OTL logfile created on: 2012-01-06 13:45:39 - Run 2
OTL by OldTimer - Version 3.2.31.0     Folder = C:\Documents and Settings\user\Pulpit
Windows XP Home Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 1,41 Gb Available Physical Memory | 70,37% Memory free
3,35 Gb Paging File | 2,89 Gb Available in Paging File | 86,33% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 97,65 Gb Total Space | 22,22 Gb Free Space | 22,75% Space Free | Partition Type: NTFS
Drive D: | 200,43 Gb Total Space | 0,48 Gb Free Space | 0,24% Space Free | Partition Type: NTFS
 
Computer Name: USER-1EA621C4F8 | User Name: user | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-12-29 22:52:22 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\user\Pulpit\OTL.com
PRC - [2011-11-14 15:05:30 | 000,912,856 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009-07-26 12:45:30 | 000,126,976 | ---- | M] () -- C:\WINDOWS\system32\UAService7.exe
PRC - [2008-04-14 18:21:16 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007-11-19 15:40:50 | 000,231,952 | ---- | M] (Kaspersky Lab) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe
PRC - [2007-07-24 11:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
PRC - [2007-05-28 17:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
PRC - [2006-11-03 18:19:58 | 000,013,592 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MsMpEng.exe
PRC - [2005-04-06 16:03:28 | 000,110,592 | ---- | M] () -- C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2011-11-14 15:05:30 | 000,849,368 | ---- | M] () -- C:\Program Files\Mozilla Firefox\js3250.dll
MOD - [2011-07-20 17:40:23 | 006,271,136 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
MOD - [2009-07-26 12:45:30 | 000,126,976 | ---- | M] () -- C:\WINDOWS\system32\UAService7.exe
MOD - [2007-08-21 12:32:44 | 000,098,304 | ---- | M] () -- C:\WINDOWS\system32\redmonnt.dll
MOD - [2005-04-06 16:03:28 | 000,110,592 | ---- | M] () -- C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] --  -- (HidServ)
SRV - File not found [On_Demand | Stopped] --  -- (AppMgmt)
SRV - [2009-07-26 12:45:30 | 000,126,976 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\UAService7.exe -- (UserAccess7) SecuROM User Access Service (V7)
SRV - [2007-11-19 15:40:50 | 000,231,952 | ---- | M] (Kaspersky Lab) [Auto | Running] -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe -- (AVP)
SRV - [2007-07-24 11:15:14 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
SRV - [2007-07-12 15:30:42 | 000,257,024 | ---- | M] (ASUSTeK COMPUTER INC.) [Auto | Stopped] -- C:\WINDOWS\ATKKBService.exe -- (ATKKeyboardService)
SRV - [2007-05-28 17:57:54 | 000,275,968 | ---- | M] (Rocket Division Software) [Auto | Running] -- C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2006-11-03 18:19:58 | 000,013,592 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV - [2005-04-06 16:03:28 | 000,110,592 | ---- | M] () [Auto | Running] -- C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe -- (BlueSoleil Hid Service)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2009-11-12 05:14:27 | 000,057,320 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvhda32.sys -- (NVHDA)
DRV - [2009-02-10 16:23:02 | 000,082,320 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files\UltraISO\drivers\ISODrive.sys -- (ISODrive)
DRV - [2008-09-24 18:18:08 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\gdrv.sys -- (gdrv)
DRV - [2008-02-14 10:04:06 | 004,676,096 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008-01-03 15:10:16 | 000,105,856 | R--- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2007-11-09 19:13:42 | 000,193,296 | ---- | M] (Kaspersky Lab) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\klif.sys -- (klif)
DRV - [2007-10-11 10:10:52 | 000,030,008 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ET5Drv.sys -- (ET5Drv)
DRV - [2007-07-18 15:39:54 | 000,110,096 | ---- | M] (Kaspersky Lab) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\kl1.sys -- (kl1)
DRV - [2007-07-12 09:03:42 | 000,012,416 | ---- | M] (ASUSTeK Computer Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\asusgsb.sys -- (asusgsb)
DRV - [2007-07-12 09:03:40 | 000,010,752 | ---- | M] (ASUSTeK COMPUTER INC.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Video3D32.sys -- (Video3D)
DRV - [2007-07-12 09:03:38 | 000,012,288 | ---- | M] (ASUSTeK Computer Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\EIO.sys -- (EIO)
DRV - [2007-07-12 09:03:38 | 000,011,136 | ---- | M] (ASUSTeK COMPUTER INC.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\atkkbnt.sys -- (asuskbnt)
DRV - [2007-05-30 18:49:06 | 000,024,344 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\klim5.sys -- (klim5)
DRV - [2006-09-19 10:03:28 | 000,116,992 | ---- | M] (Analog Devices Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\e4usbaw.sys -- (e4usbaw)
DRV - [2006-09-15 10:07:54 | 000,064,000 | ---- | M] (Analog Deivces) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\e4ldr.sys -- (IKANLOADER2) General Purpose USB Driver (e4ldr.sys)
DRV - [2005-05-31 15:40:20 | 000,020,480 | ---- | M] (IVT Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\blueletaudio.sys -- (BlueletAudio)
DRV - [2005-05-31 09:42:28 | 000,023,000 | ---- | M] (IVT Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\btcusb.sys -- (Btcsrusb)
DRV - [2005-04-30 14:50:20 | 000,011,860 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\vbtenum.sys -- (BTHidEnum)
