OTL logfile created on: 2011-11-21 20:46:39 - Run 2
OTL by OldTimer - Version 3.2.31.0     Folder = I:\scans
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 1,72 Gb Available Physical Memory | 86,22% Memory free
3,96 Gb Paging File | 3,75 Gb Available in Paging File | 94,72% Paging File free
Paging file location(s): C:\pagefile.sys 2048 2048 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 29,29 Gb Total Space | 1,65 Gb Free Space | 5,64% Space Free | Partition Type: NTFS
Drive D: | 29,53 Gb Total Space | 3,95 Gb Free Space | 13,36% Space Free | Partition Type: NTFS
Drive E: | 26,48 Gb Total Space | 1,97 Gb Free Space | 7,45% Space Free | Partition Type: NTFS
Drive F: | 26,48 Gb Total Space | 6,14 Gb Free Space | 23,20% Space Free | Partition Type: NTFS
Drive G: | 186,31 Gb Total Space | 5,76 Gb Free Space | 3,09% Space Free | Partition Type: NTFS
Drive I: | 1006,22 Mb Total Space | 778,78 Mb Free Space | 77,40% Space Free | Partition Type: FAT
 
Computer Name: BASEBOX | User Name: Rebirth | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-11-13 19:29:50 | 000,584,192 | ---- | M] (OldTimer Tools) -- I:\scans\OTL.exe
PRC - [2008-04-15 13:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-09-14 06:02:10 | 001,080,264 | ---- | M] (C. Ghisler & Co.) -- C:\Program Files\totalcmd\TOTALCMD.EXE
PRC - [2007-05-15 16:33:30 | 000,204,800 | ---- | M] (A4Tech Co.,Ltd.) -- C:\Program Files\A4Tech\Mouse\Amoumain.exe
PRC - [2004-02-16 23:19:30 | 000,438,784 | ---- | M] (Eugene Gavrilov) -- C:\WINDOWS\system32\kxmixer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2005-03-28 10:13:32 | 000,077,824 | ---- | M] () -- C:\WINDOWS\system32\csdlocalmon.dll
MOD - [2003-05-08 02:23:04 | 000,618,496 | ---- | M] () -- C:\Program Files\VDMSound\LaunchPad.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2011-10-05 20:17:32 | 000,419,624 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011-08-03 12:49:00 | 002,255,464 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011-06-10 22:41:32 | 001,575,184 | ---- | M] (Blue Coat Systems, Inc.) [On_Demand | Stopped] -- C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe -- (bckwfs)
SRV - [2010-11-02 21:06:06 | 000,365,336 | ---- | M] (Kaspersky Lab ZAO) [Auto | Stopped] -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe -- (AVP)
SRV - [2010-06-01 16:02:58 | 000,016,384 | ---- | M] (^-^) [Disabled | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\fileStillOpen.exe -- (FileStillOpen)
SRV - [2010-04-27 12:43:48 | 000,611,840 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2010-02-19 15:21:00 | 001,632,776 | ---- | M] (M-Audio) [Auto | Stopped] -- C:\Program Files\M-Audio\Axiom\AudioDevMon.exe -- (AxiomAudioDevMon)
SRV - [2009-12-07 00:19:00 | 001,590,216 | ---- | M] (UltraVNC) [Disabled | Stopped] -- C:\Program Files\UltraVNC\WinVNC.exe -- (uvnc_service)
SRV - [2009-06-22 17:57:12 | 000,618,944 | ---- | M] (Acronis) [Disabled | Stopped] -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2011-06-10 22:41:02 | 000,086,544 | ---- | M] (Blue Coat Systems, Inc.) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\bckd.sys -- (bckd)
DRV - [2011-05-24 19:51:31 | 000,475,736 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\klif.sys -- (KLIF)
DRV - [2010-10-02 19:11:29 | 000,715,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2010-06-09 15:43:52 | 000,011,352 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\kl2.sys -- (kl2)
DRV - [2010-06-09 15:43:50 | 000,132,184 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\kl1.sys -- (KL1)
DRV - [2010-05-07 10:06:26 | 000,032,856 | ---- | M] (Kaspersky Lab ZAO) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klim5.sys -- (klim5)
DRV - [2010-03-08 18:57:30 | 000,010,688 | ---- | M] (UVNC BVBA) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mv2.sys -- (mv2)
