OTL logfile created on: 2012-06-06 20:10:18 - Run 2 OTL by OldTimer - Version 3.2.46.1 Folder = D:\doctor\OTL 5-6-12 Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,00 Gb Total Physical Memory | 2,58 Gb Available Physical Memory | 86,14% Memory free 4,97 Gb Paging File | 4,62 Gb Available in Paging File | 92,94% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 39,09 Gb Total Space | 1,34 Gb Free Space | 3,42% Space Free | Partition Type: NTFS Drive D: | 881,73 Mb Total Space | 91,30 Mb Free Space | 10,35% Space Free | Partition Type: FAT Drive E: | 48,80 Gb Total Space | 0,26 Gb Free Space | 0,53% Space Free | Partition Type: NTFS Drive F: | 48,83 Gb Total Space | 1,85 Gb Free Space | 3,79% Space Free | Partition Type: NTFS Drive G: | 48,83 Gb Total Space | 2,18 Gb Free Space | 4,47% Space Free | Partition Type: NTFS Drive H: | 1,95 Gb Total Space | 1,95 Gb Free Space | 99,96% Space Free | Partition Type: FAT Drive I: | 1,95 Gb Total Space | 1,86 Gb Free Space | 95,39% Space Free | Partition Type: FAT Drive J: | 43,42 Gb Total Space | 0,42 Gb Free Space | 0,96% Space Free | Partition Type: NTFS Drive K: | 6,85 Gb Total Space | 1,18 Gb Free Space | 17,27% Space Free | Partition Type: NTFS Drive L: | 39,06 Gb Total Space | 0,43 Gb Free Space | 1,10% Space Free | Partition Type: NTFS Drive M: | 32,18 Gb Total Space | 1,56 Gb Free Space | 4,84% Space Free | Partition Type: NTFS Drive N: | 10,26 Gb Total Space | 0,60 Gb Free Space | 5,84% Space Free | Partition Type: NTFS Drive O: | 10,76 Gb Total Space | 0,28 Gb Free Space | 2,59% Space Free | Partition Type: NTFS Drive P: | 2,37 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: KOMP | User Name: MiEcHo | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2012-06-05 08:18:46 | 000,596,480 | ---- | M] (OldTimer Tools) -- D:\doctor\OTL 5-6-12\OTL.exe PRC - [2012-04-24 17:32:38 | 001,716,784 | ---- | M] (Soluto) -- C:\Program Files\Soluto\Soluto.exe PRC - [2012-04-24 17:32:38 | 000,584,224 | ---- | M] (Soluto) -- C:\Program Files\Soluto\SolutoService.exe PRC - [2012-03-19 11:28:52 | 000,043,072 | ---- | M] (ArcSoft, Inc.) -- C:\Program Files\Common Files\ArcSoft\esinter\Bin\eservutil.exe PRC - [2011-01-13 10:47:33 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe PRC - [2010-10-18 01:32:24 | 000,041,051 | ---- | M] (Apache Software Foundation) -- C:\Apache\bin\ApacheMonitor.exe PRC - [2010-10-04 00:16:26 | 000,063,488 | ---- | M] (Nalpeiron Ltd.) -- C:\WINDOWS\system32\nlssrv32.exe PRC - [2009-06-25 15:12:42 | 001,414,144 | ---- | M] (Nokia) -- C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe PRC - [2008-04-14 22:51:22 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\inetsrv\inetinfo.exe PRC - [2008-04-14 22:51:18 | 001,035,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2005-02-02 07:51:00 | 000,826,916 | ---- | M] (C. Ghisler & Co.) -- C:\totalcmd\TOTALCMD.EXE [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2012-04-29 01:00:49 | 000,750,080 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\SolutoCleanup\487495d099bb42578b521e94ff34df1d\SolutoCleanup.ni.dll MOD - [2012-04-29 01:00:47 | 000,791,552 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGDataAggregation\a7ec13c9ded3e379161397b6c475bcd6\PCGDataAggregation.ni.dll MOD - [2012-04-29 01:00:44 | 000,329,216 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGBootVisualizingC#\f3ebfbf79408869c0600bcf1c8cf8a3f\PCGBootVisualizingCore.ni.dll MOD - [2012-04-29 01:00:42 | 000,050,688 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Interop.NetFwTypeLib\143de0996266f2057541647c79abc733\Interop.NetFwTypeLib.ni.dll MOD - [2012-04-29 01:00:41 | 000,357,376 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGCatalogItemFootp#\40c9abd9d62f0554793fefa3afbd992c\PCGCatalogItemFootprint.ni.dll MOD - [2012-04-29 01:00:38 | 000,886,784 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGBrowsersProbe\a70b7c5ef26e6d2bac9fb09be3b5a87a\PCGBrowsersProbe.ni.dll MOD - [2012-04-29 01:00:34 | 000,345,088 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGSAProbe\86a41516c024e0d53204979b7a6dfd27\PCGSAProbe.ni.dll MOD - [2012-04-29 01:00:32 | 000,111,616 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGCatalogItemCache\4c67b2c41bc4d85798b03bb9c3272912\PCGCatalogItemCache.ni.dll MOD - [2012-04-29 01:00:31 | 000,049,664 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGEntities\8a88594de2359c11c8457cb73d17770d\PCGEntities.ni.dll MOD - [2012-04-29 01:00:29 | 000,888,832 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGClientCommunicat#\183f98108c0be490be6adda39ed2da6c\PCGClientCommunication.ni.dll MOD - [2012-04-29 01:00:27 | 000,129,024 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\SolutoUpdateService\5a79d07c1d99f52394eea236974ec45b\SolutoUpdateService.ni.dll MOD - [2012-04-29 01:00:25 | 000,150,016 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGUpgrader\886101c6926acfc768f85d3935d11f73\PCGUpgrader.ni.dll MOD - [2012-04-29 01:00:24 | 002,080,256 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\SolutoService\179859514eb9f486d796c98cd50fdabd\SolutoService.ni.exe MOD - [2012-04-29 01:00:15 | 000,645,120 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGPostBootResources\0304b8c839cc17c0d8a36fd433de2558\PCGPostBootResources.ni.dll MOD - [2012-04-29 01:00:15 | 000,061,440 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGHIDProbe\ca8b200eafabfb23c5ce278412a8800d\PCGHIDProbe.ni.dll MOD - [2012-04-29 01:00:14 | 000,044,032 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGRSPProbe\a5b1a83adcfb35d2c2973a7d78af6fed\PCGRSPProbe.ni.dll MOD - [2012-04-29 01:00:13 | 002,327,552 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Community.CsharpSql#\97e02e9cfe050c02dd8f25bb3cf4d20b\Community.CsharpSqlite.ni.dll MOD - [2012-04-29 01:00:11 | 000,202,240 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGWuInfo\206a8c5a109cb7712169e738c712bc1d\PCGWuInfo.ni.dll MOD - [2012-04-29 01:00:10 | 000,100,864 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Interop.IWshRuntime#\fb4a2eb4e6734597ceb50b4a14984352\Interop.IWshRuntimeLibrary.ni.dll MOD - [2012-04-29 01:00:10 | 000,067,584 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGUsersCenter\f7c2ed10e505d1802bedb3a843d9b83d\PCGUsersCenter.ni.dll MOD - [2012-04-29 01:00:09 | 000,177,152 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGAppControlPlugin#\d13a32bfd4a42c45db4b05b754ead8ed\PCGAppControlPluginLoader.ni.dll MOD - [2012-04-29 01:00:08 | 004,219,392 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGClientCommon\4d74a33e9a4eab8adc92f361bbab2c08\PCGClientCommon.ni.dll MOD - [2012-04-29 01:00:00 | 000,197,632 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGBootVisualizingC#\32e5eaf620c28bac48acc7b82c4ee2c1\PCGBootVisualizingCommon.ni.dll MOD - [2012-04-29 00:59:57 | 000,065,024 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGConfiguration\687db156a4664ff629a9e98dfd2aa59a\PCGConfiguration.ni.dll MOD - [2012-04-29 00:59:56 | 000,766,976 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.SqlServ#\25ecb0a90baad165b92c81c221a8f852\System.Data.SqlServerCe.ni.dll MOD - [2012-04-29 00:59:52 | 003,942,400 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGDatabase\d29ffbe9206063511515254b5714e4e7\PCGDatabase.ni.dll MOD - [2012-04-29 00:59:46 | 000,048,640 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGAzureEntityFrame#\f9d513637586b931a6403ffb51162fa5\PCGAzureEntityFramework.ni.dll MOD - [2012-04-29 00:59:45 | 001,356,800 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGAzureShared\e6e384569f066b6d49c54e728390fdb2\PCGAzureShared.ni.dll MOD - [2012-04-29 00:59:43 | 001,290,752 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGCommunication\eee4805cd5a63adb7ff6d08311ad98c2\PCGCommunication.ni.dll MOD - [2012-04-29 00:59:40 | 000,194,048 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGDriverProbe\61eb063096b3ec712fbe09de3b6e235d\PCGDriverProbe.ni.dll MOD - [2012-04-29 00:59:38 | 002,845,696 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGPreCompiled\90418c5c9e35f2630e0b543765335411\PCGPreCompiled.ni.dll MOD - [2012-04-29 00:59:34 | 000,206,848 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGPrestoSerializer\ba59038fbedd2ca02909b57155a64e28\PCGPrestoSerializer.ni.dll MOD - [2012-04-29 00:59:33 | 000,596,480 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Ionic.Zip.Reduced\0e0583b441deac3d3f72ef436a67d441\Ionic.Zip.Reduced.ni.dll MOD - [2012-04-29 00:59:32 | 001,554,432 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Newtonsoft.Json.Net#\244bfd920009894648d4c90ce07ccc95\Newtonsoft.Json.Net35.ni.dll MOD - [2012-04-29 00:59:27 | 002,665,984 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\PCGFramework\cdcdee8fc21727f86508579db2f83c61\PCGFramework.ni.dll MOD - [2012-04-29 00:59:20 | 002,019,840 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Soluto\abf66b80467d44211d6eff52437c2141\Soluto.ni.exe MOD - [2012-04-24 17:13:38 | 000,071,216 | ---- | M] () -- C:\Program Files\Soluto\PCGDllExportInspector.dll MOD - [2011-08-31 08:55:51 | 000,094,208 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\ace861fe8dbf146c3e449abaa7691e9f\System.ComponentModel.DataAnnotations.ni.dll MOD - [2011-08-31 08:54:07 | 000,400,896 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\946eefb99bc116ee68e0e7c69a5a8a5c\System.Xml.Linq.ni.dll MOD - [2011-08-31 08:54:07 | 000,256,000 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\ca07e9cf488af1290d2340d682574a24\SMDiagnostics.ni.dll MOD - [2011-08-31 08:54:06 | 000,939,008 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\1defd94e1662a4478ccf2cd0b1b4e6a6\System.Data.Services.Client.ni.dll MOD - [2011-08-31 08:53:17 | 002,345,472 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\dece01bd9e9c32e47630fdfc78d3bd32\System.Runtime.Serialization.ni.dll MOD - [2011-08-31 08:52:35 | 000,627,712 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\75f452279422a7898e840ee5768c9d2e\System.EnterpriseServices.ni.dll MOD - [2011-08-31 08:52:33 | 000,627,200 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Transactions\846dd505f97805f00999ee26aec9bf75\System.Transactions.ni.dll MOD - [2011-08-31 08:52:15 | 000,212,992 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\70a1400affdc775d7c7398e036359286\System.ServiceProcess.ni.dll MOD - [2011-08-31 08:52:02 | 000,971,264 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\77df2cd21a5b85a1605b335aa9ad9d44\System.Configuration.ni.dll MOD - [2011-08-31 06:57:36 | 005,450,752 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\10154dcad2d62f226af2fd4211460a4b\System.Xml.ni.dll MOD - [2011-08-31 06:57:26 | 012,430,848 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d00cc387e462e4c3cdcd112b137cac87\System.Windows.Forms.ni.dll MOD - [2011-08-31 06:57:06 | 001,587,200 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\7ed09623172a292eaee51e2e3bcaf784\System.Drawing.ni.dll MOD - [2011-08-31 06:56:49 | 002,516,480 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\571af34939797a7c1cd05b0b925a45bf\System.Data.Linq.ni.dll MOD - [2011-08-31 06:56:40 | 006,616,576 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\db2d84e279807592a680ef4135e9fe9a\System.Data.ni.dll MOD - [2011-08-31 06:56:31 | 002,295,296 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Core\e54e013315849f5e34d8f2a8e7fdb450\System.Core.ni.dll MOD - [2011-08-31 06:55:01 | 007,950,848 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\e6c79e1d71b0c9000afd7e5e439b5c54\System.ni.dll MOD - [2011-08-31 06:53:53 | 002,933,248 | ---- | M] () -- C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll MOD - [2011-08-31 06:53:45 | 000,261,632 | ---- | M] () -- C:\WINDOWS\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll MOD - [2011-08-03 17:46:23 | 011,490,816 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\0309936a8e1672d39b9cf14463ce69f9\mscorlib.ni.dll MOD - [2011-06-24 22:56:36 | 000,087,328 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll MOD - [2011-06-24 22:56:14 | 001,241,888 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll MOD - [2011-05-10 16:37:48 | 000,488,448 | ---- | M] () -- C:\WINDOWS\system32\apdfprintmon.dll MOD - [2011-04-23 23:48:12 | 000,922,112 | ---- | M] () -- C:\Program Files\Alwil Software\Avast5\defs\11042301\algo.dll MOD - [2010-12-14 23:29:20 | 000,208,896 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.resources\2.0.0.0_pl_b77a5c561934e089\System.resources.dll MOD - [2010-12-14 23:29:19 | 000,344,064 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.Data.resources\2.0.0.0_pl_b77a5c561934e089\System.Data.resources.dll MOD - [2010-12-14 23:29:18 | 000,040,960 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.ServiceProcess.resources\2.0.0.0_pl_b03f5f7f11d50a3a\System.ServiceProcess.resources.dll MOD - [2008-08-12 11:16:16 | 002,023,424 | ---- | M] () -- C:\Program Files\Nokia\Nokia PC Suite 7\QtCore4.dll MOD - [2008-07-29 14:47:56 | 000,016,384 | ---- | M] () -- C:\Program Files\Nokia\Nokia PC Suite 7\imageformats\qsvg4.dll MOD - [2008-07-29 14:47:38 | 000,135,168 | ---- | M] () -- C:\Program Files\Nokia\Nokia PC Suite 7\imageformats\qjpeg4.dll MOD - [2008-07-29 14:11:18 | 000,253,952 | ---- | M] () -- C:\Program Files\Nokia\Nokia PC Suite 7\QtSvg4.dll MOD - [2008-07-29 14:01:12 | 007,331,840 | ---- | M] () -- C:\Program Files\Nokia\Nokia PC Suite 7\QtGUI4.dll MOD - [2008-07-29 13:50:26 | 000,364,544 | ---- | M] () -- C:\Program Files\Nokia\Nokia PC Suite 7\QtXml4.dll [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [Disabled | Stopped] -- C:\xampp\service.exe -- (XAMPP) SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ) SRV - File not found [Disabled | Stopped] -- C:\Program Files\Apache Group\Apache\Apache.exe -- (Apache) SRV - [2012-05-04 23:29:36 | 000,257,696 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012-04-26 11:28:38 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012-04-24 17:32:38 | 000,584,224 | ---- | M] (Soluto) [Auto | Running] -- C:\Program Files\Soluto\SolutoService.exe -- (SolutoService) SRV - [2012-03-19 11:28:52 | 000,043,072 | ---- | M] (ArcSoft, Inc.) [Auto | Running] -- C:\Program Files\Common Files\ArcSoft\esinter\Bin\eservutil.exe -- (ADExchange) SRV - [2011-12-09 19:06:12 | 002,983,808 | ---- | M] (TeamViewer GmbH) [On_Demand | Stopped] -- C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7) SRV - [2011-08-24 16:34:28 | 000,010,240 | ---- | M] (SeriousBit) [On_Demand | Stopped] -- C:\Program Files\NetBalancer\SeriousBit.NetBalancer.Service.exe -- (NetBalancer Windows Service) SRV - [2011-05-19 08:44:48 | 000,018,200 | ---- | M] () [On_Demand | Stopped] -- c:\Program Files\Ocster Backup\bin\backupService-ox.exe -- (ocster_backup) SRV - [2011-05-16 15:28:24 | 000,321,288 | ---- | M] (SXR Software) [On_Demand | Stopped] -- C:\Program Files\SXR Software\StatWin\ExecStat.exe -- (SW Administration Service) SRV - [2011-05-10 08:00:00 | 001,187,520 | ---- | M] (Southsoftware.com) [On_Demand | Stopped] -- C:\Program Files\Advanced Task Scheduler Basic\advscheduler_bscsvc.exe -- (advschedulerbsc) SRV - [2011-04-22 18:26:18 | 000,056,200 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [On_Demand | Stopped] -- C:\Program Files\EASEUS\Todo Backup\bin\Agent.exe -- (EASEUS Agent) SRV - [2011-03-31 18:20:34 | 008,146,944 | ---- | M] () [On_Demand | Stopped] -- c:\MySQL\bin\mysqld.exe -- (MySQL) SRV - [2011-01-13 10:47:33 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus) SRV - [2010-10-25 11:03:52 | 000,217,088 | ---- | M] (Teruten) [On_Demand | Stopped] -- C:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService) SRV - [2010-10-18 01:32:10 | 000,020,549 | ---- | M] (Apache Software Foundation) [On_Demand | Stopped] -- C:\Apache\bin\httpd.exe -- (Apache2.2) SRV - [2010-10-04 00:16:26 | 000,063,488 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\WINDOWS\system32\nlssrv32.exe -- (nlsX86cc) SRV - [2009-12-04 16:53:42 | 000,065,248 | ---- | M] (Greatis Software (c)) [Disabled | Stopped] -- C:\Program Files\Greatis\BootLog XP\BootLogService.exe -- (BootlogService) SRV - [2008-10-15 18:13:58 | 000,439,632 | ---- | M] (RealVNC Ltd.) [Disabled | Stopped] -- C:\Program Files\RealVNC\VNC4\winvnc4.exe -- (WinVNC4) SRV - [2008-07-29 19:16:38 | 000,132,096 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing) SRV - [2008-04-14 23:09:56 | 000,483,840 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\wzcsvc.dll -- (WZCSVC) SRV - [2008-04-14 22:51:46 | 000,075,264 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\tlntsvr.exe -- (TlntSvr) SRV - [2008-04-14 22:51:32 | 000,114,688 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\netdde.exe -- (NetDDEdsdm) SRV - [2008-04-14 22:51:32 | 000,114,688 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\netdde.exe -- (NetDDE) SRV - [2008-04-14 22:51:22 | 000,015,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\inetsrv\inetinfo.exe -- (W3SVC) SRV - [2008-04-14 22:51:22 | 000,015,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\inetsrv\inetinfo.exe -- (MSFtpsvc) SRV - [2008-04-14 22:51:22 | 000,015,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\inetsrv\inetinfo.exe -- (IISADMIN) SRV - [2008-04-14 22:51:08 | 000,033,280 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\clipsrv.exe -- (ClipSrv) SRV - [2008-04-14 22:51:08 | 000,005,632 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\cisvc.exe -- (CiSvc) SRV - [2008-04-14 22:51:00 | 000,080,896 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\wscsvc.dll -- (wscsvc) SRV - [2008-04-14 22:50:46 | 000,409,088 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\qmgr.dll -- (BITS) SRV - [2008-04-14 22:50:46 | 000,059,904 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\regsvc.dll -- (RemoteRegistry) SRV - [2008-04-14 22:50:46 | 000,038,400 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll -- (helpsvc) SRV - [2008-04-14 22:50:46 | 000,018,944 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\seclogon.dll -- (seclogon) SRV - [2008-04-14 22:50:40 | 000,033,792 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\msgsvc.dll -- (Messenger) SRV - [2008-04-14 22:50:36 | 000,053,248 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\mprdim.dll -- (RemoteAccess) SRV - [2008-04-14 22:50:34 | 000,330,752 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\ipnathlp.dll -- (SharedAccess) SRV - [2008-04-14 22:50:32 | 000,023,040 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\ersvc.dll -- (ERSvc) SRV - [2008-04-14 22:50:00 | 000,017,408 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\WINDOWS\system32\alrsvc.dll -- (Alerter) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME) DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP) DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump) DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc) DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt) DRV - File not found [Kernel | On_Demand | Running] -- C:\WINDOWS\TEMP\cpuz135\cpuz135_x32.sys -- (cpuz135) DRV - File not found [Kernel | System | Stopped] -- -- (Changer) DRV - [2012-04-24 17:13:24 | 000,051,144 | ---- | M] (Soluto LTD.) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\Soluto.sys -- (Soluto) DRV - [2012-02-02 17:13:44 | 000,057,112 | ---- | M] (Paragon Software Group) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\hotcore3.sys -- (hotcore3) DRV - [2011-12-19 15:12:00 | 000,104,752 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VBoxNetAdp.sys -- (VBoxNetAdp) DRV - [2011-12-19 15:11:58 | 000,158,512 | ---- | M] (Oracle Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\VBoxDrv.sys -- (VBoxDrv) DRV - [2011-12-19 15:11:58 | 000,116,016 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VBoxNetFlt.sys -- (VBoxNetFlt) DRV - [2011-12-19 15:11:58 | 000,091,440 | ---- | M] (Oracle Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\VBoxUSBMon.sys -- (VBoxUSBMon) DRV - [2011-06-02 07:47:22 | 000,136,808 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdm.sys -- (ssadmdm) DRV - [2011-06-02 07:47:22 | 000,121,064 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM) DRV - [2011-06-02 07:47:22 | 000,114,280 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadserd.sys -- (ssadserd) SAMSUNG Android USB Diagnostic Serial Port (WDM) DRV - [2011-06-02 07:47:22 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter) DRV - [2011-05-29 11:34:56 | 000,028,032 | ---- | M] (ITOS) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\ShredderDriver32.sys -- (ShredderVolumeDriver) DRV - [2011-05-18 18:11:14 | 000,031,016 | ---- | M] (SeriousBit) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nbdrv.sys -- (Nbdrv) DRV - [2011-04-22 18:26:12 | 000,035,720 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\EUBKMON.sys -- (EUBKMON) DRV - [2011-04-22 18:26:08 | 000,020,744 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\eufs.sys -- (EUFS) DRV - [2011-04-22 18:26:06 | 000,014,216 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\eudskacs.sys -- (EUDSKACS) DRV - [2011-04-22 18:26:04 | 000,030,600 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\eubakup.sys -- (EUBAKUP) DRV - [2011-04-22 18:26:02 | 000,187,528 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\eudisk.sys -- (EUDISK) DRV - [2011-03-24 10:57:54 | 000,013,192 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\epmntdrv.sys -- (epmntdrv) DRV - [2011-03-24 10:57:54 | 000,008,456 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\EuGdiDrv.sys -- (EuGdiDrv) DRV - [2011-03-16 19:00:46 | 000,140,848 | ---- | M] (IObit Information Technology) [File_System | Auto | Running] -- C:\Program Files\IObit\Protected Folder\pffilter.sys -- (PfFilter) DRV - [2011-01-13 10:41:16 | 000,294,608 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP) DRV - [2011-01-13 10:40:16 | 000,047,440 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi) DRV - [2011-01-13 10:40:04 | 000,100,176 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2) DRV - [2011-01-13 10:37:30 | 000,023,632 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (aswRdr) DRV - [2011-01-13 10:37:11 | 000,029,392 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4) DRV - [2011-01-13 10:37:09 | 000,017,744 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk) DRV - [2011-01-12 11:42:16 | 000,013,304 | ---- | M] (TeamViewer GmbH) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\TVMonitor.sys -- (MonitorFunction) DRV - [2011-01-12 11:42:12 | 000,025,088 | ---- | M] (TeamViewer GmbH) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\teamviewervpn.sys -- (teamviewervpn) DRV - [2010-12-21 07:55:02 | 000,030,312 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ssadadb.sys -- (androidusb) DRV - [2010-10-25 11:03:52 | 000,036,640 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk) DRV - [2010-07-16 02:45:44 | 000,035,088 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\npf.sys -- (npf) DRV - [2009-03-19 14:48:18 | 000,136,704 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdnsu.sys -- (nmwcdnsu) DRV - [2009-03-19 14:48:12 | 000,008,320 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdnsuc.sys -- (nmwcdnsuc) DRV - [2009-02-09 08:37:56 | 000,007,808 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt) DRV - [2009-02-09 08:37:48 | 000,007,808 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev) DRV - [2009-02-09 08:37:46 | 000,022,016 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc) DRV - [2009-02-09 08:37:46 | 000,017,664 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd) DRV - [2008-08-26 09:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008-04-14 22:04:08 | 000,073,472 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\sr.sys -- (sr) DRV - [2008-04-14 22:03:30 | 000,120,320 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\pcmcia.sys -- (Pcmcia) DRV - [2008-04-14 21:52:42 | 000,800,000 | ---- | M] (Microsoft Corp., Veritas Software) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\drivers\dmboot.sys -- (dmboot) DRV - [2008-04-14 00:26:08 | 000,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx) DRV - [2008-04-14 00:02:38 | 000,066,048 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\udfs.sys -- (Udfs) DRV - [2007-07-03 19:43:56 | 000,132,904 | ---- | M] (Ahead Software AG) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\imagesrv.sys -- (imagesrv) DRV - [2007-07-03 19:43:56 | 000,011,304 | ---- | M] (Ahead Software AG) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\imagedrv.sys -- (imagedrv) DRV - [2006-07-24 16:05:00 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen) DRV - [2006-04-07 18:06:38 | 000,038,496 | ---- | M] (OLYMPUS IMAGING CORP.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\VNUSB.sys -- (VNUSB) DRV - [2006-03-02 14:00:00 | 000,098,176 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\NBF.SYS -- (Nbf) DRV - [2006-03-02 14:00:00 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb) DRV - [2006-03-02 14:00:00 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx) DRV - [2006-03-02 14:00:00 | 000,013,952 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\cbidf2k.sys -- (cbidf2k) DRV - [2006-03-02 14:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\drivers\acpiec.sys -- (ACPIEC) DRV - [2005-11-14 03:26:34 | 000,009,728 | R--- | M] (Samsung Electronics, Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\magicpvt.sys -- (magicpvt) DRV - [2003-08-13 04:34:30 | 000,594,432 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2003-04-24 17:48:02 | 000,730,092 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) DRV - [2002-10-04 04:04:10 | 000,046,976 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\R8139n51.sys -- (rtl8139) DRV - [2002-09-20 10:19:58 | 000,163,328 | R--- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LVVIMULB.SYS -- (PID_0960_V) Logitech ClickSmart 420(PID_0960_V) DRV - [2002-09-20 10:15:44 | 000,010,382 | R--- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LVBULK.sys -- (LVBulk) DRV - [2002-09-16 18:14:32 | 000,004,228 | ---- | M] (PowerQuest Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\PQNTDRV.sys -- (PQNTDrv) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1275210071-2049760794-1547161642-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie IE - HKU\S-1-5-21-1275210071-2049760794-1547161642-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie IE - HKU\S-1-5-21-1275210071-2049760794-1547161642-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com IE - HKU\S-1-5-21-1275210071-2049760794-1547161642-1003\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKU\S-1-5-21-1275210071-2049760794-1547161642-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKU\S-1-5-21-1275210071-2049760794-1547161642-1003\..\SearchScopes,DefaultScope = {337751F0-778C-433A-BD02-A8DCB1733757} IE - HKU\S-1-5-21-1275210071-2049760794-1547161642-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC IE - HKU\S-1-5-21-1275210071-2049760794-1547161642-1003\..\SearchScopes\{337751F0-778C-433A-BD02-A8DCB1733757}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 IE - HKU\S-1-5-21-1275210071-2049760794-1547161642-1003\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={sear IE - HKU\S-1-5-21-1275210071-2049760794-1547161642-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1275210071-2049760794-1547161642-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.update: false FF - prefs.js..browser.startup.homepage: "about:sessionrestore|http://office.microsoft.com/pl-pl/word-help/dodawanie-tekstu-do-obiektu-rysunkowego-lub-obrazu-HP005189922.aspx|http://openoffice.pl/forum.php?a=tree&id=3526&NEO_Session=c54f09fbace2cce62592feb1411ae399|http://www.google.pl/search?hl=pl&client=firefox-a&hs=nFC&rls=org.mozilla:pl:official&sa=X&ei=hNLtTaKUBNHEswbJuNznAw&ved=0CBYQBSgA&q=znikanie+rysunk%C3%B3w+wstawionych+w+openoffice&spell=1&biw=1120&bih=601|http://www.google.pl/ig" FF - prefs.js..network.proxy.type: 0 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.10: C:\Program Files\VideoLAN\VLC\npvlc.dll (the VideoLAN Team) FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Documents and Settings\Mieszko\Ustawienia lokalne\Dane aplikacji\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\bkmrksync@nokia.com: C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\ [2012-05-11 10:50:44 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012-04-26 11:28:38 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011-11-20 00:46:37 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\CaptureSaver@goldgingko.com: C:\Program Files\CaptureSaver\Firefox [2011-05-19 18:51:43 | 000,000,000 | ---D | M] [2010-12-05 22:33:34 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Mieszko\Dane aplikacji\Mozilla\Extensions [2012-03-17 08:14:27 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Mieszko\Dane aplikacji\Mozilla\Firefox\Profiles\jn77rw2a.default\extensions [2010-12-05 23:08:28 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Mieszko\Dane aplikacji\Mozilla\Firefox\Profiles\jn77rw2a.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2011-02-04 11:09:22 | 000,000,000 | ---D | M] (PDF Download) -- C:\Documents and Settings\Mieszko\Dane aplikacji\Mozilla\Firefox\Profiles\jn77rw2a.default\extensions\{37E4D8EA-8BDA-4831-8EA1-89053939A250} [2011-09-06 09:03:55 | 000,000,000 | ---D | M] (FEBE) -- C:\Documents and Settings\Mieszko\Dane aplikacji\Mozilla\Firefox\Profiles\jn77rw2a.default\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2011-08-18 11:36:39 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Mieszko\Dane aplikacji\Mozilla\Firefox\Profiles\jn77rw2a.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2010-12-05 23:08:29 | 000,000,000 | ---D | M] (Tweak Network) -- C:\Documents and Settings\Mieszko\Dane aplikacji\Mozilla\Firefox\Profiles\jn77rw2a.default\extensions\{DAD0F81A-CF67-4eed-98D6-26F6E47274CA} [2012-06-05 10:17:02 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Mieszko\Dane aplikacji\Mozilla\Firefox\Profiles\kj4k2xa2.Mieszko\extensions [2012-03-30 08:44:04 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Documents and Settings\Mieszko\Dane aplikacji\Mozilla\Firefox\Profiles\kj4k2xa2.Mieszko\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2012-03-14 20:23:50 | 000,000,000 | ---D | M] (Ghostery) -- C:\Documents and Settings\Mieszko\Dane aplikacji\Mozilla\Firefox\Profiles\kj4k2xa2.Mieszko\extensions\firefox@ghostery.com [2012-03-06 17:01:07 | 000,000,000 | ---D | M] (Facebook Profile Viewer Extension) -- C:\Documents and Settings\Mieszko\Dane aplikacji\Mozilla\Firefox\Profiles\kj4k2xa2.Mieszko\extensions\jid0-g48YOJYcu6I9a8N0j2SE5vMy76Q@jetpack [2012-03-06 17:01:07 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Mieszko\Dane aplikacji\Mozilla\Firefox\Profiles\kj4k2xa2.Mieszko\extensions\jid0-g48YOJYcu6I9a8N0j2SE5vMy76Q@jetpack\resources\jid0-g48yojycu6i9a8n0j2se5vmy76q-at-jetpack-facebook-profile-viewer-extension-data [2012-03-06 17:01:07 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Mieszko\Dane aplikacji\Mozilla\Firefox\Profiles\kj4k2xa2.Mieszko\extensions\jid0-g48YOJYcu6I9a8N0j2SE5vMy76Q@jetpack\resources\jid0-g48yojycu6i9a8n0j2se5vmy76q-at-jetpack-facebook-profile-viewer-extension-lib [2012-01-07 11:30:29 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011-10-20 22:27:17 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2011-10-15 03:21:39 | 000,084,346 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\MIESZKO\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\JN77RW2A.DEFAULT\EXTENSIONS\{0545B830-F0AA-4D7E-8820-50A4629A56FE}.XPI [2011-10-13 21:45:54 | 000,345,301 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\MIESZKO\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\JN77RW2A.DEFAULT\EXTENSIONS\{19503E42-CA3C-4C27-B1E2-9CDB2170EE34}.XPI [2011-07-17 07:42:58 | 000,097,169 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\MIESZKO\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\JN77RW2A.DEFAULT\EXTENSIONS\{3D7EB24F-2740-49DF-8937-200B1CC08F8A}.XPI [2011-10-10 12:55:59 | 000,248,460 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\MIESZKO\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\JN77RW2A.DEFAULT\EXTENSIONS\{46551EC9-40F0-4E47-8E18-8E5CF550CFB8}.XPI [2011-08-18 11:36:37 | 000,206,933 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\MIESZKO\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\JN77RW2A.DEFAULT\EXTENSIONS\{53A03D43-5363-4669-8190-99061B2DEBA5}.XPI [2011-10-25 08:54:23 | 000,514,523 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\MIESZKO\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\JN77RW2A.DEFAULT\EXTENSIONS\{73A6FE31-595D-460B-A920-FCC0F8843232}.XPI File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\MIESZKO\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\JN77RW2A.DEFAULT\EXTENSIONS\{87D5D709-40F2-48A7-8F47-7BB821AF70AB} [2011-10-11 11:52:15 | 000,857,204 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\MIESZKO\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\JN77RW2A.DEFAULT\EXTENSIONS\{A7C6CF7F-112C-4500-A7EA-39801A327E5F}.XPI [2011-09-28 12:30:58 | 000,627,675 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\MIESZKO\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\JN77RW2A.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI [2011-05-11 18:54:53 | 000,565,069 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\MIESZKO\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\JN77RW2A.DEFAULT\EXTENSIONS\{DC572301-7619-498C-A57D-39143191B318}.XPI [2011-06-24 20:30:00 | 000,010,043 | ---- | M] () (No name found) -- C:\DOCUMENTS AND SETTINGS\MIESZKO\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\JN77RW2A.DEFAULT\EXTENSIONS\IPLEXTOALL@ALLPLAYER.ORG.XPI File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\MIESZKO\DANE APLIKACJI\MOZILLA\FIREFOX\PROFILES\JN77RW2A.DEFAULT\EXTENSIONS\TOOLBAR@ASK.COM [2010-12-05 22:42:01 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [2012-04-26 11:28:38 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2011-10-03 05:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011-10-03 23:20:40 | 000,002,767 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\allegro-pl.xml [2011-10-03 23:20:40 | 000,001,406 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fbc-pl.xml [2011-10-03 23:20:40 | 000,000,917 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\merlin-pl.xml [2011-10-03 23:20:40 | 000,000,858 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\pwn-pl.xml [2011-10-03 23:20:40 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-pl.xml [2011-10-03 23:20:40 | 000,001,683 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wp-pl.xml O1 HOSTS File: ([2012-06-01 12:20:13 | 000,000,828 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 127.0.0.1 activate.adobe.com O1 - Hosts: 206.125.164.221 www.sex.com O1 - Hosts: 206.125.164.221 sex.com O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (IplexToALLPlayer) - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\Program Files\ALLPlayer\Iplex\IplexToALLPlayer.dll (ALLCinema Ltd.) O3 - HKLM\..\Toolbar: (CaptureSaver) - {5148AB7D-8868-4490-B6DA-F98368488582} - C:\Program Files\CaptureSaver\CaptureSaverIE.dll (www.capturesaver.com) O4 - HKU\S-1-5-21-1275210071-2049760794-1547161642-1003..\Run: [PC Suite Tray] C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia) O4 - Startup: C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\Monitor Apache Servers.lnk = C:\Apache\bin\ApacheMonitor.exe (Apache Software Foundation) O4 - Startup: C:\Documents and Settings\Paweł\Menu Start\Programy\Autostart\OpenOffice.ux.pl 3.3.lnk = C:\Program Files\OpenOffice.ux.pl 3\program\quickstart.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWelcomeScreen = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 91 00 00 00 [binary data] O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 91 00 00 00 [binary data] O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1275210071-2049760794-1547161642-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1275210071-2049760794-1547161642-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0 O7 - HKU\S-1-5-21-1275210071-2049760794-1547161642-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogoff = 0 O8 - Extra context menu item: Add to CaptureSaver - C:\Program Files\CaptureSaver\\AddFromIE.htm () O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O9 - Extra Button: CaptureSaver - {3BD9DD3E-F9B6-45b9-9ED3-5E1980C2686F} - C:\Program Files\CaptureSaver\CaptureSaverIE.dll (www.capturesaver.com) O9 - Extra 'Tools' menuitem : CaptureSaver - {3BD9DD3E-F9B6-45b9-9ED3-5E1980C2686F} - Reg Error: Value error. File not found O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9C3E7051-5A64-444B-B1AF-9EBB023081EA}: DhcpNameServer = 10.0.0.1 O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Program Files\Soluto\soluto.exe /userinit) - C:\Program Files\Soluto\soluto.exe (Soluto) O24 - Desktop Components:0 (Moja bieżąca strona główna) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\Mieszko\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\Mieszko\Ustawienia lokalne\Dane aplikacji\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010-12-05 21:54:12 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2011-04-23 23:49:45 | 000,023,315 | ---- | M] () - C:\AutoMapaSetupLog.txt -- [ NTFS ] O32 - AutoRun File - [2012-06-05 21:22:38 | 000,000,135 | RHS- | M] () - D:\autorun.inf -- [ FAT ] O32 - AutoRun File - [2009-11-20 01:15:03 | 000,000,000 | ---D | M] - F:\AutoScreenRecorder -- [ NTFS ] O32 - AutoRun File - [2010-06-22 13:47:21 | 000,000,000 | ---D | M] - G:\AutoSHSH -- [ NTFS ] O32 - AutoRun File - [2011-12-22 02:31:50 | 000,518,827 | ---- | M] (SkaWit - Witold Skałka ) - L:\auto_wylaczni_sys-setup.exe -- [ NTFS ] O32 - AutoRun File - [2008-09-26 22:23:40 | 000,000,000 | ---D | M] - M:\Autostart Kreator -- [ NTFS ] O33 - MountPoints2\{8a3fb425-1934-11e1-8d0f-00508d4fd063}\Shell - "" = AutoRun O33 - MountPoints2\{8a3fb425-1934-11e1-8d0f-00508d4fd063}\Shell\AutoRun\command - "" = D:\NokiaPCIA_Autorun.exe O33 - MountPoints2\{aead2a8f-47d0-11e0-8a91-00508d4fd063}\Shell - "" = Autorun O33 - MountPoints2\{aead2a8f-47d0-11e0-8a91-00508d4fd063}\Shell\AutoRun\command - "" = S:\Install_Nokia_Ovi_Suite.exe O33 - MountPoints2\{e9c8dfc3-0aa1-11e1-8cdd-00508d4fd063}\Shell - "" = AutoRun O33 - MountPoints2\{e9c8dfc3-0aa1-11e1-8cdd-00508d4fd063}\Shell\AutoRun\command - "" = D:\Launcher.exe O33 - MountPoints2\{e9c8dfc6-0aa1-11e1-8cdd-00508d4fd063}\Shell - "" = AutoRun O33 - MountPoints2\{e9c8dfc6-0aa1-11e1-8cdd-00508d4fd063}\Shell\AutoRun\command - "" = D:\Launcher.exe O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2012-06-05 23:05:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\ImageShack Uploader [2012-06-05 23:05:10 | 000,000,000 | ---D | C] -- C:\Program Files\ImageShack Uploader [2012-05-28 12:37:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Master [2012-05-27 08:47:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mieszko\Ustawienia lokalne\Dane aplikacji\Nik Software [2012-05-27 08:47:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\Nik Software [2012-05-21 13:22:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mieszko\ChromePortable [2012-05-20 23:10:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mieszko\Ustawienia lokalne\Dane aplikacji\M-Photo_Ltd [2012-05-20 22:53:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dane aplikacji\M-Photo [2012-05-20 22:53:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Sonar Sp. z o.o [2012-05-20 22:52:56 | 000,000,000 | ---D | C] -- C:\Program Files\Fotoalbumy24 [2012-05-16 22:24:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mieszko\Moje dokumenty\Podstawowa-Konfiguracja-Serwera [2012-05-13 21:08:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mieszko\Moje dokumenty\kupony citeam [2012-05-11 10:50:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\Nokia PC Suite [2012-05-11 10:50:44 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PCSuite [2012-05-11 10:50:42 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Nokia [2012-05-11 10:50:33 | 000,136,704 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\nmwcdnsu.sys [2012-05-11 10:50:33 | 000,008,320 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\nmwcdnsuc.sys [2012-05-11 10:50:32 | 000,007,808 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\usbser_lowerfltj.sys [2012-05-11 10:50:32 | 000,007,808 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\usbser_lowerflt.sys [2012-05-11 10:50:31 | 000,022,016 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmbo.sys [2012-05-11 10:50:30 | 001,112,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfcoinstaller01007.dll [2012-05-11 10:50:30 | 000,017,664 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmb.sys [2012-05-11 10:50:14 | 000,000,000 | ---D | C] -- C:\Program Files\Nokia [2012-05-10 08:54:48 | 000,018,816 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\pccsmcfd.sys [2012-05-10 08:54:37 | 000,000,000 | ---D | C] -- C:\Program Files\PC Connectivity Solution [2012-05-09 17:05:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mieszko\Moje dokumenty\Nero Home [2012-05-08 20:00:40 | 000,000,000 | ---D | C] -- C:\Program Files\hpmonitor [2012-05-08 20:00:26 | 000,017,280 | ---- | C] (Systweak Inc., (www.systweak.com)) -- C:\WINDOWS\System32\roboot.exe [2012-05-08 20:00:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programy\RegClean Pro [2012-05-08 20:00:23 | 000,000,000 | ---D | C] -- C:\Program Files\RegClean Pro [2012-05-08 20:00:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mieszko\Dane aplikacji\systweak [2012-05-08 19:58:16 | 000,000,000 | ---D | C] -- C:\Program Files\ViStart [2011-11-25 10:44:37 | 001,105,880 | ---- | C] (DownVision ) -- C:\Documents and Settings\Mieszko\Ustawienia lokalne\Dane aplikacji\setup.exe [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2012-06-06 20:14:05 | 000,000,992 | ---- | M] () -- C:\Documents and Settings\Mieszko\Menu Start\Programy\Autostart\Dropbox.lnk [2012-06-06 20:09:34 | 000,004,439 | ---- | M] () -- C:\WINDOWS\wincmd.ini [2012-06-06 20:08:39 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012-06-06 20:07:20 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012-06-06 20:07:13 | 000,000,016 | ---- | M] () -- C:\WINDOWS\System32\magicpvt.dat [2012-06-06 20:06:52 | 000,000,032 | ---- | M] () -- C:\WINDOWS\System32\driver.dat [2012-06-06 14:40:21 | 000,000,148 | ---- | M] () -- C:\Documents and Settings\Mieszko\Video.lnk [2012-06-06 14:40:21 | 000,000,148 | ---- | M] () -- C:\Documents and Settings\Mieszko\Pictures.lnk [2012-06-06 14:40:21 | 000,000,148 | ---- | M] () -- C:\Documents and Settings\Mieszko\Passwords.lnk [2012-06-06 14:40:21 | 000,000,148 | ---- | M] () -- C:\Documents and Settings\Mieszko\New Folder.lnk [2012-06-06 14:40:21 | 000,000,148 | ---- | M] () -- C:\Documents and Settings\Mieszko\Music.lnk [2012-06-06 14:40:21 | 000,000,148 | ---- | M] () -- C:\Documents and Settings\Mieszko\Documents.lnk [2012-06-06 14:29:15 | 000,000,930 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job [2012-06-06 14:04:21 | 000,000,104 | ---- | M] () -- C:\Documents and Settings\Mieszko\default.pls [2012-06-06 13:46:56 | 000,057,344 | RHS- | M] () -- C:\Documents and Settings\Mieszko\golen.exe [2012-06-06 13:40:51 | 000,028,945 | ---- | M] () -- C:\Documents and Settings\Mieszko\.recently-used.xbel [2012-06-05 23:05:11 | 000,001,822 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\ImageShack Uploader.lnk [2012-06-05 21:57:00 | 000,000,986 | ---- | M] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-1275210071-2049760794-1547161642-1003Core.job [2012-06-05 21:08:54 | 002,029,951 | -H-- | M] () -- C:\treeinfo.wc [2012-06-05 15:01:00 | 000,000,266 | ---- | M] () -- C:\WINDOWS\tasks\RegClean Pro_DEFAULT.job [2012-06-03 11:49:00 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2012-06-01 13:44:39 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01007.Wdf [2012-05-30 20:52:02 | 000,000,020 | -H-- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\PKP_DLes.DAT [2012-05-30 20:50:32 | 000,000,020 | -H-- | M] () -- C:\Documents and Settings\All Users\Dane aplikacji\PKP_DLet.DAT [2012-05-28 20:04:49 | 000,015,955 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\iPrezenty.odt [2012-05-28 06:48:47 | 000,000,242 | ---- | M] () -- C:\WINDOWS\AWS.ini [2012-05-27 12:17:42 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\TempWmicBatchFile.bat [2012-05-26 21:28:27 | 000,000,578 | ---- | M] () -- C:\WINDOWS\M3JPEG.INI [2012-05-25 15:48:20 | 000,009,050 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\60d 550d.ods [2012-05-25 15:03:05 | 000,016,319 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\zast. canon 50D.odt [2012-05-25 14:41:10 | 000,021,609 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Produkty w ringu c1000d_vs_c550d.odt [2012-05-23 20:30:00 | 000,000,274 | ---- | M] () -- C:\WINDOWS\tasks\RegClean Pro_UPDATES.job [2012-05-23 12:36:09 | 000,018,597 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Instrukcja do Neat Image.odt [2012-05-21 21:49:53 | 000,024,536 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Naturalny kolagen w zelu.odt [2012-05-21 08:41:12 | 000,013,892 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\bajki misiomat franciszek.odt [2012-05-20 22:53:10 | 000,001,747 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Fotoalbumy 24.lnk [2012-05-20 22:52:56 | 007,501,990 | ---- | M] () -- C:\WINDOWS\System32\Sonar Sp. z o.o._Fotoalbumy 24_uninstaller.exe [2012-05-18 21:03:33 | 000,111,616 | ---- | M] () -- C:\Documents and Settings\Mieszko\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012-05-17 15:59:58 | 000,052,917 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\na kanapkę Ortona.odt [2012-05-17 10:55:02 | 000,019,549 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\foto komunia 3.odt [2012-05-15 16:05:02 | 000,013,682 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Absolutorium 2012.odt [2012-05-14 16:33:29 | 000,020,593 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\foto komunia.odt [2012-05-12 23:55:50 | 000,057,344 | RHS- | M] () -- C:\Documents and Settings\Mieszko\golen.scr [2012-05-12 22:26:54 | 000,020,796 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\fotografowanie - 1 komunia sw.odt [2012-05-11 10:50:45 | 000,001,763 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\Nokia PC Suite.lnk [2012-05-11 08:37:39 | 000,024,277 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Bez tytułu 1.odt [2012-05-10 22:00:11 | 000,023,050 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\zycel - dyski sieciowe nat.odt [2012-05-10 21:34:36 | 000,022,593 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Zyxel NSA310 -3.odt [2012-05-10 21:17:42 | 000,020,660 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Zyxel NSA320.odt [2012-05-10 21:14:30 | 000,018,565 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Zyxel NSA221.odt [2012-05-10 21:07:39 | 000,023,337 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Zyxel NSA310 -2.odt [2012-05-10 21:02:33 | 000,029,857 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Zyxel NSA310.odt [2012-05-10 10:48:21 | 000,015,999 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\problem nokia pc suite.odt [2012-05-10 00:02:58 | 000,011,759 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Męska koszulka polo Tommy Hilfiger.odt [2012-05-08 23:15:58 | 000,000,210 | RHS- | M] () -- C:\boot.ini [2012-05-08 20:24:08 | 008,841,379 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\SwiatWTwoimObiektywie-PSyrjus.pdf [2012-05-08 20:00:25 | 000,000,725 | ---- | M] () -- C:\Documents and Settings\All Users\Pulpit\RegClean Pro.lnk [2012-05-07 20:30:16 | 000,020,994 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Rehabilitacja zawodowa osób niepełnosprawnych 1.odt [2012-05-07 20:25:21 | 000,021,463 | ---- | M] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Rehabilitacja zawodowa osób niepełnosprawnych.odt [color=#E56717]========== Files Created - No Company Name ==========[/color] [2012-06-06 20:14:05 | 000,000,992 | ---- | C] () -- C:\Documents and Settings\Mieszko\Menu Start\Programy\Autostart\Dropbox.lnk [2012-06-06 13:46:56 | 000,057,344 | RHS- | C] () -- C:\Documents and Settings\Mieszko\golen.exe [2012-06-06 13:40:51 | 000,028,945 | ---- | C] () -- C:\Documents and Settings\Mieszko\.recently-used.xbel [2012-06-05 23:05:11 | 000,001,822 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\ImageShack Uploader.lnk [2012-06-03 13:01:41 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\Mieszko\Video.lnk [2012-06-03 13:01:41 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\Mieszko\Pictures.lnk [2012-06-03 13:01:41 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\Mieszko\Passwords.lnk [2012-06-03 13:01:41 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\Mieszko\Music.lnk [2012-06-03 13:01:41 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\Mieszko\Documents.lnk [2012-06-01 13:44:39 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01007.Wdf [2012-05-28 20:04:48 | 000,015,955 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\iPrezenty.odt [2012-05-28 15:41:34 | 000,004,112 | ---- | C] () -- C:\Documents and Settings\LocalService\Ustawienia lokalne\Dane aplikacji\FontCache3.0.0.0.dat [2012-05-27 10:42:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\TempWmicBatchFile.bat [2012-05-25 15:48:19 | 000,009,050 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\60d 550d.ods [2012-05-25 15:03:05 | 000,016,319 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\zast. canon 50D.odt [2012-05-25 14:41:09 | 000,021,609 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Produkty w ringu c1000d_vs_c550d.odt [2012-05-23 12:36:08 | 000,018,597 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Instrukcja do Neat Image.odt [2012-05-21 21:49:28 | 000,024,536 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Naturalny kolagen w zelu.odt [2012-05-21 08:41:11 | 000,013,892 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\bajki misiomat franciszek.odt [2012-05-20 22:53:10 | 000,001,747 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Fotoalbumy 24.lnk [2012-05-20 22:52:56 | 007,501,990 | ---- | C] () -- C:\WINDOWS\System32\Sonar Sp. z o.o._Fotoalbumy 24_uninstaller.exe [2012-05-17 15:59:58 | 000,052,917 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\na kanapkę Ortona.odt [2012-05-17 10:55:00 | 000,019,549 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\foto komunia 3.odt [2012-05-15 14:47:02 | 000,013,682 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Absolutorium 2012.odt [2012-05-14 16:33:27 | 000,020,593 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\foto komunia.odt [2012-05-13 23:56:44 | 000,000,148 | ---- | C] () -- C:\Documents and Settings\Mieszko\New Folder.lnk [2012-05-12 23:55:49 | 000,057,344 | RHS- | C] () -- C:\Documents and Settings\Mieszko\golen.scr [2012-05-12 22:22:09 | 000,020,796 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\fotografowanie - 1 komunia sw.odt [2012-05-11 10:50:45 | 000,001,763 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\Nokia PC Suite.lnk [2012-05-11 08:37:38 | 000,024,277 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Bez tytułu 1.odt [2012-05-10 22:00:10 | 000,023,050 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\zycel - dyski sieciowe nat.odt [2012-05-10 21:34:35 | 000,022,593 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Zyxel NSA310 -3.odt [2012-05-10 21:17:41 | 000,020,660 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Zyxel NSA320.odt [2012-05-10 21:14:29 | 000,018,565 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Zyxel NSA221.odt [2012-05-10 21:07:39 | 000,023,337 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Zyxel NSA310 -2.odt [2012-05-10 21:02:32 | 000,029,857 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Zyxel NSA310.odt [2012-05-10 10:48:20 | 000,015,999 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\problem nokia pc suite.odt [2012-05-10 00:02:58 | 000,011,759 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Męska koszulka polo Tommy Hilfiger.odt [2012-05-08 20:30:49 | 000,000,266 | ---- | C] () -- C:\WINDOWS\tasks\RegClean Pro_DEFAULT.job [2012-05-08 20:30:48 | 000,000,274 | ---- | C] () -- C:\WINDOWS\tasks\RegClean Pro_UPDATES.job [2012-05-08 20:22:14 | 008,841,379 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\SwiatWTwoimObiektywie-PSyrjus.pdf [2012-05-08 20:00:25 | 000,000,725 | ---- | C] () -- C:\Documents and Settings\All Users\Pulpit\RegClean Pro.lnk [2012-05-07 20:30:16 | 000,020,994 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Rehabilitacja zawodowa osób niepełnosprawnych 1.odt [2012-05-07 20:25:21 | 000,021,463 | ---- | C] () -- C:\Documents and Settings\Mieszko\Moje dokumenty\Rehabilitacja zawodowa osób niepełnosprawnych.odt [2012-05-04 01:02:49 | 000,000,277 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini [2012-03-14 16:17:44 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ViewNX2.INI [2012-03-14 00:25:40 | 000,000,268 | RH-- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\Static Library [2012-03-14 00:25:40 | 000,000,268 | RH-- | C] () -- C:\Documents and Settings\Mieszko\Dane aplikacji\Sports [2012-03-14 00:25:39 | 000,000,020 | -H-- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\PKP_DLes.DAT [2012-03-14 00:24:55 | 000,000,268 | RH-- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\StatusSheet [2012-03-14 00:24:55 | 000,000,268 | RH-- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\StartupItems [2012-03-14 00:24:55 | 000,000,268 | RH-- | C] () -- C:\Documents and Settings\Mieszko\Dane aplikacji\Standard [2012-03-14 00:24:55 | 000,000,268 | RH-- | C] () -- C:\Documents and Settings\Mieszko\Dane aplikacji\Speech Enhancer [2012-03-14 00:24:55 | 000,000,020 | -H-- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\PKP_DLev.DAT [2012-03-14 00:24:55 | 000,000,020 | -H-- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\PKP_DLet.DAT [2012-01-31 13:01:24 | 000,012,012 | ---- | C] () -- C:\WINDOWS\System32\ftpctrs.ini [2012-01-31 13:01:22 | 000,058,750 | ---- | C] () -- C:\WINDOWS\System32\w3ctrs.ini [2012-01-31 13:01:22 | 000,014,972 | ---- | C] () -- C:\WINDOWS\System32\axperf.ini [2012-01-31 13:01:20 | 000,018,031 | ---- | C] () -- C:\WINDOWS\System32\infoctrs.ini [2011-12-22 06:34:21 | 000,000,242 | ---- | C] () -- C:\WINDOWS\AWS.ini [2011-12-12 22:05:04 | 000,303,104 | ---- | C] () -- C:\WINDOWS\Uninstall_tkexe.exe [2011-11-25 10:44:40 | 000,004,193 | ---- | C] () -- C:\Documents and Settings\Mieszko\Ustawienia lokalne\Dane aplikacji\nokia-6300-simlock.torrent [2011-11-25 10:44:18 | 000,042,684 | ---- | C] () -- C:\Documents and Settings\Mieszko\Ustawienia lokalne\Dane aplikacji\promo.exe [2011-10-28 01:36:12 | 000,000,167 | ---- | C] () -- C:\WINDOWS\usdthank.ini [2011-10-28 01:36:12 | 000,000,031 | ---- | C] () -- C:\WINDOWS\idc.ini [2011-09-08 12:10:52 | 000,000,552 | ---- | C] () -- C:\WINDOWS\System32\d3d8caps.dat [2011-06-13 23:11:53 | 000,000,600 | ---- | C] () -- C:\Documents and Settings\Mieszko\Dane aplikacji\winscp.rnd [2011-06-12 13:10:23 | 000,000,193 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\Microsoft.SqlServer.Compact.351.32.bc [2011-06-10 13:50:01 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll [2011-06-10 13:50:01 | 000,036,640 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys [2011-06-10 12:48:42 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Dane aplikacji\LauncherAccess.dt [2011-06-10 12:47:29 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2011-06-07 11:13:38 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\cis-2.4.dll [2011-06-07 11:13:38 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\issacapi_bs-2.3.dll [2011-06-07 11:13:38 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\issacapi_pe-2.3.dll [2011-06-07 11:13:38 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\issacapi_se-2.3.dll [2011-06-02 01:04:27 | 000,000,014 | ---- | C] () -- C:\WINDOWS\System32\systemconfig.dll [2011-05-20 23:56:45 | 002,340,992 | ---- | C] () -- C:\WINDOWS\System32\BootMan.exe [2011-05-20 23:56:45 | 000,018,048 | ---- | C] () -- C:\WINDOWS\System32\EuEpmGdi.dll [2011-05-20 23:56:44 | 000,086,408 | ---- | C] () -- C:\WINDOWS\System32\setupempdrv03.exe [2011-05-20 23:56:44 | 000,013,192 | ---- | C] () -- C:\WINDOWS\System32\epmntdrv.sys [2011-05-20 23:56:44 | 000,008,456 | ---- | C] () -- C:\WINDOWS\System32\EuGdiDrv.sys [2011-05-18 05:33:24 | 000,000,043 | ---- | C] () -- C:\WINDOWS\gswin32.ini [2011-05-18 05:25:39 | 000,488,448 | ---- | C] () -- C:\WINDOWS\System32\apdfprintmon.dll [2011-05-05 08:22:31 | 000,035,720 | ---- | C] () -- C:\WINDOWS\System32\drivers\EUBKMON.sys [2011-04-29 14:22:48 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Route.INI [2011-04-24 11:06:40 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2011-04-24 10:17:44 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\libFLAC.dll [2011-04-23 23:50:11 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\Mieszko\Dane aplikacji\$_hpcst$.hpc [2011-04-21 15:56:11 | 000,000,032 | ---- | C] () -- C:\WINDOWS\System32\driver.dat [2011-04-21 15:56:01 | 000,000,016 | ---- | C] () -- C:\WINDOWS\System32\magicpvt.dat [2011-04-20 00:50:09 | 002,076,672 | ---- | C] () -- C:\WINDOWS\System32\libmysql.dll [2011-04-18 09:24:20 | 000,046,613 | ---- | C] () -- C:\WINDOWS\php.ini [2011-04-13 08:24:12 | 000,000,008 | ---- | C] () -- C:\Program Files\SysResources Managersys111.dat [2011-04-13 08:23:38 | 000,015,620 | ---- | C] () -- C:\WINDOWS\System32\SystemRs11.sm.SYS [2011-04-05 18:10:28 | 000,000,007 | ---- | C] () -- C:\WINDOWS\sysres10.dat [2011-03-25 15:07:02 | 000,000,578 | ---- | C] () -- C:\WINDOWS\M3JPEG.INI [2011-03-23 12:32:49 | 000,294,912 | R--- | C] () -- C:\WINDOWS\System32\liplW7.dll [2011-03-23 12:32:48 | 000,290,816 | R--- | C] () -- C:\WINDOWS\System32\liplA6.dll [2011-03-23 12:32:48 | 000,278,528 | R--- | C] () -- C:\WINDOWS\System32\liplPX.dll [2011-03-23 12:32:48 | 000,278,528 | R--- | C] () -- C:\WINDOWS\System32\liplP6.dll [2011-03-23 12:32:48 | 000,278,528 | R--- | C] () -- C:\WINDOWS\System32\liplM6.dll [2011-03-23 12:32:48 | 000,020,480 | R--- | C] () -- C:\WINDOWS\System32\lipl.dll [2011-03-23 12:32:12 | 000,010,628 | R--- | C] () -- C:\WINDOWS\System32\lvcoinst.ini [2011-01-12 12:15:30 | 000,088,064 | ---- | C] () -- C:\WINDOWS\System32\Bmp2Jpeg.dll [2011-01-05 10:18:38 | 000,810,496 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2011-01-04 13:49:19 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2010-12-23 20:56:18 | 000,000,032 | ---- | C] () -- C:\WINDOWS\Clony2.ini [2010-12-22 23:15:10 | 000,000,121 | ---- | C] () -- C:\WINDOWS\ZC DVD Creator Platinum.INI [2010-12-21 16:32:25 | 000,207,360 | ---- | C] () -- C:\WINDOWS\System32\evrprop.dll [2010-12-21 16:32:05 | 000,080,384 | ---- | C] () -- C:\WINDOWS\System32\mkzlib.dll [2010-12-21 16:32:01 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\mkunicode.dll [2010-12-12 18:29:47 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2010-12-11 21:01:10 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2010-12-08 13:55:38 | 000,001,003 | ---- | C] () -- C:\WINDOWS\unins000.dat [2010-12-08 13:25:43 | 000,040,960 | ---- | C] () -- C:\Program Files\Uninstall_CDS.exe [2010-12-08 13:03:47 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\OdiOlDVR.dll [2010-12-08 13:03:47 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\OdiAPI.dll [2010-12-06 12:16:09 | 000,039,512 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat [2010-12-06 01:03:37 | 000,004,439 | ---- | C] () -- C:\WINDOWS\wincmd.ini [2010-12-06 00:23:32 | 000,111,616 | ---- | C] () -- C:\Documents and Settings\Mieszko\Ustawienia lokalne\Dane aplikacji\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010-12-05 22:40:45 | 000,004,293 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2010-12-05 22:39:34 | 000,222,432 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010-12-05 22:35:24 | 000,397,312 | R--- | C] () -- C:\WINDOWS\System32\zshp1020.exe [2010-12-05 22:35:24 | 000,106,496 | R--- | C] () -- C:\WINDOWS\System32\vshp1020.dll [2010-12-05 22:32:50 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2010-12-05 22:08:55 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\ati2sgag.exe [2010-12-05 22:05:10 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini [2010-12-05 21:56:31 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2010-12-05 21:50:59 | 000,021,856 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2010-10-04 00:16:26 | 000,302,592 | ---- | C] () -- C:\WINDOWS\System32\HDREfexProFC32.dll [2010-09-02 09:33:54 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\bdmjpeg.dll [2010-09-02 09:32:52 | 000,058,368 | ---- | C] () -- C:\WINDOWS\System32\bdmpegv.dll [2010-07-16 02:45:44 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll [color=#E56717]========== LOP Check ==========[/color] [2011-05-18 05:25:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\A-PDF [2010-12-18 09:59:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Aiseesoft DVD Ripper [2010-12-05 23:24:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Alwil Software [2011-06-02 01:04:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\BlazeVideo [2012-03-24 22:53:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\boost_interprocess [2011-06-30 23:05:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Caphyon [2012-03-14 00:25:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\EnterNHelp [2011-05-26 02:25:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\explauncher [2011-05-18 05:25:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\flipBook [2011-05-18 05:34:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\flippagemaker [2010-12-05 23:41:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Gadu-Gadu 10 [2012-03-14 00:24:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\grep [2012-05-11 10:49:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Installations [2011-05-27 00:32:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\IObit [2011-05-26 02:25:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\launcher [2010-12-24 13:05:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\LightScribe [2012-05-20 22:53:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\M-Photo [2011-03-29 18:34:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\MySQL [2012-05-27 08:47:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nik Software [2012-03-14 07:35:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nikon [2011-11-27 22:23:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Nokia [2011-08-12 11:12:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\NokiaInstallerCache [2011-05-28 00:45:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ocster Backup [2011-07-07 10:09:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PC Suite [2011-04-28 08:48:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PearlMountainSoft [2012-01-10 11:29:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PhotoCollageMax [2012-03-10 17:51:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\PhotoME [2011-03-22 09:31:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\RoboTask [2012-01-31 13:08:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Samsung [2011-08-26 20:59:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SeriousBit [2011-01-12 14:29:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SharkTime Software [2012-04-02 13:56:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Soluto [2011-05-24 23:43:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\SXR Software [2011-05-28 00:48:56 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\sysnfxo [2012-05-17 21:40:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\TEMP [2012-03-14 00:25:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Ultima_T15 [2012-03-14 00:24:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Vocal Transformer [2012-03-14 00:25:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\Workflows [2011-05-18 05:35:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\wtfb [2010-12-06 00:54:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dane aplikacji\{429CAD59-35B1-4DBC-BB6D-1DB246563521} [2011-04-27 01:57:20 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\.# [2011-03-15 08:53:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\4Media [2011-06-04 08:20:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Abelssoft [2011-05-09 07:18:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\AnyPic Image Resizer Pro [2011-05-11 08:28:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\BANDISOFT [2011-04-23 11:04:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\becker [2011-04-24 11:04:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\BESTplayer [2012-05-04 11:34:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Canon [2011-05-21 08:17:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\CaptureSaver [2010-12-11 16:46:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\ChomikBox [2012-03-28 06:37:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Cream Software [2011-05-20 23:26:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Dextronet [2012-06-06 20:14:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Dropbox [2011-03-06 10:16:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\DVDVideoSoft [2011-04-19 07:58:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Easy Watermark Studio [2011-02-17 09:17:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\EDesksoft [2012-01-22 13:44:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\EurekaLog [2012-05-28 06:53:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\FileZilla [2012-05-29 08:36:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\foobar2000 [2010-12-06 01:15:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Foxit [2010-12-06 01:15:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Foxit Software [2011-11-26 15:37:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\FreeAudioPack [2011-06-24 09:35:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Gadu-Gadu 10 [2011-07-18 23:13:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Garbage Finder [2011-10-07 14:35:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\GrabIt [2012-06-05 22:26:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\gtk-2.0 [2011-09-25 14:16:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\HDRsoft [2010-12-08 14:37:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\ImgBurn [2011-02-18 12:21:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\iSpring Solutions [2012-05-28 12:37:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Master [2012-05-27 12:20:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Nik Software [2012-04-12 15:35:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Nikon [2011-08-24 17:07:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Nokia [2011-02-06 10:50:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Notepad++ [2010-12-06 00:18:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\OpenOffice.ux.pl [2012-01-05 14:09:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\PC Suite [2011-04-28 08:48:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\PearlMountainSoft [2012-01-10 11:29:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\PhotoCollageMax [2011-12-06 00:21:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\PhotoScape [2012-04-04 20:15:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Presentation Assistant [2012-04-04 20:04:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Presentation Marker [2011-06-15 17:04:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Programer [2011-09-02 13:29:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Samsung [2011-06-07 00:45:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\SensiGuard [2011-12-14 21:56:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Soft-R Research [2011-02-17 12:01:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Software Informer [2011-12-23 00:51:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Soluto [2012-05-08 20:00:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\systweak [2012-02-23 18:16:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\TagJet [2012-04-24 07:59:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\TeamViewer [2012-01-10 11:37:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Thinstall [2011-07-14 13:56:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Two Pilots [2012-01-23 13:10:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\uTorrent [2011-01-19 18:28:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\Winter Sports 2011 [2012-03-26 22:26:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Mieszko\Dane aplikacji\XnView [2012-04-27 09:34:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paweł\Dane aplikacji\Foxit Software [2011-11-22 12:38:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paweł\Dane aplikacji\OpenOffice.ux.pl [2010-12-17 21:34:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Paweł\Dane aplikacji\PC Suite [2012-06-05 21:57:00 | 000,000,986 | ---- | M] () -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1275210071-2049760794-1547161642-1003Core.job [2012-06-05 15:01:00 | 000,000,266 | ---- | M] () -- C:\WINDOWS\Tasks\RegClean Pro_DEFAULT.job [2012-05-23 20:30:00 | 000,000,274 | ---- | M] () -- C:\WINDOWS\Tasks\RegClean Pro_UPDATES.job [2010-12-10 00:20:00 | 000,000,264 | ---- | M] () -- C:\WINDOWS\Tasks\shutdown.job [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 156 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:0749CBBA @Alternate Data Stream - 143 bytes -> C:\Documents and Settings\All Users\Dane aplikacji\TEMP:EEDA5B17 < End of report >