OTL logfile created on: 2012-03-04 13:27:59 - Run 1
OTL by OldTimer - Version 3.2.31.0     Folder = D:\Programy\Programy
Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 1,54 Gb Available Physical Memory | 76,84% Memory free
3,85 Gb Paging File | 3,54 Gb Available in Paging File | 92,12% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 25,39 Gb Total Space | 15,64 Gb Free Space | 61,58% Space Free | Partition Type: NTFS
Drive D: | 49,13 Gb Total Space | 11,14 Gb Free Space | 22,67% Space Free | Partition Type: NTFS
 
Computer Name: MIZIA-B8C489523 | User Name: Fizia | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011-11-02 20:03:14 | 001,191,216 | ---- | M] (Lavasoft Limited) -- C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
PRC - [2011-11-02 20:03:11 | 002,152,152 | ---- | M] (Lavasoft Limited) -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
PRC - [2011-10-30 19:12:15 | 000,584,192 | ---- | M] (OldTimer Tools) -- D:\Programy\Programy\OTL.exe
PRC - [2004-08-04 13:00:00 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012-02-05 12:41:50 | 000,181,616 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Defs\Extended\libMachoUniv.dll
MOD - [2012-02-05 12:41:48 | 000,210,288 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Defs\Extended\libBase64.dll
MOD - [2011-11-02 20:05:17 | 000,508,776 | ---- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\Lavasoft\Ad-Aware\Defs\thorax.aaw
MOD - [2011-11-02 20:04:21 | 000,430,568 | ---- | M] () -- C:\Program Files\Lavasoft\Ad-Aware\VipreBridge.dll
MOD - [2011-11-02 20:04:20 | 000,308,560 | ---- | M] () -- C:\Program Files\Lavasoft\Ad-Aware\Vipre.dll
MOD - [2011-11-02 20:03:54 | 000,589,184 | ---- | M] () -- C:\Program Files\Lavasoft\Ad-Aware\RPAPI.dll
MOD - [2005-10-20 10:36:08 | 000,077,824 | R--- | M] () -- C:\Program Files\HP\Digital Imaging\bin\crm\xmltok.dll
MOD - [2005-10-20 10:36:08 | 000,065,536 | R--- | M] () -- C:\Program Files\HP\Digital Imaging\bin\crm\xmlparse.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] --  -- (HidServ)
SRV - [2011-11-02 20:03:11 | 002,152,152 | ---- | M] (Lavasoft Limited) [Auto | Running] -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe -- (Lavasoft Ad-Aware Service)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2011-11-02 20:04:25 | 000,015,232 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\Lavasoft\Ad-Aware\kernexplorer.sys -- (Lavasoft Kernexplorer)
DRV - [2011-10-18 19:53:14 | 006,439,528 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2010-12-03 10:05:34 | 000,064,288 | ---- | M] (Lavasoft AB) [File_System | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\Lbd.sys -- (Lbd)
DRV - [2009-11-18 07:17:00 | 001,395,800 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2009-11-18 07:16:00 | 001,691,480 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2009-07-02 18:49:32 | 004,125,696 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2009-04-24 20:22:16 | 000,141,568 | R--- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2008-07-09 15:11:34 | 000,022,016 | R--- | M] (Realtek Semiconductor Corporation                           ) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\RtNdPt5x.sys -- (RtNdPt5x)
DRV - [2008-05-26 22:42:06 | 000,017,408 | R--- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTLVLAN.SYS -- (RTLVLAN)
DRV - [2008-01-23 21:00:44 | 000,025,984 | R--- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RTLTEAMING.SYS -- (RTLTEAMING)
DRV - [2004-08-13 11:56:20 | 000,005,810 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ASACPI.sys -- (MTsensor)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-682003330-1958367476-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.startup.homepage: "onet.pl"
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Tools\Mozilla Firefox\components [2011-10-30 20:59:18 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Tools\Mozilla Firefox\plugins
 
[2011-10-30 18:10:15 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Fizia\Dane aplikacji\Mozilla\Extensions
[2011-11-13 11:23:21 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Fizia\Dane aplikacji\Mozilla\Firefox\Profiles\we26z2j6.default\extensions
() (No name found) -- C:\DOCUMENTS AND SETTINGS\FIZIA\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\WE26Z2J6.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
() (No name found) -- C:\DOCUMENTS AND SETTINGS\FIZIA\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\WE26Z2J6.DEFAULT\EXTENSIONS\{DB9127A2-3381-41EC-82B3-1B6ED4C6F29A}.XPI
[2012-02-02 20:22:56 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
 
O1 HOSTS File: ([2004-08-04 13:00:00 | 000,000,742 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (FlashGetBHO) - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - C:\Documents and Settings\Fizia\Dane aplikacji\FlashGetBHO\FlashGetBHO3.dll (Trend Media Group)
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-682003330-1958367476-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Download all by FlashGet3 - C:\Documents and Settings\Fizia\Dane aplikacji\FlashGetBHO\GetAllUrl.htm ()
O8 - Extra context menu item: Download by FlashGet3 - C:\Documents and Settings\Fizia\Dane aplikacji\FlashGetBHO\GetUrl.htm ()
O8 - Extra context menu item: 使用快车3下载 - C:\Documents and Settings\Fizia\Dane aplikacji\FlashGetBHO\GetUrl.htm ()
O8 - Extra context menu item: 使用快车3下载全部链接 - C:\Documents and Settings\Fizia\Dane aplikacji\FlashGetBHO\GetAllUrl.htm ()
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 195.140.236.250 195.140.238.250 195.140.236.251
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F2776941-38E3-47C4-8417-2543BC40CA24}: DhcpNameServer = 195.140.236.250 195.140.238.250 195.140.236.251
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Fizia\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Fizia\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011-10-30 18:01:32 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (lsdelete)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-02-29 19:52:04 | 000,000,000 | ---D | C] -- C:\Downloads
[2012-02-04 11:55:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Fizia\Pulpit\nk.pl - Dostosuj awatar_pliki
[15 C:\Documents and Settings\Fizia\Moje dokumenty\*.tmp files -> C:\Documents and Settings\Fizia\Moje dokumenty\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-03-04 13:26:20 | 000,000,486 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2012-03-04 13:24:34 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2012-03-04 13:24:32 | 000,219,120 | ---- | M] () -- C:\WINDOWS\System32\ativvaxx.cap
[2012-03-04 13:24:32 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012-03-04 12:59:11 | 002,883,584 | -H-- | M] () -- C:\Documents and Settings\Fizia\NTUSER.DAT
[2012-03-04 12:59:11 | 000,000,188 | -HS- | M] () -- C:\Documents and Settings\Fizia\ntuser.ini
[2012-03-03 22:20:02 | 000,000,064 | ---- | M] () -- C:\WINDOWS\System32\rp_stats.dat
[2012-03-03 22:20:02 | 000,000,044 | ---- | M] () -- C:\WINDOWS\System32\rp_rules.dat
[2012-03-03 09:08:47 | 003,730,914 | -H-- | M] () -- C:\Documents and Settings\Fizia\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2012-03-03 09:01:25 | 000,005,120 | ---- | M] () -- C:\Documents and Settings\Fizia\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-03-02 20:46:48 | 000,000,292 | ---- | M] () -- C:\WINDOWS\System32\secustat.dat
[2012-03-01 21:41:08 | 000,000,598 | ---- | M] () -- C:\WINDOWS\System32\secushr.dat
[2012-02-29 19:51:15 | 000,015,209 | ---- | M] () -- C:\Documents and Settings\Fizia\Pulpit\[BitNova.info]rozstanie__a_separation_2011_bdrip.xvid.ac3_lektor_pl.torrent
[2012-02-27 21:05:45 | 000,002,525 | ---- | M] () -- C:\Documents and Settings\Fizia\Pulpit\Microsoft Word.lnk
[2012-02-26 16:52:26 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012-02-19 17:18:04 | 002,737,343 | ---- | M] () -- C:\Documents and Settings\Fizia\Pulpit\What_a_wonderful_world.mp3.part
[2012-02-19 17:16:32 | 001,381,274 | ---- | M] () -- C:\Documents and Settings\Fizia\Pulpit\Niepewnosc.mp3
[2012-02-19 17:15:48 | 002,060,352 | ---- | M] () -- C:\Documents and Settings\Fizia\Pulpit\Jej_portret.mp3
[2012-02-19 17:14:10 | 001,381,274 | ---- | M] () -- C:\Documents and Settings\Fizia\Pulpit\Walc_Barbary_z_Nocy_i_Dni.mp3
[2012-02-04 11:55:32 | 000,009,812 | ---- | M] () -- C:\Documents and Settings\Fizia\Pulpit\nk.pl - Dostosuj awatar.htm
[15 C:\Documents and Settings\Fizia\Moje dokumenty\*.tmp files -> C:\Documents and Settings\Fizia\Moje dokumenty\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-02-29 20:07:54 | 000,000,598 | ---- | C] () -- C:\WINDOWS\System32\secushr.dat
[2012-02-29 19:51:15 | 000,015,209 | ---- | C] () -- C:\Documents and Settings\Fizia\Pulpit\[BitNova.info]rozstanie__a_separation_2011_bdrip.xvid.ac3_lektor_pl.torrent
[2012-02-19 17:16:59 | 002,737,343 | ---- | C] () -- C:\Documents and Settings\Fizia\Pulpit\What_a_wonderful_world.mp3.part
[2012-02-19 17:16:27 | 001,381,274 | ---- | C] () -- C:\Documents and Settings\Fizia\Pulpit\Niepewnosc.mp3
[2012-02-19 17:15:01 | 002,060,352 | ---- | C] () -- C:\Documents and Settings\Fizia\Pulpit\Jej_portret.mp3
[2012-02-19 17:14:06 | 001,381,274 | ---- | C] () -- C:\Documents and Settings\Fizia\Pulpit\Walc_Barbary_z_Nocy_i_Dni.mp3
[2012-02-11 12:53:35 | 000,005,120 | ---- | C] () -- C:\Documents and Settings\Fizia\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-02-04 11:55:32 | 000,009,812 | ---- | C] () -- C:\Documents and Settings\Fizia\Pulpit\nk.pl - Dostosuj awatar.htm
[2012-01-14 12:56:00 | 000,120,554 | ---- | C] () -- C:\WINDOWS\hpoins11.dat
[2011-11-13 11:18:54 | 000,016,836 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTAIODAT.DAT
[2011-11-02 20:05:21 | 000,000,064 | ---- | C] () -- C:\WINDOWS\System32\rp_stats.dat
[2011-11-02 20:05:21 | 000,000,044 | ---- | C] () -- C:\WINDOWS\System32\rp_rules.dat
[2011-10-30 21:04:56 | 000,016,368 | ---- | C] () -- C:\Documents and Settings\Fizia\Ustawienia lokalne\Dane aplikacji\GDIPFONTCACHEV1.DAT
[2011-10-30 20:59:43 | 000,000,292 | ---- | C] () -- C:\WINDOWS\System32\secustat.dat
[2011-10-30 20:59:19 | 000,000,025 | ---- | C] () -- C:\WINDOWS\libem.INI
[2011-10-30 19:46:52 | 000,015,880 | ---- | C] () -- C:\WINDOWS\System32\lsdelete.exe
[2011-10-30 18:58:36 | 000,000,427 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2011-10-30 18:50:22 | 000,984,778 | ---- | C] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2011-10-30 18:50:21 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2011-10-30 18:49:21 | 000,111,784 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011-10-30 18:28:46 | 000,073,728 | R--- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2011-10-30 18:25:50 | 000,005,810 | R--- | C] () -- C:\WINDOWS\System32\drivers\ASACPI.sys
[2011-10-30 18:25:43 | 000,001,769 | ---- | C] () -- C:\WINDOWS\Language_trs.ini
[2011-10-30 18:25:35 | 000,016,550 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2011-10-30 18:25:35 | 000,010,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2011-10-30 18:23:04 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2011-10-30 18:22:39 | 003,730,914 | -H-- | C] () -- C:\Documents and Settings\Fizia\Ustawienia lokalne\Dane aplikacji\IconCache.db
[2011-10-30 18:15:29 | 000,593,920 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe
[2011-10-30 18:15:20 | 000,887,724 | R--- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2011-10-30 18:15:20 | 000,197,654 | R--- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2011-10-30 18:15:20 | 000,000,003 | R--- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2011-10-30 18:03:12 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2011-10-30 18:01:32 | 000,000,000 | ---- | C] () -- C:\WINDOWS\control.ini
[2011-10-30 18:00:42 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2011-10-30 18:00:38 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2011-10-30 17:59:00 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2011-10-30 17:58:50 | 000,000,037 | ---- | C] () -- C:\WINDOWS\vbaddin.ini
[2011-10-30 17:58:50 | 000,000,036 | ---- | C] () -- C:\WINDOWS\vb.ini
[2011-10-30 17:58:16 | 000,026,717 | ---- | C] () -- C:\WINDOWS\System32\tslabels.ini
[2011-10-30 17:58:15 | 000,003,813 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.ini
[2009-02-18 18:55:20 | 000,294,912 | ---- | C] () -- C:\WINDOWS\System32\ATIODE.exe
[2009-02-03 21:52:02 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ATIODCLI.exe
[2007-04-19 22:38:02 | 000,011,634 | ---- | C] () -- C:\WINDOWS\hpomdl11.dat
[2006-01-03 18:12:04 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\HPZIDS01.dll
[2005-02-24 12:29:14 | 000,162,176 | ---- | C] () -- C:\WINDOWS\System32\drivers\PFC027.sys
[2005-01-25 15:15:42 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\PA207USD.DLL
[2004-11-22 13:37:38 | 000,040,960 | ---- | C] () -- C:\WINDOWS\98Setup.exe
[2004-08-04 13:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2004-08-04 13:00:00 | 001,015,477 | ---- | C] () -- C:\WINDOWS\System32\esentprf.ini
[2004-08-04 13:00:00 | 000,733,696 | ---- | C] () -- C:\WINDOWS\System32\qedwipes.dll
[2004-08-04 13:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004-08-04 13:00:00 | 000,448,348 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat
[2004-08-04 13:00:00 | 000,392,432 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004-08-04 13:00:00 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat
[2004-08-04 13:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004-08-04 13:00:00 | 000,270,848 | ---- | C] () -- C:\WINDOWS\System32\sbe.dll
[2004-08-04 13:00:00 | 000,253,440 | ---- | C] () -- C:\WINDOWS\System32\compatUI.dll
[2004-08-04 13:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004-08-04 13:00:00 | 000,199,168 | ---- | C] () -- C:\WINDOWS\System32\ir32_32.dll
[2004-08-04 13:00:00 | 000,186,368 | ---- | C] () -- C:\WINDOWS\System32\encdec.dll
[2004-08-04 13:00:00 | 000,094,282 | ---- | C] () -- C:\WINDOWS\System32\msencode.dll
[2004-08-04 13:00:00 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll
[2004-08-04 13:00:00 | 000,074,450 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat
[2004-08-04 13:00:00 | 000,070,656 | ---- | C] () -- C:\WINDOWS\System32\amstream.dll
[2004-08-04 13:00:00 | 000,070,622 | ---- | C] () -- C:\WINDOWS\System32\edit.com
[2004-08-04 13:00:00 | 000,058,732 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004-08-04 13:00:00 | 000,053,920 | ---- | C] () -- C:\WINDOWS\System32\dosx.exe
[2004-08-04 13:00:00 | 000,053,478 | ---- | C] () -- C:\WINDOWS\System32\tcpmon.ini
[2004-08-04 13:00:00 | 000,051,823 | ---- | C] () -- C:\WINDOWS\System32\command.com
[2004-08-04 13:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004-08-04 13:00:00 | 000,042,809 | ---- | C] () -- C:\WINDOWS\System32\key01.sys
[2004-08-04 13:00:00 | 000,042,537 | ---- | C] () -- C:\WINDOWS\System32\keyboard.sys
[2004-08-04 13:00:00 | 000,039,434 | ---- | C] () -- C:\WINDOWS\System32\mem.exe
[2004-08-04 13:00:00 | 000,035,648 | ---- | C] () -- C:\WINDOWS\System32\ntio411.sys
[2004-08-04 13:00:00 | 000,035,424 | ---- | C] () -- C:\WINDOWS\System32\ntio412.sys
[2004-08-04 13:00:00 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat
[2004-08-04 13:00:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio804.sys
[2004-08-04 13:00:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio404.sys
[2004-08-04 13:00:00 | 000,033,936 | ---- | C] () -- C:\WINDOWS\System32\ntio.sys
[2004-08-04 13:00:00 | 000,029,370 | ---- | C] () -- C:\WINDOWS\System32\ntdos411.sys
[2004-08-04 13:00:00 | 000,029,274 | ---- | C] () -- C:\WINDOWS\System32\ntdos412.sys
[2004-08-04 13:00:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos804.sys
[2004-08-04 13:00:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos404.sys
[2004-08-04 13:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004-08-04 13:00:00 | 000,027,898 | ---- | C] () -- C:\WINDOWS\System32\ntdos.sys
[2004-08-04 13:00:00 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys
[2004-08-04 13:00:00 | 000,027,097 | ---- | C] () -- C:\WINDOWS\System32\country.sys
[2004-08-04 13:00:00 | 000,020,986 | ---- | C] () -- C:\WINDOWS\System32\debug.exe
[2004-08-04 13:00:00 | 000,020,629 | ---- | C] () -- C:\WINDOWS\System32\mqperf.ini
[2004-08-04 13:00:00 | 000,019,806 | ---- | C] () -- C:\WINDOWS\System32\graphics.com
[2004-08-04 13:00:00 | 000,016,024 | ---- | C] () -- C:\WINDOWS\System32\rsvp.ini
[2004-08-04 13:00:00 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\tsd32.dll
[2004-08-04 13:00:00 | 000,014,913 | ---- | C] () -- C:\WINDOWS\System32\kb16.com
[2004-08-04 13:00:00 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo.dll
[2004-08-04 13:00:00 | 000,013,819 | ---- | C] () -- C:\WINDOWS\System32\pschdprf.ini
[2004-08-04 13:00:00 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\win87em.dll
[2004-08-04 13:00:00 | 000,012,866 | ---- | C] () -- C:\WINDOWS\System32\edlin.exe
[2004-08-04 13:00:00 | 000,012,594 | ---- | C] () -- C:\WINDOWS\System32\append.exe
[2004-08-04 13:00:00 | 000,011,859 | ---- | C] () -- C:\WINDOWS\System32\setver.exe
[2004-08-04 13:00:00 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\scriptpw.dll
[2004-08-04 13:00:00 | 000,009,043 | ---- | C] () -- C:\WINDOWS\System32\ansi.sys
[2004-08-04 13:00:00 | 000,008,520 | ---- | C] () -- C:\WINDOWS\System32\exe2bin.exe
[2004-08-04 13:00:00 | 000,007,116 | ---- | C] () -- C:\WINDOWS\System32\nlsfunc.exe
[2004-08-04 13:00:00 | 000,006,074 | ---- | C] () -- C:\WINDOWS\System32\rasctrs.ini
[2004-08-04 13:00:00 | 000,004,976 | ---- | C] () -- C:\WINDOWS\System32\himem.sys
[2004-08-04 13:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004-08-04 13:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2004-08-04 13:00:00 | 000,003,346 | ---- | C] () -- C:\WINDOWS\System32\redir.exe
[2004-08-04 13:00:00 | 000,003,260 | ---- | C] () -- C:\WINDOWS\System32\nw16.exe
[2004-08-04 13:00:00 | 000,002,992 | ---- | C] () -- C:\WINDOWS\System32\perfci.ini
[2004-08-04 13:00:00 | 000,002,890 | ---- | C] () -- C:\WINDOWS\System32\perfwci.ini
[2004-08-04 13:00:00 | 000,002,656 | ---- | C] () -- C:\WINDOWS\System32\netware.drv
[2004-08-04 13:00:00 | 000,001,788 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2004-08-04 13:00:00 | 000,001,405 | ---- | C] () -- C:\WINDOWS\msdfmap.ini
[2004-08-04 13:00:00 | 000,001,295 | ---- | C] () -- C:\WINDOWS\System32\perffilt.ini
[2004-08-04 13:00:00 | 000,001,168 | ---- | C] () -- C:\WINDOWS\System32\loadfix.com
[2004-08-04 13:00:00 | 000,001,148 | ---- | C] () -- C:\WINDOWS\System32\vwipxspx.exe
[2004-08-04 13:00:00 | 000,000,882 | ---- | C] () -- C:\WINDOWS\System32\share.exe
[2004-08-04 13:00:00 | 000,000,882 | ---- | C] () -- C:\WINDOWS\System32\fastopen.exe
[2004-08-04 13:00:00 | 000,000,817 | ---- | C] () -- C:\WINDOWS\System32\mscdexnt.exe
[2004-08-04 13:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2004-08-04 13:00:00 | 000,000,512 | ---- | C] () -- C:\WINDOWS\win.ini
[2004-08-04 13:00:00 | 000,000,359 | ---- | C] () -- C:\WINDOWS\System32\prodspec.ini
[2004-08-04 13:00:00 | 000,000,231 | ---- | C] () -- C:\WINDOWS\system.ini
[2001-10-26 18:29:54 | 000,057,856 | ---- | C] () -- C:\WINDOWS\System32\dvdplay.exe
[2001-10-26 18:29:42 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\paqsp.dll
[2001-07-07 03:00:02 | 000,003,234 | ---- | C] () -- C:\WINDOWS\System32\HPTCPMON.INI

< End of report >