OTL logfile created on: 2012-02-20 18:15:37 - Run 2
OTL by OldTimer - Version 3.2.33.0     Folder = D:\Pobieranie
Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
511,48 Mb Total Physical Memory | 154,24 Mb Available Physical Memory | 30,16% Memory free
1,22 Gb Paging File | 0,68 Gb Available in Paging File | 55,68% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 21,98 Gb Total Space | 16,14 Gb Free Space | 73,46% Space Free | Partition Type: NTFS
Drive D: | 52,58 Gb Total Space | 39,98 Gb Free Space | 76,04% Space Free | Partition Type: NTFS
 
Computer Name: EWA-53556098C03 | User Name: Ewa | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-02-19 15:20:04 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files\Steam\Steam.exe
PRC - [2012-02-18 20:05:21 | 000,583,680 | ---- | M] (OldTimer Tools) -- D:\Pobieranie\OTL.exe
PRC - [2012-02-17 16:18:47 | 000,924,632 | ---- | M] (Mozilla Corporation) -- D:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009-07-21 12:34:33 | 000,185,089 | ---- | M] (Avira GmbH) -- D:\Avira\AntiVir Desktop\avguard.exe
PRC - [2009-07-09 14:43:00 | 000,765,952 | ---- | M] (ZTE) -- C:\Program Files\Neostrada tp\TP.exe
PRC - [2009-03-02 11:08:47 | 000,209,153 | ---- | M] (Avira GmbH) -- D:\Avira\AntiVir Desktop\avgnt.exe
PRC - [2004-08-03 23:44:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012-02-19 15:25:23 | 014,415,144 | ---- | M] () -- C:\Program Files\Steam\bin\libcef.dll
MOD - [2012-02-19 15:25:22 | 000,857,896 | ---- | M] () -- C:\Program Files\Steam\bin\chromehtml.dll
MOD - [2012-02-19 15:25:22 | 000,155,432 | ---- | M] () -- C:\Program Files\Steam\bin\avformat-52.dll
MOD - [2012-02-19 15:25:22 | 000,091,432 | ---- | M] () -- C:\Program Files\Steam\bin\avutil-50.dll
MOD - [2012-02-19 15:25:21 | 000,914,216 | ---- | M] () -- C:\Program Files\Steam\bin\avcodec-52.dll
MOD - [2012-02-17 16:18:47 | 001,911,768 | ---- | M] () -- D:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2011-06-24 17:59:37 | 006,271,136 | ---- | M] () -- C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
MOD - [2009-07-09 14:43:00 | 000,389,120 | ---- | M] () -- C:\WINDOWS\system32\actskn43.ocx
MOD - [2009-01-28 14:03:49 | 000,326,401 | ---- | M] () -- D:\Avira\AntiVir Desktop\sqlite3.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] --  -- (HidServ)
SRV - [2011-03-16 10:42:06 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2009-07-21 12:34:33 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- D:\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2009-05-13 14:48:22 | 000,108,289 | ---- | M] (Avira GmbH) [Disabled | Stopped] -- D:\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2012-01-06 19:05:58 | 000,004,261 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rtport.sys -- (rtport)
DRV - [2011-10-17 14:16:48 | 000,056,816 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009-05-11 08:12:24 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009-03-30 08:33:07 | 000,096,104 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2009-02-13 10:35:05 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- D:\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2004-08-04 00:08:22 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2004-08-03 23:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Sterownik NT karty Realtek RTL8139(A/B/C)
DRV - [2004-08-03 22:04:34 | 000,012,672 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\usb8023.sys -- (usb_rndis)
DRV - [2003-04-08 09:56:36 | 000,820,133 | R--- | M] (Silicon Integrated Systems Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sis7012.sys -- (SiS7012) Service for AC'97 Sample Driver (WDM)
DRV - [2001-08-17 23:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.startup.homepage: "http://facebook.pl/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {5A6E6A22-7615-476B-8D49-CCD5E5D7F936}:1.0.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.10
FF - prefs.js..network.proxy.type: 0
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@ganymede/GanymedeNetPlugin,version=1.0: d:\Program Files\Ganymede\Plugins\npganymedenet.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60129.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9:  File not found
FF - HKCU\Software\MozillaPlugins\@www.flatcast.com/FlatViewer 5.2: C:\DOCUME~1\Ewa\DANEAP~1\Flatcast\NpFv522.dll (1 mal 1 Software GmbH)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: D:\Program Files\Mozilla Firefox\components [2012-02-17 16:18:48 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: D:\Program Files\Mozilla Firefox\plugins [2012-02-18 17:16:22 | 000,000,000 | ---D | M]
 
[2011-03-02 18:33:52 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ewa\Dane aplikacji\Mozilla\Extensions
[2012-02-12 21:09:07 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Ewa\Dane aplikacji\Mozilla\Firefox\Profiles\bw72s9mx.default\extensions