DRV - [2010-02-26 13:32:58 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2010-02-26 13:32:46 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2010-02-26 13:32:44 | 000,022,528 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2010-02-26 13:32:44 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2010-02-19 15:20:50 | 000,115,336 | ---- | M] (M-Audio) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MAudioAxiom.sys -- (AXIOM)
DRV - [2010-02-12 20:34:58 | 000,123,280 | ---- | M] (Sun Microsystems, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\VBoxDrv.sys -- (VBoxDrv)
DRV - [2010-02-12 20:34:58 | 000,110,096 | ---- | M] (Sun Microsystems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VBoxNetFlt.sys -- (VBoxNetFlt)
DRV - [2010-02-12 20:34:58 | 000,099,152 | ---- | M] (Sun Microsystems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV - [2010-02-12 20:34:58 | 000,041,680 | ---- | M] (Sun Microsystems, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\VBoxUSBMon.sys -- (VBoxUSBMon)
DRV - [2009-11-02 18:27:24 | 000,019,472 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klmouflt.sys -- (klmouflt)
DRV - [2009-09-14 21:49:20 | 000,902,592 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\tdrpm228.sys -- (tdrpman228) Acronis Try&Decide and Restore Points filter (build 228)
DRV - [2009-09-14 21:49:17 | 000,540,000 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\timntr.sys -- (timounter)
DRV - [2009-09-14 21:49:17 | 000,044,704 | ---- | M] (Acronis) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\tifsfilt.sys -- (tifsfilter)
DRV - [2009-09-14 21:49:07 | 000,138,208 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\snapman.sys -- (snapman)
DRV - [2009-06-29 12:59:14 | 000,142,592 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2008-08-26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008-07-29 23:44:44 | 000,619,136 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rt2870.sys -- (rt2870)
DRV - [2008-04-13 23:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2007-05-15 04:40:16 | 000,014,336 | ---- | M] (A4Tech Co.,Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Amps2prt.sys -- (Amps2prt)
DRV - [2007-05-11 02:10:50 | 000,034,704 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\blueletaudio.sys -- (BlueletAudio)
DRV - [2007-05-09 00:59:40 | 000,036,496 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btcusb.sys -- (Btcsrusb)
DRV - [2007-03-05 05:00:04 | 000,027,792 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BlueletSCOAudio.sys -- (BlueletSCOAudio)
DRV - [2007-03-05 04:59:04 | 000,018,320 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btnetdrv.sys -- (BT)
DRV - [2007-03-05 04:57:14 | 000,019,472 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\VHIDMini.sys -- (VHidMinidrv)
DRV - [2007-03-05 04:56:18 | 000,035,600 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\BTHidMgr.sys -- (BTHidMgr)
DRV - [2007-03-05 04:55:12 | 000,020,880 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\vbtenum.sys -- (BTHidEnum)
DRV - [2007-03-05 04:53:18 | 000,044,304 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VcommMgr.sys -- (VcommMgr)
DRV - [2007-03-05 04:52:18 | 000,034,448 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VComm.sys -- (VComm)
DRV - [2006-11-21 21:41:18 | 000,022,416 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Program Files\IVT Corporation\BlueSoleil\device\Win2k\BTNetFilter.sys -- (BTNetFilter)
DRV - [2004-04-01 15:30:46 | 000,010,368 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc)
DRV - [2004-02-16 23:19:30 | 000,571,776 | ---- | M] (Eugene Gavrilov) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\kx.sys -- (kxwdmdrv)
DRV - [2003-10-15 18:52:50 | 000,174,530 | R--- | M] (OmniVision Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ov519vid.sys -- (ovt519)
DRV - [2001-08-17 21:19:34 | 000,036,480 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sfmanm.sys -- (sfman) Sterownik Creative SoundFont Manager (WDM)
