OTL logfile created on: 2010-08-16 16:04:53 - Run 5
OTL by OldTimer - Version 3.2.9.1     Folder = E:\antywir
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 76,00% Memory free
4,00 Gb Paging File | 4,00 Gb Available in Paging File | 92,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 58,59 Gb Total Space | 41,85 Gb Free Space | 71,43% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 174,28 Gb Total Space | 172,68 Gb Free Space | 99,08% Space Free | Partition Type: NTFS
Drive F: | 3,73 Gb Total Space | 2,77 Gb Free Space | 74,23% Space Free | Partition Type: FAT
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: P-E3B6B7FB56E74
Current User Name: PPPPPPPPPPPP
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2010-08-12 11:55:08 | 000,615,506 | ---- | M] (OldTimer Tools) -- E:\antywir\OTL.exe
PRC - [2010-07-07 10:46:46 | 012,382,816 | ---- | M] (GG Network S.A.) -- C:\Program Files\Gadu-Gadu 10\gg.exe
PRC - [2010-05-14 12:39:44 | 016,201,216 | ---- | M] (Redefine Sp z o.o.) -- C:\Program Files\ipla\ipla.exe
PRC - [2009-08-04 18:29:54 | 000,219,360 | ---- | M] (DeviceVM, Inc.) -- C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
PRC - [2009-08-04 18:29:52 | 000,346,320 | ---- | M] (DeviceVM, Inc.) -- C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe
PRC - [2008-04-15 14:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-05-16 10:27:38 | 001,209,904 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
PRC - [2007-05-16 10:27:16 | 000,153,136 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
PRC - [2006-11-24 02:06:38 | 000,487,424 | R--- | M] () -- C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
PRC - [2006-11-13 16:17:38 | 000,872,448 | R--- | M] (Sony Ericsson Mobile Communications AB) -- C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
PRC - [2006-10-13 10:11:16 | 000,983,040 | R--- | M] (Obigo AB) -- C:\Program Files\Common Files\Teleca Shared\Generic.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2010-08-16 16:04:47 | 000,031,232 | ---- | M] () -- C:\Documents and Settings\PPPPPPPPPPPP\Ustawienia lokalne\Temp\VGod.DLL
MOD - [2010-08-12 11:55:08 | 000,615,506 | ---- | M] (OldTimer Tools) -- E:\antywir\OTL.exe
MOD - [2008-04-15 14:00:00 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Auto | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt)
SRV - [2009-11-16 10:04:30 | 000,735,960 | ---- | M] (ESET) [Disabled | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
SRV - [2009-08-04 18:29:54 | 000,219,360 | ---- | M] (DeviceVM, Inc.) [Auto | Running] -- C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe -- (BCUService)
SRV - [2008-04-07 09:17:30 | 000,430,592 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2006-03-03 22:03:10 | 000,069,632 | ---- | M] (HP) [Unknown | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)
SRV - [2005-11-14 02:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2010-03-28 11:32:14 | 000,682,232 | ---- | M] (Duplex Secure Ltd.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2010-03-22 10:30:22 | 000,222,672 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2009-11-16 10:06:50 | 000,096,408 | ---- | M] (ESET) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\epfwtdir.sys -- (epfwtdir)
DRV - [2009-11-16 10:03:36 | 000,108,792 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009-11-16 09:56:12 | 000,116,520 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon)
DRV - [2009-08-05 11:38:22 | 005,874,176 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2009-03-31 09:39:36 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009-03-20 10:01:26 | 000,121,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdm.sys -- (ss_bmdm)
DRV - [2009-03-20 10:01:26 | 000,090,112 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM)
DRV - [2009-03-20 10:01:26 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdfl.sys -- (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter)
DRV - [2009-02-09 07:18:00 | 006,307,328 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2008-08-05 14:10:12 | 001,684,736 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ambfilt.sys -- (Ambfilt)
DRV - [2008-04-15 20:00:00 | 000,090,313 | ---- | M] () [Kernel | Boot | Stopped] -- C:\WINDOWS\System32\drivers\ndis.sys -- (NDIS)
DRV - [2008-04-15 14:00:00 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2007-09-17 15:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2007-06-29 15:20:30 | 000,051,712 | ---- | M] (Sagem Communication) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\UsbSagCom.sys -- (UsbSagCom)
DRV - [2007-04-16 17:46:34 | 000,033,792 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdPPM.sys -- (AmdPPM)
DRV - [2006-11-30 16:14:22 | 000,090,800 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45unic.sys -- (se45unic) Sony Ericsson Device 069 USB Ethernet Emulation SEMC45 (WDM)
DRV - [2006-11-30 16:14:14 | 000,086,432 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45obex.sys -- (se45obex)
DRV - [2006-11-30 16:14:10 | 000,088,624 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45mgmt.sys -- (se45mgmt) Sony Ericsson Device 069 USB WMC Device Management Drivers (WDM)
DRV - [2006-11-30 16:14:10 | 000,018,704 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45nd5.sys -- (se45nd5) Sony Ericsson Device 069 USB Ethernet Emulation SEMC45 (NDIS)
DRV - [2006-11-30 16:14:04 | 000,097,088 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45mdm.sys -- (se45mdm)
DRV - [2006-11-30 16:14:04 | 000,009,360 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45mdfl.sys -- (se45mdfl)
DRV - [2006-11-30 16:13:56 | 000,061,536 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\se45bus.sys -- (se45bus) Sony Ericsson Device 069 driver (WDM)
DRV - [2006-03-13 18:35:28 | 000,079,488 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750obex.sys -- (k750obex)
DRV - [2006-03-13 18:35:26 | 000,081,728 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750mgmt.sys -- (k750mgmt)
DRV - [2006-03-13 18:35:20 | 000,089,872 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750mdm.sys -- (k750mdm)
DRV - [2006-03-13 18:35:18 | 000,006,576 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750mdfl.sys -- (k750mdfl)
DRV - [2006-03-13 18:35:12 | 000,055,216 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k750bus.sys -- (k750bus) Sony Ericsson 750 driver (WDM)
DRV - [2006-03-13 16:50:08 | 000,085,696 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w300obex.sys -- (w300obex)
DRV - [2006-03-13 16:50:06 | 000,087,824 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w300mgmt.sys -- (w300mgmt) Sony Ericsson W300 USB WMC Device Management Drivers (WDM)
DRV - [2006-03-13 16:50:02 | 000,096,352 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w300mdm.sys -- (w300mdm)
DRV - [2006-03-13 16:50:00 | 000,009,264 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w300mdfl.sys -- (w300mdfl)
DRV - [2006-03-13 16:49:54 | 000,060,800 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\w300bus.sys -- (w300bus) Sony Ericsson W300 Driver driver (WDM)
DRV - [2006-01-04 09:41:48 | 001,389,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1417001333-823518204-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-1417001333-823518204-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2530240
IE - HKU\S-1-5-21-1417001333-823518204-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-1417001333-823518204-725345543-1004\..\URLSearchHook: {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll (DeviceVM, Inc.)
IE - HKU\S-1-5-21-1417001333-823518204-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultthis.engineName: "Softonic-Polska Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2530240&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.startup.homepage: "http://www.x-face.pl/"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {c86eb8a9-ccc2-4b6c-b75d-73576ed591bf}:2.5.6.0
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2530240&q="
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.11\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010-08-16 15:19:47 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.11\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010-07-22 16:25:12 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2010-08-16 15:58:50 | 000,000,000 | ---D | M]
 
[2009-12-12 18:08:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PPPPPPPPPPPP\Dane aplikacji\Mozilla\Extensions
[2010-08-12 14:58:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PPPPPPPPPPPP\Dane aplikacji\Mozilla\Firefox\Profiles\4ftv1rw2.default\extensions
[2010-03-14 17:36:17 | 000,000,000 | ---D | M] (Softonic-Polska Toolbar) -- C:\Documents and Settings\PPPPPPPPPPPP\Dane aplikacji\Mozilla\Firefox\Profiles\4ftv1rw2.default\extensions\{c86eb8a9-ccc2-4b6c-b75d-73576ed591bf}
[2010-02-09 18:25:50 | 000,000,933 | ---- | M] () -- C:\Documents and Settings\PPPPPPPPPPPP\Dane aplikacji\Mozilla\Firefox\Profiles\4ftv1rw2.default\searchplugins\conduit.xml
[2010-08-12 14:58:47 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2010-01-11 14:35:18 | 000,002,767 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\allegro-pl.xml
[2010-01-11 14:35:18 | 000,001,406 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fbc-pl.xml
[2010-01-11 14:35:18 | 000,000,917 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\merlin-pl.xml
[2010-01-11 14:35:18 | 000,000,858 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\pwn-pl.xml
[2010-01-11 14:35:18 | 000,001,183 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-pl.xml
[2010-01-11 14:35:18 | 000,001,683 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2008-04-15 14:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O4 - HKLM..\Run: [BCU] C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe (DeviceVM, Inc.)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [Sony Ericsson PC Suite] C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe ()
O4 - HKU\S-1-5-21-1417001333-823518204-725345543-1004..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
O4 - HKU\S-1-5-21-1417001333-823518204-725345543-1004..\Run: [Gadu-Gadu 10] C:\Program Files\Gadu-Gadu 10\gg.exe (GG Network S.A.)
O4 - HKU\S-1-5-21-1417001333-823518204-725345543-1004..\Run: [IPLA!] C:\Program Files\ipla\ipla.exe (Redefine Sp z o.o.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1417001333-823518204-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O24 - Desktop Components:0 () - http://www.zso14gliwice.pl/images/pusty.gif
O24 - Desktop Components:1 () - http://img05.allegroimg.pl/photos/128x96/11/34/76/35/1134763500
O24 - Desktop Components:2 () - http://img15.allegroimg.pl/photos/400x300/10/94/13/39/1094133947_2
O24 - Desktop Components:3 () - http://static.allegrostatic.pl/site_images/1/0/blank.gif
O24 - Desktop Components:4 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\PPPPPPPPPPPP\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\PPPPPPPPPPPP\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-12-09 20:38:30 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2010-08-13 18:49:43 | 000,100,896 | ---- | C] (Realtek Semiconductor Corporation) -- C:\WINDOWS\System32\RTNUninst32.dll
[2010-08-13 18:49:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\12
[2010-08-13 18:41:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\win_xp_2k3_32
[2010-08-12 13:44:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Google
[2010-08-12 11:32:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2010-07-25 14:43:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\Nowy folder(2)
[2010-07-24 14:24:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\Nowy folder
[2010-07-21 13:14:39 | 000,000,000 | R--D | C] -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\music
[2010-07-21 13:12:36 | 000,000,000 | R--D | C] -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\Misie
[2010-07-21 13:11:55 | 000,000,000 | R--D | C] -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\Inne
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2010-08-16 16:02:57 | 000,211,251 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2010-08-16 16:02:53 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010-08-16 16:02:52 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010-08-16 15:59:59 | 003,932,160 | ---- | M] () -- C:\Documents and Settings\PPPPPPPPPPPP\ntuser.dat
[2010-08-16 15:59:29 | 005,359,762 | -H-- | M] () -- C:\Documents and Settings\PPPPPPPPPPPP\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2010-08-16 15:16:02 | 000,000,670 | ---- | M] () -- C:\WINDOWS\WINCMD.INI
[2010-08-16 13:42:57 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010-08-13 16:26:30 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\PPPPPPPPPPPP\ntuser.ini
[2010-08-13 16:24:11 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010-08-13 14:11:07 | 000,000,583 | ---- | M] () -- C:\WINDOWS\win.ini
[2010-08-13 14:11:07 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010-08-13 14:11:07 | 000,000,223 | ---- | M] () -- C:\boot.ini
[2010-08-12 13:42:51 | 000,000,140 | ---- | M] () -- C:\Documents and Settings\PPPPPPPPPPPP\defogger_reenable
[2010-07-27 19:48:10 | 000,000,587 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Euro Truck Simulator.lnk
[2010-07-25 16:44:24 | 000,122,057 | ---- | M] () -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\nk17.JPG
[2010-07-25 16:43:20 | 000,096,528 | ---- | M] () -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\nk16.JPG
[2010-07-25 16:42:41 | 000,092,804 | ---- | M] () -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\nk15.JPG
[2010-07-25 16:41:43 | 000,080,525 | ---- | M] () -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\nk14.JPG
[2010-07-25 16:40:47 | 000,118,683 | ---- | M] () -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\nk13.JPG
[2010-07-25 16:40:00 | 000,098,674 | ---- | M] () -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\nk12.JPG
[2010-07-25 16:39:06 | 000,098,793 | ---- | M] () -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\nk11.JPG
[2010-07-25 16:38:16 | 000,188,939 | ---- | M] () -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\nk10.JPG
[2010-07-24 15:58:48 | 000,000,102 | ---- | M] () -- C:\Documents and Settings\PPPPPPPPPPPP\default.pls
[2010-07-24 15:58:30 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2010-08-16 15:11:20 | 000,000,670 | ---- | C] () -- C:\WINDOWS\WINCMD.INI
[2010-08-13 14:11:06 | 000,001,808 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\HP Digital Imaging Monitor.lnk
[2010-08-12 13:42:44 | 000,000,140 | ---- | C] () -- C:\Documents and Settings\PPPPPPPPPPPP\defogger_reenable
[2010-08-11 10:30:17 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010-07-27 19:48:10 | 000,000,587 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Euro Truck Simulator.lnk
[2010-07-25 16:44:24 | 000,122,057 | ---- | C] () -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\nk17.JPG
[2010-07-25 16:43:20 | 000,096,528 | ---- | C] () -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\nk16.JPG
[2010-07-25 16:42:41 | 000,092,804 | ---- | C] () -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\nk15.JPG
[2010-07-25 16:41:43 | 000,080,525 | ---- | C] () -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\nk14.JPG
[2010-07-25 16:40:47 | 000,118,683 | ---- | C] () -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\nk13.JPG
[2010-07-25 16:40:00 | 000,098,674 | ---- | C] () -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\nk12.JPG
[2010-07-25 16:39:06 | 000,098,793 | ---- | C] () -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\nk11.JPG
[2010-07-25 16:38:16 | 000,188,939 | ---- | C] () -- C:\Documents and Settings\PPPPPPPPPPPP\Pulpit\nk10.JPG
[2010-07-24 16:35:47 | 003,932,160 | ---- | C] () -- C:\Documents and Settings\PPPPPPPPPPPP\ntuser.dat
[2010-07-08 15:10:54 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2010-07-07 18:04:49 | 000,000,285 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2010-06-09 16:46:43 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll
[2010-06-09 16:46:43 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys
[2010-01-27 20:15:27 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2010-01-09 17:11:14 | 000,077,824 | R--- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll
[2009-12-29 23:03:13 | 000,000,241 | ---- | C] () -- C:\WINDOWS\SIERRA.INI
[2009-12-23 14:51:51 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009-12-09 20:46:47 | 000,080,416 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2009-12-09 20:44:00 | 000,000,010 | ---- | C] () -- C:\WINDOWS\GSetup.ini
[2009-02-09 07:18:00 | 001,724,416 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2009-02-09 07:18:00 | 001,507,328 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2009-02-09 07:18:00 | 001,101,824 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2009-02-09 07:18:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2008-04-15 14:00:00 | 000,090,313 | ---- | C] () -- C:\WINDOWS\System32\drivers\ndis.sys
[2007-10-25 17:26:10 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2001-07-07 04:00:02 | 000,003,234 | ---- | C] () -- C:\WINDOWS\System32\HPTCPMON.INI
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2010-03-10 20:38:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET
[2010-05-15 17:29:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2010-05-15 11:58:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla
[2010-03-10 20:37:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NCH Swift Sound
[2010-04-11 20:55:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2010-06-09 17:03:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite
[2010-02-04 18:35:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Teleca
[2009-12-12 15:33:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PPPPPPPPPPPP\Dane aplikacji\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010-07-18 16:43:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PPPPPPPPPPPP\Dane aplikacji\Gadu-Gadu 10
[2010-06-03 10:04:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PPPPPPPPPPPP\Dane aplikacji\Image Zone Express
[2010-08-16 16:02:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PPPPPPPPPPPP\Dane aplikacji\ipla
[2010-04-08 21:44:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PPPPPPPPPPPP\Dane aplikacji\Leadertech
[2010-03-10 20:37:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PPPPPPPPPPPP\Dane aplikacji\NCH Swift Sound
[2009-12-13 18:10:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PPPPPPPPPPPP\Dane aplikacji\OpenFM
[2010-06-09 17:03:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PPPPPPPPPPPP\Dane aplikacji\PC Suite
[2010-06-09 16:59:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PPPPPPPPPPPP\Dane aplikacji\Samsung
[2010-02-04 18:39:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\PPPPPPPPPPPP\Dane aplikacji\Teleca
[2010-03-10 20:33:00 | 000,000,318 | ---- | M] () -- C:\WINDOWS\Tasks\expressburnSevenDaysInit.job
[2010-03-10 20:34:53 | 000,000,312 | ---- | M] () -- C:\WINDOWS\Tasks\expressburnShakeIcon.job
[2010-03-10 20:34:23 | 000,000,308 | ---- | M] () -- C:\WINDOWS\Tasks\expressripShakeIcon.job
[2010-03-10 20:32:50 | 000,000,298 | ---- | M] () -- C:\WINDOWS\Tasks\mixpadSevenDaysInit.job
[2010-03-10 20:34:05 | 000,000,292 | ---- | M] () -- C:\WINDOWS\Tasks\mixpadShakeIcon.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
< End of report >