OTL logfile created on: 2012-04-29 09:03:05 - Run 1
OTL by OldTimer - Version 3.2.42.1     Folder = C:\Users\heniek\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 1,17 Gb Available Physical Memory | 58,61% Memory free
4,23 Gb Paging File | 3,22 Gb Available in Paging File | 76,10% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 140,28 Gb Total Space | 44,91 Gb Free Space | 32,01% Space Free | Partition Type: NTFS
Drive D: | 149,05 Gb Total Space | 49,91 Gb Free Space | 33,49% Space Free | Partition Type: NTFS
Drive E: | 8,76 Gb Total Space | 2,75 Gb Free Space | 31,42% Space Free | Partition Type: NTFS
Drive G: | 14,88 Gb Total Space | 4,12 Gb Free Space | 27,67% Space Free | Partition Type: FAT32
 
Computer Name: HENIEK-TVP | User Name: heniek | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012-04-29 08:52:12 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\heniek\Desktop\otl.exe
PRC - [2011-08-04 06:18:43 | 000,126,400 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton Internet Security\Engine\17.9.0.12\ccsvchst.exe
PRC - [2011-04-08 08:50:36 | 001,406,248 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe
PRC - [2011-03-29 15:33:08 | 000,598,312 | ---- | M] (Nero AG) -- C:\Program Files\Nero\Update\NASvc.exe
PRC - [2011-02-25 11:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE
PRC - [2010-12-07 10:17:08 | 000,102,400 | ---- | M] () -- C:\Program Files\blueconnect\BackgroundService\ModemListener.exe
PRC - [2010-07-23 09:45:26 | 000,045,056 | ---- | M] () -- C:\Program Files\blueconnect\BackgroundService\ServiceManager.exe
PRC - [2010-04-09 18:39:55 | 000,249,856 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\Program Files\blueconnect\DataCardMonitor.exe
PRC - [2009-12-01 14:37:48 | 000,322,624 | ---- | M] (DigitalPersona, Inc.) -- C:\Program Files\DigitalPersona\Bin\DpHostW.exe
PRC - [2009-12-01 14:37:46 | 000,842,816 | ---- | M] (DigitalPersona, Inc.) -- C:\Program Files\DigitalPersona\Bin\DpAgent.exe
PRC - [2009-04-11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008-08-29 15:20:56 | 000,935,208 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
PRC - [2008-02-26 03:23:34 | 000,443,968 | ---- | M] (Google Inc.) -- C:\Program Files\Picasa2\PicasaMediaDetector.exe
PRC - [2007-09-15 10:29:10 | 000,102,400 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPStart.exe
PRC - [2007-09-05 14:09:54 | 000,727,592 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
PRC - [2007-09-04 14:52:08 | 000,095,536 | ---- | M] (OLYMPUS IMAGING CORP.) -- C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe
PRC - [2007-08-17 15:27:00 | 004,702,208 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2007-08-03 13:51:18 | 001,422,632 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
PRC - [2007-08-03 13:51:06 | 000,202,024 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
PRC - [2007-07-25 08:02:44 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2007-07-25 08:02:42 | 000,174,616 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2007-03-29 16:41:26 | 000,222,128 | ---- | M] (Macrovision Corporation) -- C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe
PRC - [2007-01-17 15:34:18 | 000,634,880 | ---- | M] (Motorola Inc.) -- C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2011-03-04 12:02:54 | 007,745,536 | ---- | M] () -- C:\Program Files\Common Files\LightScribe\QtGui4.dll
MOD - [2011-03-04 12:02:52 | 000,135,168 | ---- | M] () -- C:\Program Files\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll
MOD - [2011-03-04 12:02:50 | 002,121,728 | ---- | M] () -- C:\Program Files\Common Files\LightScribe\QtCore4.dll
MOD - [2010-12-07 10:17:08 | 000,102,400 | ---- | M] () -- C:\Program Files\blueconnect\BackgroundService\ModemListener.exe
MOD - [2007-09-30 20:34:52 | 000,345,384 | ---- | M] () -- C:\Program Files\HP\QuickPlay\Kernel\TV\CLTinyDB.dll
MOD - [2007-09-30 20:34:42 | 000,255,384 | ---- | M] () -- C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapEngine.dll
MOD - [2007-09-30 20:34:42 | 000,120,208 | ---- | M] () -- C:\Program Files\HP\QuickPlay\Kernel\TV\CLSchMgr.dll
MOD - [2007-09-30 20:34:42 | 000,038,184 | ---- | M] () -- C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvcps.dll
MOD - [2007-09-30 20:33:32 | 000,066,856 | ---- | M] () -- C:\Program Files\HP\QuickPlay\Kernel\common\MCEMediaStatus.dll
MOD - [2007-09-05 14:03:06 | 000,126,976 | ---- | M] () -- C:\Program Files\WIDCOMM\Bluetooth Software\BTKeyInd.dll
MOD - [2007-09-05 13:52:04 | 000,389,120 | ---- | M] () -- C:\Windows\System32\btwhidcs.dll
MOD - [2007-05-22 11:59:22 | 000,128,512 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2007-03-13 12:28:36 | 000,823,296 | ---- | M] () -- C:\Program Files\Common Files\Nero\Lib\log4cxx.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2011-08-04 06:18:43 | 000,126,400 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Norton Internet Security\Engine\17.9.0.12\ccSvcHst.exe -- (NIS)