DRV - [2001-08-17 21:19:28 | 000,006,912 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctlfacem.sys -- (emu10k1) Sterownik Creative Interface Manager (WDM)
DRV - [2001-08-17 21:19:26 | 000,283,904 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\emu10k1m.sys -- (emu10k) Creative SB Live! (WDM)
DRV - [2001-08-17 21:19:20 | 000,003,712 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ctljystk.sys -- (ctljystk)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1482476501-963894560-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKU\S-1-5-21-1482476501-963894560-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1482476501-963894560-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.openintab: true
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.10
FF - prefs.js..extensions.enabledItems: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.8
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9.5
FF - prefs.js..extensions.enabledItems: quirky@zoom.co.uk:0.5
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.12
FF - prefs.js..extensions.enabledItems: {31513E58-F253-47ad-86DB-D5F21E905429}:0.0.1.2006102615+
FF - prefs.js..extensions.enabledItems: {8620c15f-30dc-4dba-a131-7c5d20cf4a29}:3.1.6
FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:2.1.4
FF - prefs.js..extensions.enabledItems: {46868735-c3fa-47ce-8ce7-cce51a66aceb}:1.2
FF - prefs.js..extensions.enabledItems: openinie@wittersworld.com:1.3
FF - prefs.js..extensions.enabledItems: {E19DF523-EFFD-48d2-95A2-883CB3BA32A4}:1.6.0.9
FF - prefs.js..extensions.enabledItems: {dc572301-7619-498c-a57d-39143191b318}:0.3.8.6
FF - prefs.js..extensions.enabledItems: {0fa2149e-bb2c-4ac2-a8d3-479599819475}:3.1
FF - prefs.js..extensions.enabledItems: {e968fc70-8f95-4ab9-9e79-304de2a71ee1}:0.7.3
FF - prefs.js..extensions.enabledItems: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:1.3.2
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: urllister@binnyva.com:1.3
FF - prefs.js..extensions.enabledItems: nasanightlaunch@example.com:0.6.20110904
FF - prefs.js..network.proxy.backup.ftp: "192.168.0.1"
FF - prefs.js..network.proxy.backup.ftp_port: 0
FF - prefs.js..network.proxy.backup.gopher: "192.168.0.1"
FF - prefs.js..network.proxy.backup.gopher_port: 0
FF - prefs.js..network.proxy.backup.socks: "192.168.0.1"
FF - prefs.js..network.proxy.backup.socks_port: 0
FF - prefs.js..network.proxy.backup.ssl: "192.168.0.1"
FF - prefs.js..network.proxy.backup.ssl_port: 0
FF - prefs.js..network.proxy.ftp: "192.168.0.1"
FF - prefs.js..network.proxy.ftp_port: 8000
FF - prefs.js..network.proxy.gopher: "192.168.0.1"
FF - prefs.js..network.proxy.gopher_port: 8000
FF - prefs.js..network.proxy.http: "192.168.0.1"
FF - prefs.js..network.proxy.http_port: 8000
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.socks: "192.168.0.1"
FF - prefs.js..network.proxy.socks_port: 8000
FF - prefs.js..network.proxy.ssl: "192.168.0.1"
FF - prefs.js..network.proxy.ssl_port: 8000
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.448: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.0.5: C:\Program Files\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\bkmrksync@nokia.com: C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2010-01-12 14:20:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\virtualKeyboard@kaspersky.ru: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru [2011-06-17 00:42:27 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\KavAntiBanner@Kaspersky.ru: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru [2011-06-17 00:42:27 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\linkfilter@kaspersky.ru: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru [2011-06-17 00:42:27 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-10-29 01:19:52 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-10-12 22:04:56 