OTL logfile created on: 2012-02-27 23:57:28 - Run 1 OTL by OldTimer - Version 3.2.33.2 Folder = F:\Moje dokumenty\Downloads Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1,94 Gb Total Physical Memory | 1,46 Gb Available Physical Memory | 75,50% Memory free 1,91 Gb Paging File | 1,49 Gb Available in Paging File | 77,84% Paging File free Paging file location(s): [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = E:\Program Files Drive C: | 6,42 Gb Total Space | 2,80 Gb Free Space | 43,57% Space Free | Partition Type: NTFS Drive D: | 1,17 Gb Total Space | 1,17 Gb Free Space | 99,98% Space Free | Partition Type: FAT Drive E: | 12,69 Gb Total Space | 8,21 Gb Free Space | 64,65% Space Free | Partition Type: NTFS Drive F: | 54,24 Gb Total Space | 4,70 Gb Free Space | 8,67% Space Free | Partition Type: NTFS Computer Name: TOKARSKI-C67CFC | User Name: Maniek | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-02-27 23:55:20 | 000,583,680 | ---- | M] (OldTimer Tools) -- F:\Moje dokumenty\Downloads\OTL.exe PRC - [2012-02-16 00:51:45 | 000,949,104 | ---- | M] (Opera Software) -- E:\program files\Opera\opera.exe PRC - [2012-02-02 08:31:26 | 002,975,688 | ---- | M] (Zemana Ltd.) -- E:\program files\AntiLogger\AntiLogger.exe PRC - [2011-04-07 12:23:34 | 002,672,600 | ---- | M] (PC Tools) -- C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe PRC - [2011-01-24 11:23:14 | 000,286,000 | ---- | M] (PC Tools) -- C:\Program Files\PC Tools Firewall Plus\FWService.exe PRC - [2010-04-02 13:23:04 | 003,283,680 | ---- | M] (AnVir Software) -- C:\Program Files\AnVir Task Manager\AnVir.exe PRC - [2009-08-29 05:00:12 | 000,966,656 | ---- | M] () -- C:\Documents and Settings\Maniek\Local Settings\Apps\F.lux\flux.exe PRC - [2009-01-12 17:01:44 | 000,061,440 | ---- | M] () -- E:\Portable\Diagnostyka\quietHDD_v1.5-build250\quietHDD.exe PRC - [2008-04-15 11:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2009-08-29 05:00:12 | 000,966,656 | ---- | M] () -- C:\Documents and Settings\Maniek\Local Settings\Apps\F.lux\flux.exe MOD - [2009-01-12 17:01:44 | 000,061,440 | ---- | M] () -- E:\Portable\Diagnostyka\quietHDD_v1.5-build250\quietHDD.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [On_Demand | Stopped] -- -- (DfSdkS) SRV - [2012-02-27 20:10:13 | 000,604,416 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\WINDOWS\system32\TUProgSt.exe -- (TuneUp.ProgramStatisticsSvc) SRV - [2012-02-27 20:10:11 | 000,361,216 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\WINDOWS\system32\TuneUpDefragService.exe -- (TuneUp.Defrag) SRV - [2012-02-07 22:11:42 | 000,074,512 | ---- | M] (SANDBOXIE L.T.D) [On_Demand | Stopped] -- E:\Program Files\Sandboxie\SbieSvc.exe -- (SbieSvc) SRV - [2011-09-24 13:03:42 | 000,068,928 | ---- | M] (Nalpeiron Ltd.) [On_Demand | Stopped] -- C:\WINDOWS\system32\NLSSRV32.EXE -- (nlsX86cc) SRV - [2011-09-24 13:03:30 | 000,196,928 | ---- | M] (Nitro PDF Software) [On_Demand | Stopped] -- E:\Program Files\Nitro PDF\Professional\NitroPDFDriverService.exe -- (NitroDriverReadSpool) SRV - [2011-08-10 08:20:24 | 002,430,128 | ---- | M] (mobile concepts GmbH) [On_Demand | Stopped] -- E:\program files\CyberGhost VPN\CGVPNCliService.exe -- (CGVPNCliSrvc) SRV - [2011-07-20 05:18:24 | 000,440,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv) SRV - [2011-04-22 15:26:18 | 000,056,200 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [On_Demand | Stopped] -- C:\Program Files\EASEUS\Todo Backup\bin\Agent.exe -- (EASEUS Agent) SRV - [2011-01-24 11:23:14 | 000,286,000 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files\PC Tools Firewall Plus\FWService.exe -- (PCToolsFirewallPlus) SRV - [2009-04-27 14:21:36 | 000,028,928 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\WINDOWS\system32\uxtuneup.dll -- (UxTuneUp) SRV - [2008-10-16 14:18:17 | 000,759,072 | ---- | M] (ABBYY (BIT Software)) [On_Demand | Stopped] -- E:\Program Files\ABBYY Screenshot Reader\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.ScreenshotReader.9.0) SRV - [2006-10-26 14:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2012-02-17 10:19:50 | 000,167,224 | ---- | M] (SpyShelter) [Kernel | On_Demand | Stopped] -- C:\Program Files\SpyShelter Personal Free\SpyShelter.sys -- (Spyshelter) DRV - [2012-02-07 22:11:42 | 000,133,392 | ---- | M] (SANDBOXIE L.T.D) [Kernel | On_Demand | Stopped] -- E:\program files\Sandboxie\SbieDrv.sys -- (SbieDrv) DRV - [2012-02-02 08:31:29 | 000,058,648 | ---- | M] (Zemana Ltd.) [Kernel | System | Running] -- E:\program files\AntiLogger\AntiLog32.sys -- (AntiLog32) DRV - [2011-12-23 01:32:13 | 000,038,976 | ---- | M] (microOLAP Technologies LTD) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pssdk42.sys -- (PSSDK42) DRV - [2011-04-22 15:26:12 | 000,035,720 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\EUBKMON.sys -- (EUBKMON) DRV - [2011-04-22 15:26:08 | 000,020,744 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\eufs.sys -- (EUFS) DRV - [2011-04-22 15:26:06 | 000,014,216 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\eudskacs.sys -- (EUDSKACS) DRV - [2011-04-22 15:26:04 | 000,030,600 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\eubakup.sys -- (EUBAKUP) DRV - [2011-04-22 15:26:02 | 000,187,528 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\eudisk.sys -- (EUDISK) DRV - [2011-03-02 10:40:54 | 000,160,576 | ---- | M] (PC Tools) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\PCTAppEvent.sys -- (PCTAppEvent) DRV - [2011-01-17 07:10:26 | 000,251,560 | ---- | M] (PC Tools) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\pctgntdi.sys -- (pctgntdi) DRV - [2011-01-17 06:11:12 | 000,125,248 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pctplfw.sys -- (pctplfw) DRV - [2011-01-12 08:36:22 | 000,089,472 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pctNdis-PacketFilter.sys -- (PCTFW-PacketFilter) DRV - [2010-07-15 05:44:20 | 000,013,192 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\epmntdrv.sys -- (epmntdrv) DRV - [2010-07-15 05:44:20 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\EuGdiDrv.sys -- (EuGdiDrv) DRV - [2010-07-08 06:49:10 | 000,057,536 | ---- | M] (PC Tools) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pctNdis.sys -- (pctNdisMP) DRV - [2010-07-08 06:49:10 | 000,057,536 | ---- | M] (PC Tools) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pctNdis.sys -- (pctNdis) DRV - [2010-02-25 15:51:02 | 000,025,216 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\tap0901.sys -- (tap0901) DRV - [2009-12-23 14:33:26 | 000,088,024 | ---- | M] (FarStone Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\fvxscsi.sys -- (FVXSCSI) DRV - [2009-06-16 01:01:00 | 000,273,920 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\V0540Vid.sys -- (V0540Dev) DRV - [2008-09-24 08:40:22 | 004,122,368 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) DRV - [2008-07-29 08:52:46 | 000,679,680 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rt2860.sys -- (RT80x86) DRV - [2008-04-30 15:43:42 | 000,160,768 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\V0540Afx.sys -- (V0540Afx) DRV - [2008-04-13 21:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) Sterownik NT karty Realtek RTL8139(A/B/C) DRV - [2007-03-29 12:00:16 | 000,017,024 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\KMWDFilter.SYS -- (KMWDFilter) DRV - [2006-10-18 14:39:58 | 000,017,920 | R--- | M] (VIA Technologies,Inc) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\xfilt.sys -- (xfilt) DRV - [2006-10-17 17:22:26 | 000,009,216 | R--- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\videX32.sys -- (videX32) DRV - [2003-09-17 12:57:22 | 000,008,440 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\LANPkt.sys -- (LANPkt) DRV - [2002-01-12 13:30:34 | 000,003,567 | ---- | M] (Beyond Logic http://www.beyondlogic.org) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PortTalk.sys -- (PortTalk) DRV - [1996-04-03 18:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\giveio.sys -- (giveio) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\pchealth\helpctr\System\panels\blank.htm IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1343024091-688789844-515967899-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\pchealth\helpctr\System\panels\blank.htm IE - HKU\S-1-5-21-1343024091-688789844-515967899-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKU\S-1-5-21-1343024091-688789844-515967899-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1343024091-688789844-515967899-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = local FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: E:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3ED591BC-7CC7-495B-A526-B2431356EDC1}: E:\Program Files\Ad Muncher\FirefoxExtension_2.0 [2011-08-29 18:51:22 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\SeaMonkey\Extensions\\{3ED591BC-7CC7-495B-A526-B2431356EDC1}: E:\Program Files\Ad Muncher\FirefoxExtension_2.0 [2011-08-29 18:51:22 | 000,000,000 | ---D | M] O1 HOSTS File: ([2008-04-15 11:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O4 - HKLM..\Run: [00PCTFW] C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe (PC Tools) O4 - HKLM..\Run: [AntiLogger] E:\Program Files\AntiLogger\AntiLogger.exe (Zemana Ltd.) O4 - HKU\S-1-5-21-1343024091-688789844-515967899-1003..\Run: [AnVir Task Manager] C:\Program Files\AnVir Task Manager\AnVir.exe (AnVir Software) O4 - HKU\S-1-5-21-1343024091-688789844-515967899-1003..\Run: [F.lux] C:\Documents and Settings\Maniek\Local Settings\Apps\F.lux\flux.exe () O4 - HKU\.DEFAULT..\RunOnce: [VF0540Inst] C:\WINDOWS\System32\V0540Pin.DLL (Creative Technology Ltd.) O4 - HKU\S-1-5-18..\RunOnce: [VF0540Inst] C:\WINDOWS\System32\V0540Pin.DLL (Creative Technology Ltd.) O4 - Startup: C:\Documents and Settings\Maniek\Menu Start\Programy\Autostart\quietHDD.lnk = E:\Portable\Diagnostyka\quietHDD_v1.5-build250\quietHDD.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutorunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoPropertiesMyComputer = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewContextMenu = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFileAssociate = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogoff = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispCPL = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispSettingsPage = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispScrSavPage = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: VerboseStatus = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1343024091-688789844-515967899-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255 O7 - HKU\S-1-5-21-1343024091-688789844-515967899-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutorunSetting = 1 O7 - HKU\S-1-5-21-1343024091-688789844-515967899-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsNetHood = 1 O7 - HKU\S-1-5-21-1343024091-688789844-515967899-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 8 O7 - HKU\S-1-5-21-1343024091-688789844-515967899-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-1343024091-688789844-515967899-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0 O7 - HKU\S-1-5-21-1343024091-688789844-515967899-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKU\S-1-5-21-1343024091-688789844-515967899-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = [binary data] O7 - HKU\S-1-5-21-1343024091-688789844-515967899-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = [binary data] O8 - Extra context menu item: Block frame with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=2.0&pass=6F65J9J2&id=menu_ie_frame File not found O8 - Extra context menu item: Block image with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=2.0&pass=6F65J9J2&id=menu_ie_image File not found O8 - Extra context menu item: Block link with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=2.0&pass=6F65J9J2&id=menu_ie_link File not found O8 - Extra context menu item: Don't filter page with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=2.0&pass=6F65J9J2&id=menu_ie_exclude File not found O8 - Extra context menu item: Report page to the Ad Muncher developers - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=2.0&pass=6F65J9J2&id=menu_ie_report File not found O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 194.204.152.34 194.204.159.