[2012-02-12 21:09:07 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\Ewa\Dane aplikacji\Mozilla\Firefox\Profiles\bw72s9mx.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011-10-15 16:19:00 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010-12-27 22:17:58 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2011-04-09 18:44:46 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011-06-09 08:33:11 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
() (No name found) -- C:\DOCUMENTS AND SETTINGS\EWA\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\BW72S9MX.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
() (No name found) -- C:\DOCUMENTS AND SETTINGS\EWA\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\BW72S9MX.DEFAULT\EXTENSIONS\YOUTUBE2MP3@MONDAYX.DE.XPI
[2011-04-09 18:44:32 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2010-08-20 10:07:28 | 000,931,328 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPBOARDS.dll
[2010-08-20 10:05:26 | 000,681,464 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPBREAKOUT.dll
[2010-08-20 10:07:22 | 000,873,976 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPCARDS.dll
[2011-05-04 03:52:23 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010-08-20 10:05:58 | 000,546,296 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPDOMINO.dll
[2009-09-21 10:00:44 | 001,447,328 | ---- | M] (1 mal 1 Software GmbH) -- C:\Program Files\mozilla firefox\plugins\NpFv522.dll
[2010-12-08 17:02:48 | 000,120,296 | ---- | M] ( ) -- C:\Program Files\mozilla firefox\plugins\npganymedenet.dll
[2010-08-20 10:06:56 | 000,665,096 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPMARBLES.dll
[2010-08-20 10:06:04 | 000,529,912 | ---- | M] (Ganymede Technologies) -- C:\Program Files\mozilla firefox\plugins\NPNAVY.dll
[2011-03-22 19:38:12 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Ewa\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\14.0.835.202\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U26 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.0.60129.0\npctrl.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Ewa\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\14.0.835.202\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Ewa\Ustawienia lokalne\Dane aplikacji\Google\Chrome\Application\14.0.835.202\pdf.dll
CHR - plugin: Ganymede Boards Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPBOARDS.dll
CHR - plugin: Ganymede BreakOut Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPBREAKOUT.dll
CHR - plugin: Ganymede Cards Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPCARDS.dll
CHR - plugin: Ganymede Dominoe Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPDOMINO.dll
CHR - plugin: Flatcast Viewer Plugin 5.2.2.454 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NpFv522.dll
CHR - plugin: GanymedeNet.Detector (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npganymedenet.dll
CHR - plugin: Ganymede Marbles Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPMARBLES.dll
CHR - plugin: Ganymede Navy Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPNAVY.dll
CHR - plugin: Winamp Application Detector (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npwachk.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\Ewa\Ustawienia lokalne\Dane aplikacji\Google\Update\1.3.21.69\npGoogleUpdate3.dll
CHR - plugin: Foxit Reader Plugin for Mozilla (Enabled) = C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
 
O1 HOSTS File: ([2012-02-18 17:20:28 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1       localhost
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [avgnt] D:\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStrCmpLogical = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousMachineGroupPolicy = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousUserGroupPolicy = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMBalloonTip = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O8 - Extra context menu item: E&xport to Microsoft Excel - D:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{51C39353-AC6A-48A8-9627-20AC9B266095}: NameServer = 8.26.56.26,156.154.70.22
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B9C59F5F-E793-42E8-B96D-CEE1FC4A3C75}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CFC199B0-7922-4FDF-9DF4-7C7BD2AB6258}: NameServer = 194.204.159.1 194.204.152.34
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\crrss.exe) - C:\WINDOWS\system32\crrss.exe (Provtech Limited)
O20 - HKCU Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - ("C:\Documents and Settings\Ewa\winlogon.exe") -  File not found
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Ewa\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Ewa\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010-12-27 21:08:53 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-02-20 17:45:15 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Ewa\Recent
[2012-02-19 22:31:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\nView_Profiles
[2012-02-19 22:27:58 | 000,176,128 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvudisp.exe
[2012-02-19 22:14:54 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2012-02-19 21:18:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\nview