SRV - [2011-03-29 15:33:08 | 000,598,312 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2011-02-28 19:44:14 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011-02-25 11:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2010-07-23 09:45:26 | 000,045,056 | ---- | M] () [Auto | Running] -- C:\Program Files\blueconnect\BackgroundService\ServiceManager.exe -- (Modem Device Helper)
SRV - [2009-12-01 14:37:48 | 000,322,624 | ---- | M] (DigitalPersona, Inc.) [Auto | Running] -- C:\Program Files\DigitalPersona\Bin\DpHostW.exe -- (DpHost)
SRV - [2008-08-29 15:20:56 | 000,935,208 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe -- (Nero BackItUp Scheduler 4.0)
SRV - [2007-07-25 08:02:44 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel(R)
SRV - [2007-03-05 11:30:06 | 000,110,592 | ---- | M] (Hewlett-Packard Development Company, L.P.) [On_Demand | Stopped] -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe -- (Com4Qlb)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.6.0.32\Definitions\VirusDefs\20120422.006\NAVEX15.SYS -- (NAVEX15)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.6.0.32\Definitions\VirusDefs\20120422.006\NAVENG.SYS -- (NAVENG)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)
DRV - File not found [Kernel | On_Demand | Unknown] --  -- (.afd)
DRV - [2012-04-03 01:38:08 | 000,821,880 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.6.0.32\Definitions\BASHDefs\20120413.001\BHDrvx86.sys -- (BHDrvx86)
DRV - [2012-03-06 17:04:10 | 000,368,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.6.0.32\Definitions\IPSDefs\20120420.001\IDSvix86.sys -- (IDSVix86)
DRV - [2012-02-04 10:15:49 | 000,374,392 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2012-02-04 10:15:49 | 000,106,104 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2011-08-22 04:53:36 | 000,340,088 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NIS\1109000.00C\symtdiv.sys -- (SYMTDIv)
DRV - [2011-08-22 04:53:35 | 000,173,176 | ---- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\NIS\1109000.00C\symefa.sys -- (SymEFA)
DRV - [2011-08-04 06:19:30 | 000,485,512 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NIS\1109000.00C\cchpx86.sys -- (ccHP)
DRV - [2010-07-23 09:45:28 | 000,105,344 | ---- | M] (TCT International Mobile Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\jrdusbser.sys -- (jrdusbser)
DRV - [2010-07-05 13:12:35 | 000,124,976 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2010-04-29 07:03:51 | 000,116,784 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NIS\1109000.00C\ironx86.sys -- (SymIRON)
DRV - [2010-04-22 04:29:50 | 000,325,680 | ---- | M] (Symantec Corporation) [File_System | System | Stopped] -- C:\Windows\System32\drivers\NIS\1109000.00C\srtsp.sys -- (SRTSP)
DRV - [2010-04-22 04:29:50 | 000,043,696 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\NIS\1109000.00C\srtspx.sys -- (SRTSPX) Symantec Real Time Storage Protection (PEL)
DRV - [2010-02-04 03:40:47 | 000,328,752 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\NIS\1109000.00C\symds.sys -- (SymDS)
DRV - [2009-10-03 06:02:06 | 009,905,096 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2008-07-24 12:03:56 | 000,101,760 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2008-01-19 07:53:28 | 000,050,048 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mstape.sys -- (MSTAPE)
DRV - [2008-01-19 07:53:26 | 000,014,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\avcstrm.sys -- (AVCSTRM)
DRV - [2007-09-18 01:17:36 | 000,098,816 | ---- | M] (Realtek Corporation                                            ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2007-08-28 16:47:36 | 000,146,560 | ---- | M] (AuthenTec, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atswpdrv.sys -- (ATSWPDRV) AuthenTec TruePrint USB Driver (SwipeSensor)
DRV - [2007-07-11 11:30:22 | 000,007,168 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HpqRemHid.sys -- (HpqRemHid)
DRV - [2007-06-28 17:09:56 | 002,222,080 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw4v32.sys -- (NETw4v32) Sterownik karty Intel(R)
DRV - [2007-06-18 18:12:04 | 000,016,768 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HpqKbFiltr.sys -- (HpqKbFiltr)
DRV - [2007-03-21 23:02:04 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2007-02-24 15:42:22 | 000,039,936 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2007-01-23 17:40:20 | 000,042,496 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2007-01-17 15:38:52 | 000,983,936 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\smserial.sys -- (smserial)
DRV - [2006-11-02 17:51:58 | 000,013,560 | ---- | M] (Cyberlink Corp.) [Kernel | Auto | Running] -- C:\Program Files\CyberLink\PowerDVD\000.fcl -- ({95808DC4-FA4A-4c74-92FE-5B863F82066B})
DRV - [2006-11-02 09:30:54 | 001,781,760 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NETw3v32.sys -- (NETw3v32) Sterownik karty Intel(R)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=pl_pl&c=81&bd=Pavilion&pf=laptop
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=pl_pl&c=81&bd=Pavilion&pf=laptop
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.pl/
IE - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
IE - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000\..\SearchScopes\{105E99FF-8B9A-4492-B155-06194B9056D2}: "URL" = http://www.bing.com/search?FORM=WLETDF&PC=WLEM&q={searchTerms}&src=IE-SearchBox
IE - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=NRO&o=&src=crm&q={searchTerms}&locale=
IE - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7SKPB_enPL267
IE - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Picasa2\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\heniek\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\heniek\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.6.0.32\IPSFFPlgn\ [2011-07-20 08:11:52 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.6.0.32\coFFPlgn_2010_9_0_6 [2012-04-29 08:59:15 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\otis@digitalpersona.com: C:\Program Files\DigitalPersona\Bin\FirefoxExt\ [2012-01-26 12:10:52 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\otis@digitalpersona.com: C:\Program Files\DigitalPersona\Bin\firefoxext [2012-01-26 12:10:52 | 000,000,000 | ---D | M]
 
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7SKPB_enPL267
CHR - default_search_provider: suggest_url = 
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\heniek\AppData\Local\Google\Chrome\Application\18.0.1025.162\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\heniek\AppData\Local\Google\Chrome\Application\18.0.1025.162\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\heniek\AppData\Local\Google\Chrome\Application\18.0.1025.162\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\heniek\AppData\Local\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.290.11 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U29 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: QuickTime Plug-in 7.1.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.1.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.1.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.1.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.1.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.1.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.1.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files\Microsoft\Office Live\npOLW.dll
CHR - plugin: Picasa (Enabled) = C:\Program Files\Picasa2\npPicasa3.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: YouTube = C:\Users\heniek\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Szukaj w Google = C:\Users\heniek\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Gmail = C:\Users\heniek\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
Hosts file not found
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (DigitalPersona Personal Extension) - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files\DigitalPersona\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.)
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\17.9.0.12\coieplg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\17.9.0.12\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (Easy-WebPrint) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll ()
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\17.9.0.12\coieplg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Nero Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\17.9.0.12\coieplg.dll (Symantec Corporation)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [DataCardMonitor] C:\Program Files\blueconnect\DataCardMonitor.exe (Huawei Technologies Co., Ltd.)
O4 - HKLM..\Run: [DpAgent] C:\Program Files\DigitalPersona\Bin\DpAgent.exe (DigitalPersona, Inc.)
O4 - HKLM..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE (CANON INC.)
O4 - HKLM..\Run: [ERA_SEPANG ModemListener] C:\Program Files\blueconnect\BackgroundService\ModemListener.exe ()
O4 - HKLM..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe (Hewlett-Packard)
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4 - HKLM..\Run: [LanguageShortcut] C:\Program Files\CyberLink\PowerDVD\Language\Language.exe ()
O4 - HKLM..\Run: [NBAgent] C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe (Nero AG)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [OM2_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe (OLYMPUS IMAGING CORP.)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe (Motorola Inc.)
O4 - HKLM..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe (Synaptics, Inc.)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe (Nero AG)
O4 - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000..\Run: [ISUSPM] C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe (Macrovision Corporation)
O4 - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000..\Run: [OM2_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe (OLYMPUS IMAGING CORP.)
O4 - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (Google Inc.)
O4 - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000..\Run: [Xdpjpg] C:\Users\heniek\AppData\Roaming\Xdpjpg.exe File not found
O4 - Startup: C:\Users\heniek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O7 - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\1045\OFFICE11\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Easy-WebPrint Add To Print List - C:\Program Files\Canon\Easy-WebPrint\Resource.dll ()
O8 - Extra context menu item: Easy-WebPrint High Speed Print - C:\Program Files\Canon\Easy-WebPrint\Resource.dll ()
O8 - Extra context menu item: Easy-WebPrint Preview - C:\Program Files\Canon\Easy-WebPrint\Resource.dll ()
O8 - Extra context menu item: Easy-WebPrint Print - C:\Program Files\Canon\Easy-WebPrint\Resource.dll ()
O8 - Extra context menu item: Wyślij obraz do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Wyślij stronę do urządzenia &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 217.173.193.3 217.173.193.11
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D67659CC-1E3D-4C8E-82C4-470F7D197C55}: DhcpNameServer = 217.173.193.3 217.173.193.11
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DC27B183-BF8D-4CE2-8C72-CAEDCC0CD4D8}: DhcpNameServer = 217.173.193.3 217.173.193.11
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: System - (C:\windows\S-1-5-21-6462731085-6355100801-162910176-2844\rundll.exe) - C:\Windows\S-1-5-21-6462731085-6355100801-162910176-2844\rundll.exe ()
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000 Winlogon: Shell - (C:\windows\S-1-5-21-6462731085-6355100801-162910176-2844\rundll.exe) - C:\Windows\S-1-5-21-6462731085-6355100801-162910176-2844\rundll.exe ()
O20 - HKU\S-1-5-21-3411834632-1152501596-1357024122-1000 Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\heniek\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\heniek\AppData\Roaming\Microsoft\Windows Photo Gallery\Tapeta z Galerii fotografii systemu Windows.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006-09-18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2005-09-11 17:18:54 | 000,000,340 | -HS- | M] () - E:\AUTOMODE -- [ NTFS ]
O32 - AutoRun File - [2006-12-04 22:00:00 | 000,000,043 | ---- | M] () - G:\autorun.inf -- [ FAT32 ]
O33 - MountPoints2\{1e572098-240b-11de-8144-001e37a768ea}\Shell - "" = AutoRun
O33 - MountPoints2\{1e572098-240b-11de-8144-001e37a768ea}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\{23ace344-bfc4-11df-9d4c-001e37a768ea}\Shell - "" = AutoRun
O33 - MountPoints2\{23ace344-bfc4-11df-9d4c-001e37a768ea}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{263e9f81-1f8f-11de-8a3f-001e37a768ea}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe
O33 - MountPoints2\{4a817017-f5ef-11dc-9d32-001e681703b8}\Shell - "" = AutoRun
O33 - MountPoints2\{4a817017-f5ef-11dc-9d32-001e681703b8}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\{6ae516c2-e47f-11dc-bf14-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{6ae516c2-e47f-11dc-bf14-806e6f6e6963}\Shell\AutoRun\command - "" = F:\setup.exe
O33 - MountPoints2\{a4b595a1-fdbe-11dd-b668-001e681703b8}\Shell\AutoRun\command - "" = H:\WebarooPortable\WebarooPortable.exe
O33 - MountPoints2\{b2e95eec-7814-11e0-9c7e-001e37a768ea}\Shell - "" = AutoRun
O33 - MountPoints2\{b2e95eec-7814-11e0-9c7e-001e37a768ea}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{b2e95eed-7814-11e0-9c7e-001e37a768ea}\Shell - "" = AutoRun
O33 - MountPoints2\{b2e95eed-7814-11e0-9c7e-001e37a768ea}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{b2e95eee-7814-11e0-9c7e-001e37a768ea}\Shell - "" = AutoRun
O33 - MountPoints2\{b2e95eee-7814-11e0-9c7e-001e37a768ea}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{d14a41b6-7d65-11e0-8847-001e37a768ea}\Shell - "" = AutoRun
O33 - MountPoints2\{d14a41b6-7d65-11e0-8847-001e37a768ea}\Shell\AutoRun\command - "" = H:\autorun.exe
O33 - MountPoints2\{d7724683-43ee-11df-856c-001e37a768ea}\Shell - "" = AutoRun
O33 - MountPoints2\{d7724683-43ee-11df-856c-001e37a768ea}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{d77246ab-43ee-11df-856c-001e37a768ea}\Shell - "" = AutoRun
O33 - MountPoints2\{d77246ab-43ee-11df-856c-001e37a768ea}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{ec90fe77-bfd0-11df-a73c-001e37a768ea}\Shell - "" = AutoRun
O33 - MountPoints2\{ec90fe77-bfd0-11df-a73c-001e37a768ea}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012-04-29 09:01:40 | 000,595,968 | ---- | C] (OldTimer Tools) -- C:\Users\heniek\Desktop\otl.exe
[2012-04-29 09:00:53 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{2C9BC603-3DAC-42D2-9A92-13FC5BCC13C9}
[2012-04-29 08:58:21 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD
[2012-04-29 08:39:16 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{4D675DF5-F803-4A6D-B8B6-B6C14B5544E5}
[2012-04-29 07:02:36 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{2FA2E290-C15A-40D7-B95B-CCCDB845EE42}
[2012-04-29 06:18:38 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{70FD186B-4939-4C9D-8DDC-6AB0DE3739DB}
[2012-04-28 20:30:15 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{384EAE42-9F4E-4B32-8EDC-2901AB7882F5}
[2012-04-28 17:46:11 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{065C1F0B-71C9-41D6-9F0B-12B18C8CE2CF}
[2012-04-28 17:23:25 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{06D82F9B-17CB-4463-AECE-31921BABD4C0}
[2012-04-28 16:28:54 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{456BB5B4-9051-4F8C-A349-75D9B3C1DD42}
[2012-04-28 09:43:51 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{3FCB716F-6B12-4E28-9E52-B4A81B9BE69D}
[2012-04-28 09:27:41 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{790C0049-5B9F-4DD8-9BBC-ABBACD0647C8}
[2012-04-28 09:15:55 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{E845BAE5-9AAE-45B8-8020-9C78BA84608A}
[2012-04-28 08:49:11 | 000,000,000 | ---D | C] -- C:\Users\heniek\{20547f24-7bbc-4bd3-91d6-178aaf2be6dc}
[2012-04-28 08:39:55 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{F5ADF73E-123C-4A2E-88F7-C8B235C0759B}
[2012-04-28 08:24:19 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{FDE33120-CE24-4EF1-B7B7-4024430CC273}
[2012-04-28 08:14:50 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{51F9D7C3-41A9-407E-852E-F32B419118E8}
[2012-04-28 08:08:41 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{6D788FD0-3B8C-40BF-88AA-6608F919603E}
[2012-04-28 08:03:41 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{4D7DE043-9FF2-458F-8633-6DEF75B41C95}
[2012-04-28 07:44:07 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{4925DCE8-1881-496E-A53A-1BC332F34DBC}
[2012-04-28 07:37:52 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{19A36719-F5B8-4B6A-B311-2ECCFBE39AF3}
[2012-04-28 07:19:37 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{0435173E-EC33-40DE-B2D4-36671757C0CB}
[2012-04-28 07:06:46 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{3A23C15F-14D7-4B46-BA7F-FB85E8BE0402}
[2012-04-28 06:56:16 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{F61D28D4-F567-4EA1-922D-A321893E213D}
[2012-04-28 06:37:18 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{1A2FA5FE-9292-411C-BD18-79E8BD52E1E8}
[2012-04-27 23:59:43 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{4C7CD72F-6BE4-4722-801E-FAB5D2B0BD76}
[2012-04-27 23:51:25 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{DDB92336-E922-4339-8BBB-33671F725DAB}
[2012-04-27 23:42:36 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{939E1ED6-ACB4-4535-8099-E2D1A5877575}
[2012-04-27 23:30:25 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{A1E571A1-2C0B-4544-9DEC-9C8D1791FFCC}
[2012-04-27 23:19:09 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{7F3A418E-5A56-42FC-A859-D81F66C7AF4B}
[2012-04-27 23:05:19 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{08476B9F-D305-42ED-8FC6-2F6F47E1895A}
[2012-04-27 22:49:12 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{1FEB9AFE-871E-4EF6-A01D-4DFC75AF7817}
[2012-04-27 22:42:24 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{06B2AF3C-7B19-43C1-8372-AD355E90540E}
[2012-04-27 22:32:45 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{269198EC-28C4-44DE-9333-37BA0A89B31E}
[2012-04-27 22:15:36 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{5E11303D-02AF-441E-B858-06D4661CA988}
[2012-04-27 22:05:48 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{23FDDE57-B1AB-4866-896E-1972CD97B41A}
[2012-04-27 21:51:44 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{42FA0A40-7562-4507-974A-B2B589D44863}
[2012-04-27 21:31:21 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{A11C73B7-EDEA-4969-83D7-F60455C94E6D}
[2012-04-27 21:20:32 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{7AA6AA03-0DE8-4E2A-90F8-19D25DFDDBD2}
[2012-04-27 20:46:55 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{FBB557A1-00E2-4DC2-B1AC-741B3FF3A743}
[2012-04-27 20:38:44 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{7F1875EF-55CA-40D6-9168-8FCBFB874C2C}
[2012-04-27 20:27:50 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{2B18A9A0-0EAD-4701-BDA9-52EB8A83C629}
[2012-04-27 16:28:13 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2012-04-27 16:15:16 | 000,000,000 | -HSD | C] -- C:\found.002
[2012-04-24 07:09:39 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{17C2A350-ECB7-403A-AA29-34F15E03693E}
[2012-04-24 05:02:29 | 000,000,000 | ---D | C] -- C:\Windows\Symbols
[2012-04-23 12:20:28 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{BB5BB859-D66A-42A3-A28D-E6DF6DD56C50}
[2012-04-23 06:40:24 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{A2575917-86A2-4735-B89B-A8C94162404C}
[2012-04-23 06:40:08 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{E9A89541-CA2B-472E-ACE7-752E134E3A0B}
[2012-04-22 17:57:04 | 000,000,000 | RHSD | C] -- C:\Windows\S-1-5-21-6462731085-6355100801-162910176-2844
[2012-04-22 12:39:51 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{EF4C2E66-C3BC-48CB-B66D-92550CF5C554}
[2012-04-22 12:39:48 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{E2ABD475-AEB0-4203-8F0D-8FCE545F1350}
[2012-04-22 01:38:42 | 000,000,000 | RHSD | C] -- C:\Windows\S-1-5-21-1755944055-2336399344-447748009-7044
[2012-04-22 01:38:26 | 000,423,424 | ---- | C] (sterzo esiguo) -- C:\Users\heniek\AppData\Roaming\6CF2.exe
[2012-04-21 13:57:53 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{AA68D701-5A65-420C-BCC9-4C8C9FBE2635}
[2012-04-21 13:57:49 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{63629B4C-EDE8-4DC0-82CD-E28288359AD1}
[2012-04-21 13:45:56 | 000,000,000 | -HSD | C] -- C:\found.001
[2012-04-19 21:21:50 | 000,000,000 | RHSD | C] -- C:\Windows\S-1-5-21-1537100286-5424908965-435876984-4707
[2012-04-19 21:21:17 | 000,431,104 | ---- | C] (assoda aguzzi) -- C:\Users\heniek\AppData\Roaming\B9FE.exe
[2012-04-19 19:58:11 | 000,000,000 | RHSD | C] -- C:\Windows\S-1-5-21-0935491261-6139057495-362340529-9863
[2012-04-19 19:57:53 | 000,431,104 | ---- | C] (assoda aguzzi) -- C:\Users\heniek\AppData\Roaming\5C33.exe
[2012-04-19 19:56:55 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{7FD791F8-D6EB-4DD1-AD4A-4AD86BDA08F3}
[2012-04-19 19:56:43 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{A10CFAE3-5ECE-42EC-B7ED-42009CFAC9D9}
[2012-04-19 13:06:00 | 000,000,000 | ---D | C] -- C:\Users\heniek\Desktop\jszopinski@opole.uw.gov.pl
[2012-04-19 11:10:44 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{0F680437-6021-4D61-B9BA-9F58D7135EE1}
[2012-04-18 20:31:20 | 000,000,000 | ---D | C] -- C:\ProgramData\F4D55F3E000530220060FE25570F1C8B
[2012-04-18 18:55:28 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{98E78359-A897-4D3F-927F-E7F72DFE1562}
[2012-04-18 18:54:10 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{13911F1F-769F-4A58-9CE1-46A320E82023}
[2012-04-18 06:46:11 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{520E328A-5E59-4BE3-80FE-097473D94D85}
[2012-04-18 06:45:25 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{67096DE6-1252-48BD-A1D6-E1D481A57804}
[2012-04-17 13:48:05 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{2A5095E2-E6C4-44D1-9A41-90880FDB517C}
[2012-04-17 13:47:58 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{66F27F27-8031-40DA-AA4C-EBEDC4A7D3E1}
[2012-04-17 00:21:34 | 000,000,000 | RHSD | C] -- C:\Windows\S-1-5-21-9811259353-6980424918-730704931-9414
[2012-04-17 00:20:43 | 000,000,000 | RHSD | C] -- C:\Windows\S-1-5-21-4702540049-5165057323-159133825-6126
[2012-04-16 15:37:33 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{EB0116B8-C3C0-4C9A-B4B3-14CBDF305482}
[2012-04-16 15:37:25 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{4AEE7CB1-33DF-4B0F-A2CB-5D71C541AD0F}
[2012-04-14 11:17:05 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{ACF57BCD-2E5C-46AA-9B2A-703150B8361C}
[2012-04-14 11:17:03 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{54F31895-D2BB-4E6F-907F-FE0F04A0C5B8}
[2012-04-13 08:05:19 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{C4803BDE-6812-482E-A361-CB6E2D18B216}
[2012-04-13 08:05:02 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{234296DB-EA5B-49EC-98F7-82A0604A8DE6}
[2012-04-13 07:46:24 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{7D7E647E-5079-47A8-B44D-DD179AB0D4B1}
[2012-04-13 07:46:21 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{87C0DF9E-D129-4B66-AD47-A04CDE3630E6}
[2012-04-13 02:40:54 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2012-04-13 02:40:52 | 001,799,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2012-04-13 02:40:51 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2012-04-13 02:40:51 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2012-04-13 02:40:50 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2012-04-13 02:40:50 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2012-04-13 02:37:16 | 003,602,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2012-04-13 02:37:16 | 003,550,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2012-04-07 12:05:42 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{90F26467-0A85-4D3B-912D-AE62B0B1C3F4}
[2012-04-07 12:05:37 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{53FC568C-770E-442B-939A-A8357D6E64E1}
[2012-04-07 11:14:31 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{B4C11E8F-A02D-453D-BD56-02134B19F12A}
[2012-04-07 11:14:08 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{CE45542B-DDBA-4A3A-8130-9132DCDBEEA1}
[2012-03-31 20:46:20 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{68E1A980-26C9-4A8A-B294-2A619548D9BE}
[2012-03-30 19:52:44 | 000,000,000 | ---D | C] -- C:\Users\heniek\AppData\Local\{BA6E90AD-8FBC-4012-8680-ACCCDA65080D}
[2 C:\Users\heniek\Desktop\Documents\*.tmp files -> C:\Users\heniek\Desktop\Documents\*.tmp -> ]
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012-04-29 09:06:10 | 000,001,036 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012-04-29 09:01:13 | 000,001,062 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3411834632-1152501596-1357024122-1000UA.job
[2012-04-29 08:58:47 | 000,000,163 | ---- | M] () -- C:\Users\Public\Documents\hpqp.ini
[2012-04-29 08:58:02 | 000,031,966 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2012-04-29 08:58:02 | 000,031,966 | ---- | M] () -- C:\ProgramData\nvModes.001
[2012-04-29 08:58:02 | 000,001,032 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012-04-29 08:57:34 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012-04-29 08:57:34 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012-04-29 08:57:30 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012-04-29 08:57:26 | 2145,837,056 | -HS- | M] () -- C:\hiberfil.sys
[2012-04-29 08:52:12 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\heniek\Desktop\otl.exe
[2012-04-29 08:48:45 | 234,883,221 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012-04-29 08:40:05 | 000,001,905 | ---- | M] () -- C:\Windows\diagwrn.xml
[2012-04-29 08:40:05 | 000,001,905 | ---- | M] () -- C:\Windows\diagerr.xml
[2012-04-29 06:59:35 | 000,001,356 | ---- | M] () -- C:\Users\heniek\AppData\Local\d3d9caps.dat
[2012-04-29 06:33:46 | 000,054,156 | -H-- | M] () -- C:\Windows\QTFont.qfn
[2012-04-29 06:18:35 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini
[2012-04-28 23:26:08 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2012-04-28 23:01:00 | 000,001,010 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3411834632-1152501596-1357024122-1000Core.job
[2012-04-28 00:00:58 | 000,000,372 | ---- | M] () -- C:\Windows\tasks\NeroLiveEpgUpdate-heniek-TVP_heniek.job
[2012-04-27 23:41:29 | 000,000,368 | ---- | M] () -- C:\Windows\tasks\heniek NBAgent 5 4.job
[2012-04-24 07:26:51 | 000,052,224 | ---- | M] () -- C:\Windows\System32\umstartup.etl
[2012-04-24 05:36:46 | 000,007,680 | ---- | M] () -- C:\Users\heniek\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012-04-23 08:34:04 | 000,196,608 | ---- | M] () -- C:\Windows\System32\Ikeext.etl
[2012-04-22 17:56:56 | 000,163,840 | ---- | M] () -- C:\Users\heniek\AppData\Roaming\B31E.exe
[2012-04-22 01:38:51 | 000,167,936 | ---- | M] () -- C:\Users\heniek\AppData\Roaming\CED1.exe
[2012-04-22 01:38:26 | 000,423,424 | ---- | M] (sterzo esiguo) -- C:\Users\heniek\AppData\Roaming\6CF2.exe
[2012-04-21 06:49:30 | 000,002,651 | ---- | M] () -- C:\Users\heniek\Desktop\Microsoft Office Word 2003.lnk
[2012-04-19 21:21:18 | 000,431,104 | ---- | M] (assoda aguzzi) -- C:\Users\heniek\AppData\Roaming\B9FE.exe
[2012-04-19 19:57:53 | 000,431,104 | ---- | M] (assoda aguzzi) -- C:\Users\heniek\AppData\Roaming\5C33.exe
[2012-04-17 00:21:28 | 000,159,744 | ---- | M] () -- C:\Users\heniek\AppData\Roaming\1262.exe
[2012-04-17 00:20:34 | 000,159,744 | ---- | M] () -- C:\Users\heniek\AppData\Roaming\3F2B.exe
[2012-04-13 21:06:52 | 000,002,049 | ---- | M] () -- C:\Users\heniek\Desktop\Google Chrome.lnk
[2012-04-07 15:09:13 | 000,002,371 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2 C:\Users\heniek\Desktop\Documents\*.tmp files -> C:\Users\heniek\Desktop\Documents\*.tmp -> ]
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012-04-29 08:57:26 | 2145,837,056 | -HS- | C] () -- C:\hiberfil.sys
[2012-04-28 20:31:04 | 000,001,905 | ---- | C] () -- C:\Windows\diagwrn.xml
[2012-04-28 20:31:04 | 000,001,905 | ---- | C] () -- C:\Windows\diagerr.xml
[2012-04-27 20:24:07 | 000,001,172 | ---- | C] () -- C:\Users\heniek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
[2012-04-27 20:24:07 | 000,000,799 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BTTray.lnk
[2012-04-23 11:41:25 | 000,000,368 | ---- | C] () -- C:\Windows\tasks\heniek NBAgent 5 4.job
[2012-04-22 17:56:56 | 000,163,840 | ---- | C] () -- C:\Users\heniek\AppData\Roaming\B31E.exe
[2012-04-22 01:38:51 | 000,167,936 | ---- | C] () -- C:\Users\heniek\AppData\Roaming\CED1.exe
[2012-04-17 00:21:28 | 000,159,744 | ---- | C] () -- C:\Users\heniek\AppData\Roaming\1262.exe
[2012-04-17 00:20:34 | 000,159,744 | ---- | C] () -- C:\Users\heniek\AppData\Roaming\3F2B.exe
[2010-07-05 19:20:50 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2010-07-05 19:20:50 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2009-11-12 10:41:04 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\DigitalPersona
[2009-11-12 10:41:04 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\DigitalPersona
[2008-08-11 16:15:10 | 000,000,000 | ---D | M] -- C:\Users\heniek\AppData\Roaming\CD-LabelPrint
[2008-02-26 17:51:47 | 000,000,000 | ---D | M] -- C:\Users\heniek\AppData\Roaming\DigitalPersona
[2011-03-25 16:32:41 | 000,000,000 | ---D | M] -- C:\Users\heniek\AppData\Roaming\GHISLER
[2008-06-23 20:38:40 | 000,000,000 | ---D | M] -- C:\Users\heniek\AppData\Roaming\Opera
[2008-02-26 21:48:58 | 000,000,000 | ---D | M] -- C:\Users\heniek\AppData\Roaming\Template
[2011-03-12 19:50:44 | 000,000,000 | ---D | M] -- C:\Users\heniek\AppData\Roaming\Tific
[2012-04-27 23:41:29 | 000,000,368 | ---- | M] () -- C:\Windows\Tasks\heniek NBAgent 5 4.job
[2012-04-28 23:26:11 | 000,032,610 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========[/color]
[C:\Windows\$NtUninstallKB62280$] -> Error: Cannot create file handle -> Unknown point type

< End of report >