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 8.0\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2011-10-29 01:19:52 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 8.0\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2010-10-13 12:30:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\{8C17574E-F5C5-41b8-8B36-333FC7E67980}: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\THBExt_2_x [2011-05-24 19:52:48 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\{FD9B3EC6-8265-41fb-8A2F-4C5A22A95A7B}: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\THBExt_3_1_x [2011-05-24 19:52:50 | 000,000,000 | ---D | M]
 
[2010-09-12 17:18:02 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Extensions
[2010-09-12 17:18:02 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2011-11-20 21:29:58 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Firefox\Profiles\vaphm45w.default\extensions
[2011-08-19 00:00:54 | 000,000,000 | ---D | M] (URL Fixer) -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Firefox\Profiles\vaphm45w.default\extensions\{0fa2149e-bb2c-4ac2-a8d3-479599819475}
[2009-09-14 17:50:17 | 000,000,000 | ---D | M] (oldbar) -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Firefox\Profiles\vaphm45w.default\extensions\{46868735-c3fa-47ce-8ce7-cce51a66aceb}
[2011-11-03 10:19:24 | 000,000,000 | ---D | M] (Nightly Tester Tools) -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Firefox\Profiles\vaphm45w.default\extensions\{8620c15f-30dc-4dba-a131-7c5d20cf4a29}
[2011-11-11 03:38:11 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Firefox\Profiles\vaphm45w.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011-10-03 17:43:49 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Firefox\Profiles\vaphm45w.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2011-06-17 22:11:35 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Firefox\Profiles\vaphm45w.default\extensions\{dc572301-7619-498c-a57d-39143191b318}
[2011-04-21 21:44:03 | 000,000,000 | ---D | M] (QuietUrl) -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Firefox\Profiles\vaphm45w.default\extensions\{E19DF523-EFFD-48d2-95A2-883CB3BA32A4}
[2011-11-13 04:35:54 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Firefox\Profiles\vaphm45w.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011-01-07 14:58:08 | 000,000,000 | ---D | M] (User Agent Switcher) -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Firefox\Profiles\vaphm45w.default\extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}
[2011-10-12 22:11:32 | 000,000,000 | ---D | M] (MinimizeToTray revived (MinTrayR)) -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Firefox\Profiles\vaphm45w.default\extensions\mintrayr@tn123.ath.cx
[2010-08-18 09:21:27 | 000,000,000 | ---D | M] (Open in IE) -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Firefox\Profiles\vaphm45w.default\extensions\openinie@wittersworld.com
[2009-09-14 17:51:12 | 000,000,000 | ---D | M] ("Forum Fixer") -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Firefox\Profiles\vaphm45w.default\extensions\quirky@zoom.co.uk
[2011-04-04 10:04:31 | 000,000,000 | ---D | M] (URL Flipper) -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Firefox\Profiles\vaphm45w.default\extensions\urlflipper@mozilla.ktechcomputing.com
[2011-04-16 19:14:42 | 000,000,000 | ---D | M] (URL Lister) -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Firefox\Profiles\vaphm45w.default\extensions\urllister@binnyva.com
[2011-06-17 22:11:35 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Firefox\Profiles\vaphm45w.default\extensions\{dc572301-7619-498c-a57d-39143191b318}\modules\extensions
[2009-09-20 22:56:22 | 000,001,646 | ---- | M] () -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Firefox\Profiles\vaphm45w.default\searchplugins\discogs-search.xml
[2010-08-14 11:22:45 | 000,001,687 | ---- | M] () -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Firefox\Profiles\vaphm45w.default\searchplugins\miasto-ulica---mapa-polski-targeo.xml