[2012-02-19 15:32:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ewa\Menu Start\Programy\Steam
[2012-02-19 15:19:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Steam
[2012-02-19 15:19:36 | 000,000,000 | ---D | C] -- C:\Program Files\Steam
[2012-02-18 21:27:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ewa\Menu Start\Programy\WinRAR
[2012-02-18 21:27:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\WinRAR
[2012-02-18 20:50:09 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2012-02-18 20:06:47 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2012-02-18 20:06:47 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\pl-PL
[2012-02-18 15:26:12 | 000,000,000 | -H-D | C] -- C:\WINDOWS\System32\GroupPolicy
[2012-02-18 12:34:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\IObit
[2012-02-18 12:21:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ewa\Dane aplikacji\IObit
[2012-02-04 21:44:09 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Common Files
[2012-02-04 21:43:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\MFAData
[2012-02-03 16:07:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\GoldWave
[2012-01-26 12:21:33 | 000,000,000 | ---D | C] -- C:\Program Files\System Security Guard
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-02-20 16:43:01 | 000,021,961 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2012-02-20 14:33:58 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-02-20 14:33:53 | 536,399,872 | -HS- | M] () -- C:\hiberfil.sys
[2012-02-20 13:33:50 | 000,000,215 | -HS- | M] () -- C:\boot.ini
[2012-02-19 21:21:29 | 000,004,132 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012-02-19 17:32:00 | 000,001,030 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012-02-19 15:32:56 | 000,000,075 | ---- | M] () -- C:\Documents and Settings\Ewa\Pulpit\Counter-Strike.url
[2012-02-19 15:32:00 | 000,001,026 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012-02-19 15:19:39 | 000,000,664 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Steam.lnk
[2012-02-19 12:53:30 | 000,000,350 | ---- | M] () -- C:\WINDOWS\RefreshLock.ini
[2012-02-18 17:20:28 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\Hosts
[2012-02-18 15:27:27 | 000,000,414 | RHS- | M] () -- C:\Documents and Settings\All Users\ntuser.pol
[2012-02-18 14:19:50 | 000,417,320 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat
[2012-02-18 14:19:50 | 000,363,822 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012-02-18 14:19:50 | 000,056,748 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat
[2012-02-18 14:19:50 | 000,045,350 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012-02-06 14:51:33 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-02-19 22:29:08 | 536,399,872 | -HS- | C] () -- C:\hiberfil.sys
[2012-02-19 22:27:58 | 000,014,435 | ---- | C] () -- C:\WINDOWS\System32\nvdisp.nvu
[2012-02-19 21:09:20 | 000,004,132 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2012-02-19 15:32:56 | 000,000,075 | ---- | C] () -- C:\Documents and Settings\Ewa\Pulpit\Counter-Strike.url
[2012-02-19 15:19:39 | 000,000,664 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Steam.lnk
[2012-02-19 12:52:31 | 000,000,350 | ---- | C] () -- C:\WINDOWS\RefreshLock.ini
[2012-02-18 17:09:52 | 001,388,544 | ---- | C] () -- C:\WINDOWS\pingreducer32-steam.dll
[2012-02-18 17:09:52 | 001,388,544 | ---- | C] () -- C:\WINDOWS\pingreducer32.dll
[2012-02-18 17:09:44 | 001,388,544 | ---- | C] () -- C:\WINDOWS\System32\pingreducer32-steam.dll
[2012-02-18 17:09:44 | 001,388,544 | ---- | C] () -- C:\WINDOWS\System32\pingreducer32.dll
[2012-02-18 17:08:56 | 001,388,544 | ---- | C] () -- C:\WINDOWS\System32\pingreducer-steam.dll
[2012-02-18 17:08:56 | 001,388,544 | ---- | C] () -- C:\WINDOWS\System32\pingreducer.dll
[2012-02-18 15:27:27 | 000,000,414 | RHS- | C] () -- C:\Documents and Settings\All Users\ntuser.pol
[2012-01-06 18:32:33 | 000,000,196 | ---- | C] () -- C:\WINDOWS\System32\drivers\ALCICH.DAT
[2011-11-20 11:09:52 | 000,000,030 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2011-10-15 22:26:46 | 000,027,872 | ---- | C] () -- C:\WINDOWS\System32\drivers\sfi.dat
[2011-10-15 11:41:28 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Ewa\Ustawienia lokalne\Dane aplikacji\{E6731D52-0DB5-40EF-86A6-8EC3FB69F4E1}
[2011-10-14 12:52:59 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Ewa\Ustawienia lokalne\Dane aplikacji\{30E472FA-B56E-4376-9445-CEAE0A935B99}
[2011-05-16 19:49:18 | 000,695,578 | ---- | C] () -- C:\WINDOWS\unins000.exe
[2011-05-16 19:49:18 | 000,001,265 | ---- | C] () -- C:\WINDOWS\unins000.dat
[2011-02-25 03:07:08 | 000,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll
[2011-02-25 03:07:08 | 000,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll
[2011-02-25 03:07:08 | 000,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll
[2011-02-13 00:47:34 | 000,000,469 | ---- | C] () -- C:\WINDOWS\System32\quartzXP.dll
[2011-02-13 00:47:34 | 000,000,469 | ---- | C] () -- C:\WINDOWS\System32\mp4.dll
[2011-02-13 00:47:34 | 000,000,469 | ---- | C] () -- C:\WINDOWS\System32\mmfinfo.dll
