\System32\keyboard.sys [2006-03-02 14:00:00 | 000,039,434 | ---- | C] () -- C:\WINDOWS\System32\mem.exe [2006-03-02 14:00:00 | 000,035,648 | ---- | C] () -- C:\WINDOWS\System32\ntio411.sys [2006-03-02 14:00:00 | 000,035,424 | ---- | C] () -- C:\WINDOWS\System32\ntio412.sys [2006-03-02 14:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2006-03-02 14:00:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio804.sys [2006-03-02 14:00:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio404.sys [2006-03-02 14:00:00 | 000,033,936 | ---- | C] () -- C:\WINDOWS\System32\ntio.sys [2006-03-02 14:00:00 | 000,029,370 | ---- | C] () -- C:\WINDOWS\System32\ntdos411.sys [2006-03-02 14:00:00 | 000,029,274 | ---- | C] () -- C:\WINDOWS\System32\ntdos412.sys [2006-03-02 14:00:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos804.sys [2006-03-02 14:00:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos404.sys [2006-03-02 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2006-03-02 14:00:00 | 000,027,898 | ---- | C] () -- C:\WINDOWS\System32\ntdos.sys [2006-03-02 14:00:00 | 000,027,097 | ---- | C] () -- C:\WINDOWS\System32\country.sys [2006-03-02 14:00:00 | 000,020,986 | ---- | C] () -- C:\WINDOWS\System32\debug.exe [2006-03-02 14:00:00 | 000,019,806 | ---- | C] () -- C:\WINDOWS\System32\graphics.com [2006-03-02 14:00:00 | 000,016,024 | ---- | C] () -- C:\WINDOWS\System32\rsvp.ini [2006-03-02 14:00:00 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\tsd32.dll [2006-03-02 14:00:00 | 000,014,913 | ---- | C] () -- C:\WINDOWS\System32\kb16.com [2006-03-02 14:00:00 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo.dll [2006-03-02 14:00:00 | 000,013,819 | ---- | C] () -- C:\WINDOWS\System32\pschdprf.ini [2006-03-02 14:00:00 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\win87em.dll [2006-03-02 14:00:00 | 000,012,866 | ---- | C] () -- C:\WINDOWS\System32\edlin.exe [2006-03-02 14:00:00 | 000,012,594 | ---- | C] () -- C:\WINDOWS\System32\append.exe [2006-03-02 14:00:00 | 000,011,859 | ---- | C] () -- C:\WINDOWS\System32\setver.exe [2006-03-02 14:00:00 | 000,009,043 | ---- | C] () -- C:\WINDOWS\System32\ansi.sys [2006-03-02 14:00:00 | 000,008,520 | ---- | C] () -- C:\WINDOWS\System32\exe2bin.exe [2006-03-02 14:00:00 | 000,007,116 | ---- | C] () -- C:\WINDOWS\System32\nlsfunc.exe [2006-03-02 14:00:00 | 000,006,074 | ---- | C] () -- C:\WINDOWS\System32\rasctrs.ini [2006-03-02 14:00:00 | 000,004,976 | ---- | C] () -- C:\WINDOWS\System32\himem.sys [2006-03-02 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2006-03-02 14:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2006-03-02 14:00:00 | 000,003,346 | ---- | C] () -- C:\WINDOWS\System32\redir.exe [2006-03-02 14:00:00 | 000,002,992 | ---- | C] () -- C:\WINDOWS\System32\perfci.ini [2006-03-02 14:00:00 | 000,002,890 | ---- | C] () -- C:\WINDOWS\System32\perfwci.ini [2006-03-02 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin [2006-03-02 14:00:00 | 000,001,405 | ---- | C] () -- C:\WINDOWS\msdfmap.ini [2006-03-02 14:00:00 | 000,001,295 | ---- | C] () -- C:\WINDOWS\System32\perffilt.ini [2006-03-02 14:00:00 | 000,001,168 | ---- | C] () -- C:\WINDOWS\System32\loadfix.com [2006-03-02 14:00:00 | 000,000,882 | ---- | C] () -- C:\WINDOWS\System32\share.exe [2006-03-02 14:00:00 | 000,000,882 | ---- | C] () -- C:\WINDOWS\System32\fastopen.exe [2006-03-02 14:00:00 | 000,000,817 | ---- | C] () -- C:\WINDOWS\System32\mscdexnt.exe [2006-03-02 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [2006-03-02 14:00:00 | 000,000,477 | ---- | C] () -- C:\WINDOWS\win.ini [2006-03-02 14:00:00 | 000,000,359 | ---- | C] () -- C:\WINDOWS\System32\prodspec.ini [2006-03-02 14:00:00 | 000,000,231 | ---- | C] () -- C:\WINDOWS\system.ini [2004-10-03 18:50:54 | 000,129,024 | ---- | C] () -- C:\WINDOWS\System32\ff_mpeg2enc.dll [2001-10-26 19:29:54 | 000,057,856 | ---- | C] () -- C:\WINDOWS\System32\dvdplay.exe [2001-10-26 19:29:42 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\paqsp.dll [color=#E56717]========== LOP Check ==========[/color] [2011-07-04 16:15:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Age of Empires 3 XPack Trial [2010-06-01 20:33:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software [2010-06-23 19:03:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ashampoo [2010-06-07 14:55:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite [2010-08-23 14:34:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Downloaded Installations [2010-06-07 14:24:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET [2010-08-23 14:29:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations [2010-07-01 08:17:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MXSkypeRecorder [2010-07-14 12:36:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite [2010-06-07 02:17:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\IrfanView [2010-06-23 19:03:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\Ashampoo [2010-08-24 12:38:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\BESTplayer [2010-06-07 15:03:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\DAEMON Tools Lite [2010-07-14 12:39:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\DataLayer [2011-03-30 17:36:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\e-Kiosk Reader [2010-06-07 14:25:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\ESET [2011-03-13 22:27:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\FreeFLVConverter [2010-06-07 15:39:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\Gadu-Gadu [2010-06-29 14:36:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\GHISLER [2011-03-13 20:56:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\Nokia [2010-06-02 21:51:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\Opera [2010-08-23 14:44:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\PC Suite [2010-09-14 22:16:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\PWNEncy2006 [2011-09-12 18:55:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PAWEŁ\Dane aplikacji\uTorrent [2011-10-03 00:22:46 | 000,000,462 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{6BB4F05F-A5F3-4043-BB47-41239FEA9465}.job [color=#E56717]========== Purity Check ==========[/color] < End of report >