[2009-09-21 21:10:11 | 000,001,340 | ---- | M] () -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Firefox\Profiles\vaphm45w.default\searchplugins\wikipedia-en.xml
[2011-11-16 00:54:20 | 000,001,087 | ---- | M] () -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Firefox\Profiles\vaphm45w.default\searchplugins\wikipedia-polski.xml
[2009-09-21 21:07:28 | 000,004,153 | ---- | M] () -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mozilla\Firefox\Profiles\vaphm45w.default\searchplugins\youtube.xml
[2011-10-12 22:04:57 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010-09-19 12:36:07 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2011-05-24 19:53:24 | 000,000,000 | ---D | M] (Blokowanie banerów) -- C:\Program Files\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak
[2011-05-24 19:53:23 | 000,000,000 | ---D | M] (Kaspersky URL Advisor) -- C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak
() (No name found) -- C:\DOCUMENTS AND SETTINGS\REBIRTH\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\VAPHM45W.DEFAULT\EXTENSIONS\{19503E42-CA3C-4C27-B1E2-9CDB2170EE34}.XPI
() (No name found) -- C:\DOCUMENTS AND SETTINGS\REBIRTH\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\VAPHM45W.DEFAULT\EXTENSIONS\{5F590AA2-1221-4113-A6F4-A4BB62414FAC}.XPI
() (No name found) -- C:\DOCUMENTS AND SETTINGS\REBIRTH\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\VAPHM45W.DEFAULT\EXTENSIONS\{73A6FE31-595D-460B-A920-FCC0F8843232}.XPI
() (No name found) -- C:\DOCUMENTS AND SETTINGS\REBIRTH\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\VAPHM45W.DEFAULT\EXTENSIONS\{D4DD63FA-01E4-46A7-B6B1-EDAB7D6AD389}.XPI
() (No name found) -- C:\DOCUMENTS AND SETTINGS\REBIRTH\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\VAPHM45W.DEFAULT\EXTENSIONS\COMPATIBILITY@ADDONS.MOZILLA.ORG.XPI
[2009-09-14 16:33:49 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2009-09-20 21:14:14 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011-09-29 08:30:14 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2010-07-17 04:00:04 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010-03-22 20:11:55 | 000,075,208 | ---- | M] (Foxit Software Company) -- C:\Program Files\mozilla firefox\plugins\npFoxitReaderPlugin.dll
[2011-09-29 01:52:42 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2011-09-29 01:52:42 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2011-09-29 01:52:42 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2011-09-29 01:52:42 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2011-09-29 01:52:42 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2011-09-29 01:52:42 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2011-05-20 12:01:34 | 000,025,701 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 127.0.0.1       tiava.com
O1 - Hosts: 127.0.0.1       www.tiava.com
O1 - Hosts: 127.0.0.1       celebboots.com
O1 - Hosts: 127.0.0.1       www.celebboots.com
O1 - Hosts: 127.0.0.1       www.family-sex.biz
O1 - Hosts: 127.0.0.1       family-sex.biz
O1 - Hosts: 127.0.0.1	pornbb.org
O1 - Hosts: 127.0.0.1	www.pornbb.org
O1 - Hosts: 127.0.0.1       freeones.com
O1 - Hosts: 127.0.0.1       www.freeones.com
O1 - Hosts: 127.0.0.1       asktiava.com
O1 - Hosts: 127.0.0.1       www.asktiava.com
O1 - Hosts: 127.0.0.1       nylondolls.com
O1 - Hosts: 127.0.0.1       www.nylondolls.com
O1 - Hosts: 127.0.0.1       google-analytics.com
O1 - Hosts: 127.0.0.1       widgetpot.pl
O1 - Hosts: 127.0.0.1       stat24.com
O1 - Hosts: 127.0.0.1       adocean.pl
O1 - Hosts: 127.0.0.1       googlesyndication.com
O1 - Hosts: 127.0.0.1       adkontekst.pl
O1 - Hosts: 127.0.0.1       nuggad.net
O1 - Hosts: 127.0.0.1       gemius.pl
O1 - Hosts: 127.0.0.1       www.tiavastube.com
O1 - Hosts: 127.0.0.1       tiavastube.com
O1 - Hosts: 693 more lines...
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll (Kaspersky Lab ZAO)
O2 - BHO: (IeCatch2 Class) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\Program Files\FlashGet\Jccatch.dll (Amaze Soft)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O3 - HKLM\..\Toolbar: (FlashGet Bar) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Program Files\FlashGet\fgiebar.dll (Amaze Soft)
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [kX Mixer] C:\WINDOWS\System32\kxmixer.exe (Eugene Gavrilov)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe ()
O4 - HKLM..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe (A4Tech Co.,Ltd.)
O4 - HKU\S-1-5-21-1482476501-963894560-1801674531-1003..\Run: [Pidgin] C:\Program Files\Pidgin\pidgin.exe (The Pidgin developer community)
O4 - Startup: C:\Documents and Settings\Rebirth\Menu Start\Programy\Autostart\TrayIt!.lnk = C:\Program Files\TrayIt!\TrayIt!.exe (Igor Nys)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1482476501-963894560-1801674531-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1482476501-963894560-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1482476501-963894560-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWelcomeScreen = 1
O7 - HKU\S-1-5-21-1482476501-963894560-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoOnlinePrintsWizard = 0
O7 - HKU\S-1-5-21-1482476501-963894560-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSimpleStartMenu = 1
O7 - HKU\S-1-5-21-1482476501-963894560-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuPinnedList = 0
O7 - HKU\S-1-5-21-1482476501-963894560-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoUserNameInStartMenu = 0
O7 - HKU\S-1-5-21-1482476501-963894560-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-21-1482476501-963894560-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 1
O7 - HKU\S-1-5-21-1482476501-963894560-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1482476501-963894560-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-1482476501-963894560-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 1
O7 - HKU\S-1-5-21-1482476501-963894560-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 1
O8 - Extra context menu item: Ściągnij przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_link.htm ()
O8 - Extra context menu item: Ściągnij wszystko przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_all.htm ()
O9 - Extra Button: &Klawiatura wirtualna - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O9 - Extra Button: &Sprawdzanie adresów internetowych - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O9 - Extra Button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\flashget.exe (Amaze Soft)
O9 - Extra 'Tools' menuitem : &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\flashget.exe (Amaze Soft)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1252953230687 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7F6FCB28-574B-4168-9CCF-19783D9788DE}: NameServer = 192.168.0.1,194.204.159.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~2\kloehk.dll) -C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\kloehk.dll (Kaspersky Lab ZAO)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\klogon: DllName - (C:\WINDOWS\system32\klogon.dll) - C:\WINDOWS\system32\klogon.dll (Kaspersky Lab ZAO)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\ACD Wallpaper.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\ACD Wallpaper.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009-09-13 01:18:04 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-11-14 23:23:38 | 000,000,000 | ---D | C] -- C:\Program Files\TrayIt!
[2011-11-10 22:42:31 | 000,000,000 | ---D | C] -- C:\WINDOWS\XSxS
[2011-11-10 22:42:31 | 000,000,000 | ---D | C] -- C:\Program Files\Xenocode
[2011-11-10 22:42:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rebirth\Ustawienia lokalne\Dane aplikacji\Xenocode
[2011-10-29 01:19:07 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2011-10-29 01:17:28 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2011-10-29 01:17:05 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2011-10-26 23:53:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Rebirth\Moje dokumenty\Pobieranie
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011-11-21 20:46:16 | 000,009,057 | ---- | M] () -- C:\WINDOWS\wincmd.ini
[2011-11-21 20:34:03 | 000,000,434 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.ics
[2011-11-21 20:32:46 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011-11-21 20:31:57 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011-11-17 09:11:45 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2011-11-14 23:30:53 | 000,000,677 | ---- | M] () -- C:\Documents and Settings\Rebirth\Menu Start\Programy\Autostart\TrayIt!.lnk
[2011-11-14 12:35:38 | 000,009,749 | ---- | M] () -- C:\krd_result
[2011-11-09 10:56:08 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2011-11-06 23:25:46 | 207,994,880 | ---- | M] () -- C:\Documents and Settings\Rebirth\Moje dokumenty\krd.iso
[2011-11-01 19:34:26 | 000,490,628 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2011-11-01 19:34:26 | 000,432,492 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011-11-01 19:34:26 | 000,083,880 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2011-11-01 19:34:26 | 000,067,448 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-11-14 23:30:53 | 000,000,677 | ---- | C] () -- C:\Documents and Settings\Rebirth\Menu Start\Programy\Autostart\TrayIt!.lnk
[2011-11-14 12:35:38 | 000,009,749 | ---- | C] () -- C:\krd_result
[2011-11-01 23:29:52 | 207,994,880 | ---- | C] () -- C:\Documents and Settings\Rebirth\Moje dokumenty\krd.iso
[2011-09-08 20:56:52 | 000,280,276 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2011-09-08 20:56:52 | 000,280,276 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2011-09-08 20:56:52 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2011-09-08 20:56:21 | 002,128,778 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data
[2011-09-04 21:28:54 | 000,014,640 | ---- | C] () -- C:\WINDOWS\System32\RaCoInst.dat
[2011-09-04 21:28:54 | 000,004,096 | ---- | C] () -- C:\WINDOWS\System32\drivers\rt2870.bin
[2011-08-16 01:37:53 | 000,077,176 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2011-05-24 19:53:13 | 000,115,369 | ---- | C] () -- C:\WINDOWS\System32\drivers\klin.dat
[2011-05-24 19:53:13 | 000,097,961 | ---- | C] () -- C:\WINDOWS\System32\drivers\klick.dat
[2010-10-19 12:54:58 | 000,000,092 | ---- | C] () -- C:\WINDOWS\Orange.Ini
[2010-10-13 17:11:10 | 000,009,847 | ---- | C] () -- C:\WINDOWS\hpwscr12.dat
[2010-10-13 13:38:17 | 000,015,096 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2010-09-06 10:08:36 | 000,033,792 | ---- | C] () -- C:\WINDOWS\System32\rgbacodec.dll
[2010-07-21 21:35:57 | 000,200,704 | R--- | C] () -- C:\WINDOWS\sel3110.exe
[2010-07-21 21:35:57 | 000,040,960 | R--- | C] () -- C:\WINDOWS\CleanDev.exe
[2010-07-21 21:35:57 | 000,032,528 | R--- | C] () -- C:\WINDOWS\amcap.exe
[2010-06-21 16:12:24 | 000,000,798 | ---- | C] () -- C:\WINDOWS\LOGINPUT.INI
[2010-06-21 16:12:24 | 000,000,213 | ---- | C] () -- C:\WINDOWS\PCWGXDRV.INI
[2010-06-05 15:26:05 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010-06-05 15:26:05 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010-06-05 15:26:05 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010-06-05 15:26:05 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010-06-05 15:26:05 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010-05-04 21:11:34 | 000,214,016 | ---- | C] () -- C:\WINDOWS\System32\sqlite.dll
[2010-05-04 21:11:31 | 000,335,872 | ---- | C] () -- C:\WINDOWS\System32\m4atag.dll
[2010-03-16 10:14:20 | 000,007,168 | ---- | C] () -- C:\Documents and Settings\Rebirth\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010-02-14 19:40:12 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\csdlocalmon.dll
[2009-12-20 15:52:19 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\fppent2a.dll
[2009-10-27 15:18:53 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2009-09-26 19:30:19 | 000,000,001 | -H-- | C] () -- C:\WINDOWS\mulch200.ini
[2009-09-14 19:13:47 | 009,927,712 | -HS- | C] () -- C:\WINDOWS\System32\drivers\fidbox.dat
[2009-09-14 19:13:47 | 000,966,688 | -HS- | C] () -- C:\WINDOWS\System32\drivers\fidbox2.dat
[2009-09-14 16:22:40 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009-09-14 14:11:53 | 000,000,421 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2009-09-13 20:05:42 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009-09-13 17:47:49 | 000,000,534 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2009-09-13 17:44:48 | 000,009,057 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2009-09-13 16:31:23 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2009-09-13 14:34:42 | 000,000,008 | ---- | C] () -- C:\WINDOWS\System32\nvModes.dat
[2009-09-13 14:17:52 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2009-09-13 03:07:13 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009-09-13 03:04:20 | 000,123,728 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009-09-13 01:20:07 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009-09-13 01:14:54 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009-09-09 17:01:40 | 000,027,675 | ---- | C] () -- C:\WINDOWS\System32\drivers\klopp.dat
[2009-08-16 23:57:00 | 001,597,690 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2008-10-22 04:29:06 | 000,173,550 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
[2008-04-15 13:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2008-04-15 13:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2008-04-15 13:00:00 | 000,490,628 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat
[2008-04-15 13:00:00 | 000,432,492 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2008-04-15 13:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat
[2008-04-15 13:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2008-04-15 13:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2008-04-15 13:00:00 | 000,083,880 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat
[2008-04-15 13:00:00 | 000,067,448 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2008-04-15 13:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2008-04-15 13:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat
[2008-04-15 13:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2008-04-15 13:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2008-04-15 13:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2008-04-15 13:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2008-04-15 13:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2007-05-15 09:07:10 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\CSD_IRIVER_GEN.DLL
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2009-11-23 16:15:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ableton
[2009-09-14 21:52:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Acronis
[2009-09-13 19:06:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Bluetooth
[2010-06-21 16:27:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\CwGet
[2011-09-04 21:28:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Edimax Driver
[2010-07-21 20:25:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations
[2010-08-20 23:13:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\iRiver
[2010-07-22 09:00:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nokia
[2011-09-05 22:15:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite
[2011-06-17 21:15:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\regid.1986-12.com.adobe
[2011-11-14 01:09:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Soulseek
[2009-09-22 01:16:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP
[2010-10-13 12:30:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2011-11-21 20:44:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rebirth\Dane aplikacji\.purple
[2011-04-26 20:20:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rebirth\Dane aplikacji\.wtw
[2009-11-23 16:15:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rebirth\Dane aplikacji\Ableton
[2009-09-14 21:57:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rebirth\Dane aplikacji\Acronis
[2011-02-08 21:18:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rebirth\Dane aplikacji\adma
[2010-10-01 00:10:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rebirth\Dane aplikacji\CCS64
[2011-11-13 23:15:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rebirth\Dane aplikacji\Dropbox
[2011-11-21 00:55:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rebirth\Dane aplikacji\foobar2000
[2009-09-15 23:13:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rebirth\Dane aplikacji\Foxit
[2011-04-26 20:32:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rebirth\Dane aplikacji\gtk-2.0
[2009-10-11 19:56:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rebirth\Dane aplikacji\ImgBurn
[2010-02-15 01:29:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rebirth\Dane aplikacji\Mp3tag
[2010-01-12 14:23:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rebirth\Dane aplikacji\Nokia
[2009-09-14 21:04:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rebirth\Dane aplikacji\Notepad++
[2010-01-12 14:23:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rebirth\Dane aplikacji\PC Suite
[2011-05-20 12:58:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rebirth\Dane aplikacji\ResourceCentral.E6E1B28A311BC518DB6C6883EA3757FDE0E90ADC.1
[2010-09-12 17:18:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rebirth\Dane aplikacji\Thunderbird
[2011-03-15 23:08:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Rebirth\Dane aplikacji\uTorrent
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:CD30FA91

< End of report >