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{64F82DFA-FE0C-4122-9D47-218414809765}: DhcpNameServer = 194.204.152.34 194.204.159.1 O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - AppInit_DLLs: (C:\WINDOWS\system32\guard32.dll) - C:\WINDOWS\system32\guard32.dll (COMODO) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Maniek\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Maniek\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O28 - HKLM ShellExecuteHooks: {4F07DA45-8170-4859-9B5F-037EF2970034} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 0 O32 - AutoRun File - [2011-08-28 16:12:52 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O34 - HKLM BootExecute: (NaBootMir) O34 - HKLM BootExecute: (tExecute settings...) O34 - HKLM BootExecute: (on\Explo) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-02-27 23:31:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Maniek\Dane aplikacji\Macromedia [2012-02-27 23:27:31 | 000,014,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg2.dll [2012-02-27 23:24:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer [2012-02-27 23:24:55 | 000,000,000 | ---D | C] -- E:\Program Files\MSBuild [2012-02-27 23:24:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en-US [2012-02-27 23:24:48 | 000,000,000 | ---D | C] -- E:\Program Files\Reference Assemblies [2012-02-27 23:24:23 | 001,676,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xpssvcs.dll [2012-02-27 23:24:23 | 001,676,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xpssvcs.dll [2012-02-27 23:24:23 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\printfilterpipelinesvc.exe [2012-02-27 23:24:23 | 000,575,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xpsshhdr.dll [2012-02-27 23:24:23 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prntvpt.dll [2012-02-27 23:24:23 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\filterpipelineprintproc.dll [2012-02-27 23:07:06 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2012-02-27 22:50:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Maniek\Dane aplikacji\Process Hacker 2 [2012-02-27 22:03:13 | 000,000,000 | ---D | C] -- E:\Program Files\VirusTotalUploader2 [2012-02-27 20:10:13 | 000,604,416 | ---- | C] (TuneUp Software) -- C:\WINDOWS\System32\TUProgSt.exe [2012-02-27 20:10:12 | 000,028,928 | ---- | C] (TuneUp Software) -- C:\WINDOWS\System32\uxtuneup.dll [2012-02-27 20:10:11 | 000,361,216 | ---- | C] (TuneUp Software) -- C:\WINDOWS\System32\TuneUpDefragService.exe [2012-02-27 20:10:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Maniek\Dane aplikacji\TuneUp Software [2012-02-27 20:10:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\TuneUp Software [2012-02-27 20:10:01 | 000,000,000 | ---D | C] -- E:\Program Files\TuneUp Utilities 2009 [2012-02-27 20:09:31 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\Dane aplikacji\{55A29068-F2CE-456C-9148-C869879E2357} [2012-02-27 04:35:18 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\{FA33E2F3-4250-473E-85C1-4E4E3BAB4252} [2012-02-27 04:35:17 | 000,000,000 | ---D | C] -- E:\Program Files\AntiLogger [2012-02-27 04:35:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\AntiLogger [2012-02-27 04:20:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\HitmanPro [2012-02-27 04:19:09 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Maniek\Recent [2012-02-27 04:11:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Maniek\Dane aplikacji\Malwarebytes [2012-02-26 22:08:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\DiskTrix [2012-02-26 22:08:36 | 000,000,000 | ---D | C] -- E:\Program Files\DiskTrix [2012-02-25 21:56:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Ustawienia lokalne\Dane aplikacji\ESET [2012-02-25 09:19:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Maniek\Dane aplikacji\Smarty Uninstaller [2012-02-25 09:19:26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Smarty Uninstaller [2012-02-25 09:19:22 | 000,000,000 | ---D | C] -- E:\Program Files\Smarty Uninstaller [2012-02-23 22:13:00 | 000,160,768 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\drivers\V0540Afx.sys [2012-02-23 22:12:58 | 000,273,920 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\drivers\V0540Vid.sys [2012-02-23 22:12:58 | 000,114,688 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\V0540Ext.ax [2012-02-23 22:12:58 | 000,069,632 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\V0540Ext.crl [2012-02-23 22:12:58 | 000,040,960 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\V0540Pin.dll [2012-02-23 22:12:58 | 000,036,864 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\CtCamMgr.dll [2012-02-23 22:12:58 | 000,032,768 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\V0540Hwx.dll [2012-02-23 22:12:58 | 000,020,480 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\CtCamPin.crl [2012-02-23 22:12:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\CtDrvInstall [2012-02-23 21:56:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Maniek\Dane aplikacji\Skype [2012-02-23 21:56:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Skype [2012-02-23 21:56:50 | 000,000,000 | R--D | C] -- E:\Program Files\Skype [2012-02-23 21:56:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Skype [2012-02-23 21:46:59 | 000,028,672 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\V0540Mon.exe [2012-02-23 21:46:58 | 000,094,208 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\CtDrvIns.exe [2012-02-23 21:46:58 | 000,000,000 | ---D | C] -- C:\Live! Cam [2012-02-23 21:37:25 | 000,005,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstee.sys [2012-02-23 21:37:22 | 000,010,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndisip.sys [2012-02-23 21:37:20 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ipsink.ax [2012-02-23 21:37:20 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ipsink.ax [2012-02-23 21:37:20 | 000,015,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\streamip.sys [2012-02-23 21:37:18 | 000,011,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\slip.sys [2012-02-23 21:37:15 | 000,019,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wstcodec.sys [2012-02-23 21:37:13 | 000,085,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nabtsfec.sys [2012-02-23 21:37:10 | 000,017,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ccdecode.sys [2012-02-23 21:37:02 | 000,060,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbaudio.sys [2012-02-23 21:36:55 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kswdmcap.ax [2012-02-23 21:36:55 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kswdmcap.ax [2012-02-23 21:36:55 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kstvtune.ax [2012-02-23 21:36:55 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kstvtune.ax [2012-02-23 21:36:55 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vfwwdm32.dll [2012-02-23 21:36:55 | 000,054,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vfwwdm32.dll [2012-02-23 21:36:55 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vidcap.ax [2012-02-23 21:36:55 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vidcap.ax [2012-02-23 21:36:54 | 000,121,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbvideo.sys [2012-02-23 21:36:54 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksxbar.ax [2012-02-23 21:36:54 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ksxbar.ax [2012-02-23 21:36:54 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dshowext.ax [2012-02-23 21:36:54 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dshowext.ax [2012-02-23 03:14:40 | 000,004,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\beep.sys [2012-02-23 03:01:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Komputerowy Słownik Niemiecko-Polski [2012-02-23 03:01:26 | 000,000,000 | ---D | C] -- E:\Program Files\NiemPol [2012-02-21 06:40:51 | 000,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\LibreOffice 3.5 [2012-02-21 06:39:49 | 000,000,000 | ---D | C] -- E:\Program Files\LibreOffice 3.5 [2012-02-20 19:02:42 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Maniek\Menu Start\Programy\jv16 PowerTools 2010 [2012-02-20 19:02:24 | 000,000,000 | ---D | C] -- E:\Program Files\jv16 PowerTools 2010 [2012-02-20 19:01:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Maniek\NetHood [2012-02-20 19:01:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Maniek\Ustawienia lokalne\Dane aplikacji\Microsoft Help [2012-02-19 16:31:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Media Player Classic - Home Cinema [2012-02-19 16:31:14 | 000,000,000 | ---D | C] -- E:\Program Files\Media Player Classic - Home Cinema [2012-02-19 01:26:23 | 000,000,000 | -H-D | C] -- E:\Program Files\Uninstall Information [2012-02-18 00:59:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Sandboxie [2012-02-17 18:18:56 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER [2012-02-17 15:52:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\SpyShelter [2012-02-17 05:58:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\SecurityKISS Tunnel [2012-02-17 05:58:13 | 000,000,000 | ---D | C] -- E:\Program Files\SecurityKISS Tunnel [2012-02-17 05:13:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Maniek\Dane aplikacji\LibreOffice [2012-02-07 19:52:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Maniek\Dane aplikacji\IrfanView [2012-02-07 18:44:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\MSSecurityNS [2012-02-07 18:44:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\MSSecurityNi [2012-02-07 15:49:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Maniek\Menu Start\Programy\Kadu [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-02-27 23:53:43 | 000,000,000 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2012-02-27 23:53:32 | 000,012,598 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-02-27 23:53:29 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-02-27 23:51:48 | 000,270,984 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012-02-27 23:26:15 | 000,484,252 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2012-02-27 23:26:15 | 000,426,070 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2012-02-27 23:26:15 | 000,080,924 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2012-02-27 23:26:15 | 000,065,080 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2012-02-27 23:24:33 | 000,000,212 | ---- | M] () -- C:\WINDOWS\System32\spupdsvc.inf [2012-02-27 22:01:01 | 000,061,440 | ---- | M] () -- C:\WINDOWS\System32\drivers\yooskuc.sys [2012-02-27 21:00:03 | 000,278,883 | ---- | M] () -- C:\WINDOWS\System32\oodbs.lor [2012-02-27 20:10:13 | 000,604,416 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\TUProgSt.exe [2012-02-27 20:10:11 | 000,361,216 | ---- | M] (TuneUp Software) -- C:\WINDOWS\System32\TuneUpDefragService.exe [2012-02-27 04:20:08 | 000,023,624 | ---- | M] () -- C:\WINDOWS\System32\drivers\hitmanpro36.sys [2012-02-27 04:15:04 | 000,000,214 | RHS- | M] () -- C:\boot.ini [2012-02-25 17:13:24 | 000,546,504 | ---- | M] () -- F:\Moje dokumenty\1.jpg [2012-02-25 17:13:08 | 000,556,133 | ---- | M] () -- F:\Moje dokumenty\2.jpg [2012-02-23 21:03:33 | 000,009,288 | ---- | M] () -- C:\WINDOWS\CUAppUsage.Dat [2012-02-23 19:48:49 | 000,004,096 | -HS- | M] () -- C:\{D70C2449-14CE-45E8-B5CD-A05AD843EA29}.CBM [2012-02-23 19:45:49 | 000,421,376 | -HS- | M] () -- C:\EUMONBMP.SYS [2012-02-20 19:38:24 | 000,003,010 | ---- | M] () -- C:\WINDOWS\Sandboxie.ini [2012-02-20 19:02:47 | 000,000,022 | -HS- | M] () -- C:\Documents and Settings\Maniek\Dane aplikacji\Sys6925.Config Collection.sys [2012-02-20 19:02:47 | 000,000,022 | -HS- | M] () -- C:\WINDOWS\Sys3390 SettingsCollection.bin [2012-02-19 01:41:28 | 000,023,624 | ---- | M] () -- C:\WINDOWS\System32\drivers\hitmanpro35.sys [2012-02-19 01:40:16 | 000,000,250 | ---- | M] () -- C:\Documents and Settings\Maniek\SecurityKISSTunnel.config [2012-02-17 05:33:31 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl [2012-02-07 17:28:56 | 000,009,496 | RHS- | M] () -- C:\Documents and Settings\All Users\ntuser.pol [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-02-27 23:25:24 | 000,154,496 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2012-02-27 23:24:33 | 000,000,212 | ---- | C] () -- C:\WINDOWS\System32\spupdsvc.inf [2012-02-27 22:01:01 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\yooskuc.sys [2012-02-27 20:10:09 | 000,000,759 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\TuneUp Utilities 2009.lnk [2012-02-25 17:13:24 | 000,546,504 | ---- | C] () -- F:\Moje dokumenty\1.jpg [2012-02-25 17:13:08 | 000,556,133 | ---- | C] () -- F:\Moje dokumenty\2.jpg [2012-02-23 22:12:58 | 000,057,656 | ---- | C] () -- C:\WINDOWS\System32\drivers\V0540PC.bmp [2012-02-23 22:12:58 | 000,004,869 | ---- | C] () -- C:\WINDOWS\VF0540.uns [2012-02-23 19:48:49 | 000,004,096 | -HS- | C] () -- C:\{D70C2449-14CE-45E8-B5CD-A05AD843EA29}.CBM [2012-02-21 07:16:47 | 000,009,288 | ---- | C] () -- C:\WINDOWS\CUAppUsage.Dat [2012-02-20 19:02:47 | 000,000,022 | -HS- | C] () -- C:\Documents and Settings\Maniek\Dane aplikacji\Sys6925.Config Collection.sys [2012-02-20 19:02:47 | 000,000,022 | -HS- | C] () -- C:\WINDOWS\Sys3390 SettingsCollection.bin [2012-02-19 00:59:39 | 000,023,624 | ---- | C] () -- C:\WINDOWS\System32\drivers\hitmanpro36.sys [2012-02-19 00:58:23 | 000,023,624 | ---- | C] () -- C:\WINDOWS\System32\drivers\hitmanpro35.sys [2012-02-17 15:52:10 | 001,740,800 | ---- | C] () -- C:\WINDOWS\System32\Osklauncher.exe [2012-02-17 15:52:10 | 000,054,784 | ---- | C] () -- C:\WINDOWS\System32\inject_logon_dll.dll [2012-02-17 15:52:10 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\SpyShelterShellExt.dll [2012-02-07 17:15:49 | 000,270,984 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012-02-07 15:09:46 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2012-02-05 20:45:01 | 000,000,250 | ---- | C] () -- C:\Documents and Settings\Maniek\SecurityKISSTunnel.config [2012-01-08 18:00:07 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\apt.sys [2012-01-03 12:51:18 | 000,110,602 | ---- | C] () -- C:\WINDOWS\System32\xcdsfx32.bin [2011-12-27 01:20:24 | 000,003,010 | ---- | C] () -- C:\WINDOWS\Sandboxie.ini [2011-12-26 23:37:25 | 000,000,022 | -HS- | C] () -- C:\Documents and Settings\Maniek\Dane aplikacji\Sys2662.Config.Repository.bin [2011-12-19 13:29:18 | 000,000,034 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini [2011-11-26 15:20:45 | 000,000,512 | ---- | C] () -- C:\WINDOWS\MirDetected.bin [2011-11-25 10:48:50 | 000,000,112 | ---- | C] () -- C:\WINDOWS\wininit.ini [2011-11-18 16:16:37 | 000,051,712 | ---- | C] () -- C:\WINDOWS\System32\drivers\dataguard.sys [2011-08-29 23:19:12 | 000,000,328 | ---- | C] () -- C:\WINDOWS\dvdcreator.INI [2011-08-29 23:10:28 | 000,014,496 | ---- | C] () -- C:\WINDOWS\System32\VDI08X.dat [2011-08-29 23:09:39 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\VDProductInfoEx.dll [2011-08-29 23:09:39 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\RDrv2KInterface.dll [2011-08-29 23:09:39 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\unVHDDrvExe.exe [2011-08-29 23:09:39 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\inVHDDrvExe.exe [2011-08-29 23:09:39 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\RDrvInterface.dll [2011-08-29 23:09:38 | 000,118,784 | ---- | C] () -- C:\WINDOWS\System32\DVC.dll [2011-08-29 13:04:19 | 002,336,384 | ---- | C] () -- C:\WINDOWS\System32\BootMan.exe [2011-08-29 13:04:19 | 000,086,408 | ---- | C] () -- C:\WINDOWS\System32\setupempdrv03.exe [2011-08-29 13:04:19 | 000,014,848 | ---- | C] () -- C:\WINDOWS\System32\EuEpmGdi.dll [2011-08-29 13:04:19 | 000,013,192 | ---- | C] () -- C:\WINDOWS\System32\epmntdrv.sys [2011-08-29 13:04:19 | 000,008,456 | ---- | C] () -- C:\WINDOWS\System32\EuGdiDrv.sys [2011-08-28 18:03:10 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2011-08-28 17:16:03 | 000,035,720 | ---- | C] () -- C:\WINDOWS\System32\drivers\EUBKMON.sys [2011-08-28 17:12:36 | 000,014,640 | ---- | C] () -- C:\WINDOWS\System32\RaCoInst.dat [2011-08-28 16:43:04 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2011-08-28 16:42:44 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll [2011-08-28 16:15:02 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2011-08-28 16:10:12 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [color=#E56717]========== LOP Check ==========[/color] [2012-02-19 01:27:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Dane aplikacji\PCToolsFirewallPlus [2011-08-29 19:38:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ad Muncher [2012-02-27 04:20:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\HitmanPro [2012-01-21 07:39:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nitro PDF [2011-08-28 17:12:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ralink Driver [2011-08-29 19:36:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RDRM [2012-02-27 23:36:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RFA_Backups [2012-02-27 20:10:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TuneUp Software [2012-02-27 20:09:31 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{55A29068-F2CE-456C-9148-C869879E2357} [2012-02-27 04:35:18 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{FA33E2F3-4250-473E-85C1-4E4E3BAB4252} [2012-01-27 09:35:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Maniek\Dane aplikacji\BESTplayer [2011-08-29 19:45:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Maniek\Dane aplikacji\ChemTable Software [2012-01-28 09:56:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Maniek\Dane aplikacji\foobar2000 [2012-01-27 09:35:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Maniek\Dane aplikacji\GlarySoft [2012-02-27 22:06:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Maniek\Dane aplikacji\ipla [2012-02-07 19:52:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Maniek\Dane aplikacji\IrfanView [2012-02-27 20:06:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Maniek\Dane aplikacji\Kadu [2012-02-21 06:41:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Maniek\Dane aplikacji\LibreOffice [2012-01-29 21:18:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Maniek\Dane aplikacji\Nitro PDF [2012-02-27 04:19:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Maniek\Dane aplikacji\Notepad++ [2012-02-23 21:27:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Maniek\Dane aplikacji\Opera [2012-01-24 08:06:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Maniek\Dane aplikacji\PCToolsFirewallPlus [2011-12-26 23:41:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Maniek\Dane aplikacji\PhotoScape [2012-02-27 22:50:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Maniek\Dane aplikacji\Process Hacker 2 [2012-01-03 18:39:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Maniek\Dane aplikacji\RDRM [2011-09-20 19:20:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Maniek\Dane aplikacji\S.A.D [2012-02-25 09:21:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Maniek\Dane aplikacji\Smarty Uninstaller [2012-02-17 15:52:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Maniek\Dane aplikacji\SpyShelter [2012-02-27 20:10:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Maniek\Dane aplikacji\TuneUp Software [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 192 bytes -> C:\WINDOWS:nlsPreferences @Alternate Data Stream - 165 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:1CE11B51 @Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:C43ED645 @Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:C31F31E6 < End of report >