DRV - [2005-04-30 14:50:10 | 000,028,271 | ---- | M] (IVT Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\BTHidMgr.sys -- (BTHidMgr)
DRV - [2005-04-30 14:48:58 | 000,010,804 | ---- | M] (IVT Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BtNetDrv.sys -- (BT)
DRV - [2005-03-25 17:18:48 | 000,082,148 | ---- | M] (IVT Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VcommMgr.sys -- (VcommMgr)
DRV - [2004-12-16 16:32:54 | 000,013,304 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BTNetFilter.sys -- (BTNetFilter)
DRV - [2004-10-19 13:37:38 | 000,061,312 | ---- | M] (IVT Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VComm.sys -- (VComm)
DRV - [2003-08-04 13:22:44 | 000,016,128 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\PCANDIS5.SYS -- (PCANDIS5)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-776561741-1482476501-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-776561741-1482476501-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKU\S-1-5-21-776561741-1482476501-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-776561741-1482476501-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP_ss&affID=100471&mntrId=4cea9985000000000000101111111111
IE - HKU\S-1-5-21-776561741-1482476501-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-776561741-1482476501-725345543-1004\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-776561741-1482476501-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.onet.pl/"
FF - prefs.js..extensions.enabledItems: firefox@tvunetworks.com:2
FF - prefs.js..extensions.enabledItems: 4
FF - prefs.js..extensions.enabledItems: 9
FF - prefs.js..extensions.enabledItems: 1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: vshare@toolbar:1.0.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..keyword.URL: "http://search.babylon.com/?babsrc=SP_ss&mntrId=4cea9985000000000000101111111111&tlver=1.4.31.2&instlRef=sst&affID=100471&q="
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2852: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.46: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1662: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.46: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@zylom.com/ZylomGamesPlayer: C:\Documents and Settings\All Users\Dane aplikacji\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.24\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011-12-28 20:56:57 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.24\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-12-28 20:56:56 | 000,000,000 | ---D | M]
 
[2008-11-24 21:13:46 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\user\Dane aplikacji\Mozilla\Extensions
[2012-01-06 13:35:58 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\jetlat0g.default\extensions
[2011-05-02 07:16:59 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\jetlat0g.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011-08-18 07:48:05 | 000,000,000 | ---D | M] (Babylon) -- C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\jetlat0g.default\extensions\ffxtlbr@babylon.com
[2011-05-02 07:16:59 | 000,000,000 | ---D | M] (TVU Web Player) -- C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\jetlat0g.default\extensions\firefox@tvunetworks.com
[2011-02-15 20:38:02 | 000,000,000 | ---D | M] (vShare) -- C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\jetlat0g.default\extensions\vshare@toolbar
[2011-06-27 18:25:15 | 000,002,569 | ---- | M] () -- C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\jetlat0g.default\searchplugins\askcom.xml
[2011-02-15 20:38:09 | 000,001,583 | ---- | M] () -- C:\Documents and Settings\user\Dane aplikacji\Mozilla\Firefox\Profiles\jetlat0g.default\searchplugins\web-search.xml
[2011-12-28 21:32:49 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010-11-08 17:58:51 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2011-07-02 10:26:30 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010-11-08 17:58:39 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2010-07-17 04:00:04 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2007-02-04 23:02:56 | 001,642,496 | ---- | M] (LizardTech) -- C:\Program Files\mozilla firefox\plugins\npdjvu.dll
[2009-10-23 15:01:34 | 000,102,400 | ---- | M] (Zylom) -- C:\Program Files\mozilla firefox\plugins\npzylomgamesplayer.dll
[2011-11-14 15:05:33 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml
[2011-08-18 07:49:10 | 000,002,288 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2011-11-14 15:05:33 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml
[2011-11-14 15:05:33 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml
[2011-11-14 15:05:33 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml
[2011-11-14 15:05:33 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml
[2011-11-14 15:05:33 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml
 
O1 HOSTS File: ([2008-11-12 17:41:27 | 000,000,906 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 127.0.0.1 serial.alcohol-soft.com
O1 - Hosts: 127.0.0.1 www.alcohol-soft.com
O1 - Hosts: 127.0.0.1 images.alcohol-soft.com
O1 - Hosts: 127.0.0.1 trial.alcohol-soft.com
O1 - Hosts: 127.0.0.1 alcohol-soft.com
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (HP Print Clips) - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll (Hewlett-Packard Co.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll (Google Inc.)