[2011-02-13 00:47:34 | 000,000,469 | ---- | C] () -- C:\WINDOWS\System32\mkx.dll
[2011-02-13 00:47:34 | 000,000,469 | ---- | C] () -- C:\WINDOWS\System32\dxr.dll
[2011-02-13 00:47:34 | 000,000,469 | ---- | C] () -- C:\WINDOWS\System32\avi.dll
[2011-02-13 00:47:33 | 000,000,469 | ---- | C] () -- C:\WINDOWS\System32\ts.dll
[2011-02-13 00:47:33 | 000,000,469 | ---- | C] () -- C:\WINDOWS\System32\ogm.dll
[2011-02-13 00:47:33 | 000,000,469 | ---- | C] () -- C:\WINDOWS\System32\mkzlib.dll
[2011-02-13 00:47:33 | 000,000,469 | ---- | C] () -- C:\WINDOWS\System32\mkunicode.dll
[2011-02-13 00:47:31 | 000,000,469 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll
[2011-02-13 00:47:31 | 000,000,469 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll
[2011-02-13 00:47:30 | 000,000,469 | ---- | C] () -- C:\WINDOWS\System32\WMV9VCM.dll
[2011-02-13 00:47:30 | 000,000,469 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll
[2011-02-13 00:47:30 | 000,000,469 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll
[2011-02-13 00:47:30 | 000,000,469 | ---- | C] () -- C:\WINDOWS\System32\mplvpx.dll
[2011-02-13 00:47:30 | 000,000,469 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll
[2011-02-13 00:47:29 | 000,000,469 | ---- | C] () -- C:\WINDOWS\System32\DivXsm.exe
[2011-02-13 00:47:28 | 000,000,469 | ---- | C] () -- C:\WINDOWS\System32\divxconfig.exe
[2011-01-26 17:59:41 | 000,022,016 | ---- | C] () -- C:\Documents and Settings\Ewa\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011-01-19 20:03:33 | 000,002,856 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2011-01-19 20:03:29 | 000,010,288 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2010-12-28 12:35:42 | 000,000,004 | ---- | C] () -- C:\WINDOWS\System32\proc-1461555143.bin
[2010-12-28 11:05:18 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2010-12-27 22:02:54 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010-12-27 21:57:30 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010-12-27 21:12:52 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010-12-27 21:04:33 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2011-01-27 19:21:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\ashampoo
[2011-02-24 19:20:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Canneverbe Limited
[2012-02-04 21:44:09 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Common Files
[2011-11-06 11:44:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\DAEMON Tools Lite
[2011-03-06 15:44:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\e-file
[2010-12-28 10:43:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10
[2012-02-03 16:07:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\GoldWave
[2012-01-16 16:09:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IconTweaker
[2011-10-31 12:01:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\InstallMate
[2012-02-18 12:34:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IObit
[2012-02-04 21:44:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MFAData
[2011-01-26 16:43:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NCH Swift Sound
[2011-06-28 23:02:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\OpenFM
[2011-10-31 12:01:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Premium
[2011-01-27 19:21:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ewa\Dane aplikacji\Ashampoo
[2011-02-24 19:20:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ewa\Dane aplikacji\Canneverbe Limited
[2011-02-13 00:57:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ewa\Dane aplikacji\Christofer Persson
[2012-01-28 18:13:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ewa\Dane aplikacji\DAEMON Tools Lite
[2011-05-16 19:52:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ewa\Dane aplikacji\Flatcast
[2011-10-10 20:46:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ewa\Dane aplikacji\fltk.org
[2012-02-19 10:47:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ewa\Dane aplikacji\foobar2000
[2011-03-12 05:24:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ewa\Dane aplikacji\Foxit Software
[2011-10-25 15:27:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ewa\Dane aplikacji\Gadu-Gadu 10
[2011-01-24 17:48:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ewa\Dane aplikacji\GanymedeNet
[2012-01-16 16:09:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ewa\Dane aplikacji\IconTweaker
[2012-02-18 12:35:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ewa\Dane aplikacji\IObit
[2011-05-18 11:34:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ewa\Dane aplikacji\OpenFM
[2010-12-27 22:20:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ewa\Dane aplikacji\OpenOffice.org
[2011-04-05 16:55:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ewa\Dane aplikacji\Opera
[2011-10-27 18:04:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ewa\Dane aplikacji\PhotoScape
[2011-12-05 21:26:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Ewa\Dane aplikacji\WordToPDF
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >