OTL logfile created on: 2012-03-29 16:24:10 - Run 4 OTL by OldTimer - Version 3.2.39.2 Folder = D:\`Downloads Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,45 Gb Available Physical Memory | 72,61% Memory free 3,85 Gb Paging File | 3,45 Gb Available in Paging File | 89,77% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 78,12 Gb Total Space | 54,42 Gb Free Space | 69,66% Space Free | Partition Type: NTFS Drive D: | 78,12 Gb Total Space | 26,89 Gb Free Space | 34,42% Space Free | Partition Type: NTFS Drive E: | 76,63 Gb Total Space | 69,18 Gb Free Space | 90,27% Space Free | Partition Type: NTFS Computer Name: LAMACOMP | User Name: Administrator | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-03-28 17:09:28 | 000,593,920 | ---- | M] (OldTimer Tools) -- D:\`Downloads\OTL.exe PRC - [2011-09-22 12:03:30 | 000,974,944 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe PRC - [2011-09-22 12:03:02 | 003,080,264 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe PRC - [2008-06-26 11:21:38 | 000,217,088 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\HControl.exe PRC - [2008-06-23 21:16:24 | 002,482,176 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe PRC - [2008-04-15 14:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2008-01-23 16:34:42 | 007,766,016 | ---- | M] () -- C:\Program Files\ATKOSD2\ATKOSD2.exe PRC - [2008-01-23 11:51:28 | 000,151,552 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\WDC.exe PRC - [2008-01-11 23:40:10 | 000,098,304 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe PRC - [2007-11-04 20:48:06 | 000,106,496 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe PRC - [2007-10-23 20:35:58 | 000,376,921 | ---- | M] (Atheros Communications, Inc.) -- C:\Program Files\Atheros\ACU.exe PRC - [2007-10-23 20:35:40 | 000,364,629 | ---- | M] (Atheros) -- C:\WINDOWS\system32\acs.exe PRC - [2007-08-15 12:20:16 | 000,106,496 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\KBFiltr.exe PRC - [2007-08-08 01:08:40 | 000,094,208 | ---- | M] () -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe PRC - [2007-07-05 17:53:44 | 001,040,384 | ---- | M] () -- C:\Program Files\Wireless Console 2\wcourier.exe PRC - [2007-06-14 17:57:08 | 000,282,624 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe PRC - [2007-05-22 17:57:26 | 002,756,608 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe PRC - [2007-05-18 17:14:14 | 002,170,880 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtProc.exe PRC - [2007-04-26 15:53:38 | 000,274,432 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe PRC - [2007-02-27 21:21:08 | 000,278,528 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe PRC - [2007-02-25 22:55:18 | 000,125,048 | ---- | M] (TOSHIBA CORPORATION) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe PRC - [2007-01-30 18:47:46 | 000,307,200 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosOBEX.exe PRC - [2006-11-02 09:27:32 | 000,061,440 | ---- | M] (ASUSTeK Computer INC.) -- C:\Program Files\ASUS\ATK Media\DMedia.exe PRC - [2006-03-21 16:54:00 | 000,544,768 | R--- | M] (Motorola Inc.) -- C:\WINDOWS\sm56hlpr.exe PRC - [2006-01-24 00:14:10 | 000,069,632 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe PRC - [2005-07-27 19:05:44 | 000,897,284 | ---- | M] (Filseclab) -- C:\Program Files\Filseclab\xfilter\xfilter.exe PRC - [2005-07-21 17:38:08 | 000,315,652 | ---- | M] (Filseclab) -- C:\Program Files\Common Files\Filseclab\FilMsg.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-01-03 15:10:54 | 000,300,544 | ---- | M] () -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.POL MOD - [2008-03-29 17:42:20 | 000,159,744 | ---- | M] () -- C:\Program Files\SubEdit-Player\codec\MatroskaSplitter\mmfinfo.dll MOD - [2008-03-29 17:41:52 | 000,023,552 | ---- | M] () -- C:\Program Files\SubEdit-Player\codec\MatroskaSplitter\mkunicode.dll MOD - [2008-01-23 16:34:42 | 007,766,016 | ---- | M] () -- C:\Program Files\ATKOSD2\ATKOSD2.exe MOD - [2008-01-23 11:51:28 | 000,151,552 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\WDC.exe MOD - [2008-01-11 23:40:10 | 000,098,304 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe MOD - [2007-11-12 16:41:50 | 000,106,496 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\MsgTran.dll MOD - [2007-11-04 20:48:06 | 000,106,496 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe MOD - [2007-08-15 12:20:16 | 000,106,496 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\KBFiltr.exe MOD - [2007-08-08 01:08:40 | 000,094,208 | ---- | M] () -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe MOD - [2007-07-05 17:53:44 | 001,040,384 | ---- | M] () -- C:\Program Files\Wireless Console 2\wcourier.exe MOD - [2006-08-24 00:32:26 | 000,163,840 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\ASUSNet.dll MOD - [2005-07-22 22:30:18 | 000,065,536 | ---- | M] () -- C:\WINDOWS\system32\TosCommAPI.dll MOD - [2004-10-14 11:18:24 | 000,040,960 | ---- | M] () -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtAfh.dll MOD - [2004-05-27 19:13:10 | 000,057,344 | ---- | M] () -- C:\Program Files\ASUS\ATK Hotkey\CMSSC.DLL MOD - [2001-10-28 18:42:30 | 000,116,224 | ---- | M] () -- C:\WINDOWS\system32\pdfcmnnt.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400) SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ) SRV - [2012-01-31 16:09:34 | 000,158,856 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012-01-31 03:43:23 | 000,318,632 | ---- | M] (Protection Technology) [Auto | Stopped] -- C:\WINDOWS\System32\appdrvrem01.exe -- (appdrvrem01) Application Driver Auto Removal Service (01) SRV - [2011-09-22 12:03:30 | 000,974,944 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn) SRV - [2011-06-29 15:59:18 | 000,155,344 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe -- (Sony Ericsson PCCompanion) SRV - [2011-03-16 11:42:06 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2007-10-23 20:35:40 | 000,364,629 | ---- | M] (Atheros) [Auto | Running] -- C:\WINDOWS\system32\acs.exe -- (ACS) SRV - [2007-08-08 01:08:40 | 000,094,208 | ---- | M] () [Auto | Running] -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv) SRV - [2007-02-25 22:55:18 | 000,125,048 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2012-01-31 03:43:25 | 002,256,768 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\appdrv01.sys -- (appdrv01) Application Driver (01) DRV - [2011-08-09 14:24:52 | 000,154,136 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon) DRV - [2011-08-04 09:20:38 | 000,103,112 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdir.sys -- (epfwtdir) DRV - [2011-08-04 09:20:36 | 000,118,104 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv) DRV - [2011-02-10 01:00:00 | 000,043,392 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SiSGbeXP.sys -- (SiSGbeXP) DRV - [2010-07-04 21:51:26 | 000,004,096 | ---- | M] () [Kernel | Unavailable | Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5) DRV - [2010-03-01 12:43:16 | 000,098,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039bus.sys -- (s1039bus) Sony Ericsson Device 1039 driver (WDM) DRV - [2010-03-01 12:43:12 | 000,124,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039mdm.sys -- (s1039mdm) DRV - [2010-03-01 12:43:12 | 000,117,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039mgmt.sys -- (s1039mgmt) Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM) DRV - [2010-03-01 12:43:12 | 000,113,904 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039obex.sys -- (s1039obex) DRV - [2010-03-01 12:43:12 | 000,014,960 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039mdfl.sys -- (s1039mdfl) DRV - [2010-03-01 12:43:10 | 000,123,504 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039unic.sys -- (s1039unic) Sony Ericsson Device 1039 USB Ethernet Emulation (WDM) DRV - [2010-03-01 12:43:10 | 000,025,456 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1039nd5.sys -- (s1039nd5) Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS) DRV - [2010-01-27 04:09:02 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\npf.sys -- (npf) DRV - [2009-09-10 15:55:52 | 000,102,528 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard) DRV - [2009-07-24 19:33:24 | 000,100,736 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbdev.sys -- (hwusbdev) DRV - [2008-06-20 10:58:08 | 004,741,120 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2008-04-22 18:34:52 | 002,880,000 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2007-10-26 03:20:36 | 000,549,184 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ar5211.sys -- (AR5211) DRV - [2007-10-01 08:59:46 | 001,769,984 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\snp2uvc.sys -- (SNP2UVC) USB2.0 PC Camera (SNP2UVC) DRV - [2007-07-24 12:09:04 | 000,013,880 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files\ATKGFNEX\ASMMAP.sys -- (ASMMAP) DRV - [2007-07-03 20:46:24 | 000,057,344 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wsimd.sys -- (WSIMD) DRV - [2007-06-11 15:25:28 | 000,041,856 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tosrfusb.sys -- (tosrfusb) DRV - [2007-05-24 15:27:30 | 000,064,000 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tosrfcom.sys -- (Tosrfcom) DRV - [2007-04-24 14:20:06 | 000,113,920 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tosrfbd.sys -- (tosrfbd) DRV - [2007-03-01 17:53:10 | 000,073,728 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Tosrfhid.sys -- (Tosrfhid) DRV - [2007-01-24 12:08:40 | 000,005,632 | R--- | M] ( ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\kbfiltr.sys -- (kbfiltr) DRV - [2006-12-17 17:11:58 | 000,007,680 | R--- | M] (ATK0100) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ATKACPI.sys -- (MTsensor) DRV - [2006-11-20 18:55:16 | 000,036,480 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tosrfbnp.sys -- (tosrfbnp) DRV - [2006-10-10 20:33:00 | 000,041,600 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tosporte.sys -- (tosporte) DRV - [2006-03-21 17:04:00 | 000,889,472 | R--- | M] (Motorola Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\smserial.sys -- (smserial) DRV - [2005-07-05 12:55:36 | 000,124,752 | ---- | M] (Filseclab Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\xpacket.sys -- (XPacket) DRV - [2005-01-06 14:42:00 | 000,018,612 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tosrfnds.sys -- (tosrfnds) DRV - [2004-05-27 19:13:04 | 000,016,269 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Running] -- C:\Program Files\ASUS\ATK Hotkey\ASNDIS5.SYS -- (ASNDIS5) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKCU\..\SearchScopes,DefaultScope = {FEA9783A-BD7B-4ACE-B57A-5E39DEF85A73} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKCU\..\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}: "URL" = IE - HKCU\..\SearchScopes\{FEA9783A-BD7B-4ACE-B57A-5E39DEF85A73}: "URL" = http://www.bing.com/search?q={searchTerms}&form=IE8SRC&src=IE-SearchBox IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.startup.homepage: "about:blank" FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@pages.tvunetworks.com/WebPlayer: C:\WINDOWS\system32\TVUAx\npTVUAx.dll (TVU networks) FF - HKLM\Software\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00: File not found FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.11: C:\Program Files\VideoLAN\VLC\npvlc.dll (the VideoLAN Team) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-03-22 21:45:49 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012-03-14 23:20:44 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2012-03-28 18:44:11 | 000,000,000 | ---D | M] [2011-12-31 18:52:21 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Extensions [2012-03-28 18:30:48 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\wd79lhsq.default\extensions [2012-01-02 23:12:53 | 000,000,000 | ---D | M] (TVU Web Player) -- C:\Documents and Settings\Administrator\Dane aplikacji\Mozilla\Firefox\Profiles\wd79lhsq.default\extensions\firefox@tvunetworks.com [2012-02-03 16:46:33 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions () (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\WD79LHSQ.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI [2011-12-31 19:31:59 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2012-03-22 21:45:48 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2011-12-21 07:04:32 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2011-12-21 07:04:32 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2011-12-21 07:04:32 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2011-12-21 07:04:32 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2011-12-21 07:04:32 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2011-12-21 07:04:32 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2012-03-09 22:36:19 | 000,000,789 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O4 - HKLM..\Run: [ACU] C:\Program Files\Atheros\ACU.exe (Atheros Communications, Inc.) O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [ATKHOTKEY] C:\Program Files\ASUS\ATK Hotkey\HControl.exe (ASUS) O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMedia.exe (ASUSTeK Computer INC.) O4 - HKLM..\Run: [ATKOSD2] C:\Program Files\ATKOSD2\ATKOSD2.exe () O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET) O4 - HKLM..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe () O4 - HKLM..\Run: [MsgTranAgt] C:\Program Files\ASUS\ATK Hotkey\MsgTranAgt.exe () O4 - HKLM..\Run: [SMSERIAL] C:\WINDOWS\sm56hlpr.exe (Motorola Inc.) O4 - HKLM..\Run: [Wireless Console 2] C:\Program Files\Wireless Console 2\wcourier.exe () O4 - HKLM..\Run: [XFILTER] C:\Program Files\Filseclab\xfilter\xfilter.exe (Filseclab) O4 - Startup: C:\Documents and Settings\Administrator\Menu Start\Programy\Autostart\VDownloader.lnk = File not found O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Bluetooth Manager.lnk = C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Filseclab Messenger.lnk = C:\Program Files\Common Files\Filseclab\FilMsg.exe (Filseclab) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Filseclab\xfilter\XFILTER.DLL (Filseclab Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Filseclab\xfilter\XFILTER.DLL (Filseclab Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Filseclab\xfilter\XFILTER.DLL (Filseclab Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Filseclab\xfilter\XFILTER.DLL (Filseclab Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Filseclab\xfilter\XFILTER.DLL (Filseclab Corporation) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1325350780500 (WUWebControl Class) O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1325516642765 (MUWebControl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30) O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab (Java Plug-in 1.6.0_30) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B7E02BDF-4D23-4322-BE7E-0A35FE81DF96}: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Idylla.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2011-12-31 01:25:35 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{39fe38a2-66f2-11e1-9f52-0022432a0b41}\Shell - "" = AutoRun O33 - MountPoints2\{39fe38a2-66f2-11e1-9f52-0022432a0b41}\Shell\AutoRun\command - "" = I:\AutoRun.exe O33 - MountPoints2\{39fe38a5-66f2-11e1-9f52-0022432a0b41}\Shell - "" = AutoRun O33 - MountPoints2\{39fe38a5-66f2-11e1-9f52-0022432a0b41}\Shell\AutoRun\command - "" = I:\AutoRun.exe O33 - MountPoints2\{39fe38a7-66f2-11e1-9f52-0022432a0b41}\Shell - "" = AutoRun O33 - MountPoints2\{39fe38a7-66f2-11e1-9f52-0022432a0b41}\Shell\AutoRun\command - "" = I:\AutoRun.exe O33 - MountPoints2\{fad7fa00-3fa5-11e1-9efe-002215668f74}\Shell - "" = AutoRun O33 - MountPoints2\{fad7fa00-3fa5-11e1-9efe-002215668f74}\Shell\AutoRun\command - "" = H:\Startme.exe O33 - MountPoints2\I\Shell - "" = AutoRun O33 - MountPoints2\I\Shell\AutoRun\command - "" = I:\AutoRun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-03-28 23:59:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit\RootRepeal [2012-03-28 21:48:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump [2012-03-28 18:44:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt [2012-03-28 18:44:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\ESET [2012-03-28 18:43:58 | 000,000,000 | ---D | C] -- C:\Program Files\ESET [2012-03-28 18:43:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\ESET [2012-03-28 18:34:13 | 000,000,000 | -H-D | C] -- C:\WINDOWS\System32\GroupPolicy [2012-03-28 18:03:39 | 000,124,752 | ---- | C] (Filseclab Corporation) -- C:\WINDOWS\System32\xpacket.sys [2012-03-28 18:03:38 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Filseclab [2012-03-28 18:03:37 | 000,000,000 | ---D | C] -- C:\Program Files\Filseclab [2012-03-28 18:03:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Filseclab [2012-03-28 17:55:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit\processhacker-2.4-bin [2012-03-28 17:55:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Process Hacker 2 [2012-03-28 17:21:14 | 000,000,000 | ---D | C] -- C:\Program Files\Panda Security [2012-03-28 15:41:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Safer Networking [2012-03-28 15:41:06 | 000,000,000 | ---D | C] -- C:\Program Files\Safer Networking [2012-03-28 13:22:07 | 000,000,000 | -HSD | C] -- C:\WINDOWS\CSC [2012-03-26 22:05:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit\Nowy folder (2) [2012-03-26 20:10:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit\Gadu_Gadu_10_H4ck_-_Made_by_TheFlaiDer [2012-03-25 18:49:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\Gadu-Gadu 10 [2012-03-25 18:47:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2012-03-25 18:46:03 | 000,000,000 | ---D | C] -- C:\Program Files\Gadu-Gadu 10 [2012-03-25 18:38:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit\Hack [2012-03-25 10:44:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles [2012-03-18 20:07:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit\Mecha [2012-03-14 23:15:08 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_42.dll [2012-03-14 23:14:51 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_31.dll [2012-03-14 23:14:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\Logs [2012-03-14 23:13:05 | 000,133,616 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxafs.dll [2012-03-14 23:13:05 | 000,126,448 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxinsi64.exe [2012-03-14 23:13:05 | 000,123,888 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxcpyi64.exe [2012-03-14 23:13:05 | 000,072,176 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxhpinst.exe [2012-03-14 23:13:05 | 000,068,592 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxinsa64.exe [2012-03-14 23:13:05 | 000,068,080 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxcpya64.exe [2012-03-14 23:13:05 | 000,009,200 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdralw2k.sys [2012-03-14 23:13:05 | 000,009,072 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys [2012-03-14 23:13:03 | 002,095,600 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxsfs.dll [2012-03-14 23:13:03 | 000,698,864 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\px.dll [2012-03-14 23:13:03 | 000,571,888 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxdrv.dll [2012-03-14 23:13:03 | 000,440,816 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxwave.dll [2012-03-14 23:13:03 | 000,219,632 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxmas.dll [2012-03-14 23:13:03 | 000,100,848 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\vxblock.dll [2012-03-14 23:13:03 | 000,059,888 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxwma.dll [2012-03-14 23:12:59 | 000,000,000 | ---D | C] -- C:\Program Files\Winamp [2012-03-11 18:54:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit\Ramy przestrzenne [2012-03-11 01:23:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\EurekaLog [2012-03-05 23:48:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\PLAY ONLINE [2012-03-05 23:47:54 | 000,112,640 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewusbnet.sys [2012-03-05 23:47:54 | 000,102,528 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewusbmdm.sys [2012-03-05 23:47:54 | 000,100,736 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewusbdev.sys [2012-03-05 23:47:54 | 000,024,448 | ---- | C] (Huawei Tech. Co., Ltd.) -- C:\WINDOWS\System32\drivers\ewdcsc.sys [2012-03-05 23:47:03 | 000,000,000 | ---D | C] -- C:\Program Files\PLAY ONLINE [2012-03-05 20:46:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit\Dodruk [2012-03-02 15:58:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Pulpit\Wytrzymałość materiałów 2 [2012-02-29 20:49:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\ts3overlay [2012-02-29 20:46:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dane aplikacji\TS3Client [2012-02-29 20:45:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\TeamSpeak 3 Client [2012-02-29 20:45:27 | 000,000,000 | ---D | C] -- C:\Program Files\TeamSpeak 3 Client [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-03-29 16:06:00 | 000,395,546 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2012-03-29 16:06:00 | 000,079,374 | ---- | M] () -- C:\WINDOWS\System32\perfc015.dat [2012-03-29 16:06:00 | 000,072,348 | ---- | M] () -- C:\WINDOWS\System32\perfh015.dat [2012-03-29 16:05:59 | 000,064,354 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2012-03-29 16:05:50 | 000,000,434 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.ics [2012-03-29 16:03:36 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-03-29 16:03:32 | 2146,717,696 | -HS- | M] () -- C:\hiberfil.sys [2012-03-28 22:04:46 | 000,051,200 | ---- | M] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-03-28 18:35:03 | 000,001,912 | ---- | M] () -- C:\WINDOWS\epplauncher.mif [2012-03-28 18:03:39 | 000,000,561 | ---- | M] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Filseclab Messenger.lnk [2012-03-28 15:44:09 | 000,000,354 | ---- | M] () -- C:\Documents and Settings\Administrator\Moje dokumenty\backup reg.reg [2012-03-28 14:03:56 | 000,001,324 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2012-03-27 22:34:55 | 000,000,128 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Lionel Messi na testach w Angers - Ligue 2 2011-2012 - Piłka nożna - Eurosport.URL [2012-03-26 21:58:48 | 000,000,458 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Wyniki Szukania w Grafice Google dla httpimg.youtube.comvigeH3UFgINVQhqdefault.jpg.URL [2012-03-26 21:58:45 | 000,000,339 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\joemonster kierownik budowy - Szukaj w Google.URL [2012-03-26 14:08:26 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-03-25 18:47:45 | 000,000,791 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\OpenFM.lnk [2012-03-25 18:47:45 | 000,000,762 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Gadu-Gadu 10.lnk [2012-03-25 17:30:39 | 004,948,383 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\gadu_wireader1.4.rar [2012-03-25 17:30:23 | 053,059,072 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\eav_nt32_plk.msi [2012-03-25 17:22:16 | 001,184,981 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\GG_RPC.rar [2012-03-16 20:14:44 | 000,409,853 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\lawa-fundamentowa.pdf [2012-03-16 15:53:08 | 000,101,440 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2012-03-16 15:49:33 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2012-03-15 22:20:33 | 000,041,110 | ---- | M] () -- C:\Documents and Settings\Administrator\Moje dokumenty\Zdolności przestrzenne - poncho.pdf [2012-03-15 00:48:02 | 000,000,068 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Repulsine.flv - YouTube.URL [2012-03-15 00:43:29 | 000,000,084 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Naukowe eksperymenty III Rzeszy [TVRip] Lektor PL part 34 - YouTube.URL [2012-03-15 00:03:57 | 000,000,084 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\Straszne momenty na randce - YouTube.URL [2012-03-09 22:36:19 | 000,000,789 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts [2012-03-07 18:36:27 | 000,051,032 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\181958e41fb214297155af3fe4f59dc8.jpg [2012-03-06 20:11:26 | 000,000,098 | ---- | M] () -- C:\WINDOWS\WirelessFTP.INI [2012-03-02 22:36:41 | 003,419,222 | ---- | M] () -- C:\Documents and Settings\Administrator\Pulpit\01-black_eyed_peas-pump_it.mp3 [2012-03-01 12:07:07 | 000,001,488 | ---- | M] () -- C:\Documents and Settings\Administrator\.recently-used.xbel [2012-02-29 20:45:54 | 000,000,837 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\TeamSpeak 3 Client.lnk [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-03-28 21:48:45 | 2146,717,696 | -HS- | C] () -- C:\hiberfil.sys [2012-03-28 18:03:39 | 000,000,561 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Filseclab Messenger.lnk [2012-03-28 15:44:09 | 000,000,354 | ---- | C] () -- C:\Documents and Settings\Administrator\Moje dokumenty\backup reg.reg [2012-03-27 22:34:55 | 000,000,128 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Lionel Messi na testach w Angers - Ligue 2 2011-2012 - Piłka nożna - Eurosport.URL [2012-03-26 21:58:48 | 000,000,458 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Wyniki Szukania w Grafice Google dla httpimg.youtube.comvigeH3UFgINVQhqdefault.jpg.URL [2012-03-26 21:58:45 | 000,000,339 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\joemonster kierownik budowy - Szukaj w Google.URL [2012-03-25 18:47:45 | 000,000,791 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\OpenFM.lnk [2012-03-25 18:47:45 | 000,000,762 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Gadu-Gadu 10.lnk [2012-03-25 18:46:55 | 000,000,680 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Start\Programy\Gadu-Gadu 10.lnk [2012-03-25 17:31:49 | 053,059,072 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\eav_nt32_plk.msi [2012-03-25 17:31:18 | 004,948,383 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\gadu_wireader1.4.rar [2012-03-25 17:22:29 | 001,184,981 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\GG_RPC.rar [2012-03-16 20:14:41 | 000,409,853 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\lawa-fundamentowa.pdf [2012-03-15 22:20:32 | 000,041,110 | ---- | C] () -- C:\Documents and Settings\Administrator\Moje dokumenty\Zdolności przestrzenne - poncho.pdf [2012-03-15 00:48:02 | 000,000,068 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Repulsine.flv - YouTube.URL [2012-03-15 00:43:29 | 000,000,084 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Naukowe eksperymenty III Rzeszy [TVRip] Lektor PL part 34 - YouTube.URL [2012-03-15 00:03:57 | 000,000,084 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\Straszne momenty na randce - YouTube.URL [2012-03-07 18:36:23 | 000,051,032 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\181958e41fb214297155af3fe4f59dc8.jpg [2012-03-02 22:36:24 | 003,419,222 | ---- | C] () -- C:\Documents and Settings\Administrator\Pulpit\01-black_eyed_peas-pump_it.mp3 [2012-03-01 12:07:07 | 000,001,488 | ---- | C] () -- C:\Documents and Settings\Administrator\.recently-used.xbel [2012-02-29 20:45:54 | 000,000,837 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\TeamSpeak 3 Client.lnk [2012-02-20 13:11:33 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll [2012-02-17 17:29:52 | 000,000,140 | ---- | C] () -- C:\WINDOWS\parport.ini [2012-02-15 10:52:11 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2012-02-05 09:24:27 | 000,001,324 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2012-02-01 12:30:35 | 000,339,968 | ---- | C] () -- C:\WINDOWS\System32\pythoncom25.dll [2012-02-01 12:30:35 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\pywintypes25.dll [2012-01-27 16:52:44 | 000,000,134 | ---- | C] () -- C:\WINDOWS\System32\NETHASP.INI [2012-01-26 16:46:58 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Aslan.INI [2012-01-06 00:32:22 | 000,000,084 | ---- | C] () -- C:\WINDOWS\winDecrypt.INI [2012-01-01 22:26:34 | 000,051,200 | ---- | C] () -- C:\Documents and Settings\Administrator\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-01-01 19:51:35 | 000,086,528 | ---- | C] () -- C:\WINDOWS\bnetunin.exe [2012-01-01 19:51:35 | 000,061,440 | ---- | C] () -- C:\WINDOWS\diabunin.exe [2012-01-01 06:37:26 | 000,000,098 | ---- | C] () -- C:\WINDOWS\WirelessFTP.INI [2011-12-31 23:29:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\tosOBEX.INI [2011-12-31 21:20:43 | 000,175,616 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2011-12-31 21:20:41 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2011-12-31 21:20:37 | 000,650,752 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2011-12-31 21:20:37 | 000,243,200 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2011-12-31 21:20:37 | 000,074,752 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2011-12-31 16:34:14 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin [2011-12-31 02:34:39 | 001,769,984 | R--- | C] () -- C:\WINDOWS\System32\drivers\snp2uvc.sys [2011-12-31 02:34:39 | 000,028,160 | R--- | C] () -- C:\WINDOWS\System32\drivers\sncduvc.sys [2011-12-31 02:33:03 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe [2011-12-31 02:24:25 | 003,107,788 | R--- | C] () -- C:\WINDOWS\System32\ativvaxx.dat [2011-12-31 02:24:25 | 003,107,788 | R--- | C] () -- C:\WINDOWS\System32\ativva5x.dat [2011-12-31 02:24:25 | 000,887,724 | R--- | C] () -- C:\WINDOWS\System32\ativva6x.dat [2011-12-31 02:24:25 | 000,168,883 | R--- | C] () -- C:\WINDOWS\System32\atiicdxx.dat [2011-12-31 02:21:56 | 000,005,632 | R--- | C] ( ) -- C:\WINDOWS\System32\drivers\kbfiltr.sys [2011-12-31 02:07:50 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2011-12-31 02:05:17 | 000,101,440 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011-12-31 01:34:59 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2011-12-31 01:20:50 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2011-12-30 23:50:36 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2011-12-30 23:49:23 | 000,395,546 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2011-12-30 23:49:23 | 000,313,828 | ---- | C] () -- C:\WINDOWS\System32\perfi015.dat [2011-12-30 23:49:23 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2011-12-30 23:49:23 | 000,072,348 | ---- | C] () -- C:\WINDOWS\System32\perfh015.dat [2011-12-30 23:49:22 | 000,079,374 | ---- | C] () -- C:\WINDOWS\System32\perfc015.dat [2011-12-30 23:49:22 | 000,064,354 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2011-12-30 23:49:22 | 000,034,990 | ---- | C] () -- C:\WINDOWS\System32\perfd015.dat [2011-12-30 23:49:22 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2011-12-30 23:49:07 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2011-12-30 23:49:01 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2011-12-30 23:48:41 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [2011-12-30 23:47:16 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2011-12-30 23:47:15 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2011-12-30 23:45:07 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2011-12-30 23:44:26 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:EEDA5B17 < End of report >