O2 - BHO: (IEPluginBHO Class) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - C:\Documents and Settings\user\Dane aplikacji\Nowe Gadu-Gadu\_userdata\ggbho.1.dll (GG Network S.A.)
O3 - HKLM\..\Toolbar: (&Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O3 - HKU\S-1-5-21-776561741-1482476501-725345543-1004\..\Toolbar\WebBrowser: (&Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [ASUSGamerOSD] C:\Program Files\ASUS\GamerOSD\GamerOSD.exe (ASUSTeK Computer Inc.)
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\avp.exe (Kaspersky Lab)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] nwiz.exe /installquiet File not found
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime Alternative\qttask.exe (Apple Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-776561741-1482476501-725345543-1004..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
O4 - HKU\S-1-5-21-776561741-1482476501-725345543-1004..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent File not found
O4 - HKU\S-1-5-21-776561741-1482476501-725345543-1004..\Run: [PCSpeedUp] "C:\Program Files\Przyspiesz Komputer\PCSpeedUp.exe" File not found
O4 - HKU\S-1-5-21-776561741-1482476501-725345543-1004..\Run: [Trojan Killer] C:\Program Files\GridinSoft Trojan Killer\trojankiller.com (GridinSoft LLC.)
O4 - HKU\S-1-5-21-776561741-1482476501-725345543-1004..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\System32\Macromed\Flash\FlashUtil10t_Plugin.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\BlueSoleil.lnk = C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe (IVT Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-776561741-1482476501-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O9 - Extra Button: Statystyki dla ochrony WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\SCIEPlgn.dll (Kaspersky Lab)
O9 - Extra Button: Kolekcja wycinków HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.)
O9 - Extra Button: Zaznaczanie HP Smart - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1222780767051 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl/jinstall-1_4_0_03-win.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.100
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4054DF18-4174-4EFE-BF03-468712CFE6FA}: DhcpNameServer = 192.168.1.100
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1.0FO\adialhk.dll) -C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations\adialhk.dll (Kaspersky Lab)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\klogon: DllName - (C:\WINDOWS\system32\klogon.dll) - C:\WINDOWS\system32\klogon.dll (Kaspersky Lab)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008-09-24 16:31:06 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006-09-27 05:17:25 | 000,000,027 | ---- | M] () - D:\Autorun.inf -- [ NTFS ]
O33 - MountPoints2\{260ef980-4639-11df-9341-4d6564696130}\Shell\AutoRun\command - "" = G:\RECYCLER\\autorun.exe Zq3Ax+1l+4fs#@VVoAQlKjP#m^02jfJoCJEUabDFRgYuPpxX8Ttmnls&6&Mf3hmpf
O33 - MountPoints2\{260ef980-4639-11df-9341-4d6564696130}\Shell\open\command - "" = G:\RECYCLER\\autorun.exe 6rX61+dxZ2^kdQ!tTc@XwIJHNtku8ihCHLA8lbQy
O33 - MountPoints2\{786e0aa7-487e-11de-bb27-4d6564696130}\Shell\AutoRun\command - "" = J:\e2.cmd
O33 - MountPoints2\{786e0aa7-487e-11de-bb27-4d6564696130}\Shell\open\Command - "" = J:\e2.cmd
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKU\S-1-5-21-776561741-1482476501-725345543-1004\...exe [@ = 2Ag] -- "C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\mdt.exe" -a "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011-12-29 23:09:29 | 000,592,952 | ---- | C] (Duplex Secure Ltd.) -- C:\Documents and Settings\user\Pulpit\SPTDinst-v179-x86.com
[2011-12-29 22:52:20 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\user\Pulpit\OTL.com
[2011-12-28 23:23:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\GridinSoft1
[2011-12-28 23:20:07 | 023,550,168 | ---- | C] (GridinSoft, Inc.                                            ) -- C:\Documents and Settings\user\Pulpit\trojankiller2116-setup.exe
[2011-12-28 22:49:47 | 000,000,000 | -H-D | C] -- C:\WINDOWS\PIF
[2011-12-28 22:47:50 | 005,376,792 | ---- | C] (GridinSoft, Inc.                                            ) -- C:\Documents and Settings\user\Pulpit\trojankiller-setup.exe
[2011-12-28 22:18:31 | 000,000,000 | ---D | C] -- C:\Temp
[2011-12-28 21:50:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\GridinSoft
[2011-12-28 21:50:18 | 000,000,000 | ---D | C] -- C:\Program Files\GridinSoft Trojan Killer
[2011-12-28 21:06:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab
[2011-12-28 21:06:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Kaspersky Anti-Virus 6.0 for Windows Workstations
[2011-12-22 20:15:33 | 000,000,000 | ---D | C] -- C:\pliki z lisa
[2004-11-24 19:25:52 | 000,335,872 | ---- | C] ( ) -- C:\WINDOWS\System32\drvc.dll
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-01-06 13:38:07 | 002,082,336 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox.dat
[2012-01-06 13:38:05 | 000,035,104 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox2.dat
[2012-01-06 13:35:52 | 000,000,330 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job
[2012-01-06 13:32:48 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012-01-06 13:32:48 | 000,001,032 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012-01-06 13:32:48 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2012-01-06 13:32:46 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-01-06 13:31:37 | 008,650,752 | ---- | M] () -- C:\Documents and Settings\user\ntuser.dat
[2012-01-06 13:31:37 | 000,030,932 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox.idx
[2012-01-06 13:31:37 | 000,004,268 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox2.idx
[2012-01-06 13:16:00 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011-12-30 10:01:33 | 000,283,720 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011-12-29 23:09:29 | 000,592,952 | ---- | M] (Duplex Secure Ltd.) -- C:\Documents and Settings\user\Pulpit\SPTDinst-v179-x86.com
[2011-12-29 23:07:43 | 000,302,592 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\7qerrelu.com
[2011-12-29 22:59:35 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011-12-29 22:52:22 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\user\Pulpit\OTL.com
[2011-12-28 23:28:02 | 000,002,855 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Trojan Killer.pif
[2011-12-28 23:19:53 | 000,000,026 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\run.bat
[2011-12-28 23:18:45 | 023,550,168 | ---- | M] (GridinSoft, Inc.                                            ) -- C:\Documents and Settings\user\Pulpit\trojankiller2116-setup.exe
[2011-12-28 22:52:07 | 000,000,814 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\Skrót do trojankiller.exe.lnk
[2011-12-28 21:07:18 | 000,096,559 | ---- | M] () -- C:\WINDOWS\System32\drivers\klin.dat
[2011-12-28 21:07:18 | 000,087,855 | ---- | M] () -- C:\WINDOWS\System32\drivers\klick.dat
[2011-12-28 20:46:03 | 000,015,614 | -HS- | M] () -- C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\08qvo70ej1vc480dm22e64
[2011-12-28 20:46:03 | 000,015,614 | -HS- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\08qvo70ej1vc480dm22e64
[2011-12-28 20:34:07 | 000,271,641 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml
[2011-12-28 12:51:00 | 002,649,436 | -H-- | M] () -- C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2011-12-23 09:09:57 | 000,000,438 | -H-- | M] () -- C:\WINDOWS\tasks\Norton Security Scan for user.job
[2011-12-22 11:15:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011-12-12 17:05:53 | 000,000,084 | ---- | M] () -- C:\Documents and Settings\user\Pulpit\moja przyjaciółka = moja siostra ♥.URL
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[3 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011-12-29 23:07:43 | 000,302,592 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\7qerrelu.com
[2011-12-28 22:53:08 | 000,002,855 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Trojan Killer.pif
[2011-12-28 22:52:07 | 000,000,814 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\Skrót do trojankiller.exe.lnk
[2011-12-28 22:46:54 | 000,000,026 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\run.bat
[2011-12-28 21:19:39 | 008,650,752 | ---- | C] () -- C:\Documents and Settings\user\ntuser.dat
[2011-12-28 21:07:18 | 000,096,559 | ---- | C] () -- C:\WINDOWS\System32\drivers\klin.dat
[2011-12-28 21:07:18 | 000,087,855 | ---- | C] () -- C:\WINDOWS\System32\drivers\klick.dat
[2011-12-28 21:06:40 | 002,082,336 | -HS- | C] () -- C:\WINDOWS\System32\drivers\fidbox.dat
[2011-12-28 21:06:40 | 000,035,104 | -HS- | C] () -- C:\WINDOWS\System32\drivers\fidbox2.dat
[2011-12-28 21:06:40 | 000,030,932 | -HS- | C] () -- C:\WINDOWS\System32\drivers\fidbox.idx
[2011-12-28 21:06:40 | 000,004,268 | -HS- | C] () -- C:\WINDOWS\System32\drivers\fidbox2.idx
[2011-12-28 13:06:13 | 000,001,036 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011-12-28 13:06:12 | 000,001,032 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011-12-27 19:10:15 | 000,015,614 | -HS- | C] () -- C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\08qvo70ej1vc480dm22e64
[2011-12-27 19:10:15 | 000,015,614 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\08qvo70ej1vc480dm22e64
[2011-12-12 17:05:53 | 000,000,084 | ---- | C] () -- C:\Documents and Settings\user\Pulpit\moja przyjaciółka = moja siostra ♥.URL
[2011-08-18 07:48:34 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\redmonnt.dll
[2011-01-27 22:37:35 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2011-01-16 18:38:52 | 000,338,944 | ---- | C] () -- C:\WINDOWS\System32\binkw32.dll
[2010-12-27 19:25:14 | 000,000,090 | ---- | C] () -- C:\WINDOWS\WA.INI
[2010-12-09 23:25:40 | 000,427,016 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat
[2010-11-10 14:16:30 | 000,000,021 | ---- | C] () -- C:\WINDOWS\progman.ini
[2010-11-10 14:16:13 | 000,000,056 | ---- | C] () -- C:\WINDOWS\swcmpc.ini
[2010-06-26 09:02:53 | 000,000,124 | ---- | C] () -- C:\WINDOWS\KA.ini
[2010-06-21 18:23:25 | 000,000,196 | ---- | C] () -- C:\WINDOWS\_delis43.ini
[2010-03-12 23:25:39 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\user\Dane aplikacji\$_hpcst$.hpc
[2010-01-30 18:12:44 | 002,283,526 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2009-12-03 20:27:00 | 000,002,828 | -HS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\KGyGaAvL.sys
[2009-12-03 20:27:00 | 000,000,008 | RHS- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\F8CC38CCB7.sys
[2009-11-15 18:29:38 | 000,129,024 | ---- | C] () -- C:\WINDOWS\System32\AVERM.dll
[2009-11-12 23:22:29 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll
[2009-08-06 17:01:17 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI
[2009-07-26 12:45:30 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\UAService7.exe
[2008-12-24 00:26:46 | 000,262,144 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2008-12-24 00:26:41 | 000,000,001 | ---- | C] () -- C:\WINDOWS\hlp-fastamr.dll
[2008-12-06 16:23:48 | 000,013,304 | ---- | C] () -- C:\WINDOWS\System32\drivers\BTNetFilter.sys
[2008-12-06 16:23:48 | 000,011,860 | ---- | C] () -- C:\WINDOWS\System32\drivers\vbtenum.sys
[2008-11-26 22:11:11 | 000,110,466 | ---- | C] () -- C:\WINDOWS\hpqins11.dat
[2008-11-24 21:13:47 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2008-11-19 19:35:53 | 000,155,221 | ---- | C] () -- C:\WINDOWS\hpoins14.dat
[2008-11-19 19:35:53 | 000,002,000 | ---- | C] () -- C:\WINDOWS\hpomdl14.dat
[2008-11-14 18:08:17 | 000,001,221 | ---- | C] () -- C:\WINDOWS\disney.ini
[2008-11-06 15:02:43 | 000,000,038 | ---- | C] () -- C:\WINDOWS\AviSplitter.INI
[2008-10-26 10:03:30 | 000,000,024 | ---- | C] () -- C:\WINDOWS\clofghls.dll
[2008-10-26 09:50:01 | 000,000,052 | ---- | C] () -- C:\WINDOWS\mafosav.INI
[2008-10-06 21:39:32 | 000,000,168 | ---- | C] () -- C:\WINDOWS\adidsl.ini
[2008-10-06 21:39:32 | 000,000,021 | ---- | C] () -- C:\WINDOWS\Fast800.ini
[2008-10-06 21:39:28 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9P2.BIN
[2008-10-06 21:39:28 | 000,127,456 | ---- | C] () -- C:\WINDOWS\System32\IPDETECT.EXE
[2008-10-06 21:39:28 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\coclassfast.dll
[2008-10-06 21:39:28 | 000,046,892 | ---- | C] () -- C:\WINDOWS\System32\ADADIX16.DLL
[2008-10-06 21:39:28 | 000,024,576 | ---- | C] () -- C:\WINDOWS\enddisk32.exe
[2008-10-06 21:39:27 | 000,152,220 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4I2.BIN
[2008-10-06 21:39:27 | 000,152,220 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4I1.BIN
[2008-10-06 21:39:27 | 000,152,220 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4I0.BIN
[2008-10-06 21:39:27 | 000,152,132 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4P2.BIN
[2008-10-06 21:39:27 | 000,152,132 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4P1.BIN
[2008-10-06 21:39:27 | 000,152,132 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4P0.BIN
[2008-10-06 21:39:27 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9P1.BIN
[2008-10-06 21:39:27 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9P0.BIN
[2008-10-06 21:39:27 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9I2.BIN
[2008-10-06 21:39:27 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9I1.BIN
[2008-10-06 21:39:27 | 000,152,126 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E9I0.BIN
[2008-10-06 21:39:27 | 000,152,036 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4D2.BIN
[2008-10-06 21:39:27 | 000,152,034 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4D1.BIN
[2008-10-06 21:39:27 | 000,152,034 | ---- | C] () -- C:\WINDOWS\System32\drivers\L1E4D0.BIN
[2008-10-06 21:39:27 | 000,022,395 | ---- | C] () -- C:\WINDOWS\System32\drivers\fpga.bin
[2008-10-02 21:33:07 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2008-10-01 23:18:05 | 000,098,304 | ---- | C] () -- C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008-10-01 17:46:27 | 000,041,068 | ---- | C] () -- C:\WINDOWS\System32\ActPanel.dll
[2008-09-24 18:21:58 | 001,089,416 | ---- | C] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2008-09-24 18:21:57 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2008-09-24 18:19:19 | 000,283,720 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2008-09-24 17:56:49 | 000,643,142 | ---- | C] () -- C:\WINDOWS\aticlocklib.dll
[2008-09-24 17:56:49 | 000,196,653 | ---- | C] () -- C:\WINDOWS\System32\drivers\aVivid.bin
[2008-09-24 17:56:49 | 000,196,608 | ---- | C] () -- C:\WINDOWS\System32\drivers\nVivid.bin
[2008-09-24 17:56:49 | 000,196,608 | ---- | C] () -- C:\WINDOWS\System32\drivers\nStandard.bin
[2008-09-24 17:56:49 | 000,196,608 | ---- | C] () -- C:\WINDOWS\System32\drivers\nAsmedia.bin
[2008-09-24 17:56:49 | 000,196,608 | ---- | C] () -- C:\WINDOWS\System32\drivers\nAdvanced.bin
[2008-09-24 17:56:49 | 000,196,608 | ---- | C] () -- C:\WINDOWS\System32\drivers\aAdvanced.bin
[2008-09-24 17:56:49 | 000,196,582 | ---- | C] () -- C:\WINDOWS\System32\drivers\aStandard.bin
[2008-09-24 17:56:49 | 000,196,582 | ---- | C] () -- C:\WINDOWS\System32\drivers\aAsmedia.bin
[2008-09-24 17:56:49 | 000,110,592 | ---- | C] () -- C:\WINDOWS\R5ClkLib.dll
[2008-09-24 17:56:49 | 000,020,480 | ---- | C] () -- C:\WINDOWS\HyperDrive.exe
[2008-09-24 17:56:49 | 000,000,018 | ---- | C] () -- C:\WINDOWS\System32\atkid.ini
[2008-09-24 17:56:48 | 000,761,856 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2008-09-24 17:56:48 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2008-09-24 17:56:48 | 000,046,592 | ---- | C] () -- C:\WINDOWS\System32\asfrench.dll
[2008-09-24 17:56:48 | 000,046,080 | ---- | C] () -- C:\WINDOWS\System32\asrussian.dll
[2008-09-24 17:56:48 | 000,046,080 | ---- | C] () -- C:\WINDOWS\System32\asgerman.dll
[2008-09-24 17:56:48 | 000,046,080 | ---- | C] () -- C:\WINDOWS\System32\aseng.dll
[2008-09-24 17:56:48 | 000,045,568 | ---- | C] () -- C:\WINDOWS\System32\askorean.dll
[2008-09-24 17:56:48 | 000,045,568 | ---- | C] () -- C:\WINDOWS\System32\asjapan.dll
[2008-09-24 17:56:48 | 000,045,568 | ---- | C] () -- C:\WINDOWS\System32\ASCHT.dll
[2008-09-24 17:56:48 | 000,045,568 | ---- | C] () -- C:\WINDOWS\System32\aschs.dll
[2008-09-24 17:17:34 | 000,073,736 | ---- | C] () -- C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2008-09-24 17:04:12 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2008-09-24 17:02:05 | 002,649,436 | -H-- | C] () -- C:\Documents and Settings\user\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2008-09-24 16:32:37 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2008-09-24 16:31:06 | 000,000,000 | ---- | C] () -- C:\WINDOWS\control.ini
[2008-09-24 16:30:17 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2008-09-24 16:30:13 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2008-09-24 16:29:00 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2008-09-24 16:28:50 | 000,000,037 | ---- | C] () -- C:\WINDOWS\vbaddin.ini
[2008-09-24 16:28:50 | 000,000,036 | ---- | C] () -- C:\WINDOWS\vb.ini
[2008-09-24 16:28:04 | 000,026,717 | ---- | C] () -- C:\WINDOWS\System32\tslabels.ini
[2008-09-24 16:28:03 | 000,003,813 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.ini
[2008-07-05 11:14:48 | 000,456,192 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll
[2008-07-05 11:14:44 | 003,591,168 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll
[2008-07-05 11:13:16 | 000,708,096 | ---- | C] () -- C:\WINDOWS\System32\ff_x264.dll
[2008-06-22 17:34:00 | 000,177,664 | ---- | C] () -- C:\WINDOWS\System32\ff_theora.dll
[2008-06-13 11:39:38 | 000,023,552 | ---- | C] () -- C:\WINDOWS\System32\ff_wmv9.dll
[2008-06-12 18:36:38 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2007-11-19 15:40:20 | 000,023,396 | ---- | C] () -- C:\WINDOWS\System32\drivers\klop.dat
[2007-07-10 16:10:12 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2007-06-28 17:43:00 | 001,018,772 | ---- | C] () -- C:\WINDOWS\System32\nvucode.bin
[2007-06-28 17:43:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2006-11-02 16:10:16 | 000,080,912 | ---- | C] () -- C:\WINDOWS\System32\sherlock2.exe
[2006-03-02 13:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2006-03-02 13:00:00 | 001,015,477 | ---- | C] () -- C:\WINDOWS\System32\esentprf.ini
[2006-03-02 13:00:00 | 000,733,696 | ---- | C] () -- C:\WINDOWS\System32\qedwipes.dll
[2006-03-02 13:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2006-03-02 13:00:00 | 000,491,064 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat
[2006-03-02 13:00:00 | 000,432,928 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2006-03-02 13:00:00 | 000,355,112 | ---- | C] () -- C:\WINDOWS\System32\msjetoledb40.dll
[2006-03-02 13:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat
[2006-03-02 13:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2006-03-02 13:00:00 | 000,270,848 | ---- | C] () -- C:\WINDOWS\System32\sbe.dll
[2006-03-02 13:00:00 | 000,253,440 | ---- | C] () -- C:\WINDOWS\System32\compatui.dll
[2006-03-02 13:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2006-03-02 13:00:00 | 000,199,168 | ---- | C] () -- C:\WINDOWS\System32\ir32_32.dll
[2006-03-02 13:00:00 | 000,186,880 | ---- | C] () -- C:\WINDOWS\System32\encdec.dll
[2006-03-02 13:00:00 | 000,094,282 | ---- | C] () -- C:\WINDOWS\System32\msencode.dll
[2006-03-02 13:00:00 | 000,084,316 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat
[2006-03-02 13:00:00 | 000,070,656 | ---- | C] () -- C:\WINDOWS\System32\amstream.dll
[2006-03-02 13:00:00 | 000,070,622 | ---- | C] () -- C:\WINDOWS\System32\edit.com
[2006-03-02 13:00:00 | 000,067,884 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2006-03-02 13:00:00 | 000,053,920 | ---- | C] () -- C:\WINDOWS\System32\dosx.exe
[2006-03-02 13:00:00 | 000,053,478 | ---- | C] () -- C:\WINDOWS\System32\tcpmon.ini
[2006-03-02 13:00:00 | 000,051,823 | ---- | C] () -- C:\WINDOWS\System32\command.com
[2006-03-02 13:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2006-03-02 13:00:00 | 000,042,809 | ---- | C] () -- C:\WINDOWS\System32\key01.sys
[2006-03-02 13:00:00 | 000,042,537 | ---- | C] () -- C:\WINDOWS\System32\keyboard.sys
[2006-03-02 13:00:00 | 000,039,434 | ---- | C] () -- C:\WINDOWS\System32\mem.exe
[2006-03-02 13:00:00 | 000,035,648 | ---- | C] () -- C:\WINDOWS\System32\ntio411.sys
[2006-03-02 13:00:00 | 000,035,424 | ---- | C] () -- C:\WINDOWS\System32\ntio412.sys
[2006-03-02 13:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat
[2006-03-02 13:00:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio804.sys
[2006-03-02 13:00:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio404.sys
[2006-03-02 13:00:00 | 000,033,936 | ---- | C] () -- C:\WINDOWS\System32\ntio.sys
[2006-03-02 13:00:00 | 000,029,370 | ---- | C] () -- C:\WINDOWS\System32\ntdos411.sys
[2006-03-02 13:00:00 | 000,029,274 | ---- | C] () -- C:\WINDOWS\System32\ntdos412.sys
[2006-03-02 13:00:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos804.sys
[2006-03-02 13:00:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos404.sys
[2006-03-02 13:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2006-03-02 13:00:00 | 000,027,898 | ---- | C] () -- C:\WINDOWS\System32\ntdos.sys
[2006-03-02 13:00:00 | 000,027,097 | ---- | C] () -- C:\WINDOWS\System32\country.sys
[2006-03-02 13:00:00 | 000,020,986 | ---- | C] () -- C:\WINDOWS\System32\debug.exe
[2006-03-02 13:00:00 | 000,019,806 | ---- | C] () -- C:\WINDOWS\System32\graphics.com
[2006-03-02 13:00:00 | 000,016,024 | ---- | C] () -- C:\WINDOWS\System32\rsvp.ini
[2006-03-02 13:00:00 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\tsd32.dll
[2006-03-02 13:00:00 | 000,014,913 | ---- | C] () -- C:\WINDOWS\System32\kb16.com
[2006-03-02 13:00:00 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo.dll
[2006-03-02 13:00:00 | 000,013,819 | ---- | C] () -- C:\WINDOWS\System32\pschdprf.ini
[2006-03-02 13:00:00 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\win87em.dll
[2006-03-02 13:00:00 | 000,012,866 | ---- | C] () -- C:\WINDOWS\System32\edlin.exe
[2006-03-02 13:00:00 | 000,012,594 | ---- | C] () -- C:\WINDOWS\System32\append.exe
[2006-03-02 13:00:00 | 000,011,859 | ---- | C] () -- C:\WINDOWS\System32\setver.exe
[2006-03-02 13:00:00 | 000,009,043 | ---- | C] () -- C:\WINDOWS\System32\ansi.sys
[2006-03-02 13:00:00 | 000,008,520 | ---- | C] () -- C:\WINDOWS\System32\exe2bin.exe
[2006-03-02 13:00:00 | 000,007,116 | ---- | C] () -- C:\WINDOWS\System32\nlsfunc.exe
[2006-03-02 13:00:00 | 000,006,074 | ---- | C] () -- C:\WINDOWS\System32\rasctrs.ini
[2006-03-02 13:00:00 | 000,004,976 | ---- | C] () -- C:\WINDOWS\System32\himem.sys
[2006-03-02 13:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2006-03-02 13:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2006-03-02 13:00:00 | 000,003,346 | ---- | C] () -- C:\WINDOWS\System32\redir.exe
[2006-03-02 13:00:00 | 000,002,992 | ---- | C] () -- C:\WINDOWS\System32\perfci.ini
[2006-03-02 13:00:00 | 000,002,890 | ---- | C] () -- C:\WINDOWS\System32\perfwci.ini
[2006-03-02 13:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2006-03-02 13:00:00 | 000,001,405 | ---- | C] () -- C:\WINDOWS\msdfmap.ini
[2006-03-02 13:00:00 | 000,001,295 | ---- | C] () -- C:\WINDOWS\System32\perffilt.ini
[2006-03-02 13:00:00 | 000,001,168 | ---- | C] () -- C:\WINDOWS\System32\loadfix.com
[2006-03-02 13:00:00 | 000,000,882 | ---- | C] () -- C:\WINDOWS\System32\share.exe
[2006-03-02 13:00:00 | 000,000,882 | ---- | C] () -- C:\WINDOWS\System32\fastopen.exe
[2006-03-02 13:00:00 | 000,000,817 | ---- | C] () -- C:\WINDOWS\System32\mscdexnt.exe
[2006-03-02 13:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2006-03-02 13:00:00 | 000,000,563 | ---- | C] () -- C:\WINDOWS\win.ini
[2006-03-02 13:00:00 | 000,000,359 | ---- | C] () -- C:\WINDOWS\System32\prodspec.ini
[2006-03-02 13:00:00 | 000,000,231 | ---- | C] () -- C:\WINDOWS\system.ini
[2004-10-03 17:50:54 | 000,129,024 | ---- | C] () -- C:\WINDOWS\System32\ff_mpeg2enc.dll
[2001-10-26 18:29:54 | 000,057,856 | ---- | C] () -- C:\WINDOWS\System32\dvdplay.exe
[2001-10-26 18:29:42 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\paqsp.dll
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2011-08-18 07:47:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Babylon
[2008-12-06 16:28:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Bluetooth
[2010-09-25 16:08:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Electronic Arts
[2009-04-20 20:00:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET
[2011-06-20 22:00:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\FreeHideIP
[2011-01-27 22:41:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ipla
[2011-09-02 12:40:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2009-08-31 01:01:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\VULCAN
[2008-10-04 20:51:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\WinZip
[2009-12-27 15:47:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Zylom
[2009-01-17 10:30:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[2009-03-30 23:00:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\AgerWebEdytor
[2011-08-18 07:47:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Babylon
[2008-11-05 22:27:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\BESTplayer
[2009-03-27 23:15:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Cream Software
[2008-11-14 18:09:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Disney Interactive
[2009-04-20 20:01:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\ESET
[2011-06-20 22:00:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\FreeHideIP
[2011-06-20 21:56:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Hide IP NG
[2011-12-28 20:58:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\ipla
[2011-10-30 10:38:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\LucasArts
[2011-11-30 16:46:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Nowe Gadu-Gadu
[2011-09-02 12:40:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\OpenFM
[2011-01-27 22:35:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\RDRM
[2009-08-31 01:29:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\user\Dane aplikacji\Vulcan
[2012-01-06 13:35:52 | 000,000,330 | -H-- | M] () -- C:\WINDOWS\Tasks\MP Scheduled Scan.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >